This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(153.6, 64%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EZW%3C/text%3E%3C/svg%3E)
Hi,
Seeking guidance on configuration to prevent malicious group policy infecting my machines as the current missconfiguration has caused great deal of distress and is impacting my mental and financial health materially. The polciies a very restrictive and prevent the safe operation of the machine, blocking free access to support and infomration, certailing free speech and just generally attempting to ruin my life.
Was hoping someone could explain and help me configure my devices such that I can excercise a level of sovreinty and enforce my root ownership and prevent any inheritance of policy that may exist externally such that it cannot propergate to my device and continue its reign of terror.
THanks so much
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(147.20000000000002, 36%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMW%3C/text%3E%3C/svg%3E)
Hi
Thanks for the advice, I have attempted all of the above with varied success. In terms of professional support, I have struggled to find someone that can offer what I’m after. Either they want to manage the whole thing without actually explaining any thing and charging a fortune, or they are out of my budget or just lacking the appropriate experience. Ideally what I would like is phone support who I can call and talk through the issues, get advice and then I can implement what was discussed having gained the additional knowledge. However I don’t really want or need support to be actually executing the changes on my behalf as I would prefer to be across what is being done at least for now.
It’s been a little while since I last reviewed group policy and my knowledge has improved since then, so I will take another look to see if I can identify anything problematic that should be adjusted. One question on group policy, how does one identify from which ‘group’ policy imports from, and follow on from that how might you join a different group to one that perhaps aligns by default with the way in which you prefer to manage things better?
I think many of the problems were coming from dns which I’ve finally managed to take back some control over and hosting it myself. So that’s been a win.
the main area I’m trying to fix up now is Kerberos as my Mac still seems to be pretty loose in how it’s authorizing service accounts and I don’t seem personally authorized to be able to control it. I am thinking the best thing to do would be just recreate a new realm that I can actively administer and ensure that service accounts don’t end up with excessive privileges, as I think that’s what may have happened with the current setup? Do you think that’s the best way forward, the alternative is to setup windows ad again but that seems to bring more troubles than it solves so I’m thinking to just to do one bit at a time.
thanks again for your reply
you've been facing difficulties with a misconfigured group policy that is impacting your mental and financial well-being. While I can provide you with some general guidance, please note that group policy configuration can be complex, and it's always recommended to consult with a professional or IT expert for specific advice tailored to your situation. Here are some general steps you can take to mitigate the impact of group policies and ensure a level of control over your devices:
User Account Control (UAC): Enable User Account Control on your devices. UAC helps protect your computer by notifying you when changes are going to be made that require administrative permissions. It can help prevent unauthorized changes and provide an extra layer of security.
Local Administrator Account: Ensure that you have a local administrator account on your devices. This account will have full administrative privileges and will allow you to modify group policies, install software, and make system-level changes. It's important to secure this account with a strong password to prevent unauthorized access.
Audit Group Policies: Review and audit the existing group policies on your devices. Identify the policies that are causing the restrictive behavior and evaluate their impact. Determine if any policies are unnecessary or conflicting with your requirements. With administrative privileges, you can modify or disable policies as needed.
Group Policy Editor: Familiarize yourself with the Group Policy Editor (gpedit.msc) on your Windows devices. This tool allows you to view, edit, and manage group policies locally. Take caution while making changes, as incorrect modifications can lead to unintended consequences. Consider taking backups of your system or creating restore points before making any changes.
Windows Update: Ensure that your devices are regularly updated with the latest Windows updates. Updates often include bug fixes, security patches, and improvements that can address vulnerabilities and enhance system stability. Keeping your devices up to date can help mitigate the impact of known issues, including those related to group policies.
Professional Assistance: If you're unsure about modifying group policies or need assistance in resolving specific issues, consider seeking professional help. An IT expert or consultant can help you understand the existing policies, recommend necessary changes, and guide you through the configuration process to meet your requirements.
Remember to always exercise caution when modifying system settings, as incorrect changes can lead to unintended consequences. It's essential to strike a balance between security and usability to ensure the smooth operation of your devices.