Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

2
votes
1answer
1k views

Why is my GPO not being applied on Terminal Servers?

I have a GPO linked to the Users OU, with some User Configuration settings set (specifically, settings for Folder Redirection). These work fine when users log on to their desktops, but they do not ...
6
votes
2answers
939 views

Correct way to update Google Chrome MSI through Group Policy

I am deploying Chrome through group policy. This is working fine. Obviously Chrome has a pretty regular update cycle. I am not allowing Domain Users to install Chrome updates. Having subscribed to ...
1
vote
1answer
679 views

GPO to set wallpapers

I'm searching for a solution to restrict my Active Directory users, so that they can set a desktop wallpaper from only from a selection of 5 different pictures. Our company has a set of 5 pictures. ...
0
votes
2answers
12k views

GPO to disable server manager icon does not restrict access for users

I have two servers in a domain, running on VMWare. WS2K8R2 domain controller and Server 2012 RD Session host. I want to disable/remove the server manager and powershell icons from the taskbar, and ...
1
vote
2answers
648 views

When does the Group Policy update interval start?

When exactly does the 90 minute (+ 30 minute random offset) Group Policy update interval begin? Is it when a PC boots into Windows? Also, is the 30-minute randomization offset applied each time ...
2
votes
2answers
1k views

AD Site Name not being applied to some servers

I have seen multiple servers/workstations in our AD that are in gpresult /R show Site Name: N/A even thou their subnet is defined in Active Directory Sites and Services. What could be the reason for ...
4
votes
1answer
4k views

Will User GPO settings apply to a Computer OU

If I have a GPO that contains a handful of user settings - if i apply this to a OU container which contains computer objects - will those User Policies then apply to any user who logs onto that ...
2
votes
1answer
115 views

Active Directory

If I have a situation where there is inappropriate use of security and distribution groups against file shares, and very liberal permissions, what would be the best way to go about handling it? Are ...
3
votes
1answer
7k views

how do I set static routes in windows domain to all computers at once

Setup, its a test lab and we have some odd requirements Windows 2012 Server running AD/DNS/DHCP 500 client machines used w/4 physical network interfaces each 2 interfaces are test resources, ...
14
votes
1answer
358 views

Group Policy Result summary says DC is member of “BUILTIN\Administrators”

Whenever I run the Group Policy Result wizard and select a Domain Controller as the target computer, the summary shows BUILTIN\Administrators in the list of "Security Group Membership when Group ...
-4
votes
1answer
663 views

How to enable USB access blocked using group policy [closed]

My USB Access is blocked using Group Policy. How can I enable it? I am using Windows XP professional 2002
0
votes
2answers
46k views

How do I import ADMX files for Microsoft Office 2013?

There is no ADM file (policy template) that I can find for MS Office 2013 so I can't figure out how to get the ADMX files imported to create GPOs. Any help would be greatly appreciated.
0
votes
1answer
48 views

Group Policy Preference Event id in Window XP [closed]

Whenever Group Policy Preference get auto-update after 90 minutes interval on Window XP. Is there any event id generated or not in Window XP? Please answer in Yes or No. If yes than what is Event Id ...
1
vote
1answer
64 views

Problems using GPO from Windows Server 2000 to Windows 7

So I'm using Windows Server 2000 (I know that's old and not effective but we are not in charge of the AD so no choice), and we don't have the access to GPO about users, only computers. That's why we ...
2
votes
2answers
1k views

Setting up GPO to apply upon SSTP VPN login

I have successfully setup up a VPN connection to an EC2 instance of Windows Server 2008 using SSTP. How do I get GPOs to apply upon VPN login?
0
votes
4answers
4k views

How to allow program updates without prompting UAC?

