Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

2
votes
1answer
74 views

Item level targeting error

I am attempting to set up group policies which are applied to OUs containing computers. I am then trying to item level target these policies to OUs containing users. Whilst attempting to do this, ...
0
votes
1answer
23 views

Apply desktop wallpaper policy on an OU

We need to apply specific background image to all workstations of a specific OU of a department in our organization. I am trying this by using the GPO desktop wallpaper Through the GPMC (server 2008 ...
0
votes
0answers
17 views

Group policy not updating printer defaults

I'm pulling my hair out on this and Xerox have been 0 help (admittedly it likely isn't their problem in the first place) and any assistance is appreciated. We've got a 2008 R2 print server with 4 ...
1
vote
1answer
10 views

Granular Windows firewall rule control

Is there a way using group policy (or some other built in mechanism) to apply firewall rules in such a way that a subset of the rules are locked and cannot be changed or overridden, but another subset ...
-1
votes
2answers
46 views

Password Logon Requirements

I want to allow users to log onto Windows using stored credentials, not requiring them to type their login information. I've read that the way to do this on a specific computer is to run "netplwiz" ...
0
votes
0answers
39 views

2 different gpo to set different setings to same registry key

Which of the GPO will take precedence? I have two policies now applied in my domain. One has a higher link than the other but the precedence ain't working as expected. Only the registry keys of one ...
1
vote
1answer
87 views

Issue with GPOs for home folder creation and drive maps

I am following a guide I've seen recommended on here for setting up home folders and drive maps for users and I am running into an issue despite the fact that I set it up exactly as illustrated here: ...
0
votes
1answer
46 views

Credential Manager has been disabled by Administrator and cannot re-enable

I'm having trouble getting a Windows 7 work computer to keep credentials for a mapped drive. Whenever I load Credential Manager, I get "Windows Credentials have been disabled by your Administrator." ...
1
vote
1answer
51 views

Tracking down rogue GPO that is applying printers to all users?

I use GPOs to push printers out to 10 different site, each site has its own policy. But for some reason all sites are getting the printers from site 1 when they login to terminal servers. They don't ...
1
vote
1answer
43 views

Group Policy for Windows 8 & 10 Operating System

I have Domain Controller installed on Windows Server 2008 R2 Std. Is all Window 7 Group Policy applicable to Windows 8 and 10 OS also. Or I need to create any Separate policy for Window 8 and 10 ...
0
votes
0answers
17 views

Windows Log size Policy

I have implement the policy for Windows log size as follows ( Please see the print-screen ) But, when i click on Event Viewer -- Application -- Properties, i see below size ( please see below ...
-1
votes
1answer
53 views

Clients looking for GPO login script on my personal computer instead of doing it on the DC?

This is kinda weird. I have the Group Policy Management console installed on my Windows 7 workstation and I configure policies from there. Sometimes I do it directly on a domain controller, but most ...
0
votes
0answers
10 views

GP Print Driver Hierarchy

I am trying to deploy printers over Domain with Group Policy. The following setting is required to be "Enabled" Computer Configuration/Windows Settings/Security Settings/Local Policies/Security ...
3
votes
1answer
44 views

Create domain policy to assign user rights

I’m a Unix administrator who also has to work with various MS Windows servers. For various tasks, I’m a lot more productive using the Unix tools that I’m familiar with and for a long time, I’ve been ...
0
votes
0answers
7 views

How do I deploy Outlook view customizations to users?

I've customized a view to use with the calendar, and then saved it while selecting either "this folder, visible to everyone" or "all calendar folders". Now I checked with another user and neither of ...
1
vote
2answers
21 views

Is there a refresh intervall for the local group policy?

As the title says, is there a (background) refresh intervall for the local group policy? How often does it get applied? Once at Startup/Login? Coudn't find anything on Technet...
0
votes
0answers
26 views

Add IE11 Search Providers by GP but do not restrict users in adding more

Is it possible to add search providers to IE11 without removing the users ability to add more? I've tried adding the necessary registry keys to both HKLM and HKCU Software/Microsoft/Internet ...
0
votes
0answers
9 views

Access to Sites/App Pools in IIS 7

I'm trying to grant non-admins access to manage or at least view sites and app pools in IIS 7 (Windows Server 2008 R2). Currently when they open IIS on a server (we have thousands of IIS servers), ...
0
votes
1answer
52 views

Group Policy applying only once?

