Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
1answer
590 views

Group Policy Recovery Agent EFS not being used

I am trying to get EFS working on our workstations. First when I tried to set a directory to be encrypted I got a warning about the Recovery Agent certificate being invalid. It turned out that the ...
0
votes
2answers
162 views

Need a GUI app for group policy login script

I wrote a C# 4.0 application that works on a Windows computer but when using Group Policy to set it as a login script, it does not run. The application is being called from the same location and ...
1
vote
2answers
757 views

GPOs are on users gpresult but not updating settings

I have the GPOs setup correctly for WSUS and even just adding a favorite in IE but none of these are working. Is there another setting somewhere I'm missing to get these things to force? Windows ...
2
votes
3answers
2k views

Windows 7 blocks network access to network-installed apps

Windows 2008 R2 domain. Users, running Windows 7 Enterprise, are trying to run some software from a network share. Specifically, I've tested this with MATLAB and PuTTY. When starting, MATLAB has to ...
2
votes
1answer
3k views

GPO - Block 3rd party cookies for IE 8

I am trying to find some settings in GPOs that explicitly say, "Block 3rd Party cookies" in IE. I am looking under policies>admin template>windows components>IE> IE control panel>Security page. ...
3
votes
1answer
2k views

Enabling SSL for Remote Desktop

Ok so I'm trying to remove a number of my systems from our Nessus scan from having this medium vulnerability. Microsoft Windows Remote Desktop Protocol Server Man-in-the-Middle Weakness I set the ...
1
vote
1answer
4k views

Task Scheduler Cannot Apply My Changes - Adding a User with Permissions

When I login to the server using a domain account with administrator privileges and create a task in the Task Scheduler, I am unable to successfully save the Task once I select the following options: ...
3
votes
3answers
1k views

Group policy not applying to security group

Preface: I have enough privileges to create GPOs in my OU, and have made a few of them for some simple tasks (like deploying a printer to certain users). Not actually a sysadmin...I'm a developer who ...
1
vote
1answer
280 views

Active Directory Restricted Group confusion

I am trying to implement Restricted Group policy for my company's AD infrastructure, namely standardizing the local "Administrators" group. The documentation (and various webpages) said that the ...
0
votes
1answer
835 views

Auto log off windows machine after certain number of minutes

I have three machines on my network, two are windows xp and one is windows 7. i would like to have all three machines log a user off if they are on for more than 60 minutes. And I would like this to ...
3
votes
2answers
4k views

Group policy to disable notifications of particular errors?

How do i disable the notifications of particular errors? A little background to my issue. During the installation of the Kaspersky, it disables all the windows firewall for all except the domain. I ...
2
votes
0answers
718 views

Is GPP Item Level Targeting any faster or slower than WMI filtering?

I need to filter a GPO so that it only applies if an application is installed. From what I can see, I should be able to do this either with WMI or with GPP item level targeting. Is there a performance ...
3
votes
2answers
176 views

Do the GnuWin32 tools require the POSIX subsystem to run?

I would like to remove Posix from the Group Policy Object Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Security Options\System settings: Optional Subsystems. Do ...
1
vote
2answers
63 views

Deploy all MSIs from a folder-share to group of computers via domain group-policy?

Is it possible to deploy all MSI packages within a folder-share to a group of computers, with a single group-policy object? If so, how?
0
votes
1answer
306 views

Microsoft Office 2007 system missing from GPedit

I'm trying to change some security settings in Group Policy for Windows 7 x64 to comply with DISA STIG viewer; its flagging a lot of presets for the 2007 Microsoft Office Suite. When I attempt to ...
4
votes
3answers
17k views

How do you override a GPO with another GPO?

