Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
0answers
18 views

GPOs not applying even after gpupdate /force…but after a couple of days, do apply

For some odd reason, after I run gpupdate /force on both server and client, the GPOs do not apply. gpresult /r on the client does show that it recieves it and it is being applied but it does not do ...
0
votes
0answers
19 views

Windows 2008 Group Policy Mapped Drives - Unmap

I seem to be missing something? I have a policy that seems to mapping drives, which I cannot find the policy, I've checked event viewer on local pc and cant see the policy. On AD "Group Policy ...
0
votes
0answers
20 views

How to give permissions to user (not admin) to access task manager WS 2012 R2?

I have a terminal server with ws 2012 R2. In it I have installed domain server and remote desktop services. I have administrator account, and other account without administrator rights called ...
0
votes
1answer
26 views

I see my clients in AD but not in WSUS

I set up a WSUS but dont see any clients in the Unassigned Computers group. I can find my clients in the ADAC, when I select myWSUS (local) > computers. My group policy management got a domain ...
1
vote
0answers
20 views

Allow Execution, Deny Interactive login by GPO

Problem: Accounts to log into work stations are locked down tightly and unable to run nessesary applications on windows 7 stations. Saving an admin accounts credentials to elevate access is currently ...
3
votes
0answers
32 views

Best practice for defining user “HOMEDRIVE” “HOMEPATH” “HOMESHARE”

Is it considered a best practice to map domain users' "HOME" environment variables to a network path? If so, why? By "HOME" variables, I am referring to: %HOMEDRIVE% %HOMEPATH% %HOMESHARE% This ...
1
vote
1answer
20 views

Windows Server 2012 Missing Internet Explorer Maintenance in Group Policy

I'm trying to set Internet Explorer as the default browser for all users on a clients terminal server. I was trying to do it following this guide however I couldn't get passed step 4 Right-click ...
8
votes
1answer
295 views

Is there any way to restrict user from changing file extensions in Windows XP, Vista, Windows 7?

For example, not allow users to rename abc.doc to abc.jpg? Is there any windows group policy for that? I am not asking file association restriction. If it really can't, is there any group policy to ...
3
votes
1answer
23 views

Use “Client Site Name” in Group Policy Preferences

In Active Directory, you can map IP addresses to Client Sites. ...and then you can map Group Policy objects to sites. Which is great and all, but I have a client that is growing rapidly, and ...
8
votes
2answers
126 views

Need explanation of why a particular GPO is applied to all domain computers

I'm a little stumped on this one so I'm hoping someone can enlighten me, since I consider myself a pretty knowledgeable GPO person. I have a login banner GPO that changes the Interactive Logon: ...
0
votes
1answer
26 views

Unable to disable Thumbs.db on Windows Server 2012 R2

I have enabled the Group Policy setting "Turn off caching of thumbnails in hidden thumbs.db files", but the Thumbs.db is still getting generated. I have also enabling the Group Policy setting "Turn ...
0
votes
0answers
12 views

softwarerestrictions gpo and appdata locallow

In order to prevent accidental running of virus payloads I've added several paths to the SoftwareRestrictions Group Policy (Server 2008 R2) on our Windows Domain. The rules work fine for ...
1
vote
1answer
44 views

How to exclude Outlook 2010 from Win7 roaming profiles

We have a user with sensitive emails that shouldn't be available when they login to a borrowed computer that is not their primary computer. We want to keep their Win7 roaming profile but exclude the ...
0
votes
1answer
29 views

Delete User profile older than X days globllay from all the COmputer within domian. Server 2008 R2

I need little help for deleting all the user profile form the Computer within my domain. if user is not logged in to particular computer for Than x Day in my case 60 Days. i have tried with default ...
1
vote
0answers
22 views

Group policy for Windows Update Server

I'm trying to setup a WSUS, having everything on the server installed, updates downloaded and accepted, etc... ready to go Problem is, when I go into group policy and try to change the 2 relevant ...
0
votes
1answer
24 views

Is there a way to manage machines which are off-domain centrally?

