Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
0answers
35 views

Name Resolution failure on the current domain controller

I'm using windows server 2008 R2. One day my server got issue with Group Policy. Here is the log in event log: The processing of Group Policy failed. Windows could not resolve the computer name. ...
3
votes
1answer
18 views

Windows 7: Deploying Printer Settings without a Print Server

I am a part-time Windows 7 administrator in an office with about 10 PCs and a standalone networked printer... No Windows print server, though we do have an Active Directory domain. So I have been ...
1
vote
0answers
19 views

Can't access share sometimes and some strange performance issues

I'm getting error 0x80070043 "The network name cannot be found" when accessing \\dc01 (the root), but can access shares via \\dc01\share. When I get that error I also didn't get the network drive on ...
4
votes
2answers
34 views

BITS policies to limit bandwitdth usage is not taking effect

We have a fleet of roughly 1300 Windows 7 SP1 clients who use a centralized WSUS server to download updates from. We've implemented the following BITS policy to limit the bandwidth during working ...
3
votes
3answers
79 views

How do Administrative Templates (ADMX files) work?

I know basically nothing about Group Policy, other than that I've occasionally edited some settings using Local Group Policy Editor on my local Windows machine. I do have experience with applying ...
0
votes
1answer
35 views

Can't store TPM information in AD

I am attempting to use GP to store TPM information in AD. I have verified that the schema contains the proper object property, and verified that the property and the ACE is present on the given ...
1
vote
1answer
17 views

Group Policy WMI Filter to Check if Windows Feature is Installed

The following returns true for servers without the Server GUI installed: WMIC PATH Win32_OptionalFeature WHERE "Caption = 'Microsoft-Windows-Server-Gui-Shell-Package-DisplayName' AND InstallState = ...
0
votes
1answer
67 views

GPO's filtered out - wrong domain name reported by BGinfo

I am trying to locate a group policy deployment issue I have. The problem is that domain related GPO's are filtered out. We renamed our domain lately from: CONTOSO to: lan.CONTOSO.com (Netbios name ...
0
votes
0answers
33 views

UDP traffic got blocked by unknown reason? [on hold]

Here is my situation. One of our major software suddenly refused to getting license from license server under normal user login. but under admin login, this software is running fine and getting ...
-3
votes
0answers
28 views

Enabling admin$ via group policy [on hold]

I am trying to learn AD management. The task I am trying to do is enable admin share for any computer on this domain using group policy. For this I enabled "Windows Firwall: Allow inbound file and ...
-5
votes
0answers
21 views

Batch file not working in server but working local [closed]

i created a batch file in my asp.net web site, It is working within the local system without any problem. After I was upload it to my web site's server (shared server), it is not working in the remote ...
0
votes
1answer
40 views

gpupdate fails, access denied - event ID 1055

I became aware of this issue yesterday after pushing out GPO for Software Policy Restrictions. I am unable to push out MSI installations to certain computers. I went to look at the one of the ...
-2
votes
1answer
19 views

Set default browser for all user on PC via GPO

I need one way to make mozilla as default browser on a group of PC-s I have in domain, I have tried many GPO but no luck until now. I have done it manually but this is a user configuration so every ...
1
vote
1answer
53 views

Can I Deploy a batch file with Group Policy to run as administrator?

I have created a batch fill which will block Facebook by amending the hosts file in this location: C:\windows\system32\drivers\etc\hosts This is the contents of the file: @echo off echo ...
1
vote
1answer
86 views

gpupdate doesn't work on everything

On a Win2008 Domain Controller, I've changed an user account property "Account is sensitive..." Of course, I want that GPO to apply immediately So I try gpupdate (or gpupdate /force), but it ...
0
votes
2answers
40 views

Creating Scheduled Task from Group Policy. Can't write to network share?

