Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

4
votes
1answer
95 views

How to let non-admins manage selected domain groups' membership?

I'm on Windows Server 2012, Active Directory is on and working. All the project we manage have 2 dedicated groups, one for managers with access to all related files (including invoices, timetables and ...
0
votes
0answers
14 views

RDS Farm setting applied through GPO causing connection issues

I'm having a strange issue with some RDS GPO's. Since automating the RDS server build process through SCCM I've moved the RDS farm / connection broker settings to a GPO. This works fine, once the ...
1
vote
0answers
13 views

Firewall rules to allow Hyper V Manager to connect to Hyper V Server 2012 R2?

I moved a Hyper V host into our Servers OU in Active Directory, which has some group policies linked. Now I am unable to connect to the Hyper V host with Hyper V manager. It was working fine before ...
0
votes
0answers
16 views

Editing the default meeting time

Does anyone know how to edit the default meeting time via GP for Office 2010 ? I've looked everywhere for this setting and cannot find it on any GP Admin Templates, we are looking to make the default ...
0
votes
0answers
19 views

List of new and changed group policy settings between 2008 and R2

We recently upgraded our DCs to 2008 R2 from non-R2 2008 servers. Since doing that our KCD authentication has been broken. I assume this is some new or changed group policy object that has been ...
0
votes
0answers
26 views

GPO Office Installation - Script runs on PC, How could I get it to appear when a user logs in?

I currently have a GPO created that installs Office 2010 for users during startup of the PC. This script is set to run for specific PCs. Is there any way that I can get the script to appear and run ...
2
votes
1answer
26 views

What happens to non-domain controller workstations/servers when user rights assignment policies are removed/no longer apply?

I'm trying to do a good ol' fashioned Group Policy Object clean-up job on our domain controller that was upgraded from Windows 2000 (Small Business I think) to Windows Server 2008R2. In my company's ...
1
vote
0answers
37 views

Getting Group Policy identifier in PowerShell

Some of our computers have a random "local group policy" being set that forces them to check a nonexistent intranet server for Windows Updates instead of using WU over the internet as they should. ...
0
votes
0answers
20 views

Folder Redirection for user logging into workstation and server

We have 4 admins that administer multiple Windows 2012r2 servers. Our IT Manager has asked that we change the way we log on to servers now for auditing reasons after an ex admin went rogue. We have ...
0
votes
1answer
26 views

Upgrading from 2008 to R2 didn't update Group Policy Management

I recently updated our domain controllers from Windows Server 2008 to Windows Server 2008 R2. The main reason for this was group policy. We had machines in our domain that were 2008 R2 and the ...
1
vote
1answer
23 views

Single, parameterized GPO for managing group membership

We have a OU design in our domain in which each "system" (web services and similar) has it's own OU, under which is nested the servers and accounts that it uses: ... + System A + Servers ...
0
votes
1answer
11 views

Group policy redirection of 'recent items' to network share

Was tasked with finding a way to redirect a user's recent items to \[network share]\recent. Server 2008 GPME: User Configuration-Windows Settings-Folder Redirection doesn't have recent items as an ...
2
votes
1answer
28 views

Managing power options

For various reasons, we want our clients' computers to not sleep when on AC. We have been running the following script with moderate success: powercfg /change standby-timeout-ac 0 However, the ...
0
votes
0answers
28 views

Time Zone keeps changing after sync with PDC in different site

Background: I have a single domain, running in 2 sites that is connected using Site-to-Site VPN. Site A is running in time zone 2:00+ UTC Site B is running in time zone 4:00+ UTC DCs are correctly ...
1
vote
1answer
20 views

Gpresult provides wrong output on vista machine regarding UAC settings

I have two workstations running Windows 7 Professional 64bit with SP1 and Windows Vista Business 32bit with SP2. Both are in the same OU and have a GPO linked named Hardening_Computers_Clients. This ...
0
votes
0answers
46 views

Cannot enable more than 2 simultaneous Remote Desktop Connection

Windows Server 2012 is unable to allow more than 2 simultaneous Remote Desktop Connections: Instead of editing the group policy : "Limit Number of connections to 999999" Disabling "Restrict Remote ...
4
votes
1answer
80 views

Is there a way to disable “check online for updates from windows update” in windows update settings?

