Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
1answer
26 views

is it possible to deploy scanners with group policy or any other solution

we are a company of 60 employees/computers and want all employees to be able to scan, we purchased a Brother MFC-L2700DW and connected it with ethernet to network i'm able to scan just fine by adding ...
0
votes
0answers
16 views

server 2012 configuration to require password on wakeup

I have a new windows server 2012R2. I have a special situation when I want my server to sleep after an idle period (successful) and require password on wake up (not working). I have tried the ...
0
votes
0answers
12 views

How can I get a user to interact with an executable configured to run from a scheduled task?

I am trying to get the OpenVPN GUI to open for configured users automatically at (or recently after login). My original plan was to use a Computer Configuration scheduled task to run as the logged on ...
3
votes
3answers
630 views

Windows 10 - Set Start Layout via GPO

I could really use some help with this. Following the official instructions on technet.microsoft.com, I am trying to deploy a start menu to my windows 10 machines. Unfortunately, this doesn't work ...
0
votes
3answers
23 views

Run Log-on Script with Admin Rights

I created a batch logon script that checks and removes old versions of a specific piece of software and installs the newest version. Both the install and uninstall process use an .EXE file. The script ...
0
votes
0answers
6 views

SCCM 2012 requires local group policy processing be turned on, but local group policies inconsistent

My organization is in the process of migrating to SCCM 2012, from 2007. Clients aren't installing updates, and wuahandler.log indicates this is a group policy problem. The error message is along the ...
4
votes
3answers
1k views

Group Policy: Mapped Drives failing to load, Windows Server 2012 Active Directory and Windows Pro 10

Network: Multi-site domain. Each site has 2 local (on-site, same subnet) Windows Server 2012 R2 Domain controllers. Sites are correctly defined in Windows Sites and Services. DNS records for ...
0
votes
2answers
32 views

Restricted group local administrators can RDP into DC

I have added restricted groups to my Desktops OU and this adds the "Local Admins" security group to the Local Administrators group on workstations in that OU. The issue is, that after this GPO is ...
0
votes
0answers
17 views

Is there an Windows Event Viewer Event for “No available connections” or No Ethernet Connection?

I am trying to create a GPO that disables a laptop's wireless card whenever a Ethernet LAN is detected, and Enable the wireless whenever an Ethernet LAN is not detected. Right now I have a GPO that ...
1
vote
3answers
50 views

Store GPO Scripts in Netlogon or Policy Folder?

Is it best practice to store logon scripts centrally in \\DOMAIN\Netlogon or in the policy folder they get put in by default, eg. ...
1
vote
2answers
1k views

Logon/Logoff scripts running when disconnected from domain controller

I have a windows 7 system that is part of a domain. When it is unable to access the domain controller, will it still run logon scripts? Right now, we have a local script that is launched from the run ...
0
votes
1answer
31 views

How to find out what application was blocked by Group Policy

Currently my network (Windows Server 2008 R2) operates on an application white list group policy (Run only specified Windows applications). Occasionally I'll run into a program where even after I've ...
1
vote
2answers
17k views

Parsing error after copying new policy files to central store

A few months ago we upgrade our DCs from 2008 to 2008 R2. Two weeks ago I saw that I didn't copy the new admx/adml files to the central store. Because I want to use the new policies, I copied all ...
1
vote
0answers
23 views

How to disable “do not allow drive redirection” local policy not using GUI?

I need to do it preferably using powershell/batch but after searching there is only some instructions for creatig adm/admx files. Is there an easier way to do this? I've also found a registry key ...
6
votes
1answer
3k views

Is MSIZAP still useful, or is it obsolete?