We have about 15-20 users who have this software installed. We have UAC enabled through GPO as you should, which means the software prompts for admin approval if a standard user trys to install it. ...
0
votes
1answer
429 views

Chrome Flash Updates in a Domain environment

One of the business critical applications for us is powered by Adobe Flash. Naturally, this comes with plenty of associated problems. The company wide browser in use is Google Chrome. We run a ...
1
vote
2answers
100 views

How to lock down internet use on server 2003

I have a bunch of users that need to use the internet but I want to limit what websites they can get too. I know u can go to IE and just select the diffrent websites but my users also use fire fox ...
-1
votes
1answer
267 views

Group Policy Event id [duplicate]

DC - Windows Server 2008 R2 Client OS - Window XP Which Event id is generated on Window XP, if my Group policy preference is automatically updated after 90 minutes interval. Sorry, i tried to find ...
4
votes
1answer
1k views

Targetting Printer GPO to a Subnet

I'm aware that you can target specific printers via the individual Item-level targeting to a subnet. I have about 20 printers that I would rather put the full group policy into maybe a WMI filter for ...
0
votes
0answers
276 views

Deploy MSI via gpo for computers, but install after users log in

Is there a way to deploy msi via gpo for computers, but the installation should occur after users log in? The installation should be delayed. The reason is that when installing msi after computer ...
6
votes
1answer
14k views

Can MS Office Protected View be Disabled via GPO?

I'd like to disable the Protected View MS Office files open in when opening files from email and other non-local places. We have a mixture of Office 20007, 2010, and 2013 in place so if these are ...
0
votes
1answer
194 views

Group Policy Preference not applied automatically

DC - Windows Server 2008 R2 Client OS - Window XP I have applied USB block Group Policy Preference setting for Window XP ( i.e Registry setting & usbstor.inf, usbstor.pnf denied policy ). But ...
6
votes
1answer
3k views

Is MSIZAP still useful, or is it obsolete?

I update flash using MSI files installed by group policy. However, with every update, about a third of the workstations fail to update (Windows Vista and Windows 7 32/64-bit editions). In the event ...
2
votes
1answer
1k views

Uninstall unknown software via group policy.

I'm wondering if this is an possible through group policy. Is possible to define a list of allowed programs and have the rest automatically un-installed when a user logs off/on their computer? ...
2
votes
2answers
5k views

Stuck on “removing managed software”

At one time, I had the Software Installation feature in GPO set to install the Java 7 update 11 MSI installer. Then, I removed it with the removal method "immediately uninstall the software from users ...
1
vote
1answer
139 views

GPO or Login script

i am unsure of what i should use. i have a site with about 40 users and 6 different departments which need access to different areas and differnt mapped drives. What is better for me to create a ...
0
votes
1answer
2k views

Path to gpt.ini missing

I am seeing the 1030 and 1058 errors for a remote Windows Server 2003 domain controller. Specifically the 1058 error says: > Event Type: Error Event Source: Userenv Event Category: None Event ...
3
votes
3answers
2k views

Windows logoff script to modify registry under HKCU

I'm trying to modify registry entries within HKCU at logoff. The corresponding script works okay when invoked manually. I was afraid there might be issues with a loopback policy kicking in, but ...
0
votes
0answers
571 views

Group Policy Email Signature Script

I have a VBS script that builds an Outlook Email signature and saves it to the user's machine. I want this to be called each time the user logs in, using group policy, but so far I've had no luck. ...
3
votes
2answers
11k views

Manage Win7 Performance Options via GPO

Our company has many virtual Windows 7 instances. Based on recommendations from VMWare, we want to customize the visual effects to optimize performance. We have found that we can change the following ...
1
vote
1answer
2k views

Disable Update in Java 7.13+

My users cannot install their own software. I'm using GPO and an .mst to customize and deploy Java 7 with the following options under Properties: AUTOUPDATECHECK = 0 EULA = 1 IEXPLORER = 1 ...
0
votes
1answer
79 views

Linking terminal server profiles with roaming possible?

I'm having a hard time setting up a few roaming profiles. I've a user who uses our terminal server but we want him to start using his local computer on the domain. This part I know how to do. I've ...
2
votes
1answer
495 views

How to disable signature prompt for third-party provider in Microsoft Word?

