Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
0answers
5 views

PowerShell startup script applied via GPO failing ambiguously

Script: $folder = "$env:HOMEDRIVE\TestFolder" New-Item -ItemType directory -Path $folder Execution policy is unrestricted, and the script runs fine when ran manually in Windows 8.1 (folder is ...
1
vote
0answers
13 views

IE11 Enterprise Mode gpo not working

I've followed the following articles to configure the Enterprise Mode gpo for IE11: http://msdn.microsoft.com/en-us/library/dn640699.aspx http://msdn.microsoft.com/en-us/library/dn640696.aspx I ...
1
vote
0answers
11 views

Server 2012r2 change login screen language with registry

I am installing a Windows Server 2012R2 RDS farm. The OS language is English, but my users are Dutch. I already installerd the Dutch MUI pack in windows via the command prompt. Via a user GPO the ...
0
votes
0answers
23 views

User can still run programs that are disallowed by group policy (on one computer)

On one computer, a user can run programs that have been disallowed by group policy. I have check rsop and it shows that setting as enabled and those programs are to be blocked. The user has the same ...
1
vote
0answers
11 views

Group Policy Files Not Being Deployed to UNC Paths

When attempting to deploy files via Group Policy Preferences, there is a well-known issue wherein you may receive an error to the effect of: 0x80070003 The system cannot find the path specified. This ...
2
votes
0answers
21 views

Can't Access Computer Configuration > Preferences or user configuration > Preferences

After creating a new GPO in Windows Server 2008R2 Right click Edit on the newly created GPO Group policy Management Editor opens Clicking on Preferences shows this popup error After Clicking ok ...
0
votes
1answer
17 views

Group Policy Preferences Printers Server 2008R2 Error 0x80070bc4 does not set default printer after a printer has been created

Alright after calling upon the almighty Google I have been unable to find a good solutions to this problem along with many other users. So I am turning to Server Fault for some support here. I am in ...
4
votes
1answer
19 views

How to dump(collect) all the group policies in a domain?

I want to collect all the GPOs in a domain , for reviewing settings. How many ways are there to do it. I used Get-GPOREPORT in Powershell, but it gave a comprehensive html file, is these a way to ...
3
votes
1answer
21 views

How can I pin an Internet Explorer URL shortcut or favorite to the Start screen with Group Policy in Windows 8.1?

I created my Start UI like I want and used this PowerShell cmdlet to create the .xml file for a user's default layout: export-startlayout –path <path><file name>.xml -as xml ...
3
votes
1answer
19 views

How to define the built-in administrators group in a group-policy object?

How do I define the built-in administrators group in a group policy? For example Computer Configuration => Policies => Windows Settings => Security Options => Local Policies => User ...
0
votes
0answers
21 views

Remote desktop instant logoff on disconnect?

I'm having a weird quirk on a Windows 8.1 VM that I'm using as a public-facing Remote Desktop slave, in that upon a client disconnect, the sessions is immediately logged off. This occurs ...
1
vote
0answers
21 views

CIS benchmark: How to define the BUILTIN\Administrator account within GPOs?

I am responsible for configuring GPOs according to the latest CIS benchmark policy. However the test for "Impersonate a client after authentication" always fails, although everything seems to be ...
1
vote
1answer
30 views

WSUS on Win2012R2 doesn't see Windows 8.1

WSUS on Win2012R2 doesn't see Windows 8.1. Both machines can ping each other. Computers are assigned to WSUS by: 'Use Group Policy or registry settings on computers' Local GPO on Win8.1 is set as ...
0
votes
1answer
22 views

Screensaver startup script (batch or reg) GPO, silent install

I have an application, which after it disconnects from a VPN connection, resets the screensaver settings. What I'd like to do is create a GPO script or batch file to run every time the user logs into ...
0
votes
1answer
21 views

Creating batch files from txt files - is this right?

