Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
1answer
7 views

If I apply local group policy for the first time why it is not taking effect untill I restart the machine?

I applied local group policy (Computer Configuration - Software Restriction Policy) but policy is not taking effect. I tried this on domain member (machine is in connection with Domain Controller) and ...
1
vote
1answer
23 views

Group Policy is blocking exe files

I teach programming in Visual Studio. We want to run it on a terminal server. The problem is that whenever we compile our programs, the Windows refuses to start the created exe file. (I didn't even ...
0
votes
0answers
9 views

Restricted Groups not working with UAC

I have a Restricted Group in a group policy in an organizational unit called org_unit_a. This organizational unit has all the computers. The restricted group is My_domain\Workstation Admins Has ...
2
votes
1answer
45 views

Running Batch file with elevated rights through GPO

I have a shortcut that specifically uses Google Chrome. We have XP and Windows 7 in our environment, and I want to only use one shortcut for both OS. The reason being is that our environment is quite ...
0
votes
0answers
18 views

Restict user to acces only the one same folder on 100+ servers

I just developed a powershell script that is compressing all my old event logs into some zip files. I am launching this script remotely on 100+ servers with the "invoke-command" function. Basically, ...
2
votes
1answer
15 views

Finding out if shares are made available offline in Windows 7 by default without corrupting the offline files cache?

We have some rather large shares that people connect to at work, and it would be best if these shares did not even attempt to synchronize into the local Windows 7 offline files folder. How does one ...
5
votes
0answers
50 views

How can I eliminate the “Several add-ons are ready for use” prompt in Internet Explorer?

The issue I describe here is the same as that in Group Policy Internet Explorer, Add-on list not working, but I provide more detail and troubleshooting steps, so I thought it was worth re-asking. I ...
0
votes
1answer
28 views

Win Server GPO Mapped Drive Missing “Connect As” functionality

We're having an issue trying to create a policy for mapping drives. We're unable to specify a "connect as" username and password.
1
vote
1answer
35 views

What is the advantage of moving Groups in Organization Units in AD environment beside organizing?

I know the advantage of using OUs (organizing and GPOs).with OUs you can organize your users and computers, assign group policy to them, and deligate control over a set of users and computers. But ...
-4
votes
1answer
32 views

How to apply Default wallpaper to clients in Active Directory [closed]

I have one Dell poweredge 1850 server running on server 2012. I installed ADDS and Make one OU in it then i make users (approx 20) and then move all users to OU. But know when i tried to manage the ...
3
votes
1answer
34 views

GPO to Configure DHCP Options

Our environment has approximately 15 Domain Controllers that also provide DHCP functionality to their networks. We have discovered several to have incorrect DNS settings. Their are providing incorrect ...
0
votes
0answers
10 views

Is it possible to set Server Performance Settings globally?

Is it possible to set the Performance Settings for example Smooth edges of screen fonts globally or do I have to log in to every user and set it manually? I couldn't find any setting in the GPOs that ...
1
vote
1answer
45 views

Setting HomePath to EmployeeNumber as a variable

We are planning to use the EmployeeNumber user attribute in AD to create the path to each user's Home drive. Reason for this is that AD user names are currently based on last name, which changes often ...
-1
votes
0answers
25 views

“Removable Storage Access” Group Policy and RSAT

I've seen that there is a capability with Group Policy to prevent users from writing to USB drives. ...
0
votes
0answers
31 views

Allow winzip file Software Restriction Policy

I have a path rule that denies extracting executable to temp folder in the software restriction policy. Now I need to allow certain applications that should run and extract their contents in the Temp ...
3
votes
1answer
36 views

How to find all GPOs in a domain that define password policies?

