Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...
4
votes
1answer
15 views
Keep getting the password complexity error for a OU that should have it disabled
I have a specific Organizational Unit in my Active Directory domain that needs to have weak password settings. I set up my GPO and created a new policy for the OU OU=Limited ...
0
votes
0answers
10 views
Group policy results failing with “Invalid class” error
When trying to run the Group Policy Results Wizard against a specific workstation, I'm getting the following error:
The wizard was unable to generate the computer or user's data due to insufficient ...
0
votes
1answer
15 views
One Group Policy not being applied
We have several group policies that are set up, but for some reason one of them is not being applied. It has in the past, and the Security Filtering is the same as on all the other GPOs.
The OU/AD ...
0
votes
2answers
31 views
Access to the C:\ and D:\ restricted for local admin
One of our servers, TTSA, has no group policies applied to it when logging in as a local admin (other than the local policy), yet access to the C:\ and D:\ are still restricted.
I've checked the ...
2
votes
2answers
42 views
GPO Security Filtering Not Working
I have a problem with my domain, were the group policies aren't applying.
I currently have two security groups; 1) 32bit clients 2) 64 bit clients
In these two groups are our different computers, ...
0
votes
3answers
60 views
How can I disable account lockout policy for one user in a Windows domain
My company is running a Windows based domain. The domain has a group policy of locking out a user after several failed log-in attempts, for 5 minutes.
Unfortunately, this account functions as a ...
0
votes
1answer
19 views
Windows firewall logging. Log file is always blank
I have read many similar articles and posts on how to enable windows firewall logging. I have Win2k8r2 server without any Active Directory, DC, domains and other complicated stuff. Almost all of this ...
4
votes
2answers
59 views
Automatically make user local administrator on their computer through GPO?
In our AD 2003 domain each user gets local admin permissions on their computer. Everyone else can login with their domain account as normal user.
Right now this means going to the desktop and ...
5
votes
2answers
37 views
How to use a tab character within a GPP registry item?
I am in the process of packaging an some software settings for deployment with a GPP.
I need to include a few tab characters within string and eventually multi string values.
When I paste tabs into ...
1
vote
1answer
46 views
Can I use group policy to set the permissions on registry keys?
I know that I can use group policy preferences to set registry key values on a Windows 7 computer. But is it possible to apply registry key permissions using group policy?
Note: I've seen this post ...
1
vote
0answers
47 views
Windows 7 Screen Saver timeout problems using GPO
In our Windows 2003 domain, we are enforcing screensavers with timeouts through GPO. The settings currently in effect are.
Screen Saver = Enabled
Screen Saver executable name =Enabled and ...
3
votes
1answer
33 views
Can active directory GPO's apply to a group object?
I know I can set up an OU, move user objects in to it, and link a GPO to that OU and that GPO will apply to those users.
Is it possible to set up an OU, move a group in to the OU, and have a linked ...
0
votes
2answers
38 views
Disable Server Login upon Updates Reboot
I have a co-located Dedicated Server running Windows 2008 R2.
It is a Live server running my sites (wordpress, joomla, etc)
I administer it via Remote Desktop.
Everytime I do the Microsoft OS ...
0
votes
1answer
61 views
How can i force a user to save all his/her files to a specific folder on the machine?
How can i force a user to save all his/her files to a specific folder on the machine?
Clients are using: XP, Vista, and 7
Thanks
0
votes
1answer
29 views
Correct Place to enable windows services in GPO?
Which is the correct place to enable windows services through GPO on Windows Server 2008? The domain has computers running XP, Vista, and 7.
Computer Configuration > Policies > Windows Settings > ...
2
votes
0answers
30 views
XP software restrictions policy, disable message dialog every time software is restricted.
I have created some "Additional Rules", in "Software Restriction Policies". The rules work as expected, but I get a dialog message box every time they disallow the specified application.
How can I ...
0
votes
1answer
52 views
Backing up my GPO's
If I wanted to backup everything related to all my GPO's - permissions, links for the domain (how they are linked to my OU's etc), and all the GPO's themselves, how would I go about doing that.
I ...
