Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

6
votes
0answers
2k views

Prevent IE10 from creating WebCache through Group Policy

IE10 implemented the WebCache which appears to be the new way of doing Temporary Internet Files. The location of this is C:\Users\\AppData\Local\Microsoft\Windows\WebCache In my situation we have a ...
3
votes
0answers
57 views

Server 2012r2 RDS - Start Screen

I'm in the process of setting up an RDS server. It will be multi-tenant, so it's locked right down. All user profile data is stored on the file server using GPO folder redirection. I want to lock ...
3
votes
0answers
168 views

Windows 8 profile creation video

I have a piece of software that deploys a local account on workstations via an MSI and creates a profile for it. In versions of windows prior to windows 8, the first time this account was used it ...
2
votes
0answers
31 views

Is it possible to add computers in a particular IP range to a particular Active Directory group?

I'm using AWS and have a VPC which is connected to the local network via a VPN. I can launch EC2 instances, put them in various subnets in various AZ's and connect to them via internal IP. I can also ...
2
votes
0answers
292 views

getting message open file security warning on remoteapp

I have an app published on Windows 2008R2 remoteapp. I am getting this message: This is how I have the setup of the drive: Local rdp machine is called rdpvm. //rdpvm/shared/company1 = i: ...
2
votes
0answers
81 views

Can I create a WMI filter that will evaluate to True for both Client computers and Terminal Servers?

I have a GPO that is currently being run only on client computers (XP, Vista, 7, etc.), by using a WMI filter with the following query: select * from Win32_OperatingSystem where ProductType='1' I ...
2
votes
0answers
175 views

Windows Firewall deployed by GPO detecting Public NL

Am struggling with Server 2008 R2 NLA and the Windows Firewall. Currently we are testing rolling out Windows Firewall via GP and have a test server that enables the firewall for Domain, Private and ...
2
votes
0answers
90 views

Strange Folder Redirection

I've recently inherited a client who has a folder redirection policy GPO and home paths specified through user attributes in AD. Now the strange thing is, I have literally no idea how it is working. ...
2
votes
0answers
177 views

Group policy issues

We are having an issue on one of our clients relatively new sbs installs. The domain consists of a single SBS 2011 server with 4 Windows 7 clients and 3 XP clients. Most of the time everything is ...
2
votes
0answers
233 views

Processing of group policy failed - Only on 32bit machines

When forcing a group policy update I get the following messgae, but only on 32bit windows machines. 64bit works fine. Running windows 7. The processing of Group Policy failed. Windows could not ...
2
votes
0answers
302 views

Logon script does not run for all users

We have a standalone common-use workstation running Windows XP Pro SP3 and have created a script using Javascript (scriptname.js) that is to be run for each user. The file was added as a user logon ...
2
votes
0answers
367 views

Windows XP not mapping drives after logging into a windows 7 PC

Bit of background. We map out network drives via GPO. This works fine for both XP and windows 7 clients. The GPO’s are served by a Win2008R2 DC. I have a user that has to works in 2 departments. The ...
2
votes
0answers
1k views

Enabling SSL for Remote Desktop

Ok so I'm trying to remove a number of my systems from our Nessus scan from having this medium vulnerability. http://www.nessus.org/plugins/index.php?view=single&id=18405 I set the following GPO ...
2
votes
0answers
627 views

Network Topology Discovery – Windows 7 Via GPO

I wish to enable Network Discovery on my network (For various reasons) I need to apply this via GPO due to the nature of our setup. This is on a Windows 2008 R2 Domain with Windows 7/XP Clients. I ...
2
votes
0answers
202 views

Using GPO to install/update java on windows terminal servers

We've been using GPO to manage java + reader installs on user PCs for a while now... I'm wondering if there would be any issue using the same method on terminal servers. How do you handle switching ...
1
vote
0answers
13 views

Group Policy Mapping Printer

There seems to be lots of different ways to map printers, all appear not to work (for me). Im running a Windows 2008 Environment with windows 7 clients, simple, hey? No.. I have a printer connected ...
1
vote
0answers
35 views

Windows Server 2012 R2 cannot rename Administrator account via GPO

On Windows Server 2012 R2 the Administrator account does not seem to be able to be renamed. Have created the normal Rename Administrator GPO: Comp config -> Policies -> Windows settings -> Security ...
1
vote
0answers
25 views

