Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
0answers
2 views

Default Program via GPO Windows 7

I tried to configure the default program to open .docx/.doc files via gpo as mentioned here: http://www.grouppolicy.biz/2011/09/how-to-use-group-policy-to-change-open-with-file-associations/ I've ...
2
votes
1answer
21 views

How do I enable “Logon as a service” dialog buttons?

Group Policy newbie here. I need to be able to run some of my services as a user that also has access to SQL Server. How do I enable the "Add User or Group..." and "Remove" buttons on the "Logon as a ...
-2
votes
0answers
14 views

Windows Password Group policy [on hold]

so our password policy is for passwords to expire every 90 days and 'Enforce Password History' = 5 passwords remembered, and 'Password must meet complexity requirements' = Enabled. It was time for my ...
0
votes
0answers
13 views

Allow Administrators to Override Device Installation Restrictions

I am trying to set up our Active Directory domain to lock down unauthorised hardware installation. I am testing the Device Installation Restrictions in Group Policy, using the settings under Computer ...
1
vote
1answer
19 views

Clients can't update dNSHostName attribute after DNS suffix change

We have a bunch of Windows 7 and Windows Vista clients that belong to domain contoso.com. The clients are registered in DNS to client.contoso.com. We have changed the DNS suffix via GPO from ...
1
vote
1answer
27 views

Windows Security Policy not Updating - Admin templates work fine

I have a domain with a mix of physical and virtual servers. Some time ago another admin may have performed some manual scripted updates at the client level that are now preventing changes in the ...
0
votes
1answer
21 views

Restrict Control Panel items GPO on Server 2003 - AD is 2008 R2

I'm having trouble applying a GPO to restrict Control Panel Items on Server 2003. My DC is 2008 R2 and the policy I'm using is: User configuration > Administrative Templates > Control Panel > Show ...
0
votes
0answers
13 views

OpenVPN with IPSec

OpenVPN with IPSec We are using OpenVPN to connect multiple devices. The customer requires using IPSec, but OpenVPN is SSL VPN. Their website says this OpenVPN's security model is based on using ...
1
vote
0answers
34 views

Remotely change local group policy server 2008R2

I'm trying to find a way I can edit the 'trusted hosts' list under local group policy remotely. Path from within Local Group Policy is: \local computer policy\computer configuration\administrative ...
0
votes
0answers
34 views

Group policy not pushed to client for offline files setting

I have setup group policy for "Offline Files" but I noticed that the configuration is not pushed to clients. With another setup I had no problem. The configuration path is \\Computer ...
-3
votes
0answers
29 views

Powershell script, GPO logon script for homedrive [on hold]

I am trying to have this powershell script change the homedrive to H: and homepath to \server01\profiles\USERNAME. I have added this to a GPO so it executes upon logon, but Im not sure where in the ...
1
vote
2answers
123 views

Group Policy to disable USB in windows 7 clients

I want to disable the USB for Windows 7 clients through the Active Directory group policy ,is it possible ???and anyone can give me instructions please .
1
vote
3answers
35 views

Windows 10 search bar and group policies

I'm administrating a Windows 7 (now Windows 10) machine which has one account that is pretty locked down. Users can only start specific programs (via white list in the group policies), have no access ...
0
votes
0answers
7 views

Can I use policy to filter get requests or strings in URLs not found in the domain?

I know there's content advisor, but I don't get to access it, so I'd like to know what it can do before I ask questions to people who can access it. My goal is to filter out search queries using ...
0
votes
3answers
53 views

What is the most suitable path on Windows workstations to store admin scripts? [closed]

We have a need for a GPO to store admin scripts locally on Windows workstations (7 and above), and I was wondering if Microsoft has any recommendations or if you have any experience or thoughts on ...
-1
votes
2answers
37 views

Windows Server 2008R2 Active Directory Apply GPO only when connected to domain

We are trying to apply a SSID Restriction policy for computers where i work. We created a GPO which applies to computers in an specif OU without any security or WMI filters We want the computers to ...
30
votes
3answers
2k views

Why are many admins using 'Turn off Automatic Root Certificates Update' Policy?

