Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
0answers
9 views

Domain policy expiration doesn't match net user command

In Active Directory, we have recently changed our password policy. We had our users set to where their passwords would not expire previously. Now, we have set max password age in our domain policy ...
0
votes
0answers
9 views

IE11 & 2012R2 History GPO

probably a really simple one but I've not been able to find it. I am running a 2012R2/Win 8.1 environment and want to stop IE from storing any browsing history on a machine level. I've already set ...
0
votes
1answer
23 views

Want to be able to configure IE 11 group policy settings from Win 7 Client

I want to be able to configure IE 11 group policy settings from my Win 7 client. I have IE 11 installed on this client. The client has been joined to a mixed Windows Server 2003/2008R2 domain. When I ...
0
votes
0answers
22 views

Turn system icons off with GPO or Registry

I need to turn off "Input Indicator" on the taskbar with a GPO or a Registry setting (which will turn into a GPO). It took me quite a while to figure out how to do it in Control Panel, now I have to ...
1
vote
1answer
47 views

Apply group policy to specific users (in an OU) on specific computers (not in an OU)

This has been bugging me for a while. Here's the setup: We have ~20 Win2k8r2 servers. They are separated into various OUs that I can't change. I have created a security group "DevHostsSG" that ...
0
votes
1answer
54 views

Remove Server Manager and Powershell icons from the Taskbar

Up until recently we have had two Windows Server 2003 Domain Controllers and five Windows Server 2003 Terminal Servers. I'm in the process of upgrading the network and have recently replaced the DC's ...
0
votes
2answers
39 views

Software install GPO on server 2012 (not R2) is not being deployed to windows 8 and 8.1 clients but is being deployed to windows 7 clients

I am trying to deploy some management MSI files via GPO running on Server 2012 (not R2) and the GPOs aren't being deployed to the Windows 8 and 8.1 clients. However the GPO is is working fine to the ...
4
votes
1answer
30 views

Deploy Software via GPO, but also deploy configuration file

When deploying software through a group policy, is there any special trick that will allow you to also deploy a separate, say config, file along with it? Here's the specific problem: We have a ...
0
votes
2answers
31 views

In which order will GPOs be applied when a USER try to login to a PC in a different OU

If we have this Group Policy Management configuration (Windows Server 2008): domain.local OU1 PC1 USR1 GPO1 (Linked) OU2 PC2 USR2 GPO2 (Linked) ...
1
vote
1answer
40 views

Disabling the Microsoft LLDP Protocol Driver using Group Policy

I need to campus-wide disable the Microsoft LLDP Protocol Driver using Group Policy / SCCM / or any other means of centralized management, because I've written my own LLDP broadcast service I plan on ...
1
vote
3answers
39 views

How to change windows time server on windows server 2012?

In windows computer, system is using "time.windows.com" to sync the time. I need o modify the time server for windows user on its logon and want to enforce using group policy. Case: we have windows ...
0
votes
0answers
20 views

How to allow Chrome to run a plugin when viewing a local file while GPO restrictions are in place.

The setup Windows server 2003 domain at a functional 2000 level Multiple server 2003 servers running terminal services All users running desktops delivered via RDP Google Chrome browser installed on ...
1
vote
1answer
48 views

How can I remove the minimum password length for a specified user in an OU?

How can I remove the minimum password length for a specified user in an OU? (I do not want the default domain password policy affecting my GPO.) When the "minimum password length" in my default ...
0
votes
1answer
13 views

Default mail registry

I'm deploying Win 8.1 via. SCCM with Office 2013 pre installed. I got an issue where even though Outlook 2013 is the default mail. the specific value mail:to (opening a direct mail link) .. attempts ...
0
votes
1answer
47 views

Suggestions on a few Chrome Deployment issues

Greetings to everyone here. I'm a network admin in charge of deploying Chrome to my network and setting it as the default browser, though IE will of course still be available for users. I've ...
0
votes
2answers
48 views

editing local group policy for all domain computers

I'm stumped on a strange group policy issue. I know that Domain GPO should take authority over local group policy settings, but lately i've been having an issue and I can't think of anything else it ...
1
vote
2answers
39 views

GPO to map drives conditionally

We have a file server that is sharing out user drives from //server/user$. We also have webDav enabled so it can be access externally by https://fileserver.company.com/user. My challenge is to map ...
0
votes
0answers
26 views

