Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
1answer
11 views

Make usergroups able to authorize User Account Control Prompt

I was wondering how you could make a group in Active Directory that is allowed to elevate/authorize programs with their credentials without setting them as the built in administrator? Windows server ...
0
votes
2answers
29 views

Accomplishing the task of mapping a drive to user logged in as

I've searched for this and found bits and pieces but I think this question would be specific enough that I want to make sure I get it correct. So what I'm wanting to do us to unify all our different ...
-2
votes
1answer
31 views

GPO wallpaper for certain computer

Good day, I am learning about GPO. I have domain with 30 users and 20 computers. Some are VM. Lately I've been trying to create a GPO that would change a Wallpaper for certain computer no matter who ...
0
votes
0answers
9 views

GPO not applying on a Windows 2012 R2 Terminal Server with Citrix VDA

We have a Citrix XenApp environment. In the environment we mostly use Server 2012 R2 as Terminal Servers and have a domain running on 2k8 R2. Now I want to configure Folder Redirection. Therefore I ...
-2
votes
0answers
236 views

Disable 'Telemetry/ Data Collection' Windows Updates (or temporarily all) on all Domain clients?

Microsoft is pushing "Windows 10 telemetry-like/ data collection" like components to older Windows machines via Windows updates. How to disable these updates (or temporarily all updates) on/ for all ...
0
votes
0answers
34 views

Windows Firewall on GPO

I am trying to trouble shoot a Windows Firewall on my Domain. Following services are allowed through the firewall DNS Active Directory File and Printer Sharing Network Discovery Remote Desktop ...
1
vote
1answer
34 views

Install RSAT by GPO on Win 8.1

I recently noticed that many Windows 8.1 Pro workstations do not have hidden shares, such as admin$ enabled. I need to have such shares available for remote app deployment. I noticed that RSAT ...
0
votes
0answers
27 views

Group Policy Preferences: Content Advisor disabled

We decommissioned our last Windows 2008 R2 server, and with it goes the ability to edit Internet Explorer Maintenance policy settings. Moving forward is Group Policy Preferences... so, I open up ...
2
votes
1answer
19 views

Apply Windows Firewall Rule GPO to Computer Group

One of our vendors is requesting that we provide Skype access, which uses specific ports and IPs. In order to facilitate the access, we need to deploy a set of Windows firewall rules. The target ...
2
votes
0answers
22 views

How to find which templates a GPO are using?

With a Windows 2012 R2 AD domain, we have a Central Store for group policy templates. Over time, a number of unnecessary templates were added to this store (most of them are not used) and it has ...
-1
votes
1answer
17 views

Why is my WSUS Server itself appearing in “Unassigned Computers” within the WSUS Console, even though it is in an Active Directory OU?

I have my WSUS linked to Active Directory via group policy. My WSUS server is contained within my "Servers" OU on Active Directory. I have multiple servers in this OU. However once I look at the WSUS ...
0
votes
0answers
36 views

Firewall & DNS issue

Server: Windows Server 2008 R2 When firewall is running on the DC no machines can resolve DNS which is running on the DC. It also prevents AD user logins. It also prevents Group Policy update. ...
1
vote
1answer
33 views

Group Policy Map Drive to Display Name

I'm trying to create a Group Policy to map users Home Drives among others when they login. All the other drives are mapping fine, however because of the way in which the usernames are formatted, I've ...
1
vote
1answer
16 views

Cannot reproduce a GPO effect due to server version?

I am running a domain with functional level Windows Server 2008 R2, within this environment I have host machines that run Windows Server 2012 R2. This environment is running nothing custom everything ...
1
vote
1answer
49 views

Prevent servers from restarting after Automatic Updates

Work has started a new focus in the way that we look after clients, trying to be more proactive rather than just reacting to problems. Part of this focus is to make sure that servers are up to date. ...
2
votes
1answer
28 views

Group Policy settings for account policies disappeared

Looking for any ideas, we discovered that our group policies (default policy) was no longer applying our account policies (password age/complexity/history etc). Our DCs still had the local policy ...
0
votes
2answers
39 views

