Tagged Questions

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
0answers
37 views

Change dnserror.htm page when cannot locate website in Internet Explorer via Group Policy

When you type in a URL in Internet Explorer and it cannot be located via DNS it loads dnserror.htm from a .DLL in C:\Windows\System32\en-US\ieframe.dll.mui. I have read that you can use a program ...
0
votes
1answer
65 views

GPO To Modify Registry Setting Not Applying

I have a XenApp Server running on Server 2008, and would like to apply a Group Policy Object to the server to modify the following registry setting: HKLM\Software\Symantec\Symantec Endpoint ...
0
votes
1answer
108 views

How to Push out OneDrive for Business on multiple network computers

I have several network computers that I need to install Microsoft's OneDrive for Business software agent on. It can be downloaded here: http://support2.microsoft.com/kb/2903984 It is an exe so Group ...
-1
votes
2answers
38 views

Disable user printing from browser in corporate intranet [closed]

... per a suggestion I've moved this from StackOverflow Within a corporate intranet, can the browser be controlled via policy and/or command line parameters to prevent a user from printing a specific ...
0
votes
0answers
30 views

Allow Non-Administrators to Install Specific Devices - Classes

I'm automating driver installation with the use of a central driver store. An important part of this approach is to add the Class GUID's of the devices/drivers to the GPO (Allow Non-Administrators to ...
0
votes
1answer
141 views

Set User Time Zone by GPO on Windows Server 2012

I am trying to set the time zone of users in Windows Server 2012 by using a user GPO. To be more precise, I have an application which users can log into by RDP, what I am trying to do is when they ...
-1
votes
2answers
56 views

Audit policy applied, then removed after each gpupdate

This question addresses my issue, however the solution isn't solving it on all my workstations. One of my workstations turned off auditing this morning magically on its own. Each time I run a gpupdate ...
-2
votes
1answer
38 views

Assigning a GPO to a computer?

I have a sales area with 30 Computers in it. The Employee turn over is very high and I was tired of setting multiple users up everyday. I made a Sale1 logon and am having all 30 Computers use it. The ...
3
votes
1answer
45 views

Moving AppData to a new share: best practice for moving data

My company uses folder redirection to store the AppData folder on a network share. I will be moving the AppData to a new share and I was wondering about the automatic data transfering feature of the ...
1
vote
0answers
27 views

Group policy deployed printer: One duplicates?

As a preface, no this doesn't have to do with Remote Desktop's Redirected printers at all. I've deployed an HP printer (called \Manager\Picasso) under User Configuration in a Group Policy object. ...
1
vote
1answer
54 views

Impact of enforcing software restriction policies via GPO 2008r2

We are trying to prevent the execution of certain system related executables by regular users on our network (mmc, cmd, ldp, etc.). I have suggested the use of software hashing rules but I am ...
3
votes
1answer
80 views

Windows Firewall: Remote Desktop block action by local policy

On a fresh domain-joined Server 2012 R2 install I see a peculiarity where an enabled "Remote Desktop" rule is set to Block in the Domain profile: As block rules take precedence over allow rules, I ...
1
vote
1answer
28 views

Group Policy not blocking RDP saved credentials when using hostname

Group policy is set up to prevent users from using saved credentials, works fine when connecting to the RDP via IP address or FQDN. But connecting in through just the hostname allows a user to save ...
1
vote
0answers
44 views

Configure Calendar time scale to 15 minutes in Outlook (via Group Policy)

Outlook by default allows users to book meetings in 30 minute increments; this can be manually changed to allow 15 minute increments (Change the calendar time scale). I need to deploy/control this ...
1
vote
1answer
34 views

How can I get rid of duplicate profile folders in a newly created profile due to folder redirection?

How can I get rid of duplicate profile folders in a newly created profile due to folder redirection? I am using a Folder Redirection GPO to redirect most of my user profile folders to a server. In ...
0
votes
2answers
35 views

restrict media access by user

I recently took over a network and I'm still pretty raw in regards to AD and group policy. I've been trying to use group policy to restrict CD burning rights to only 3 users and only their 3 ...
2
votes
1answer
41 views

When does the “Move the contents of [FolderName] to the new location.” option in a Folder Redirection GPO take effect?