Task scheduler VS GPO do not allow storage of password

I have a scheduled task in one of my DC, running to check LastLogon date of AD accounts in each DCs everyday. The task was previously running in a Win 2003 DC without problem but now we are going to ...
0
votes
0answers
21 views

Windows SRV2012 : gpEvent_NO_NETWORK

For an unknow reason, a computer on my Active Directory domain display an error when I try to execute the gpudate ( and gpupdate /force ) command as Administrator. The domain controler and the ...
0
votes
0answers
20 views

In Group Policy how do I remove Shortcuts from My Network Places

I have found that in Group Policy I can add a shortcut to My Network Places under User Configuration > Preferences > Windows Settings > Shortcuts and create a shortcut as File System ...
1
vote
3answers
89 views

GPO or logon scripts to remove access to public “libraries” folders

I have two Windows 2012 R2 Domain Controllers and will be implementing 7 Windows 2008 R2 remote desktop servers once their setup and testing is complete (I have one built now that is my test server). ...
0
votes
1answer
35 views

Bitlocker Group Policy for Windows 8.1 and Windows Server 2008 R2

it seems when I try to encrypt my hard drive on Windows 8.1, I get this error: When I check the Group Policy settings on the server, that's what we have, although, it says it's only compatible with ...
0
votes
1answer
25 views

Group policy issue: when I'd like to write a compact disk

I couldn't write compact disk in any machines in our local domain even if I set the deny write cd feature to Not Configured or disable. Every PCs have windows 7 and our server is windows server ...
1
vote
1answer
22 views

Group Policy to set desktop background to say machine name

Is there a way to easily set in group policy for each of the machines in our domain to say the machine name on the desktop background? Our users log into multiple machines in a day and tend to get ...
2
votes
1answer
33 views

BitLocker Group Policy Requirements

I am looking for help with creating a BitLocker policy through Group Policy. I have failed doing this myself and need help from those more experienced than I am. Server: Windows Server 2012 Clients: ...
1
vote
1answer
31 views

GPO install Live Meeting 2007 on Windows 8.1

Errors: The removal of the assignment of application Microsoft Office Live Meeting 2007 from policy LiveMeeting 2007 failed. The error was : %%2 The description for Event ID 103 from source ...
1
vote
0answers
43 views

How to allow permission via GPO to remove bluetooth devices in Windows 7

We have 'Standard' users who test Bluetooth devices. This involves pairing them to a Windows 7 machine. Unfortunately, each device adds a unique entry to the "Devices and Printers" which 'Standard' ...
1
vote
1answer
27 views

Need clearer instructions on using .admx group policy templates

I have a Windows Server 2008 domain controller running group policy for our domain. Recently we started adding some Windows Server 2012 servers to the domain and some of the group policy settings do ...
1
vote
1answer
40 views

Cross-Domain / Cross-Forest Group Policies

Our company has a domain forest with two domains (domain.EMEA and domain.GLOBAL) We previously acquired a company (domain.LOCAL) and all the workstations at this site are members of domain.LOCAL, but ...
1
vote
1answer
34 views

Will Microsoft Disable Group Policy on an Unsupported OS?

While researching Group Policy settings for Windows Update on this TechNet library page, I ran across this worrisome statement describing what OSes the settings are supported on: Supported on: ...
1
vote
1answer
30 views

Addressing built-in groups and local policies in Windows independently of localized names

Recently I saw an application failing to do certain check/manipulation with built-in groups/local policies on localized version of Windows Server 2012 R2 (French, German). In localized versions of ...
2
votes
2answers
159 views

How Can I Enable MSS Group Policy Settings Windows Server 2012

In the past I have gone through a server hardening checklist on a Windows Server 2008 web server for PCI compliance. Basically there are a lot of Group Policy, Registry, and other settings that need ...
-1
votes
1answer
64 views

Domain Policy - Windows Server 2012 R2 Essentials role

I have a Win 8.1 Workstation joinde in a Windows Server 2012 R2 Domain (Essentials role). When trying to save Remote Desktop credentials I got this message. Your system administrator does not ...
0
votes
1answer
29 views

Disable secure logon for tablets connected to domain

I have a domain set up with Windows 2008 R2, and by default requires Ctrl + alt + del to unlock computers. I have been pulling my hair out trying to configure GPO so that tablets will not require Ctrl ...
0
votes
1answer
124 views