I update flash using MSI files installed by group policy. However, with every update, about a third of the workstations fail to update (Windows Vista and Windows 7 32/64-bit editions). In the event ...
4
votes
1answer
2k views

Enabling SSL for Remote Desktop

Ok so I'm trying to remove a number of my systems from our Nessus scan from having this medium vulnerability. Microsoft Windows Remote Desktop Protocol Server Man-in-the-Middle Weakness I set the ...
1
vote
0answers
32 views

Chrome Group Policy - disable spell check

I need to disable spell check in Google Chrome on our terminal servers. I have setup the group policies but the only setting I can find is for SpellCheckServiceEnabled which isn't the spell check, its ...
-3
votes
1answer
23 views

Issue in Accessing FACEBOOK site in Domain network

In our Domain,We have setup firewall to prevent unwanted access to the websites. But a weird thing is even network administrators(whose IPs are not blocked by firewall) cannot access to facebook ...
3
votes
2answers
1k views

Deploy MSI silently - Cisco CAD Client Configuration

Deploy a MSI using Group Policy. Sounds easy right? This MSI (CAD Client Configuration.msi) prompts for the IP address of our UCCX server. Most MSI's I have dealt with I can install silently uisng ...
2
votes
2answers
39 views

script to temporarily block remote users from logging into a windows server during downtime

I'm looking for a solution to the following issue: we have a windows server with a bunch of people logging in remotely to work on stuff; when we need to upgrade the server, we issue warnings via ...
4
votes
2answers
4k views

Windows GPO Software Restrictions Policy not working with %TEMP% variable

I'm trying to put in some meagre additional malware prevention measures, by restricting the execution of *.exe in a handful of locations -- in particular, the temporary folders that various ...
3
votes
3answers
66 views

How to inherit from Default Domain GPO?

I recall reading somewhere that it's advisable to not make changes directly to the Default Domain GPO, but instead to create a new GPO that inherits from Default. This sounds reasonable. I'm a ...
0
votes
2answers
20 views

Printers deployed by group policy - separate policies or all in one?

We have 60 printers deployed by group policy on a 2008 R2 level domain. They are set as Group Policy Preferences in User configuration. They're all item level targeted to OUs and Security Groups ...
5
votes
6answers
19k views

How can I remove local administrator permissions?

I want to disable the permissions of local administrators in the machines of my domain, is this possible?, and only put administration rights to the Domain Administrators. And I want to do it with ...
9
votes
2answers
4k views

Everything says Applocker is supposed to work: Why doesn't it?

I've setup a basic group policy consisting of the default Applocker rules. Per Microsoft's technet article on the subject, any files not explicitly allowed to run by the policy are supposed to be ...
-1
votes
0answers
36 views

Noob Q: Active Directory GPO not applied immediately

What are the reasons why a GPO could take multiple days to apply? What I'm doing is adding servers to a group. The group has a GPO applied to it which determines the members of the Administrators ...
2
votes
2answers
4k views

Restore legacy audit policies on Windows Server 2008 R2

Recently, I was trying to reduce spam of my security audits by disabling auditing of "Filtering Platform Packet Drop". In a week's time, I get enough of these audits the fill a 200Mb logfile. I tried ...
9
votes
6answers
9k views

What are the popular (free?) options for application deployment? [closed]

I manage a small school network with about 150 machines. I am looking for an easy way to deploy software to all the machines without having to visit each one. I've used Symantec Ghost to get the ...
0
votes
3answers
47 views

Missing GPO “Allow job name in event logs” in Windows Server 2012 R2

I am using Windows Server 2012 R2 (6.3.9600 Build 9600) for two different servers. However, one server has the GPO option "Allow job name in event logs" while the other one does not. I have examined ...
3
votes
1answer
2k views

Deny access to removable storage media for Windows XP client machines via Group Policy

I am currently editing a GPO for user accounts of a particular OU and I want to disable removable drives access on a particular OU, problem is that all the client machines are Windows XP and the ...
1
vote
1answer
3k views

“Fast link detected” warning in GP management console

There is a message that is shown in every report i make in Group Policy Results section of Group Policy Management Console, saying that "A fast link is detected". I followed the link in the waring, ...
2
votes
1answer
42 views

openSUSE installs and VMs constantly being hacked and bricked

Sorry if this is a total newbie question, but I'm doing frontend design work for a radical political organisation and ALL my installations of Linux, be they openSUSE, Ubuntu or Fedora keep getting ...
3
votes
0answers
48 views

How to configure Windows to trust a network share using a GPO?

