Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

1
vote
0answers
43 views

GPO Templates Resource?

I am in the process of designing the group policies for my organization, and I'm wondering if there is somewhere I can go to look at templates, to see how other people have set theirs up, and even ...
0
votes
1answer
358 views

Windows Server 2012 File Security Warning

I've mapped my domain users to a remote share, and I'm trying to get rid of the security warning that appears whenever a file is run from the remote share. I've tried adding the FQDN to the intranet ...
1
vote
0answers
309 views

Windows Server 2008 R2 Software Deployment on Active Directory - Schema Issue

We have two servers, one running Windows Server 2003 SP2 and one running Windows Server 2008 R2. Both servers have their own versions of Group Policy Management (1.0.2 on 2003 and 6.0.0.1 on 2008). ...
2
votes
1answer
207 views

Group Policy deploying printers

We moved our print server to another computer and IP. The Servers are all running Win Server 2008 R2. All clients are Windows 7 Pro 64bit. I was under the assumption, that 'Replace' will either add ...
-1
votes
1answer
79 views

How to create an outlook pst file for each user outlook

Is it possible via GPO to create and assign a new PST file to every user'a outlook ?
0
votes
1answer
201 views

How to prevent particular program from using particular network connection under Windows?

In my company almost every user has 3G mobile connection and many of them travel a lot. To prevent expensive mobile charges I'm looking for a solution that would prevent particular program (Windows ...
6
votes
2answers
4k views

Deploying Office 2013 via GPO

Looking at potential ways to deploy Office 2013 via GPO. First and most obvious way is to run a startup script which calls the Office 2013 setup.exe. Problem here is what happens after it is ...
7
votes
2answers
3k views

GPO best practices : Security-Group Filtering Versus OU

Good afternoon everyone, I'm quite new to Active Directory stuff. After upgraded Functional level of our AD from 2003 to 2008 R2 (I need it to put fine-grained password policy), I then start to ...
0
votes
1answer
593 views

GPO WMI username filter not working over RDP

I'm trying to write a WMI filter to prevent a GPO from applying to certain users SELECT * from Win32_ComputerSystem WHERE NOT UserName LIKE 'domain\\user1_%' AND NOT UserName LIKE 'domain\\user2_%' ...
-1
votes
1answer
428 views

I need a script to lockdown the system time to users via gpedit.msc [closed]

I need to lockdown the system time on a number of PCs via gpedit.msc and then removing administrators from the group and then adding 'administrator' and 'polling'. Can I do this via a script? ...
2
votes
2answers
1k views

Using GPEdit to lock down a local account on Windows XP

I have a few local accounts on a Windows XP machine. The local account is called localUser1 ... localUser16 I need to lock the accounts down so the ONLY application that is allowed to run is ...
1
vote
1answer
163 views

System Restore Points

Currently I am investigating how to schedule an automatic initiation of a system restore point for all of the workstations in my office. It seems that Task Scheduler already has some nice defaults ...
3
votes
1answer
1k views

No password is complex enough

I have one user in my AD domain who seems to not be able to self-select a password. I may have another one, but they're on a different enough password-expiration schedule that I can't remember who it ...
5
votes
1answer
3k views

How do I set a service startup type to be 'Automatic (delayed)' using GPO?

A Windows service has 4 different startup types that can be configured: Automatic, Automatic (delayed), Manual and Disabled. I have a service running on a combination of Windows 7 and Server 2008 R2 ...
3
votes
1answer
3k views

How to deploy .exe using Software installation GPO

Is there some way I can use the Software Installation GPO in Server 2012 to deploy things like Java and Adobe Reader? Problem is these are .exe setup files and it seems that Software Installation GPO ...
2
votes
2answers
3k views

Not able to use the group policy in windows server 2008

Currently I'm not able to use the group policy. Error Message: "To manage group policy you must log on to the computer using a domain user account" There is no domain attached to this windows server. ...
0
votes
1answer
162 views

How do you log the output of startup.bat from a GPO?