If there is a GPO which is applied to all Domain Computers which disables something, is there a way to re-enable the disabled thing for some hosts in the domain, without taking those hosts out of the ...
1
vote
1answer
802 views

Deny permissions to resouces outside of a users own OU

I am fairly new to Active Directory and this may be a simple thing to do but I am unsure of how to do it. I have a Organizational Unit in my AD named WI, in that OU I have 2 groups WI Users and WI ...
6
votes
4answers
1k views

GPO to Disable Screensaver only when connected via RDP

Is there a GPO option to disable the idle-time screensaver for RDP connections, but keep the idle-time screensaver options for interactive logins? Edit: All users are TS users as well a local so they ...
0
votes
2answers
888 views

WMI query to check setting “Reversible Encryption” in Windows XP

In Windows XP, there are two settings in Group Policy I'm looking at: Password must meet complexity requirements Store password using reversible encryption Both of these settings are under Local ...
0
votes
2answers
325 views

GPO Software Restriction Policy

Just a quick little question here, i am trying to block exe's and such from running from users home drives but running into problems. Sure I can add a hash rule for all the exe's but this is tedious ...
1
vote
2answers
10k views

How do I execute a powershell script via group policy?

How can I execute a powershell script by means of group policy on a number of machines? The script is signed and will run on the targeted machines when you right-click and select "run with ...
5
votes
3answers
6k views

Windows Server 2008 R2 Map User Specific Drive

On our old Windows 2003 SBS, the guy that set up the network created a login script that fired to map some drives and add a network printer. I would like to do away with that script and just use the ...
1
vote
0answers
904 views

Active Directory Mapped Drive won't stay connected

WinSrv08R2. I have a drive mapped to Win7 clients via Group Policy that's on another computer (an OS X server, mapped via "\serverIP\folder"). EVERY time the user logs out and then back in, it pops up ...
-1
votes
2answers
3k views

Protect SYSVOL folder without damaging the execution of the GPOs

Ever since I begun working with Windows Server 2008 I have noticed that the SYSVOL folder C:\Windows\SYSVOL\sysvol is shared and the NTFS permissions for the Authenticated Users group are almost ...
2
votes
2answers
91 views

WSUS defered reboot

I am trying to find a way of allowing my users to defer the reboot after updates have been applied for 4 days and then force a reboot if they have not already rebooted in that time. Please correct me ...
1
vote
1answer
283 views

Unable to Edit GPOs Despite Being Member of Requisite Groups

My user is a member of Domain Admins, Enterprise Admins, and Group Policy Creator Owners. However, I'm trying to edit a GPO that is in place which will add a domain to the trusted sites for our domain ...
0
votes
1answer
276 views

Deploy Adobe Pro X GPO Issues

I am trying to deploy adobe pro x extended to clients machines. The deploy is working fine except when you launch Adobe, it asks to enter the serial number. I have used the adobe customization x ...
0
votes
1answer
3k views

Group Policy for DNS Server Addresses

This question deals strictly with the methodology of using Active Directory to publish DNS settings and controlling the DNS server address order to domain attached clients. This is not asking about ...
0
votes
1answer
84 views

what user profile is used for user entring to a machine with “enter-pssession”

in an AD environment, where a user is part of "Domain Administrator", now if that user logs in to a machine using remote powershell using "enter-pssession" will it create any user profile for the ...
1
vote
2answers
1k views

Proxy Settings per Machine not working on windows server 2008 R2 SP1

i have a very interesting problem and would appreciate any help for it. In my scenario i have scripts which bring up a VM inside a domain. Now i want to enable internet access for all the VM's and ...
1
vote
3answers
799 views

deploying AV via GPO only to workstations

We have a small (>100 machines) Windows domain running Server 2008R2. We use Symantec Endpoint Protection 12.1 I want to have GPO deploy the AV software to client machines automatically, but only ...
2
votes
2answers
1k views

How to deny folder redirection for RDP to server

We have a few users running Windows 7 Enterprise. Group Policy does folder redirection for the Desktop and Docs. Users also have to log into a remote server frequently and do not want home folder ...
10
votes
8answers
17k views

ActiveSync devices causing accounts to lockout

When a user changes his account password for whatever reason (read: expired), and the old password is stored in his mobile device connected through EAS. This will cause his account almost immediately ...
1
vote
2answers
323 views

Windows 2008 R2 - Restrict installation of “DHCP Server Role”

I've got a bunch of machines running in a sensitive network environment. I'm worried that one of the users might install the DHCP Server Role on one of the machines in the network and hose the ...
0
votes
3answers
2k views

