Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
1answer
772 views

Remove local accounts but leave domain accounts in local administrators?

I'm trying to rename the local administrator account on all the PCs in a 2003 domain. The GP I have that uses GPP to rename the local administrator seems to work. However the problem I'm having is ...
4
votes
1answer
1k views

local admin vs domain admin on a domain controller

I would like to create a group policy to set a specific password for all local administrator users. Now even though you can't manage local users on a domain controller ("This snap-in cannot be used on ...
1
vote
0answers
930 views

Windows GPO “Allow Remote Shell Access”, where to set 'False' once you enable it?

OS : Windows 7 64 bit Under Local Group Policy Editor > Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Windows Remote Shell > there is a policy ...
0
votes
1answer
88 views

Force Downloads to appear in Windows 7 Start Menu

I see the policy to force removal of the Downloads "link" in the Start Menu, but is there a way to force Downloads to be present by default?
0
votes
2answers
2k views

Group Policy for Multiple SNMP Permitted Managers

I have a group policy to add the IP of a permitted SNMP Manager: How would I alter this to add additional permitted managers (More IPs)?
1
vote
2answers
723 views

Win7 desktop can't access network share while updating Group Policy causing GP to fail

I've got a bunch of desktops that are members of a domain. There's a couple of group policy items set on these, and some of these involve copying files from a network share locally (things like config ...
7
votes
2answers
664 views

Is there a way of consolidating multiple GPOs into one GPO

I have about 100 GPOs that I would like to merge down to 15-20. Is there a way of merging them together. I found this article: ...
0
votes
1answer
39 views

Setting maximum time allowed for a group policy to be allowed and then setting back to default

We have to make accounts for certain users who work on location and their passwords are 3 characters. We disable password complexity and minimum length when we make these accounts and then renable it ...
0
votes
1answer
2k views

Can the users can apply Windows update without local administrator rights?

My users are running on windows XP 32bit. normally WSUS automatically download and notify them to select which update want to install in the past they were in local administrator rights,now I reduce ...
1
vote
0answers
337 views

Cross-forest GPO between 2003 and 2008 Denied Beacuse it's “Inaccessible”

I have a two-way, non-transitive trust between two forests and domains, "W2003" and "W2008". In W2008 I have a GPO with user settings linked to a machine OU containing machine "Server". The GPO ...
1
vote
1answer
4k views

Windows can not find 'gpedit.msc'. Make sure you typed the name correctly

I have windows server 2003 standard edition sp2 64 bit and I have OU groups to apply policies like WSUS, deploying programs..etc, I had updated of administrative tools pack so I decide to install ...
2
votes
1answer
203 views

Deploying Printer with GPO W2K3R2 - isn't working

I am trying to deploy a network printer from my DC to my users. This is what I have done so far: Created a GPO: Named: Deploy printer login script has: pushprinterconnections.exe I have linked that ...
2
votes
3answers
1k views

Configuring only one Internet Explorer zone (IntranetZone) thru GPO without affecting other zones?

I need to deploy some trusted intranet sites into Intranet Zone in Internet Explorer. It works fine when using GPO at: Setting Path: Computer Configuration/Administrative Templates/Windows ...
0
votes
1answer
411 views

Force logoff when logon hour expires

I want to know how i can force to log off my ADDS user when their logon hour expires restricted by group policy. They are still able to log on their client PCs although their logon restricted time ...
0
votes
1answer
90 views

How to specify updates in WSUS

I have WSUS on Windows server 2003 64 bit. I want to specify updates for my clients, for example some PCs I don't want them to update to Internet explore 8 and WSUS has downloaded and updated by ...
1
vote
2answers
568 views

What are the side-effects of disabling the old Lan Manager hash?

All of the computers in our domain are running Windows XP/Server 2003 and above (with one exception, a Win2Ksp4 server, which is not a domain controller). I intend to disable the LM hashes via group ...
0
votes
1answer
4k views

How can I apply Group Policy object (GPO)user settings in GPO only if connecting to specific users?

