Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
1answer
275 views

Deploy Adobe Pro X GPO Issues

I am trying to deploy adobe pro x extended to clients machines. The deploy is working fine except when you launch Adobe, it asks to enter the serial number. I have used the adobe customization x ...
0
votes
1answer
3k views

Group Policy for DNS Server Addresses

This question deals strictly with the methodology of using Active Directory to publish DNS settings and controlling the DNS server address order to domain attached clients. This is not asking about ...
0
votes
1answer
84 views

what user profile is used for user entring to a machine with “enter-pssession”

in an AD environment, where a user is part of "Domain Administrator", now if that user logs in to a machine using remote powershell using "enter-pssession" will it create any user profile for the ...
1
vote
2answers
1k views

Proxy Settings per Machine not working on windows server 2008 R2 SP1

i have a very interesting problem and would appreciate any help for it. In my scenario i have scripts which bring up a VM inside a domain. Now i want to enable internet access for all the VM's and ...
1
vote
3answers
753 views

deploying AV via GPO only to workstations

We have a small (>100 machines) Windows domain running Server 2008R2. We use Symantec Endpoint Protection 12.1 I want to have GPO deploy the AV software to client machines automatically, but only ...
2
votes
2answers
1k views

How to deny folder redirection for RDP to server

We have a few users running Windows 7 Enterprise. Group Policy does folder redirection for the Desktop and Docs. Users also have to log into a remote server frequently and do not want home folder ...
10
votes
8answers
16k views

ActiveSync devices causing accounts to lockout

When a user changes his account password for whatever reason (read: expired), and the old password is stored in his mobile device connected through EAS. This will cause his account almost immediately ...
1
vote
2answers
316 views

Windows 2008 R2 - Restrict installation of “DHCP Server Role”

I've got a bunch of machines running in a sensitive network environment. I'm worried that one of the users might install the DHCP Server Role on one of the machines in the network and hose the ...
0
votes
3answers
2k views

Password Policy seems to be ignored for new Domain on Windows Server 2008 R2

I have set up a new Windows Server 2008 R2 domain controller, and have attempted to configure the Default Domain Policy to permit all types of passwords. When I want to create a new user (just a ...
4
votes
2answers
104 views

Windows 2003 DC GPO Asking for Password on Startup

Simple answer I am sure...I an trying to deploy Office 2010 to clients via the GPO startup script but am having issues. Soon as the computer starts, it prepares network connections then goes on to ...
0
votes
2answers
109 views

Restricted Groups changes vanish when Group Policy no longer applies

I need to remove users from the Local Administrators group - it's built up a lot of them over time. So I have created a temporary Organizational Unity with a temporary GPO attached to it, and I've ...
0
votes
1answer
1k views

Hiding all kind of update notifications for users using GPO

Has someone a GPO in place, or knows how to create one, that hides all kind of update notifications for normal windows accounts that log on over RDP? Especially the notifications about pending ...
2
votes
2answers
2k views

“Common Desktop” icons not merging for one group

We are deploying desktop icons across our network to Windows 7 machines via Group Policy Preferences (Registry, User Shell Folders) and have found that for most users this works great - the "Common ...
3
votes
4answers
3k views

802.1x PEAP GPO that trusts self-signed CA certificate

I am working on a Freeradius backed 802.1.x authentication infrastructure for our wireless clients. I am using a rather generic Freeradius configuration with EAP-PEAP. Our clients are predominantly ...
1
vote
1answer
2k views

domain user disabling screensaver

I have the following situation: Due to security reasons the screensaver is activated after 10 minutes, and immediately locks the screen. There are GPOs preventing the user from changing the ...
11
votes
2answers
12k views

How can I manipulate Windows 7 Libraries via Group Policy?