Forgive me if I am completely of the rails here, but.... I am just learning about Group Policies and Domain Controllers etc. and I have a some .bat files, now I can edit them in notepad or any text ...
0
votes
3answers
49 views

GPO Troubleshooting - Security Filtering - Computer Configuration

We have a GPO that includes a Computer Configuration that enables a Preference that adds a security group to the local Administrators group. Since this is a Computer Configuration, do you need to add ...
0
votes
2answers
21 views

Excluding a specific machine from Group Policy - Server Essentials 2012

Server OS: Server Essentials 2012 Client OS Windows 8.1 I have a domain set up using SE 2012 and have used the group Policy wizard to apply Folder Redirection and "Security Settings". Can I make an ...
0
votes
1answer
39 views

Group Policy for Time Sync = ARP Flood?

I have a Windows Server 2008 R2 domain controller and a bunch of workstations of various versions of Windows - XP SP3, Vista, 7, 8.1. Time sync wasn't working correctly on a few PCs so I followed the ...
0
votes
2answers
27 views

Is there a GPO to allow standard users to access Resource Monitor

I need to allow standard domain users to be able to access the Resource Monitor on Windows 7 without adding them into the administrators group on any local machines. Is there a domain GPO setting to ...
3
votes
1answer
42 views

Edit local policy via powershell

i'm searching for a way to edit this policy via powershell : Computer Configuration -> Administrative Templates -> System -> Credentials Delegation -> Allow Delegating Fresh Credentials with ...
0
votes
0answers
4 views

AGPM - structure of agpmserv.log?

Can anyone enlighten me as to the structure of the agpmserver.log file? A list of the fields / headers / etc for the file would be ideal. Background: I've been looking into Microsoft's AGMP for ...
0
votes
1answer
18 views

IE11: How to check into which zone a URL falls?

I have applied several internet explorer settings via group policy. Especially a long list of URLs in the "site to zone assignment" setting. However it seems that one URL still falls into the ...
4
votes
1answer
22 views

Changing password expiration policy at next password change

We have a password policy with a maximum password age of 180 days. For various reasons we need to change it to 90 days, with a minimum impact for the users. Our users are normally warned about the ...
0
votes
0answers
22 views

domain admin account unable to modify IE settings, other DOMadmin group accounts can

When I log into one of the servers on our domain as DOMAIN\administrator, IE settings are locked, and indicate that I'll have to check with the system administrator. If I log into the same server ...
1
vote
1answer
24 views

Group Policy doesn't restart service as configured

I have configured group policy to tell a particular service (Winrm) to restart when the policy is applied. When the policy applies, I see that it tries to stop and start the service. Stopping works, ...
2
votes
0answers
38 views

Windows 7 GPO Preventing admins from interactively logging in, but still allowing Run As / permission escalation

I'm implementing security restrictions for a client who would like to prevent admin accounts from logging into workstations. For example each person has a user account and an admin account and only ...
0
votes
2answers
50 views

Which Group Policy wins out of two enforced policies with similar settings?

I have a situation where I need to modify an enforced group policy object, however due to the sensitive nature I must test my results first to one test user. In order to do this I plan to create new ...
4
votes
2answers
85 views

Determining if group policy needs to run synchronously

I have been working on speeding up network logins. As part of this process I'm disabling the 'always wait for network' option. This isn't inherently a problem, but I would really like to be able to ...
1
vote
1answer
109 views

Let users install software without local administrator rights on domain

I manage the network of a small company. As I'm not always in the office it is a wish from the employees to be able to install software without having to go to me. My predecessor set it up that ...
3
votes
0answers
44 views

Proxy Server setting stuck on Server 2003 R2 for Windows Updates

Stay a while and listen. This is going to be a long one. We've been having a problem the last couple of months with Updates on very specific Microsoft Server 2003 R2 Machines. This problem has ...
0
votes
1answer
26 views

WSUS: How to combine targeting groups from multiple GPOs

I am trying to use group policy with WSUS to prevent stuff like Silverlight from being installed unless it is requried. I want computer groups for each of the software (so a computer will end up in ...
1
vote
0answers
21 views

Configuring Service Login Credentials with Group Policy following MS14-025

With Microsoft security bulletin MS14-025, GPMC and related tools are now patched to no longer allow the use of configuration items within Group Policy Prefs that would embed obfuscated passwords. The ...
6
votes
1answer
176 views

Enable offline file sync for computer owner only

At the school I am interning at, all students and faculty have a mapped home folder known as the "M:" drive for storing files that they can access from all computers. For faculty who have laptops, we ...
4
votes
0answers
100 views

Applying group policy loopback to any user on specific computers

In a server 2008 R2 and Windows 7 environment, I have a GPO that specifies screen saver settings in the user settings policy for the entire domain. However, for specific computers, this is not ideal. ...
2
votes
1answer
37 views

How do I correctly install windows 8 group policy on a 2008 server?

