Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

2
votes
0answers
34 views

In the Local Security Policy, how do you avoid putting “IIS APPPOOL\” before “DefaultAppPool”?

Doesn't seem to be a whole lot on the Internet about this. I was tweaking the Local Security Policy of one of our test servers (Windows Server 2008 R2 Standard Service Pack 1), when I got this error. ...
0
votes
0answers
66 views

Using Powershell (RSAT ) to get GPO from against another domain

I can't find any clear info online for what I'm trying to do, hope you can give me an answer :) I'm using a Windows 7 client (pctest) joint in a domain (domain1.intranet). I've installed the RSAT to ...
1
vote
0answers
18 views

No “Compatibility View” Options

I'm working on setting up a GPO to push out some compatibility view settings for IE. But in my Group Policy editor there are no "Compatibility View" settings. I'm looking in Administrative Templates > ...
2
votes
1answer
73 views

Removing deny everyone permissions from GPO

As part of the workaround for CVE-2014-1776 I created a group policy object that applied Deny permissions to everyone on VGX.DLL. I am now trying to undo this group policy and having a lot of ...
0
votes
0answers
32 views

Group Policy with Win7

All, I wasn't sure how to search for this. It seems that many of our Windows 7 Machines are processing group policy in unpredictable ways. Here's an test example: I created a brand new policy. I ...
2
votes
3answers
252 views

Windows server 2012 essentials GPO AD/SYSVOL MISMATCH

I am having an issue with Group policys and will do my best to describe the issue below: GPRESULT, ADSI and GPT.ini shows the group policy with mismatching AD/SYSVOL versions, the SYSVOL version ...
3
votes
3answers
93 views

Update a network driver through GPO/AD

Our organization has just deployed new computers with Windows 8.1. Roughly 50 of them. We've run into an issue with the driver on the new computers which is flooding the network with ipv6/multicast ...
2
votes
1answer
90 views

Access an AD attribute in a first-time logon scenario?

I have been tasked with improving our current image deployment. Right now we do a fair amount of manual setup after imaging to reduce the work for users who get a newly imaged machine. I would like to ...
1
vote
3answers
135 views

Shutdown clients when no one is logged in at a specified time

At our company, the people stop working at 7PM. At 8PM we run a scheduled task with GPO to warn the logged-in user that the computer is going to shutdown. This works fine. When no one is logged-in ...
2
votes
1answer
81 views

Structuring an OU to properly model an Organizational Hierarchy

I'm experimenting with using OUs in my network's Active Directory and group policy. However, I'm having a little trouble figuring out the right way to structure my OUs so that I can have individual ...
0
votes
1answer
247 views

Windows Server 2012: How to activate network discovery in GPO?

I use terminal-server Windows Server 2012 and I need to create a map drive GPO, but it doesn't take effect and I think it might be because I nee to activate network discovery. How to enable network ...
2
votes
1answer
78 views

Deploying software through group policy

I'm trying to deploy an MSI to a specific security group that has all computer members. I've set the GPO to install via the UNC path, and it's a computer configuration. I've also made sure that ...
1
vote
2answers
190 views

Change Local Group Policies remotely on Windows workstations outside Windows domain

Is it possible to change Local Group Policies on Windows workstations remotely outside a Windows domain? Furthermore, can a script be written that would change GP on several workstations one by one? ...
0
votes
1answer
173 views

Shortcut for website using non-default browser

I am working on a GPO to push a desktop shortcut to a website using IE (which is not the default browser) out to my Windows 7 Pro machines. All machines are x64. Not sure why this isn't working: ...
1
vote
2answers
56 views

GPO: Do not run user logon scripts

Is there a way I can configure a GPO to NOT run the logon scripts that are defined within the AD user object? We have a very special AD environment and I am trying to get away from the old batch ...
0
votes
1answer
36 views

Error on RSOP for Audit policy on DC

Domain Controller - Windows Server 2008 R2 Standard Please see the print-screen, I am unable to understood why such error is showing on my Domain Controller. I have also checked on Winlogon.log, ...
1
vote
1answer
97 views

Backup Active Directory users' files, deploy via GPO? [closed]

