Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
0answers
17 views

What is the best practice for employee users and their applications when they are replaced?

Here's my small office scenario (for simplicity sake): Windows Server 2012 R2 Essentials (Active Directory) with (4) workstations. (1) for each employee user. PLUS (1) production workstation that ...
0
votes
0answers
7 views

All Programs button via Group Policy

This article describes a method to get an "All Programs" button on the Windows 8.1 taskbar, but I would like to know how to do something like this via Group Policy so I can push it out to all of our ...
2
votes
1answer
20 views

Reversible Encryption - Not Defined but Showing as Enabled?

I'm reviewing our complex password policy that was setup by a previous admin and I'm trying to gain some clarification on the setting for Reversible Encryption. In our organization, reversible ...
0
votes
1answer
33 views

Is it mandatory to use Group Policy to install or deploy applications?

Using Windows Server 2012 R2 Essentials on 1 server and about 5 workstations, do I have to use GPO to "deploy" the applications? i.e. CorelDraw, Adobe CS6, Office, Acrobat, etc. Or can I just go to ...
0
votes
0answers
9 views

Enable ping across domain

I want to enable the "File and Printer Sharing (Echo Request)" firewall rules in Windows Firewall with Advanced Security for all servers in the domain. How do I do this with Group Policy?
1
vote
1answer
16 views

Active Directory Group Policy - Default Domain Policy CSE GUID

The active directory attribute: "gPCUserExtensionNames" contain a CSE GUID and a Tool Extension GUID string value in order pass information for GPO behavior. I have found in the Default Domain ...
2
votes
2answers
85 views

compatibility mode server 2008 R2 higher than IE 7?

I have 4 terminal servers, all running server 2008 R2, that need to run a few websites in compatibility mode. When I create the GPO, all I see is IE 7 compatibility mode... This works for all the ...
0
votes
1answer
28 views

Local group policy not applying (gpresult says its empty, but it's not)

We are running a strange AD constellation here, where the same logon script is defined within the local group policy on each server (don't ask me for the reason, it wasn't my idea). Then an (AD-) ...
0
votes
1answer
8 views

What is the syntax for the SNMP trap configuration group policy?

I want to configure SNMP traps through group policy, but the trap configuration dialog is just a plain list of strings. What do I have to enter here to configure the community name and trap server? ...
1
vote
1answer
21 views

Implementing A Custom Lock Screen Image Via GPO

I have a Domain running at the Windows Server 2008 functional level, which cannot be upgraded currently due to logistics reasons. I have a group of Student-access clients all running Windows Server ...
0
votes
1answer
21 views

Printers already installed but would like to block spooler to prevent future print jobs

I have tens of client machines over domain with Windows 7/8/8.1 installed and almost all machines are connected to different printers. Only one main printer is listed in AD which can be easily ...
0
votes
1answer
30 views

Implementing Custom Lock Screen image

I have a Domain running at the Windows Server 2008 functional level, which cannot be upgraded currently due to logistics reasons. I have a group of Student-access clients all running Windows Server ...
3
votes
2answers
54 views

Deploying printers to specific users via Group Policy

I have noticed two different ways of deploying printers to specific user with Group Policy in Windows Server 2012. The first method is by creating separate GPOs for each group, and the second method ...
2
votes
1answer
28 views

Checking Who Applied GPO

I know how to check what GPOs are applied on systems and users, but I'm wondering, is there a way to check who applied a specific GPO?
-1
votes
1answer
21 views

Apply group policy based on RDP Client O.S

I created a group policy to change the default shell, so that handheld PC can RDP to a Terminal Server and have the lob application kiosked. This work fine, but, sometime, is necessary to RDP with the ...
2
votes
1answer
64 views

GPO with SAMBA as DC

I am working on a network of 500 Windows workstations with Linux servers. SAMBA 4 is in use as the domain controller. Users can move between workstations, and as a results the contents of their ...
0
votes
0answers
14 views

Force a GPO to run synchronously on Windows Server 2008

We have authored a powershell script which carries out a number of installation and configuration steps in order to turn a bare Windows Server 2008 machine into a development workstation. The script ...
0
votes
1answer
32 views

How to disable Microsoft Office's first run wizard

I have a Windows 7 Professional computer in a workgroup. This computer has a mandatory user profile and uses Local GPO to configure the profile on each login. My issue is that I have recently ...
1
vote
0answers
54 views

How to use Local Group Policy on Windows 7 to allow or block URL’s for chrome and firefox?

