0
votes
2answers
48 views

Is there a GPO to allow standard users to access Resource Monitor

I need to allow standard domain users to be able to access the Resource Monitor on Windows 7 without adding them into the administrators group on any local machines. Is there a domain GPO setting to ...
3
votes
1answer
48 views

Edit local policy via powershell

i'm searching for a way to edit this policy via powershell : Computer Configuration -> Administrative Templates -> System -> Credentials Delegation -> Allow Delegating Fresh Credentials with ...
2
votes
0answers
48 views

Windows 7 GPO Preventing admins from interactively logging in, but still allowing Run As / permission escalation

I'm implementing security restrictions for a client who would like to prevent admin accounts from logging into workstations. For example each person has a user account and an admin account and only ...
6
votes
1answer
222 views

Enable offline file sync for computer owner only

At the school I am interning at, all students and faculty have a mapped home folder known as the "M:" drive for storing files that they can access from all computers. For faculty who have laptops, we ...
5
votes
0answers
138 views

Applying group policy loopback to any user on specific computers

In a server 2008 R2 and Windows 7 environment, I have a GPO that specifies screen saver settings in the user settings policy for the entire domain. However, for specific computers, this is not ideal. ...
4
votes
1answer
117 views

Consistently slow domain logins / folder redirection

I've been trying to diagnose slow logins to my domain. One of my first stops was Domain login very slow 10+ minutes. So far I've been able to tell it has to do with my policy that applies folder ...
2
votes
1answer
63 views

Error Code 0x800700a1 when trying to add registry key through GPO

I'm trying to add a new group policy to our domain so that images are automatically sent with emails in Outlook 2013. So I created the following GPO: This policy doesn't have any effect though. ...
3
votes
2answers
97 views

Ensure drive is mapped at login on laptop with strictly wireless

So, $software runs on a 'server' (windows client w/ file sharing to share out the db folder), and laptop client has the drive mapped and $software also installed. This is the vendor's recommended ...
2
votes
0answers
30 views

GPO: Applying a home page to Win7 and Vista Clients running IE9

I am trying to set the homepage on several Windows 7 and Vista machines via Group Policy Preferences. Both are running Internet Explorer 9. The "apply once and do not reapply" option is enabled, as i ...
2
votes
1answer
65 views

How do I properly configure Internet Explorer Connection Settings via Group Policy?

I've configured the location of our automatic configuration script under "User Configuration > Preferences > Control Panel Settings > Internet Settings > Internet Explorer 8 > Connections > LAN ...
1
vote
3answers
227 views

Shutdown clients when no one is logged in at a specified time

At our company, the people stop working at 7PM. At 8PM we run a scheduled task with GPO to warn the logged-in user that the computer is going to shutdown. This works fine. When no one is logged-in ...
2
votes
1answer
85 views

Deploying software through group policy

I'm trying to deploy an MSI to a specific security group that has all computer members. I've set the GPO to install via the UNC path, and it's a computer configuration. I've also made sure that ...
0
votes
1answer
198 views

Will Windows 7 sysprep keep group policy settings?

As part of my organisation's Windows 7 rollout process, we would deploy a Windows 7 image onto a target machine, then manually install LocalGPO on it followed by applying a set of group policies via ...
5
votes
2answers
2k views

How to circumvent or alter screen timeout group policy when not on the domain?

I've been asked to look into a solution for our remote laptop users who are trying to give presentations in Powerpoint and Excel when at customer sites. We are running a Server 2008 /Win 7 ...
1
vote
1answer
286 views

Lock down a Windows 7 computer via GPO

I have a client who needs 3 systems locked down to only allow a user to log in and have access to 3 shortcuts on their desktop. These shortcuts are to batch files that run in separate folders (DOS ...
0
votes
2answers
104 views

RSOP resolves wrong computer name

I have imaged a computer using Acronis Snap Deploy. The source computer from where the image have been taken is SOURCEW7, and the computer created with this image is W7TEST When I do a RSOP ...
3
votes
1answer
429 views

Windows - Software restriction policy to block exe files in all subdirectories

How can I block all executables in %APPDATA%? I've read for CryptoLocker this is a good policy: C:\Users\User\AppData\Roaming\*\*.exe But that apparently won't protect more than one layer ...
1
vote
1answer
34 views

