Hi guys
If anyone can shed any light on this I'd be really grateful.
Our design team have asked us to implement applocker on Windows 2008 r2 machines without the use of path rules.
So we've used the applocker powershell cmdlets to create publisher rules and filehashes for all folders on all servers. This was done using the -optimise parameter to try and minimize the number of hashes we got back.
We've done this on 16 servers as they all have different functions.
The problem comes when we merge these xml files into one gpo (again using powershell), to apply at the domain level, we're left with many duplicate file hashes within the GPO. I thought -merge may have been intelligent enough to strip duplicates but it didn't.
Is there any tool, or any other way, I can reduce the size of the gpo, thus reducing load times.
Many thanks
Jeff