Prevent local admins from shutting down RDS server

One of the clients I manage runs an RDS environment on Windows Server 2008 R2 servers which users log onto to work. I need to prevent users allowing applications to restart these servers, the kicker ...
1
vote
2answers
44 views

gpo implementation windows server 2012r2

I am looking to Configuring Windows 7 Libraries using Group Policy Preferences "Disable Known Folders". gpupdate /force is completed successfully, therefore policy is not applied to client computer?? ...
0
votes
0answers
21 views

Software Restriction Policies restricting too much

I thought one of our previous administrators had already implemented Software Restriction Policies in GPO, but apparently not, so now I'm doing it. I've started with the very basics: ...
2
votes
0answers
34 views

Windows 8.1 clients querying wrong ldap SRV record?

I just spotted than my PC, running Windows 8.1 Pro on a Windows 2012 R2 domain has been querying DNS for SRV records that doesn't exist. All of the dcdiag /dnsall tests pass, but I wonder if there's ...
-1
votes
1answer
16 views

Enable GPO Administrative Templates System Node

How do I enable access to the system node in the group policy management editor in Server 2008 R2? It is available in the local group policy editor.
1
vote
0answers
53 views

Windows Server 2012 R2 Personalization Pane not showing color picker

We are running a RemoteApp server on 2012 R2 and want to let our users select a border color and font size. Other than that, we don't want them messing around in the control panel. At first we set ...
1
vote
0answers
34 views

Which policy hides all desktop items?

New accounts on my Windows Server 2012 look like this when logging in for the first time: As you can see, the desktop is empty. It is not, there are in fact files on the desktop, but they are not ...
0
votes
1answer
18 views

append another file path to environment variable

I need to update client PC's environment variable using Active Directory Group Policy. I have to append new part to at the end of each PC's "Path" variable. is there any way to append new part to ...
1
vote
0answers
29 views

Group Policy on Win8.1 in WAN Environment won't fully apply

Client computer is Win 8.1 with local DHCP server/subnet and network based VPN (WAN) to the main server. DNS is set to the main server, on which client is registering itself correctly. Client can ...
0
votes
0answers
23 views

GPO for Windows Firewall ( allow access to the primary IP address of the server)

The security team in my company scans all the servers in our environment. This is a monthly scan and they scan based on IP addresses. The issue is if a server has multiple IP addresses ( on the same ...
1
vote
2answers
68 views

Why is there no 'powershell' tab in the group policy scripts dialog?

I would like to run a powershell script at startup but there is no 'powershell' tab on the dialog box. I am running Windows Server 2008 64-bit. Thanks!
1
vote
0answers
128 views

Group Policy Application Install Windows 10

When trying to install a program from group policy on Windows 10 I am receiving an error in event viewer. "The assignment of application failed. The error was: %%65" I have found similar posts ...
1
vote
1answer
43 views

Group policy removes certificate from personal store

We have a Code Signing certificate that is issued by our enterprise CA. We are using a group policy to deploy this certificate to the Trusted Publishers store on our domain computers. This works as ...
1
vote
2answers
29 views

Is it possible to create a GPO which excludes servers?

Is it possible to create a Group Police Object which only applies to workstations. (Excludes Servers). If this is possible, can you please point me in the right direction to learning how to do it?
1
vote
0answers
43 views

GPOs not applying even after gpupdate /force…but after a couple of days, do apply

For some odd reason, after I run gpupdate /force on both server and client, the GPOs do not apply. gpresult /r on the client does show that it recieves it and it is being applied but it does not do ...
0
votes
0answers
24 views

Windows 2008 Group Policy Mapped Drives - Unmap

I seem to be missing something? I have a policy that seems to mapping drives, which I cannot find the policy, I've checked event viewer on local pc and cant see the policy. On AD "Group Policy ...
0
votes
0answers
47 views

How to give permissions to user (not admin) to access task manager WS 2012 R2?