For my own sanity can someone please advise why my GPO's to install application only works once? (both Machine level and User) When I say once, I let the script install to test on a virtual machine. ...
5
votes
2answers
61 views

Minimal set of rights to run a process on a Microsoft Windows Server

I want to run a process (not a service) under a different user on a Microsoft Windows Server and I need the minimal set of rights which are needed to do so. The minimal set of rights is required, ...
3
votes
0answers
61 views

Changed policy: locked out local and domain administrator account on Windows Server 2012

I'm kind of a rookie when it comes to servers and server hardening. I was following the CIS benchmark for Windows Server 2012 and changed the allow log on locally policy to include administrator, ...
-1
votes
1answer
20 views

Windows 8.1 - Group Policy Settings set, but not executet when offline

Enviremental information: Windows Domain with 3 2012 R2 Domain Controlers. I am trying to build a Windows 8.1 in kiosk mode, only a browser with access to specific websites. With the help of GPO - ...
0
votes
0answers
26 views

openldap ppolicy users login Access denied

I'm having trouble logging in User created after following steps from Youtube link https://www.youtube.com/watch?v=_ZvnNVwWk-M&list=PLrUFyg1unBb8n0SJxJqQYMo9kRcY2Mly0&index=7 This video ...
0
votes
1answer
38 views

GPO with computer configurations are not applied

server running server 2012 R2 - clients running server 2012 R2 and windows 8.1 pro one strange issue am facing ! i have several GPOs linked to the domain root some have user configurations only ...
2
votes
0answers
44 views

Bitlocker says PIN is incorrect

I have new batch laptops to image, almost all of them are done but 2 of them (same models) have an issue I can't resolve. I enable bitlocker and make sure that its also recoverable by PIN. This works ...
1
vote
0answers
32 views

Bypassing group policy

I'm trying to prevent users from pressing CTRL + ALT + DEL while their accounts are logging in to our domain (ie. while the system is creating the user profile, applying group policies, etc.). Due to ...
3
votes
0answers
74 views

How can I programmatically unbind IPv6 from a network interface on a Windows 7 machine?

I need to unbind the IPv6 services from a number of client workstations running Windows 7. ("Untick" the selected box in the screenclip below.) For what it matters, they currently all have a ...
2
votes
1answer
89 views

How can I allow Domain Users to update printer drivers without any prompts?

Each time Xerox release a new printer driver and we update our network printers on our servers we have to go around each domain computer and enter the Administrator details in to the update printer ...
4
votes
2answers
118 views

“Disable machine account password changes” Group Policy setting - when should it be enabled?

I am setting up a test environment on Amazon Web Services comprising 2 web servers, 1 database server and 1 domain controller. All of them are Windows Server 2012 and joined to the domain. ...
3
votes
0answers
63 views

Group Policy Application on Boot with MSTP & really really fast computers

The latest generation HP computers with solid state drives and Win 10 are booting so fast that Multiple Spanning Tree Protocol is not allowing network access in time for Group Policy to process on ...
3
votes
3answers
66 views

Deploy multiple printers with group policy preferences with one policy

I am having trouble with deploying printers with GPP. I have 40 Printers that need to be deployed to different users. Only certain users need certain printers. I've got a GPO setup with user printer ...
1
vote
1answer
46 views

Is there a GPO or registry tweak to show taskbar buttons on taskbar where windows is open?

