VMWare Client NAT Internet Access not working – Error: Media disconnected

Annoying problem with WMWare. If you happen to use NAT to share your host internet connection to your client image you may encounter this problem. If you open on a windows machine command prompt and type ipconfig you might get errors stating something in the line of “Media disconnected”. To fix this problem you can retore your VMWare NAT settings. Go to your VMWare tool bar => Edit => Virtual Network Editor. In the editor chose from the networks list the network with the type “NAT”, then press “Restore Default” button in lower left corner. Let VMWare do its magic. Notice that your virtual machines need to be closed.

vmware network problem

 

C# .NET Getting Windows Directory File Permissions programmatically

Hi,

 

I while back I needed to do a security trim on files in a Windows file system based on returned search results by SharePoint search. Since in SharePoint 2010 search indexing does not know how to take into consideration file system rights for searches there was a need to do a security trimming based on what privileges you have in Active Directory and what you are given to the file itself.

Since there where alot of moving parts and hard to find out which classes and function where needed to actually do this specific task I finally found a source that gave a great sample how to do this:

http://www.conarc.com/blog/2010/03/25/programmatically-getting-effective-directoryfile-permissions/

Unfortunately the source above does not exist anymore for whatever reason. So for those who might need similar functionality through code here is the sample code from the link above and what you need class wise.

In the code below what you need is to call the following static function to check for if the user has certain privileges:

FileSystemRights rights = FileSystemEffectiveRights.GetRights(username, filelocation);

Then call the following function to test against the given file system privileges and what you want to user to have in the file system.
bool canReadExecute = rights.HasRights(FileSystemRights.ReadAndExecute);

 

Classes and enumeration needed for this functionality(there are many moving parts here and you might have to work with Active Directory and File System to test this code):

FileSystemRights Enumeration

FileSystemAccessRule Class

AccessControlType Enumeration

AuthorizationRuleCollection Class

SecurityIdentifier Class

FileSystemAccessRule Class

FileInfo Class

PrincipalContext Class

UserPrincipal Class

PrincipalSearcher Class

WindowsIdentity Class

 

Sample code – http://www.conarc.com/blog/2010/03/25/programmatically-getting-effective-directoryfile-permissions/ :

public static class FileSystemRightsEx
{
public static bool HasRights(this FileSystemRights rights, FileSystemRights testRights)
{
return (rights & testRights) == testRights;
}
}

public static class FileSystemEffectiveRights
{

public static FileSystemRights GetRights(string userName, string path)
{
if (string.IsNullOrEmpty(userName))
{
throw new ArgumentException(“UserName not defined!”);
}

//if (!Directory.Exists(path) && !File.Exists(path))
//{
// throw new ArgumentException(string.Format(“path: {0}”, path));
//}

return GetEffectiveRights(userName, path);
}

private static FileSystemRights GetEffectiveRights(string userName, string path)
{
FileSystemAccessRule[] accessRules = GetAccessRulesArray(userName, path);
FileSystemRights denyRights = 0;
FileSystemRights allowRights = 0;

for (int index = 0, total = accessRules.Length; index < total; index++)
{
FileSystemAccessRule rule = accessRules[index];

if (rule.AccessControlType == AccessControlType.Deny)
{
denyRights |= rule.FileSystemRights;
}
else
{
allowRights |= rule.FileSystemRights;
}
}

return (allowRights | denyRights) ^ denyRights;
}

private static FileSystemAccessRule[] GetAccessRulesArray(string userName, string path)
{
// get all access rules for the path – this works for a directory path as well as a file path
AuthorizationRuleCollection authorizationRules = (new FileInfo(path)).GetAccessControl().GetAccessRules(true, true, typeof(SecurityIdentifier));

// get the user’s sids
string[] sids = GetSecurityIdentifierArray(userName);

// get the access rules filtered by the user’s sids
return (from rule in authorizationRules.Cast<FileSystemAccessRule>()
where sids.Contains(rule.IdentityReference.Value)
select rule).ToArray();
}

private static string[] GetSecurityIdentifierArray(string userName)
{
// connect to the domain
PrincipalContext pc = new PrincipalContext(ContextType.Domain);

// search for the domain user
UserPrincipal user = new UserPrincipal(pc) { SamAccountName = userName };
PrincipalSearcher searcher = new PrincipalSearcher { QueryFilter = user };
user = searcher.FindOne() as UserPrincipal;

if (user == null)
{
throw new ApplicationException(string.Format(“Invalid User Name: {0}”, userName));
}

