Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

-1
votes
0answers
11 views

Print drivers won't deployed unless the are “Packaged”

I'm having trouble deploying printers with Windows Server and GPO. I can only seem to deploy printers using the default drivers on the server, named "Class Driver". I can't get the manufacturers ...
0
votes
0answers
9 views

Group Policy Drive Mappings

I have an issue with 1 GPO that applies to Citrix servers. If the domain controller that holds the FSMO and PDC roles is unavailable, it takes 30mins or more to log into a server. If I disable all the ...
0
votes
1answer
22 views

Powershell privileges and execution policy

Before shut this down please note its not a code issue, but an environment, privileges and policy issue on how do we enable this across the landscape. We are creating VHDs on regular basis, servers ...
0
votes
0answers
7 views

How does Group Policy's Site to zone assignment handle multiple matches?

I am using Group Policy to set sites to zones, I have these policies (generalized for clarity): *.mysite.com --> intranet zone (1) http://*.mysite.com --> trusted site zone (2) cl.mysite....
0
votes
1answer
27 views

Why are Mapped Drives using GPO saying they can't find the network path or do not have access?

Shared drive is being set as the following \\SERVER\SHARE using drive N All drives have no change Show hidden drives no change Titled: "Share" Reconnect: unchecked Set as Update/Create/Replace (all ...
1
vote
0answers
17 views

Group policy setting to prevent asking user which encryption mode to use

Asked a similar question previously: Group policy setting to prevent asking user where to store recovery key I'm trying to enforce the encryption mode to the new XTS-AES so that if the users ...
-2
votes
0answers
39 views

How to fix error: The security database on the server does not have a computer account for this workstation trust relationship [on hold]

Sys Admins I need your help! Logged onto my Windows 2008 r2 NAS server & received the following error message: Group Policy Service failed logon access denied. So googled the issue and ...
0
votes
1answer
29 views

Internet explorer 10/11 -GPO- Proxy setting “atomatically detect settings” greyed out

i have a big problem changing my internet explorer setting from fixed proxy to WPAD configuration. WPAD is configured correctly and everything is working fine except changing the GPO setting In ...
0
votes
0answers
16 views

Wrong GPO Applied to RDS Session

I am running Win 2012 R2 RDS session-based services with 16 rds users connecting via thin-client RDP session. I have several GPOs set up to set desktop, manage RemoteFX, background, etc. 13/16 rds ...
0
votes
2answers
63 views

GPO shows applied under user settings, but contains only computer settings

I am having a spot of trouble with my policies and applying them on my Windows 10 machine. I have several GPOs applied at the top of domain level, some contain only computer settings, some contain ...
0
votes
1answer
36 views

Server admin shares open for local administrators?

This is a new domain controller. I created users and created a security group called Local Admin. The users are members of this group. I created a domain group policy and used the Restricted Groups ...
2
votes
1answer
39 views

Driver installation not working when deploying printers via GPP

I'm trying to deploy printers via Group Policy. Posts around the internet suggest using the Group Policy Preferences approach (User/Preferences/Control Panel Settings/Printers) is the preferred method....
0
votes
1answer
35 views

Group policy vs. Local group policy: which is correct for this use case?

Quick background: I've been working with group policy since Win2k; I'm in an organization that's just getting around to rolling out Active Directory. I've got a few cases where I need to provide ...
0
votes
0answers
9 views

Excel '07 Macros and GPO issue. Cannot add Trusted Publisher

We have a GPO (that I created and manage) that blocks unsigned MS Office Macros and warns for signed ones. The GPO only applies user-side, not computer-side. I created a test user, then put "him" in a ...
6
votes
2answers
115 views

Using Azure AD to push Group Policy settings

I am trying to use Azure Active Directory instead of using a traditional domain controller. I would like to use Azure AD to authenticate users and to push GPO settings, such as folder redirection, ...
0
votes
1answer
22 views

Giving user local administrator rights when Restricted Groups is being used

Previous administrator configured Restricted Groups in the Default Domain Policy. In the Restricted Groups for Administrators, they've added the Domain Admins group as well as a domain security group ...
-2
votes
1answer
36 views

Power plan GPO applies, but doesn't change sleep interval [closed]

I am having a problem trying to make a new GPO to change the interval for sleeping while plugged in. I am seeing that the GPO sets High Performance as the active plan, but even though I set the ...
-1
votes
0answers
9 views

GPO on roaming profile causing Recycle Bin corruption? cannot find source

We've recently created some new OU's on our AD to better implement security policies, but we're constantly running into an error when the users first login, which states that various recycle bins are ...
-1
votes
0answers
43 views

How to disable client drives from Windows Server 2008 R2?

