Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
1answer
30 views

Robocopy logon script - copy all files, except 1, unless it doesnt exist

Currently have a GPO that calls a batch file at logon, that copyies files from one folder to another: Robocopy "C:\logon" "X:\user1" /mir /r:1 w:1 Exit This overwrites all the files in the ...
2
votes
1answer
189 views

how to fix remote desktop access in Windows Server 2012 R2

Kind of an embarrassing question but... One day I was playing around with GPOs to try and grant local Administrator access to a specific User group for a specific Client computer. Somehow, I messed ...
1
vote
0answers
29 views

WLAN profile GPO settings and saved user credentials

We are distributing wireless profiles in our Windows domain (AD servers are 2012, domain level is 2008, various client Windows versions - mostly Win7 and Win10). However, it seems we just cannot ...
3
votes
1answer
62 views

The password on this account cannot be changed at this time?

A user in my company forgot his password and I had to reset it to a temporary one. I checked the box that says "User Must Change Password at Next Logon". When he logged on and entered the temporary ...
-1
votes
2answers
113 views

Windows 10 how to force domain users to logon with temporary profile

We have one special computer in our company and we need it to be always "fresh". When there was windows7 all users where logged there with temporary profile and everything was great. Unfortunately ...
2
votes
0answers
32 views

Group Policy - BITS not applying on Windows10

We are upgrading our PCs to Windows 10 and are running into a few problems with updates. OUR SETUP: We have 2 sites based in the UK (Norwich & Preston) and we have a WSUS server in our Norwich ...
0
votes
1answer
60 views

When using RDP to log into a remote domain do my local domain logon scripts apply?

I've been asked to set up a user on our network with RDP access to a RDS server on a remote domain. We have set up the VPN just fine and the remote RDS server is reachable. The issue thus far is that ...
0
votes
1answer
24 views

How to deploy files using Group Policy

I wish to share a couple files to every computer on my domain. I know I need to use Group Policy, but I'm not really sure where to go from there. I am using Windows Server 2003 R2.
3
votes
1answer
51 views

Server 2008/2012 (R2) group policy scheduled task not applying

I am at wit's end and totally confused. The goal is to take group policies(one per day of a week) and set a scheduled task which will trigger a reboot on that day at a specific time. So I made them (...
2
votes
1answer
27 views

Unattended Windows server 2012R2 with WSUS updates and Local Group Policies

I am working on a project on automating windows (2012 STD, R2 and 2008R2) Image creation for which I am creating the Autouattend file for 2012 R2 using WSIM. I have created almost everything except ...
-2
votes
1answer
66 views

How? Setup Domain Group Policy to enable Remote Access to all PCs (even if from remote location) using DOMAIN\Admin credientials?

How and what Group Policy can I apply via the DC that allows the Domain\Admins to access any of the Machines PCs & Servers within the domain via the LAN or Internet/ Remote connection?
0
votes
1answer
41 views

Looking for assistance with basic AppLocker setup

I'm working on implementing AppLocker, but I'm running into some issues with turning it on. I have a single OU with a single server and single GPO linked. This GPO has only the following AppLocker ...
0
votes
0answers
41 views

Failure Forcing Google as default Search Engine in IE 11 on Windows 10 through GPO

Based on the advice of these 2 guides: https://community.spiceworks.com/how_to/122127-set-google-as-default-search-provider-in-ie-with-gpo I tried writing a GPO that would set Internet Explorer's ...
0
votes
1answer
80 views

Windows 7 PCs in a domain - time source keeps changing

I need help figuring out why the time source on some PCs keeps changing. Right now they're on Local CMOS clock. If I do w32tm /config /syncfromflags:domhier /update net stop w32time net start ...
0
votes
0answers
22 views

GPO - scripts not started using FQDN but UNC works

Assumptions: AD domain is called SAMDOM, FQDN for the domain is SAMDOM.EXAMPLE.COM. There is only one domain controller and it's called DC1. So, the FQDN for DC1 is DC1.SAMDOM.EXAMPLE.COM If I ...
0
votes
2answers
73 views

Password policy in Active Directory - inactivation of complexity without effect

In my Samba Active Directory Domain, I want to allow passwords that are long (passphrase) and based only on small caps and special characters, i.e. no requirement for large caps and numbers. In ...
0
votes
1answer
55 views