// use WindowsIdentity to get the user’s groups
WindowsIdentity windowsIdentity = new WindowsIdentity(user.UserPrincipalName);
string[] sids = new string[windowsIdentity.Groups.Count + 1];

sids[0] = windowsIdentity.User.Value;

for (int index = 1, total = windowsIdentity.Groups.Count; index < total; index++)
{
sids[index] = windowsIdentity.Groups[index].Value;
}

return sids;
}
}

Good to Know: Windows Server 2012 – Part 4

Hi this is my part four of resources for Windows Server 2012(and older ones also):

Add-DnsServerDirectoryPartition http://technet.microsoft.com/en-us/library/jj649942(v=wps.620).aspx
Add-DnsServerPrimaryZone http://technet.microsoft.com/en-us/library/jj649876(v=wps.620).aspx
Adding a Reverse Lookup Zone http://technet.microsoft.com/en-us/library/cc961414.aspx
Add-PswaAuthorizationRule http://technet.microsoft.com/en-us/library/jj592890(v=wps.620).aspx
Add-VMRemoteFx3dVideoAdapter http://technet.microsoft.com/en-us/library/hh848520(v=wps.620).aspx
Authorize a DHCP server in Active Directory http://technet.microsoft.com/en-us/library/cc759688(v=ws.10).aspx
Block Inheritance http://technet.microsoft.com/en-us/library/cc731076.aspx
Configure a Server Core Server with Sconfig.cmd http://technet.microsoft.com/en-us/library/jj647766.aspx
Configure Memory and Processors http://technet.microsoft.com/en-us/library/cc742470.aspx
Delegate Control of an Organizational Unit http://technet.microsoft.com/en-us/library/cc732524.aspx
Deploy Clustered Storage Spaces http://technet.microsoft.com/en-us/library/jj822937.aspx 
Deploying a GlobalNames Zone http://technet.microsoft.com/en-us/library/cc731744.aspx
Deploying Microsoft RemoteFX on a Single Remote Desktop Virtualization Host Server Step-by-Step Guide http://technet.microsoft.com/en-us/library/ff817586(v=ws.10).aspx
Deploying Network Load Balancing (NLB) and Virtual Machines on Windows Server 2008 R2 http://blogs.msdn.com/b/clustering/archive/2010/07/01/10033544.aspx
Deployment Image Servicing and Management Command-Line Options http://technet.microsoft.com/en-us/library/dd744382(v=ws.10).aspx
Dsadd http://technet.microsoft.com/en-us/library/cc753708(v=ws.10).aspx
Enable-VMRemoteFXPhysicalVideoAdapter http://technet.microsoft.com/en-us/library/hh848506(v=wps.620).aspx
Enforce a Group Policy Object Link http://technet.microsoft.com/en-us/library/cc753909.aspx
Evaluation Versions and Upgrade Options for Windows Server 2012 http://technet.microsoft.com/en-us/library/jj574204.aspx
Evaluation Versions and Upgrade Options for Windows Server 2012 http://technet.microsoft.com/en-us/library/jj574204.aspx
Get-DnsServerDiagnostics http://technet.microsoft.com/en-us/library/jj649883(v=wps.620).aspx
Grant a Member the Right to Logon Locally http://technet.microsoft.com/en-us/library/ee957044(v=ws.10).aspx
How to remove data in Active Directory after an unsuccessful domain controller demotion http://support.microsoft.com/kb/216498
How User Account Control Works http://technet.microsoft.com/en-us/library/jj574202.aspx
Hyper-V Dynamic Memory Configuration Guide http://technet.microsoft.com/en-us/library/ff817651(v=ws.10).aspx
Hyper-V Virtual Switch Explained, Part 2 http://www.altaro.com/hyper-v/hyper-v-virtual-switch-explained-part-2/ 
Hyper-V Virtual Switch Overview http://technet.microsoft.com/en-us/library/hh831823.aspx
ImageX Command-Line Options http://technet.microsoft.com/en-us/library/cc749447(v=ws.10).aspx