Group Policy Internet Explorer, Add-on list not working

We have group policy setup at our company something similar to the setup below Domain Policy OU Policy The domain policy is set to enabled for "Do not allow users to enable or disable add-ons" ...
1
vote
0answers
49 views

Server 2003R2 DC Windows 7 and disable auto updates

I run an environment with Server 2003 R2 DC's and mostly WIndows 7 clients with just a few XP clients. The problem I am having is that the Windows 7 PC's are installing updates on their own. We have ...
1
vote
0answers
44 views

GPP Delete policy not working on Windows Server 2008 R2 RDS when deleting shared printee

I have one AD Security group for each shared printer, I have one GPP that map the printer if the user is in the security group that belong to the printer. And one GPP to delete the printer if the user ...
1
vote
0answers
46 views

How to prevent Domain Users group from being added to local Users group

I do not want the Domain Users group to be automatically added to the local "Users" group when a computer joins the domain, but am struggling with finding how to prevent this. In the default domain ...
1
vote
0answers
84 views

Group Policy error 1006 with and error code 52

I have a hyper-v cluster operating on win2k8 R2 in a 2003 forest. These servers are at our NOC with a DC that connects to our PDC at HQ via a persistent VPN. The cluster boxes are reporting a error ...
1
vote
0answers
356 views

“The processing of Group Policy failed” while doing gpupdate

I'm trying to install MSI package from a Windows Server 2008 as a GPO in a computer-wide scope. When I log in to a Windows 7 client workstation and run: gpupdate /force I get the following error ...
1
vote
0answers
46 views

GPO extension to MPG and MPEG files

I have a 2008 R2 server with GPO that generates pop-up menus on extensions of GPG , MPG and MPEG files. This GPO is active in encoding servers. options that appear on the gpg files , mpeg , mpg are " ...
1
vote
0answers
277 views

Windows GPO Software Restrictions Policy not working with %TEMP% variable

I'm trying to put in some meagre additional malware prevention measures, by restricting the execution of *.exe in a handful of locations -- in particular, the temporary folders that various ...
1
vote
0answers
125 views

How can I run a scheduled task on a Windows 2008 R2 Domain Controller as a non-admin user?

I'm trying to run an exe as a scheduled task on a Windows 2008 R2 Domain Controller. The exe runs fine when I try and run it manually using an account which is a Domain Administrator, but I don't ...
1
vote
0answers
25 views

Is there a group policy or permission to create local shares?

I have some custom windows services which need the ability to create and remove local shares. In trying to lock down security, I also don't want to run the services as administrators. Is there a ...
1
vote
0answers
345 views

DirectAccess Server firewall rules blocking ports

I have configured DirectAccess on my Server 2012 Essentials box and most of it works great - I can remotely access the server via RDP and the default IIS website on port 80. However, I can't access ...
1
vote
0answers
113 views

Provide a user with service start/stop permissions

I have a very basic domain that I use for development. I want to create a GPO that provides users in the Backup Operators group with start/stop permissions for two specific services on a specific ...
1
vote
0answers
37 views

Preventing Python as a gateway to CMD for Standard Users

Someone has hacked our system - using Python as a gateway to open command prompt as an admin - and the hacker shuts down computers remotely using shutdown /i. How can we prevent this using Group ...
1
vote
0answers
663 views

Is MSIZAP still useful, or is it obsolete?

I update flash using MSI files installed by group policy. However, with every update, about a third of the workstations fail to update (Windows Vista and Windows 7 32/64-bit editions). In the event ...
1
vote
0answers
115 views

IE: Cannot disable Settings button under Browsing history via group policy

Windows XP Pro SP3, IE8 (8.0.6001.18702), within local gpedit.msc I did the below: User Config/Admin Temp/Windows Comp/IE enabled: disable changing temporary internet file settings User ...
1
vote
0answers
39 views

GPO Templates Resource?

