Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
0answers
4 views

Mass updating Group Policy, may be with scripts

Sorry for long preamble and thanks in advance to one who could read it all. I have about 60 network printers. Some are in HQ, some are in distant locations (from 1 to 300 km away of HQ). Some ...
2
votes
0answers
22 views

Associate user picture to domain account

I want to assign users a picture (o let them assign their own picture) to their user domain account and wherever they log in, that picture should appear as well. How can I do this using group policy? ...
0
votes
1answer
18 views

How to change Account Lockout Threshold when the path cannot be found

I am trying to change the account lockout threshold for all the users on our domain. The threshold should be three, but there are users who get locked out after one mistyped password, and others who ...
0
votes
1answer
31 views

How do I schedule a batch file to run on startup or shutdown?

I have 2 batch files that send emails intended to notify of a server shutdown or startup. The batch files call an exe with a single argument, the message to be sent. The exe comes from a vb.net ...
2
votes
2answers
29 views

Can I apply GPO settings to 2008 R2 member servers if I have a 2003 domain functional level?

I was asked to help out in a problem, there is a domain still operating at a 2003 functional level, there are 2008 R2 member servers in this domain and we need to know if there is anything we have to ...
3
votes
1answer
39 views

Create a security group that can promote a member server to domain controller without being in the domain admins group

I am trying to figure out a way to delegate permission to a security group to add domain controllers to a domain. The catch is I do not want to add them to the Domain Admin or Enterprise Admin ...
-6
votes
2answers
40 views

How to protect Windows Server 2008 r2 from persons, which have physical access to computer? [closed]

One server is available for other users, and we think that someone may steal passwords from it. I can not set a password on boot, because sometimes there is electricity failure, and UPS can hold it ...
1
vote
2answers
40 views

IE (10) blocked this website from displaying content with security certificate errors - show content

Currently having an issue with a client that is getting the following error when loading a certain website: I have added the site to trusted sites and enabled 'display mixed content' through GPO. ...
-1
votes
1answer
21 views

GPO to lock computer when idle effects also when out of the domain [closed]

I applied a GPO to lock screens when idle after 5 minutes. Funny thing is, it affects computers also when not connected to the domain (at home for instance). Any idea how to avoid this? Thanks
-1
votes
0answers
37 views

Deploy printer via GPO but GPO update show fault

I've just deploy new printer via GPO but it is not working. I checked by update GPO by run cmd gpupdate /force but it shown me the error as below. Please help me , Where to check ? what is the ...
1
vote
1answer
19 views

IE connection setting: Automatic configuration vs. manual proxy server - precedence?

When I choose Use automatic configuration script and point it to our proxies pac-file, will the proxy setting on the bottom become inactive?
1
vote
0answers
27 views

How to use Group Policy to control local administration access (LOCAL ONLY)

At the company I work for, we have about 75 computer users. We have a Microsoft Domain Controller in our server environment (MS Server 2012) with Active Directory. When users need to install ...
1
vote
1answer
36 views

Enforce minimum wait time for network connection

We are currently using multiple HP ProCurve V1810-48G switches in our environment which are causing issue with GPO based software installation. We've attributed this to the Spanning Tree support, as ...
0
votes
2answers
42 views

Enable Windows Time Service on Secondary Domain Controller

We have an interesting scenario at my workplace. Our primary domain controller started to fail, so we installed a secondary domain controller to allow people to login when the primary would fail. ...
0
votes
2answers
49 views

Group Policy | New Password Policy for a few users

We have a few users that are traveling and I would like their passwords to be changed more often than the rest of the folks in the office. How should I go about creating a new policy with their ...
2
votes
1answer
20 views

CIS benchmark differences between 2008R2 to 2012R2

I'm looking at hardening our golden image inline with the CIS benchmarks for Windows Server 2008R2 and 2012R2. But, after looking at the two benchmark documents(registration required - sorry) from ...
0
votes
0answers
8 views

Install program to single RDS user

I'm looking to install an application to a single user in a RDS environment without installing it to the other users. The user is an Admin. I have very little experience with GPO but imagine it's ...
0
votes
0answers
45 views

replace/update user32.dll.mui in System32 through GPO doesn't work

I edited the user32.dll.mui in system32 to display our company name as a watermark. I have already tried it on my PC manually and its working, now i just need to implement it to over 100 PC clients ...
1
vote
0answers
16 views

Disable Start menu new Items highlighting by GPO in Windows 2012 R2

I need to disable the new items highlighting (New items are marked with "New") on Windows 2012 R2 (remote desktops). I tried setting the registry value ...
4
votes
1answer
111 views

How to let non-admins manage selected domain groups' membership?