I'm working in college that has 3 labs. In each lab there are 100 systems that are all Dell systems (not a thin clients) and which have three drives (C, D, E). I will be logged on as a local user on ...
0
votes
2answers
59 views

Why is Group Policy not applying a desktop wallpaper setting?

I am configuring Group Policy in Windows Server 2008 R2 Enterprise to apply Desktop Wallpaper to Users and Computer in OU called HR. I shared the folder over the network using share and storage ...
0
votes
0answers
28 views

Windows SBS11 Drive Map Policy not applied to Windows 10

I have recently upgraded a couple of machines to Windows 10 as a test with company applications etc. The only problem I have run in to is the fact that the drive map policy isn't being applied to ...
0
votes
3answers
89 views

Change local admin password via GPO

I have deployed an Active Directory in a small company. Each and every user is trusted with local admin privileges on his computer with his domain account. However, in case the users can't log on to ...
0
votes
1answer
20 views

Group policy setting to prevent asking user where to store recovery key

Win10 PCs, 2012R2 domain I'm rolling out bitlocker to clients and I'm trying to restrict the options in the bitlocker wizard as much as possible. I do need users to run the wizard so they can set a ...
0
votes
1answer
33 views

Why is SiteToZoneAssignment GPO applying, but sites not appearing in IE

We have a Windows server 2012 R2 remote desktop farm, which we have applied a GPO to, to control site to zone assignments. This was working fine up until recently, but just lately, we have found that ...
0
votes
1answer
26 views

Distributed File System (DFS) Shared Drive Disappears at Logon for Users in a Given Organizational Unit (OU)

So, I've got a bit of an odd problem, and I want to get a grasp on the cause and what the solution is before it gets any worse. We've got a DFS share that's set to be mapped to all users in our ...
0
votes
0answers
17 views

'Secondary Logon' and User Group Policy

I'm working with a system (2008R2 + Windows 7) that requires some machines to run with 'group accounts' (single user ID for multiple people) due to a requirement have certain software displays up 24/7....
4
votes
0answers
54 views

How to bypass GPO loopback processing for some users?

As you probably know, loopback processing is a feature of Active Directory Group Policies which applies user settings in a GPO to any user who logs on to computers in the GPO's scope (whereas the ...
0
votes
1answer
22 views

Installing Symantec Endpoint Protection (SEP) client using both GPO & Remote Push - Nothing is working

I have an Organizational Unit called Computers in Active Directory. In this OU, I have all the workstations on which I want to install SEP client. I extracted the msi file and made a network share. ...
0
votes
1answer
21 views

Add a WSD print via group policy

I have a new wsd capable printer. Users can just discover it on the local network and add it and it works great. How can I push this out to these users with a GPO- so they don't have to discover the ...
2
votes
1answer
19 views

Deploying (gpo) local TCP/IP printers to users who are not local admin

I'm trying to deploy local TCP/IP printers to users who are not local admin using GPO. However, because they are not local admin they do not have the rights to install printers and thus the printers ...
0
votes
0answers
28 views

GPO settings not applying for “check for server certificate revocation”

I am working in a disconnected environment with intranet sites. When I open an SSL site it takes a good 2 minutes to open. I did a wireshark to see what was happening and it is going out to a ...
0
votes
0answers
17 views

RSOP and GPResult: Permission denied for local admin, but gpupdate works

I am on Win7 in Domain Network. I logged in using domain user which is in local administrators group, and I want to see list of group policies applied to my account / machine from DC. Running RSOP mmc ...
1
vote
1answer
77 views

How to enable NumLock on Windows 7/8/10 logon screen with GPO

I am currently migrating my company to Active Directory. Because my boss has enforced strong passwords, everyone needs to type at least one digit to log on their computers. Some of them have the ...
1
vote
0answers
50 views

Windows Server 2012 R2 loses network shared printers

I have one Windows Server 2012 R2 virtual machine on the ESXi server. It has RDS role, so multiple users can use it at the same time. Via GPO the user account receives some basic settings like ...
2
votes
1answer
98 views

Windows Server: what is the difference between Security Filtering (under the Scope tab) and the Delegation tab in Group Policy Management?

