Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

3
votes
2answers
504 views

GPO Enforced Precedence

What is the precedence for Enforeced GPOs, I can't really find any MS articles which give a refined answer. My current understanding is as follows: Lets say we have 5 GPO's - GPO1 through GP05. I ...
1
vote
1answer
276 views

Windows 7: Update a file in the system32 folder via GPO

I'd need to update a Windows file in the system32-folder I've made a script to do this task. When I run it locally on a system (from a prompt with elevated privileges) it works fine. I've created a ...
2
votes
1answer
856 views

How to enable Kerberos Authentication Service auditing on 2008 server

I have a 2008-level Windows domain running 5 x 2008 (non-R2) DCs (it's on the roadmap to migrate to R2 or possibly 2012 in the next 9-12 months, but this project needs to be working first), and I need ...
3
votes
1answer
215 views

what does local group policy do in Dc?

when you have a dc, in fact you don't have LSD because it has migrated to GSD .But if you type Gpedit.msc in Run box it will open local group policy console . I've read that policies you have set in ...
2
votes
1answer
401 views

What happens if unlink a GPO?

If I have a GPO that contains a handful of settings - let' say, configured to implement WSUS configuration, some random registry entries, some other Control Panel settings etc. If I unlink the ...
0
votes
3answers
1k views

Server service fails to start, event 7023, error 1079

Hello, Environment: Windows Server 2008 R2 fully patched, working as Domain Controller in Win 2003 native domain. Users started to report problems with share, it turned out that server service won't ...
0
votes
1answer
70 views

Windows Azure Cloud Service - add Local Security Policy to a user account in startup task

I have a Windows Azure Cloud Service project that includes a startup task Startup.cmd file to create some scheduled tasks. In this file I am using the command line to create a user account which I ...
0
votes
2answers
400 views

How to disable creation of VPN connections on Windows Server 2008 R2

I have a problem: users are connecting to our terminal server via remote desktop, and then creating VPN connections from it to another server, which then changes the networking and stops all ability ...
3
votes
1answer
35 views

How to easily remove a large number of GPOs from Group Policy Management

I was setting up a group policy when I noticed what appears to be a large number of GPOs created by Kasperky AV. Im positive they were from a failed installation of the management software 2 years ...
0
votes
1answer
703 views

Open custom port for IIS windows firewall or group policy

I am running Windows SBS 2011. I have added a web site to IIS using port 8888 and it works perfectly when connecting locally, but not from any other PC on the network (domain). I think I need to open ...
1
vote
1answer
195 views

GPO still applying old setting

AD functional level: 2003 4 DCs: One Server '03 R2 (SP2), three Server '08 R2s. GPO: ADM for Microsoft Communicator created a few years ago. Usage: The ADM does a few things, but one of which is ...
1
vote
1answer
362 views

Group Policy for Office 2013 Home and Business

On our network we have Office 2013 Group Policy settings, but users that have Office 2013 Home and Business installed are not seeing these settings. I have checked the RSOP.MSC, and the settings are ...
0
votes
1answer
400 views

No Remote Desktop Serivces Available in Group Policy?

I have a Windows Server 2008 SP 2 Standard domain controller. Attempting to enable RDP on workstations throughout the network using Group Policy. Everything I see says to go to Computer ...
1
vote
1answer
137 views

Win8 in Active Directory - remove Apps

We have a joined a Win8 Client for the first time to our AD. Before doing so, I removed all uneccessary Apps and Programs which came pre-installed. We have no clean deployable image for this time. ...
2
votes
1answer
435 views

Group Policy Default Policy is applied from a DC that no longer exists

I have been trying to get the company I am currently working for up to snuff on thier active directory implementation, unfortunately I have hit a bit of a snag. I was modifying their default domain ...
2
votes
1answer
875 views

Company Wide Windows Auth with Chrome and Firefox

I know that we can allow Firefox to allow passing through of Windows credentials by editing the following about:config settings --If using Kerberos-- network.negotiate-auth.trusted-uris ...
0
votes
1answer
474 views

Win 2008 Group Policy : Does Drive Maps (GPP) run before Logon Script setting? Both user configs are set within same policy [duplicate]