Install-PswaWebApplication http://technet.microsoft.com/en-us/library/jj592894(v=wps.620).aspx
Install-RemoteAccess http://technet.microsoft.com/en-us/library/hh918408(v=wps.620).aspx
Internet Protocol Version 6 Address Space http://www.iana.org/assignments/ipv6-address-space/ipv6-address-space.xml
Link a Group Policy Object http://technet.microsoft.com/en-us/library/cc732979.aspx
Loopback processing with merge or replace http://technet.microsoft.com/en-us/library/cc782810(v=ws.10).aspx
Manage Multiple, Remote Servers with Server Manager http://technet.microsoft.com/en-us/library/hh831456.aspx
Managing a Server Core installation: Overview http://technet.microsoft.com/en-us/library/ee441255(v=ws.10).aspx
Migrate Print and Document Services to Windows Server 2012 http://technet.microsoft.com/en-us/library/jj134150.aspx
Operations master roles http://technet.microsoft.com/en-us/library/cc773108(v=ws.10).aspx
Print and Document Services Overview http://technet.microsoft.com/en-us/library/hh831468.aspx
Remote Desktop Gateway Manager http://technet.microsoft.com/en-us/library/cc725706.aspx
Remove-ADComputer http://technet.microsoft.com/en-us/library/ee617250.aspx
Remove-WindowsFeature http://technet.microsoft.com/en-us/library/ee662310.aspx
Sc config http://technet.microsoft.com/en-us/library/cc990290(v=ws.10).aspx
Security Tools to Administer Windows Server 2012 http://technet.microsoft.com/en-us/library/jj730960.aspx
Set up recovery actions to take place when a service fails http://technet.microsoft.com/en-us/library/cc738230(v=ws.10).aspx
Set-BCAuthentication http://technet.microsoft.com/en-us/library/hh848404(v=wps.620).aspx
Set-DnsServer http://technet.microsoft.com/en-us/library/jj649845(v=wps.620).aspx
Set-DnsServerDsSetting http://technet.microsoft.com/en-us/library/jj649874.aspx
Set-DnsServerForwarder http://technet.microsoft.com/en-us/library/jj649887(v=wps.620).aspx
Set-DnsServerSetting http://technet.microsoft.com/en-us/library/jj649909.aspx
Set-GPPermissions http://technet.microsoft.com/en-us/library/ee461038.aspx
Set-WSManInstance http://technet.microsoft.com/en-us/library/hh849875.aspx
Set-WSManQuickConfig http://technet.microsoft.com/en-us/library/hh849867.aspx
Storage Pools… Dive right in! http://blogs.technet.com/b/canitpro/archive/2012/12/13/storage-pools-dive-right-in.aspx
Switching Between the GUI and Server Core in Windows Server 2012 http://www.petri.co.il/switching-gui-server-core-windows-server-2012.htm
Troubleshooting Windows Firewall with Advanced Security in Windows Server 2012 http://social.technet.microsoft.com/wiki/contents/articles/13894.troubleshooting-windows-firewall-with-advanced-security-in-windows-server-2012.aspx
Updating root hints http://technet.microsoft.com/en-us/library/cc758353(v=ws.10).aspx
Using System Configuration (msconfig) http://windows.microsoft.com/en-us/windows-vista/using-system-configuration
Using the Set-Service Cmdlet http://technet.microsoft.com/en-us/library/ee176963.aspx
Verifying Your Basic DNS Configuration http://technet.microsoft.com/en-us/library/cc959303.aspx
What’s New in Hyper-V for Windows Server 2012 http://technet.microsoft.com/en-us/library/hh831410.aspx
What’s New in Hyper-V for Windows Server 2012 http://technet.microsoft.com/en-us/library/hh831410.aspx
Windows and GPT FAQ http://msdn.microsoft.com/en-us/library/windows/hardware/gg463525.aspx