I'm on Windows Server 2012, Active Directory is on and working. All the project we manage have 2 dedicated groups, one for managers with access to all related files (including invoices, timetables and ...
0
votes
1answer
22 views

RDS Farm setting applied through GPO causing connection issues

I'm having a strange issue with some RDS GPO's. Since automating the RDS server build process through SCCM I've moved the RDS farm / connection broker settings to a GPO. This works fine, once the ...
1
vote
0answers
36 views

Firewall rules to allow Hyper V Manager to connect to Hyper V Server 2012 R2?

I moved a Hyper V host into our Servers OU in Active Directory, which has some group policies linked. Now I am unable to connect to the Hyper V host with Hyper V manager. It was working fine before ...
0
votes
0answers
25 views

Editing the default meeting time

Does anyone know how to edit the default meeting time via GP for Office 2010 ? I've looked everywhere for this setting and cannot find it on any GP Admin Templates, we are looking to make the default ...
0
votes
0answers
22 views

List of new and changed group policy settings between 2008 and R2

We recently upgraded our DCs to 2008 R2 from non-R2 2008 servers. Since doing that our KCD authentication has been broken. I assume this is some new or changed group policy object that has been ...
0
votes
1answer
40 views

GPO Office Installation - Script runs on PC, How could I get it to appear when a user logs in?

I currently have a GPO created that installs Office 2010 for users during startup of the PC. This script is set to run for specific PCs. Is there any way that I can get the script to appear and run ...
3
votes
1answer
31 views

What happens to non-domain controller workstations/servers when user rights assignment policies are removed/no longer apply?

I'm trying to do a good ol' fashioned Group Policy Object clean-up job on our domain controller that was upgraded from Windows 2000 (Small Business I think) to Windows Server 2008R2. In my company's ...
1
vote
0answers
40 views

Getting Group Policy identifier in PowerShell

Some of our computers have a random "local group policy" being set that forces them to check a nonexistent intranet server for Windows Updates instead of using WU over the internet as they should. ...
0
votes
0answers
28 views

Folder Redirection for user logging into workstation and server

We have 4 admins that administer multiple Windows 2012r2 servers. Our IT Manager has asked that we change the way we log on to servers now for auditing reasons after an ex admin went rogue. We have ...
1
vote
1answer
32 views

Upgrading from 2008 to R2 didn't update Group Policy Management

I recently updated our domain controllers from Windows Server 2008 to Windows Server 2008 R2. The main reason for this was group policy. We had machines in our domain that were 2008 R2 and the ...
1
vote
1answer
23 views

Single, parameterized GPO for managing group membership

We have a OU design in our domain in which each "system" (web services and similar) has it's own OU, under which is nested the servers and accounts that it uses: ... + System A + Servers ...
0
votes
1answer
22 views

Group policy redirection of 'recent items' to network share

Was tasked with finding a way to redirect a user's recent items to \[network share]\recent. Server 2008 GPME: User Configuration-Windows Settings-Folder Redirection doesn't have recent items as an ...
2
votes
1answer
40 views

Managing power options

For various reasons, we want our clients' computers to not sleep when on AC. We have been running the following script with moderate success: powercfg /change standby-timeout-ac 0 However, the ...
0
votes
0answers
39 views

Time Zone keeps changing after sync with PDC in different site

Background: I have a single domain, running in 2 sites that is connected using Site-to-Site VPN. Site A is running in time zone 2:00+ UTC Site B is running in time zone 4:00+ UTC DCs are correctly ...
1
vote
1answer
24 views

Gpresult provides wrong output on vista machine regarding UAC settings

I have two workstations running Windows 7 Professional 64bit with SP1 and Windows Vista Business 32bit with SP2. Both are in the same OU and have a GPO linked named Hardening_Computers_Clients. This ...
0
votes
0answers
62 views

Cannot enable more than 2 simultaneous Remote Desktop Connection

Windows Server 2012 is unable to allow more than 2 simultaneous Remote Desktop Connections: Instead of editing the group policy : "Limit Number of connections to 999999" Disabling "Restrict Remote ...
4
votes
1answer
151 views

Is there a way to disable “check online for updates from windows update” in windows update settings?

