Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

1
vote
1answer
23 views

Scheduled task deployed via GP, that runs a powershell script on a network share by a AD service account

I've created a powershell script that runs Chocolatey updates as well as does some logging locally and on a network share. The script itself resides on a network share, and I'm hoping to be able to ...
0
votes
0answers
10 views

Windows Server 2008r2 User Mapped Drives disconnect when GPO Mapped Drives are in effectg

I am trying to find out if a user can map their own drives and have them stay in place when they are subject to GPO mapped drives. The GPO that is in place will Map a drive which is assigned Q and ...
1
vote
1answer
15 views

Homepage setting in Local Group Policy not working on first launch of session

I have a Windows 7 Professional x64 computer I am trying to "lock down" in the absence of Steady State. I have set the policy for the Internet Explorer homepage under Administrative Templates - ...
9
votes
2answers
904 views

Registry key / GPO to disable and block Windows 10 upgrade?

One of our remote Windows 7 Professional users just reported that he received an Upgrade Reservation Offer for Windows 10. It appears the Get Windows 10 "App" running in his system tray is legit. So ...
-1
votes
1answer
18 views

group policy preferences missing in windows 7

I have Windows 7 Professional 64-bit which is part of a workgroup network (no Windows server or Active Directory). I have an MMC console containing local group policies for Administrative and ...
2
votes
2answers
27 views

Active Directory - Make sure users who are never on premises receive AD policies on a regular basis

I have a few users in the field 100% of the time. I would like to have them authenticate to AD so that policies like Password changes and even maybe group policies are applied regularly. I want to ...
0
votes
0answers
11 views

Is there a way to obtain list of policies applied to built in accounts (e.g LocalSystem, IIS_USRS, etc.)

Is there a way to obtain list of policies applied to built in accounts (e.g LocalSystem, IIS_USRS, etc.)? I am working on a tool, which should monitor policies applied to specific set of users, ...
1
vote
2answers
44 views

Windows 8.1 locks account after 3 invalid attempts even if GP is not defined

I mistyped my password three times today, and my account became locked on my windows 8.1 pro workstation. I checked Resultant Set of Policies (rsop.msc) and all three relevant settings are "Not ...
1
vote
1answer
40 views

Group policy infrastructure failed due to network access is denied

A number of my servers are not able to sync into our WSUS server. On digging, we noticed a number of group policies are not being applied. On running rsop.msc, I get the following error message: ...
1
vote
3answers
55 views

Run a script when joining a domain

I have a Microsoft domain (mostly 2008r2\7). I looking for a way to run a script immediately after (the restart after) joining a domain (without requiring user login), and so far I've failed. Also, I ...
2
votes
0answers
28 views

Best approach to deploy DLL file updates to Win7 clients

We are in a Windows 7 / Server 2008 R2 domain environment. We have a .NET application with lots of internal libraries for different UI and other features. We deploy it from a share where a directory ...
2
votes
0answers
13 views

Identify non-domain remote clients with Item-Level targeting

I would like to apply a group policy preference setting (to deploy a shared printer) only if a user is connecting to a RDSH server from a non domain-joined client computer. Many of these clients will ...
0
votes
1answer
36 views

mmc.exe blocked by group policy

I am changing some permissions on a small work network that I've been playing in. Domain admin and administrator permissions were so tied up that they essentially were the same account. After getting ...
1
vote
2answers
34 views

Deploying Client Software via GPO - Will server reboot affect?

I have deployed a MSI file via a GPO to one of my AD OUs. For an MSI to install via the GPO, I know the clients need to be rebooted. I have planned a reboot for the clients, but I was also planning ...
4
votes
1answer
32 views

GPMC missing Hide/Show links

We currently have a single 2012 R2 server in our domain. As we're rolling out Windows 8+ machines I like using it for Group Policy Management. For some reason the Group Policy Management Console on ...
1
vote
0answers
24 views

Windows 7 Pro 64-bit Standard User Default Profile: Local Group Policy or Sysprep?