Good to Know: Windows Server 2012 – Part 3

Here is my newest sources of knowledge to Windows Server 2012 Administration:

Access-based Enumeration http://technet.microsoft.com/en-us/library/cc784710(v=ws.10).aspx
Active Directory Service Interfaces http://msdn.microsoft.com/en-us/library/windows/desktop/aa772170%28v=vs.85%29.aspx
Active Directory-Integrated DNS Zones http://technet.microsoft.com/en-us/library/cc731204(v=ws.10).aspx
AD DS Installation and Removal Wizard Page Descriptions http://technet.microsoft.com/en-us/library/hh831457.aspx
Add-Computer http://technet.microsoft.com/en-us/library/hh849798.aspx
Adding Disks to the Storage Pool http://technet.microsoft.com/en-us/library/ff399688.aspx
Add-NetLbfoTeamNic http://technet.microsoft.com/en-us/library/jj130850(v=wps.620).aspx
Add-NetSwitchTeamMember http://technet.microsoft.com/en-us/library/jj553811(v=wps.620).aspx 
Add-WindowsFeature http://technet.microsoft.com/en-us/library/ee662309.aspx 
Add-WindowsPackage http://technet.microsoft.com/en-us/library/hh852164.aspx
Add-VMNetworkAdapter http://technet.microsoft.com/en-us/library/hh848564(v=wps.620).aspx
Configure Memory and Processors http://technet.microsoft.com/en-us/library/cc742470.aspx
Configuring Pass-through Disks in Hyper-V http://blogs.technet.com/b/askcore/archive/2008/10/24/configuring-pass-through-disks-in-hyper-v.aspx
Configuring the Minimal Server Interface http://blogs.technet.com/b/server_core/archive/2012/05/09/configuring-the-minimal-server-interface.aspx
Create a Rule for Packaged Apps http://technet.microsoft.com/en-us/library/hh994588.aspx
Create a Spanned Volume http://technet.microsoft.com/en-us/library/cc772180.aspx
Dcdiag http://technet.microsoft.com/en-us/library/cc731968(v=ws.10).aspx
Delegate Control of an Organizational Unit http://technet.microsoft.com/en-us/library/cc732524.aspx
Desktop Experience Overview http://technet.microsoft.com/en-us/library/cc772567.aspx
DHCP Scopes http://technet.microsoft.com/en-us/library/cc726954(v=ws.10).aspx
DHCP Tools and Options http://technet.microsoft.com/en-us/library/dd145324(v=ws.10).aspx
DHCP: The server should be configured to send its default gateway to all clients http://technet.microsoft.com/en-us/library/ee941211(v=ws.10).aspx
Djoin http://technet.microsoft.com/en-us/library/ff793312(v=ws.10).aspx
Dsadd http://technet.microsoft.com/en-us/library/cc753708(v=ws.10).aspx
Dsquery http://technet.microsoft.com/en-us/library/cc732952(v=ws.10).aspx 
Enable and Configure MAC Address Filtering http://technet.microsoft.com/en-us/magazine/ff521761.aspx
Features Removed or Deprecated in Windows Server 2012 http://technet.microsoft.com/en-us/library/hh831568.aspx
FSMO placement and optimization on Active Directory domain controllers http://support.microsoft.com/kb/223346
Group scope http://technet.microsoft.com/en-us/library/cc755692(v=ws.10).aspx
Group types http://technet.microsoft.com/en-us/library/cc781446(v=ws.10).aspx
How manage Published (a.k.a Metro) Apps in Windows 8 using Group Policy http://www.grouppolicy.biz/2012/08/how-manage-published-a-k-a-metro-apps-in-windows-8-using-group-policy/
How to configure a connection to a virtual private network (VPN) in Windows XP http://support.microsoft.com/kb/314076/en-us
How to create and delete hidden or administrative shares on client computers http://support.microsoft.com/kb/314984
How to create the Central Store for Group Policy Administrative Template files in Windows Vista http://support.microsoft.com/kb/929841
How To Remove the Root Zone (Dot Zone) http://support.microsoft.com/kb/298148
How to View Printer Objects in Active Directory http://support.microsoft.com/kb/235925
Hyper-V Virtual Fibre Channel Overview http://technet.microsoft.com/en-us/library/hh831413.aspx
Install a New Windows Server 2012 Active Directory Forest http://technet.microsoft.com/en-us/library/jj574166.aspx
Installing AD DS by using Server Manager http://technet.microsoft.com/en-us/library/hh472162.aspx#BKMK_GUI
Installing Windows Server 2012 http://technet.microsoft.com/en-us/library/jj134246.aspx
Local Users and Groups Extension http://technet.microsoft.com/en-us/library/cc731972.aspx
Managed-By attribute http://msdn.microsoft.com/en-us/library/windows/desktop/ms676857(v=vs.85).aspx
Net services commands http://technet.microsoft.com/en-us/library/bb490949.aspx
Netsh Technical Reference http://technet.microsoft.com/en-us/library/cc725935(v=ws.10).aspx
New-ADComputer http://technet.microsoft.com/en-us/library/ee617245.aspx
New-NetSwitchTeam http://technet.microsoft.com/en-us/library/jj553814.aspx
NIC Teaming Overview http://technet.microsoft.com/en-us/library/hh831648.aspx
Redircmp http://technet.microsoft.com/en-us/library/cc770619(v=ws.10).aspx
Remote Management with Server Manager http://technet.microsoft.com/en-us/library/dd759202.aspx
Remove-NetLbfoTeam http://technet.microsoft.com/en-us/library/jj130848(v=wps.620).aspx
Restricted Groups http://technet.microsoft.com/en-us/library/cc957640.aspx
Restricted Groups http://technet.microsoft.com/en-us/library/cc957640.aspx 
Securing DNS zones http://technet.microsoft.com/en-us/library/cc755193.aspx
Set-NetAdapter http://technet.microsoft.com/en-us/library/jj130875(v=wps.620).aspx
Storage Spaces Overview http://social.technet.microsoft.com/wiki/contents/articles/15198.storage-spaces-overview.aspx
To rename the Administrator account using the Group Policy Management Console http://technet.microsoft.com/en-us/library/cc747484(v=ws.10).aspx
Understanding AppLocker Rules http://technet.microsoft.com/en-us/library/dd759068.aspx
Using WinRS http://technet.microsoft.com/en-us/library/dd163506.aspx
Verifying Your Basic DNS Configuration http://technet.microsoft.com/en-us/library/cc959303.aspx
What’s New in Hyper-V for Windows Server 2012 http://technet.microsoft.com/en-us/library/hh831410.aspx
Which ports do you need to open on a firewall to allow PPTP and L2TP over IPSec VPN tunnels? http://www.windowsitpro.com/article/pptp/which-ports-do-you-need-to-open-on-a-firewall-to-allow-pptp-and-l2tp-over-ipsec-vpn-tunnels–46811
Viewing advanced settings in Active Directory Users and Computers http://searchwindowsserver.techtarget.com/tip/Viewing-advanced-settings-in-Active-Directory-Users-and-Computers
Windows PowerShell 3.0 and Server Manager Quick Reference Guides http://www.microsoft.com/en-us/download/details.aspx?id=30002
Windows Server 2008 R2 and Windows Server 2008 http://technet.microsoft.com/en-us/library/dd349801(v=ws.10).aspx
Windows Server Installation Options http://technet.microsoft.com/en-us/library/hh831786(v=ws.11).aspx
Work with Software Restriction Policies Rules http://technet.microsoft.com/en-us/library/hh994597.aspx#BKMK_Cert_Rules