We have a bunch of GPOs that have grown organically over time. I assume that many of them are defining password policies. I am aware of the fact that it only can be set once in a domain (besides PSOs ...
0
votes
0answers
23 views

Difference in File System Security group policy between Windows 7 and 8 clients

I have an unexplained difference of behaviour between a Windows 7 client and a Windows 8 client. I have the following files: C:\testdir\allow_domainusers.txt C:\testdir\allow_everyone.txt ...
0
votes
2answers
43 views

GPO not applying to Clients

I am having issues applying the below GPOs to clients. Computer Configuration \ Policies \ Administrative Templates \ System \ Remote assistance \ "Offer Remote Assistance" Computer Configuration \ ...
0
votes
1answer
11 views

Group Policies For Wallpaper Failing

We have some computers that are no longer getting our wallpaper pushed by group policy. In checking to see if they can access the UNC for the wallpaper (\domain.com\NETLOGON\LogonFiles\our-logo.jpg) ...
2
votes
1answer
37 views

How to programmatically logout idle users on Windows Server 2012 R2?

I've searched a lot but couldn't find a direct solution. Can anyone tell me how to logoff idle users from a remote desktop connection to a Windows Server 2012 server after a period of time? These are ...
0
votes
1answer
27 views

Allowing multiple executables into a “Run only specified applications” group policy at one time

At my workplace we whitelist executables using a "Run only specified Windows applications" group policy applied to the domain. At certain times we need to whitelist large number of executables at a ...
2
votes
0answers
43 views

Chrome Not Applying GPO Policies

I'm having a little trouble getting Chrome installions on our workstation to update it's policies to reflect I've sent in GPO. I added the admx and adml to %systemroot%\policyDefinitions as our ...
2
votes
4answers
122 views

Different group policies in one domain

I'm using powershell to display the password expiration of an account before I reset it at work. But the global GP from what I can see, is 180 days, and there are some employees who have 90 days set ...
0
votes
0answers
67 views

Windows 8.1/ Server 2012r2 Setting Default Browser vis GPO

I have an RDS 2012r2 server currently has Chrome and IE on it. I am having some issues with chrome and want to get a subset of users using IE instead. I have set two registry keys in GPO as below, ...
0
votes
0answers
30 views

Password policy GPO not working as intended [duplicate]

I have the following policy set up for my Server 2012 domain, and has been applied to my computer: The GPO is applied to all computers in the OU, and no other conflicting policies are defined. ...
0
votes
1answer
36 views

Problems applying reg keys via group policy

I'm having a major issue with some music software, I was hoping if I quickly explained what I have done, some GPO guru might be able to spot where I have went wrong? Server 2012 Client OS - XP SP3 ...
0
votes
1answer
27 views

Set Group Policy for RDP session users on selected Computers

I have domain users by group with respective privileges set via group policy. I.E (Department A has access to control panel and access to install software, Department B does not have both) My ...
2
votes
0answers
20 views

What does SBS 2011 do “under the hood” when you give a user admin access?

I have been using Windows Server for many years now and when I have someone who needs local admin access over their machine, I apply it through group policy in a similar way to this answer. One of my ...
2
votes
0answers
52 views

Is using the AD home directory attribute to map the home drive really no longer a best practice?

I have read some articles that claim that using the Active Directory user home directory attribute to automatically map the home drive is a legacy method, deprecated, or not recommended. The second ...
0
votes
0answers
21 views

Domain policy expiration doesn't match net user command

In Active Directory, we have recently changed our password policy. We had our users set to where their passwords would not expire previously. Now, we have set max password age in our domain policy ...
0
votes
0answers
16 views

IE11 & 2012R2 History GPO

probably a really simple one but I've not been able to find it. I am running a 2012R2/Win 8.1 environment and want to stop IE from storing any browsing history on a machine level. I've already set ...
0
votes
1answer
65 views

Want to be able to configure IE 11 group policy settings from Win 7 Client

I want to be able to configure IE 11 group policy settings from my Win 7 client. I have IE 11 installed on this client. The client has been joined to a mixed Windows Server 2003/2008R2 domain. When I ...
0
votes
0answers
34 views

Turn system icons off with GPO or Registry

I need to turn off "Input Indicator" on the taskbar with a GPO or a Registry setting (which will turn into a GPO). It took me quite a while to figure out how to do it in Control Panel, now I have to ...
1
vote
1answer
92 views

Apply group policy to specific users (in an OU) on specific computers (not in an OU)