I have a Windows 7 Pro 64-bit machine that will be hosting three Windows 7 Pro 64-bit VMware Player 7 virtual machines. I have the first VM completed and am about to create the first standard user on ...
2
votes
1answer
33 views

Network drives not mapping correctly with group policy

One of my clients is having random issues with the mapping of network drives. Users get mapped drives from group policy based on the security groups they are in. An example issue with one user: ...
0
votes
1answer
7 views

Identifying AGPM changes not yet in production

How do I find AGPM checked in changes that haven't yet been pushed to production? It seems like this should be easy, but I haven't found documentation anywhere. I was originally thinking that the ...
3
votes
3answers
118 views

WMI Processor Filtering Preventing GPO Software Installation?

I've been battling this issue for a few days. I've been trying to deploy Symantec Endpoint Protection for a few days. I created a GPO and linked it to a WMI Filter so that it would only target the ...
2
votes
1answer
44 views

Group Policy to disable Thumbs.db caching Server 2012 and Windows 7 clients

We are trying to push out GPO to Windows 7 clients to disable Thumbs.db caching. The setting Turn off the caching of thumbnails in hidden thumbs.db files is found here: User Configuration > ...
0
votes
1answer
41 views

Trying to deploy Adobe Reader XI via GPO on Server 2012 R2 and Windows 7

this is what I did: Downloaded .exe from Adobe-ftp successfully extracted with "AdbeRdr11010_de_DE.exe" -nos_ne 'slipstreamed' the .msp into the .msi with klaus-hartnegg's tool made a .mst with ...
2
votes
3answers
39 views

How to use Group Policy to force user compliance

I need recommendations for using group policy to restrict a user's computer/network access until the user takes an action, in this case acknowledging he has read an acceptable use policy. The user ...
2
votes
1answer
34 views

Group Policy and Internet Explorer's Site to Zone assignment issues?

We are using GPO to apply Site to Zone assignements for our users so that we can add some specific addresses into their Internet Explorer's Intranet and Trusted zones. Using the Site to Zone GPO ...
4
votes
2answers
44 views

Adding registry values to all users on domain

I have four registry values I would like to add to both HKCU and HKLM for all users connected to a network domain. Currently we are manually running a batch file on each of the computers when ...
1
vote
1answer
51 views

Mass updating Group Policy, may be with scripts

Sorry for long preamble and thanks in advance to one who could read it all. I have about 60 network printers. Some are in HQ, some are in distant locations (from 1 to 300 km away of HQ). Some ...
2
votes
0answers
42 views

Associate user picture to domain account

I want to assign users a picture (o let them assign their own picture) to their user domain account and wherever they log in, that picture should appear as well. How can I do this using group policy? ...
0
votes
1answer
30 views

How to change Account Lockout Threshold when the path cannot be found

I am trying to change the account lockout threshold for all the users on our domain. The threshold should be three, but there are users who get locked out after one mistyped password, and others who ...
0
votes
2answers
60 views

How do I schedule a batch file to run on startup or shutdown?

I have 2 batch files that send emails intended to notify of a server shutdown or startup. The batch files call an exe with a single argument, the message to be sent. The exe comes from a vb.net ...
2
votes
2answers
41 views

Can I apply GPO settings to 2008 R2 member servers if I have a 2003 domain functional level?

I was asked to help out in a problem, there is a domain still operating at a 2003 functional level, there are 2008 R2 member servers in this domain and we need to know if there is anything we have to ...
3
votes
1answer
50 views

Create a security group that can promote a member server to domain controller without being in the domain admins group

I am trying to figure out a way to delegate permission to a security group to add domain controllers to a domain. The catch is I do not want to add them to the Domain Admin or Enterprise Admin ...
-6
votes
2answers
45 views

How to protect Windows Server 2008 r2 from persons, which have physical access to computer? [closed]

One server is available for other users, and we think that someone may steal passwords from it. I can not set a password on boot, because sometimes there is electricity failure, and UPS can hold it ...
1
vote
2answers
61 views

IE (10) blocked this website from displaying content with security certificate errors - show content

Currently having an issue with a client that is getting the following error when loading a certain website: I have added the site to trusted sites and enabled 'display mixed content' through GPO. ...
-1
votes
1answer
24 views

GPO to lock computer when idle effects also when out of the domain [closed]

I applied a GPO to lock screens when idle after 5 minutes. Funny thing is, it affects computers also when not connected to the domain (at home for instance). Any idea how to avoid this? Thanks
1
vote
1answer
34 views

IE connection setting: Automatic configuration vs. manual proxy server - precedence?

