Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

1
vote
1answer
21 views

Install RSAT by GPO on Win 8.1

I recently noticed that many Windows 8.1 Pro workstations do not have hidden shares, such as admin$ enabled. I need to have such shares available for remote app deployment. I noticed that RSAT ...
0
votes
0answers
14 views

Group Policy Preferences: Content Advisor disabled

We decommissioned our last Windows 2008 R2 server, and with it goes the ability to edit Internet Explorer Maintenance policy settings. Moving forward is Group Policy Preferences... so, I open up ...
2
votes
1answer
11 views

Apply Windows Firewall Rule GPO to Computer Group

One of our vendors is requesting that we provide Skype access, which uses specific ports and IPs. In order to facilitate the access, we need to deploy a set of Windows firewall rules. The target ...
1
vote
0answers
18 views

How to find which templates a GPO are using?

With a Windows 2012 R2 AD domain, we have a Central Store for group policy templates. Over time, a number of unnecessary templates were added to this store (most of them are not used) and it has ...
-1
votes
0answers
7 views

Why is my WSUS Server itself appearing in “Unassigned Computers” within the WSUS Console, even though it is in an Active Directory OU?

I have my WSUS linked to Active Directory via group policy. My WSUS server is contained within my "Servers" OU on Active Directory. I have multiple servers in this OU. However once I look at the WSUS ...
0
votes
1answer
22 views

Group Policy Objects Not Applied at Login via Wifi

I have some group policy objects not being applied at login. In event viewer the list of applicable group policy objects is none when logging in. However if I run "gpupdate /force" the group ...
0
votes
0answers
29 views

Firewall & DNS issue

Server: Windows Server 2008 R2 When firewall is running on the DC no machines can resolve DNS which is running on the DC. It also prevents AD user logins. It also prevents Group Policy update. ...
1
vote
1answer
26 views

Group Policy Map Drive to Display Name

I'm trying to create a Group Policy to map users Home Drives among others when they login. All the other drives are mapping fine, however because of the way in which the usernames are formatted, I've ...
0
votes
1answer
14 views

Cannot reproduce a GPO effect due to server version?

I am running a domain with functional level Windows Server 2008 R2, within this environment I have host machines that run Windows Server 2012 R2. This environment is running nothing custom everything ...
1
vote
1answer
46 views

Prevent servers from restarting after Automatic Updates

Work has started a new focus in the way that we look after clients, trying to be more proactive rather than just reacting to problems. Part of this focus is to make sure that servers are up to date. ...
2
votes
1answer
22 views

Group Policy settings for account policies disappeared

Looking for any ideas, we discovered that our group policies (default policy) was no longer applying our account policies (password age/complexity/history etc). Our DCs still had the local policy ...
0
votes
2answers
36 views

Prevent local admins from shutting down RDS server

One of the clients I manage runs an RDS environment on Windows Server 2008 R2 servers which users log onto to work. I need to prevent users allowing applications to restart these servers, the kicker ...
1
vote
2answers
42 views

gpo implementation windows server 2012r2

I am looking to Configuring Windows 7 Libraries using Group Policy Preferences "Disable Known Folders". gpupdate /force is completed successfully, therefore policy is not applied to client computer?? ...
0
votes
0answers
20 views

Software Restriction Policies restricting too much

I thought one of our previous administrators had already implemented Software Restriction Policies in GPO, but apparently not, so now I'm doing it. I've started with the very basics: ...
2
votes
0answers
33 views

Windows 8.1 clients querying wrong ldap SRV record?

I just spotted than my PC, running Windows 8.1 Pro on a Windows 2012 R2 domain has been querying DNS for SRV records that doesn't exist. All of the dcdiag /dnsall tests pass, but I wonder if there's ...
-1
votes
1answer
15 views

Enable GPO Administrative Templates System Node

How do I enable access to the system node in the group policy management editor in Server 2008 R2? It is available in the local group policy editor.
1
vote
0answers
42 views

Windows Server 2012 R2 Personalization Pane not showing color picker

We are running a RemoteApp server on 2012 R2 and want to let our users select a border color and font size. Other than that, we don't want them messing around in the control panel. At first we set ...
1
vote
0answers
32 views

Which policy hides all desktop items?