I am in the process of designing the group policies for my organization, and I'm wondering if there is somewhere I can go to look at templates, to see how other people have set theirs up, and even ...
1
vote
0answers
178 views

Windows Server 2008 R2 Software Deployment on Active Directory - Schema Issue

We have two servers, one running Windows Server 2003 SP2 and one running Windows Server 2008 R2. Both servers have their own versions of Group Policy Management (1.0.2 on 2003 and 6.0.0.1 on 2008). ...
1
vote
0answers
50 views

Block or disable Ad-hoc connection

Is there any GPO or registry setting to block Ad-hoc connection in Window XP and Window 7. Please note that, We can't block Wireless connection, as user goes out of Office, for meeting client. I have ...
1
vote
0answers
138 views

Automatic binding of Windows 8 account with Live ID

Is it possible to do automatic binding of Windows 8 account with Live ID thru GPO, scripts, or some sort automated way that will basically do it for everyone in domain. There is an assumption that ...
1
vote
0answers
176 views

“hkcu\volatile environment” missing, hkcu\environment not read

This question is very similar to this one. Suddenly, my "HKCU\Volatile Environment" keys disappeared, and my system no longer reads HKCU\Environment unless I reset it explicitly using SETX (which I ...
1
vote
0answers
759 views

Single Sign On 802.1x Wireless - saying “Connecting to <SSID>”, hangs for 10 seconds, fails with “Unable to connect to <SSID>, Logging on…”.

We are implementing WiFi on Windows 7 machines in our corporate environment. Machines should be able to log into the domain by WiFi as the Machine (Pre-Logon), and as the User (Post-Logon). We have ...
1
vote
0answers
105 views

Manage Multiple Local Group Policy objects (GPO) with Microsoft Security Compliance Manager (SCM)?

Is it possible to manage Multiple Local Group Policy objects (LGPO) with Microsoft Security Compliance Manager (SCM)? Specifically, I want to create different a LGPO for non-administrators. These are ...
1
vote
0answers
255 views

Group Policy Folder Redirection deleted my Documents folder

OK so i have a server 2008 R2 server with AD. I created a group policy for folder redirection of the documents folder and applied it. I logged on with my work machine (windows 7 32 bit) and the folder ...
1
vote
0answers
351 views

task scheduler - run interactively as any user with admin credentials

I'm trying to deploy a scheduled task with a GPO. The task is set to run at login and executes a batch file, which then executes an EXE file. However, I also need it to be interactive and run with ...
1
vote
0answers
663 views

Windows 7 Screen Saver timeout problems using GPO

In our Windows 2003 domain, we are enforcing screensavers with timeouts through GPO. The settings currently in effect are. Screen Saver = Enabled Screen Saver executable name =Enabled and ...
1
vote
0answers
442 views

Is GPP Item Level Targeting any faster or slower than WMI filtering?

I need to filter a GPO so that it only applies if an application is installed. From what I can see, I should be able to do this either with WMI or with GPP item level targeting. Is there a performance ...
1
vote
0answers
731 views

Active Directory Mapped Drive won't stay connected

WinSrv08R2. I have a drive mapped to Win7 clients via Group Policy that's on another computer (an OS X server, mapped via "\serverIP\folder"). EVERY time the user logs out and then back in, it pops up ...
1
vote
0answers
461 views

Why is my access being denied when I am an adminstrator on my Windows Server 2003 Installation?

I have recently been made an Administrator on our server (running Win Server 2003) and have been given all the same permissions and made part of the same groups as our other admin but when I try to ...
1
vote
0answers
210 views

Group Policy for a Kiosk application

I have a Windows application (WPF), which I have run in a Kiosk scenario, limiting the user's access to other functionalities except the application itself. Reading this article ...
1
vote
0answers
41 views

Specify attribute's minimum length

I'm implementing a new infrastructure which will include a kind of Microsoft's GPO using ldap, dns, dhcp and pam. I'm creating a new schema to store the information I need, and I have a groupPolicyId ...
1
vote
0answers
148 views

Configuring Outlook Social Connector for SharePoint via Group Policy

Its possible to configure whether the Social functionality of Outlook is enabled or disabled via Group Policy, however, it would be nice to actually setup the SharePoint social connector for Outlook ...
1
vote
0answers
62 views

NTP problems in one AD OU?

We have one domain with OU's for each geographic site. We have five physical sites; one in Asia, two in Europe, and two in the U.S. (not sure if this might have any bearing on the situation). One ...
1
vote
0answers
244 views

FullArmor ADMX Editor: Does it work correctly/well for admx files?

I am currently creating some admx files. I found the FullArmor ADMX Migrator from Microsoft which also includes an ADMX editor. However, when using this editor I found the outputs quite strange. For ...