How to disable Windows Error Reporting (WER)

1) Go to Start , Run , type 'gpedit.msc' (or launch from AD if doing for a domain)
2) Computer Configuration\Administrative Templates\System\Internet Communication Management\Internet Communication settings
3) Enable 'Turn off windows error reporting'
 

Links:
Jordan Bortz : Losing space on Drive C? Check your WER ReportQueue
Technet : Windows Error Reporting

Windows Update Settings via Group Policy

Here I show how to use Group Policy to set Windows Update settings.
This is using Windows 2008 Active Directory.

1) Create a security group for the to place computers to be updated -

2) I've chosen to create a GPO for the settings -

3) Navigate to -
Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Updates

Configure the settings as follows -

4) Configure Automatic Updates -
I've chosen to download and install every day at 20:00.

NB : If the download source is Windows Update then this would be a daft setting as it is uncontrollable.
I'm using an internal WSUS server to control updates so this setting will only apply updates at 20:00 on the day they have been authorized for the computer.

5) Specify intranet Microsoft update service location -
The address of the WSUS instance.

6) Automatic Updates detection frequency -
Fairly self explanatory, how often to check update source.

7) Allow Automatic Updates immediate installation -
Again, self explanatory - install straight after updates?

8) Enable client-side targeting -
Specify the group created in step 1.

Setting Internet Explorer Proxy settings (via Windows 2008 Group Policy)

Setting Internet Explorer Proxy settings (via Windows 2008 Group Policy)

SQL Service Account Rights

Permissions assigned for my network Service Accounts -

Update Group Policy immediately

C:\> GPUPDATE /FORCE

Run this from the command prompt on client machines to overide the default GP refresh period i.e. have Group Policy applied straight away.

Windows 2008 Firewall Rules for SQL Server (via Group Policy)

Configuring Windows 2008 Firewall for SQL Server

1) Launch Group Policy and navigate to >
Computer Configuration > Policies > Windows Settings > Security Settings > Windows Firewall with Advanced Security
2) Right Click on Inbound rules , click 'New Rule'
3) Select 'Port Rule', Click 'Next'
4) Select 'TCP' and enter specific ports ' 1433, 1434 ' (comma separated). Click 'Next'.
5) Select 'Allow the connection' Click 'Next'.
6) Use tick boxes to restrict the view via profile. (Domain/Private/Public). Click 'Next'
7) Provide a name and optionally a description for Rule. Click 'Finish'.

Repeat the above for Outbound Rule too.
You may need to open other ports too, see SQL Server Default Ports

NOTE : Remember to run GPUPDATE /FORCE on client machines to overide the default GP refresh period.

Group Policy : Allowing RDP Access

1) Add Users in Active Directory to a common group e.g ; 'RDP Access Group'

2) In group policy (start > run >gpedit.msc) navigate to >
Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment.

3) Add 'RDP Access Group' to the 'Allow log on through Terminal Services group' setting.

4) Add 'RDP Access Group' to the 'Allow log on locally' policy too.

5) Run GPUPDATE to force the policy to take effect to test.

Controlling Group Policy Update Frequency

Changing the update frequency of group policy, i.e. how quickly a policy is applied...


Path : Computer Configuration > Policies > Administrative Templates > System > Group Policy

Properties :

Group Policy refresh interval for computers
Group Policy refresh interval for domain controllers

Group policy updates can be forced instantly by typing 'gpupdate' at a command prompt / run box.

Enabling Network Map via Group Policy

How to enable the Network Map via Group Policy >


Path : Computer Configuration > Administrative Templates > Network > Link-Layer Topology Discovery

Properties :
Turn on Mapper I/O (LLTDIO driver
Turn on Responder (RSPNDR) driver

Enable these to allow machines to discover and 'be discovered' by LLTD.