Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

-2
votes
0answers
21 views

I got this error “You need permission to perform this action” when I try to write compact disk

OS: Windows server 2012. User: Administrator. I googled this problem and performed these tasks: 1- I changed the all group policy settings to enable CD burning(such as deny write cd, remove cd ...
-1
votes
1answer
38 views

Domain Policy - Windows Server 2012 R2 Essentials role

I have a Win 8.1 Workstation joinde in a Windows Server 2012 R2 Domain (Essentials role). When trying to save Remote Desktop credentials I got this message. Your system administrator does not ...
0
votes
1answer
15 views

Disable secure logon for tablets connected to domain

I have a domain set up with Windows 2008 R2, and by default requires Ctrl + alt + del to unlock computers. I have been pulling my hair out trying to configure GPO so that tablets will not require Ctrl ...
0
votes
1answer
52 views

Can't open Active Directory Users and Computers, Group Policy settings issues

In the past I've been able to open "Active Directory Users and Computers" to manage the users and computers on our Windows Server 2008 R2 box. We just recently made some changes to our Group Policy to ...
0
votes
0answers
21 views

Windows Server 2012 R2 Update Notification on login spash screen

we are have two load balanced svr 2012 R2 machines, front end netscaler, using citrix reciever to login. The issue i have is i cannot seem to disable the notifications when users are logging in that ...
2
votes
1answer
22 views

Remote Computer Management from Active Directory Snap-In fails with DCOM error 10006

So here's a little background. Our system originally started with Windows Server 2003 machines and eventually over time expanded and grew. We still have a few Server 2003's but they're being removed. ...
-1
votes
1answer
50 views

GPO edit mess , system error [closed]

I messed around with a GPO editing tool in order to implement "hide computer drives" policy on windows 2003 server. Since then I got a system error on my events log to say : Windows cannot access the ...
2
votes
2answers
46 views

Group Policy to Place Shortcut on All Users Desktops

We're looking at using a GPO to put a shortcut to a company web app on all users' desktops. Different users are on different Windows versions, meaning the location varies: c:\documents and ...
2
votes
1answer
29 views

How to Automatically Tust Auto Enrolled Code Signing Certificates

In my organization all developers are setup to be granted a Code signing certificate via Auto Enrollment. Additionally, PowerShell is configured by group policy to require all scripts to be signed. ...
1
vote
1answer
26 views

Can GPO templates in Server 2012R2 manage Win8.1 Win10 & Server 2012R2?

We just upgraded our DC to server 2012 R2 and testing Win8.1 / Win10 / Server 2012R2 with it. Just wondering that if the native admin templates in 2012R2's GPO can manage all win8.1/Win10/2012r2? or ...
0
votes
3answers
36 views

Active Directory Export GPO user

I would like to get in .csv (or any other readable format) all my AD users and the policies that they need to comply (the type of authentication each user needs, his event logging properties and even ...
7
votes
2answers
66 views

Enable Certificate Enrollment Policy and Request a Cert using PowerShell

Right now, I'm doing the following to request a cert from a CEP server: Open gpedit.msc Under Computer Configuration > Windows Settings > Security Settings > Public Key Policies, double click ...
1
vote
0answers
32 views

Windows user privileges when running scheduled task

I posted a question a while ago about allowing a specific user to start/stop Windows services. Provide a user with service start/stop permissions I decided to revisit the issue. I have no idea what ...
0
votes
0answers
17 views

Removable Storage User Configuration Group Policy not working when Windows Server 2008 R2 is used as a client

I have enabled read write restriction for a group of users, if a user from this group is to log onto a win 8.1 system or Windows 7 system and tries accessing a USB drive it says access is denied, ...
3
votes
1answer
52 views

2008 GPO not replicating on 2012 server

I have a Windows Server 2012 system and the domain controller is running Windows Server 2008. The domain controller also hosts the domain group policy. Most of the settings have replicated to the ...
5
votes
2answers
307 views

Is there a way to tell how long a machine has been in an security group?

