Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
0answers
7 views

How does Group Policy's Site to zone assignment handle multiple matches?

I am using Group Policy to set sites to zones, I have these policies (generalized for clarity): *.mysite.com --> intranet zone (1) http://*.mysite.com --> trusted site zone (2) cl.mysite....
0
votes
0answers
13 views

Why are Mapped Drives using GPO saying they can't find the network path or do not have access?

Shared drive is being set as the following \\SERVER\SHARE using drive N All drives have no change Show hidden drives no change Titled: "Share" Reconnect: unchecked Set as Update/Create/Replace (all ...
0
votes
2answers
1k views

Disable Flash player in Chrome via group policy

How would I disable Flash player in Google Chrome browsers for my 50 AD computers via group policy or script 2008 R2? I have tried a couple of applications, PDQDeploy_6 among them, but this software ...
0
votes
1answer
32 views

Why is SiteToZoneAssignment GPO applying, but sites not appearing in IE

We have a Windows server 2012 R2 remote desktop farm, which we have applied a GPO to, to control site to zone assignments. This was working fine up until recently, but just lately, we have found that ...
0
votes
2answers
56 views

GPO shows applied under user settings, but contains only computer settings

I am having a spot of trouble with my policies and applying them on my Windows 10 machine. I have several GPOs applied at the top of domain level, some contain only computer settings, some contain ...
-1
votes
2answers
223 views

What does “Administrator” have that allows them to RDP into a server?

I am trying to setup an Active Directory so that "Domain Users" can via RDP. If I assign the role "Domain Admin" to the user, they can login via RDP no problem but when I follow many tutorials (this ...
1
vote
1answer
2k views

Server 2012r2 change login screen language with registry

I am installing a Windows Server 2012R2 RDS farm. The OS language is English, but my users are Dutch. I already installerd the Dutch MUI pack in windows via the command prompt. Via a user GPO the ...
1
vote
0answers
14 views

Group policy setting to prevent asking user which encryption mode to use

Asked a similar question previously: Group policy setting to prevent asking user where to store recovery key I'm trying to enforce the encryption mode to the new XTS-AES so that if the users ...
14
votes
1answer
2k views

GPOs fail to apply; reason: Inaccessible, Empty, or Disabled; Server 2012 R2 and Windows 10

I have a Windows Server 2012 R2 Domain. Yesterday, a computer’s (running Windows 10 Pro) network drive stopped working. After further investigation (gpresult /h) it appears ALL group policy objects ...
-2
votes
0answers
29 views

How to fix error: The security database on the server does not have a computer account for this workstation trust relationship [on hold]

Sys Admins I need your help! Logged onto my Windows 2008 r2 NAS server & received the following error message: Group Policy Service failed logon access denied. So googled the issue and ...
0
votes
0answers
17 views

Internet explorer 10/11 -GPO- Proxy setting “atomatically detect settings” greyed out

i have a big problem changing my internet explorer setting from fixed proxy to WPAD configuration. WPAD is configured correctly and everything is working fine except changing the GPO setting In ...
3
votes
1answer
2k views

Deny access to removable storage media for Windows XP client machines via Group Policy

I am currently editing a GPO for user accounts of a particular OU and I want to disable removable drives access on a particular OU, problem is that all the client machines are Windows XP and the ...
1
vote
1answer
1k views

Windows user privileges when running scheduled task

I posted a question a while ago about allowing a specific user to start/stop Windows services. Provide a user with service start/stop permissions I decided to revisit the issue. I have no idea what ...
0
votes
0answers
14 views

Wrong GPO Applied to RDS Session

I am running Win 2012 R2 RDS session-based services with 16 rds users connecting via thin-client RDP session. I have several GPOs set up to set desktop, manage RemoteFX, background, etc. 13/16 rds ...
0
votes
1answer
35 views

Server admin shares open for local administrators?

This is a new domain controller. I created users and created a security group called Local Admin. The users are members of this group. I created a domain group policy and used the Restricted Groups ...
2
votes
2answers
6k views

Unable to create logon script - Access denied?