My company distributes a Windows Installer for a Server based product. As per best practices it is signed using a certificate. In line with Microsoft's advice we use a GlobalSign code signing ...
0
votes
0answers
13 views

Group Policy Scheduled Task not asking for password

I'm trying to deploy a scheduled Task to our Servers via GPO, but something doesn't seem quite right. I want the Task to be run with a Service account, wheter the user is logged on or not. I know that ...
0
votes
2answers
41 views

Can't send to compressed (zipped) folder

I'm IT Technician at a Secondary School and our Network Manager is away on long term leave. Currently our student's aren't able to send to - compressed folder. When trying the error 'File not found ...
0
votes
0answers
52 views

Map Network Drive GPO not working on login

I have created a group policy which should map the network folder \\SHARED\data to drive letter H:. The policy is applied if I run gpupdate /force, but when I restart the computer and login, the ...
2
votes
1answer
53 views

Remote Desktop: What is the difference between “Run these programs at logon” and “Start the following program on connection”?

My organization is running a Terminal Server Farm in order to provide a specific application to the users. The setup consists of a AD domain controller plus two Terminal Servers running the Remote ...
0
votes
3answers
48 views

Group Policy applied but Network Drive wont show up

Server 2012 DC + Server 2012 on the client side. I have the following group policy in place: The policy is applied when I run gpresult /r /scope computer: Yet the drive does not show up. Also ...
2
votes
0answers
33 views

group policy being applied from offsite Domain Controller: why?

Site 2: I have a small branch with 1 DC and 4 clients. Site 1: Meanwhile my main branch has 2 DCs and lots of clients. I made some GP changes on DC-site2, and I was wondering why they weren't ...
0
votes
0answers
9 views

Scanned Files from printer in Home folder Takes a while to apper - GPO issue?

I don't even know where to start with this. I recently setup home folders for those users that needed it. Then I used a GPO to created a subfolder in the home folder where our networked ...
0
votes
1answer
30 views

Configure Remote Desktop Desktop based on Group

I have a few different AD groups accessing the same remote desktop server (Windows Server 2008 R2) and I need to configure each desktop so that every user in the same group has the same icons appear ...
0
votes
0answers
6 views

excluding specific user from USB Access GPO only on specific computer

I have a small domain, and I want to restrict access to USB for all users except for a specific user when using a specific computer. In GPO there is setting in both "User Settings" and "Computer ...
0
votes
4answers
29 views

User Preference GPO on a specific set of computers

I hope you can help me with this situation: I’ve been asked to deploy a specific wallpaper to front office computers. I’m not allowed to move the users from the Users OU container. This means the GPO ...
2
votes
2answers
30 views

Limit programs based off group policy

What I'm attempting to accomplish is having certain executables allowed in a 2012 Active Directory environment based off of a group policy. I have 3 different types of users in my AD. Group A ...
0
votes
0answers
29 views

Internet settings not being updated GPO

Whenever we update group policy using gpupdate, we see this message. Windows failed to apply the Group Policy Internet Settings settings. Group Polic y Internet Settings settings might have its ...
0
votes
0answers
27 views

Credential Provider showing incorrect tiles

This may or may not be better on SuperUser, it's regarding issues with a few workstations failing to cleave to the Enterprise standard. All references here are to Win7 Professional installations. ...
0
votes
1answer
22 views

Remote Desktop Server does not update group policies

I have a domain with 4 Remote Desktop Servers running Win2k8 R2. If i change the GPO on my domain controller for the Remote Desktop Servers i am having some issues. After running: gpupdate /force ...
0
votes
1answer
20 views

How to disable integrated Windows authentication Internet Explorer in Group Policy Management on Windows Server 2012?

