Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
1answer
32 views

Can you install a service through GPO?

I know it's possible to run and stop services that are already installed, but is it possible to install a brand new service with a given executable?
1
vote
2answers
51 views

Is it possible to enforce local GPO over the domain?

I want to enforce local GPO settings on specific servers so that the domain GPO does not overwrite them. These systems were hardened specifically, but due to way too many issues to list, we cannot ...
1
vote
1answer
30 views

GPO Outlook 2013 to set non-cached mode is preventing Outlook from opening

I have a GPO applied to my conference room computers that forces Outlook to use non-cached mode (for quicker opening and to save HDD space by preventing everyone's OST from being created). When I try ...
0
votes
1answer
51 views

Best way to troubleshoot a GPO that is being applied but not working?

We are using GPO to push out proxy settings and it is applying and working for most users. There is a small group of users, admittedly in a separate OU, that it's just not working for. I can do a ...
1
vote
1answer
29 views

Add a scheduled task to the GPO progrematically

The assumption is I'm on a DC with admin rights. I want to add an immediate task to the GPO to run a .exe on the workstations, but I want to do it without the GUI i.e. quietly. Is there a way to do ...
2
votes
2answers
44 views

Multiple GPOs with Security Filtering or Single GPO with Item Level Targeting?

I have multiple GPOs for User Experience stuff (Eg: Shortcuts as GPP in User Configuration) which impacts a number of OUs and their users. It's currently one GPO per 'item' (Eg: shortcut, file) with a ...
0
votes
0answers
35 views

What is the best practice for employee users and their applications when they are replaced? [duplicate]

Here's my small office scenario (for simplicity sake): Windows Server 2012 R2 Essentials (Active Directory) with (4) workstations. (1) for each employee user. PLUS (1) production workstation that ...
2
votes
1answer
41 views

Reversible Encryption - Not Defined but Showing as Enabled?

I'm reviewing our complex password policy that was setup by a previous admin and I'm trying to gain some clarification on the setting for Reversible Encryption. In our organization, reversible ...
1
vote
1answer
72 views

Is it mandatory to use Group Policy to install or deploy applications?

Using Windows Server 2012 R2 Essentials on 1 server and about 5 workstations, do I have to use GPO to "deploy" the applications? i.e. CorelDraw, Adobe CS6, Office, Acrobat, etc. Or can I just go to ...
0
votes
0answers
20 views

Enable ping across domain

I want to enable the "File and Printer Sharing (Echo Request)" firewall rules in Windows Firewall with Advanced Security for all servers in the domain. How do I do this with Group Policy?
1
vote
1answer
25 views

Active Directory Group Policy - Default Domain Policy CSE GUID [closed]

The active directory attribute: "gPCUserExtensionNames" contain a CSE GUID and a Tool Extension GUID string value in order pass information for GPO behavior. I have found in the Default Domain ...
2
votes
2answers
147 views

compatibility mode server 2008 R2 higher than IE 7?

I have 4 terminal servers, all running server 2008 R2, that need to run a few websites in compatibility mode. When I create the GPO, all I see is IE 7 compatibility mode... This works for all the ...
0
votes
0answers
14 views

Give a right to domain user to manage his system's firewall

How can a we give a right to domain user to manage his system's firewall? We're having a Windows setup, and using Windows Server 2012 for managing domain group policies.
0
votes
1answer
70 views

Local group policy not applying (gpresult says its empty, but it's not)

We are running a strange AD constellation here, where the same logon script is defined within the local group policy on each server (don't ask me for the reason, it wasn't my idea). Then an (AD-) ...
0
votes
1answer
11 views

What is the syntax for the SNMP trap configuration group policy?

