0
votes
1answer
42 views

Why does windows xp standalone group policy apply in the safe mode to the default administrator?

I am trying to turn standalone Windows XP installed on VirtualBox virtual machine into an AppStation-style machine (only one allowed application, taskbar, start with lone shutdown option, and a ...
0
votes
1answer
291 views

GPO - Mapped drive for non-domain user on a domain computer

I am trying to add a mapped drive for a number of CNC machines that all run off Windows XP boxes that are joined to our domain, the computer policies apply fine but as the software for the CNC only ...
0
votes
3answers
146 views

GPO - Software restriction policy

I was trying to set up GPO - Software restriction policy, so i created the object on our Domain Controller. Fast forward the next day, everybody who turned off their systems at night could not login ...
0
votes
1answer
353 views

GPO folder redirection - creates .tmp files

I am using a 2008 SP2 Small Business Server, and my test machine is Windows XP SP3. I have setup a GPO to do folder redirection, but it is only sortof working. The policy is applied to a security ...
0
votes
1answer
44 views

Modify Local Group Policy automatically

I need to apply Group Policy settings in the Local Group Policy object. Creating a domain level GPO is not an option because many of the computers are not member of the AD domain, because these ...
1
vote
2answers
79 views

Controlling Windows XP and 7 firewall via GPO

I picked up some bad habits from previous co-workers and I'm thinking I should change some of them. It was standard practice to just disable Windows firewall because it caused more problems than it ...
0
votes
2answers
817 views

GPO error 0x80070547 with Server 2008 R2 and XP SP3, but not Win7

I have a Windows 2008 R2 server managing XP SP3 and Windows 7 SP1 clients. There are no issues with the Windows 7 clients. However, on the Windows XP clients, I get errors for power options, ...
0
votes
0answers
102 views

Windows clients XP and 2000 “Log spooler information events” through GPO

I have some clients (XP and 2000) on which I would like to enable printing of documents on local printers. Therefor I need to enable "Log spooler information events" on the Advanced Tab of the Print ...
1
vote
1answer
60 views

Problems using GPO from Windows Server 2000 to Windows 7

So I'm using Windows Server 2000 (I know that's old and not effective but we are not in charge of the AD so no choice), and we don't have the access to GPO about users, only computers. That's why we ...
2
votes
1answer
391 views

Uninstall unknown software via group policy.

I'm wondering if this is an possible through group policy. Is possible to define a list of allowed programs and have the rest automatically un-installed when a user logs off/on their computer? ...
0
votes
0answers
120 views

vmware + active directory 2003 + windows xp sp2 + Fujitsu Zero Client + GPO propagation issues

i am trying to set up a domain controller with windows server 2008 (2003 functional level), and windows xp sp2 clients (both virtualized on a Fujitsu vmware server). My windows xp sp2 clients have ...
1
vote
1answer
2k views

AD - deploying printers to XP machines, pushprinterconnections.exe errror

I'm a newbie in AD domain administration. I'd like to deploy our printers to client workstations mostly running WXP. Windows Server 2012, added Print Management feature, followed a tutorial on ...
2
votes
2answers
1k views

Allow User to Shut Down XP from the Command Line

Using Remote Desktop (RDP/Terminal Services), I can't select Shutdown/Reboot from the Windows XP start menu, so I generally have to open a terminal and enter shutdown -s -t 0 to initiate an immediate ...
1
vote
0answers
201 views

IE: Cannot disable Settings button under Browsing history via group policy

Windows XP Pro SP3, IE8 (8.0.6001.18702), within local gpedit.msc I did the below: User Config/Admin Temp/Windows Comp/IE enabled: disable changing temporary internet file settings User ...
-1
votes
1answer
266 views

I need a script to lockdown the system time to users via gpedit.msc [closed]

I need to lockdown the system time on a number of PCs via gpedit.msc and then removing administrators from the group and then adding 'administrator' and 'polling'. Can I do this via a script? ...
2
votes
2answers
849 views

Using GPEdit to lock down a local account on Windows XP

I have a few local accounts on a Windows XP machine. The local account is called localUser1 ... localUser16 I need to lock the accounts down so the ONLY application that is allowed to run is ...
1
vote
0answers
234 views

“hkcu\volatile environment” missing, hkcu\environment not read

This question is very similar to this one. Suddenly, my "HKCU\Volatile Environment" keys disappeared, and my system no longer reads HKCU\Environment unless I reset it explicitly using SETX (which I ...
1
vote
2answers
1k views

How Can I prevent a specific application from being run on a specific machine using Group Policy?

