Group Policy Preferences Registry Items
Create a new Group Policy Object and browse to User Configuration -> Preferences -> Windows Settings and Registry. Right click and choose new Registry Item. This is where you’re configure the sites, you will need 1 registry item per site
Key path format is as follows: Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\yshvili.com
Backup a Windows Server Certification Authority
net stop certsvc and press Enter
CA Registry Settings
Open PowerShell command prompt we opened in the previous instructions, type
reg export HKLM\SYSTEM\CurrentControlSet\Services\CertSvc\Configuration “c:\CAbackup\CAregsettings.reg”
Note:backup of sysvol folder(Policies & Script)
troubleshoot the journal wrap, see the following article in the Microsoft Knowledge Base:
Troubleshooting Journal_Wrap Errors on Sysvol and DFS Replica Sets
The DNS server was unable to open Active Directory event id 4000
Run AS administrator to CMD the server Active Directory and change domain.LOCAL and change Domain\domain_admin
netdom resetpwd /server:<PDC.yshvili.local> /userd:<yshvili\administrator> /passwordd:*
To backup share permissions, export the Shares registry key.
Open Regedit to the following location:
Right-click the Shares registry key and select Export.
When You want to restore it you can simple click the file you have exported
the service PresentationFontCache.exe is only usefull if you use WPF (Windows Presentation Foundation) applications.
If not, start services.msc and disable the service.
If you want to view the configuration settings for the CA, which includes the type of information that is set by the CAPolicy.inf or afterward installation by running post configuration scripts, you can issue the following commands:
certutil -getreg CA
We’ll run the following command accept it
ertutil –config – -ping