Am looking for a solution which can be configured to be deployed via group policies. I've looked into Windows Backup, but it doesn't fulfill our requirements. We need something like this: Runs ...
1
vote
0answers
23 views

Group Policy Mapping Printer

There seems to be lots of different ways to map printers, all appear not to work (for me). Im running a Windows 2008 Environment with windows 7 clients, simple, hey? No.. I have a printer connected ...
1
vote
1answer
130 views

Group Policy “Maximum password age” fails to apply

In my Windows network with all AD servers (still) running Windows 2003, I encounter the following problem: The "Maximum password age" policy apparently does not apply. Even though some of the users ...
1
vote
1answer
208 views

GPO with loopback processing and folder redirection not working

I am pulling my hair here and trying to redirect folders on Windows 7 and Vista machines. I have therefor created a GPO which has loopback processing enabled (merge mode) and linked it to the OU ...
0
votes
2answers
76 views

GPO not applying properly

So I just set a user level GPO to apply a website to the trusted sites zone. It works when logging in to a desktop and trying to go to the website and the website shows up in the trusted sites zone ...
0
votes
1answer
78 views

How to enable Network mapping?

In the Control Panel there is a Network Map which is disabled by default in domain joined computers. When I go to Control Panel\All Control Panel Items\Network Map I receive the message Network ...
1
vote
3answers
1k views

How to set the Internet Explorer Home Page via GPO?

I need to set the default home page for the entire domain via GPO. Where is the IE Home Page Policy located?
3
votes
1answer
140 views

How to do exceptions in Group Policy?

We're implementing Group Policy for the first time at our organization and have some questions about best practices and capabilities. We've already done some work and want to see if there is a better ...
-1
votes
1answer
43 views

GPO installed network printers wont show up under user account but only admin login

I use GPO to push out a network printer per machine from server 2008. but it only shows up under admin account. I restarted the PC , login logoff , gpupdate /force.... then it still only shows up on ...
0
votes
1answer
46 views

LocalGPO compare fails with error

I was trying to run LocalGPO on my Windows 7 system with its "/Compare" option to compare the current policies with that of a backup. However, the process fails with an error in a Windows Powershell ...
0
votes
2answers
54 views

Deny AD-User Group to login on a certain AD-Computer Group

I have (simplified) two AD Groups for Users: bgs.ac.at\Students bgs.ac.at\Teachers I have (simplified) two AD Groups for Computers (like in two rooms) bgs.ac.at\Room1 bgs.ac.at\Room2 I want ...
0
votes
1answer
114 views

Will Windows 7 sysprep keep group policy settings?

As part of my organisation's Windows 7 rollout process, we would deploy a Windows 7 image onto a target machine, then manually install LocalGPO on it followed by applying a set of group policies via ...
0
votes
1answer
40 views

Startup Script Launch IE Browser

how to launch a startup script (batch file or VBS or PowerShell) that will open a browser on startup? I want to deploy this using GPO, i'm only able to achieve this by using logon script, but if used ...
2
votes
1answer
92 views

Where's the best place to deploy a proxy.pac file to?

Instead of having separate proxy settings in Group Policy for several web browsers (Google Chrome, Internet Explorer and FrontMotion Firefox), I decided that it would be better to create a proxy.pac ...
2
votes
3answers
858 views

GPO: Run powershell logon script after explorer.exe has been loaded

I know there is the GPO setting "Computer Configuration => Admin. Templates => System => Scripts => Run logon scripts synchronously". This however ensures that logon scripts run before windows ...
5
votes
1answer
215 views

Server 2012r2 RDS - Start Screen

I'm in the process of setting up an RDS server. It will be multi-tenant, so it's locked right down. All user profile data is stored on the file server using GPO folder redirection. I want to lock ...
1
vote
1answer
95 views

Fake Recycle Bin via Group Policy

Is it possible to create a fake recycle bin where the files aren't actually deleted using MS AD/ Group Policy? The goal is to be able to recover 'deleted' files after, let's say, a dirty resignation. ...
0
votes
0answers
37 views