I have configured WSUS server in order to preserve bandwith in the network wile keeping essential updates turned on using that WSUS. Intranet WSUS server pointing to client pc and other settings are ...
5
votes
1answer
70 views

Allow domain users to modify local printer settings Windows 7 via Group Policy

I've been scouring the internet for days and thus far have had zero luck in finding a solution. Short Version: I need to allow users to modify their locally installed printers. Specifically, they ...
0
votes
2answers
53 views

GPO Policy 'Applied' but not taking effect unless gpupdate /force is run

I do not yet have a 2012 DC or a Win 8 machine to manage IE 10 / 11 settings via GPMC. So I have created a policy with a registry setting so that users in a specific OU get specific .PAC settings in ...
2
votes
0answers
27 views

Do GPOs apply to interactive logon only?

I am trying to enable certificate autoenrollment and credential roaming through a GPO in an ADS domain (DCs are Windows Server 2008 R2). I can interactively log on as a newly created user (on a member ...
1
vote
1answer
41 views

Group Policy Caching for Folder Redirection

I recently set up a new file share on a new server for Folder Redirection for a subset of our users. I robocopied the files, applied the policy last week, replacing the old policy, tested with a few ...
0
votes
1answer
34 views

Windows Server 2012 - GPO settings - Security Filtering and “Authenticated Users” confusion

So I want to add a GPO for a few computers at first then deploy this rule to all computers when everything is confirmed OK on the test systems. I am having troubles getting the GPO to deploy to only ...
0
votes
1answer
37 views

Prevent authentication from specific machines [duplicate]

I have two domains PRIMARY and DEV. These both contain matching service accounts for various applications. PRIMARY also contains user accounts We have a one way trust relationship such that DEV ...
2
votes
1answer
59 views

How to hide running logon scripts from users (.vbs) without using a wrapper script?

I have a GPO (configured with loopback replace) that runs a logon script (.vbs) and linked it to an OU containing a W2012R2 RDS host. I have made these (question related) changes to the policy: ...
1
vote
0answers
47 views

Various printer deployment issue with Server 2012 R2

I have just set up a new remote desktop infrastructure, with all servers being built on Server 2012 R2. I have 7 session hosts, and a central file/print server. On the print server, I have added ...
2
votes
1answer
45 views

Group Policy Preferences - Registry: 0x80070005 Access is denied

I have created a GPO to apply several registry keys to a Windows Server 2008 R2 machine in my lab. The relevant keys are within HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Internet and I have therefor ...
2
votes
2answers
62 views

How do I use PowerShell GPO cmdlets to set up file security?

I need to automate the creation several security groups, then create and apply a GPO that includes OU / Security group specific file permissions and auditing. I have the OU and group creation done. ...
1
vote
0answers
44 views

Microsoft Server 2012r2 GPO templates

I have a question to ask regarding Windows Server 2012 R2, but before I ask let me give you some details about our environment. We have a single forest, with a single domain, and our functional ...
3
votes
3answers
115 views

Use Script To Edit Local Group Policy Windows Server 2012

I'm hardening a Windows Server 2012 R2 machine for serving secure web pages and following a guide that lays out multiple Local Group Policy Settings and Registry Settings. When researching how to ...
-2
votes
1answer
50 views

How to add bunch of admin accounts to 20 Windows 2012 servers

Is there a quick way to add bunch of admin accounts to 20+ Windows 2012 servers? It would be way too cumbersome to rdp to each server and add accounts to the local admin group.
3
votes
1answer
90 views

How to remove a GPO setting that used a custom ADM

I'm trying to deal with some legacy group policies that applied registry settings using ADM files. I'd like to remove these registry settings and set them up as group policy preferences, but how do I ...
0
votes
0answers
20 views

Terminal Session Targeting by IP Range broken

We have a group policy preference to connect terminal server users to the printers at their site with Terminal Session Targeting for an IP address range. It works well for users that use the IGEL thin ...
0
votes
1answer
69 views

Windows XP Clients cannot access \\domain.local\SYSVOL share on 2012 R2 Domain Controllers