Good to Know: Windows Server 2012 – Part 2

Part 2 of the good to know things of Windows Server 2012:

Backup using GPMC http://technet.microsoft.com/en-us/library/cc784474(v-ws.10).aspx
View Hidden Folders in Active Directory Users And Computers http://technet.microsoft.com/en-us/magazine/gg456494.aspx
Add-PswaAuthorizationRule http://technet.microsoft.com/en-us/library/jj592890(v-ws.10).aspx
Software Restriction Policies Rules http://technet.microsoft.com/en-us/library/hh994597.aspx#BKMK_Cert_Rules
How manage Published (a.k.a Metro) Apps in Windows 8 using Group Policy http://www.grouppolicy.biz/2012/08/how-manage-published-a-k-a-metro-apps-in-windows-8-using-group-policy/
Understanding Connection Security Rules http://technet.microsoft.com/fi-FI/library/dd448591(WS.10).aspx
How to Enable Authenticated Firewall Bypass http://technet.microsoft.com/en-us/library/cc753463(v=ws.10).aspx
Filter the scope of Group Policy according to security group membership http://technet.microsoft.com/en-us/library/cc786636(WS.10).aspx
Block Inheritance – GPO http://technet.microsoft.com/en-us/library/cc731076.aspx
WMI filtering using GPMC – GPO http://technet.microsoft.com/en-us/library/cc779036(v=ws.10).aspx
User Rights Assignment http://technet.microsoft.com/en-us/library/cc780182(v=ws.10).aspx
Windows Authorization Manager http://msdn.microsoft.com/en-us/library/bb897401.aspx
Backing up, Restoring, Migrating, and Copying GPOs http://technet.microsoft.com/en-us/library/cc781458(v=WS.10).aspx
Group Policy Cmdlets in Windows PowerShell http://technet.microsoft.com/en-us/library/hh967461.aspx
Copy-GPO http://technet.microsoft.com/en-us/library/ee461050.aspx
Import-GPO http://technet.microsoft.com/en-us/library/ee461044.aspx
Port Virtual Local Area Network (PVLAN) and Trunk Mode http://technet.microsoft.com/en-us/library/jj679878.aspx#bkmk_portmirror 
Backing Up and Restoring Virtual Machines http://msdn.microsoft.com/en-us/library/dd405549(v=vs.85).aspx 
Backing Up Hyper-V Virtual Machines http://blogs.technet.com/b/virtualization/archive/2008/08/29/backing-up-hyper-v-virtual-machines.aspx 
Resource Metering http://technet.microsoft.com/en-us/library/hh831410.aspx#BKMK_resourcemetering
Hyper-V Resource Metering in Windows server 2012 http://blogs.technet.com/b/meamcs/archive/2012/05/28/hyper-v-resource-metering-in-windows-server-2012-server-8-beta.aspx
Windows Deployment Services http://technet.microsoft.com/en-us/library/cc766320(v=ws.10).aspx
New-ADComputer http://technet.microsoft.com/en-us/library/ee617245.aspx
Djoin http://technet.microsoft.com/en-us/library/ff793312(v=ws.10).aspx
Dsadd http://technet.microsoft.com/en-us/library/cc753708(v=ws.10).aspx
Add-Computer http://technet.microsoft.com/en-us/library/hh849798.aspx

