Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
0answers
10 views

Is there a way to obtain list of policies applied to built in accounts (e.g LocalSystem, IIS_USRS, etc.)

Is there a way to obtain list of policies applied to built in accounts (e.g LocalSystem, IIS_USRS, etc.)? I am working on a tool, which should monitor policies applied to specific set of users, ...
1
vote
2answers
39 views

Windows 8.1 locks account after 3 invalid attempts even if GP is not defined

I mistyped my password three times today, and my account became locked on my windows 8.1 pro workstation. I checked Resultant Set of Policies (rsop.msc) and all three relevant settings are "Not ...
1
vote
1answer
38 views

Group policy infrastructure failed due to network access is denied

A number of my servers are not able to sync into our WSUS server. On digging, we noticed a number of group policies are not being applied. On running rsop.msc, I get the following error message: ...
1
vote
3answers
51 views

Run a script when joining a domain

I have a Microsoft domain (mostly 2008r2\7). I looking for a way to run a script immediately after (the restart after) joining a domain (without requiring user login), and so far I've failed. Also, I ...
2
votes
0answers
28 views

Best approach to deploy DLL file updates to Win7 clients

We are in a Windows 7 / Server 2008 R2 domain environment. We have a .NET application with lots of internal libraries for different UI and other features. We deploy it from a share where a directory ...
2
votes
0answers
12 views

Identify non-domain remote clients with Item-Level targeting

I would like to apply a group policy preference setting (to deploy a shared printer) only if a user is connecting to a RDSH server from a non domain-joined client computer. Many of these clients will ...
0
votes
1answer
35 views

mmc.exe blocked by group policy

I am changing some permissions on a small work network that I've been playing in. Domain admin and administrator permissions were so tied up that they essentially were the same account. After getting ...
1
vote
2answers
33 views

Deploying Client Software via GPO - Will server reboot affect?

I have deployed a MSI file via a GPO to one of my AD OUs. For an MSI to install via the GPO, I know the clients need to be rebooted. I have planned a reboot for the clients, but I was also planning ...
4
votes
1answer
31 views

GPMC missing Hide/Show links

We currently have a single 2012 R2 server in our domain. As we're rolling out Windows 8+ machines I like using it for Group Policy Management. For some reason the Group Policy Management Console on ...
1
vote
0answers
22 views

Windows 7 Pro 64-bit Standard User Default Profile: Local Group Policy or Sysprep?

I have a Windows 7 Pro 64-bit machine that will be hosting three Windows 7 Pro 64-bit VMware Player 7 virtual machines. I have the first VM completed and am about to create the first standard user on ...
2
votes
1answer
28 views

Network drives not mapping correctly with group policy

One of my clients is having random issues with the mapping of network drives. Users get mapped drives from group policy based on the security groups they are in. An example issue with one user: ...
0
votes
1answer
7 views

Identifying AGPM changes not yet in production

How do I find AGPM checked in changes that haven't yet been pushed to production? It seems like this should be easy, but I haven't found documentation anywhere. I was originally thinking that the ...
3
votes
3answers
110 views

WMI Processor Filtering Preventing GPO Software Installation?

I've been battling this issue for a few days. I've been trying to deploy Symantec Endpoint Protection for a few days. I created a GPO and linked it to a WMI Filter so that it would only target the ...
2
votes
1answer
39 views

Group Policy to disable Thumbs.db caching Server 2012 and Windows 7 clients

We are trying to push out GPO to Windows 7 clients to disable Thumbs.db caching. The setting Turn off the caching of thumbnails in hidden thumbs.db files is found here: User Configuration > ...
0
votes
1answer
39 views

Trying to deploy Adobe Reader XI via GPO on Server 2012 R2 and Windows 7

this is what I did: Downloaded .exe from Adobe-ftp successfully extracted with "AdbeRdr11010_de_DE.exe" -nos_ne 'slipstreamed' the .msp into the .msi with klaus-hartnegg's tool made a .mst with ...
2
votes
3answers
38 views

How to use Group Policy to force user compliance

I need recommendations for using group policy to restrict a user's computer/network access until the user takes an action, in this case acknowledging he has read an acceptable use policy. The user ...
2
votes
1answer
31 views

Group Policy and Internet Explorer's Site to Zone assignment issues?

