Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...
2
votes
3answers
55 views
What setting in XP stops executables being run unless your an administrator?
If I go to a workstation in a certain large organisation and try to run an executable from a USB drive it doesn't let me.
What setting is this in Group Policy or wherever else that does this?
-2
votes
0answers
18 views
Standalone print server security/policy prevents XP machines from connecting to printer share (or really, getting driver)
HPdl350 G4 or so
"Stand-alone" windows 2003 print server 32 bit sp2
connected via network, but no machine account/trust/anything between the standalone and a windows 2003 domain with mixed win764, ...
6
votes
1answer
56 views
Two ways of deploying printers via group policy
I've noticed two options for deploying printers via group policy:
Create and link Group Policy in GP Management, add printer(s) via User Configuration > Preferences > Control Panel Settings > ...
1
vote
2answers
25 views
Windows Server 2003 - How to control sleep settings through GPO?
Is there a way to control sleep / power settings in a Windows Server 2003 AD via GPO? Ideally, without installing anything on the client, or running scripts on the client?
Ultimately I am looking ...
2
votes
2answers
59 views
Is there a way to disable group policy for a couple of minutes on a certain computer in a 2008 domain?
I'm trying to disable the group policy on a computer for a limited time without logging out and back in.
Is that possible?
0
votes
2answers
35 views
GPO: How to determine why an .msi didn't install via Active Directory
I've created a GPO to push out an .msi packages to PCs in a particular OU. I've confirmed that:
the target client PCs firewalls are not blocking traffic
the folder containing the .msi is shared on ...
1
vote
1answer
21 views
windows server 2008 standard: script for modifying account lockout policy for AD
I am currently preparing for some setup procedures for active directory setup. The servers are installed with default policy which includes account lockout policy. However, the setup requires user to ...
5
votes
1answer
56 views
Server 2008 GPO not applying to Windows XP clients over site-to-site VPN
I have a Server 2008 R2 based Active Directory domain. Our default GPO has a few printer/network drive maps that both work fine locally for clients running Windows 7 as well as Windows XP (after ...
2
votes
2answers
34 views
Automatically set static routes between two networks without dhcp or default gateway
I have a windows domain network with two different subnets. Both are connected trough VPN gateways.
DHCP and default gateway is an exiting router blackbox. Unfortunately I have very limited control ...
-3
votes
1answer
49 views
Group Policy / Roaming Profile Issue
I am running a Server 03 DC and this is happening on a Windows 7 PC. Each time we tried logging in as the user the only thing coming up is a temp profile. We thought it might be an issue with the way ...
0
votes
1answer
24 views
Windows 2008 R2 GPO Logon script not running on Windows 7
I'm setting up a brand new domain running on new servers where I work. In the GPO I can map drives which works, but I can't for the life of me remove the drives if say a user's membership changes.
...
1
vote
0answers
43 views
Why is my access being denied when I am an adminstrator on my Windows Server 2003 Installation?
I have recently been made an Administrator on our server (running Win Server 2003) and have been given all the same permissions and made part of the same groups as our other admin but when I try to ...
0
votes
0answers
25 views
Group Policy Event 1006 code 49 on Single Signon TS
I have a 2008 TS system which I recently started allowing some non administrative users from a branch office access to. Since this time I have received a steady stream of group policy failures ...
1
vote
0answers
39 views
Group Policy for a Kiosk application
I have a Windows application (WPF), which I have run in a Kiosk scenario, limiting the user's access to other functionalities except the application itself.
Reading this article ...
1
vote
1answer
71 views
Group Policy Startup Script Not Working
I have a startup script on my server that is suppose to run at startup and install Office 2010 on my workstation computer however it is not working. Running rsop.msc it shows that the startup script ...
1
vote
1answer
32 views
Where Do I Find The Update URL For Google Chrome Extensions?
I'm trying to setup group policy for Google Chrome (http://support.google.com/installer/bin/answer.py?hl=en&answer=146164) particularily I'm working on setting up the Configuring the list of ...
0
votes
0answers
36 views
Disable Clean-Up button in Outlook 2010
I'm attempting to disable the clean up button/drop down in Outlook 2010 under the home tab. I have managed to disable the second and third options in that drop down, but the button itself and "Clean ...
