Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

1
vote
0answers
16 views

Server 2008 R2, restart script not running in scheduled tasks to shut down company computers

I am trying to restart my company's computers with a script (shutdown /r /f /t 00) and set it to fire off at 7pm daily by scheduled task. I have placed the script file in the sysvol\scripts folder but ...
0
votes
1answer
17 views

WSUS on Win2012R2 doesn't see Windows 8.1

WSUS on Win2012R2 doesn't see Windows 8.1. Both machines can ping each other. Computers are assigned to WSUS by: 'Use Group Policy or registry settings on computers' Local GPO on Win8.1 is set as ...
0
votes
1answer
14 views

Screensaver startup script (batch or reg) GPO, silent install

I have an application, which after it disconnects from a VPN connection, resets the screensaver settings. What I'd like to do is create a GPO script or batch file to run every time the user logs into ...
0
votes
1answer
17 views

Creating batch files from txt files - is this right?

Forgive me if I am completely of the rails here, but.... I am just learning about Group Policies and Domain Controllers etc. and I have a some .bat files, now I can edit them in notepad or any text ...
0
votes
3answers
45 views

GPO Troubleshooting - Security Filtering - Computer Configuration

We have a GPO that includes a Computer Configuration that enables a Preference that adds a security group to the local Administrators group. Since this is a Computer Configuration, do you need to add ...
0
votes
2answers
19 views

Excluding a specific machine from Group Policy - Server Essentials 2012

Server OS: Server Essentials 2012 Client OS Windows 8.1 I have a domain set up using SE 2012 and have used the group Policy wizard to apply Folder Redirection and "Security Settings". Can I make an ...
0
votes
1answer
30 views

Group Policy for Time Sync = ARP Flood?

I have a Windows Server 2008 R2 domain controller and a bunch of workstations of various versions of Windows - XP SP3, Vista, 7, 8.1. Time sync wasn't working correctly on a few PCs so I followed the ...
0
votes
2answers
20 views

Is there a GPO to allow standard users to access Resource Monitor

I need to allow standard domain users to be able to access the Resource Monitor on Windows 7 without adding them into the administrators group on any local machines. Is there a domain GPO setting to ...
3
votes
1answer
37 views

Edit local policy via powershell

i'm searching for a way to edit this policy via powershell : Computer Configuration -> Administrative Templates -> System -> Credentials Delegation -> Allow Delegating Fresh Credentials with ...
0
votes
0answers
4 views

AGPM - structure of agpmserv.log?

Can anyone enlighten me as to the structure of the agpmserver.log file? A list of the fields / headers / etc for the file would be ideal. Background: I've been looking into Microsoft's AGMP for ...
0
votes
1answer
10 views

IE11: How to check into which zone a URL falls?

I have applied several internet explorer settings via group policy. Especially a long list of URLs in the "site to zone assignment" setting. However it seems that one URL still falls into the ...
4
votes
1answer
19 views

Changing password expiration policy at next password change

We have a password policy with a maximum password age of 180 days. For various reasons we need to change it to 90 days, with a minimum impact for the users. Our users are normally warned about the ...
-1
votes
0answers
11 views

edit group policy in Windows Server 2008 after disabilng execution of programs [closed]

Well i was trying to make only a programar that can be run (myapp.exe), and never touched Group Policy before, so I set only myapp.exe to acepted applications,and disabled cmd,etc. Now (pretty ...
0
votes
0answers
20 views

domain admin account unable to modify IE settings, other DOMadmin group accounts can

When I log into one of the servers on our domain as DOMAIN\administrator, IE settings are locked, and indicate that I'll have to check with the system administrator. If I log into the same server ...
1
vote
1answer
24 views

Group Policy doesn't restart service as configured

I have configured group policy to tell a particular service (Winrm) to restart when the policy is applied. When the policy applies, I see that it tries to stop and start the service. Stopping works, ...
2
votes
0answers
31 views

Windows 7 GPO Preventing admins from interactively logging in, but still allowing Run As / permission escalation

I'm implementing security restrictions for a client who would like to prevent admin accounts from logging into workstations. For example each person has a user account and an admin account and only ...
0
votes
2answers
37 views

Which Group Policy wins out of two enforced policies with similar settings?

