0
votes
1answer
32 views

Roaming Profile Accounts logoff instantly

I am working on setting up roaming profile accounts. When I log in as one of my users, they disconnect instantly. How do I find errors on what is going on? I've check the SMB Share permissions and ...
0
votes
0answers
16 views

Deploying Ossec HIDS Windows Agent via GPO

I am trying to deploy OSSEC agent to about 100 Windows 7 boxes through GPO on our AD. I understand that I need to create and MSI from the EXE and import the specific client.keys file for the windows ...
2
votes
0answers
22 views

Domain Account Does Not Receive Proper Se Privledges from Group Policies

I am attempting to install software that requires SeBackupPrivilege, SeDebugPrivilege, and SeSecurityPrivilegebut I cannot seem to get my Domain Account to retrieve these specific privileges. I ...
0
votes
1answer
38 views

Using AD/GPO to add machines to WSUS in Windows Server 2012

I was following this guide: http://knowledge.quickstart.com/configure-wsus-to-deploy-updates-using-group-policy/ I've rebooted the machines after the policy updates to ensure they took them. I ran ...
0
votes
1answer
71 views

GPO - Mapped drive for non-domain user on a domain computer

I am trying to add a mapped drive for a number of CNC machines that all run off Windows XP boxes that are joined to our domain, the computer policies apply fine but as the software for the CNC only ...
1
vote
0answers
15 views

Deploying custom fxcop rules amongst developers

I am currently in the process of writing and deploying custom FxCop (Visual Studio Code Analysis) rules, allowing developers to check their code against a series of these custom designed rules. As a ...
2
votes
1answer
94 views

Can I use the GroupPolicy PowerShell module on non-AD standalone servers?

I am trying to use the GroupPolicy PowerShell module to manipulate and read local group policy settings on a standalone Windows 2012R2 server. When I try to execute the Get-GPOReport cmdlet: ...
3
votes
1answer
401 views

Can I override domain group policy with local group policy as a local admin?

I am trying to provision a few special case laptops. I would like to create a local guest account. That's fine but when I try to create it I prompted that my guest password does not meet the ...
0
votes
0answers
65 views

Using Powershell (RSAT ) to get GPO from against another domain

I can't find any clear info online for what I'm trying to do, hope you can give me an answer :) I'm using a Windows 7 client (pctest) joint in a domain (domain1.intranet). I've installed the RSAT to ...
3
votes
3answers
93 views

Update a network driver through GPO/AD

Our organization has just deployed new computers with Windows 8.1. Roughly 50 of them. We've run into an issue with the driver on the new computers which is flooding the network with ipv6/multicast ...
1
vote
2answers
181 views

Change Local Group Policies remotely on Windows workstations outside Windows domain

Is it possible to change Local Group Policies on Windows workstations remotely outside a Windows domain? Furthermore, can a script be written that would change GP on several workstations one by one? ...
1
vote
1answer
96 views

Backup Active Directory users' files, deploy via GPO? [closed]

Am looking for a solution which can be configured to be deployed via group policies. I've looked into Windows Backup, but it doesn't fulfill our requirements. We need something like this: Runs ...
1
vote
1answer
94 views

Fake Recycle Bin via Group Policy

Is it possible to create a fake recycle bin where the files aren't actually deleted using MS AD/ Group Policy? The goal is to be able to recover 'deleted' files after, let's say, a dirty resignation. ...
0
votes
0answers
30 views

Is it possible to check using nagios, if a group X is denied access a particular file/folder in Windows

This is basically a GPO key that has been applied and need to check if the key is in place/working which involves restricting a group of users from accessing a particular file or folder using a ...
0
votes
1answer
141 views

Why is this preventing me installing an MSI: The System Administrator has set policies to prevent this installation (non VMWare install)

I am trying to install an MSI on a Windows Server 2012 machine which is part of my lab domain. I am local and domain admin, but I seem to be prevented from installing this MSI. For clarification, ...
0
votes
2answers
23 views

Preventing windows from reconfiguring graphics on boot

Got a bunch of Windows boxes, each with two nvidia video cards, and each with either three or four monitors, that will every once in a while decide to rearrange the displays when the box is turned on. ...
0
votes
1answer
118 views

Deploy Advanced Firewall Rules via GPO - How to avoid merging?