Can't restore GPO to new domain/new OS/new NETBIOS name

I'm trying to restore from an old GPO backup for which the OS installation no longer exists, but I'm not having much luck. Some things have changed for the new installation: The NETBIOS name (was ...
0
votes
1answer
37 views

gpupdate works for user fails on computer error 1006

I have a machine on my network that refuses to sync our Gpupdate. I am getting error code 1006 error code 49 which points to bad credentials but I am using the same user that I would on any other ...
1
vote
1answer
44 views

Create EventLog Source using Group Policy

In our environment we want to force all our system engineers who write scripts to write logging to the EventLog. To keep track of all logging of our scripts we want to write this to a specific source ...
0
votes
2answers
39 views

Targeted GPO deployments from Samba (4) DC

I've seem to be stuck. I come from a mostly POSIX background, & thrown into the deep-end on this one, so learning as I go along - so not sure if there's no solution, or if it's my own Dunning-...
0
votes
0answers
6 views

Using Dcgpofix for Error 1058 with bad backup

I am somewhat a novice on Server 2008 R2 and bungled my Group Policy. I get error 1058 every 5 minutes and have an empty GUID folder with no valid backup. ( My backup is also bungled.) I inherited a ...
0
votes
2answers
23 views

Why is my PolicyDefintions folder being renamed?

I was trying to update our Central Store with new policies for Windows 10. Originally I made a copy of the store in the same location and named it .bak just in case. I copied the local definitions ...
0
votes
0answers
26 views

Squid SSL Bump and EV certificates

I have a Squid proxy, with SSL-bump enabled, and ssl_crtd running. I have then pushed a group policy so the CA root certificate has a "Certificate Policy" with a specific OID x, and then added this ...
-1
votes
2answers
227 views

What does “Administrator” have that allows them to RDP into a server?

I am trying to setup an Active Directory so that "Domain Users" can via RDP. If I assign the role "Domain Admin" to the user, they can login via RDP no problem but when I follow many tutorials (this ...
1
vote
2answers
116 views

Allow remote desktop service to dc from specified computers

I'm planning an architecture of secure terminals only to access DC's. So i have 2 computers which are secure and if i want to connect to the dc's i will have to log into those computers So what i ...
1
vote
1answer
115 views

User logon PowerShell script not running under Windows 7 or 10

I'm testing out upgrading to Windows 10 on our domain, which is currently based on a Windows Server 2012 DC and all Windows 7 workstations. I was never able to make it work on Windows 7 so I gave up ...
0
votes
1answer
34 views

Allow users to change theme but not desktop Windows Server 2012

I am running Windows Server 2012 for a school. I have recently updated the computers to Windows 10. I am trying to allow students to change their theme, but not their desktop background. In GP, I had ...
0
votes
0answers
123 views

Map a NFS share as a drive in the SBS Group Policy Editor

For the moment I am not capable to access a NFS shares under SBS 2011. I tried to set the NFS share name in the Group Policy Editor hoping it will be resolved in the Terminal Server session where the ...
1
vote
1answer
22 views

How to know which files to specify exclusions for the installers of whitelisted apps using hashes with a Windows GPO?

To specify in the software restriction GPO, the hashes of executable/script files that are allowed to execute during the installation of a program run from, for example %LOCALAPPDATA%\Temp, during ...
0
votes
0answers
26 views

Create windows task using group policy with limited privilages that anyone can run

Using group policy I created a windows task that any user can run manually but that runs under a specific domain user (e.g. DOMAIN\task_user) that has been assigned very limited access privileges. ...
3
votes
1answer
50 views

How to set an enforced IE homepage, whilst allowing additional user defined tabs

Is there a way to use a GPO to set the IE homepage for all users which ensures that this page is always set / cannot be changed, whilst still allowing users to keep/amend additional homepages in ...
1
vote
2answers
109 views

How to assign remote users from GPO/users not authorized

My account and my admins can remote into any machine on the network, but standard users get an "user not authorized" error. The only solution I've found is to manually add the users to the Approved ...
0
votes
1answer
68 views

Selective GPO drive mapping

I have two fileservers (Windows Server 2012 R2) that have joined my domain, namely filesrv01 & filesrv02. These fileservers should both contain exact copies of the user data, and if one fails; the ...
-1
votes
1answer
21 views

How to create GPO for put cleanmgr on users desktop?

