Group policies can be a complex topic, requiring a lot of TLC in production.
My example is a bad one. But I want it quick for a homelab group policy setup, and if it’s dirty, I don’t mind.
Homelab Group Policy Setup
I’m working with the Default Domain policy, but you would create a new policy object for each setting in production.
Let’s start. Search for “group”:
Open the forest, the domain, and the folder for the object, and you’ll see two objects already inside.
Right-click the Default Domain Policy to edit it:
The first setting I’m changing is the password policy.
This is the original setting in Computer/Policies/Windows/Security/Account/Password:
I’m right-clicking the first value and unchecking it:
That’s what it looks like now:
Next is Computer/Policies/Windows/Security/Local/Security Options and enable User Account Control: Run all administrators in Admin Approval Mode
At Computer/Policies/Windows/Security/Windows Defender Firewall, disable to domain profile (again, we’re not in production)
At the same place, we could adjust the max file size and the retention period of the event log.
As I use professional IT management tools from my employer, I could reduce the retention to one day, but it’s too much work right now.
Let’s change to Computer/Policies/Administrative Templates/Windows Components/Microsoft Defender Antivirus/Real-time Protection and disable real-time:
Scroll all down to Windows Update to adjust a few settings.
Enable “Turn on recommended updates” and “Configure Automatic Updates,” and apply a few changes at “Specify Intranet Microsoft…”:
Use the address of your DC, but keep the port.
That’s it, quick enough, I think.
More homelab posts:
Earlier I wrote about setting up an OPNsense firewall. As I’m using Google Domains, I…
Ich weiß nicht, wie viele physische und virtuelle Firewalls ich in meinem Homelab in den…
Are you ready to continue our first steps in the SolarWinds Hybrid Cloud Observability platform? …
Change is a process, or so they say.That applies to a homelab.Two weeks ago, I…
I deployed SolarWinds Hybrid Cloud Observability (HCO), and now I have started to adjust it.I…
This is a “death by screenshot” style tutorial about a SolarWinds Hybrid Cloud Observability installation.I’m…