I'm trying to add and remove Library locations from Windows 7's "Library" locations in for each of my users. While its easy to do this from the desktop, and its easy to disable libraries appearing ...
1
vote
2answers
147 views

GPO uninstalled program instead of installing it

We have a couple computers that are having issues wherein every time they reboot, instead of installing a software by GPO, it instead removes it. The software works fine on most, but some of our newer ...
2
votes
1answer
268 views

PEAP Trusted Root CA setting not being Applied as directed by Group Policy

I have created a GPO and linked it to a test OU. This GPO has Windows 7 Wireless Policy that directs the machines to auth on the network with PEAP in computer auth mode. This auth is being done with ...
-1
votes
1answer
597 views

locking down windows 7 lab computers through group policy

I'm kinda new to Windows administration, so please forgive me if I sound like I don't know what I'm talking about. We have a domain environment that has a mixture of Windows server 2003 and server ...
2
votes
1answer
801 views

Wireless Profile via Group Policy - Specific Trusted Root not Listed?

So I am trying to use Group Policy to configure the wireless settings on a bunch of laptops. We are using a third party cert that isn't showing up as an option in the list of Trusted Root ...
1
vote
1answer
3k views

I want a user to see a shortcut on their desktop only when they log into a virtual terminal session

We have a set of Windows Virtual Terminal servers, with some connecting to them via PCs (allowing them to see their roaming profile desktops on the PC's desktop, and on their VTS desktops) and some ...
2
votes
1answer
86 views

disable lockout policy for some workstations

our account policy is set to lock out users after 10 failed login attempts. We have a proxy authentication server which is a member of AD, it get auth requests from browser and relay them to the DC. ...
1
vote
2answers
1k views

Microsoft Group policy isn't pushing Citrix profile policy settings

We run 22 XA6 off of one image through a provisioning server. We also run another 5 doing the same thing (but these 5 do not publish desktops). Now on the 22 servers we have, we will come in on any ...
0
votes
1answer
60 views

Trying to delete an object from the local group policy editor on a windows 2003 r2 member server in a domain

I've used this Serverfault Article in order to add additional event logs for some webservices to the local group policy on my interfaces server. For 2 objects i added, i had a mistype and it created 2 ...
1
vote
2answers
107 views

Firewall GPO will not go away

I recently created a GPO for turning on the firewall for everyone, but now I need it removed so that everyone can manage there own firewall. I tried to delete it and it just goes to a default ...
0
votes
4answers
4k views

Disable remote desktop through CMD or script in Windows 2008

I'm looking for a way to disable Remote Desktop login for Windows 2008 for a specific user (a local administrator account), either using the command line or a script (such as VBS) in Windows 2008. I ...
1
vote
4answers
2k views

Create and map drive based on login

I want to create a folder for each user if they do not already have one on a Windows file server when the user logs in each time. So for example, I have user "jdoe", I would like to be able to ...
1
vote
4answers
6k views

How can i disable download from all browsers using group policy for domain users in windows server 2008 R2 Standard Edition?

We have using Windows server 2008 R2 edition. I need the group policy for disable download option for domain users. Anyone please let me know the policy settings. Thanks in advance.
1
vote
1answer
641 views

Installing Software Using GPO

I would like to install Google SketchUp using GPO, so that it installs automatically to client machines, at log on. I have found the MSI package, and copied it to an accessible network share. ...
1
vote
3answers
683 views

Do enterprises expect MSIs to uninstall previous product version?

I am about to give deliver an upgrade to a product in the form of an MSI to an enterprise. I believe they deploy this to various workstations via GPO. What is the likely sequence of events in ...
0
votes
1answer
2k views

Disable windows sbs2008 updates via GPO

I have a windows sbs2008 server and i would like to stop widnows updates from being downloaded via a group policy i have managed to fidn the policy then when i clicked update it took me to a different ...
3
votes
2answers
753 views

Setting up printers in active directory

I need some help setting up a printer in Active Directory. Specifically, deploying them via GPO. I want to have a computer associates with a specific shared computer so that anyone sitting there is ...
2
votes
1answer
570 views

Different idle times (screen locking) for local vs. remote logins

Is it possible to have different screensaver locking times for local vs. remote (rdp) logins on Windows? I don't know much about Windows admin, just that this config is pushed through GPO.
0
votes
2answers
486 views

User Cannot Change Password

I am having a situation where I need to restrict the user access to change their password in Active Directory (Windows Server 2008 Standard) environment. What I need is to check the Account Options ...
10
votes
1answer
15k views

How can I restrict the java plugin to run only on certain sites in Internet Explorer?