I notice that anything I add to Security Filtering also appears under Delegation, so I’m not sure how or why they both exist, and if they are redundant or not? Until now I had been exclusively using ...
0
votes
0answers
61 views

Group Policy - User setting not applying unless computer is added to scope

I have had a User Config policy in place that blocks some IE Settings, scoped to all authenticated users, in addition there is a second policy that doesn't block said IE Settings, scoped to certain ...
0
votes
1answer
22 views

Running Net Stop unelevated

First of all, this is one of those borderline questions between serverfault and superuser. In the end, I decided it belonged here because of the fact that most aspects of it revolve around a domain ...
4
votes
2answers
126 views

Disable password complexity on Windows 2012 R2

I have a Windows Server 2012 R2 that is my domain controller. I want to disable the password complexity rule for a few users only. I have created a group (called Formation) in AD to identify these ...
0
votes
0answers
23 views

Security Filtering not working on group policy [duplicate]

I am trying to achieve something which should be theoretically straightforward: Group Policy Object called "Staff shared drives" applied to all users GPO contains a few drives mapped through User -> ...
1
vote
1answer
45 views

How to connect clients to INTERNAL WSUS server but download the approved updates from Microsoft?

I have client-side targeting setup to handle some remote workstations on our network. They VPN in from time to time -- so they can hit the internal WSUS server when they are connected. I essentially ...
1
vote
1answer
9 views

Archive Eventlog every x days

I have a large number of 2k12 r2 servers and I'd like to keep archives of their Eventlogs every 30 days. I was looking for a centralized solution, possibly a GPO. But from what I saw it's only ...
0
votes
1answer
180 views

Group Policy Objects stopped applying to most security groups [duplicate]

I have a Server 2008 R2 Domain with quite a few Group Policy Objects that should be applied to various OUs and security groups (Using security filtering). I got reports from users that they were ...
0
votes
0answers
22 views

Group Policy security filtering not getting applied [duplicate]

So I've got the following setup: Domain Controllers are Windows Server 2008 R2 Clients are Windows 10 Pro Group Policy is linked on Parent OU of departments containing the AD Users Group Policy has ...
1
vote
1answer
23 views

Auditing Log is Full - Eventlog Archive GPO not working

I am trying to create an Archive for Eventlog but it does not seem to work. Server 2k12 R2 Environment. Following is the GPO I have enabled: I have rebooted the server and made sure it is being ...
0
votes
2answers
38 views

Does GPO Security Filtering need to match ANY or ALL rules in the Filter?

my main question is this: Is the security filtering for a GPO calculated using AND logic or with OR logic to apply the filters? Here is the context of my situation for a background on why I am ...
0
votes
1answer
27 views

Connect Access Domain Controller Over VPN

We have a remote base which we would like to connect to our main office. We bought a VPN capable router thinking this would dial the vpn and our remote PC would connect seamlessly. Unfortunately ...
0
votes
1answer
92 views

negative WMI-Filter for security filtering in GPO

I need to create a group policy object (GPO) that will disable printer redirection for all computers except certain servers. I considered making a security group and adding all the computers except ...
1
vote
2answers
45 views

GPO - is it possible to override enabled policy with not configured?

we have a request to allow customer to change firewall settings for servers in some OUs. These OUs inherit some policy which sets firewall to off for public and private network profiles. I wonder if ...
0
votes
0answers
41 views

GPO software installation from SAMBA server denied

I have a similar issue at 2 sites: W10p desktops provisioned from scratch, pulling installation (MSI) binaries from local SAMBA server. I've created a dedicated share (\nas\provisioning) & tried ...
14
votes
1answer
2k views

GPOs fail to apply; reason: Inaccessible, Empty, or Disabled; Server 2012 R2 and Windows 10

I have a Windows Server 2012 R2 Domain. Yesterday, a computer’s (running Windows 10 Pro) network drive stopped working. After further investigation (gpresult /h) it appears ALL group policy objects ...