I have a terminal server with ws 2012 R2. In it I have installed domain server and remote desktop services. I have administrator account, and other account without administrator rights called ...
0
votes
1answer
60 views

I see my clients in AD but not in WSUS

I set up a WSUS but dont see any clients in the Unassigned Computers group. I can find my clients in the ADAC, when I select myWSUS (local) > computers. My group policy management got a domain ...
1
vote
0answers
32 views

Allow Execution, Deny Interactive login by GPO

Problem: Accounts to log into work stations are locked down tightly and unable to run nessesary applications on windows 7 stations. Saving an admin accounts credentials to elevate access is currently ...
3
votes
0answers
51 views

Best practice for defining user “HOMEDRIVE” “HOMEPATH” “HOMESHARE”

Is it considered a best practice to map domain users' "HOME" environment variables to a network path? If so, why? By "HOME" variables, I am referring to: %HOMEDRIVE% %HOMEPATH% %HOMESHARE% This ...
1
vote
1answer
95 views

Windows Server 2012 Missing Internet Explorer Maintenance in Group Policy

I'm trying to set Internet Explorer as the default browser for all users on a clients terminal server. I was trying to do it following this guide however I couldn't get passed step 4 Right-click ...
7
votes
1answer
351 views

Is there any way to restrict user from changing file extensions in Windows XP, Vista, Windows 7?

For example, not allow users to rename abc.doc to abc.jpg? Is there any windows group policy for that? I am not asking file association restriction. If it really can't, is there any group policy to ...
3
votes
2answers
31 views

Use “Client Site Name” in Group Policy Preferences

In Active Directory, you can map IP addresses to Client Sites. ...and then you can map Group Policy objects to sites. Which is great and all, but I have a client that is growing rapidly, and ...
9
votes
2answers
149 views

Need explanation of why a particular GPO is applied to all domain computers

I'm a little stumped on this one so I'm hoping someone can enlighten me, since I consider myself a pretty knowledgeable GPO person. I have a login banner GPO that changes the Interactive Logon: ...
0
votes
1answer
65 views

Unable to disable Thumbs.db on Windows Server 2012 R2

I have enabled the Group Policy setting "Turn off caching of thumbnails in hidden thumbs.db files", but the Thumbs.db is still getting generated. I have also enabling the Group Policy setting "Turn ...
0
votes
0answers
17 views

softwarerestrictions gpo and appdata locallow

In order to prevent accidental running of virus payloads I've added several paths to the SoftwareRestrictions Group Policy (Server 2008 R2) on our Windows Domain. The rules work fine for ...
1
vote
1answer
58 views

How to exclude Outlook 2010 from Win7 roaming profiles

We have a user with sensitive emails that shouldn't be available when they login to a borrowed computer that is not their primary computer. We want to keep their Win7 roaming profile but exclude the ...
0
votes
1answer
47 views

Delete User profile older than X days globllay from all the COmputer within domian. Server 2008 R2

I need little help for deleting all the user profile form the Computer within my domain. if user is not logged in to particular computer for Than x Day in my case 60 Days. i have tried with default ...
1
vote
0answers
27 views

Group policy for Windows Update Server

I'm trying to setup a WSUS, having everything on the server installed, updates downloaded and accepted, etc... ready to go Problem is, when I go into group policy and try to change the 2 relevant ...
0
votes
1answer
26 views

Is there a way to manage machines which are off-domain centrally?

We have a number of three tier setups here which are mostly Windows Server 2008 boxes. They tend to consist of 1 web server, 1 application/web services server, 1 db server. As this is a three tier ...
0
votes
0answers
9 views

Group policy to Delete unauthorised software per logon

I have a group of on-site engineers (domain users but have local administrators rights) who are using laptops. They are required to install software occasionally when they travel, therefore I need a ...
2
votes
2answers
107 views

Force a specific theme for entire network using GPO

I am attempting to force a specific theme to all machines in my network. I know that the GPO "Load a Specific Theme" in: User Configuration/Administrative Templates/Control Panel/Personalization Is ...
0
votes
2answers
157 views

Disable Flash player in Chrome via group policy

How would I disable Flash player in Google Chrome browsers for my 50 AD computers via group policy or script 2008 R2? I have tried a couple of applications, PDQDeploy_6 among them, but this software ...
0
votes
2answers
39 views

Server 2008r2 File lost in Group Policy Redirection?

I keep an Access database in My Documents. We have a Group Policy redirecting documents to "\\server\userhomes\%username%\My Documents". I was experimenting with a Group Policy to redirect My ...