1
vote
1answer
36 views
EAS remote wipe failure
I am getting the following error when trying to perform a remote wipe in Exchange 2010 via "Manage Mobile Device" within Recipient Configuration | Mailbox. I click the help link which leads me to a ...
0
votes
1answer
77 views
Where do I define a group policy that will set a users desktop background color to green the first time they log in?
Servers: W2k8 R2 x64
Desktops: Win7 Pro x64
Our current group policy uses a custom ADM file to define certain properties of the desktop (Background Image (centered), Background Color is green (00 74 ...
0
votes
2answers
52 views
Windows group policy controlling ability to create and execute Excel macros (but not enable/disable macro security settings)
I have a Windows 2003 Server box with Excel 2010 installed, upon which I am unable to create new or execute existing macros in spreadsheets. This machine is in a Windows Domain (and I am not getting ...
2
votes
1answer
53 views
How to lock down a RDP session so one user can only access one folder
I need to allow a user to RDP to a Win 2003 server (not currently a TS) and lock that user down to just have access to one folder and to run the app in that one folder. I feel like there is a few ...
1
vote
1answer
74 views
Cannot Apply Screensaver GPO to Windows 7 clients through a Security Group
Our environment consists of a 2003 Active Directory with about 50% split regarding XP and Windows 7 clients. Our security policy states that by default everyone's desktop should lock at 2 hours for ...
2
votes
3answers
59 views
Can I prevent logon scripts in one GPO from executing before those in the parent GPO finish?
According to this article, group policy is processed in descending order through the organization (ie start at forest, then domain, ou, etc). I have one GPO linked to the domain which runs a startup ...
0
votes
2answers
61 views
Windows 7 machine not setting homepage via GPO
A Windows 7 machine that is currently deployed has its homepage currently set as:
http://hp-comm.us.msn.com/?pc=CMDTDF&OCID=HPDHP
We have a GPO in place that sets all authenticated users IE ...
0
votes
0answers
21 views
active directory GPO - management and reporting tools
Currently, I am using Ecora Auditor. What are some alternative tools that will allow me to scan AD and pull all sorts of reports such as all GPO policies?
0
votes
0answers
17 views
Group Policy Online Reference [closed]
I remember I had once had a link to a site that displayed a huge set of GPO settings in a very orderly and filerable way. Unfortunately I lost the link. Does anyone know of such a site and has the ...
0
votes
0answers
44 views
Sysprep'd computer takes ages to apply GPO
On a domain, a Windows XP computer had problems. So I placed fresh sysprepped image on that computer.
Using Sysprep mini-setup, I keep the same computer name, then I added that computer on the ...
1
vote
1answer
40 views
Wireless settings saved for all users?
For both Windows 7 and Windows XP the wireless network settings are being saved for all users.
I want to stop this behavior - force all users to enter their own credentials - plus kill any existing ...
2
votes
1answer
23 views
gpsvc consuming ldap ports?
I have an odd issue with my Group Policy service on one of my domain controllers.
For some reason the gpsvc service within one of my svchosts is consuming a huge number of ports. The destination ...
1
vote
1answer
46 views
Group Policy and Outlook
I would like to be able to default sharing the user's calender to everyone using a group policy. Is this possible?
A brief google hasn't come up with anything.
(Outlook 2010 and the AD is Server ...
0
votes
1answer
27 views
Group Policy Object Path
I was wondering if there is a way to copy the group policy path. For example:
Deafault Domain Policy> Computer Configuration> Windows Settings> Security Settings> Account Policies> Kerberos Policy> ...
4
votes
6answers
174 views
Locked myself out of Group Policy Editor
I set 'only allow certain applications' restrictions and accidentally applied them across the board to all accounts. Now I'm restricted to only running a browser and can't run the group policy editor!
...
2
votes
2answers
45 views
Accurately assessing security policy on a system
I know there are several built-in tools (or tools available for download from Microsoft) that you can use to assess and modify the security policy applied to a system. A few I'm familiar with, to one ...