I already create some shortcut on desktop user from gpo but i dont understand how to create a shortcut for running cleanmgr from users desktop. Like that they can run this one when they want to. ...
0
votes
0answers
60 views

Creating & mapping user home folders on a network share using GPO

I have deployed a fileserver which has had its harddrive partioned to include a shared partition along with a shared folder within it. The fileserver has joined my domain, hosted on a Windows Server ...
1
vote
1answer
65 views

H and V don't work on windows server 2012 log on

I'd like to log in to windows server 2012. It worked yesterday but today I couldn't enter my current password because the H and V keys didn't work and my password include the h. I connected the ...
2
votes
2answers
178 views

deny access to file servers and PCs on a domain - guest user

We have 70+ PCs and servers, users access files by accessing the servers from their PCs. Is it possible to deny access to all PCs and servers on a network for a guest user (he should only have ...
0
votes
0answers
27 views

How do I set domain machines to ignore domain in login credentials?

Basically, some machines will allow remote access with an incorrect domain but correct username and password, but others won't. How do I set a server TO do that? My issue is that I have a host ...
2
votes
1answer
41 views

Allow Outlook to display/download images from approved domains

Outlook wisely does not automatically display/download images embedded in HTML emails. Is there way to modify this policy site-wide (group policy or something), so everyone will see images that are ...
0
votes
0answers
117 views

AD GPO “User Configuration” shows up using “gpresult” but not working. Instead “Computer Conf..” is working smoothly. Why?

Problem: I want to restrict removable storage writing access of all users except admins, and restrict removable storage execute access of all computers even admins computer (forbidding unintentional ...
1
vote
1answer
37 views

Win 2012 - how to ensure shutdown script is the last thing to run

Anyone know of a way to ensure that a shutdown batch file (Local Computer Policy -> Windows Settings -> Scrips -> Shutdown) is the last thing to run before the machine shuts down? At the moment the ...
0
votes
1answer
31 views

WMI query to find lack of drive letter for Group Policy

I'm building a group policy to apply to a subset of users within my organization. This subset of users have no Home Directory set on their Active Directory object, whereas other users have an I:\ ...
0
votes
0answers
35 views

Group policy printers not deploying - insufficient system resources

We have our Staff printers policy applied to our Staff users OU. This policy has ~60 printers deployed as Shared printers via Preferences. All bar 2 of these printers are item level-targeted to OUs ...
0
votes
0answers
21 views

How can I get a user to interact with an executable configured to run from a scheduled task?

I am trying to get the OpenVPN GUI to open for configured users automatically at (or recently after login). My original plan was to use a Computer Configuration scheduled task to run as the logged on ...
0
votes
1answer
143 views

is it possible to deploy scanners with group policy or any other solution

we are a company of 60 employees/computers and want all employees to be able to scan, we purchased a Brother MFC-L2700DW and connected it with ethernet to network i'm able to scan just fine by adding ...
0
votes
0answers
54 views

server 2012 configuration to require password on wakeup

I have a new windows server 2012R2. I have a special situation when I want my server to sleep after an idle period (successful) and require password on wake up (not working). I have tried the ...
0
votes
3answers
48 views

Run Log-on Script with Admin Rights

I created a batch logon script that checks and removes old versions of a specific piece of software and installs the newest version. Both the install and uninstall process use an .EXE file. The script ...
0
votes
0answers
14 views

SCCM 2012 requires local group policy processing be turned on, but local group policies inconsistent

My organization is in the process of migrating to SCCM 2012, from 2007. Clients aren't installing updates, and wuahandler.log indicates this is a group policy problem. The error message is along the ...
0
votes
2answers
53 views

Restricted group local administrators can RDP into DC

I have added restricted groups to my Desktops OU and this adds the "Local Admins" security group to the Local Administrators group on workstations in that OU. The issue is, that after this GPO is ...
0
votes
0answers
23 views

Is there an Windows Event Viewer Event for “No available connections” or No Ethernet Connection?

I am trying to create a GPO that disables a laptop's wireless card whenever a Ethernet LAN is detected, and Enable the wireless whenever an Ethernet LAN is not detected. Right now I have a GPO that ...