Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
1answer
62 views

Selective GPO drive mapping

I have two fileservers (Windows Server 2012 R2) that have joined my domain, namely filesrv01 & filesrv02. These fileservers should both contain exact copies of the user data, and if one fails; the ...
-1
votes
1answer
14 views

How to create GPO for put cleanmgr on users desktop?

I already create some shortcut on desktop user from gpo but i dont understand how to create a shortcut for running cleanmgr from users desktop. Like that they can run this one when they want to. ...
0
votes
0answers
58 views

Creating & mapping user home folders on a network share using GPO

I have deployed a fileserver which has had its harddrive partioned to include a shared partition along with a shared folder within it. The fileserver has joined my domain, hosted on a Windows Server ...
1
vote
1answer
64 views

H and V don't work on windows server 2012 log on

I'd like to log in to windows server 2012. It worked yesterday but today I couldn't enter my current password because the H and V keys didn't work and my password include the h. I connected the ...
2
votes
2answers
154 views

deny access to file servers and PCs on a domain - guest user

We have 70+ PCs and servers, users access files by accessing the servers from their PCs. Is it possible to deny access to all PCs and servers on a network for a guest user (he should only have ...
0
votes
0answers
27 views

How do I set domain machines to ignore domain in login credentials?

Basically, some machines will allow remote access with an incorrect domain but correct username and password, but others won't. How do I set a server TO do that? My issue is that I have a host ...
2
votes
1answer
32 views

Allow Outlook to display/download images from approved domains

Outlook wisely does not automatically display/download images embedded in HTML emails. Is there way to modify this policy site-wide (group policy or something), so everyone will see images that are ...
0
votes
0answers
69 views

AD GPO “User Configuration” shows up using “gpresult” but not working. Instead “Computer Conf..” is working smoothly. Why?

Problem: I want to restrict removable storage writing access of all users except admins, and restrict removable storage execute access of all computers even admins computer (forbidding unintentional ...
1
vote
1answer
35 views

Win 2012 - how to ensure shutdown script is the last thing to run

Anyone know of a way to ensure that a shutdown batch file (Local Computer Policy -> Windows Settings -> Scrips -> Shutdown) is the last thing to run before the machine shuts down? At the moment the ...
0
votes
0answers
24 views

WMI query to find lack of drive letter for Group Policy

I'm building a group policy to apply to a subset of users within my organization. This subset of users have no Home Directory set on their Active Directory object, whereas other users have an I:\ ...
0
votes
0answers
26 views

Group policy printers not deploying - insufficient system resources

We have our Staff printers policy applied to our Staff users OU. This policy has ~60 printers deployed as Shared printers via Preferences. All bar 2 of these printers are item level-targeted to OUs ...
0
votes
0answers
18 views

How can I get a user to interact with an executable configured to run from a scheduled task?

I am trying to get the OpenVPN GUI to open for configured users automatically at (or recently after login). My original plan was to use a Computer Configuration scheduled task to run as the logged on ...
0
votes
1answer
89 views

is it possible to deploy scanners with group policy or any other solution

we are a company of 60 employees/computers and want all employees to be able to scan, we purchased a Brother MFC-L2700DW and connected it with ethernet to network i'm able to scan just fine by adding ...
0
votes
0answers
44 views

server 2012 configuration to require password on wakeup

I have a new windows server 2012R2. I have a special situation when I want my server to sleep after an idle period (successful) and require password on wake up (not working). I have tried the ...
0
votes
3answers
38 views

Run Log-on Script with Admin Rights

I created a batch logon script that checks and removes old versions of a specific piece of software and installs the newest version. Both the install and uninstall process use an .EXE file. The script ...
0
votes
0answers
10 views

SCCM 2012 requires local group policy processing be turned on, but local group policies inconsistent

My organization is in the process of migrating to SCCM 2012, from 2007. Clients aren't installing updates, and wuahandler.log indicates this is a group policy problem. The error message is along the ...
0
votes
2answers
46 views

Restricted group local administrators can RDP into DC

I have added restricted groups to my Desktops OU and this adds the "Local Admins" security group to the Local Administrators group on workstations in that OU. The issue is, that after this GPO is ...
0
votes
0answers
21 views

Is there an Windows Event Viewer Event for “No available connections” or No Ethernet Connection?