I'm using Windows Server 2008 Enterprise Edition.How can I apply Group Policy object (GPO)user settings in GPO only if connecting to specific users? Best Regards,
1
vote
3answers
4k views

How can give group in active directory folder access by group policy

I have windows server 2003 64bit and my clients running on windows xp 32bit. My clients have user rights so they can't install any program. I have some programs needs admin rights for example I have ...
0
votes
1answer
460 views

Group Policy Preferences Filtering

I'm having issues getting a 2008 Policy to apply on my 2003 domain. I attached Group Policy Management from a 2008 server to the domain and setup it's own policy. The policy is User Configuration > ...
3
votes
2answers
853 views

Set binary registry setting through GPO

I've got a REG_BINARY registry key that I'd like to set via GPO. However, the GPO interface to add registry settings simply has a 'Value Data' text field. I can set the type to REG_BINARY, but what ...
2
votes
2answers
636 views

Default Domain Policy Corrupted

It appears that our domain's default domain policy is corrupted. The GPT.ini file is corrupted. When I go to open it, I get an access denied error. I tried to take ownership through explorer, takeown, ...
8
votes
3answers
5k views

Local Admin user via GPO

I have a Windows 2008R2 DC (Just setup), we already had around 25 Windows 7 professional / ultimate clients, which we are now going to join to our new domain / dc. Users were already using the ...
1
vote
1answer
163 views

Migrate Active Directory Groups to Local Windows Server Groups

This may seem like an odd scenario, but for reasons that I have no control over I need to migrate a large list of user groups from an Active Directory server, to the local group policy of a server ...
1
vote
2answers
390 views

Configure monitor orientation through GPO?

Is it possible to force a particular monitor orientation through a GPO? I've got a bunch of Windows 7 PC's that are used for displays, and I'd like to be able to drop a computer into a group that ...
1
vote
2answers
4k views

Group policy startup script needs elevated priviledges

I have a script that I want to run at startup but that requires elevated priviledges. Is there a way of doing this with Group Policy? I tried adding it in as a startup script using GPO but it ...
1
vote
1answer
999 views

Deploy MS Access Runtime via group policy

I am trying to deploy Access 2007 runtime via group policy and I am having a problem. So, i downloaded the AccessRT.exe and run accessrt.exe /extract to get the msi file. Then when I try to attach the ...
0
votes
1answer
649 views

Microsoft photo editor - No file format information can be found in the registry (registry policy)

I have Windows Server 2003 and my users are running XP. When I installed Microsoft office 2000 the photo editor said "No file format information can be found in the registry". I Googled it and I found ...
0
votes
0answers
263 views

Local Security Policy not applied in resultant security policy on Windows 2003 R2

I'm working with a standalone Windows 2003 R2 server. I'm testing out MS Terminal Services role, and after installing the role, I was unable to login to the computer using Remote Desktop. So I added ...
0
votes
1answer
290 views

Group Policy allow login as administrator programatically

We have a line-of-business app written in VB6. When the app starts, it checks a specific network path to see if there any updates to the application. If there are updates, the program logs in as the ...
1
vote
2answers
6k views

Group Policy: Autohide or disable task bar

Is there a way of disabling or auto-hiding the task bar for a particular user from within group policy? I'm trying to set a policy for a user that's used for 'kiosk'-like scenarios with kiosks ...
4
votes
1answer
2k views

How can I remove my users from local admin rights with a GPO?

I have active directory 2003 and windows xp running on clients so I don't want any of my users to have any admin rights on their PCs and I have already gave them local admin rights So Without to go to ...
2
votes
1answer
1k views

Active Directory how to make Group Policy to allow users to change their network settings

I have Active Directory 2003 and my users are on Windows XP. How can I set a policy to active network configuration for the users? In other words some users are traveling a lot so I want to give them ...
2
votes
3answers
816 views

can i push out print driver exe's like I would a software msi via group policy?

i just want to make sure there are no caveats with installing print drivers via group policy. also, if this is just a bad idea and a better idea exists let me know. thanks!
2
votes
1answer
695 views

Installing Symantec Endpoint Protection clients via group policy in a mixed environment

we're upgrading to Symantec Endpoint Protection 12 using group policy in a mixed environment from SAV 10. how can we tell which machines are 32-bit v. 64-bit? we tried looking at the properties in ...
1
vote
2answers
67 views

Extending GPO in MS Active Directory

Is there a repository/site or any update package for the administrative templates in the GPO (Group Policy) of the MS Active Directory?
3
votes
1answer
368 views

Which tool to use for managing GPOs: AGPM or SCM?