When I choose Use automatic configuration script and point it to our proxies pac-file, will the proxy setting on the bottom become inactive?
1
vote
0answers
35 views

How to use Group Policy to control local administration access (LOCAL ONLY)

At the company I work for, we have about 75 computer users. We have a Microsoft Domain Controller in our server environment (MS Server 2012) with Active Directory. When users need to install ...
2
votes
1answer
57 views

Enforce minimum wait time for network connection

We are currently using multiple HP ProCurve V1810-48G switches in our environment which we believe are causing issue with GPO based software installations. This problem surfaced after installing SSD ...
0
votes
2answers
54 views

Enable Windows Time Service on Secondary Domain Controller

We have an interesting scenario at my workplace. Our primary domain controller started to fail, so we installed a secondary domain controller to allow people to login when the primary would fail. ...
0
votes
2answers
52 views

Group Policy | New Password Policy for a few users

We have a few users that are traveling and I would like their passwords to be changed more often than the rest of the folks in the office. How should I go about creating a new policy with their ...
2
votes
1answer
35 views

CIS benchmark differences between 2008R2 to 2012R2

I'm looking at hardening our golden image inline with the CIS benchmarks for Windows Server 2008R2 and 2012R2. But, after looking at the two benchmark documents(registration required - sorry) from ...
0
votes
0answers
11 views

Install program to single RDS user

I'm looking to install an application to a single user in a RDS environment without installing it to the other users. The user is an Admin. I have very little experience with GPO but imagine it's ...
0
votes
0answers
59 views

replace/update user32.dll.mui in System32 through GPO doesn't work

I edited the user32.dll.mui in system32 to display our company name as a watermark. I have already tried it on my PC manually and its working, now i just need to implement it to over 100 PC clients ...
1
vote
0answers
31 views

Disable Start menu new Items highlighting by GPO in Windows 2012 R2

I need to disable the new items highlighting (New items are marked with "New") on Windows 2012 R2 (remote desktops). I tried setting the registry value ...
4
votes
1answer
138 views

How to let non-admins manage selected domain groups' membership?

I'm on Windows Server 2012, Active Directory is on and working. All the project we manage have 2 dedicated groups, one for managers with access to all related files (including invoices, timetables and ...
0
votes
1answer
33 views

RDS Farm setting applied through GPO causing connection issues

I'm having a strange issue with some RDS GPO's. Since automating the RDS server build process through SCCM I've moved the RDS farm / connection broker settings to a GPO. This works fine, once the ...
1
vote
0answers
57 views

Firewall rules to allow Hyper V Manager to connect to Hyper V Server 2012 R2?

I moved a Hyper V host into our Servers OU in Active Directory, which has some group policies linked. Now I am unable to connect to the Hyper V host with Hyper V manager. It was working fine before ...
0
votes
0answers
32 views

Editing the default meeting time

Does anyone know how to edit the default meeting time via GP for Office 2010 ? I've looked everywhere for this setting and cannot find it on any GP Admin Templates, we are looking to make the default ...
0
votes
0answers
23 views

List of new and changed group policy settings between 2008 and R2

We recently upgraded our DCs to 2008 R2 from non-R2 2008 servers. Since doing that our KCD authentication has been broken. I assume this is some new or changed group policy object that has been ...
0
votes
1answer
51 views

GPO Office Installation - Script runs on PC, How could I get it to appear when a user logs in?

I currently have a GPO created that installs Office 2010 for users during startup of the PC. This script is set to run for specific PCs. Is there any way that I can get the script to appear and run ...
3
votes
1answer
36 views

What happens to non-domain controller workstations/servers when user rights assignment policies are removed/no longer apply?

I'm trying to do a good ol' fashioned Group Policy Object clean-up job on our domain controller that was upgraded from Windows 2000 (Small Business I think) to Windows Server 2008R2. In my company's ...
1
vote
0answers
48 views

Getting Group Policy identifier in PowerShell

Some of our computers have a random "local group policy" being set that forces them to check a nonexistent intranet server for Windows Updates instead of using WU over the internet as they should. ...