I am trying to deploy a set of advanced windows firewall ACLs to several 2008 R2 servers. I would like to (i have to) ensure that no local or old rules are getting applied. So I set "Apply local ...
3
votes
1answer
62 views

“Deny Logon Locally” effects

I'm planning to harden my AD-based infrastructure. One privilege that I'm planning to limit is the "local logon" privilege. Now, if I push "Deny Logon Locally" through GPO, besides preventing ...
1
vote
1answer
184 views

Lock down a Windows 7 computer via GPO

I have a client who needs 3 systems locked down to only allow a user to log in and have access to 3 shortcuts on their desktop. These shortcuts are to batch files that run in separate folders (DOS ...
1
vote
1answer
63 views

How can I either through vbscript or GPO push a Windows 7 Logon Screen to all my users

I know how to change the login screen, it's easy. But I would like to figure out a way to do it through GPO or login script. I have tried running the script as the computer start-up script as well as ...
-3
votes
1answer
56 views

Windows Server 2012: use GPO in multiple OU's but only for specific servers

sample: OU: A User1 User2 GPO1 OU: B User 3 User 4 GPO1 OU: C Server1 Server2 Server3 Now i want to restrict GPO1 to Server1 and Server2 -> how can i do this in a easy/smart way? thx
3
votes
1answer
33 views

Limit access to local data and applications while accessing the desktop remotely

We need to access client systems (desktops) remotely to do routine troubleshooting activities, however this isn't a very secure method to do as it exposes the local data to support personnel. Also, ...
3
votes
1answer
221 views

Windows - Software restriction policy to block exe files in all subdirectories

How can I block all executables in %APPDATA%? I've read for CryptoLocker this is a good policy: C:\Users\User\AppData\Roaming\*\*.exe But that apparently won't protect more than one layer ...
1
vote
1answer
138 views

When is a user considered “Everyone” in the “Access this computer from the network” policy

I am a bit puzzled by the existance of the "Everyone" group in this policy. Per http://technet.microsoft.com/en-us/magazine/dd637754.aspx: The Everyone identity All interactive, network, dial-up, ...
1
vote
1answer
35 views

GPOs do not apply when logging into Windows 7 via RDP

I am developing a set of GPOs which that I've applied to an OU containing some Windows 7 x64 computers. loopback processing is enabled of course. This computers are located in a different room so i ...
5
votes
2answers
291 views

Will GPO Software Installation re-install already installed applications from a different policy?

I'm looking to install our latest AV suite through a GPO Software Installation policy. (As in the below screenclip.) Unfortunately my request to use DFS has been denied and I'll need to create a ...
2
votes
1answer
140 views

Practical Limits of Configuring WLAN SSIDs via Group Policy on Windows 7

Is there a practical limit to the number of SSIDs that can be configured on a single WLAN profile via Group Policy on Windows 7? I am thinking about hundreds of SSIDs in a single WLAN profile. ...
0
votes
1answer
288 views

How to remove programs from the start menu windows 7 client using a GPO managed on window server 2008 r2

I have a windows server 2008 r2 with a domain where windows 7 desktop pcs connect to. There are only 3 programs I'd like to display on the start menu for users. All client computers have the same ...
4
votes
1answer
113 views

Removing GPO - comprehensive list of 'tattooed and non tattooed' registry settings

Is there a comprehensive collection or perhaps even a 'quick guide' to which GPO settings (or registry keys) are protected from GPO 'tattooing'? I have a few clients who have horrendous GPO policies ...
3
votes
1answer
59 views

Allow CD drive in a Software Restriction policy

I am rolling out a disallow all Software Restriction policy on my network. I am studiously whitelisting all programs we use as I go. One issue I have is allowing .exe to run from the CD Drive. My ...
2
votes
1answer
59 views

GPO IE Security Zones

It seems when you are trying to edit the GPO for a group of Windows Server 2003 terminal servers. Under User Configuration > Policies > Windows Settings > Internet Explorer Maintenance > Security > ...
0
votes
0answers
39 views

Differentiating between “Not Defined” and some other value in registry key for group policy objects

So here is what I am trying to do: I have set a certain group policy setting to 'Enabled' and it gets reflected in corresponding registry key Now, I go and edit in the group policy editor and set it ...
1
vote
1answer
566 views

Windows GPO Software Restrictions Policy not working with %TEMP% variable

I'm trying to put in some meagre additional malware prevention measures, by restricting the execution of *.exe in a handful of locations -- in particular, the temporary folders that various ...
2
votes
2answers
87 views

GPO set to trigger in response to an event?

