Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

-3
votes
0answers
18 views

What does “Administrator” have that allows them to RDP into a server?

I am trying to setup an Active Directory so that "Domain Users" can via RDP. If I assign the role "Domain Admin" to the user, they can login via RDP no problem but when I follow many tutorials (this ...
1
vote
2answers
14 views

Allow remote desktop service to dc from specified computers

I'm planning an architecture of secure terminals only to access DC's. So i have 2 computers which are secure and if i want to connect to the dc's i will have to log into those computers So what i ...
1
vote
1answer
27 views

User logon PowerShell script not running under Windows 7 or 10

I'm testing out upgrading to Windows 10 on our domain, which is currently based on a Windows Server 2012 DC and all Windows 7 workstations. I was never able to make it work on Windows 7 so I gave up ...
0
votes
1answer
17 views

Allow users to change theme but not desktop Windows Server 2012

I am running Windows Server 2012 for a school. I have recently updated the computers to Windows 10. I am trying to allow students to change their theme, but not their desktop background. In GP, I had ...
0
votes
0answers
115 views

Map a NFS share as a drive in the SBS Group Policy Editor

For the moment I am not capable to access a NFS shares under SBS 2011. I tried to set the NFS share name in the Group Policy Editor hoping it will be resolved in the Terminal Server session where the ...
1
vote
1answer
15 views

How to know which files to specify exclusions for the installers of whitelisted apps using hashes with a Windows GPO?

To specify in the software restriction GPO, the hashes of executable/script files that are allowed to execute during the installation of a program run from, for example %LOCALAPPDATA%\Temp, during ...
0
votes
0answers
15 views

Create windows task using group policy with limited privilages that anyone can run

Using group policy I created a windows task that any user can run manually but that runs under a specific domain user (e.g. DOMAIN\task_user) that has been assigned very limited access privileges. ...
3
votes
1answer
19 views

How to set an enforced IE homepage, whilst allowing additional user defined tabs

Is there a way to use a GPO to set the IE homepage for all users which ensures that this page is always set / cannot be changed, whilst still allowing users to keep/amend additional homepages in ...
1
vote
2answers
47 views

How to assign remote users from GPO/users not authorized

My account and my admins can remote into any machine on the network, but standard users get an "user not authorized" error. The only solution I've found is to manually add the users to the Approved ...
0
votes
1answer
50 views

Selective GPO drive mapping

I have two fileservers (Windows Server 2012 R2) that have joined my domain, namely filesrv01 & filesrv02. These fileservers should both contain exact copies of the user data, and if one fails; the ...
-1
votes
0answers
10 views

How to create GPO for put cleanmgr on users desktop?

I already create some shortcut on desktop user from gpo but i dont understand how to create a shortcut for running cleanmgr from users desktop. Like that they can run this one when they want to. ...
0
votes
0answers
34 views

Creating & mapping user home folders on a network share using GPO

I have deployed a fileserver which has had its harddrive partioned to include a shared partition along with a shared folder within it. The fileserver has joined my domain, hosted on a Windows Server ...
1
vote
1answer
42 views

H and V don't work on windows server 2012 log on

I'd like to log in to windows server 2012. It worked yesterday but today I couldn't enter my current password because the H and V keys didn't work and my password include the h. I connected the ...
2
votes
2answers
86 views

deny access to file servers and PCs on a domain - guest user

We have 70+ PCs and servers, users access files by accessing the servers from their PCs. Is it possible to deny access to all PCs and servers on a network for a guest user (he should only have ...
0
votes
0answers
24 views

How do I set domain machines to ignore domain in login credentials?

Basically, some machines will allow remote access with an incorrect domain but correct username and password, but others won't. How do I set a server TO do that? My issue is that I have a host ...
2
votes
1answer
23 views

Allow Outlook to display/download images from approved domains

Outlook wisely does not automatically display/download images embedded in HTML emails. Is there way to modify this policy site-wide (group policy or something), so everyone will see images that are ...
0
votes
0answers
40 views

AD GPO “User Configuration” shows up using “gpresult” but not working. Instead “Computer Conf..” is working smoothly. Why?