I want to configure SNMP traps through group policy, but the trap configuration dialog is just a plain list of strings. What do I have to enter here to configure the community name and trap server? ...
1
vote
1answer
71 views

Implementing A Custom Lock Screen Image Via GPO

I have a Domain running at the Windows Server 2008 functional level, which cannot be upgraded currently due to logistics reasons. I have a group of Student-access clients all running Windows Server ...
0
votes
1answer
30 views

Printers already installed but would like to block spooler to prevent future print jobs

I have tens of client machines over domain with Windows 7/8/8.1 installed and almost all machines are connected to different printers. Only one main printer is listed in AD which can be easily ...
0
votes
1answer
34 views

Implementing Custom Lock Screen image

I have a Domain running at the Windows Server 2008 functional level, which cannot be upgraded currently due to logistics reasons. I have a group of Student-access clients all running Windows Server ...
3
votes
2answers
90 views

Deploying printers to specific users via Group Policy

I have noticed two different ways of deploying printers to specific user with Group Policy in Windows Server 2012. The first method is by creating separate GPOs for each group, and the second method ...
2
votes
1answer
30 views

Checking Who Applied GPO

I know how to check what GPOs are applied on systems and users, but I'm wondering, is there a way to check who applied a specific GPO?
-1
votes
1answer
26 views

Apply group policy based on RDP Client O.S

I created a group policy to change the default shell, so that handheld PC can RDP to a Terminal Server and have the lob application kiosked. This work fine, but, sometime, is necessary to RDP with the ...
2
votes
1answer
180 views

GPO with SAMBA as DC

I am working on a network of 500 Windows workstations with Linux servers. SAMBA 4 is in use as the domain controller. Users can move between workstations, and as a results the contents of their ...
0
votes
0answers
23 views

Force a GPO to run synchronously on Windows Server 2008

We have authored a powershell script which carries out a number of installation and configuration steps in order to turn a bare Windows Server 2008 machine into a development workstation. The script ...
0
votes
1answer
263 views

How to disable Microsoft Office's first run wizard

I have a Windows 7 Professional computer in a workgroup. This computer has a mandatory user profile and uses Local GPO to configure the profile on each login. My issue is that I have recently ...
1
vote
0answers
83 views

How to use Local Group Policy on Windows 7 to allow or block URL’s for chrome and firefox?

I am a regular user not system admin. I need the help to use local group policy to allow to open one domain. For example, www.xxxx.com to open on the chrome or firefox (third-party browser), and make ...
0
votes
1answer
16 views

I’m having fundamental issue with Computer Group Policy Objects working but not showing as applied in gpresult

I created a Computer GPO that tells the workstations to make the monitor sleep in two minutes (just for testing.) I applied the GPO to the Computers OU. It works fine… I manually change the sleep ...
3
votes
1answer
47 views

Change an Applications and Services Logs log path using GPO

I am wanting to change the AppLocker Log path by a GPO. The specific log is found at Event Viewer \ Applications and Services Logs \ Microsoft \ Windows \ AppLocker \ EXE and DLL. I know you can ...
2
votes
1answer
30 views

I’m unable to get GPO Security Filtering to work for users

I’m unable to get GPO Security Filtering to work for users (called TestUser) and custom security groups (called TestGroup.) It does work for Authenticated Users or if I add the Computer. I did a ...
1
vote
1answer
27 views

Windows Server 2008: Group Policies Don't Apply Following WDS Install

We use WDS images combined with GPOs to automate the installation of our desktops. This all works great, except that when a WDS deployment to a new/existing PC is completed, there's a fifty/fifty ...
2
votes
1answer
90 views

Is it possible to configure domain joined computers via GP or otherwise to automatically register for the free Windows 10 upgrade

Is it possible to configure domain joined computers via GP or otherwise to automatically register for the free Windows 10 upgrade, but also prevent the upgrade from automatically installing? In other ...
0
votes
1answer
21 views

Remove drive given by gpo

I have a couple of GPOs that deliver out mapped drives through security groups. But when I remove someone from the group, the drive is still shown. The user don't have access to it, but it is still ...
1
vote
1answer
115 views

How to apply proxy settings per computer for only a specific computer group?

I want to apply windows proxy settings on a computer/location/OU basis using group policy (IE version for the moment is 8, but will be upgrading sooner or later). Presently, I have user objects and ...
0
votes
0answers
7 views

Printing preferences item level tagerting not working

I am trying to get Item level Targeting to work in Printing Preferences. This is on the Computer side. I have the security group set in ILT. On the object management screen, the Security Filtering ...
0
votes
2answers
80 views

How to assign by GPO a file/shortcut to desktop for both specific user and computer?