I want to trigger an action/task when an event is raised in any computer of the domain. It this possible via GPO, do or I need to deploy script to all machines on the domain?
2
votes
1answer
38 views

ADML files in foreign language

I have a centralized SYSVOL in my domain. Ofc it has en-EN language files (.adml) but the PC I am using to remotely administrate the domain is in Italian language (it-IT). Now, when I open the GPO ...
1
vote
1answer
77 views

How to filter RSOP to show only modified policies?

Is it possible to view only those elements of GPO that are actually modified/specified? For example, when looking at RSOP for an OU, I have loads of options which are mostly not specified - can I ...
0
votes
0answers
66 views

GPO applied though WMI filter says false

I have a GPO which configures the folder redirection to a network share. This works fine on all workstations with this WMI filter: SELECT * FROM Win32_OperatingSystem WHERE ProductType = "1" But an ...
1
vote
1answer
55 views

Group policy - deploying printers

I am trying to deploy printers using group-policy, we have a mixed domain of XP and windows 7 pc's I've used the printer management console to deploy the printers and its been smooth enough for the ...
1
vote
1answer
826 views

Give user permissions to change system time on Windows Server 2012 domain controller

I realize that this title instantly sounds like a bad idea, so I'll justify the need in addition to describing the problem. The need to change system time I've recently set up a Windows Server 2012 ...
1
vote
2answers
86 views

Windows GPO Restricted groups append

I need to add an user to local administrators of all machines in domain. I read about Restricted Groups, however I don't want to replace all members, but just append a new one. Is it possibile?
1
vote
1answer
585 views

Windows 7 UAC - Local Administrator and Secpol.msc

I am trying to change my group policy settings temporarily to disable completely UAC. I have local admin rights on my machine, however the UAC options in Secpol.msc are disabled. Any ideas?
3
votes
1answer
291 views

Windows 7 starts a classic desktop theme unless admin logs in first

I'm running a bunch of computers which are pretty locked down with Group Policy (users can do virtually nothing other than browse the net and use Office), and local profiles are deleted from machines ...
2
votes
2answers
419 views

Windows Mapped Drives: GPO vs. login script

I'm running Windows 2003 R2 for DC's. The question has come up concerning mapping user's network shares via GPO rather than the tradition login scripts. I've read about updating Windows 2003 server ...
0
votes
1answer
315 views

Remove or Disable “Add a Network Location”

I've not been able to find anyway to do this via registry or GPO. I want to remove standard users ability to right-click computer and open the "Add a Network Location" button, or just disable the ...
1
vote
2answers
79 views

computer startup script reporting success to a server

I am using Group Policy to deploy a computer startup script that tries to uninstall one program and install another. I need this script to report its status (whether a certain file exists on the ...
2
votes
1answer
129 views

Windows AD: Is loopback processing absolutely necessary in order to apply a user policy to users logging into computers in the OU?

I've had our AD setup running on server 2008r2 and now 2012, and I swear, a user policy applied to an OU containing only computers actually does apply to users logging into those computers, without ...
0
votes
1answer
20 views

Security Policy Logs On Windows 7 - Determine Why A Certain Software Function Fails

Is there a log file or administrator screen (like Event Viewer) where one can see specific rules that are being enforced? You know how you can use Process Monitor to monitor a task and see registry ...
0
votes
1answer
60 views

Windows Remote Desktop: Different configurations based on location

Is it possible to set up remote desktop (via group policy or another method) so that it has different settings based on where the user is connecting to the session from? In my scenario, I'd like to ...
3
votes
2answers
70 views

GPO - Group Policy Object acknowledgement

Is there any way to get Automatically Acknowledgment on My Domain Controller, as soon as Group Policy Object example: ABC is applied to Domain PC. Server OS - Window Server 2008 R2 Standard Edition ( ...
3
votes
1answer
55 views

Group Policy Update Confirmation

Server OS - Window Server 2008 R2 Standard ( Domain Controller ) Client OS - Window XP & Window 7 ( Desktop & Laptop ) I have implemented some Group Policy including Group Policy Preference ...