Machines get added to a security group to prevent them from getting a GPO. I'd like the machines to get removed after 30 days of being in the group. Ideally, I'd like to also be able to generate a ...
1
vote
1answer
37 views

Lockdown Mozilla Thunderbird on Windows Remote Desktop Services

I've installed Mozilla Thunderbird 31.3.0 on a Windows Server 2012 R2 which has the Remote Desktop Services role. I want to configure the Thunderbird program and set each user's email account etc and ...
0
votes
0answers
68 views

“Group policy client service failed. The logon access is denied” when copying roaming profiles to new server. (Samba)

We have perfectly working roaming profiles on Samba 3.3.10 (SuSE) with Windows 7 clients. We configured our new server with same domain name, Samba 4.1.11 (Debian). On the new server, for newly ...
0
votes
2answers
29 views

Assign DNS settings on client via elevated script in GPO

i have installed windows 2012 as a member server in my existing windows 2008 DC. now i want to assign secondary DNS on my windows 7/8 client PCs. I do not have DHCP in my environment. I tried to find ...
1
vote
1answer
39 views

What are the security implications of the “Allow DNS Suffix Appending to Unqualified Multi-Label Name Queries” setting?

The Allow DNS Suffix Appending to Unqualified Multi-Label Name Queries group policy was introduced in Windows Vista, and blocks the behaviour of child subdomains being tested against domain suffix, ...
0
votes
0answers
30 views

Unsolicited Remote Assistance on domain

I manage a domain using win 2k8 r2 and 100 PC on Windows7. I have configured the Unsolicited Remote Assistance proceeding with all the requirements posted here ...
-1
votes
0answers
54 views

Microsoft Domain Controller, Account lockout polcy not locking out the users?

Just recently i have hardened the Microsoft 2003 domain controller, due to PCI-DSS requirement. I used CIS- cookbook as a guidance. the password threshold policy is set to 3. but as testing when i try ...
0
votes
0answers
28 views

Remove mapping drives from RDP to user from exteral network

I would like to know if you guys have a solution to my problem. I have a terminal server 2012 that can be accessed remotely after a VPN connection and from the LAN. My question is how can I create a ...
4
votes
2answers
156 views

Pin “Run” to taskbar through group policy

Is there are way to pin the "Run" button to taskbar through group policy or a script? Only the specific items needs to be pinned. The other items are not to be touched. Partial solutions I found on ...
1
vote
1answer
30 views

How to disable an account after being created 30 days

Is there any built-in group policy object in windows server 2003 or 2008 for disabling an account or set of accounts in an organizational unit after 30 days since that account was created. If there is ...
0
votes
0answers
133 views

Name Resolution failure on the current domain controller

I'm using windows server 2008 R2. One day my server got issue with Group Policy. Here is the log in event log: The processing of Group Policy failed. Windows could not resolve the computer name. ...
4
votes
2answers
52 views

Windows 7: Deploying Printer Settings without a Print Server

I am a part-time Windows 7 administrator in an office with about 10 PCs and a standalone networked printer... No Windows print server, though we do have an Active Directory domain. So I have been ...
1
vote
1answer
50 views

Can't access share sometimes and some strange performance issues

I'm getting error 0x80070043 "The network name cannot be found" when accessing \\dc01 (the root), but can access shares via \\dc01\share. When I get that error I also didn't get the network drive on ...
5
votes
2answers
45 views

BITS policies to limit bandwitdth usage is not taking effect

We have a fleet of roughly 1300 Windows 7 SP1 clients who use a centralized WSUS server to download updates from. We've implemented the following BITS policy to limit the bandwidth during working ...
5
votes
3answers
131 views

How do Administrative Templates (ADMX files) work?

I know basically nothing about Group Policy, other than that I've occasionally edited some settings using Local Group Policy Editor on my local Windows machine. I do have experience with applying ...
0
votes
1answer
90 views

Can't store TPM information in AD

I am attempting to use GP to store TPM information in AD. I have verified that the schema contains the proper object property, and verified that the property and the ACE is present on the given ...
1
vote
1answer
32 views

Group Policy WMI Filter to Check if Windows Feature is Installed

The following returns true for servers without the Server GUI installed: WMIC PATH Win32_OptionalFeature WHERE "Caption = 'Microsoft-Windows-Server-Gui-Shell-Package-DisplayName' AND InstallState = ...
0
votes
1answer
85 views

GPO's filtered out - wrong domain name reported by BGinfo

I am trying to locate a group policy deployment issue I have. The problem is that domain related GPO's are filtered out. We renamed our domain lately from: CONTOSO to: lan.CONTOSO.com (Netbios name ...
1
vote
1answer
87 views

gpupdate fails, access denied - event ID 1055

I became aware of this issue yesterday after pushing out GPO for Software Policy Restrictions. I am unable to push out MSI installations to certain computers. I went to look at the one of the ...
-2
votes
1answer
62 views

Set default browser for all user on PC via GPO

I need one way to make mozilla as default browser on a group of PC-s I have in domain, I have tried many GPO but no luck until now. I have done it manually but this is a user configuration so every ...
1
vote
1answer
193 views

Can I Deploy a batch file with Group Policy to run as administrator?

