Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

4
votes
0answers
54 views

How to bypass GPO loopback processing for some users?

As you probably know, loopback processing is a feature of Active Directory Group Policies which applies user settings in a GPO to any user who logs on to computers in the GPO's scope (whereas the ...
4
votes
0answers
90 views

How to configure Windows to trust a network share using a GPO?

I keep getting the following warning whenever I try to open a share from my DFS. How can I configure Windows (10 in this case) to trust anything under the root of my DFS via GP? It seems odd that ...
4
votes
0answers
142 views

Cannot set DSCP on Windows 10 Pro via group policy

Setting 'policy based QoS' on Windows 10 does not apply the DSCP value to outgoing traffic. I want to be able to set the value of DSCP traffic for certain processes. Using gpedit.msc group policy ...
4
votes
0answers
73 views

Windows Server Clear on Logout Policy

I was wondering is it possible to create a policy on Windows Server 2008 R2 or 2012 that will clear everything (all files from desktop, documents, etc) once the user has logged out of the system? It ...
4
votes
0answers
87 views

How do companies handle the need for different Java requirements on the same user?

In our company, we use GPOs to push software updates such as Java updates. We have about 150 users in different offices located in different countries, all using Windows 7. We have a few office-...
4
votes
0answers
562 views

Proxy Server setting stuck on Server 2003 R2 for Windows Updates

Stay a while and listen. This is going to be a long one. We've been having a problem the last couple of months with Updates on very specific Microsoft Server 2003 R2 Machines. This problem has ...
3
votes
0answers
149 views

Changed policy: locked out local and domain administrator account on Windows Server 2012

I'm kind of a rookie when it comes to servers and server hardening. I was following the CIS benchmark for Windows Server 2012 and changed the allow log on locally policy to include administrator, ...
3
votes
0answers
93 views

How can I programmatically unbind IPv6 from a network interface on a Windows 7 machine?

I need to unbind the IPv6 services from a number of client workstations running Windows 7. ("Untick" the selected box in the screenclip below.) For what it matters, they currently all have a single,...
3
votes
0answers
87 views

Group Policy Application on Boot with MSTP & really really fast computers

The latest generation HP computers with solid state drives and Win 10 are booting so fast that Multiple Spanning Tree Protocol is not allowing network access in time for Group Policy to process on ...
3
votes
0answers
102 views

Do GPOs apply to interactive logon only?

I am trying to enable certificate autoenrollment and credential roaming through a GPO in an ADS domain (DCs are Windows Server 2008 R2). I can interactively log on as a newly created user (on a member ...
3
votes
0answers
1k views

Chrome Not Applying GPO Policies

I'm having a little trouble getting Chrome installions on our workstation to update it's policies to reflect I've sent in GPO. I added the admx and adml to %systemroot%\policyDefinitions as our ...
3
votes
0answers
629 views

Is using the AD home directory attribute to map the home drive really no longer a best practice?

I have read some articles that claim that using the Active Directory user home directory attribute to automatically map the home drive is a legacy method, deprecated, or not recommended. The second ...
2
votes
0answers
32 views

Group Policy - BITS not applying on Windows10

We are upgrading our PCs to Windows 10 and are running into a few problems with updates. OUR SETUP: We have 2 sites based in the UK (Norwich & Preston) and we have a WSUS server in our Norwich ...
2
votes
0answers
64 views

Group Policy - Not automatically running on all machines

We are facing an issue on one of our domains where machines are not all running group policy refreshes at its default interval. I am not seeing the 1501 events logged in the system log, I occasionally ...
2
votes
0answers
74 views

Bitlocker says PIN is incorrect

I have new batch laptops to image, almost all of them are done but 2 of them (same models) have an issue I can't resolve. I enable bitlocker and make sure that its also recoverable by PIN. This works ...
2
votes
0answers
54 views

group policy being applied from offsite Domain Controller: why?

Site 2: I have a small branch with 1 DC and 4 clients. Site 1: Meanwhile my main branch has 2 DCs and lots of clients. I made some GP changes on DC-site2, and I was wondering why they weren't ...
2
votes
0answers
29 views

WMI Query - First and Fourth IP octet

Is anyone aware of any WMI queries that could be used within group policy which only lists all IP address, which end in .200 and I have multiple sites, multiple networks, I only need to list the ...
2
votes
0answers
35 views

How to find which templates a GPO are using?