2
votes
0answers
83 views
Windows XP not mapping drives after logging into a windows 7 PC
Bit of background. We map out network drives via GPO. This works fine for both XP and windows 7 clients. The GPO’s are served by a Win2008R2 DC.
I have a user that has to works in 2 departments. The ...
2
votes
2answers
98 views
Deploy Office 2010 after uninstalling Office 2007 via Group Policy
I'm trying to automate the uninstall/install of Office. Removing 2007, installing 2010. I've downloaded the OCT and made changes as I needed. In there I can select, "Remove the following earlier ...
1
vote
2answers
90 views
Windows Server 2008 AD user rights
What is the difference between applying user rights through these two mechanisms:
Policies -> Windows settings -> Security Settings -> Restricted Groups
Preferences -> Control Panel -> Local Users ...
0
votes
0answers
42 views
Kerberos Policy section not appearing in RSop / GPResult
I am attempting to confirm via RSoP or GPResult that the correct settings for "\Computer Configuration\Windows Settings\Security Settings\Account Policies\Kerberos Policy" are being applied, however ...
1
vote
1answer
62 views
GPO not setting security permissions on restart
I have a GPO that is assigning permissions to a folder on the user's C drive (computer configuration\Policies\Windows settings\security settings\File System). The folder that this applies to doesn't ...
0
votes
1answer
30 views
Group Policy Recovery Agent EFS not being used
I am trying to get EFS working on our workstations. First when I tried to set a directory to be encrypted I got a warning about the Recovery Agent certificate being invalid.
It turned out that the ...
0
votes
2answers
57 views
Need a GUI app for group policy login script
I wrote a C# 4.0 application that works on a Windows computer but when using Group Policy to set it as a login script, it does not run. The application is being called from the same location and ...
1
vote
2answers
83 views
GPOs are on users gpresult but not updating settings
I have the GPOs setup correctly for WSUS and even just adding a favorite in IE but none of these are working. Is there another setting somewhere I'm missing to get these things to force? Windows ...
0
votes
1answer
101 views
Windows 7 blocks network access to network-installed apps
Windows 2008 R2 domain. Users, running Windows 7 Enterprise, are trying to run some software from a network share. Specifically, I've tested this with MATLAB and PuTTY.
When starting, MATLAB has to ...
2
votes
1answer
87 views
GPO - Block 3rd party cookies for IE 8
I am trying to find some settings in GPOs that explicitly say, "Block 3rd Party cookies" in IE. I am looking under policies>admin template>windows components>IE> IE control panel>Security page. ...
1
vote
0answers
185 views
Enabling SSL for Remote Desktop
Ok so I'm trying to remove a number of my systems from our Nessus scan from having this medium vulnerability.
http://www.nessus.org/plugins/index.php?view=single&id=18405
I set the following GPO ...
1
vote
1answer
93 views
Task Scheduler Cannot Apply My Changes - Adding a User with Permissions
When I login to the server using a domain account with administrator privileges and create a task in the Task Scheduler, I am unable to successfully save the Task once I select the following options: ...
0
votes
0answers
47 views
Group Policy - Published software not upgrading
I'm testing this with mercurial MSIs, but it's the same for other packages. I've created a new group policy and added an old version of mercurial to User software installation as a Published package.
...
3
votes
2answers
63 views
Group policy not applying to security group
Preface: I have enough privileges to create GPOs in my OU, and have made a few of them for some simple tasks (like deploying a printer to certain users). Not actually a sysadmin...I'm a developer who ...
1
vote
2answers
78 views
Active Directory Restricted Group confusion
I am trying to implement Restricted Group policy for my company's AD infrastructure, namely standardizing the local "Administrators" group. The documentation (and various webpages) said that the ...
0
votes
1answer
86 views
Auto log off windows machine after certain number of minutes
I have three machines on my network, two are windows xp and one is windows 7. i would like to have all three machines log a user off if they are on for more than 60 minutes. And I would like this to ...
0
votes
1answer
74 views
Group policy to disable notifications of particular errors?
How do i disable the notifications of particular errors?
A little background to my issue. During the installation of the Kaspersky, it disables all the windows firewall for all except the domain. I ...