We are using GPO to apply Site to Zone assignements for our users so that we can add some specific addresses into their Internet Explorer's Intranet and Trusted zones. Using the Site to Zone GPO ...
4
votes
2answers
44 views

Adding registry values to all users on domain

I have four registry values I would like to add to both HKCU and HKLM for all users connected to a network domain. Currently we are manually running a batch file on each of the computers when ...
1
vote
1answer
49 views

Mass updating Group Policy, may be with scripts

Sorry for long preamble and thanks in advance to one who could read it all. I have about 60 network printers. Some are in HQ, some are in distant locations (from 1 to 300 km away of HQ). Some ...
2
votes
0answers
40 views

Associate user picture to domain account

I want to assign users a picture (o let them assign their own picture) to their user domain account and wherever they log in, that picture should appear as well. How can I do this using group policy? ...
0
votes
1answer
28 views

How to change Account Lockout Threshold when the path cannot be found

I am trying to change the account lockout threshold for all the users on our domain. The threshold should be three, but there are users who get locked out after one mistyped password, and others who ...
0
votes
1answer
52 views

How do I schedule a batch file to run on startup or shutdown?

I have 2 batch files that send emails intended to notify of a server shutdown or startup. The batch files call an exe with a single argument, the message to be sent. The exe comes from a vb.net ...
2
votes
2answers
38 views

Can I apply GPO settings to 2008 R2 member servers if I have a 2003 domain functional level?

I was asked to help out in a problem, there is a domain still operating at a 2003 functional level, there are 2008 R2 member servers in this domain and we need to know if there is anything we have to ...
3
votes
1answer
48 views

Create a security group that can promote a member server to domain controller without being in the domain admins group

I am trying to figure out a way to delegate permission to a security group to add domain controllers to a domain. The catch is I do not want to add them to the Domain Admin or Enterprise Admin ...
-6
votes
2answers
44 views

How to protect Windows Server 2008 r2 from persons, which have physical access to computer? [closed]

One server is available for other users, and we think that someone may steal passwords from it. I can not set a password on boot, because sometimes there is electricity failure, and UPS can hold it ...
1
vote
2answers
57 views

IE (10) blocked this website from displaying content with security certificate errors - show content

Currently having an issue with a client that is getting the following error when loading a certain website: I have added the site to trusted sites and enabled 'display mixed content' through GPO. ...
-1
votes
1answer
22 views

GPO to lock computer when idle effects also when out of the domain [closed]

I applied a GPO to lock screens when idle after 5 minutes. Funny thing is, it affects computers also when not connected to the domain (at home for instance). Any idea how to avoid this? Thanks
-1
votes
0answers
40 views

Deploy printer via GPO but GPO update show fault

I've just deploy new printer via GPO but it is not working. I checked by update GPO by run cmd gpupdate /force but it shown me the error as below. Please help me , Where to check ? what is the ...
1
vote
1answer
33 views

IE connection setting: Automatic configuration vs. manual proxy server - precedence?

When I choose Use automatic configuration script and point it to our proxies pac-file, will the proxy setting on the bottom become inactive?
1
vote
0answers
34 views

How to use Group Policy to control local administration access (LOCAL ONLY)

At the company I work for, we have about 75 computer users. We have a Microsoft Domain Controller in our server environment (MS Server 2012) with Active Directory. When users need to install ...
2
votes
1answer
56 views

Enforce minimum wait time for network connection

We are currently using multiple HP ProCurve V1810-48G switches in our environment which we believe are causing issue with GPO based software installations. This problem surfaced after installing SSD ...
0
votes
2answers
53 views

Enable Windows Time Service on Secondary Domain Controller

We have an interesting scenario at my workplace. Our primary domain controller started to fail, so we installed a secondary domain controller to allow people to login when the primary would fail. ...
0
votes
2answers
52 views

Group Policy | New Password Policy for a few users

We have a few users that are traveling and I would like their passwords to be changed more often than the rest of the folks in the office. How should I go about creating a new policy with their ...
2
votes
1answer
32 views