I keep getting the following warning whenever I try to open a share from my DFS. How can I configure Windows (10 in this case) to trust anything under the root of my DFS via GP? It seems odd that ...
1
vote
1answer
1k views

Server 2012r2 change login screen language with registry

I am installing a Windows Server 2012R2 RDS farm. The OS language is English, but my users are Dutch. I already installerd the Dutch MUI pack in windows via the command prompt. Via a user GPO the ...
0
votes
0answers
25 views

google chrome group policy locale

We currently have Google chrome deployed in the enterprise. We have an internal website that retrieves data from a database and people using chrome noticed the date and time format was in the US ...
1
vote
2answers
7k views

Change/Force Mouse Pointer Schemes via GPO, or other ways

Is it possible to control Mouse Pointer Schemes via GPO without tampering with the registry? I have Windows 7 / Windows Server 2008, I need to be able to control the Mouse Pointer Schemes for certain ...
-2
votes
0answers
46 views

How to Force reinstall a software if its been uninstalled using GP? [duplicate]

I Used group policy to add a software package to be installed into users, and it works fine. but i have noticed that if the user uninstall the software, it will be gone. is there any way to make the ...
0
votes
3answers
20 views

Internet Explorer maintenance is missing and proxy cannot be removed

There are proxy settings configured on a policy. The exact location is User Configuration > Windows Settings > Internet Explorer Maintenance > Connection / Proxy settings. Since this is a Windows ...
0
votes
0answers
19 views

Can any Group Policy or other network-based settings be applied to Windows 10 Home devices [closed]

I work with school IT services department -- they are getting some low cost digital signage appliances (Intel Compute Sticks) that run Windows 10 Home from a Vendor. The devices come pre-configured ...
1
vote
1answer
1k views

Windows user privileges when running scheduled task

I posted a question a while ago about allowing a specific user to start/stop Windows services. Provide a user with service start/stop permissions I decided to revisit the issue. I have no idea what ...
0
votes
1answer
43 views

Group Policy Object not applied to client computer

I am taking over our entire Microsoft based management, this includes our AD servers, GPOs, etc. So with that being said, I don't know everything about how this setup is configured. However, I have ...
1
vote
2answers
123 views

Configure same Internet Explorer zone mappings with and without ESC via GPO

Our Active Directory domain consisting of Windows Server 2012 R2 servers and Windows 7 workstations configures Internet Explorer security zones using this Group Policy setting: Computer ...
2
votes
1answer
75 views

Item level targeting error

I am attempting to set up group policies which are applied to OUs containing computers. I am then trying to item level target these policies to OUs containing users. Whilst attempting to do this, ...
1
vote
0answers
32 views

Bypassing group policy

I'm trying to prevent users from pressing CTRL + ALT + DEL while their accounts are logging in to our domain (ie. while the system is creating the user profile, applying group policies, etc.). Due to ...
-1
votes
0answers
26 views

Group Policy for Particular PC

I have already Wallpaper Policy in my domain for all users. Its configured in DC in user configuration in group policy. Where ever the user login they get wallpaper which i had given in DC. Now i am ...
6
votes
2answers
294 views

What does 'Log on as a Service' actually mean?

I am building Group Policy for a new domain that we are migrating to. In our current environment the settings Log on as a Service is set at the Server OU level - which has about a hundred Service ...
2
votes
0answers
59 views

Group Policy - Not automatically running on all machines

We are facing an issue on one of our domains where machines are not all running group policy refreshes at its default interval. I am not seeing the 1501 events logged in the system log, I occasionally ...
1
vote
5answers
11k views

How can i disable download from all browsers using group policy for domain users in windows server 2008 R2 Standard Edition?

We have using Windows server 2008 R2 edition. I need the group policy for disable download option for domain users. Anyone please let me know the policy settings. Thanks in advance.
0
votes
3answers
2k views

Is there a GPO to allow standard users to access Resource Monitor

I need to allow standard domain users to be able to access the Resource Monitor on Windows 7 without adding them into the administrators group on any local machines. Is there a domain GPO setting to ...
0
votes
1answer
64 views

Is using the “IP Security Policies on Active Directory” settings in Group Policy a best practice?

Is using the "IP Security Policies on Active Directory" settings in Group Policy a best practice? I recently created a new GPO and assigned the "Server (Request Security)" policy. Almost instantly I ...