Windows – Installing fonts via GPO

group-policywindows

Could I get confirmation that I haven't missed a "smart" way to do this, and it comes down to a computer startup script?

If you do anything like this with non-standard fonts, any experience of the impact once documents or email using them leaves your organisation?

Best Answer

If your computers are running XP SP3 or above, you could use Group Policy Preferences and utilize the files section to push fonts to each computer.

A script would also work and if you do it this way, I recommend using an "IF EXIST" check so that way it only pulls the fonts down once rather than every time.

As for non-standard fonts, it will depend on the program in question how it is handled. Most Office programs will default to Times New Roman if the font you are using is not found. You could also embed the font inside of the file itself, though you might get into licensing issues with the font developer if you do that. For other programs, you'll simply have to check how they react. In short, it might be best to not use custom fonts that are expected to exit the organization.

Related Solutions

Windows – Can an encrypted credential be accessed from within a PSSession

The problem is the fact, that remote session can't read your local variable. You can easily define variables before you Enter-PSSession and use them later in remote session:

$Session = New-PSSession -ComputerName dc01.domain.local -Credential $mycred
Invoke-Command -Session $Session -ScriptBlock { 
    $mycredRemote = $args[0] 
} -ArgumentList $mycred
Enter-PSSession -Session $Session

From this point, $mycredRemote contains your credentials.

Windows – My server is sending out emails with spoofed accounts

This probably isn't practical to actually do, but here's a strategy that would work:

Enable process tracking auditing to track processes starting / stopping to the Security Event Log.
Install Microsoft Network Monitor and capture traffic with a filter for destination TCP port 25.
Review the captures and correlate with your logs to pinpoint the anomalous email traffic.

Network Monitor will capture the process ID of the program sending the traffic. You can determine, using the Security Event Log, how the process that's sending the offending traffic is getting started.

Best Answer

Related Solutions

Windows – Can an encrypted credential be accessed from within a PSSession

Windows – My server is sending out emails with spoofed accounts

Related Topic