I'm currently trying to create a logon script that will map a few network drives for all users. I've created the script, but when I try placing the .bat file in the proper folder, I get an "Access ...
1
vote
2answers
1k views

Single user change with forced domain firewall GPO

I have an issue which i need some help with. Current Scenario: I have a domain firewall policy, which turns the firewall ON and is enforced on "Authenticated users". The domain policy locks the ...
2
votes
0answers
23 views

Driver installation not working when deploying printers via GPP

I'm trying to deploy printers via Group Policy. Posts around the internet suggest using the Group Policy Preferences approach (User/Preferences/Control Panel Settings/Printers) is the preferred method....
0
votes
2answers
2k views

Windows 8.1/ Server 2012r2 Setting Default Browser vis GPO

I have an RDS 2012r2 server currently has Chrome and IE on it. I am having some issues with chrome and want to get a subset of users using IE instead. I have set two registry keys in GPO as below, ...
6
votes
1answer
254 views

Group policy issues

We are having an issue on one of our clients relatively new sbs installs. The domain consists of a single SBS 2011 server with 4 Windows 7 clients and 3 XP clients. Most of the time everything is ...
1
vote
1answer
77 views

How to enable NumLock on Windows 7/8/10 logon screen with GPO

I am currently migrating my company to Active Directory. Because my boss has enforced strong passwords, everyone needs to type at least one digit to log on their computers. Some of them have the ...
2
votes
2answers
2k views

Clients of replica WSUS aren't targetted to groups and appear in 'Unassigned Computers'

I have two WSUS v3 servers, our company has a single domain AD that spans two sites, and each site has one WSUS server. The stub site's WSUS server is configured as a replica. Settings, groups, ...
0
votes
1answer
32 views

Group policy vs. Local group policy: which is correct for this use case?

Quick background: I've been working with group policy since Win2k; I'm in an organization that's just getting around to rolling out Active Directory. I've got a few cases where I need to provide ...
0
votes
3answers
4k views

GPO Troubleshooting - Security Filtering - Computer Configuration

We have a GPO that includes a Computer Configuration that enables a Preference that adds a security group to the local Administrators group. Since this is a Computer Configuration, do you need to add ...
0
votes
0answers
8 views

Excel '07 Macros and GPO issue. Cannot add Trusted Publisher

We have a GPO (that I created and manage) that blocks unsigned MS Office Macros and warns for signed ones. The GPO only applies user-side, not computer-side. I created a test user, then put "him" in a ...
6
votes
2answers
103 views

Using Azure AD to push Group Policy settings

I am trying to use Azure Active Directory instead of using a traditional domain controller. I would like to use Azure AD to authenticate users and to push GPO settings, such as folder redirection, ...
2
votes
2answers
1k views

Force a specific theme for entire network using GPO

I am attempting to force a specific theme to all machines in my network. I know that the GPO "Load a Specific Theme" in: User Configuration/Administrative Templates/Control Panel/Personalization Is ...
0
votes
1answer
1k views

terminal server, hide desktop icons doesn't work as expected

In the User part of a GPO that i activate for users who log on a terminal server, i tried to set the Administrative Templates, Desktop, "Hide and disable all objects on the desktop" (may be that the ...
0
votes
1answer
1k views

Error on RSOP for Audit policy on DC

Domain Controller - Windows Server 2008 R2 Standard Please see the print-screen, I am unable to understood why such error is showing on my Domain Controller. I have also checked on Winlogon.log, ...
-2
votes
1answer
36 views

Power plan GPO applies, but doesn't change sleep interval [on hold]

I am having a problem trying to make a new GPO to change the interval for sleeping while plugged in. I am seeing that the GPO sets High Performance as the active plan, but even though I set the ...
0
votes
1answer
1k views

Group policy not updating for user, corrupt profile?

I have 1 user on my SBS 2008 server that when logged in has no files in their documents/desktop etc. So the user's folders have not been redirected to the server. I tried to run gpupdate /forceto ...
5
votes
4answers
38k views

Diagnosing why a Group Policy Object is inaccessible

I have a Windows Server 2003 domain. One of the Group Policy Objects appears as a linked item in an OU but all I can see if the Unique ID and that the Link Status is Enabled. There is a red minus icon ...
0
votes
1answer
22 views

Giving user local administrator rights when Restricted Groups is being used

Previous administrator configured Restricted Groups in the Default Domain Policy. In the Restricted Groups for Administrators, they've added the Domain Admins group as well as a domain security group ...
0
votes
1answer
1k views

Open custom port for IIS windows firewall or group policy

I am running Windows SBS 2011. I have added a web site to IIS using port 8888 and it works perfectly when connecting locally, but not from any other PC on the network (domain). I think I need to open ...
0
votes
2answers
47 views

Why is Group Policy not applying a desktop wallpaper setting?