I am using NinitePro and group policy to deploy and update software on our small network of 150 Win 7 and WinXP machines. I am roughly following these instructions: ...
-1
votes
1answer
42 views

Domain controller is not listening on port 445

Is there a way to find why the DC is not listening on 445? -> Firewall rules checked , no denies found and the traffic is allowed. -> file share and print share services running. What else to check? ...
0
votes
0answers
23 views

Local group policy taking precedence over Default domain controller policy

Modified Default domain controller policy to disable and rename the Guest account name using below settings Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> ...
0
votes
1answer
18 views

802.1.x GPO configuration with restriction by computers and users

802.1.x configuration possible using Machine Policy GPO. So, typical scenario is creating security group for computers and applying our policy with 802.1.x to this group. After this all machines from ...
0
votes
1answer
30 views

Bginfo via GPO Server 2008 r2 - Timer Not Working

I am running Bginfo via GPO on Server 2008 r2 with Windows 7 clients. The bat file (below) is run by: User Configuration > Policies > Windows Settings > Scripts (Logon/Logoff). Bat File ...
2
votes
1answer
54 views

Acrobat Reader XI addon gets disabled periodically in Internet Explorer within Windows domain

We have a followig problem that happens on new workstations with Windows 7 x64 and Acrobat Reader XI only. Every few days the following key is automatically added to registry: ...
0
votes
0answers
16 views

Win7 Desktops secpol and local security policy not showing auditing

I have a Server 2008 R2 and Windows 7 Desktops where I have a Server 2008 GPO to Audit Events on the server and desktops, however at the desktops locally auditing is greyed out and displaying ‘no ...
0
votes
1answer
37 views

Network Security: Lan Manager Authentication Level

I'm a little bit confused by the explanation provided for the setting "Network Security: LAN Manager AUthentication Level" in group policies. The provided explanation only talks about clients and ...
2
votes
1answer
59 views

How do I display users' folders (My Documents, Contacts, etc.) in their profile location after redirecting them to server?

I'm implementing folder redirection for a domain, and I'm trying to make this as seamless as possible for current users. I assumed the %USERNAME% subfolders would remain in the same place but point to ...
0
votes
0answers
23 views

Group policies overriding

I am a learner in AD and GPO's. Though I have implemented some GPO's in my environment, now a little bit confused.. My confusion is with the overriding of GPO. Basically what I am trying is that I ...
2
votes
1answer
57 views

Users still get UAC prompt after allowing printer install and alter LAN connection by GPO?

I've implemented the following Group Policy settings to allow non-admins to install printer drivers and to enable / disable their wifi: User Configuration -> Administrative Templates -> Network ...
1
vote
0answers
42 views

%systemroot%\system32\GroupPolicy gone

DC Win2012, Client XP I have a couple of problems getting GPOs applied - well, they show up as getting applied (gpresult) but the software i tried to deploy didnt got deployed. I enabled ...
1
vote
2answers
49 views

Windows Server Program Restrictions for Administrator?

I have a Windows Server 2008 R2 OS where I just created a standard user account. I went into the Local Group Policy Editor and set the OS to only allow certain programs to be run. I figured that this ...
4
votes
1answer
62 views

GPO startup script not being ran

I am unable to get a GPO to run a script on startup. The script creates a shared folder on each machine in a group of windows 8 machines. The script itself works great, but attaching it to a GPO is ...
1
vote
0answers
20 views

EMET Configuration refresh

I deployed EMET on my domain and i'm configuring it with a GPO. I'd like to know if the system settings System DEP, System ASLR and System SEHOP are taken into account when i refresh the group ...
1
vote
2answers
129 views

Desktop Wallpaper through group policy for Windows 8 client

I Have Windows 2008R2 server with active directory. All client systems are Windows 8/8.1 Pro. I need to push corporate wallpaper through AD GPO on client system, I have created a shared folder on ...
4
votes
1answer
69 views

Where does a Domain Controller's Local Security Policy come from?

In Group Policy we have the Deny logon through Remote Desktop setting enabled for the Domain Computers group . I promoted a computer that was a member of this group to be a Domain Controller. After ...
1
vote
1answer
65 views

Possible to override a GPO that doesn't have an 'Enabled' or 'Disabled' option?