Problem: I want to restrict removable storage writing access of all users except admins, and restrict removable storage execute access of all computers even admins computer (forbidding unintentional ...
1
vote
1answer
28 views

Win 2012 - how to ensure shutdown script is the last thing to run

Anyone know of a way to ensure that a shutdown batch file (Local Computer Policy -> Windows Settings -> Scrips -> Shutdown) is the last thing to run before the machine shuts down? At the moment the ...
0
votes
0answers
20 views

WMI query to find lack of drive letter for Group Policy

I'm building a group policy to apply to a subset of users within my organization. This subset of users have no Home Directory set on their Active Directory object, whereas other users have an I:\ ...
0
votes
0answers
22 views

Group policy printers not deploying - insufficient system resources

We have our Staff printers policy applied to our Staff users OU. This policy has ~60 printers deployed as Shared printers via Preferences. All bar 2 of these printers are item level-targeted to OUs ...
0
votes
0answers
14 views

How can I get a user to interact with an executable configured to run from a scheduled task?

I am trying to get the OpenVPN GUI to open for configured users automatically at (or recently after login). My original plan was to use a Computer Configuration scheduled task to run as the logged on ...
0
votes
1answer
59 views

is it possible to deploy scanners with group policy or any other solution

we are a company of 60 employees/computers and want all employees to be able to scan, we purchased a Brother MFC-L2700DW and connected it with ethernet to network i'm able to scan just fine by adding ...
0
votes
0answers
32 views

server 2012 configuration to require password on wakeup

I have a new windows server 2012R2. I have a special situation when I want my server to sleep after an idle period (successful) and require password on wake up (not working). I have tried the ...
0
votes
3answers
32 views

Run Log-on Script with Admin Rights

I created a batch logon script that checks and removes old versions of a specific piece of software and installs the newest version. Both the install and uninstall process use an .EXE file. The script ...
0
votes
0answers
6 views

SCCM 2012 requires local group policy processing be turned on, but local group policies inconsistent

My organization is in the process of migrating to SCCM 2012, from 2007. Clients aren't installing updates, and wuahandler.log indicates this is a group policy problem. The error message is along the ...
0
votes
2answers
41 views

Restricted group local administrators can RDP into DC

I have added restricted groups to my Desktops OU and this adds the "Local Admins" security group to the Local Administrators group on workstations in that OU. The issue is, that after this GPO is ...
0
votes
0answers
19 views

Is there an Windows Event Viewer Event for “No available connections” or No Ethernet Connection?

I am trying to create a GPO that disables a laptop's wireless card whenever a Ethernet LAN is detected, and Enable the wireless whenever an Ethernet LAN is not detected. Right now I have a GPO that ...
1
vote
0answers
36 views

How to disable “do not allow drive redirection” local policy not using GUI?

I need to do it preferably using powershell/batch but after searching there is only some instructions for creatig adm/admx files. Is there an easier way to do this? I've also found a registry key ...
1
vote
3answers
66 views

Store GPO Scripts in Netlogon or Policy Folder?

Is it best practice to store logon scripts centrally in \\DOMAIN\Netlogon or in the policy folder they get put in by default, eg. ...
1
vote
1answer
48 views

Chrome Group Policy - disable spell check

I need to disable spell check in Google Chrome on our terminal servers. I have setup the group policies but the only setting I can find is for SpellCheckServiceEnabled which isn't the spell check, its ...
3
votes
3answers
74 views

How to inherit from Default Domain GPO?

I recall reading somewhere that it's advisable to not make changes directly to the Default Domain GPO, but instead to create a new GPO that inherits from Default. This sounds reasonable. I'm a ...
0
votes
2answers
33 views

Printers deployed by group policy - separate policies or all in one?