I am investigating the different solutions available to manage GPOs. I see that Microsoft proposes two tools, which are AGPM (Advanced Group Policy Management), part of the Desktop Optimization Pack ...
0
votes
1answer
12k views

How do I hide Administrative Tools on Windows Server 2008 R2 using group-policy?

We're locking down our terminal server machine for remote desktop users and can't seem to find how to hide Administrative Tools from the Start Menu for remote desktop users. thank you!
8
votes
2answers
2k views

Upgrade software package installed with GPO

Since recently I have been using AD policies to deploy software packages through GPO on a small domain. This had been working well, but I am not sure what is the correct procedure for upgrading a ...
0
votes
1answer
81 views

Disabling applications through group-policy

How do I disable office applications from loading on client machines through group policy?
4
votes
1answer
3k views

Deploying Printers to Computers vs. Users via GPO

When I deploy a printer to a computer it only seems to deploy to our Windows XP machines. If I deploy to users it deploys to our Windows XP and 7 machines. When I look in the RSoP Snap-in it shows the ...
5
votes
6answers
4k views

How do you manage computers without Active Directory?

I need to setup between 5 - 10 computers to start with for a charity organization which can't offord to be running a dedicated server that maintains group policies for a growing number of staff. Is ...
5
votes
3answers
9k views

Where do ADMX files go in a mixed environment?

When I download ADMX files to use on our Windows Server 2008 machine, do I store them under Sysvol on our domain controller which is a Windows Server 2003 machine or do I put them in the ...
1
vote
1answer
156 views

Can we use GPMC on our new Windows Server 2008 R2 machine instead of our old Windows Server 2003 SP2 Domain Controller Machines?

We want to be able to access all the new admx templates that come with 2008R2 out of the box to set up our terminal service desktop policies operating on our Windows 2008R2 machine. Is it true that ...
0
votes
4answers
251 views

Why user logons to Windows always look like the first logon

I have Windows Server 2003 and all the users have windows XP with administrative privileges in local group setting, so I want to reduce them to normal users. i.e. Currently normal user in active ...
5
votes
1answer
736 views

List of What Policies Require Background Refresh, Which Require Reboot

Yes, I know the obvious ones. I am very specifically looking for any doc by Microsoft/MSDN that indicates which policies in Group Policy specifically require reboot and which do not. I love trial and ...
2
votes
2answers
562 views

Why Isn't My GPO Being Applied?

I have an OU named "Asia" wherein I've set regional settings via a GPO named "Asian Settings." This GPO is linked to the "Asia" OU and the link is enabled. However, when I run gpresult the log ...
0
votes
1answer
342 views

Enabling WMI and corresponding firewall exception via a Group Policy Object

Hey guys, I have tried enabling WMI on my local domain using a group policy object which sets the service as on at startup. In addition i added an exception for it via the windows firewall policy ...
3
votes
1answer
753 views

Deploy MSI silently - Cisco CAD Client Configuration

Deploy a MSI using Group Policy. Sounds easy right? This MSI (CAD Client Configuration.msi) prompts for the IP address of our UCCX server. Most MSI's I have dealt with I can install silently uisng ...
0
votes
1answer
227 views

Desktop background applied through GPO not fully loading on some PCs

This is a network of about 100 PC's. On most of the PC's the JPG loads correctly from a network share but daily on a few seemingly random machines across different OSes the wallpaper will only load ...
2
votes
3answers
2k views

Windows 7 Group Policy to delete old user profiles does not work

Background information: I currently manage a series of computer labs (127 machines running Windows 7 x64 Enterprise) for the engineering school of a university. These machines are used constantly by ...