I am configuring Group Policy in Windows Server 2008 R2 Enterprise to apply Desktop Wallpaper to Users and Computer in OU called HR. I shared the folder over the network using share and storage ...
-1
votes
0answers
9 views

GPO on roaming profile causing Recycle Bin corruption? cannot find source

We've recently created some new OU's on our AD to better implement security policies, but we're constantly running into an error when the users first login, which states that various recycle bins are ...
-1
votes
0answers
41 views

How to disable client drives from Windows Server 2008 R2?

I'm working in college that has 3 labs. In each lab there are 100 systems that are all Dell systems (not a thin clients) and which have three drives (C, D, E). I will be logged on as a local user on ...
2
votes
1answer
2k views

IE9 GPO Setting “Configure Tracking Protection Lists”

I've just installed IE9 on my workstations and Server in our network. According to technet article http://technet.microsoft.com/en-us/library/gg699401.aspx There is a GPO setting for IE9 called "...
1
vote
1answer
10k views

GPO Run these programs at user logon not taking effect

When on our W2k8-R2 DC I create a new GPO and configure "Computer Configuration/Policies/Windows Settings/Administrative Templates/System/Logon/run these programs at user logon" to "c:\windows\...
0
votes
0answers
27 views

Windows SBS11 Drive Map Policy not applied to Windows 10

I have recently upgraded a couple of machines to Windows 10 as a test with company applications etc. The only problem I have run in to is the fact that the drive map policy isn't being applied to ...
0
votes
3answers
89 views

Change local admin password via GPO

I have deployed an Active Directory in a small company. Each and every user is trusted with local admin privileges on his computer with his domain account. However, in case the users can't log on to ...
2
votes
2answers
1k views

Cannot find Registry Setting for Office Shared Templates

We have our Templates for Office 2003 located in a shared location \servername\Templates$ This is also the location of our Word Startup Folder. Both settings are set in a User Group Policy. This has ...
3
votes
1answer
51 views

Server 2008/2012 (R2) group policy scheduled task not applying

I am at wit's end and totally confused. The goal is to take group policies(one per day of a week) and set a scheduled task which will trigger a reboot on that day at a specific time. So I made them (...
1
vote
2answers
6k views

Accessing the Computer Configuration node in Group Policy settings

I am trying to configure Terminal Services printing related group policy settings and the technet doc says I need to go here: Computer Configuration\Policies\Administrative Templates\Windows ...
0
votes
1answer
10k views

Why gpupdate fails?

So I have a Windows Active Directory Domain with two domain controllers, DC1 and DC2, both running Windows Server 2008 R2. DC1 is the primary DC holding all FSMO roles. It was functioning all right as ...
0
votes
1answer
20 views

Group policy setting to prevent asking user where to store recovery key

Win10 PCs, 2012R2 domain I'm rolling out bitlocker to clients and I'm trying to restrict the options in the bitlocker wizard as much as possible. I do need users to run the wizard so they can set a ...
4
votes
2answers
2k views

Enabling SSL for Remote Desktop

Ok so I'm trying to remove a number of my systems from our Nessus scan from having this medium vulnerability. Microsoft Windows Remote Desktop Protocol Server Man-in-the-Middle Weakness I set the ...
4
votes
0answers
53 views

How to bypass GPO loopback processing for some users?

As you probably know, loopback processing is a feature of Active Directory Group Policies which applies user settings in a GPO to any user who logs on to computers in the GPO's scope (whereas the ...
5
votes
3answers
3k views

Group Policy: Mapped Drives failing to load, Windows Server 2012 Active Directory and Windows Pro 10

Network: Multi-site domain. Each site has 2 local (on-site, same subnet) Windows Server 2012 R2 Domain controllers. Sites are correctly defined in Windows Sites and Services. DNS records for ...
0
votes
1answer
25 views

Distributed File System (DFS) Shared Drive Disappears at Logon for Users in a Given Organizational Unit (OU)

So, I've got a bit of an odd problem, and I want to get a grasp on the cause and what the solution is before it gets any worse. We've got a DFS share that's set to be mapped to all users in our ...