I'm wondering if it is possible to disable the integrated Windows authentication of Internet Explorer by using Group Policy Management on Windows Server 2012.
2
votes
0answers
20 views

WMI Query - First and Fourth IP octet

Is anyone aware of any WMI queries that could be used within group policy which only lists all IP address, which end in .200 and I have multiple sites, multiple networks, I only need to list the ...
0
votes
0answers
18 views

RDS - Change single click option is item via GPO or Registry

I have a problem on my servers RDS, my users can not change their themes windows, folder options and many more due to some GPO. However, in recent days there is a problem concerning the opening of ...
1
vote
1answer
27 views

Group Policy Printer Mapping: Some printers are being skipped

I have a Group Policy Object designed for users in a particular department which should delete all existing printer mappings, and then map all users to 9 different printers (all on the same server). ...
0
votes
0answers
34 views

Delete User Profiles Older than a Specified Number of Days on System Restart, does not delete parent folder of profile

I have seen multiple question and answers in forum regarding this GPO to Delete User Profiles Older than a Specified Number of Days on System Restart not working or some hotfixes, in my environment it ...
0
votes
2answers
48 views

Group Policy to disable Printer Preferences

Can someone please advise on how we can disable users being able to open Printer Preferences on network printers that they have added to their computers? We have deployed around 100 new printers with ...
0
votes
0answers
28 views

Not Updating Group Policy Changes

I have been working on updating my companies group policies and I have run into a problem with the user policy not applying correctly. Previously the old policy had a folder redirect for the desktop ...
0
votes
0answers
51 views

Devices and printers wrong icon and missing printer details from group policy

Situation In our environment we have a windows 2008 server with a group policy to deploy printers to Windows 7 and Windows 10 client computers. Problem Everything is working fine except that on the ...
1
vote
1answer
55 views

Add Startup and shutdown scripts to Local Group Policy using Powershell

I am trying to automate adding startup and shutdown scripts to Local Group Policy (gpedit.msc). One solution is to write to registry directly as pointed out in ...
0
votes
0answers
15 views

Group policy file / folder deployment

I have a question in relation to file / folder deployment in group policy. I would like my deployment method of files / folders to fall into good practice standards. So essentially I have a public ...
3
votes
2answers
70 views

Not all printers are deployed on the client using Group Policy

Situation in our environment we are using the following servers to deploy printers in our domain forest: Windows Small Business Server 2008: contains the group policy to deploy the printers Windows ...
1
vote
2answers
59 views

GPO - Software Restriction Policies - add exception

Windows Server 2012 R2 and GPO. I wanted to increase security so I blocked %AppData%\*.exe and %AppData%\*\*.exe Spotify stopped working of course. I created another rule ...
2
votes
1answer
91 views

How to script a backup/restore of the Default Domain Policy to a reinstalled PDC

First I'll say that I've just now discovered that my practice of making changes directly to the Default Domain Policy isn't the recommended way of doing things. I admit I'm not sure why this is the ...
1
vote
1answer
32 views

Mapped drives aren't syncing on workstations

It seems like a few workstations on our network aren't syncing with the mapped drives, pretty randomly, so for example, different users on the same computer would see different files on the mapped ...
-2
votes
1answer
33 views

GPO not removing from client

I have a windows 2012 server. And I have applied a setting using scheduler that, it will run an .exe file every one hour. After that, I have removed the policy from server. But the .exe file is still ...
3
votes
0answers
58 views

Windows Server Clear on Logout Policy

I was wondering is it possible to create a policy on Windows Server 2008 R2 or 2012 that will clear everything (all files from desktop, documents, etc) once the user has logged out of the system? It ...
0
votes
0answers
15 views

Execute script/gpo via Microsoft VPN

I've put together a small script to install a piece of software that will help us in migrating to Office 365. It's successfully deployed to majority of the hard wired/wireless domain connected ...
0
votes
1answer
24 views

Windows - do not require password (GPO)

I'm setting up a small Active Directory installation for a company where they gave me the following requirement: While users should enter a password to logon in the morning, it is not required that ...
0
votes
0answers
49 views

Disable WiFi management on Windows 8 using Active Directory

We have a domain composed by a Windows Server 2012R2 that controls 40 laptop with Windows 8 connected via WiFi. Our goal is to prevent users to disconnect the wifi or, even worst, connect to other ...