We have a number of three tier setups here which are mostly Windows Server 2008 boxes. They tend to consist of 1 web server, 1 application/web services server, 1 db server. As this is a three tier ...
0
votes
0answers
8 views

Group policy to Delete unauthorised software per logon

I have a group of on-site engineers (domain users but have local administrators rights) who are using laptops. They are required to install software occasionally when they travel, therefore I need a ...
2
votes
2answers
39 views

Force a specific theme for entire network using GPO

I am attempting to force a specific theme to all machines in my network. I know that the GPO "Load a Specific Theme" in: User Configuration/Administrative Templates/Control Panel/Personalization Is ...
0
votes
2answers
76 views

Disable Flash player in Chrome via group policy

How would I disable Flash player in Google Chrome browsers for my 50 AD computers via group policy or script 2008 R2? I have tried a couple of applications, PDQDeploy_6 among them, but this software ...
0
votes
2answers
35 views

Server 2008r2 File lost in Group Policy Redirection?

I keep an Access database in My Documents. We have a Group Policy redirecting documents to "\\server\userhomes\%username%\My Documents". I was experimenting with a Group Policy to redirect My ...
3
votes
1answer
35 views

Remove all sites from allowed list for plugin in IE via GP

I would like to remove all sites from the list of approved sites for a plugin in Internet Explorer as described here but I would like to do so via Group Policy. Is this possible? I know I can disable ...
1
vote
2answers
126 views

Windows Server 2008 Disabling Password Complexity Requirements

I'm using a Server 2008 R2 domain controller, trying to troubleshoot a bug where password complexity requirements seem to be enabled, even though they are disabled in group policy. Some notes: I am ...
1
vote
0answers
25 views

Override computer settings GPO when specific user is logged in [closed]

Let me explain what I mean... Example AD structure - a domain with two OUs: Domain example.com - Admins (Admin User Accounts) - Computers I have a computer settings GPO, which I apply to ...
1
vote
2answers
31 views

Is is possible to apply a Group Policy for the same user logged-on to different computers?

I have a user (say, domain.local\admin) in my domain. When he logons to vpn.domain.local in group Servers I want to apply a policy. When he logons to laptop.domain.local in group Destop Computers I ...
-1
votes
0answers
17 views

Can LAN Manager Authentication Level in Group Policy be set differently for a wireless connection?

I seem to be seeing the following behavior and wondering how it is possible: A client machine (external) generally has no trouble connecting to hosts in our RDS-based environment. When the same ...
0
votes
1answer
31 views

Can you install a service through GPO?

I know it's possible to run and stop services that are already installed, but is it possible to install a brand new service with a given executable?
1
vote
0answers
41 views

Set Google as default IE search engine thru group policy?

I want to set Google as the default search engine for all my users that use IE. All PCs are updated so they use the latest version of IE available to that operating system (all are at least Windows ...
1
vote
2answers
38 views

Is it possible to enforce local GPO over the domain?

I want to enforce local GPO settings on specific servers so that the domain GPO does not overwrite them. These systems were hardened specifically, but due to way too many issues to list, we cannot ...
-2
votes
0answers
28 views

How to deploy retail versus corporate licensed applications?

From what I understand, versions of applications that are corporate or have corporate or volume licensing can be deployed easily. But I have some retail licensed applications that need to be deployed ...
1
vote
1answer
23 views

GPO Outlook 2013 to set non-cached mode is preventing Outlook from opening

I have a GPO applied to my conference room computers that forces Outlook to use non-cached mode (for quicker opening and to save HDD space by preventing everyone's OST from being created). When I try ...
0
votes
1answer
45 views

Best way to troubleshoot a GPO that is being applied but not working?

We are using GPO to push out proxy settings and it is applying and working for most users. There is a small group of users, admittedly in a separate OU, that it's just not working for. I can do a ...
1
vote
1answer
25 views

Add a scheduled task to the GPO progrematically

The assumption is I'm on a DC with admin rights. I want to add an immediate task to the GPO to run a .exe on the workstations, but I want to do it without the GUI i.e. quietly. Is there a way to do ...
2
votes
2answers
36 views

Multiple GPOs with Security Filtering or Single GPO with Item Level Targeting?