I have a situation where I need to modify an enforced group policy object, however due to the sensitive nature I must test my results first to one test user. In order to do this I plan to create new ...
4
votes
2answers
83 views

Determining if group policy needs to run synchronously

I have been working on speeding up network logins. As part of this process I'm disabling the 'always wait for network' option. This isn't inherently a problem, but I would really like to be able to ...
1
vote
1answer
81 views

Let users install software without local administrator rights on domain

I manage the network of a small company. As I'm not always in the office it is a wish from the employees to be able to install software without having to go to me. My predecessor set it up that ...
3
votes
0answers
36 views

Proxy Server setting stuck on Server 2003 R2 for Windows Updates

Stay a while and listen. This is going to be a long one. We've been having a problem the last couple of months with Updates on very specific Microsoft Server 2003 R2 Machines. This problem has ...
0
votes
1answer
25 views

WSUS: How to combine targeting groups from multiple GPOs

I am trying to use group policy with WSUS to prevent stuff like Silverlight from being installed unless it is requried. I want computer groups for each of the software (so a computer will end up in ...
1
vote
0answers
17 views

Configuring Service Login Credentials with Group Policy following MS14-025

With Microsoft security bulletin MS14-025, GPMC and related tools are now patched to no longer allow the use of configuration items within Group Policy Prefs that would embed obfuscated passwords. The ...
6
votes
1answer
168 views

Enable offline file sync for computer owner only

At the school I am interning at, all students and faculty have a mapped home folder known as the "M:" drive for storing files that they can access from all computers. For faculty who have laptops, we ...
4
votes
0answers
87 views

Applying group policy loopback to any user on specific computers

In a server 2008 R2 and Windows 7 environment, I have a GPO that specifies screen saver settings in the user settings policy for the entire domain. However, for specific computers, this is not ideal. ...
2
votes
1answer
35 views

How do I correctly install windows 8 group policy on a 2008 server?

I'm currently working on a customer server that is running Windows Server 2008 R2. They are in the process of upgrading their machines to Windows 8. The problem they have is they don't want all the ...
4
votes
1answer
105 views

Installing Lync 2013 Standard silently

I am trying to find a good way to deploy Lync 2013 standard & basic clients silently on computers with Windows 7 / Office 2010 & ahve a few roadblocks. 1) I am successful installing the ...
0
votes
1answer
34 views

Roaming Profile Accounts logoff instantly

I am working on setting up roaming profile accounts. When I log in as one of my users, they disconnect instantly. How do I find errors on what is going on? I've check the SMB Share permissions and ...
2
votes
1answer
31 views

Active Directory Force Update Fails

I tried looking up this error and problem and found nothing. Could this be a firewall issue?
4
votes
1answer
70 views

Consistently slow domain logins / folder redirection

I've been trying to diagnose slow logins to my domain. One of my first stops was Domain login very slow 10+ minutes. So far I've been able to tell it has to do with my policy that applies folder ...
0
votes
0answers
30 views

Deploying Ossec HIDS Windows Agent via GPO

I am trying to deploy OSSEC agent to about 100 Windows 7 boxes through GPO on our AD. I understand that I need to create and MSI from the EXE and import the specific client.keys file for the windows ...
2
votes
1answer
25 views

Error Code 0x800700a1 when trying to add registry key through GPO

I'm trying to add a new group policy to our domain so that images are automatically sent with emails in Outlook 2013. So I created the following GPO: This policy doesn't have any effect though. ...
3
votes
1answer
67 views

GPO Rule of thumb for: Disabled vs Enabled vs Not Configured

Is there any documentation that explains difference between these: Policy Not Configured Policy Disabled Policy Enabled, Setting Enabled Policy Enabled, Setting Disabled Policy Enabled, Setting ...
3
votes
2answers
44 views

Group Policy installation failed error %%1274

OK, I have a really tough one I've already spent all morning on. PC is a Win7 64 with SP1 and all MS Patches Usual error everyone is familiar with: The assignment of application Adobe Reader X MUI ...
0
votes
1answer
88 views

The sysvol permissions for one or more GPOs on this domain controller are not in sync with the permissions for the GPOs on the baseline domain