GPO with Auto Updates Disabled Updates only from WSUS

I currently have an environment with Windows 7 and a GPO in place where automatic updates are completely disabled and can't be installed. I would like to have it set where the updates are only ...
1
vote
0answers
70 views

Server 2003R2 DC Windows 7 and disable auto updates

I run an environment with Server 2003 R2 DC's and mostly WIndows 7 clients with just a few XP clients. The problem I am having is that the Windows 7 PC's are installing updates on their own. We have ...
2
votes
1answer
188 views

Practical Limits of Configuring WLAN SSIDs via Group Policy on Windows 7

Is there a practical limit to the number of SSIDs that can be configured on a single WLAN profile via Group Policy on Windows 7? I am thinking about hundreds of SSIDs in a single WLAN profile. ...
0
votes
1answer
651 views

How to remove programs from the start menu windows 7 client using a GPO managed on window server 2008 r2

I have a windows server 2008 r2 with a domain where windows 7 desktop pcs connect to. There are only 3 programs I'd like to display on the start menu for users. All client computers have the same ...
0
votes
2answers
3k views

Domain User Account Locks: Correct password used

I have a domain (DC is running Windows Server 2008 R2) and have the Account Lockout Policy enabled. When a user attempts to log into their PC (with the correct password) they receive the following ...
1
vote
2answers
181 views

Win7 ignores Firewall for RemoteDesktop via GPO

Windows 7 ignores the firewall rule from Group Policy, that should restrict RemoteDesktop to certain IP addresses. It works for XP, but Win7 machines still allow Remote Desktop from everywhere. I ...
2
votes
1answer
351 views

Remove or reverse file redirection in group policy

I am looking for a way to essentially reverse file and folder redirection after it has been set up and configured using Group Policy. Right now I have a file server that I am hanging a file share off ...
0
votes
1answer
64 views

Should I run rsop as administrator or as domain user?

I have to diagnostic some AD policy on a windows7 client. So I want run rsop but I dont know if I have to run it as administrator (local) or as domain limited user.
0
votes
1answer
4k views

IE Setting in group policy — Disable automatically detect setting in LAN Settings

have been trying to hunt this down for weeks with no luck. i need a way to disable a setting.. in IE. Tools > Connections > Lan Setting i need to uncheck "automatically detect settings" does ...
8
votes
1answer
599 views

Everything says Applocker is supposed to work: Why doesn't it?

I've setup a basic group policy consisting of the default Applocker rules. Per Microsoft's technet article on the subject, any files not explicitly allowed to run by the policy are supposed to be ...
3
votes
1answer
370 views

Windows 7 starts a classic desktop theme unless admin logs in first

I'm running a bunch of computers which are pretty locked down with Group Policy (users can do virtually nothing other than browse the net and use Office), and local profiles are deleted from machines ...
0
votes
0answers
67 views

Access to network share folder works in VDI, but not on desktops

I have two separate environments running in our lab computing spaces. We are phasing over to VDI. There are some weird differences going on in each environment, and I believe that the problem is ...
1
vote
1answer
516 views

Trying to create a GPO shortcut to local app data directory

We have a lockdown browser application that was installed on all of our students' laptops, but it was installed to the local app data of the user that performed the install. Therefore, none of our ...
0
votes
1answer
475 views

Security has requested to process its policy settings again. Error

I am receiving the following error with a yellow exclamation mark in the group policy results wizard when deploying software using a GPO. Security has requested to process its policy settings ...
1
vote
1answer
179 views

Pass unlock credentials to powershell script

I have a powershell script that is run as a scheduled task and is triggered to run "On workstation unlock". The script is programmed to reconnect an SSTP VPN connection if the connection becomes ...
0
votes
1answer
44 views

Modify Local Group Policy automatically

I need to apply Group Policy settings in the Local Group Policy object. Creating a domain level GPO is not an option because many of the computers are not member of the AD domain, because these ...
0
votes
1answer
135 views

Suppress pop up “This operation has been cancelled due to restrictions in effect on this computer”