I know this is possible to do and I am working on it with limited success. I believe the Group Policy I want is "Do Not Run Specified Windows Applications" - I can enable this and add the .exe I want ...
1
vote
1answer
178 views

GPO - How to troubleshoot a slow Windows startup

I'm in a network with thousands of workstations. There is a bunch of GPOs applied to all domain users, and also a couple of Startup scripts in GPOs. When the workstations are starting up, there is a ...
1
vote
2answers
4k views

Windows Group Policy - Can I alter with VBscript?

First of all I'm not an expert in either Windows or Group Policy scripting but one of my tasks is to configure XP machines which are destined to be NOT network. Consequently I've used VBScript to ...
1
vote
1answer
292 views

Apply Active Directory domain group policy to standalone PC

We have an Active Directory 2003 domain with Windows XP workstations. Many settings on the workstations are configured and locked down via Active Directory domain group policy. We need to send a few ...
3
votes
1answer
287 views

GPO Screensaver not appearing

I've got a small network that consists of 80+ workstations that are a mix of Win7 and XP. Recently I tried applying a branded screensaver to appear on all the computers after the predetermined(15 ...
1
vote
3answers
689 views

“Allow logon locally” policy missing on Win XP

My active directory (SBS 2003) domain users cannot log on locally to a given client machine (XP SP3). Logon with the domain admin works. I would like users to be able to logon locally to this ...
2
votes
3answers
3k views

Specify desktop wallpaper image via GPO results in blank background

I'm running Windows Server 2008 and Windows XP clients attached to the domain. The local user has a background image specified, which I am trying to override with a GPO. I attempting to set the ...
0
votes
1answer
803 views

Firewall GPO not applying despite being enumerated by gpresult

I have a need to open up the admin$ share on all of my domain's client PC's and I am trying to do so using group policy. I defined computer policy for Windows Firewall with Advanced Security in a ...
2
votes
0answers
406 views

Logon script does not run for all users

We have a standalone common-use workstation running Windows XP Pro SP3 and have created a script using Javascript (scriptname.js) that is to be run for each user. The file was added as a user logon ...
1
vote
1answer
281 views

What application is used to run cmd scripts?

I am creating an application whitelist in a local group policy and need to be able to run cmd script files. Simply adding cmd.exe, wscript.exe, or cscript.exe to the whitelist does not effect ...
2
votes
1answer
515 views

XP software restrictions policy, disable message dialog every time software is restricted.

I have created some "Additional Rules", in "Software Restriction Policies". The rules work as expected, but I get a dialog message box every time they disallow the specified application. How can I ...
2
votes
0answers
508 views

Windows XP not mapping drives after logging into a windows 7 PC

Bit of background. We map out network drives via GPO. This works fine for both XP and windows 7 clients. The GPO’s are served by a Win2008R2 DC. I have a user that has to works in 2 departments. The ...
0
votes
2answers
656 views

WMI query to check setting “Reversible Encryption” in Windows XP

In Windows XP, there are two settings in Group Policy I'm looking at: Password must meet complexity requirements Store password using reversible encryption Both of these settings are under Local ...
4
votes
3answers
234 views

What setting in XP stops executables being run unless you're an administrator?

If I go to a workstation in a certain large organisation and try to run an executable from a USB drive it doesn't let me. What setting is this in Group Policy or wherever else that does this?
6
votes
1answer
633 views

Server 2008 GPO not applying to Windows XP clients over site-to-site VPN

I have a Server 2008 R2 based Active Directory domain. Our default GPO has a few printer/network drive maps that both work fine locally for clients running Windows 7 as well as Windows XP (after ...
1
vote
1answer
290 views

Restrict access to All Users folder on XP and 7 via GP

I am attempting to restrict access to the All Users folder via GP. Currently I have the setting under: Computer/Policies/Windows Settings/Security Settings/File System configured for the ...
3
votes
2answers
2k views

Distributing Files using a Group Policy on Windows Server 2003

A piece of software that we use at our office has recently moved to a new licensing system. This means that from now on a new set of license key files will need to be distributed to each of our 25 ...
3
votes
1answer
125 views

Sharing and Security model for local accounts: Any reason to use this Setting in a domain?