I have a GPO that is directly under the domain in the tree in group policy manager. Meaning it applies to all OUs in the domain. (This wasn't my doing) The "Interactive logon: Message text for users ...
0
votes
1answer
34 views

My GPO only runs the first time it is linked to the OU

I am attempting to distribute a .msi file via GPO to Win7 machines from a Server 2008 R2 network. I am getting a funny result. The first time I link the GPO to a OU the program loads. I uninstall ...
3
votes
1answer
163 views

port 445 blocked by Group Policy

I have managed to block port 445 in the windows firewall using Group Policy, now the server that has this GPO applied is unable to read further GPO updates from the domain controller. Is there any ...
3
votes
1answer
53 views

Group Policy Files - Active Directory

I am having a whole lot of trouble getting some files distributed across the network. My settings are: Action: Replace Source: \\[fqdn]\Repo\sqljdbcl.jar Destination: ...
1
vote
1answer
29 views

Disable Java auto updater via policy/script or some other automated means

I started researching on this and it turned out that this was not as easy as it seemed it would be. Basically looking to get some sort of automated way that I can turn off all the "an update is ready ...
4
votes
1answer
62 views

New implementation of home and department shares; help me get it right the first time?

I've the rare opportunity to set up from scratch our first home and department share server in a mid sized company (about 250 people), and would like to make something that's reasonable. We're going ...
1
vote
0answers
16 views

HowTo enforce SHA512 in Outlook 2010 (and above) for S/Mime?

When you setup S/Mime in Outlook 2010 you can also choose the hash algorithm as seen here: Can we control that via GPO? I would like to disable all the other options if possible.
4
votes
1answer
1k views

Java 8 Update 25 Install Via GPO Not Working

I am trying to set up our Active Directory DC to automatically install Java 8 Update 25 (jre1.8.0_25.msi) using Group Policy. When attempting to add the jre1.8.0_25.msi package in the GPO at Computer ...
2
votes
0answers
27 views

Printer server hostname changed - deploy printers via GPO no longer works

We use the Deploy Printers feature of local group policy in Windows 8.1, so that our users can log into any machine and printers will already be configured. This was working flawlessly for all users ...
0
votes
0answers
39 views

Windows 7 Group Policy Printer not Loading

I'm trying to create a group policy that applies printers to a specific user security group, but facing difficulties. When loading a GPO with 4 printers in it, all but two PCs load all 4 printers. ...
0
votes
1answer
21 views

How can I know where and how a security group is triggering a logon script for some users?

The organization I work for has implemented application access and scripts via Security Groups. This is, if a person needs to access some applications or have a script run when he logs on, we add ...
0
votes
1answer
57 views

Windows 8: GPO to block shutdown without blocking restart?

Windows has a local security policy for disabling the ability to shut down a computer, but this also blocks the ability to restart the machine. Is there a way to block only shutdown without blocking ...
8
votes
2answers
325 views

How do I block inheritance/application of a single GPO?

Due to the workload generated by recent ransomware outbreaks (Cryptolocker/Cryptowall/etc.), I was recently tasked with implementing Software Restriction policies to block program execution from ...
0
votes
1answer
48 views

How do I make browser shortcuts w/custom proxy settings available on user desktops?

In our environment, we have about 30 testers (website testers) located at different physical locations. However, they all log on to the same AD. As it is now, their MSIE is configured to access the ...
1
vote
2answers
35 views

Software installation by group policy

I have a server with windows 2008 r2, it is connected N client. Clients use software that releases updates. Is there an application that I install on the server, which allows you to select the ...
3
votes
1answer
25 views

If a GPO is not the Winning GPO does none or part of the GPO get applied?

I am reviewing some gpresults settings and it shows the Winning GPO as a server configured GPO. If another GPO has already won and a second GPO tries to set a conflicting settings does the second ...
0
votes
3answers
42 views

Network based automount drive in GPO

For starters, I know about net use for this, but I need a more sophisticated solution. We have two branches, and both have a server with shared drives, both of which have are (or will have) the same ...
1
vote
1answer
29 views

Group Policy WMI Filter query

I'm putting in place a policy to install AV software but only want it to apply when the computer has no AV software installed, I know WMI can be used for this but don't have a clue how it can be done. ...