I've implemented a new Group Policy infrastructure at a school. I'm at the final stages of tidy up before go live next week but there is one thing thats got me stuck. As expected I've locked the ...
1
vote
1answer
5k views

How to lock Windows 7 workstation after inactivity via GPO (no screensaver or blank screen- just lock screen)

Our users have increasingly started leaving their workstations logged in and unattended (during lunch breaks etc.) To tackle the security threat this poses, we have enforced a password-protected ...
1
vote
2answers
76 views

Controlling Windows XP and 7 firewall via GPO

I picked up some bad habits from previous co-workers and I'm thinking I should change some of them. It was standard practice to just disable Windows firewall because it caused more problems than it ...
3
votes
1answer
214 views

Remove access to drive “Properties” in My Computer

I'm attempting to lock down a Windows 7 build but I've noticed that users (In this case, students) can highlight a drive and get to the properties menu. I'd like to disable this if possible. I ...
0
votes
1answer
407 views

Windows 7 Stuck on “Applying Software Installation policy” for extended period of time

I have four Windows 7 clients that are connecting to a Server 2012 domain controller EC2 isntance. There was also a file server (also Server 2012), but I decided to merge the two together because the ...
1
vote
4answers
1k views

Server 2012 GPO: PowerShell Script on Computer Startup not running

I've got a couple of Server 2012 instances on Amazon EC2 and I'm in the process of setting up the GPOs. All of the settings of the GPOs are being applied fine, except none of the PowerShell scripts ...
0
votes
0answers
483 views

Scheduled Task to shutdown computer after 2 hours of inactivity?

We have around 900 machines in two locations. 95% of these machines are shared, and we find users don't log off or shutdown as often as they should to get updates. I thought I would create a ...
1
vote
1answer
174 views

Windows 7: Allow installation of software by non-admins?

I'm running a public library with PCs available for people to use. I'm setting up the next upgrade for the PCs, which will be running Windows 7. We use Deepfreeze to maintain the PC's state (a brief ...
4
votes
1answer
6k views

Local Group Policy not updating. RSOP and GPResult show stale data

This issue exists on a Windows 7 Pro x64 machine (Dell Inspiron E6420). I am trying to adjust a setting using gpedit.msc, but the change never seems to take effect. By that, I mean that setting that ...
0
votes
1answer
586 views

Why is my loopbacked GPO reporting as disabled

Let me start by saying that my experience with GPO is limited to tentatively poking at settings until they fall into place by trial and error. It is entirely possible this will be a very obvious ...
1
vote
2answers
90 views

Can I override “hide and disable all items on the desktop”?

Is it possible to add shortcuts and/or windows components to the desktop if "hide and disable all items on the desktop" is enabled via GPO? For example, if I have a few specific program icons I want ...
1
vote
1answer
58 views

Problems using GPO from Windows Server 2000 to Windows 7

So I'm using Windows Server 2000 (I know that's old and not effective but we are not in charge of the AD so no choice), and we don't have the access to GPO about users, only computers. That's why we ...
2
votes
1answer
256 views

Uninstall unknown software via group policy.

I'm wondering if this is an possible through group policy. Is possible to define a list of allowed programs and have the rest automatically un-installed when a user logs off/on their computer? ...
0
votes
1answer
116 views

GPO or Login script

i am unsure of what i should use. i have a site with about 40 users and 6 different departments which need access to different areas and differnt mapped drives. What is better for me to create a ...
1
vote
1answer
185 views

Local Group Policy IE9

I have this weird issue on Windows 7 64bit desktop, I am trying to lock it down from Internet usage (it's a stand alone machine with several local users), so I use local GP. Well, I enabled the ...
0
votes
0answers
147 views

roaming profile and offline folder setting on schools laptops and WIFI

I have a Win 2008 R2 server with Win7 SP1 laptops and a WIFI. Teachers in and out therefore often work from home but somehow the offline settings is not right on our system. Could someone guide me ...
5
votes
2answers
2k views

Find out which Group Policies take forever to complete at boot

I want to analyse which group policies are inflating the bootup time. What's the best way to do so? Something like gpresult including timestamps/periods would be really helpfull!