We've recently promoted 3 new 2012 R2 domain controllers and still have 1 2003 domain controller on the network, which we're planning on demoting in the next week or two. We seem to be having a ...
0
votes
0answers
17 views

Folder Redirection Server 2003 Redirect to the local userprofile location does not work on some files on some computers

Was using GP Folder Redirection for three years on AppData, Desktop, and My Documents folders. Worked with no problems. Redirect location was \Server1\Redirect. Needed to move files back to ...
1
vote
2answers
31 views

View GPOs applied to a specific security group

A group was created in the Active Directory Users and Computers to give local admin rights to certain users on our domain. After taking over management of this system from a previous employee I am ...
1
vote
0answers
29 views

Remote Desktop Server: Restrict drive redirection on per user basis?

For a Remote Desktop Server, drive redirection can be controlled via Group Policy. Unfortunately, this is a computer configuration, so it will either apply to all users or none. Is there a ...
3
votes
2answers
59 views

Windows default sound scheme using GPO

We have 50 windows 7 clinet computers in an AD OU for which we need to change Windows Default Sound Scheme to None. How this could be accomplished using AD group policy?
1
vote
0answers
8 views

connections blocked to remote computer while no user logged on windows 7

A have a bunch of computers, all in the same OU, that are not contactable over the LAN (no pinging, no c$, no computer management, no SCCM connection) while the computer is not being used. The ...
18
votes
1answer
1k views

How to time-bomb a GPO?

I am doing a lot of work in higher education where it is a rather common requirement to reconfigure a number of Windows domain members (e.g. PCs in a classroom) for the duration of a specific course ...
2
votes
1answer
51 views

Disabling the prompt to “Click Continue to permanently get access to this folder” (e.g. via GPO)

http://support.microsoft.com/en-us/kb/950934 describes the manner in which, when a member of the Administrators group uses Explorer to navigate to a folder to which the Administrators group has ...
1
vote
0answers
43 views

Windows Servers Deny Remote Creditials

Here's the layout: -Four domain controllers(2003 & 2008) -Windows Servers (2003 & 2008) -The PDC is Windows 2008 and there are some GPOs -All servers ping, no firewalls, no major or much ...
3
votes
2answers
300 views

GPO option for “Show Desktop Icons”?

Is there a GPO setting (Server 2008 R2 domain) that we can use to set the following desktop property? View > Show Desktop Icons
1
vote
1answer
34 views

Looking for Ideas and reasons to move from a single log on script to Group Policy

So currently our senior VP in IT has a single log on script that is run via ADUC and does things like install 3rd party updates, maps networked drives, inventories computers, copies files to desktop, ...
1
vote
1answer
24 views

Group policy drive mapping extension not applying to Vista SP2 machine

I have one GPO (called Desktop_User) that applies to a Windows 7 and a Windows Vista machine. When I log on to this systems, the drive mapping works on the Windows 7 machine but the Windows Vista ...
-1
votes
0answers
8 views

Auditing tool for Windows security policies [closed]

What tools do you use to audit Windows security policies. For example, I configured a Windows machine (A) with the policies (GPO security policies) that we want. (A) now is a baseline. How then could ...
1
vote
2answers
34 views

Apply a password group policy seperate from the Default Domain Policy?

Im trying to keep my Default Domain Policy clean and standard and I want to make a GPO for my password policies. I made it but it still gets the policies from the Default Domain Policy object. I ...
0
votes
0answers
31 views

Can't Remote Desktop on LAN, Firewall Rules in Place, Yet Packets Dropped

I've banged my head for a few hours on this. I'm beginning to move several computers to a new subnet, all Windows 7, all domain joined. On the original subnet (192.168.145.X) everything works as ...
0
votes
1answer
46 views

Show logon process on windows 8

I'm experimenting with server admin on windows 2008 since I started a new tech job and want to learn things. I'm using a windows 8.1 pro client computer. The question is, is there any way to show the ...
1
vote
0answers
19 views

RunOnce key can't be run at startup with restricted public account in Windows

Let me be brief. We have arround a 1000 public computers for users to use for the internet and office and so on. We image these using SCCM2012r2 Everything is fine but we have added a software package ...
0
votes
1answer
46 views

Machine based group policy to change display setting

How to change display using computer group policy?