I have created a batch fill which will block Facebook by amending the hosts file in this location: C:\windows\system32\drivers\etc\hosts This is the contents of the file: @echo off echo ...
1
vote
1answer
99 views

gpupdate doesn't work on everything

On a Win2008 Domain Controller, I've changed an user account property "Account is sensitive..." Of course, I want that GPO to apply immediately So I try gpupdate (or gpupdate /force), but it ...
0
votes
2answers
83 views

Creating Scheduled Task from Group Policy. Can't write to network share?

I am using NinitePro and group policy to deploy and update software on our small network of 150 Win 7 and WinXP machines. I am roughly following these instructions: ...
-1
votes
1answer
55 views

Domain controller is not listening on port 445

Is there a way to find why the DC is not listening on 445? -> Firewall rules checked , no denies found and the traffic is allowed. -> file share and print share services running. What else to check? ...
0
votes
0answers
41 views

Local group policy taking precedence over Default domain controller policy

Modified Default domain controller policy to disable and rename the Guest account name using below settings Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> ...
-1
votes
1answer
27 views

802.1.x GPO configuration with restriction by computers and users

802.1.x configuration possible using Machine Policy GPO. So, typical scenario is creating security group for computers and applying our policy with 802.1.x to this group. After this all machines from ...
0
votes
1answer
50 views

Bginfo via GPO Server 2008 r2 - Timer Not Working

I am running Bginfo via GPO on Server 2008 r2 with Windows 7 clients. The bat file (below) is run by: User Configuration > Policies > Windows Settings > Scripts (Logon/Logoff). Bat File ...
3
votes
1answer
95 views

Acrobat Reader XI addon gets disabled periodically in Internet Explorer within Windows domain

We have a followig problem that happens on new workstations with Windows 7 x64 and Acrobat Reader XI only. Every few days the following key is automatically added to registry: ...
0
votes
0answers
23 views

Win7 Desktops secpol and local security policy not showing auditing

I have a Server 2008 R2 and Windows 7 Desktops where I have a Server 2008 GPO to Audit Events on the server and desktops, however at the desktops locally auditing is greyed out and displaying ‘no ...
0
votes
1answer
47 views

Network Security: Lan Manager Authentication Level

I'm a little bit confused by the explanation provided for the setting "Network Security: LAN Manager AUthentication Level" in group policies. The provided explanation only talks about clients and ...
2
votes
1answer
81 views

How do I display users' folders (My Documents, Contacts, etc.) in their profile location after redirecting them to server?

I'm implementing folder redirection for a domain, and I'm trying to make this as seamless as possible for current users. I assumed the %USERNAME% subfolders would remain in the same place but point to ...
0
votes
0answers
27 views

Group policies overriding

I am a learner in AD and GPO's. Though I have implemented some GPO's in my environment, now a little bit confused.. My confusion is with the overriding of GPO. Basically what I am trying is that I ...
2
votes
1answer
109 views

Users still get UAC prompt after allowing printer install and alter LAN connection by GPO?

I've implemented the following Group Policy settings to allow non-admins to install printer drivers and to enable / disable their wifi: User Configuration -> Administrative Templates -> Network ...
1
vote
0answers
66 views

%systemroot%\system32\GroupPolicy gone

DC Win2012, Client XP I have a couple of problems getting GPOs applied - well, they show up as getting applied (gpresult) but the software i tried to deploy didnt got deployed. I enabled ...
1
vote
2answers
52 views

Windows Server Program Restrictions for Administrator?

I have a Windows Server 2008 R2 OS where I just created a standard user account. I went into the Local Group Policy Editor and set the OS to only allow certain programs to be run. I figured that this ...