I am trying to create a GPO that disables a laptop's wireless card whenever a Ethernet LAN is detected, and Enable the wireless whenever an Ethernet LAN is not detected. Right now I have a GPO that ...
1
vote
0answers
46 views

How to disable “do not allow drive redirection” local policy not using GUI?

I need to do it preferably using powershell/batch but after searching there is only some instructions for creatig adm/admx files. Is there an easier way to do this? I've also found a registry key ...
2
votes
3answers
90 views

Store GPO Scripts in Netlogon or Policy Folder?

Is it best practice to store logon scripts centrally in \\DOMAIN\Netlogon or in the policy folder they get put in by default, eg. \\DOMAIN\SysVol\DOMAIN\Policies\{DE22B6FB-315E-4C55-BF06-A7709913CD9E}\...
1
vote
1answer
63 views

Chrome Group Policy - disable spell check

I need to disable spell check in Google Chrome on our terminal servers. I have setup the group policies but the only setting I can find is for SpellCheckServiceEnabled which isn't the spell check, its ...
4
votes
3answers
91 views

How to inherit from Default Domain GPO?

I recall reading somewhere that it's advisable to not make changes directly to the Default Domain GPO, but instead to create a new GPO that inherits from Default. This sounds reasonable. I'm a ...
0
votes
2answers
52 views

Printers deployed by group policy - separate policies or all in one?

We have 60 printers deployed by group policy on a 2008 R2 level domain. They are set as Group Policy Preferences in User configuration. They're all item level targeted to OUs and Security Groups ...
3
votes
2answers
64 views

script to temporarily block remote users from logging into a windows server during downtime

I'm looking for a solution to the following issue: we have a windows server with a bunch of people logging in remotely to work on stuff; when we need to upgrade the server, we issue warnings via ...
-4
votes
1answer
28 views

Issue in Accessing FACEBOOK site in Domain network

In our Domain,We have setup firewall to prevent unwanted access to the websites. But a weird thing is even network administrators(whose IPs are not blocked by firewall) cannot access to facebook site....
2
votes
1answer
47 views

openSUSE installs and VMs constantly being hacked and bricked

Sorry if this is a total newbie question, but I'm doing frontend design work for a radical political organisation and ALL my installations of Linux, be they openSUSE, Ubuntu or Fedora keep getting ...
0
votes
1answer
37 views

How to find out what application was blocked by Group Policy

Currently my network (Windows Server 2008 R2) operates on an application white list group policy (Run only specified Windows applications). Occasionally I'll run into a program where even after I've ...
4
votes
0answers
86 views

How to configure Windows to trust a network share using a GPO?

I keep getting the following warning whenever I try to open a share from my DFS. How can I configure Windows (10 in this case) to trust anything under the root of my DFS via GP? It seems odd that ...
0
votes
0answers
32 views

google chrome group policy locale

We currently have Google chrome deployed in the enterprise. We have an internal website that retrieves data from a database and people using chrome noticed the date and time format was in the US ...
0
votes
3answers
22 views

Internet Explorer maintenance is missing and proxy cannot be removed

There are proxy settings configured on a policy. The exact location is User Configuration > Windows Settings > Internet Explorer Maintenance > Connection / Proxy settings. Since this is a Windows ...
0
votes
1answer
65 views

Group Policy Object not applied to client computer

I am taking over our entire Microsoft based management, this includes our AD servers, GPOs, etc. So with that being said, I don't know everything about how this setup is configured. However, I have ...
6
votes
2answers
312 views

What does 'Log on as a Service' actually mean?

I am building Group Policy for a new domain that we are migrating to. In our current environment the settings Log on as a Service is set at the Server OU level - which has about a hundred Service ...
2
votes
0answers
62 views

Group Policy - Not automatically running on all machines

We are facing an issue on one of our domains where machines are not all running group policy refreshes at its default interval. I am not seeing the 1501 events logged in the system log, I occasionally ...
2
votes
2answers
350 views

Configure same Internet Explorer zone mappings with and without ESC via GPO

Our Active Directory domain consisting of Windows Server 2012 R2 servers and Windows 7 workstations configures Internet Explorer security zones using this Group Policy setting: Computer Configuration/...
0
votes
1answer
88 views

Is using the “IP Security Policies on Active Directory” settings in Group Policy a best practice?