I am a regular user not system admin. I need the help to use local group policy to allow to open one domain. For example, www.xxxx.com to open on the chrome or firefox (third-party browser), and make ...
0
votes
1answer
13 views

I’m having fundamental issue with Computer Group Policy Objects working but not showing as applied in gpresult

I created a Computer GPO that tells the workstations to make the monitor sleep in two minutes (just for testing.) I applied the GPO to the Computers OU. It works fine… I manually change the sleep ...
3
votes
1answer
33 views

Change an Applications and Services Logs log path using GPO

I am wanting to change the AppLocker Log path by a GPO. The specific log is found at Event Viewer \ Applications and Services Logs \ Microsoft \ Windows \ AppLocker \ EXE and DLL. I know you can ...
2
votes
1answer
25 views

I’m unable to get GPO Security Filtering to work for users

I’m unable to get GPO Security Filtering to work for users (called TestUser) and custom security groups (called TestGroup.) It does work for Authenticated Users or if I add the Computer. I did a ...
1
vote
1answer
23 views

Windows Server 2008: Group Policies Don't Apply Following WDS Install

We use WDS images combined with GPOs to automate the installation of our desktops. This all works great, except that when a WDS deployment to a new/existing PC is completed, there's a fifty/fifty ...
2
votes
1answer
32 views

Is it possible to configure domain joined computers via GP or otherwise to automatically register for the free Windows 10 upgrade

Is it possible to configure domain joined computers via GP or otherwise to automatically register for the free Windows 10 upgrade, but also prevent the upgrade from automatically installing? In other ...
0
votes
1answer
18 views

Remove drive given by gpo

I have a couple of GPOs that deliver out mapped drives through security groups. But when I remove someone from the group, the drive is still shown. The user don't have access to it, but it is still ...
1
vote
1answer
65 views

How to apply proxy settings per computer for only a specific computer group?

I want to apply windows proxy settings on a computer/location/OU basis using group policy (IE version for the moment is 8, but will be upgrading sooner or later). Presently, I have user objects and ...
0
votes
0answers
6 views

Printing preferences item level tagerting not working

I am trying to get Item level Targeting to work in Printing Preferences. This is on the Computer side. I have the security group set in ILT. On the object management screen, the Security Filtering ...
0
votes
2answers
57 views

How to assign by GPO a file/shortcut to desktop for both specific user and computer?

I have to put on my domain controler's desktops only a custom MMC for a specific user only. Tought the best course of action was: *Default_DC_OU containing DCs, applying the GPO for shortcut to MMC. ...
0
votes
0answers
39 views

0x80070bc4 No printers were found from Group Policy

We have several printers being deployed via Group Policy. We are constantly getting: '0x80070bc4 No printers were found.' error message on all of our printers every time a user logs into the system. ...
1
vote
1answer
78 views

Scheduled task deployed via GP, that runs a powershell script on a network share by a AD service account

I've created a powershell script that runs Chocolatey updates as well as does some logging locally and on a network share. The script itself resides on a network share, and I'm hoping to be able to ...
0
votes
0answers
23 views

Windows Server 2008r2 User Mapped Drives disconnect when GPO Mapped Drives are in effectg

I am trying to find out if a user can map their own drives and have them stay in place when they are subject to GPO mapped drives. The GPO that is in place will Map a drive which is assigned Q and ...
1
vote
1answer
31 views

Homepage setting in Local Group Policy not working on first launch of session

I have a Windows 7 Professional x64 computer I am trying to "lock down" in the absence of Steady State. I have set the policy for the Internet Explorer homepage under Administrative Templates - ...
13
votes
2answers
5k views

Registry key / GPO to disable and block Windows 10 upgrade?