I'm trying to write some .bat files for GPO. I would like a way to see the output of the script to help debug problems. For the life of me I can't get it to log anything. I have tried the ...
0
votes
2answers
2k views

Windows 2008 terminal server - How to restrict access to DVD/floppy?

I has a very simple task. I need to block access to removable media (CD, DVD, floppy, USB drives etc.) on a Windows 2008 R2 Terminal Server for users and allow it for admins. I tried to enable the ...
0
votes
1answer
3k views

setting permissions on folders created through group policy

I have a domain controller running server 2012 std. In the default domain policy I set up a folder in User Configuration>Windows Settings>Folders The path is \\MyServer\MyShare\%USERNAME% This works ...
0
votes
1answer
515 views

Applocker custom extension (Java, CPL, MSC etc.)

We have a Terminal server and want to prevent users from running inappropriate software. Previously we used Software Restriction Policies for this purpose. Now, Microsoft seems to recommend Applocker ...
1
vote
0answers
148 views

Automatic binding of Windows 8 account with Live ID

Is it possible to do automatic binding of Windows 8 account with Live ID thru GPO, scripts, or some sort automated way that will basically do it for everyone in domain. There is an assumption that ...
1
vote
0answers
389 views

“hkcu\volatile environment” missing, hkcu\environment not read

This question is very similar to this one. Suddenly, my "HKCU\Volatile Environment" keys disappeared, and my system no longer reads HKCU\Environment unless I reset it explicitly using SETX (which I ...
1
vote
2answers
459 views

Tools for comparing GPO settings [closed]

What tools would you recommend for comparing two GPO and identifying differences? AGPM is not the option as we do not have a Software Assurance contract with Microsoft. Is there anything else? Thank ...
1
vote
2answers
208 views

Debugging group policies

Begginer with windows servers here How can i find which group policy is applied when i click on something and get blocked? I currently can't check for windows updates unless i deactivate the GPOs ...
0
votes
1answer
790 views

Buffalo NAS Active Directory Integration Group Policy Changes

as a part of effort to integrate buffalo NAS terrastation pro with our AD, we found out that following changes need to be made in the Group policy; The following need to be altered in Domain-> ...
8
votes
3answers
12k views

How do I disable “Restart your computer to finish installing updates” popup with GPO?

I've got some kiosk computers that are on a domain and permanently logged in, and receive updates for FEP through WSUS. This works great, except that occasionally, I get this dialog appearing in the ...
0
votes
3answers
4k views

Folder redirect policy does not apply to one user

I'm running Windows Server 2008 R2, my station runs Windows 7. while defining folder redirection policy (and others) I find that the redirection does not apply (or appear) in rsop.msc checkout. ...
1
vote
2answers
813 views

Block Domain User login

I have created a Domain User id ( for example - Auser ). I have integrated my LDAP login with Firewall. I use this user to login in to firewall only. So, I want to block all the login for this User ...
2
votes
3answers
2k views

set attachment size limit in outlook with a domain policy

Is there a way to add a domain policy to a Windows 2008 domain that sets the attachments size limit for Outlook (various versions) and Windows Mail?
10
votes
5answers
23k views

Applying a GPO to one user on one computer only

I have a GPO that I need to apply to the user DOMAIN\DumbGuy, but only when he logs on to DOMAIN\DumbGuysComputer$. When DOMAIN\NiceReceptionist logs on to DOMAIN\DumbGuysComputer$ it should not ...
3
votes
1answer
191 views

What's the difference between these two GPO options?

What's the difference between the two GPO options below? NETWORK ACCESS : DO NOT ALLOW storage of credentials or .NET passports for network NETWORK ACCESS : DO NOT ALLOW storage of passwords and ...
0
votes
3answers
2k views

GPO Software Uninstall Not Taking Place

I am having some trouble with my software GPO's and can't seem to find any answers using Google. I successfully deployed software using my policy but when I delete another, the uninstallation of the ...
6
votes
3answers
33k views

How do you apply proxy settings per computer instead of per user?

So far, I've used a user group policy object utilizing Internet Explorer maintenance to set a proxy for the user in IE. We have now deployed the Enterprise Client (EC) starter group policy to our ...
1
vote
3answers
875 views

Which GPO is making my Domain Controller my clients' DNS server?