I have multiple GPOs for User Experience stuff (Eg: Shortcuts as GPP in User Configuration) which impacts a number of OUs and their users. It's currently one GPO per 'item' (Eg: shortcut, file) with a ...
0
votes
0answers
35 views

What is the best practice for employee users and their applications when they are replaced? [duplicate]

Here's my small office scenario (for simplicity sake): Windows Server 2012 R2 Essentials (Active Directory) with (4) workstations. (1) for each employee user. PLUS (1) production workstation that ...
-1
votes
0answers
14 views

All Programs button via Group Policy

This article describes a method to get an "All Programs" button on the Windows 8.1 taskbar, but I would like to know how to do something like this via Group Policy so I can push it out to all of our ...
2
votes
1answer
35 views

Reversible Encryption - Not Defined but Showing as Enabled?

I'm reviewing our complex password policy that was setup by a previous admin and I'm trying to gain some clarification on the setting for Reversible Encryption. In our organization, reversible ...
1
vote
1answer
66 views

Is it mandatory to use Group Policy to install or deploy applications?

Using Windows Server 2012 R2 Essentials on 1 server and about 5 workstations, do I have to use GPO to "deploy" the applications? i.e. CorelDraw, Adobe CS6, Office, Acrobat, etc. Or can I just go to ...
0
votes
0answers
13 views

Enable ping across domain

I want to enable the "File and Printer Sharing (Echo Request)" firewall rules in Windows Firewall with Advanced Security for all servers in the domain. How do I do this with Group Policy?
1
vote
1answer
22 views

Active Directory Group Policy - Default Domain Policy CSE GUID [closed]

The active directory attribute: "gPCUserExtensionNames" contain a CSE GUID and a Tool Extension GUID string value in order pass information for GPO behavior. I have found in the Default Domain ...
2
votes
2answers
129 views

compatibility mode server 2008 R2 higher than IE 7?

I have 4 terminal servers, all running server 2008 R2, that need to run a few websites in compatibility mode. When I create the GPO, all I see is IE 7 compatibility mode... This works for all the ...
0
votes
0answers
13 views

Give a right to domain user to manage his system's firewall

How can a we give a right to domain user to manage his system's firewall? We're having a Windows setup, and using Windows Server 2012 for managing domain group policies.
0
votes
1answer
50 views

Local group policy not applying (gpresult says its empty, but it's not)

We are running a strange AD constellation here, where the same logon script is defined within the local group policy on each server (don't ask me for the reason, it wasn't my idea). Then an (AD-) ...
0
votes
1answer
10 views

What is the syntax for the SNMP trap configuration group policy?

I want to configure SNMP traps through group policy, but the trap configuration dialog is just a plain list of strings. What do I have to enter here to configure the community name and trap server? ...
1
vote
1answer
41 views

Implementing A Custom Lock Screen Image Via GPO

I have a Domain running at the Windows Server 2008 functional level, which cannot be upgraded currently due to logistics reasons. I have a group of Student-access clients all running Windows Server ...
0
votes
1answer
23 views

Printers already installed but would like to block spooler to prevent future print jobs

I have tens of client machines over domain with Windows 7/8/8.1 installed and almost all machines are connected to different printers. Only one main printer is listed in AD which can be easily ...
0
votes
1answer
33 views

Implementing Custom Lock Screen image

I have a Domain running at the Windows Server 2008 functional level, which cannot be upgraded currently due to logistics reasons. I have a group of Student-access clients all running Windows Server ...
3
votes
2answers
69 views

Deploying printers to specific users via Group Policy

I have noticed two different ways of deploying printers to specific user with Group Policy in Windows Server 2012. The first method is by creating separate GPOs for each group, and the second method ...
2
votes
1answer
29 views

Checking Who Applied GPO

I know how to check what GPOs are applied on systems and users, but I'm wondering, is there a way to check who applied a specific GPO?
-1
votes
1answer
25 views

Apply group policy based on RDP Client O.S

I created a group policy to change the default shell, so that handheld PC can RDP to a Terminal Server and have the lob application kiosked. This work fine, but, sometime, is necessary to RDP with the ...
2
votes
1answer
93 views

GPO with SAMBA as DC

I am working on a network of 500 Windows workstations with Linux servers. SAMBA 4 is in use as the domain controller. Users can move between workstations, and as a results the contents of their ...