In Microsoft Word if you click on Insert> SignatureLine, you will see this message: We provided our client the ability to sign their document via certificates automatically genereated using our ...
1
vote
1answer
1k views

Ninite with a logoff group policy script

I'm trying to use a batch script to automate the updates of some apps using ninite with a group policy log off script. Here is my script: echo Copying ninite mkdir C:\temp mkdir C:\temp\ninite echo ...
4
votes
2answers
1k views

Invalid directory pathname trying to back up GPO

DFSR replication seems to be broken in my domain, and before starting to fix that, I wanted to take backups of the current Group Policy Objects. However, I am unable to back up the Default Domain ...
0
votes
0answers
57 views

Registry change on a key a server does not have

I have written a script that queries the registry on multiple servers looking for specific keys (dealing with iSCSI). After the query, I need to make changes to some of the keys in: ...
0
votes
1answer
102 views

Java group policy install succeeds but not fully installing

I am attempting to deploy java over group policy and am running into a few issues. Sometimes when the msi installs, the installer reports that it succeeded in the event viewer, but when I go to the ...
4
votes
2answers
20k views

how to disable a user to install program being domain user?

My client (XP) can install Chrome in his system being a domain user account. how can i stop him/them from installation of Chrome through Windows Server 2003.
1
vote
1answer
32 views

Registry Lookup

Is anyone on here familiar with a website that offers the ability to lookup specific registry/GPO settings such as AutoAdminLogon. I imagine this site would give you the full path to the GPO setting ...
3
votes
1answer
255 views

W2K8 - Why did GPOs break when I moved them to an OU?

I set up some GPOs and linked them to the top-level domain in the forest. They had security filtering enabled so that they would apply to a particular group, and everything worked great. My GPO tree ...
6
votes
4answers
13k views

Extremely Slow Login: Group Policy Printers

I'm having a few issues with a specific GPO that's causing 5+ minute delays on logins (not just initial logins either). The server is running Windows Server 2012 I'm adding printers under ...
1
vote
1answer
1k views

What's the differens between unlinking and removing a GPO?

Yesterday I was altering an automated installscript in order to remove a faulty package during client installation. All installation packages are linked to a certain "installation OU". I unlinked but ...
0
votes
0answers
145 views

vmware + active directory 2003 + windows xp sp2 + Fujitsu Zero Client + GPO propagation issues

i am trying to set up a domain controller with windows server 2008 (2003 functional level), and windows xp sp2 clients (both virtualized on a Fujitsu vmware server). My windows xp sp2 clients have ...
1
vote
1answer
266 views

Central store causes slolwness in gpmc and when you edit a gpo

i created a central store because i was dealing with the point and print windows 2008 issue, the thing is some of my dc are behind slow vpns, so, in those dc when you try to edit a gpo with ...
1
vote
1answer
189 views

Local Group Policy IE9

I have this weird issue on Windows 7 64bit desktop, I am trying to lock it down from Internet usage (it's a stand alone machine with several local users), so I use local GP. Well, I enabled the ...
0
votes
1answer
987 views

How to add port exception range via group policy

I am currently working in a Windows Server 2003 environment. We've recently picked up Spiceworks and are having some issues getting all of the machines on our network scanned properly. So far it seems ...
2
votes
1answer
1k views

windows server 2012 remote desktop session SSL certificate

My windows server 2012 currently seems to have gone on holiday and is ignoring the SSL certificate I have asked it to use for Remote Desktop connections via wmic ...
0
votes
2answers
361 views

SBS 2011 Group Policy and Terminal Servers

I'm trying to configure group policy for the terminal servers, and the users that will logon to it. I created a OU in active directory called TERMINAL-SERVERS, then i moved Terminalsrv1 and ...
2
votes
3answers
23k views

Install Trusted root certificate authority certificate via GPO

We have a Win2k8 as a Domain Controller in a domain with workstations that run Windows XP. I would like to be able to install via GPO a new trusted root certificate authority certificate that I've ...