He opened Command Prompt as Administrator and typed his first command:
Alex opened an elevated command prompt on a remote machine using PowerShell remoting and typed: group policy editor cmd
But his real challenge was the finance department. They were remote, not on the VPN. How do you update Group Policy for a laptop that can't see the Domain Controller? He opened Command Prompt as Administrator and typed
He pulled up the heavy artillery: (Local Group Policy Object Utility). This wasn't a native Windows command; it was a tool from Microsoft’s Security Compliance Toolkit. Alex copied it to his network share. He pulled up the heavy artillery: (Local Group
gpfixup /oldname /newname "That," Alex said, "rewrites domain references in SYSVOL. Use it wrong, and no computer will know which domain to trust."
LGPO.exe /t /v /m "BlockUSB" He had pre-configured a registry.pol file. Within seconds, the command imported a strict USB-blocking policy across the test machines.