I'm on Win 2008 R2 DC with XP and Win7 desktops. On one of User GPOs, there is Drive Maps and Logon Script configured. Drive Maps are under GPP, and Logon Script is under user config. Both user ...
2
votes
1answer
71 views

Server 2012 Group Policy Script

What is the best way through Group Policy to make a registry file run on logon for computers in a domain? I'm testing on a Windows Server 2012, with Windows 8 clients. I have created a Group Policy ...
0
votes
2answers
829 views

GPO error 0x80070547 with Server 2008 R2 and XP SP3, but not Win7

I have a Windows 2008 R2 server managing XP SP3 and Windows 7 SP1 clients. There are no issues with the Windows 7 clients. However, on the Windows XP clients, I get errors for power options, ...
1
vote
1answer
347 views

Is it possible to increase the max limit of 10 pc's to any number of times without making the user a domain admin?

Normally a domain user has a maximum limit for 10 computers to join to a domain. But what i want to know is, is it possible (by joining a account to a group) to do this any number of times without ...
0
votes
1answer
783 views

Why is my loopbacked GPO reporting as disabled

Let me start by saying that my experience with GPO is limited to tentatively poking at settings until they fall into place by trial and error. It is entirely possible this will be a very obvious ...
0
votes
0answers
400 views

Changing HKCR registry key with group policy

I'm trying to change permissions of some keys in HKCR (HKEY_CLASSES_ROOT) to get a misbehaving program working. I originally tried to script it, but realized that group policy can handle the change ...
0
votes
0answers
102 views

Windows clients XP and 2000 “Log spooler information events” through GPO

I have some clients (XP and 2000) on which I would like to enable printing of documents on local printers. Therefor I need to enable "Log spooler information events" on the Advanced Tab of the Print ...
4
votes
2answers
2k views

Managing Windows 8 Start Screen Tiles

Using DISM (Deployment Image Servicing and Management) it is possible to customize the initial Windows 8 Start Screen, although not in any satisfactory way. Is there an effective way to manage the ...
2
votes
1answer
395 views

Why do I not have “Shared printer” within group policy preferences in Win 2008 R2 gpmc?

I have performed some research, and it appears that I can target both XP and 7 clients with group policy preferences to add a shared printer. This article describes the presence of a Shared Printer ...
1
vote
3answers
2k views

Printer GPO - [ hr = 0x80070706 “The print processor is unknown.” ]

Having some trouble on Windows Server 2012 / Windows 8 getting a Printer GPP (computer) to work. Printer GPP is created in: Computer config -> Preferences -> Control panel -> Printers but fails ...
0
votes
0answers
105 views

Windows Server 2008 GPO for Logon Scripts

I want to change my GPO to have the User logon script point to a different path other than the default NETLOGON share. I would like to put the script on one of my file server shares with the users ...
1
vote
1answer
2k views

Disable metro on Windows Server 2012 RDS Session host with GPO?

I wonder if it's possible to disable the metro completely on a Windows server 2012 RD Session host, preferably through group policies. I need to do this because I haven't figured out a way to lock ...
0
votes
1answer
31 views

Managing Group policy server2k3

How can i make a group policy if i want a folder permission for selected group only. What would be the scrip for this.
4
votes
1answer
99 views

Microsoft Security Compliance Manager terms

Recently i have installed Microsoft Security Compliance Manager. But i am confused with some terms. As per the print-screen ( which is mark in Red-Colour Round ) 1st - the 'Default' here means the ...
0
votes
0answers
29 views

Global Security Group AD Issue

This is on Windows Server 2003. I created a testgroup and add the testuserA on it. When I created a folder that has permission for testgroup, i try to log in to the testuserA's computer, and ...
0
votes
1answer
113 views

How to push packages to client Mac OS X machines from OS X server at login of clients?

I wanted to know if there is option to install application at login time in Mac OS X.That is, push packages to client Mac OS X machines from OS X server at login of clients similar to Group Policy ...
0
votes
0answers
39 views

GPO: Restrict WEB acess for users

I'm trying to restrict the web acess to some users using GPO but i'm encountering a problem. I have windows Server 2003 and the clients are XP. I enable the content rating on GPO with the approved ...
0
votes
3answers
2k views

GPO Settings Stay After Removal from Domain

We have run into an issue with one of our machines which keeps the GPO settings after removal from the Domain. We must connect this machine to the domain to receive updates from our WSUS Server. ...
1
vote
2answers
96 views

Can I override “hide and disable all items on the desktop”?