We have 60 printers deployed by group policy on a 2008 R2 level domain. They are set as Group Policy Preferences in User configuration. They're all item level targeted to OUs and Security Groups ...
3
votes
2answers
53 views

script to temporarily block remote users from logging into a windows server during downtime

I'm looking for a solution to the following issue: we have a windows server with a bunch of people logging in remotely to work on stuff; when we need to upgrade the server, we issue warnings via ...
-1
votes
0answers
57 views

Noob Q: Active Directory GPO not applied immediately

What are the reasons why a GPO could take multiple days to apply? What I'm doing is adding servers to a group. The group has a GPO applied to it which determines the members of the Administrators ...
-3
votes
1answer
23 views

Issue in Accessing FACEBOOK site in Domain network

In our Domain,We have setup firewall to prevent unwanted access to the websites. But a weird thing is even network administrators(whose IPs are not blocked by firewall) cannot access to facebook ...
2
votes
1answer
45 views

openSUSE installs and VMs constantly being hacked and bricked

Sorry if this is a total newbie question, but I'm doing frontend design work for a radical political organisation and ALL my installations of Linux, be they openSUSE, Ubuntu or Fedora keep getting ...
0
votes
1answer
36 views

How to find out what application was blocked by Group Policy

Currently my network (Windows Server 2008 R2) operates on an application white list group policy (Run only specified Windows applications). Occasionally I'll run into a program where even after I've ...
3
votes
0answers
83 views

How to configure Windows to trust a network share using a GPO?

I keep getting the following warning whenever I try to open a share from my DFS. How can I configure Windows (10 in this case) to trust anything under the root of my DFS via GP? It seems odd that ...
0
votes
0answers
27 views

google chrome group policy locale

We currently have Google chrome deployed in the enterprise. We have an internal website that retrieves data from a database and people using chrome noticed the date and time format was in the US ...
0
votes
3answers
21 views

Internet Explorer maintenance is missing and proxy cannot be removed

There are proxy settings configured on a policy. The exact location is User Configuration > Windows Settings > Internet Explorer Maintenance > Connection / Proxy settings. Since this is a Windows ...
0
votes
1answer
45 views

Group Policy Object not applied to client computer

I am taking over our entire Microsoft based management, this includes our AD servers, GPOs, etc. So with that being said, I don't know everything about how this setup is configured. However, I have ...
6
votes
2answers
300 views

What does 'Log on as a Service' actually mean?

I am building Group Policy for a new domain that we are migrating to. In our current environment the settings Log on as a Service is set at the Server OU level - which has about a hundred Service ...
2
votes
0answers
61 views

Group Policy - Not automatically running on all machines

We are facing an issue on one of our domains where machines are not all running group policy refreshes at its default interval. I am not seeing the 1501 events logged in the system log, I occasionally ...
1
vote
2answers
205 views

Configure same Internet Explorer zone mappings with and without ESC via GPO

Our Active Directory domain consisting of Windows Server 2012 R2 servers and Windows 7 workstations configures Internet Explorer security zones using this Group Policy setting: Computer ...
0
votes
1answer
88 views

Is using the “IP Security Policies on Active Directory” settings in Group Policy a best practice?

Is using the "IP Security Policies on Active Directory" settings in Group Policy a best practice? I recently created a new GPO and assigned the "Server (Request Security)" policy. Almost instantly I ...
0
votes
1answer
11 views

Missing policy in Group Policy Editor

I am seeking to turn on IE Enterprise Mode: https://technet.microsoft.com/itpro/internet-explorer/ie11-deploy-guide/turn-on-enterprise-mode-and-use-a-site-list I followed the steps but there is no ...
1
vote
0answers
22 views

Win Server 2012 R2. Apply security GPO to local users on a specific machine

We have a "demo" machine which we use for providing remote access to demo software as a local user. Is there a way to hide and deny access to everything except the user folder using a GPO?
2
votes
2answers
49 views

Extracting GPO through Commandline/Powershell

Im writing a script through powershell and i would like to extract the whole local policies. I understand that secedit will exttract the Account policies only, and the only way to do this is via going ...
3
votes
0answers
75 views

Cannot set DSCP on Windows 10 Pro via group policy

Setting 'policy based QoS' on Windows 10 does not apply the DSCP value to outgoing traffic. I want to be able to set the value of DSCP traffic for certain processes. Using gpedit.msc group policy ...
1
vote
0answers
68 views

Change or delete local windows firewall rule using group policy firewall rules

When I install a particular program on a computer it creates an overly lenient local firewall rule that allows inbound connections to port 1234 from any subnet. I want to create a more restrictive ...