Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
0answers
7 views

Group Policy Caching for Folder Redirection

I recently set up a new file share on a new server for Folder Redirection for a subset of our users. I robocopied the files, applied the policy last week, replacing the old policy, tested with a few ...
0
votes
1answer
13 views

Windows Server 2012 - GPO settings - Security Filtering and “Authenticated Users” confusion

So I want to add a GPO for a few computers at first then deploy this rule to all computers when everything is confirmed OK on the test systems. I am having troubles getting the GPO to deploy to only ...
0
votes
1answer
26 views

Prevent authentication from specific machines

I have two domains PRIMARY and DEV. These both contain matching service accounts for various applications. PRIMARY also contains user accounts We have a one way trust relationship such that DEV ...
2
votes
1answer
36 views

How to hide running logon scripts from users (.vbs) without using a wrapper script?

I have a GPO (configured with loopback replace) that runs a logon script (.vbs) and linked it to an OU containing a W2012R2 RDS host. I have made these (question related) changes to the policy: ...
1
vote
0answers
26 views

Various printer deployment issue with Server 2012 R2

I have just set up a new remote desktop infrastructure, with all servers being built on Server 2012 R2. I have 7 session hosts, and a central file/print server. On the print server, I have added ...
2
votes
1answer
27 views

Group Policy Preferences - Registry: 0x80070005 Access is denied

I have created a GPO to apply several registry keys to a Windows Server 2008 R2 machine in my lab. The relevant keys are within HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Internet and I have therefor ...
2
votes
2answers
51 views

How do I use PowerShell GPO cmdlets to set up file security?

I need to automate the creation several security groups, then create and apply a GPO that includes OU / Security group specific file permissions and auditing. I have the OU and group creation done. ...
1
vote
0answers
27 views

Microsoft Server 2012r2 GPO templates

I have a question to ask regarding Windows Server 2012 R2, but before I ask let me give you some details about our environment. We have a single forest, with a single domain, and our functional ...
3
votes
3answers
62 views

Use Script To Edit Local Group Policy Windows Server 2012

I'm hardening a Windows Server 2012 R2 machine for serving secure web pages and following a guide that lays out multiple Local Group Policy Settings and Registry Settings. When researching how to ...
-1
votes
1answer
45 views

How to add bunch of admin accounts to 20 Windows 2012 servers

Is there a quick way to add bunch of admin accounts to 20+ Windows 2012 servers? It would be way too cumbersome to rdp to each server and add accounts to the local admin group.
3
votes
1answer
67 views
+50

How to remove a GPO setting that used a custom ADM

I'm trying to deal with some legacy group policies that applied registry settings using ADM files. I'd like to remove these registry settings and set them up as group policy preferences, but how do I ...
0
votes
0answers
16 views

Terminal Session Targeting by IP Range broken

We have a group policy preference to connect terminal server users to the printers at their site with Terminal Session Targeting for an IP address range. It works well for users that use the IGEL thin ...
0
votes
1answer
43 views

Windows XP Clients cannot access \\domain.local\SYSVOL share on 2012 R2 Domain Controllers

We've recently promoted 3 new 2012 R2 domain controllers and still have 1 2003 domain controller on the network, which we're planning on demoting in the next week or two. We seem to be having a ...
-1
votes
1answer
22 views

Auto-Logoff Through GPO [closed]

We have to auto-logoff all the users who are sitting idle for more than 1 hour. We have Most of 2003 servers. We were told that Terminal server licenses has not been there else we have a group policy ...
0
votes
0answers
14 views

Folder Redirection Server 2003 Redirect to the local userprofile location does not work on some files on some computers

Was using GP Folder Redirection for three years on AppData, Desktop, and My Documents folders. Worked with no problems. Redirect location was \Server1\Redirect. Needed to move files back to ...
1
vote
2answers
30 views

View GPOs applied to a specific security group

A group was created in the Active Directory Users and Computers to give local admin rights to certain users on our domain. After taking over management of this system from a previous employee I am ...
1
vote
0answers
23 views

Remote Desktop Server: Restrict drive redirection on per user basis?