Password Policy seems to be ignored for new Domain on Windows Server 2008 R2

I have set up a new Windows Server 2008 R2 domain controller, and have attempted to configure the Default Domain Policy to permit all types of passwords. When I want to create a new user (just a ...
4
votes
2answers
104 views

Windows 2003 DC GPO Asking for Password on Startup

Simple answer I am sure...I an trying to deploy Office 2010 to clients via the GPO startup script but am having issues. Soon as the computer starts, it prepares network connections then goes on to ...
0
votes
2answers
111 views

Restricted Groups changes vanish when Group Policy no longer applies

I need to remove users from the Local Administrators group - it's built up a lot of them over time. So I have created a temporary Organizational Unity with a temporary GPO attached to it, and I've ...
0
votes
1answer
1k views

Hiding all kind of update notifications for users using GPO

Has someone a GPO in place, or knows how to create one, that hides all kind of update notifications for normal windows accounts that log on over RDP? Especially the notifications about pending ...
2
votes
2answers
2k views

“Common Desktop” icons not merging for one group

We are deploying desktop icons across our network to Windows 7 machines via Group Policy Preferences (Registry, User Shell Folders) and have found that for most users this works great - the "Common ...
3
votes
4answers
3k views

802.1x PEAP GPO that trusts self-signed CA certificate

I am working on a Freeradius backed 802.1.x authentication infrastructure for our wireless clients. I am using a rather generic Freeradius configuration with EAP-PEAP. Our clients are predominantly ...
1
vote
1answer
2k views

domain user disabling screensaver

I have the following situation: Due to security reasons the screensaver is activated after 10 minutes, and immediately locks the screen. There are GPOs preventing the user from changing the ...
11
votes
2answers
12k views

How can I manipulate Windows 7 Libraries via Group Policy?

I'm trying to add and remove Library locations from Windows 7's "Library" locations in for each of my users. While its easy to do this from the desktop, and its easy to disable libraries appearing ...
1
vote
2answers
149 views

GPO uninstalled program instead of installing it

We have a couple computers that are having issues wherein every time they reboot, instead of installing a software by GPO, it instead removes it. The software works fine on most, but some of our newer ...
2
votes
1answer
271 views

PEAP Trusted Root CA setting not being Applied as directed by Group Policy

I have created a GPO and linked it to a test OU. This GPO has Windows 7 Wireless Policy that directs the machines to auth on the network with PEAP in computer auth mode. This auth is being done with ...
-1
votes
1answer
627 views

locking down windows 7 lab computers through group policy

I'm kinda new to Windows administration, so please forgive me if I sound like I don't know what I'm talking about. We have a domain environment that has a mixture of Windows server 2003 and server ...
2
votes
1answer
831 views

Wireless Profile via Group Policy - Specific Trusted Root not Listed?

So I am trying to use Group Policy to configure the wireless settings on a bunch of laptops. We are using a third party cert that isn't showing up as an option in the list of Trusted Root ...
1
vote
1answer
4k views

I want a user to see a shortcut on their desktop only when they log into a virtual terminal session

We have a set of Windows Virtual Terminal servers, with some connecting to them via PCs (allowing them to see their roaming profile desktops on the PC's desktop, and on their VTS desktops) and some ...
2
votes
1answer
86 views

disable lockout policy for some workstations

our account policy is set to lock out users after 10 failed login attempts. We have a proxy authentication server which is a member of AD, it get auth requests from browser and relay them to the DC. ...
1
vote
2answers
1k views

Microsoft Group policy isn't pushing Citrix profile policy settings

We run 22 XA6 off of one image through a provisioning server. We also run another 5 doing the same thing (but these 5 do not publish desktops). Now on the 22 servers we have, we will come in on any ...
0
votes
1answer
62 views

Trying to delete an object from the local group policy editor on a windows 2003 r2 member server in a domain

I've used this Serverfault Article in order to add additional event logs for some webservices to the local group policy on my interfaces server. For 2 objects i added, i had a mistype and it created 2 ...