Is using the "IP Security Policies on Active Directory" settings in Group Policy a best practice? I recently created a new GPO and assigned the "Server (Request Security)" policy. Almost instantly I ...
0
votes
1answer
12 views

Missing policy in Group Policy Editor

I am seeking to turn on IE Enterprise Mode: https://technet.microsoft.com/itpro/internet-explorer/ie11-deploy-guide/turn-on-enterprise-mode-and-use-a-site-list I followed the steps but there is no "...
1
vote
0answers
22 views

Win Server 2012 R2. Apply security GPO to local users on a specific machine

We have a "demo" machine which we use for providing remote access to demo software as a local user. Is there a way to hide and deny access to everything except the user folder using a GPO?
2
votes
2answers
64 views

Extracting GPO through Commandline/Powershell

Im writing a script through powershell and i would like to extract the whole local policies. I understand that secedit will exttract the Account policies only, and the only way to do this is via going ...
4
votes
0answers
106 views

Cannot set DSCP on Windows 10 Pro via group policy

Setting 'policy based QoS' on Windows 10 does not apply the DSCP value to outgoing traffic. I want to be able to set the value of DSCP traffic for certain processes. Using gpedit.msc group policy ...
1
vote
0answers
91 views

Change or delete local windows firewall rule using group policy firewall rules

When I install a particular program on a computer it creates an overly lenient local firewall rule that allows inbound connections to port 1234 from any subnet. I want to create a more restrictive ...
0
votes
1answer
43 views

Upgrading a program with Group Policy

I am trying to install a new version of a program, already installed on some machines, via GPO. Currently, the policy is user based and works correctly if there is no previous version of the program ...
3
votes
1answer
61 views

Windows classic design has flat elements

I recently tried to force the windows classic theme via GPO to ensure a standard theme for all users. However, there were some issues with an application when we used the classic theme. Before I was ...
3
votes
1answer
187 views

Users are seeing Windows Update notification on Terminal Servers. How to stop it?

We have a 6-server TS farm running Server 2008 R2 and using a WSUS server to do updates. Group Policy for the farm has updates configured to automatically download and install as soon as they're ...
0
votes
0answers
184 views

GPO drive mapping fails and other (logon) problems

We recently increased our user amount on our RDS 2012 R2. We are starting to experience some issues. We have 4 Windows 2012 R2 RDS Servers and 1 Domain Controller/File server also running Windows ...
2
votes
1answer
27 views

Windows Server Group Policy: Install Software - Activations?

When leveraging User Configuration -> Policies -> Software Settings -> Software Installation to publish particular packages for domain users to install at their own will, how can one handle software ...
0
votes
1answer
27 views

What is the correct method of reverting a Group Policy Object?

As I discover the nuances of Group Policy I haved learned that deleting a GPO does not reverse the changes that were effected by a GPO and those changes remain tattooed (a nice description that I read ...
0
votes
0answers
36 views

Allow logon locally option grayed out

We have a Domain Controller running on windows2012R2. All local computers are on Windows10. When i try to login to one of the client computer with Domain User Credentials i get an error What ...
1
vote
2answers
211 views

Why is my logon script not mapping any drives?

I've written a logon script in PowerShell. The Script is embedded in GPO and runs when a user is logging into the domain. My Problem is, that the drives I deploy in the Script don't get deployed. I'm ...
1
vote
1answer
75 views

Group Policies Not Applied At Startup with SSD PC

I have a problem with some new computers containing solid state drives which will not apply group policies at startup. All other PC's apply the GPO's no problem. Manually running gpupdate /force ...
0
votes
1answer
40 views

make redirected folders always offline available

I configured server side profiles using GPO (User Configuration\Policies\Windows-Settings\Folder Redirection) and that works fine. My Setup: Redirected Folders reside in \\servername\Users$\. Server ...