With a Windows 2012 R2 AD domain, we have a Central Store for group policy templates. Over time, a number of unnecessary templates were added to this store (most of them are not used) and it has ...
2
votes
0answers
109 views

Windows 8.1 clients querying wrong ldap SRV record?

I just spotted than my PC, running Windows 8.1 Pro on a Windows 2012 R2 domain has been querying DNS for SRV records that doesn't exist. All of the dcdiag /dnsall tests pass, but I wonder if there's ...
2
votes
0answers
292 views

Windows Server 2012 R2 Personalization Pane not showing color picker

We are running a RemoteApp server on 2012 R2 and want to let our users select a border color and font size. Other than that, we don't want them messing around in the control panel. At first we set "...
2
votes
0answers
824 views

Various printer deployment issue with Server 2012 R2

I have just set up a new remote desktop infrastructure, with all servers being built on Server 2012 R2. I have 7 session hosts, and a central file/print server. On the print server, I have added ...
2
votes
0answers
512 views

Group Policy - Drive Mapping Preferences - slow login even if only using Computer Config side

We are having some users with very slow login times, up to 20 minutes, but only for a handful of users. I've narrowed it down to a particular GPO that does nothing but Drive Mapping Preferences. I ...
2
votes
0answers
59 views

EMET Configuration refresh

I deployed EMET on my domain and i'm configuring it with a GPO. I'd like to know if the system settings System DEP, System ASLR and System SEHOP are taken into account when i refresh the group ...
2
votes
0answers
87 views

Printer server hostname changed - deploy printers via GPO no longer works

We use the Deploy Printers feature of local group policy in Windows 8.1, so that our users can log into any machine and printers will already be configured. This was working flawlessly for all users ...
2
votes
0answers
350 views

Group policy deployed printer: One duplicates?

As a preface, no this doesn't have to do with Remote Desktop's Redirected printers at all. I've deployed an HP printer (called \Manager\Picasso) under User Configuration in a Group Policy object. ...
2
votes
0answers
236 views

Configuring Service Login Credentials with Group Policy following MS14-025

With Microsoft security bulletin MS14-025, GPMC and related tools are now patched to no longer allow the use of configuration items within Group Policy Prefs that would embed obfuscated passwords. The ...
2
votes
0answers
67 views

GPO: Applying a home page to Win7 and Vista Clients running IE9

I am trying to set the homepage on several Windows 7 and Vista machines via Group Policy Preferences. Both are running Internet Explorer 9. The "apply once and do not reapply" option is enabled, as i ...
2
votes
0answers
42 views

Deploying custom fxcop rules amongst developers

I am currently in the process of writing and deploying custom FxCop (Visual Studio Code Analysis) rules, allowing developers to check their code against a series of these custom designed rules. As a ...
2
votes
0answers
422 views

In the Local Security Policy, how do you avoid putting “IIS APPPOOL\” before “DefaultAppPool”?

Doesn't seem to be a whole lot on the Internet about this. I was tweaking the Local Security Policy of one of our test servers (Windows Server 2008 R2 Standard Service Pack 1), when I got this error. ...
2
votes
0answers
550 views

Group Policy Internet Explorer, Add-on list not working

We have group policy setup at our company something similar to the setup below Domain Policy OU Policy The domain policy is set to enabled for "Do not allow users to enable or disable add-ons" ...
2
votes
0answers
788 views

getting message open file security warning on remoteapp

I have an app published on Windows 2008R2 remoteapp. I am getting this message: This is how I have the setup of the drive: Local rdp machine is called rdpvm. //rdpvm/shared/company1 = i: //...
2
votes
0answers
534 views

Can I create a WMI filter that will evaluate to True for both Client computers and Terminal Servers?

I have a GPO that is currently being run only on client computers (XP, Vista, 7, etc.), by using a WMI filter with the following query: select * from Win32_OperatingSystem where ProductType='1' I ...
2
votes
0answers
1k views

Windows Firewall deployed by GPO detecting Public NL

Am struggling with Server 2008 R2 NLA and the Windows Firewall. Currently we are testing rolling out Windows Firewall via GP and have a test server that enables the firewall for Domain, Private and ...
2
votes
0answers
177 views

Strange Folder Redirection

I've recently inherited a client who has a folder redirection policy GPO and home paths specified through user attributes in AD. Now the strange thing is, I have literally no idea how it is working. ...
2
votes
0answers
2k views

Single Sign On 802.1x Wireless - saying “Connecting to <SSID>”, hangs for 10 seconds, fails with “Unable to connect to <SSID>, Logging on…”.