I want to secure our centrally managed computers better and it is very difficult to automatically deploy the java runtime, but how to do that is another question. I find the security of Java ...
1
vote
1answer
2k views

GPO: Allow log on locally, admins access only

I have a small group of desktop servers and I do not want anyone to be able to log on to them locally except for administrators. We have a Windows 2003 AD and the servers are running Windows 7 Pro. ...
-1
votes
1answer
1k views

The Server is unwilling to process the request. GPO

I am simply trying to add GPO to an OU for WSUS. For some reason it is not applying the GPO when the users log in. There was a Websense GPO in there that i can not delete. It tells me the Server ...
1
vote
0answers
570 views

Group Policy Preferences File Association on older Clients

I have a GPP for file association aka "open with". It works as expected on Server2008/Win7 but does nothing on Server2003/WinXP that has both the GPP Client KB943729 and GPP hotfix KB982051 installed. ...
2
votes
1answer
119 views

Desktop Folder Redirection Consistency

I have changed our Desktop folder redirection policy to point to a new share on the server. Some computers are accepting the new policy and displaying the new shortcuts. Others display no icons and ...
4
votes
3answers
234 views

What setting in XP stops executables being run unless you're an administrator?

If I go to a workstation in a certain large organisation and try to run an executable from a USB drive it doesn't let me. What setting is this in Group Policy or wherever else that does this?
8
votes
1answer
4k views

Two ways of deploying printers via group policy

I've noticed two options for deploying printers via group policy: Create and link Group Policy in GP Management, add printer(s) via User Configuration > Preferences > Control Panel Settings > ...
2
votes
3answers
4k views

Windows Server 2003 - How to control sleep settings through GPO?

Is there a way to control sleep / power settings in a Windows Server 2003 AD via GPO? Ideally, without installing anything on the client, or running scripts on the client? Ultimately I am looking ...
3
votes
2answers
461 views

Is there a way to disable group policy for a couple of minutes on a certain computer in a 2008 domain?

I'm trying to disable the group policy on a computer for a limited time without logging out and back in. Is that possible?
0
votes
2answers
132 views

GPO: How to determine why an .msi didn't install via Active Directory

I've created a GPO to push out an .msi packages to PCs in a particular OU. I've confirmed that: the target client PCs firewalls are not blocking traffic the folder containing the .msi is shared on ...
2
votes
1answer
158 views

windows server 2008 standard: script for modifying account lockout policy for AD

I am currently preparing for some setup procedures for active directory setup. The servers are installed with default policy which includes account lockout policy. However, the setup requires user to ...
6
votes
1answer
750 views

Server 2008 GPO not applying to Windows XP clients over site-to-site VPN

I have a Server 2008 R2 based Active Directory domain. Our default GPO has a few printer/network drive maps that both work fine locally for clients running Windows 7 as well as Windows XP (after ...
3
votes
2answers
666 views

Automatically set static routes between two networks without dhcp or default gateway

I have a windows domain network with two different subnets. Both are connected trough VPN gateways. DHCP and default gateway is an exiting router blackbox. Unfortunately I have very limited control ...
-3
votes
1answer
119 views

Group Policy / Roaming Profile Issue

I am running a Server 03 DC and this is happening on a Windows 7 PC. Each time we tried logging in as the user the only thing coming up is a temp profile. We thought it might be an issue with the way ...
0
votes
1answer
636 views

Windows 2008 R2 GPO Logon script not running on Windows 7

I'm setting up a brand new domain running on new servers where I work. In the GPO I can map drives which works, but I can't for the life of me remove the drives if say a user's membership changes. ...
1
vote
0answers
856 views

Why is my access being denied when I am an adminstrator on my Windows Server 2003 Installation?

I have recently been made an Administrator on our server (running Win Server 2003) and have been given all the same permissions and made part of the same groups as our other admin but when I try to ...