Domain group policies not applied on Win8

I'm totally desperate, I'm not able to set any group policy on domain level (with Samba 4 domain controler). The only user, the policies are applied on, is the Administrator. I have no idea, what's ...
1
vote
1answer
71 views

Querying GPO Details

I need some help on querying GPO. I want to know how many total GPOs applied for each OU. GPO with out no parameters and no link GPO's With less than 2 parameters and less than 2 links Can any ...
5
votes
2answers
90 views

Issues With Printer GPO

I have a Windows Server 2008 R2 print server. The client machines are Windows 7 Professional. I am having issues with user accounts not getting the printer added when they login. Things that I have ...
0
votes
1answer
51 views

GPO Software Deployment not working

I am trying to deploy an MSI via GPO, without success. It is an Outlook plugin, and the MSI works (from that location) if I install it manually. I have set it up to be assigned as follows: When I ...
0
votes
0answers
31 views

Is it possible to check using nagios, if a group X is denied access a particular file/folder in Windows

This is basically a GPO key that has been applied and need to check if the key is in place/working which involves restricting a group of users from accessing a particular file or folder using a ...
0
votes
0answers
20 views

Log on as a batch job - group policy

I would like to configure the "Log on as a batch job" setting in our domain group policy object for servers. The problem I see is that I don't know which users/groups to add. I know the default for ...
-1
votes
2answers
98 views

How does one backup / restore Group Policies on Windows Server 2008 R2? [duplicate]

We're inheriting a Windows Server 2008 R2 server on a network full of Windows 7 machines. There are already Group Polices in place, and they work. How can we back them up and restore them in case ...
0
votes
1answer
63 views

How to restrict DVD access using Windows Server 2003 Group Policy?

I have a Windows Server 2003 DC with 3 Win7 (32) desktops. I want to use an GPO to restrict the DVD on all the desktops (Either 'hide' or not have available) for all domain users except for domain ...
0
votes
1answer
146 views

Why is this preventing me installing an MSI: The System Administrator has set policies to prevent this installation (non VMWare install)

I am trying to install an MSI on a Windows Server 2012 machine which is part of my lab domain. I am local and domain admin, but I seem to be prevented from installing this MSI. For clarification, ...
3
votes
1answer
54 views

Applying a group policy at the domain level and scoping vs. applying at the OU level

The way I see it, if I have a GPO and want to apply it, 2 options I have are: Linking the GPO to the domain and then scoping to security groups and maybe users Linking the GPO to an OU that contains ...
3
votes
1answer
64 views

Start Menu Folder Redirection - Extra items being added

Using Server 2012 on Win 7 machines, folder Redirection applied by GPO. It's an inherited network so I'm trying to find the cause of this issue as the previous techs left very little info. Problem: ...
1
vote
1answer
90 views

Preventing Login From Specific Computers with Group Policy

I have a very small network with a handful of users and machines. I would like to control which users can access which machines by using Group Policy. Here is a basic overview of my current setup. ...
1
vote
0answers
94 views

Windows Server 2012 R2 cannot rename Administrator account via GPO

On Windows Server 2012 R2 the Administrator account does not seem to be able to be renamed. Have created the normal Rename Administrator GPO: Comp config -> Policies -> Windows settings -> Security ...
0
votes
1answer
29 views

Group Policy: How to comment on each setting?

I am looking for a way to comment on each and every setting that can be made within a GPO. Unfortunately things like user logon scripts and security settings and some more can not be commented. Is ...
0
votes
1answer
368 views

GPO: User logon script not running

I have a GPO that is linked to an OU containing computers. Loopback processing is activated an set to merge. Within the user part of the GPO i have a powershell script defined that basically checks if ...
-2
votes
1answer
41 views

Remove delete permission for active directory group in Microsoft 2008 Server R2

I've created a group in Active Directory and I would like to prevent all users in this group from being able to delete any files on the server. How would I go about doing this?
6
votes
2answers
513 views

Windows 2008 R2 gpupdate locks my user account

I built a Windows 2008 R2 server last year, and ever since my elevated account locks 10-12 times a day. After much research and testing I found that the server is locking my account at each failed ...