We are implementing WiFi on Windows 7 machines in our corporate environment. Machines should be able to log into the domain by WiFi as the Machine (Pre-Logon), and as the User (Post-Logon). We have ...
2
votes
0answers
429 views

Processing of group policy failed - Only on 32bit machines

When forcing a group policy update I get the following messgae, but only on 32bit windows machines. 64bit works fine. Running windows 7. The processing of Group Policy failed. Windows could not ...
2
votes
0answers
546 views

Logon script does not run for all users

We have a standalone common-use workstation running Windows XP Pro SP3 and have created a script using Javascript (scriptname.js) that is to be run for each user. The file was added as a user logon ...
2
votes
0answers
829 views

Windows XP not mapping drives after logging into a windows 7 PC

Bit of background. We map out network drives via GPO. This works fine for both XP and windows 7 clients. The GPO’s are served by a Win2008R2 DC. I have a user that has to works in 2 departments. The ...
2
votes
0answers
986 views

Is GPP Item Level Targeting any faster or slower than WMI filtering?

I need to filter a GPO so that it only applies if an application is installed. From what I can see, I should be able to do this either with WMI or with GPP item level targeting. Is there a performance ...
2
votes
0answers
278 views

Configuring Outlook Social Connector for SharePoint via Group Policy

Its possible to configure whether the Social functionality of Outlook is enabled or disabled via Group Policy, however, it would be nice to actually setup the SharePoint social connector for Outlook ...
2
votes
0answers
941 views

Network Topology Discovery – Windows 7 Via GPO

I wish to enable Network Discovery on my network (For various reasons) I need to apply this via GPO due to the nature of our setup. This is on a Windows 2008 R2 Domain with Windows 7/XP Clients. I ...
1
vote
0answers
16 views

Group policy setting to prevent asking user which encryption mode to use

Asked a similar question previously: Group policy setting to prevent asking user where to store recovery key I'm trying to enforce the encryption mode to the new XTS-AES so that if the users ...
1
vote
0answers
49 views

Windows Server 2012 R2 loses network shared printers

I have one Windows Server 2012 R2 virtual machine on the ESXi server. It has RDS role, so multiple users can use it at the same time. Via GPO the user account receives some basic settings like ...
1
vote
0answers
29 views

WLAN profile GPO settings and saved user credentials

We are distributing wireless profiles in our Windows domain (AD servers are 2012, domain level is 2008, various client Windows versions - mostly Win7 and Win10). However, it seems we just cannot ...
1
vote
0answers
48 views

How to disable “do not allow drive redirection” local policy not using GUI?

I need to do it preferably using powershell/batch but after searching there is only some instructions for creatig adm/admx files. Is there an easier way to do this? I've also found a registry key ...
1
vote
0answers
22 views

Win Server 2012 R2. Apply security GPO to local users on a specific machine

We have a "demo" machine which we use for providing remote access to demo software as a local user. Is there a way to hide and deny access to everything except the user folder using a GPO?
1
vote
0answers
119 views

Change or delete local windows firewall rule using group policy firewall rules

When I install a particular program on a computer it creates an overly lenient local firewall rule that allows inbound connections to port 1234 from any subnet. I want to create a more restrictive ...
1
vote
0answers
34 views

Bypassing group policy

I'm trying to prevent users from pressing CTRL + ALT + DEL while their accounts are logging in to our domain (ie. while the system is creating the user profile, applying group policies, etc.). Due to ...
1
vote
0answers
93 views

Windows Firewall Blocks GPMC

Found out that my Server 2008 R2 machine is not running firewall as it should. When I enable the firewall and try to open GPMC it states that it is unable to access the GPMC or the Primary Domain ...
1
vote
0answers
24 views

Server 2008 R2 & Auditing

Having an issue with auditing a network for logins. I am looking for Event 4740 but the logs are not showing them. Neither on the local machines either. I have verified that Account Management ...