I maintain a small domain (about 20 clients) and we need to make some changes to the DNS server that's being used by the clients. All the clients have been hard coded to use the domain controller as ...
9
votes
3answers
5k views

Applocker vs Software restriction policy

The goal is to prevent users from running unwanted programs on a terminal server. I have read many articles from Microsoft and others saying that the new Applocker feature is 100% better than the ...
0
votes
1answer
608 views

Backup & Restore Group Policy of Workgroup Window XP [closed]

I have around 20 system in Workgroup, I have configured a Group policy along with Administrative Template on one system. Do you know, how to transfer this Group Policy along with Administrative ...
1
vote
1answer
102 views

Knowing the number of users with a group policy aplied

The question is pretty simple. Is there any way to get the number of users on an Active Directory with a specific Group policy applied? For example, i need to know how many users has the strong ...
0
votes
1answer
97 views

AutoDisable Domain Login — Windows Server 2008 [duplicate]

Possible Duplicate: How to automatically disable inactive accounts when AD is not used Is it possible to Auto-Disable Domain Login id, if user don't login in his system for 10-20 days. is ...
-1
votes
4answers
254 views

Group Policy fault - Students force [closed]

Work at a school and we've got a scenario. We block F8 on all computers so students cannot access Safe Mode to bypass Group Policy... But students are logging into their accounts using AD, and they ...
0
votes
2answers
1k views

How do I set a local user a user rights assignment on an active directory GPO?

We have a process where I work, where any changes to active directory GPOs are performed on test servers, backed up and then the backups applied to the live AD. I'm in the process of amending a GPO ...
0
votes
1answer
117 views

gpo proxy server settinngs for all applications

i am trying to set all internet connections of all network PCs via proxy server that is installed on windows server 2003 i have editted proxy setting from gpo, but it only worked for internet ...
1
vote
2answers
132 views

Applying GPO: Applying Background

So I've created a few VM's and thought I'd have a go at trying to apply a few group policies to try and get my head around it. Put simply, all I want to do is to apply a GPO for a desktop background. ...
2
votes
1answer
3k views

Can I disable sticky keys through a Group Policy for all users?

Our users are constantly managing to turn sticky keys on and then call tech support because their keys are bring up windows instead of typing letters. Is there a way to disable StickyKeys in Group ...
3
votes
1answer
707 views

View windows 7 effective firewall rules when controlled by group policy

How do I view the actual, effective firewall rules for a Windows 7 computer where the local firewall is disabled but rules are established via group policy?: In particular, the primary users of ...
4
votes
3answers
7k views

Windows 2008 startup script will not run?

I am trying to get a very simple batch script to run when my Windows 2008 Server (R2) system starts up. I have added the script to the "Startup Scripts" in the local group policy by running ...
3
votes
2answers
6k views

Is there a way to centrally manage Dropbox/centrally disable LAN sync for all Dropbox clients on a Windows LAN?

We have a windows (7 pro) workstation LAN, managed via Group Policy. Lots of our users run Dropbox. Security concerns aside, one of our netadmins says that our routers/firewalls are handling and ...
0
votes
1answer
2k views

GPO Setting to allow workstations to use VPN

Is there a GPO setting that allows non-admins access to change their network settings. Which is what the SSLVPN does? If so, what is it? Background : I've got a few laptops that are used by Domains ...
1
vote
1answer
2k views

GPO Software Deployment Errors %%1274 and %%2

We migrated servers over the weekend to a new domain controller which had GPOs setup to deploy software. All of our clients had their OS reloaded, so they're "fresh" and most of them did get the ...
0
votes
1answer
104 views

Batch file installing executable only gives SYSTEM permissions

So, I have a couple of batch files that install some executables and they work, but when the executables setup shortcuts on the desktop only SYSTEM has access to them. Is there a way I can prevent ...
3
votes
3answers
38k views

Using a GPO to run a batch file once

Is it possible that I could setup a GPO list for newly installed computers with many batch files (mainly file moving) and these would run only once and never again? I am beginner on this and I ...