Does the "Move the contents of [FolderName] to the new location." option only apply to files found in the users profile, or does it also apply when changing the destination of the redirection to a new ...
0
votes
1answer
599 views

Disable Windows locking with a GPO?

I have set up a lab with a number of Windows Server 2012 R2 machines. The lab has an Active Directory domain (DFL: Windows Server 2012 R2, FFL: Windows Server 2012 R2) and these machines are joined to ...
4
votes
2answers
200 views

What is the best method to change the server used for folder redirection?

For years I've been using folder redirection for all my desktop clients (Win7). I am looking to migrate all data to a new server/share. I have already created a new share with the same ACL and used ...
0
votes
3answers
63 views

Apply gpo only on one OU

How can you create a GPO for only one Organizational Unit ? The GPO I want to create is pretty simple, it just set the minimal password length. Given that I don't want all the users to have the same ...
1
vote
1answer
58 views

Restoring file / folder permission using GPO

Initially, in our Windows domain environment, all Domain Users are by default Local Administrator of their own workstation. After some deliberation, it was decided that Domain Users should be removed ...
3
votes
1answer
121 views

SID in AD - SID from psgetsid?

Wondering if anyone can shed some light on some SID confusion. Currently having an issue with some policy applying to a few machines that were all based off the same image. One of our admins, ran ...
1
vote
0answers
24 views

gpo ie user force update

We use two 2008 Domain-Controllers and one 2012 DC In a gpo we set the proxy for IE-11 per user. eg: X use proxy, server: proxyserver, port: 3131 This gpo is not mandatory, so users could change ...
0
votes
1answer
18 views

Drive Maps via Group Policy - Overlapping Policies

((NOTE: We are on Windows 8.1 with a 2008R2 domain)) We have decided to move away from mapping drives via a log in script and attempting to do it via Group Policy. I have personally been doing this ...
0
votes
2answers
113 views

WSUS & GPOS - Force restart and disable choosing updates W12R2

My objective is that Windows Update runs everyday, install all available updates and (if necessary) automatically restarts the computer, giving the chance to the users to postpone it to maximum 4 ...
0
votes
2answers
54 views

Random domain members are added to the local administrator group

Every computer in the local administrator group (and remote desktop users group) contains a random selection of domain members. After deleting them they come back after a restart or forcing an ...
4
votes
3answers
176 views

Group policy preferences mapping same drive multiple times

I recently changed over our old login script that mapped network drives over to group policy preference drive maps. Worked through a few issues at first, but appears to be working fine for all of our ...
0
votes
3answers
73 views

GPResults say my GPOs are not applied because they are “empty”

I am trying to apply several policies to my domain (running on Windows 2008 R2). Below is a sample of how I have structured my OUs. Test OU {Computer based policy} {User Based Policy} OU Users ...
0
votes
1answer
134 views

GPOTool - Windows 2008R2

I am trying to troubleshoot some GPO issues and began using gpotool.exe to diagnose the issue. I got the tool from 2003 resource kit. Here is one of the first errors I am seeing: Policy ...
1
vote
2answers
35 views

Single user change with forced domain firewall GPO

I have an issue which i need some help with. Current Scenario: I have a domain firewall policy, which turns the firewall ON and is enforced on "Authenticated users". The domain policy locks the ...
0
votes
2answers
69 views

How can I manage remote site printers?

Please bear with me, my server and networking knowledge is not amazing. The company that I work for has a central 'Head Office'. This is where our server room is located. We have a bunch of Windows ...
2
votes
0answers
22 views

Can I upgrade an program via group policy if it was initially installed manualy?