CIS benchmark differences between 2008R2 to 2012R2

I'm looking at hardening our golden image inline with the CIS benchmarks for Windows Server 2008R2 and 2012R2. But, after looking at the two benchmark documents(registration required - sorry) from ...
0
votes
0answers
10 views

Install program to single RDS user

I'm looking to install an application to a single user in a RDS environment without installing it to the other users. The user is an Admin. I have very little experience with GPO but imagine it's ...
0
votes
0answers
57 views

replace/update user32.dll.mui in System32 through GPO doesn't work

I edited the user32.dll.mui in system32 to display our company name as a watermark. I have already tried it on my PC manually and its working, now i just need to implement it to over 100 PC clients ...
1
vote
0answers
30 views

Disable Start menu new Items highlighting by GPO in Windows 2012 R2

I need to disable the new items highlighting (New items are marked with "New") on Windows 2012 R2 (remote desktops). I tried setting the registry value ...
4
votes
1answer
135 views

How to let non-admins manage selected domain groups' membership?

I'm on Windows Server 2012, Active Directory is on and working. All the project we manage have 2 dedicated groups, one for managers with access to all related files (including invoices, timetables and ...
0
votes
1answer
29 views

RDS Farm setting applied through GPO causing connection issues

I'm having a strange issue with some RDS GPO's. Since automating the RDS server build process through SCCM I've moved the RDS farm / connection broker settings to a GPO. This works fine, once the ...
1
vote
0answers
52 views

Firewall rules to allow Hyper V Manager to connect to Hyper V Server 2012 R2?

I moved a Hyper V host into our Servers OU in Active Directory, which has some group policies linked. Now I am unable to connect to the Hyper V host with Hyper V manager. It was working fine before ...
0
votes
0answers
30 views

Editing the default meeting time

Does anyone know how to edit the default meeting time via GP for Office 2010 ? I've looked everywhere for this setting and cannot find it on any GP Admin Templates, we are looking to make the default ...
0
votes
0answers
23 views

List of new and changed group policy settings between 2008 and R2

We recently upgraded our DCs to 2008 R2 from non-R2 2008 servers. Since doing that our KCD authentication has been broken. I assume this is some new or changed group policy object that has been ...
0
votes
1answer
49 views

GPO Office Installation - Script runs on PC, How could I get it to appear when a user logs in?

I currently have a GPO created that installs Office 2010 for users during startup of the PC. This script is set to run for specific PCs. Is there any way that I can get the script to appear and run ...
3
votes
1answer
35 views

What happens to non-domain controller workstations/servers when user rights assignment policies are removed/no longer apply?

I'm trying to do a good ol' fashioned Group Policy Object clean-up job on our domain controller that was upgraded from Windows 2000 (Small Business I think) to Windows Server 2008R2. In my company's ...
1
vote
0answers
46 views

Getting Group Policy identifier in PowerShell

Some of our computers have a random "local group policy" being set that forces them to check a nonexistent intranet server for Windows Updates instead of using WU over the internet as they should. ...
0
votes
0answers
31 views

Folder Redirection for user logging into workstation and server

We have 4 admins that administer multiple Windows 2012r2 servers. Our IT Manager has asked that we change the way we log on to servers now for auditing reasons after an ex admin went rogue. We have ...
1
vote
1answer
34 views

Upgrading from 2008 to R2 didn't update Group Policy Management

I recently updated our domain controllers from Windows Server 2008 to Windows Server 2008 R2. The main reason for this was group policy. We had machines in our domain that were 2008 R2 and the ...
1
vote
1answer
23 views

Single, parameterized GPO for managing group membership

We have a OU design in our domain in which each "system" (web services and similar) has it's own OU, under which is nested the servers and accounts that it uses: ... + System A + Servers ...
0
votes
1answer
26 views

Group policy redirection of 'recent items' to network share

Was tasked with finding a way to redirect a user's recent items to \[network share]\recent. Server 2008 GPME: User Configuration-Windows Settings-Folder Redirection doesn't have recent items as an ...
2
votes
1answer
54 views

Managing power options

For various reasons, we want our clients' computers to not sleep when on AC. We have been running the following script with moderate success: powercfg /change standby-timeout-ac 0 However, the ...