Good to Know: Windows Server 2012 – Part 1

Hi,

Here is a series of post(first part) where I have gathered from different sources, good to know Windows Server related information. This might help you on your Windows Server problems or configurations.

Pass-Through Disks http://blogs.technet.com/b/askcore/archive/2008/10/24/configuring-pass-through-disks-in-hyper-v.aspx
Using Differencing Disks http://technet.microsoft.com/en-us/library/cc720381(v-ws.10).aspx
Set-VMNetworkAdapter http://technet.microsoft.com/en-us/library/hh848457(v=wps.620).aspx
Disable-NetFirewall Config firewall to all remote MMC Snap In http://technet.microsoft.com/en-us/library/jj574205.aspx
Disable-NetFirewall http://technet.microsoft.com/en-us/library/jj554843(v=wps.620).aspx
Slow-link mode http://technet.microsoft.com/en-us/library/hh968298.aspx
Group Policy slow link detection http://technet.microsoft.com/en-us/library/cc978717.aspx
Administratively assigned offline files http://technet.microsoft.com/en-us/library/cc957631.aspx
Enable Background File Synchronization on Metered Networks http://technet.microsoft.com/en-us/library/jj127408.aspx
Change the settings for Shadow Copies of Shared Folders http://technet.microsoft.com/en-us/library/cc786104(v=wps.10).aspx
Assigning different priority levels – Printer Priority http://technet.microsoft.com/en-us/library/cc784619(v=wps.10).aspx
Creating a printing pool http://technet.microsoft.com/en-us/library/cc757086(v=wps.10).aspx
Set different print priority to different groups http://technet.microsoft.com/en-us/library/cc738090(v=wps.10).aspx
hidden or administrative shares http://support.microsoft.com/kb/314984
Manage Multiple, Remote Servers with Server Manager http://technet.microsoft.com/en-us/library/hh831456.aspx
Create an Exclusion Range in DHCP http://technet.microsoft.com/en-us/library/cc754537(v=ws.1O).aspx
Enable and Configure MAC Address Filtering http://technet.microsoft.com/en-us/magazine/ff521761.aspx
DHCP Reservation http://technet.microsoft.com/en-us/library/cc779507(v=ws.10).aspx
DHCP Server Authorization http://technet.microsoft.com/en-us/library/dd296633(v=ws.10).aspx
DHCP Console Icons Reference http://technet.microsoft.com/en-us/library/gg722802(v=ws.10).aspx
Managing DNS Records http://technet.microsoft.com/en-us/library/cc722542.aspx
Using Forwarders http://technet.microsoft.com/en-us/library/cc754931.aspx
Configuring ICMP Settings http://technet.microsoft.com/en-us/library/cc786041(v-ws.10).aspx
Restricted Groups http://technet.microsoft.com/en-us/library/cc785631(v-ws.10).aspx
How to use Group Policy Preferences to Secure Local Administrator Groups http://www.grouppolicy.biz/2010/01/how-to-use-group-policy-preferences-to-secure-local-administrator-groups/
User Rights Assignment http://technet.microsoft.com/en-us/library/cc780182(v-ws.10).aspx
Security Policy Settings Overview http://technet.microsoft.com/en-us/library/hh831424.aspx
Copy-GPO http://technet.microsoft.com/en-us/library/ee461050.aspx