For a Remote Desktop Server, drive redirection can be controlled via Group Policy. Unfortunately, this is a computer configuration, so it will either apply to all users or none. Is there a ...
3
votes
2answers
43 views

Windows default sound scheme using GPO

We have 50 windows 7 clinet computers in an AD OU for which we need to change Windows Default Sound Scheme to None. How this could be accomplished using AD group policy?
1
vote
0answers
8 views

connections blocked to remote computer while no user logged on windows 7

A have a bunch of computers, all in the same OU, that are not contactable over the LAN (no pinging, no c$, no computer management, no SCCM connection) while the computer is not being used. The ...
17
votes
1answer
1k views

How to time-bomb a GPO?

I am doing a lot of work in higher education where it is a rather common requirement to reconfigure a number of Windows domain members (e.g. PCs in a classroom) for the duration of a specific course ...
2
votes
1answer
36 views

Disabling the prompt to “Click Continue to permanently get access to this folder” (e.g. via GPO)

http://support.microsoft.com/en-us/kb/950934 describes the manner in which, when a member of the Administrators group uses Explorer to navigate to a folder to which the Administrators group has ...
1
vote
0answers
43 views

Windows Servers Deny Remote Creditials

Here's the layout: -Four domain controllers(2003 & 2008) -Windows Servers (2003 & 2008) -The PDC is Windows 2008 and there are some GPOs -All servers ping, no firewalls, no major or much ...
3
votes
2answers
287 views

GPO option for “Show Desktop Icons”?

Is there a GPO setting (Server 2008 R2 domain) that we can use to set the following desktop property? View > Show Desktop Icons
1
vote
1answer
34 views

Looking for Ideas and reasons to move from a single log on script to Group Policy

So currently our senior VP in IT has a single log on script that is run via ADUC and does things like install 3rd party updates, maps networked drives, inventories computers, copies files to desktop, ...
1
vote
1answer
19 views

Group policy drive mapping extension not applying to Vista SP2 machine

I have one GPO (called Desktop_User) that applies to a Windows 7 and a Windows Vista machine. When I log on to this systems, the drive mapping works on the Windows 7 machine but the Windows Vista ...
-1
votes
0answers
8 views

Auditing tool for Windows security policies [closed]

What tools do you use to audit Windows security policies. For example, I configured a Windows machine (A) with the policies (GPO security policies) that we want. (A) now is a baseline. How then could ...
1
vote
2answers
34 views

Apply a password group policy seperate from the Default Domain Policy?

Im trying to keep my Default Domain Policy clean and standard and I want to make a GPO for my password policies. I made it but it still gets the policies from the Default Domain Policy object. I ...
0
votes
0answers
29 views

Can't Remote Desktop on LAN, Firewall Rules in Place, Yet Packets Dropped

I've banged my head for a few hours on this. I'm beginning to move several computers to a new subnet, all Windows 7, all domain joined. On the original subnet (192.168.145.X) everything works as ...
0
votes
1answer
44 views

Show logon process on windows 8

I'm experimenting with server admin on windows 2008 since I started a new tech job and want to learn things. I'm using a windows 8.1 pro client computer. The question is, is there any way to show the ...
1
vote
0answers
14 views

RunOnce key can't be run at startup with restricted public account in Windows

Let me be brief. We have arround a 1000 public computers for users to use for the internet and office and so on. We image these using SCCM2012r2 Everything is fine but we have added a software package ...
0
votes
1answer
44 views

Machine based group policy to change display setting

How to change display using computer group policy?
1
vote
0answers
26 views

Win 2008_R2 print spooler issues and Client freezes

Environment: Windows 2008 R2 Print Server (Virtual) 178 Printers installed. All using TCP/IP Many different printer brands Most all employees print through this print server Problems: The spooler ...
6
votes
1answer
49 views

How to filter settings within a GPO that only applies to Windows XP?