New accounts on my Windows Server 2012 look like this when logging in for the first time: As you can see, the desktop is empty. It is not, there are in fact files on the desktop, but they are not ...
0
votes
1answer
17 views

append another file path to environment variable

I need to update client PC's environment variable using Active Directory Group Policy. I have to append new part to at the end of each PC's "Path" variable. is there any way to append new part to ...
1
vote
0answers
29 views

Group Policy on Win8.1 in WAN Environment won't fully apply

Client computer is Win 8.1 with local DHCP server/subnet and network based VPN (WAN) to the main server. DNS is set to the main server, on which client is registering itself correctly. Client can ...
0
votes
0answers
23 views

GPO for Windows Firewall ( allow access to the primary IP address of the server)

The security team in my company scans all the servers in our environment. This is a monthly scan and they scan based on IP addresses. The issue is if a server has multiple IP addresses ( on the same ...
-1
votes
0answers
34 views

How to prevent users from deleting non-empty folders?

In our business, we have a number of file shares for each of the departments, and we largely leave it up to the different departments on how to manage those shares. However, we have a recurring ...
1
vote
2answers
65 views

Why is there no 'powershell' tab in the group policy scripts dialog?

I would like to run a powershell script at startup but there is no 'powershell' tab on the dialog box. I am running Windows Server 2008 64-bit. Thanks!
1
vote
0answers
116 views

Group Policy Application Install Windows 10

When trying to install a program from group policy on Windows 10 I am receiving an error in event viewer. "The assignment of application failed. The error was: %%65" I have found similar posts ...
1
vote
0answers
31 views

Group policy removes certificate from personal store

We have a Code Signing certificate that is issued by our enterprise CA. We are using a group policy to deploy this certificate to the Trusted Publishers store on our domain computers. This works as ...
1
vote
2answers
29 views

Is it possible to create a GPO which excludes servers?

Is it possible to create a Group Police Object which only applies to workstations. (Excludes Servers). If this is possible, can you please point me in the right direction to learning how to do it?
1
vote
0answers
38 views

GPOs not applying even after gpupdate /force…but after a couple of days, do apply

For some odd reason, after I run gpupdate /force on both server and client, the GPOs do not apply. gpresult /r on the client does show that it recieves it and it is being applied but it does not do ...
0
votes
0answers
22 views

Windows 2008 Group Policy Mapped Drives - Unmap

I seem to be missing something? I have a policy that seems to mapping drives, which I cannot find the policy, I've checked event viewer on local pc and cant see the policy. On AD "Group Policy ...
0
votes
0answers
43 views

How to give permissions to user (not admin) to access task manager WS 2012 R2?

I have a terminal server with ws 2012 R2. In it I have installed domain server and remote desktop services. I have administrator account, and other account without administrator rights called ...
0
votes
1answer
55 views

I see my clients in AD but not in WSUS

I set up a WSUS but dont see any clients in the Unassigned Computers group. I can find my clients in the ADAC, when I select myWSUS (local) > computers. My group policy management got a domain ...
1
vote
0answers
30 views

Allow Execution, Deny Interactive login by GPO

Problem: Accounts to log into work stations are locked down tightly and unable to run nessesary applications on windows 7 stations. Saving an admin accounts credentials to elevate access is currently ...
3
votes
0answers
46 views

Best practice for defining user “HOMEDRIVE” “HOMEPATH” “HOMESHARE”

Is it considered a best practice to map domain users' "HOME" environment variables to a network path? If so, why? By "HOME" variables, I am referring to: %HOMEDRIVE% %HOMEPATH% %HOMESHARE% This ...
1
vote
1answer
81 views

Windows Server 2012 Missing Internet Explorer Maintenance in Group Policy

I'm trying to set Internet Explorer as the default browser for all users on a clients terminal server. I was trying to do it following this guide however I couldn't get passed step 4 Right-click ...
7
votes
1answer
336 views

Is there any way to restrict user from changing file extensions in Windows XP, Vista, Windows 7?