Is there a registry tweak or a group policy object that would allow me to set a setting which displays application icons only on taskbars where the window is open? Without GPO or registry tweak this ...
0
votes
0answers
24 views

Group Policy - Only Apply to One Computer, and non-admins

Where am I going wrong with the below? We have a server running Server 2008 R2 which users connect to via remote desktop to run a CRM application. This server has SQL Server 2012 installed, along ...
0
votes
1answer
9 views

Client applied to group policy object but cant find in WSUS

My client is subscribed to my group policy, But I cant find the computer in my WSUS when I look under All Computers. When I typed the command gpresult /r on my client it shows: computer settings ...
0
votes
0answers
33 views

Keyboard layout not being pushed through GPO

I'm trying to push keyboard layouts to all users using a GPO that creates a registry key. The key is created under HKEY_CURRENT_USER\Keyboard Layout\Preload. In my case the value data of the key is ...
0
votes
0answers
27 views

Windows explorer not loading drives or thumbnails on whole domain

Every computer on the domain seems to have an issue where explorer sometimes opens up to only show favorites and libraries for available locations, and they both have a magnifying-glass over top of ...
1
vote
1answer
282 views

GPO Mapped Drive Issues on Windows 10 Clients

We are running Windows SBS 2011 as our file server and AD, a 2008 R2 server that is sharing files, and a 2012 R2 terminal server. I have a GPO that maps network drives to users based on security roles ...
0
votes
2answers
20 views

Security filtering not working in GPO

Not sure if this would be the right place to ask this. On my domain controllers, I have created all my users and computers inside an OU. I have a group named Support which is in the local admins group ...
1
vote
2answers
62 views

Shared Printer DENY Print ACL assigned to AD Security Group not Working

I have three servers. Server 1 - Print Server, Windows Server 2008 Standard Server 2 - Domain Controller, Windows Server 2008 R2 Standard Server 3 - Terminal Services Server, Windows Server 2008 R2 ...
0
votes
3answers
43 views

Missing GPO “Allow job name in event logs” in Windows Server 2012 R2

I am using Windows Server 2012 R2 (6.3.9600 Build 9600) for two different servers. However, one server has the GPO option "Allow job name in event logs" while the other one does not. I have examined ...
0
votes
0answers
40 views

Default Program via GPO Windows 7

I tried to configure the default program to open .docx/.doc files via gpo as mentioned here: http://www.grouppolicy.biz/2011/09/how-to-use-group-policy-to-change-open-with-file-associations/ I've ...
2
votes
1answer
48 views

How do I enable “Logon as a service” dialog buttons?

Group Policy newbie here. I need to be able to run some of my services as a user that also has access to SQL Server. How do I enable the "Add User or Group..." and "Remove" buttons on the "Logon as a ...
0
votes
0answers
25 views

Allow Administrators to Override Device Installation Restrictions

I am trying to set up our Active Directory domain to lock down unauthorised hardware installation. I am testing the Device Installation Restrictions in Group Policy, using the settings under Computer ...
1
vote
1answer
72 views

Clients can't update dNSHostName attribute after DNS suffix change

We have a bunch of Windows 7 and Windows Vista clients that belong to domain contoso.com. The clients are registered in DNS to client.contoso.com. We have changed the DNS suffix via GPO from ...
1
vote
1answer
37 views

Windows Security Policy not Updating - Admin templates work fine

I have a domain with a mix of physical and virtual servers. Some time ago another admin may have performed some manual scripted updates at the client level that are now preventing changes in the ...
1
vote
1answer
32 views

Restrict Control Panel items GPO on Server 2003 - AD is 2008 R2

I'm having trouble applying a GPO to restrict Control Panel Items on Server 2003. My DC is 2008 R2 and the policy I'm using is: User configuration > Administrative Templates > Control Panel > Show ...
0
votes
0answers
26 views

OpenVPN with IPSec

OpenVPN with IPSec We are using OpenVPN to connect multiple devices. The customer requires using IPSec, but OpenVPN is SSL VPN. Their website says this OpenVPN's security model is based on using ...
1
vote
1answer
58 views

Remotely change local group policy server 2008R2

I'm trying to find a way I can edit the 'trusted hosts' list under local group policy remotely. Path from within Local Group Policy is: \local computer policy\computer configuration\administrative ...
0
votes
0answers
40 views

Group policy not pushed to client for offline files setting

I have setup group policy for "Offline Files" but I noticed that the configuration is not pushed to clients. With another setup I had no problem. The configuration path is \\Computer ...
1
vote
2answers
149 views

Group Policy to disable USB in windows 7 clients

I want to disable the USB for Windows 7 clients through the Active Directory group policy ,is it possible ???and anyone can give me instructions please .