I'm currently working on a customer server that is running Windows Server 2008 R2. They are in the process of upgrading their machines to Windows 8. The problem they have is they don't want all the ...
4
votes
1answer
137 views

Installing Lync 2013 Standard silently

I am trying to find a good way to deploy Lync 2013 standard & basic clients silently on computers with Windows 7 / Office 2010 & ahve a few roadblocks. 1) I am successful installing the ...
0
votes
1answer
35 views

Roaming Profile Accounts logoff instantly

I am working on setting up roaming profile accounts. When I log in as one of my users, they disconnect instantly. How do I find errors on what is going on? I've check the SMB Share permissions and ...
2
votes
1answer
34 views

Active Directory Force Update Fails

I tried looking up this error and problem and found nothing. Could this be a firewall issue?
4
votes
1answer
77 views

Consistently slow domain logins / folder redirection

I've been trying to diagnose slow logins to my domain. One of my first stops was Domain login very slow 10+ minutes. So far I've been able to tell it has to do with my policy that applies folder ...
0
votes
0answers
32 views

Deploying Ossec HIDS Windows Agent via GPO

I am trying to deploy OSSEC agent to about 100 Windows 7 boxes through GPO on our AD. I understand that I need to create and MSI from the EXE and import the specific client.keys file for the windows ...
2
votes
1answer
33 views

Error Code 0x800700a1 when trying to add registry key through GPO

I'm trying to add a new group policy to our domain so that images are automatically sent with emails in Outlook 2013. So I created the following GPO: This policy doesn't have any effect though. ...
3
votes
1answer
77 views

GPO Rule of thumb for: Disabled vs Enabled vs Not Configured

Is there any documentation that explains difference between these: Policy Not Configured Policy Disabled Policy Enabled, Setting Enabled Policy Enabled, Setting Disabled Policy Enabled, Setting ...
3
votes
2answers
51 views

Group Policy installation failed error %%1274

OK, I have a really tough one I've already spent all morning on. PC is a Win7 64 with SP1 and all MS Patches Usual error everyone is familiar with: The assignment of application Adobe Reader X MUI ...
0
votes
1answer
112 views

The sysvol permissions for one or more GPOs on this domain controller are not in sync with the permissions for the GPOs on the baseline domain

I have recently installed a second domain controller and all replication seems to be working fine except for group policy - In windows 2012r2, through the new Group Policy Management, when I click on ...
3
votes
2answers
83 views

Ensure drive is mapped at login on laptop with strictly wireless

So, $software runs on a 'server' (windows client w/ file sharing to share out the db folder), and laptop client has the drive mapped and $software also installed. This is the vendor's recommended ...
2
votes
1answer
37 views

Domain Account Does Not Receive Proper Se Privledges from Group Policies

I am attempting to install software that requires SeBackupPrivilege, SeDebugPrivilege, and SeSecurityPrivilegebut I cannot seem to get my Domain Account to retrieve these specific privileges. I ...
4
votes
3answers
174 views

If an email is sent to a user redirects if OOF is on

Is there a way to make a global change to either Exchange or group policy so if an email is received from an email address it will not go into the users mailbox but be forwarded on instead. Basically ...
3
votes
2answers
237 views

Installing MSI Before User Logon

I have a requirement to install a MSI's to our workstations before logon, it's periodically updated and provides updates to our LOB applications. The problem we are encountering is when setting logon ...
0
votes
1answer
31 views

Why does windows xp standalone group policy apply in the safe mode to the default administrator?

I am trying to turn standalone Windows XP installed on VirtualBox virtual machine into an AppStation-style machine (only one allowed application, taskbar, start with lone shutdown option, and a ...
0
votes
1answer
39 views

Using AD/GPO to add machines to WSUS in Windows Server 2012

I was following this guide: http://knowledge.quickstart.com/configure-wsus-to-deploy-updates-using-group-policy/ I've rebooted the machines after the policy updates to ensure they took them. I ran ...