For example, not allow users to rename abc.doc to abc.jpg? Is there any windows group policy for that? I am not asking file association restriction. If it really can't, is there any group policy to ...
3
votes
2answers
29 views

Use “Client Site Name” in Group Policy Preferences

In Active Directory, you can map IP addresses to Client Sites. ...and then you can map Group Policy objects to sites. Which is great and all, but I have a client that is growing rapidly, and ...
9
votes
2answers
148 views

Need explanation of why a particular GPO is applied to all domain computers

I'm a little stumped on this one so I'm hoping someone can enlighten me, since I consider myself a pretty knowledgeable GPO person. I have a login banner GPO that changes the Interactive Logon: ...
0
votes
1answer
56 views

Unable to disable Thumbs.db on Windows Server 2012 R2

I have enabled the Group Policy setting "Turn off caching of thumbnails in hidden thumbs.db files", but the Thumbs.db is still getting generated. I have also enabling the Group Policy setting "Turn ...
0
votes
0answers
16 views

softwarerestrictions gpo and appdata locallow

In order to prevent accidental running of virus payloads I've added several paths to the SoftwareRestrictions Group Policy (Server 2008 R2) on our Windows Domain. The rules work fine for ...
1
vote
1answer
57 views

How to exclude Outlook 2010 from Win7 roaming profiles

We have a user with sensitive emails that shouldn't be available when they login to a borrowed computer that is not their primary computer. We want to keep their Win7 roaming profile but exclude the ...
0
votes
1answer
44 views

Delete User profile older than X days globllay from all the COmputer within domian. Server 2008 R2

I need little help for deleting all the user profile form the Computer within my domain. if user is not logged in to particular computer for Than x Day in my case 60 Days. i have tried with default ...
1
vote
0answers
27 views

Group policy for Windows Update Server

I'm trying to setup a WSUS, having everything on the server installed, updates downloaded and accepted, etc... ready to go Problem is, when I go into group policy and try to change the 2 relevant ...
0
votes
1answer
25 views

Is there a way to manage machines which are off-domain centrally?

We have a number of three tier setups here which are mostly Windows Server 2008 boxes. They tend to consist of 1 web server, 1 application/web services server, 1 db server. As this is a three tier ...
0
votes
0answers
9 views

Group policy to Delete unauthorised software per logon

I have a group of on-site engineers (domain users but have local administrators rights) who are using laptops. They are required to install software occasionally when they travel, therefore I need a ...
2
votes
2answers
85 views

Force a specific theme for entire network using GPO

I am attempting to force a specific theme to all machines in my network. I know that the GPO "Load a Specific Theme" in: User Configuration/Administrative Templates/Control Panel/Personalization Is ...
0
votes
2answers
146 views

Disable Flash player in Chrome via group policy

How would I disable Flash player in Google Chrome browsers for my 50 AD computers via group policy or script 2008 R2? I have tried a couple of applications, PDQDeploy_6 among them, but this software ...
0
votes
2answers
38 views

Server 2008r2 File lost in Group Policy Redirection?

I keep an Access database in My Documents. We have a Group Policy redirecting documents to "\\server\userhomes\%username%\My Documents". I was experimenting with a Group Policy to redirect My ...
3
votes
1answer
53 views

Remove all sites from allowed list for plugin in IE via GP

I would like to remove all sites from the list of approved sites for a plugin in Internet Explorer as described here but I would like to do so via Group Policy. Is this possible? I know I can disable ...
1
vote
2answers
140 views

Windows Server 2008 Disabling Password Complexity Requirements

I'm using a Server 2008 R2 domain controller, trying to troubleshoot a bug where password complexity requirements seem to be enabled, even though they are disabled in group policy. Some notes: I am ...
1
vote
0answers
33 views

Override computer settings GPO when specific user is logged in [closed]

Let me explain what I mean... Example AD structure - a domain with two OUs: Domain example.com - Admins (Admin User Accounts) - Computers I have a computer settings GPO, which I apply to ...
1
vote
2answers
35 views

Is is possible to apply a Group Policy for the same user logged-on to different computers?

I have a user (say, domain.local\admin) in my domain. When he logons to vpn.domain.local in group Servers I want to apply a policy. When he logons to laptop.domain.local in group Destop Computers I ...