Can't open Active Directory Users and Computers, Group Policy settings issues

In the past I've been able to open "Active Directory Users and Computers" to manage the users and computers on our Windows Server 2008 R2 box. We just recently made some changes to our Group Policy to ...
0
votes
0answers
77 views

Windows Server 2012 R2 Update Notification on login spash screen

we are have two load balanced svr 2012 R2 machines, front end netscaler, using citrix reciever to login. The issue i have is i cannot seem to disable the notifications when users are logging in that ...
2
votes
1answer
83 views

Remote Computer Management from Active Directory Snap-In fails with DCOM error 10006

So here's a little background. Our system originally started with Windows Server 2003 machines and eventually over time expanded and grew. We still have a few Server 2003's but they're being removed. ...
-1
votes
1answer
80 views

GPO edit mess , system error

I messed around with a GPO editing tool in order to implement "hide computer drives" policy on windows 2003 server. Since then I got a system error on my events log to say : Windows cannot access the ...
2
votes
2answers
72 views

Group Policy to Place Shortcut on All Users Desktops

We're looking at using a GPO to put a shortcut to a company web app on all users' desktops. Different users are on different Windows versions, meaning the location varies: c:\documents and ...
2
votes
1answer
37 views

How to Automatically Tust Auto Enrolled Code Signing Certificates

In my organization all developers are setup to be granted a Code signing certificate via Auto Enrollment. Additionally, PowerShell is configured by group policy to require all scripts to be signed. ...
1
vote
1answer
40 views

Can GPO templates in Server 2012R2 manage Win8.1 Win10 & Server 2012R2?

We just upgraded our DC to server 2012 R2 and testing Win8.1 / Win10 / Server 2012R2 with it. Just wondering that if the native admin templates in 2012R2's GPO can manage all win8.1/Win10/2012r2? or ...
0
votes
3answers
43 views

Active Directory Export GPO user

I would like to get in .csv (or any other readable format) all my AD users and the policies that they need to comply (the type of authentication each user needs, his event logging properties and even ...
7
votes
2answers
127 views

Enable Certificate Enrollment Policy and Request a Cert using PowerShell

Right now, I'm doing the following to request a cert from a CEP server: Open gpedit.msc Under Computer Configuration > Windows Settings > Security Settings > Public Key Policies, double click ...
1
vote
0answers
77 views

Windows user privileges when running scheduled task

I posted a question a while ago about allowing a specific user to start/stop Windows services. Provide a user with service start/stop permissions I decided to revisit the issue. I have no idea what ...
0
votes
0answers
27 views

Removable Storage User Configuration Group Policy not working when Windows Server 2008 R2 is used as a client

I have enabled read write restriction for a group of users, if a user from this group is to log onto a win 8.1 system or Windows 7 system and tries accessing a USB drive it says access is denied, ...
3
votes
1answer
64 views

2008 GPO not replicating on 2012 server

I have a Windows Server 2012 system and the domain controller is running Windows Server 2008. The domain controller also hosts the domain group policy. Most of the settings have replicated to the ...
5
votes
2answers
317 views

Is there a way to tell how long a machine has been in an security group?

Machines get added to a security group to prevent them from getting a GPO. I'd like the machines to get removed after 30 days of being in the group. Ideally, I'd like to also be able to generate a ...
1
vote
1answer
56 views

Lockdown Mozilla Thunderbird on Windows Remote Desktop Services

I've installed Mozilla Thunderbird 31.3.0 on a Windows Server 2012 R2 which has the Remote Desktop Services role. I want to configure the Thunderbird program and set each user's email account etc and ...
0
votes
1answer
330 views

“Group policy client service failed. The logon access is denied” when copying roaming profiles to new server. (Samba)

We have perfectly working roaming profiles on Samba 3.3.10 (SuSE) with Windows 7 clients. We configured our new server with same domain name, Samba 4.1.11 (Debian). On the new server, for newly ...
0
votes
2answers
37 views

Assign DNS settings on client via elevated script in GPO

i have installed windows 2012 as a member server in my existing windows 2008 DC. now i want to assign secondary DNS on my windows 7/8 client PCs. I do not have DHCP in my environment. I tried to find ...