We have several GPOs containing many settings that have accumluated over time. I have spot-checked some of them and stumbled over settings that only apply to Windows XP (we exclusively run Vista and ...
0
votes
2answers
35 views

Group Policy to force all web traffic to a specific page OR GPO to display unclosable popup to get users attention

We have a number of tasks users need to complete over the month (time sheets, reports, etc) and I am trying to think of the best way to force users to complete these tasks. Currently, we send ...
1
vote
0answers
33 views

Create shared folder on share automatically

I know there is a group policy where I can map a specific share. What if I want the group policy to create a folder on that share and map it during log on? I know there must be a way to do this in ...
0
votes
1answer
30 views

How can I set up group policy to give non-admin users the ability to use local admin account to update non-MS apps?

Currently the users do not have admin rights. I wanted to be able to let them update their own applications (non-microsoft) by using the local admin account at the elevated privilege prompt. What ...
0
votes
1answer
80 views

Reflect HKLM registry changes to HKCU

Ok so I have a Local Group Policy (under Computer Config, not User Config) to force install extensions in Chrome. This policy needs to run for every user of the computer. The value is going to change ...
1
vote
1answer
59 views

Prevent users from sharing network printers in Server 2008R2 Win 7 environment

I have a server 2008R2-level AD domain in which all the printers are networked. I have a highly mobile workforce of about 350 in the facility, and when they move from one work area to another, they ...
0
votes
0answers
17 views

Group POlicy and Default Printer by Computer

We have multiple sites with specific printers to be assigned to each location. All the printers reside on the same print server. We have group policies (Windows 2008) in place to deploy specific ...
2
votes
0answers
51 views

Group Policy - Drive Mapping Preferences - slow login even if only using Computer Config side

We are having some users with very slow login times, up to 20 minutes, but only for a handful of users. I've narrowed it down to a particular GPO that does nothing but Drive Mapping Preferences. I ...
0
votes
1answer
29 views

Folder redirection for multiple locations

I need to find a way to redirect a folder at one location to the file server at the same location and repeat this for all of the other sites. So all of the computers at SiteA will redirect to the ...
0
votes
1answer
22 views

If I apply local group policy for the first time why it is not taking effect untill I restart the machine?

I applied local group policy (Computer Configuration - Software Restriction Policy) but policy is not taking effect. I tried this on domain member (machine is in connection with Domain Controller) and ...
1
vote
1answer
52 views

Group Policy is blocking exe files

I teach programming in Visual Studio. We want to run it on a terminal server. The problem is that whenever we compile our programs, the Windows refuses to start the created exe file. (I didn't even ...
2
votes
1answer
38 views

Restricted Groups not working with UAC

I have a Restricted Group in a group policy in an organizational unit called org_unit_a. This organizational unit has all the computers. The restricted group is My_domain\Workstation Admins Has ...
2
votes
1answer
106 views

Running Batch file with elevated rights through GPO

I have a shortcut that specifically uses Google Chrome. We have XP and Windows 7 in our environment, and I want to only use one shortcut for both OS. The reason being is that our environment is quite ...
0
votes
0answers
19 views

Restict user to acces only the one same folder on 100+ servers

I just developed a powershell script that is compressing all my old event logs into some zip files. I am launching this script remotely on 100+ servers with the "invoke-command" function. Basically, ...
2
votes
1answer
20 views

Finding out if shares are made available offline in Windows 7 by default without corrupting the offline files cache?

We have some rather large shares that people connect to at work, and it would be best if these shares did not even attempt to synchronize into the local Windows 7 offline files folder. How does one ...
5
votes
0answers
160 views

How can I eliminate the “Several add-ons are ready for use” prompt in Internet Explorer?

The issue I describe here is the same as that in Group Policy Internet Explorer, Add-on list not working, but I provide more detail and troubleshooting steps, so I thought it was worth re-asking. I ...
0
votes
1answer
44 views

Win Server GPO Mapped Drive Missing “Connect As” functionality

We're having an issue trying to create a policy for mapping drives. We're unable to specify a "connect as" username and password.
1
vote
1answer
41 views

What is the advantage of moving Groups in Organization Units in AD environment beside organizing?

I know the advantage of using OUs (organizing and GPOs).with OUs you can organize your users and computers, assign group policy to them, and deligate control over a set of users and computers. But ...