I have configured WSUS server in order to preserve bandwith in the network wile keeping essential updates turned on using that WSUS. Intranet WSUS server pointing to client pc and other settings are ...
5
votes
1answer
109 views

Allow domain users to modify local printer settings Windows 7 via Group Policy

I've been scouring the internet for days and thus far have had zero luck in finding a solution. Short Version: I need to allow users to modify their locally installed printers. Specifically, they ...
0
votes
2answers
66 views

GPO Policy 'Applied' but not taking effect unless gpupdate /force is run

I do not yet have a 2012 DC or a Win 8 machine to manage IE 10 / 11 settings via GPMC. So I have created a policy with a registry setting so that users in a specific OU get specific .PAC settings in ...
2
votes
0answers
32 views

Do GPOs apply to interactive logon only?

I am trying to enable certificate autoenrollment and credential roaming through a GPO in an ADS domain (DCs are Windows Server 2008 R2). I can interactively log on as a newly created user (on a member ...
1
vote
1answer
49 views

Group Policy Caching for Folder Redirection

I recently set up a new file share on a new server for Folder Redirection for a subset of our users. I robocopied the files, applied the policy last week, replacing the old policy, tested with a few ...
0
votes
1answer
45 views

Windows Server 2012 - GPO settings - Security Filtering and “Authenticated Users” confusion

So I want to add a GPO for a few computers at first then deploy this rule to all computers when everything is confirmed OK on the test systems. I am having troubles getting the GPO to deploy to only ...
0
votes
1answer
37 views

Prevent authentication from specific machines [duplicate]

I have two domains PRIMARY and DEV. These both contain matching service accounts for various applications. PRIMARY also contains user accounts We have a one way trust relationship such that DEV ...
2
votes
1answer
82 views

How to hide running logon scripts from users (.vbs) without using a wrapper script?

I have a GPO (configured with loopback replace) that runs a logon script (.vbs) and linked it to an OU containing a W2012R2 RDS host. I have made these (question related) changes to the policy: ...
1
vote
0answers
53 views

Various printer deployment issue with Server 2012 R2

I have just set up a new remote desktop infrastructure, with all servers being built on Server 2012 R2. I have 7 session hosts, and a central file/print server. On the print server, I have added ...
2
votes
1answer
71 views

Group Policy Preferences - Registry: 0x80070005 Access is denied

I have created a GPO to apply several registry keys to a Windows Server 2008 R2 machine in my lab. The relevant keys are within HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Internet and I have therefor ...
2
votes
2answers
76 views

How do I use PowerShell GPO cmdlets to set up file security?

I need to automate the creation several security groups, then create and apply a GPO that includes OU / Security group specific file permissions and auditing. I have the OU and group creation done. ...
1
vote
0answers
59 views

Microsoft Server 2012r2 GPO templates

I have a question to ask regarding Windows Server 2012 R2, but before I ask let me give you some details about our environment. We have a single forest, with a single domain, and our functional ...
3
votes
3answers
204 views

Use Script To Edit Local Group Policy Windows Server 2012

I'm hardening a Windows Server 2012 R2 machine for serving secure web pages and following a guide that lays out multiple Local Group Policy Settings and Registry Settings. When researching how to ...
-2
votes
1answer
52 views

How to add bunch of admin accounts to 20 Windows 2012 servers

Is there a quick way to add bunch of admin accounts to 20+ Windows 2012 servers? It would be way too cumbersome to rdp to each server and add accounts to the local admin group.
3
votes
1answer
94 views

How to remove a GPO setting that used a custom ADM

I'm trying to deal with some legacy group policies that applied registry settings using ADM files. I'd like to remove these registry settings and set them up as group policy preferences, but how do I ...