This has been bugging me for a while. Here's the setup: We have ~20 Win2k8r2 servers. They are separated into various OUs that I can't change. I have created a security group "DevHostsSG" that ...
0
votes
2answers
34 views

Is there a way to control what browser plugins are installed across an enterprise? [closed]

Is there a way to control what browser plugins are installed across an enterprise, perhaps by group policy?
0
votes
1answer
141 views

Remove Server Manager and Powershell icons from the Taskbar

Up until recently we have had two Windows Server 2003 Domain Controllers and five Windows Server 2003 Terminal Servers. I'm in the process of upgrading the network and have recently replaced the DC's ...
0
votes
2answers
79 views

Software install GPO on server 2012 (not R2) is not being deployed to windows 8 and 8.1 clients but is being deployed to windows 7 clients

I am trying to deploy some management MSI files via GPO running on Server 2012 (not R2) and the GPOs aren't being deployed to the Windows 8 and 8.1 clients. However the GPO is is working fine to the ...
4
votes
1answer
34 views

Deploy Software via GPO, but also deploy configuration file

When deploying software through a group policy, is there any special trick that will allow you to also deploy a separate, say config, file along with it? Here's the specific problem: We have a ...
0
votes
3answers
40 views

In which order will GPOs be applied when a USER try to login to a PC in a different OU

If we have this Group Policy Management configuration (Windows Server 2008): domain.local OU1 PC1 USR1 GPO1 (Linked) OU2 PC2 USR2 GPO2 (Linked) ...
1
vote
1answer
155 views

Disabling the Microsoft LLDP Protocol Driver using Group Policy

I need to campus-wide disable the Microsoft LLDP Protocol Driver using Group Policy / SCCM / or any other means of centralized management, because I've written my own LLDP broadcast service I plan on ...
1
vote
3answers
52 views

How to change windows time server on windows server 2012?

In windows computer, system is using "time.windows.com" to sync the time. I need o modify the time server for windows user on its logon and want to enforce using group policy. Case: we have windows ...
0
votes
0answers
41 views

How to allow Chrome to run a plugin when viewing a local file while GPO restrictions are in place.

The setup Windows server 2003 domain at a functional 2000 level Multiple server 2003 servers running terminal services All users running desktops delivered via RDP Google Chrome browser installed on ...
1
vote
1answer
51 views

How can I remove the minimum password length for a specified user in an OU?

How can I remove the minimum password length for a specified user in an OU? (I do not want the default domain password policy affecting my GPO.) When the "minimum password length" in my default ...
0
votes
1answer
14 views

Default mail registry

I'm deploying Win 8.1 via. SCCM with Office 2013 pre installed. I got an issue where even though Outlook 2013 is the default mail. the specific value mail:to (opening a direct mail link) .. attempts ...
0
votes
1answer
64 views

Suggestions on a few Chrome Deployment issues

Greetings to everyone here. I'm a network admin in charge of deploying Chrome to my network and setting it as the default browser, though IE will of course still be available for users. I've ...
0
votes
2answers
72 views

editing local group policy for all domain computers

I'm stumped on a strange group policy issue. I know that Domain GPO should take authority over local group policy settings, but lately i've been having an issue and I can't think of anything else it ...
1
vote
2answers
43 views

GPO to map drives conditionally

We have a file server that is sharing out user drives from //server/user$. We also have webDav enabled so it can be access externally by https://fileserver.company.com/user. My challenge is to map ...
0
votes
0answers
70 views

Task scheduler VS GPO do not allow storage of password

I have a scheduled task in one of my DC, running to check LastLogon date of AD accounts in each DCs everyday. The task was previously running in a Win 2003 DC without problem but now we are going to ...
0
votes
0answers
21 views

Windows SRV2012 : gpEvent_NO_NETWORK

For an unknow reason, a computer on my Active Directory domain display an error when I try to execute the gpudate ( and gpupdate /force ) command as Administrator. The domain controler and the ...
0
votes
0answers
31 views

In Group Policy how do I remove Shortcuts from My Network Places

I have found that in Group Policy I can add a shortcut to My Network Places under User Configuration > Preferences > Windows Settings > Shortcuts and create a shortcut as File System ...