I am trying to solve an issue I have with logging into computers with local users remotely, and stumbled on this setting in GP on our Domain controller: This might solve my problem, but than there ...
2
votes
1answer
372 views

WINXP/AD GPO: Allow non-admin user to log off existing locked session

I'm looking to create a policy that would allow non-administrator users the ability to log off other non-administrators who have left and have a locked screen. I really don't want to give the users ...
2
votes
2answers
277 views

Adding permanent classification title bar to windows workstations

I would like to add a permanent title bar at the top of a workstation's Desktop window to indicate a machine's security level (Unclassified, Confidential, etc). I would like to do this as a GPO, if ...
0
votes
1answer
638 views

Group Policy not applying to XP machines 2003 Server

Here's a quick rundown of the issue we're seeing here. And its a very blanketed question for the moment because Im not getting much in the way of error messages. Trying to deploy different group ...
1
vote
1answer
201 views

How to restrict access to command shell/explorer for non admin users

Is there a way to restrict access for specific (non admin) users to cmd, windows tools, explorer on an Wim XP system? Partially I consider to do this through group policy & logon script 1. deny ...
0
votes
1answer
140 views

Win 2003 AD Organisational Unit Group Policy not being applied to an XP client/user

I'm a developer and not much of a server admin, but am working on a project which requires me to build code which operates in a Windows 2003 domain environment, with XP client machines and so I need ...
0
votes
1answer
280 views

gpupdate causes infinite loop

I've got a patch file with the following content: gpupdate /force /boot /logoff When executing this file it causes an infinite loop, executing the line in the same cmd window again and again. This ...
6
votes
5answers
24k views

Push new registry keys via group policy

Recently I have added registry keys in active directory and I need to push them via group policy instead of going to each PC to apply the new ones. How can I push new registry keys (not modify ...
0
votes
2answers
1k views

Add Group Policy by Script

I'm trying to make it easy to add a LogOff script to Group Policy and am having difficulty finding any information on adding Group Policy via script. I already have the script I want to run at ...
0
votes
1answer
2k views

Can the users can apply Windows update without local administrator rights?

My users are running on windows XP 32bit. normally WSUS automatically download and notify them to select which update want to install in the past they were in local administrator rights,now I reduce ...
0
votes
1answer
683 views

Microsoft photo editor - No file format information can be found in the registry (registry policy)

I have Windows Server 2003 and my users are running XP. When I installed Microsoft office 2000 the photo editor said "No file format information can be found in the registry". I Googled it and I found ...
6
votes
2answers
6k views

GPO to lock workstation after it is idle for X minutes without forcing a specific screensaver

I'm trying to lock XP workstations after a period of inactivity via GPO. From what I can tell, one of the requirements is that a screensaver must be set. It appears that the only way to force the ...
0
votes
1answer
312 views

Unlock Windows XP for Command Prompt (and other admin feature)

I have the admin access to a Win XP machine, I want to setup that as a public kiosk and so I go to group policy to disable all Command Prompt, Control panel etc. The problem is, even I have admin ...
0
votes
1answer
488 views

Windows 2003 Domain - No Screensaver Tab visible on XP Clients (GPO Issue)

i have the following problem with our Windows 2003 infrastructure: Environment: There are two AD controllers running Windows 2003 Enterprise and some memberservers. Our network consists of some ...
0
votes
1answer
370 views

Remotely Remove firewall thats blocking RPC

Here's one for you. A while ago one of our big clients bought and partially rolled out an integrated connectivity package provided by a large UK mobile provider. The software includes a firewall ...
2
votes
2answers
2k views

Restrict Administrators from changing system time - Windows XP machines (no domain)

I need to write a script that will remove all users under Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > User Rights Assignment > Change the ...