I have to put on my domain controler's desktops only a custom MMC for a specific user only. Tought the best course of action was: *Default_DC_OU containing DCs, applying the GPO for shortcut to MMC. ...
0
votes
0answers
76 views

0x80070bc4 No printers were found from Group Policy

We have several printers being deployed via Group Policy. We are constantly getting: '0x80070bc4 No printers were found.' error message on all of our printers every time a user logs into the system. ...
1
vote
1answer
315 views

Scheduled task deployed via GP, that runs a powershell script on a network share by a AD service account

I've created a powershell script that runs Chocolatey updates as well as does some logging locally and on a network share. The script itself resides on a network share, and I'm hoping to be able to ...
0
votes
0answers
78 views

Windows Server 2008r2 User Mapped Drives disconnect when GPO Mapped Drives are in effectg

I am trying to find out if a user can map their own drives and have them stay in place when they are subject to GPO mapped drives. The GPO that is in place will Map a drive which is assigned Q and ...
1
vote
1answer
47 views

Homepage setting in Local Group Policy not working on first launch of session

I have a Windows 7 Professional x64 computer I am trying to "lock down" in the absence of Steady State. I have set the policy for the Internet Explorer homepage under Administrative Templates - ...
16
votes
3answers
37k views

Registry key / GPO to disable and block Windows 10 upgrade?

One of our remote Windows 7 Professional users just reported that he received an Upgrade Reservation Offer for Windows 10. It appears the Get Windows 10 "App" running in his system tray is legit. So ...
-2
votes
1answer
68 views

group policy preferences missing in windows 7 [closed]

I have Windows 7 Professional 64-bit which is part of a workgroup network (no Windows server or Active Directory). I have an MMC console containing local group policies for Administrative and ...
3
votes
2answers
90 views

Active Directory - Make sure users who are never on premises receive AD policies on a regular basis

I have a few users in the field 100% of the time. I would like to have them authenticate to AD so that policies like Password changes and even maybe group policies are applied regularly. I want to ...
0
votes
0answers
14 views

Is there a way to obtain list of policies applied to built in accounts (e.g LocalSystem, IIS_USRS, etc.)

Is there a way to obtain list of policies applied to built in accounts (e.g LocalSystem, IIS_USRS, etc.)? I am working on a tool, which should monitor policies applied to specific set of users, ...
1
vote
2answers
99 views

Windows 8.1 locks account after 3 invalid attempts even if GP is not defined

I mistyped my password three times today, and my account became locked on my windows 8.1 pro workstation. I checked Resultant Set of Policies (rsop.msc) and all three relevant settings are "Not ...
2
votes
1answer
156 views

Group policy infrastructure failed due to network access is denied

A number of my servers are not able to sync into our WSUS server. On digging, we noticed a number of group policies are not being applied. On running rsop.msc, I get the following error message: ...
1
vote
3answers
124 views

Run a script when joining a domain

I have a Microsoft domain (mostly 2008r2\7). I looking for a way to run a script immediately after (the restart after) joining a domain (without requiring user login), and so far I've failed. Also, I ...
3
votes
0answers
61 views

Best approach to deploy DLL file updates to Win7 clients

We are in a Windows 7 / Server 2008 R2 domain environment. We have a .NET application with lots of internal libraries for different UI and other features. We deploy it from a share where a directory ...
4
votes
1answer
31 views

Identify non-domain remote clients with Item-Level targeting

I would like to apply a group policy preference setting (to deploy a shared printer) only if a user is connecting to a RDSH server from a non domain-joined client computer. Many of these clients will ...
0
votes
1answer
65 views

mmc.exe blocked by group policy

I am changing some permissions on a small work network that I've been playing in. Domain admin and administrator permissions were so tied up that they essentially were the same account. After getting ...
2
votes
2answers
43 views

Deploying Client Software via GPO - Will server reboot affect?

I have deployed a MSI file via a GPO to one of my AD OUs. For an MSI to install via the GPO, I know the clients need to be rebooted. I have planned a reboot for the clients, but I was also planning ...
5
votes
1answer
71 views

GPMC missing Hide/Show links

We currently have a single 2012 R2 server in our domain. As we're rolling out Windows 8+ machines I like using it for Group Policy Management. For some reason the Group Policy Management Console on ...