One of our remote Windows 7 Professional users just reported that he received an Upgrade Reservation Offer for Windows 10. It appears the Get Windows 10 "App" running in his system tray is legit. So ...
-2
votes
1answer
30 views

group policy preferences missing in windows 7 [closed]

I have Windows 7 Professional 64-bit which is part of a workgroup network (no Windows server or Active Directory). I have an MMC console containing local group policies for Administrative and ...
3
votes
2answers
49 views

Active Directory - Make sure users who are never on premises receive AD policies on a regular basis

I have a few users in the field 100% of the time. I would like to have them authenticate to AD so that policies like Password changes and even maybe group policies are applied regularly. I want to ...
0
votes
0answers
13 views

Is there a way to obtain list of policies applied to built in accounts (e.g LocalSystem, IIS_USRS, etc.)

Is there a way to obtain list of policies applied to built in accounts (e.g LocalSystem, IIS_USRS, etc.)? I am working on a tool, which should monitor policies applied to specific set of users, ...
1
vote
2answers
61 views

Windows 8.1 locks account after 3 invalid attempts even if GP is not defined

I mistyped my password three times today, and my account became locked on my windows 8.1 pro workstation. I checked Resultant Set of Policies (rsop.msc) and all three relevant settings are "Not ...
2
votes
1answer
73 views

Group policy infrastructure failed due to network access is denied

A number of my servers are not able to sync into our WSUS server. On digging, we noticed a number of group policies are not being applied. On running rsop.msc, I get the following error message: ...
1
vote
3answers
69 views

Run a script when joining a domain

I have a Microsoft domain (mostly 2008r2\7). I looking for a way to run a script immediately after (the restart after) joining a domain (without requiring user login), and so far I've failed. Also, I ...
2
votes
0answers
39 views

Best approach to deploy DLL file updates to Win7 clients

We are in a Windows 7 / Server 2008 R2 domain environment. We have a .NET application with lots of internal libraries for different UI and other features. We deploy it from a share where a directory ...
2
votes
0answers
15 views

Identify non-domain remote clients with Item-Level targeting

I would like to apply a group policy preference setting (to deploy a shared printer) only if a user is connecting to a RDSH server from a non domain-joined client computer. Many of these clients will ...
0
votes
1answer
49 views

mmc.exe blocked by group policy

I am changing some permissions on a small work network that I've been playing in. Domain admin and administrator permissions were so tied up that they essentially were the same account. After getting ...
2
votes
2answers
42 views

Deploying Client Software via GPO - Will server reboot affect?

I have deployed a MSI file via a GPO to one of my AD OUs. For an MSI to install via the GPO, I know the clients need to be rebooted. I have planned a reboot for the clients, but I was also planning ...
5
votes
1answer
42 views

GPMC missing Hide/Show links

We currently have a single 2012 R2 server in our domain. As we're rolling out Windows 8+ machines I like using it for Group Policy Management. For some reason the Group Policy Management Console on ...
1
vote
0answers
54 views

Windows 7 Pro 64-bit Standard User Default Profile: Local Group Policy or Sysprep?

I have a Windows 7 Pro 64-bit machine that will be hosting three Windows 7 Pro 64-bit VMware Player 7 virtual machines. I have the first VM completed and am about to create the first standard user on ...
2
votes
1answer
58 views

Network drives not mapping correctly with group policy

One of my clients is having random issues with the mapping of network drives. Users get mapped drives from group policy based on the security groups they are in. An example issue with one user: ...
0
votes
1answer
12 views

Identifying AGPM changes not yet in production

How do I find AGPM checked in changes that haven't yet been pushed to production? It seems like this should be easy, but I haven't found documentation anywhere. I was originally thinking that the ...
3
votes
3answers
129 views

WMI Processor Filtering Preventing GPO Software Installation?

I've been battling this issue for a few days. I've been trying to deploy Symantec Endpoint Protection for a few days. I created a GPO and linked it to a WMI Filter so that it would only target the ...
2
votes
1answer
90 views

Group Policy to disable Thumbs.db caching Server 2012 and Windows 7 clients

We are trying to push out GPO to Windows 7 clients to disable Thumbs.db caching. The setting Turn off the caching of thumbnails in hidden thumbs.db files is found here: User Configuration > ...
1
vote
1answer
61 views

Trying to deploy Adobe Reader XI via GPO on Server 2012 R2 and Windows 7

this is what I did: Downloaded .exe from Adobe-ftp successfully extracted with "AdbeRdr11010_de_DE.exe" -nos_ne 'slipstreamed' the .msp into the .msi with klaus-hartnegg's tool made a .mst with ...