Internet explorer certificates button greyed out Group Policy

To enable certificates button on Internet Explorer from GPO:

User Configuration—>Administrative template—>Windows Components—>Internet Explorer

Set “Disable changing certificate settings” to Disabled

VN:F [1.9.22_1171]
Rating: 6.0/6 (1 vote cast)

Install Alibaba Trade Manager Silent

To install Alibaba Trade Manager silent from command line / GPO / SCCM download the Alibaba Trade Manager Installer from here:

Run this command to install it silent – (NOTE: the /S is Case-Sensitive)
AliIM2014_ATM(7.02.03E).exe /S

VN:F [1.9.22_1171]
Rating: 5.0/6 (1 vote cast)

Windows 8.1 Logon Scripts Runs 5 Minutes Delayed

In Windows 8.1 Microsoft made a bigger change related to desktop performance.

By default Users logon scripts is 5 minutes delayed.

To disabled or reduce the delay between user logon and when the scripts run, find this policy in Group policy Editor

“Computer Configuration\Policies\Administrative Templates\System\Group Policy\Configure Logon Script Delay”


VN:F [1.9.22_1171]
Rating: 6.0/6 (1 vote cast)

SYSVOL share is not replicating between RODCs and Writable Controllers

Event id 2843 in Directory Service is logged

“The Knowledge Consistency Checker was unable to locate a replication connection for the read-only local directory service.  A replication connection with the following option must exist in the forest for correct FRS system behavior.


Additional Data



User Action

Restore the original replication connection for the local directory service instance on a writable directory service instance. “


1. On a writable DC, please run adsiedit.msc after logon as Enterprise administrator.
2. then in adsiedit.msc, please establish a new connection:

1). For Connection Point, please “Select a well known Naming context”: Configuration
2). for Computer, please input the Name of the writable DC.
3). then click OK to connect.
4). once connect, please expand:

CN=Configuration,DC=DC Name,DC=Domain Name,DC=com,
\CN=Site Name

\CN=NTDS Settings
5). then in the right pane, right click and open the properties of “CN=Name of Full DC”.
6). in the properties dialog, please set Filter to check on:



7). then in the list, find Options
8). edit it and set the data to: 0x41
9). Save and apply
10). switch to Security tab, click Advanced, click Add, click “object types”, select computers, click OK, input the RODC name, click Check Name, click OK.

In the Permission for RODC Name dialog box, click Properties tab, locate Read fromServer, Write fromServer, Read schedule, Write schedule and give RODC permission to this four permissions. Click OK to save.
11). monitor to check whether the new gpo can be replicated to RODC.

VN:F [1.9.22_1171]
Rating: 6.0/6 (4 votes cast)

Install Java Silent

To install Java from command line / GPO / SCCM download the Java Offline Installer from here:

start the exe file and look in this diretory:

Copy the files to your software distribution folder

Run this command to install it silent
msiexec /i “jre1.7.0_05.msi” /qn

VN:F [1.9.22_1171]
Rating: 0.0/6 (0 votes cast)

How do I disable SSV Helper in Internet Explorer with Group Policy

Create or Edit an gpo.
Go to Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Security Features -> Add-on Management.
Enable the Add-on List setting and Press the “Show..” button and then “Add…” button
Write the classid of the addon you want to disable in the “Enter the name of the addon to be added” field and write 0 in the “Value” field.

0 =disable, 1 = enable

Classid of my Java SSV Helper addon is {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} , Brackets must be included,

To find out the class id of an addon in Internet Explorer 9:
Go to Tools menu ->Manage Add-ons
Highlight the addon you want to check and press the More information link in the lower left corner. Classid along with some other information will appear in the popup.

VN:F [1.9.22_1171]
Rating: 5.5/6 (2 votes cast)