We have a program which was installed manually on workstations when they were initially setup. We now need to upgrade this software and I wish to do it via group policy. I have created an MST using ...
0
votes
2answers
386 views

Force IE 11 compatibility mode for certain sites within domain

When setting compatibility mode in IE 11 it wants to add our whole domain (somedomain.co.uk) but we don't want every site (*.somedomain.co.uk) to be covered by this. We want just ...
1
vote
1answer
41 views

How to make Group Policy to the same User Group at different Computer Groups? (VDI)

I made two Organizational Unit in my domain Thin Clients (there are the physical computer objects) Virtual Clients (there are the virtual computer objects) And I have the default Users (there ...
1
vote
1answer
50 views

GPO is both applied AND filtered out

I have a GPO that is applied to MyUser's OU and filtered to MyUser. I run a gpupdate on his machine and I see that the GPO is listed under "Applied Group Policy Objects", yet it is also listed under ...
0
votes
1answer
509 views

Network drive map through GPO not working on Windows 2012 (Neither via logon script nor drive maps)

Although I though this would be easy I am unable to automatically connect to a network drive via GPO. I tried through a batch file on (User Configuration / Policies / Windows Settings / Script / ...
0
votes
1answer
422 views

Samba4 domain controller, group policy processing fails, gpupdate fails

I'm using a Samba4 domain controller, and on the machines joined to the domain I'm seeing this message: The processing of Group Policy failed. Windows attempted to read the file ...
-2
votes
1answer
31 views

Removing programs for specific computers [closed]

i am currently working for a company as an intern. i have been given the task to remove Java on specific computers that have already installed the program manually. this means that there's no GPO ...
1
vote
0answers
38 views

WMI request (Wbemtest), access is denied to domain computer

let me explain our setup first! We have 2 site location with Cyberoam CR50ING Firewall, IPSec between the 2 Subnet. Cyberoam firewall has an AD authentication with their software linked to the ...
10
votes
2answers
151 views

How to enable BitLocker with no prompts to the end user

I have configured BitLocker and TPM settings in Group Policy such that all the options are set and the recovery keys stored in Active Directory. All our machines are running Windows 7 with a standard ...
0
votes
1answer
41 views

What exactly do the two “Do not process the legacy run list” group policy settings do?

The two "Do not process the legacy run list" settings appear under Computer Configuration -> Polices -> Administrative Templates -> System -> Logon and under User Configuration -> Policies -> ...
0
votes
2answers
146 views

IE11: Allow display of local HTML files

How can I enable Internet Explorer 11 that has Enhanced Protected Mode turned on to display local HTML files? This is very annoying also I see the security need behind this feature. Can someone ...
1
vote
0answers
88 views

Prevent user interactive logon to domain computers

I currently have a user DOMAINJOINER (located in the WIN7Support OU) which I use to deploy Windows 7 machines. This user can Create and Delete Computer Objects in the WIN7Computers OU, that's about it ...
0
votes
0answers
42 views

WMI filter working for some Windows 7 machines but not for others

I'm trying to use this WMI filter for our Windows 7 64bit machines: select * from Win32_OperatingSystem where (Caption like "Microsoft Windows 7%") or (Version like "6.1%" and ProductType = "1" and ...
0
votes
1answer
63 views

How to completely reset Group Policy on a domain member?

We have a problem where domain members built from a certain Windows 8 image can no longer update Computer Group Policy. These domain member have recently been moved to a new Organisational Unit, but ...
-1
votes
1answer
95 views

how to prevent other computers from seeing our network computers through vpn

We have a local office domain consisting of Windows 7 and XP machines that is running on Windows Server 2008 R2. We also have users that connect via VPN into our network. My concern is that when a ...
0
votes
1answer
79 views

GPO backup fails

When trying to backup a GPO using the GP management console (choosing the GP to backup, right click, hitting backup, and choosing a target directory "c:\ADB"), the backup fails. In the Application ...
2
votes
1answer
44 views

How do I restrict user log ins to only a specific set of computers

I want to restrict user admin access with regards to their department. I want to give access to users in Security Group A to computers in Security Group B and i want to create similar access for 9 ...
4
votes
2answers
321 views

Complete Active Directory redesign and GPO application

after much testing and hundreds of tries and hours invested I decided to consult you experts here. Overview: I want to apply some GPO to our users which will add some specific site to the Trusted ...
1
vote
1answer
29 views

Restict Internet Connection Except using Proxy

Given (as-is) A router with DHCP enabled An Active Directory Server Two Windows 7 clients joined the domain Planning (to-be) A proxy server Two clients are set to restrict internet connection ...