I have recently installed a second domain controller and all replication seems to be working fine except for group policy - In windows 2012r2, through the new Group Policy Management, when I click on ...
3
votes
2answers
76 views

Ensure drive is mapped at login on laptop with strictly wireless

So, $software runs on a 'server' (windows client w/ file sharing to share out the db folder), and laptop client has the drive mapped and $software also installed. This is the vendor's recommended ...
2
votes
1answer
33 views

Domain Account Does Not Receive Proper Se Privledges from Group Policies

I am attempting to install software that requires SeBackupPrivilege, SeDebugPrivilege, and SeSecurityPrivilegebut I cannot seem to get my Domain Account to retrieve these specific privileges. I ...
4
votes
3answers
173 views

If an email is sent to a user redirects if OOF is on

Is there a way to make a global change to either Exchange or group policy so if an email is received from an email address it will not go into the users mailbox but be forwarded on instead. Basically ...
3
votes
2answers
236 views

Installing MSI Before User Logon

I have a requirement to install a MSI's to our workstations before logon, it's periodically updated and provides updates to our LOB applications. The problem we are encountering is when setting logon ...
0
votes
1answer
31 views

Why does windows xp standalone group policy apply in the safe mode to the default administrator?

I am trying to turn standalone Windows XP installed on VirtualBox virtual machine into an AppStation-style machine (only one allowed application, taskbar, start with lone shutdown option, and a ...
0
votes
1answer
39 views

Using AD/GPO to add machines to WSUS in Windows Server 2012

I was following this guide: http://knowledge.quickstart.com/configure-wsus-to-deploy-updates-using-group-policy/ I've rebooted the machines after the policy updates to ensure they took them. I ran ...
2
votes
0answers
26 views

GPO: Applying a home page to Win7 and Vista Clients running IE9

I am trying to set the homepage on several Windows 7 and Vista machines via Group Policy Preferences. Both are running Internet Explorer 9. The "apply once and do not reapply" option is enabled, as i ...
1
vote
1answer
177 views

Best practice deploy printer in 2012R2 RDSH?

I have 3 servers with 2012 R2 RDS Session Host, where my users log on. I have 4 printers. What is best practice to deploy these 4 printers to my users?... Using GPO shared printers or Deploy ...
2
votes
1answer
63 views

Can I install applications to Remote Desktop Session Hosts via Group Policy?

I have a GPO that installs an application using the Software installation policy under Computer Configuration. I assign this GPO to the OU with our desktop/laptop computers, and my clients all install ...
0
votes
2answers
104 views

Deleted printers keeps coming back - and multiply

My users are on 2012 R2 RDS Session Host servers. I've used "Deploy Printers" (from Print Manager) to deploy 4 printers. The last week, I've had a lot of problems where users can't print. If I ...
0
votes
1answer
26 views

Group policy to auto-enable plug and play disk

Good afternoon, I have an additional disk which is attached to the VM, however every time the server is rebooted the disk shows up in device manager but is disabled "due to group policy" I can then ...
2
votes
1answer
58 views

Transition from GPO to GPP

I have a Windows network with a 2003 server as the PDC, and a 2008R2 server as a DC. We have used GPO sparsely when the majority of our workstations were WinXP, but now we have Windows 7 clients and ...
0
votes
1answer
54 views

GPO to configure Excel 2013?

Using Excel 2013 (Office 2013, 32-bit, per MS recommendation) on Windows 7 Professional, 64bit in a Server 2008R2 domain. When trying to open an Excel 2013 document, we're getting the error box: ...
0
votes
1answer
131 views

How can I get SeSecurityPrivilege enabled?

I'm trying to install a hotfix for SQL Server 2008 and failing on the Rule Check with "Setup account privileges" failed. I am running SQL Server 2008 Standard on Windows Server 2008 R2. Searching on ...
1
vote
0answers
47 views

Why is GPOTool not finding all my GPOs?

I have 91 group policy objects linked to my domain. When I run GPOTool it only finds and reports on 47. Why would the results be missing the rest? I am running Windows 2008 R2 on all 6 domain ...
3
votes
2answers
176 views

How can I create a windows shutdown script from powershell/command-line?

I've read the TechNet pages that describe using computer/user startup/shutdown scripts, and that's great, but I'd like to create those scripts via the command-line (and not have to click around in ...