4
votes
1answer
81 views
Group Policy Client failed the logon - Access Denied?
Background
We have a Server 2008 R2/Win7 domain.
We have teachers and students using Windows 7 workstations, deployed via SCCM.
Students all refer to a shared profile (\\dfsroot\\profiles\student, ...
0
votes
2answers
54 views
processing of Group Policy failed only on 2008 Servers and Name Resolution failure on the current domain controller
Spent last 3 months doing a upgrade from 2003 domain to a 2008R2 domain.
our last DC was rebuilt (5 total) and brought up on line. After it was put on line we have some 2008 and 2008R2 servers (10 ...
3
votes
2answers
122 views
Multiple installers attached to a single GPO?
Can more than one installer (msi, mst) be linked to a GPO to deploy multiple packages at once?
2
votes
2answers
35 views
Group policy for accessing sound settings
On a customer site, a "normal" (i.e. non-administrative) user cannot access the sound settings (mmsys.cpl) of the computer, whereas an admin can. From the error message the user receives, my ...
1
vote
0answers
21 views
Specify attribute's minimum length
I'm implementing a new infrastructure which will include a kind of Microsoft's GPO using ldap, dns, dhcp and pam.
I'm creating a new schema to store the information I need, and I have a groupPolicyId ...
1
vote
1answer
39 views
GPO: Windows Firewall Exceptions - enable for one target IP only (LAN Guard)
I'm in the midst of setting up GFI LAN Guard for vulnerability scanning and patch management. The first thing I have to get in order is for LG to inventory all of the clients on the network. In order ...
0
votes
1answer
47 views
My documents in Group Policy
OK, I've done something dumb in Group Policy. Set up a blanket policy to deny users who like to play with the system very restricted access. Now that policy denies access to the My doscument folder ...
0
votes
4answers
78 views
Configuring location based GPO for WSUS updates but only for some clients
I would like to configure WSUS so that employees arrive in main location they use WSUS to download stuff, and when they are in other locations (different locations / home etc) they use Windows ...
7
votes
2answers
202 views
How can I stop .exe's being ran from removeable media, such as USB drives?
I have an issue with users running .exe's from removable storage such as Memory Sticks and SD cards.
I am trying to set up blocking of exe's being ran from all removable storage to combat this, ...
1
vote
3answers
89 views
Resizing desktop icons across a domain
We're in the process of trying to change the desktops icons on all our client machines to the "Classic View" size. Microsoft says there's no way to do this on Server 2008 R2 using GPO/GPP. We're ...
0
votes
1answer
44 views
Difficulty deploying software to domain workstations with Server 2008
Using a GPO I've tried to deploy (in this case) Chrome to a series of locked down workstations with limited usage. This is on a server 2008 R2 installation, with the clients running Windows 7 ...
1
vote
0answers
19 views
Configuring Outlook Social Connector for SharePoint via Group Policy
Its possible to configure whether the Social functionality of Outlook is enabled or disabled via Group Policy, however, it would be nice to actually setup the SharePoint social connector for Outlook ...
-2
votes
1answer
71 views
What else disables changing IE proxy settings besides Group Policy? [closed]
Something is disabling access to the proxy settings in IE on my (work) laptop. IE is set to use the corporate proxy, so applications that use IE's proxy settings don't work when I take the laptop ...
1
vote
1answer
146 views
Allow non-admins to install fonts on Windows 7 without GPO
Is there a way in Windows 7 to allow users without admin rights to install fonts on their machine?
Our designers need to install new fonts regularly, but with no admin access, this means putting in ...
1
vote
1answer
88 views
GPO/Script setting screen Resolution to all domain
Hi I have a closed domain that I can not add any new utility/software and I would like to set the same resolution to all the computers but have found there no good way using GPO is there a another ...
2
votes
2answers
67 views
firefoxadm 0.5.9.3 for firefox9 does not work
I know that firefoxadm works for old versions of Firefox but it does not for the latest versions. what are people using now, how do you configure for newer versions of firefox?
0
votes
3answers
91 views
Is there a way to set logon time restrictions via group policy?
Rather than setting logon time restrictions on each user account, we would like to apply it via group policy to a security group. Is this possible?