Is it possible to add shortcuts and/or windows components to the desktop if "hide and disable all items on the desktop" is enabled via GPO? For example, if I have a few specific program icons I want ...
1
vote
1answer
944 views

“Fast link detected” warning in GP management console

There is a message that is shown in every report i make in Group Policy Results section of Group Policy Management Console, saying that "A fast link is detected". I followed the link in the waring, ...
1
vote
1answer
117 views

Loopback Processing Behavior - XP vs. Win7

Does Windows XP treat loopback processing differently than Windows 7? I have 4 various screen saver timeout GPOs (1 hour, 4 hour, disable, etc.) and they are set up the same way the answer in this ...
1
vote
2answers
189 views

Running a script periodically via a GPO

I search a way to run a script each hour via a GPO accross every computers on a domain. The only way I found is a GPO which create a scheduled task. Anybody have a better idea ?
0
votes
1answer
710 views

Disable firewall for all network profiles on Windows Server 2008 R2 through GPO

I've been trying to disable firewall on a number of Windows Server 2008 R2 machines for all network profiles using GPO, but it seems to be working only for domain profile so far. In Group Policy ...
0
votes
0answers
46 views

Manually updating software, installed via GPO, results in two versions installed

Notebook received a software package version 1 via GPO from a network share. Then v2 of the same application was installed manually on that computer. Installer removed old v1. Several days later, ...
0
votes
1answer
487 views

Adminstrator cannot log on to server via remote desktop after changing default domain policy

I wanted to enabled remote desktop access for a domain security group so I search and followed the instruction here to get to the setting which was shown as "Not Defined" then I change the setting to ...
4
votes
1answer
143 views

Group Policy - Transferring to another domain

I am in the process of setting up two RDS servers in different locations on different domains, I've set one up and I am very happy with it, it looks like a windows 7 desktop and its really fast so I ...
1
vote
2answers
2k views

Group policy logon script copies files to client PC but does not execute exe

We are trying to copy 3 files from our domain controller to a user PC and have it execute from a .bat file when a user logs in via Active Directory. When we associate the .bat file to a user in AD ...
2
votes
1answer
361 views

Why is my GPO not being applied on Terminal Servers?

I have a GPO linked to the Users OU, with some User Configuration settings set (specifically, settings for Folder Redirection). These work fine when users log on to their desktops, but they do not ...
6
votes
2answers
263 views

Correct way to update Google Chrome MSI through Group Policy

I am deploying Chrome through group policy. This is working fine. Obviously Chrome has a pretty regular update cycle. I am not allowing Domain Users to install Chrome updates. Having subscribed to ...
1
vote
1answer
403 views

GPO to set wallpapers

I'm searching for a solution to restrict my Active Directory users, so that they can set a desktop wallpaper from only from a selection of 5 different pictures. Our company has a set of 5 pictures. ...
0
votes
1answer
6k views

GPO to disable server manager icon does not restrict access for users

I have two servers in a domain, running on VMWare. WS2K8R2 domain controller and Server 2012 RD Session host. I want to disable/remove the server manager and powershell icons from the taskbar, and ...
1
vote
2answers
223 views

When does the Group Policy update interval start?

When exactly does the 90 minute (+ 30 minute random offset) Group Policy update interval begin? Is it when a PC boots into Windows? Also, is the 30-minute randomization offset applied each time ...
2
votes
2answers
438 views

AD Site Name not being applied to some servers

I have seen multiple servers/workstations in our AD that are in gpresult /R show Site Name: N/A even thou their subnet is defined in Active Directory Sites and Services. What could be the reason for ...
3
votes
1answer
297 views

Will User GPO settings apply to a Computer OU

If I have a GPO that contains a handful of user settings - if i apply this to a OU container which contains computer objects - will those User Policies then apply to any user who logs onto that ...