Note that I am asking to set the restriction times ...
4
votes
2answers
206 views
Is WINs Still supported by Microsoft?
I heard through the grapevine that WINS was going to be phased out / not supported officially from Microsoft any more [ and yet they have it in Windows server 2008 ]. I can't find any information ...
0
votes
3answers
59 views
Documenting Group Policy
We as an IT group are about to go through all of our group policies and clean up/enhance them. I am trying to compile an easy to read document on what is configured and what is not.
I wanted to ask ...
1
vote
2answers
64 views
Office 2010 Deployment With MAK key via startup/shutdown script [closed]
Possible Duplicate:
Office 2010 silent activation after unattended installation
We are looking at deploying Office 2010 over machine startup/shutdown scripts. I have created a msp file and ...
0
votes
1answer
42 views
Group Policy: Prevent GPO from applying to sub-OUs
Scenario: OU has three GPOs applied to it. There are three sub-OU's beneath this OU, all of which inherit the aforementioned GPOs.
Sub-OU #2 needs to be prevented from inheriting ONE of the three ...
1
vote
2answers
39 views
Transition to client side targeting for loose group membership
I need to be able to add multiple overlapping groups without the need of defining a separate GPO for each combination. This rules out the standard "Enable Client Side Targeting" and the basic GPP ...
1
vote
1answer
31 views
Restrict access to All Users folder on XP and 7 via GP
I am attempting to restrict access to the All Users folder via GP. Currently I have the setting under:
Computer/Policies/Windows Settings/Security Settings/File System
configured for the ...
1
vote
0answers
76 views
Network Topology Discovery – Windows 7 Via GPO
I wish to enable Network Discovery on my network (For various reasons) I need to apply this via GPO due to the nature of our setup. This is on a Windows 2008 R2 Domain with Windows 7/XP Clients.
I ...
1
vote
1answer
50 views
Drive mapping fails via GPO preferences but works fine in a VBScript
I'm running a few Windows Server 2008 R2 servers with domain computers running Windows XP SP3. Client side extension is installed.
I opted to use Group Policy Preferences over the conventional ...
2
votes
2answers
205 views
What Group Policy settings MUST be set within the Default Domain Policy?
Does anyone have an authoritative source of policies that, if set, MUST be set within the Default Domain Policy (if one chooses to set them)? Off the top of my head, I know that password policies and ...
3
votes
1answer
124 views
Deploying .msi application through GPO doesn't work
I've been trying to deploy the forticlient SSL VPN application (.msi format) into my domain machines, using a GPO. Even though I made a silent previous installation by issuing the command: msiexec /qb ...
1
vote
1answer
102 views
When do local GPOs apply if a computer is a part of a domain?
when do local GPOs apply if a computer is a part of a domain? What would be an example scenario when local GPOs would be relevant for a computer that is a part of a domain?
Can I somehow 'use' local ...
0
votes
1answer
45 views
Windows Server 2008 R2 Foundation Group policy being overridden by local policy
There is a small network on a domain. Not too long ago a new machine was added. The OU that the user is linked to was part of an OU that is, among other things, not allowed to change desktop ...
0
votes
1answer
124 views
Allow Non-issued Security Certificate for Localhost Via Group Policy
I have an application at https://localhost:4321
When using Internet Explorer 8 I'm greated with a "There is a problem with this website's security certificate" message with the big red X etc...
Two ...
0
votes
1answer
72 views
Automatic updates - WSUS and Group Policy
I have 2 GPOS on my W2K3 domain:
1 is for the servers, where AU is disabled
the 2nd GPO is for desktop, where AU is enabled (with limitations - NA for the question).
I manage my AU's using ...
3
votes
1answer
175 views
How to apply group policy and regedit policy in Ubuntu 11.10?
I have a Windows server and all the clients are linux based(Ubuntu 11.10),I want to set up group/domain policy on my network. Please suggest anything other than likewise-open policy.
Or how to apply ...
2
votes
1answer
106 views
How to return to Default settings of NTP/Time server on domain with GP
This is an Edit - according to the comments, I may have not been understood/
Facts:
I have a Windows 2003 Domain
PDC Emulator is enabled and working correctly on my DC
I have a GPO that is NOT ...
