Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

13
votes
2answers
387 views

What is the industry standard method for administering the change of the local administrator password for all machines on a domain?

Although there appears to be three available options, one of which is actually secure, there seems to be only two available choices that will be able to impact machines that are not powered on at the ...
0
votes
1answer
728 views

Installing a software through group policy

I want to install a software through group policy to the users in a particular OU. I have production OU. I have 4 users in that OU I have to apply group policy in such a way that a software should be ...
0
votes
0answers
1k views

Scheduled Task to shutdown computer after 2 hours of inactivity?

We have around 900 machines in two locations. 95% of these machines are shared, and we find users don't log off or shutdown as often as they should to get updates. I thought I would create a ...
0
votes
1answer
302 views

How do I stop Group Policy applied to an OU from being inherited by a Sub OUs?

I have an OU "Check" and another OU "subCheck". I am applying Group policy to the Check *OU*. It should not affect the sub OU. What can I do to accomplish this? I tried to disable the inherited from ...
0
votes
1answer
2k views

Applying user group policies to a single machine

I'm trying to apply user policies to lock down the changing of the windows theme. However I only want this policy applied to one computer (it is a terminal server running Server 2012), let's call it ...
0
votes
0answers
210 views

Java 1.7.21 install via GPO fails on Win 8

Attempting to distribute Java runtime 7 update 21 via GPO to Windows 8. Problem is the GPO fails with: The install of application Java 7 Update 21 (64-bit) from policy Workstation 64-bit failed....
1
vote
1answer
466 views

Windows 7: Allow installation of software by non-admins?

I'm running a public library with PCs available for people to use. I'm setting up the next upgrade for the PCs, which will be running Windows 7. We use Deepfreeze to maintain the PC's state (a brief ...
0
votes
1answer
1k views

terminal server, hide desktop icons doesn't work as expected

In the User part of a GPO that i activate for users who log on a terminal server, i tried to set the Administrative Templates, Desktop, "Hide and disable all objects on the desktop" (may be that the ...
4
votes
1answer
26k views

Local Group Policy not updating. RSOP and GPResult show stale data

This issue exists on a Windows 7 Pro x64 machine (Dell Inspiron E6420). I am trying to adjust a setting using gpedit.msc, but the change never seems to take effect. By that, I mean the setting that is ...
0
votes
1answer
784 views

GPO grant user permissions to install allowed software

I would like to grant users using GPO to self manage and install selected software (flash, skype, Java) but not granting users admin rights. I've looked up software restriction policies, is it the ...
0
votes
2answers
1k views

Remove “Disconnect” From Server 2012

I have a RDS (Terminal Server) based on Windows Server 2012, and have used the program "Classic Shell" to bring back the Start Menu. I have setup a test user account (User.1) with the Classic Shell ...
2
votes
1answer
2k views

GPO shows as being applied but the settings were not implemented

I created a new GPO to change users IE favorites, previously I had 6 different GPOs to manage different favorites for different kinds of users and users in different locations, but recently my boss ...
0
votes
1answer
44 views

Windows Active Directory Home Folders

Are Home Folders as configured in AD Users and Computers any different to simply creating a mapped drive through GPO Preferences to H:?
3
votes
1answer
547 views

Permission to create GPOs

Is the sole reason of the Group Policy Creator Owner group just to dish out permissions to other users to create (and then modify only their own) GPOs in the domain? Is there another way to do this ...
0
votes
1answer
863 views

Disable USB mass storage via group policy based on the time of day?

I would like to disable USB mass storage for a group of users during specific hours of the day (lets say, 9AM to 5PM). I know that with Windows Server 2008, there is a group policy that will disable ...
0
votes
1answer
998 views

How to unblock exe-file and windows-help-chm-file on a mapped network drive using Windows Server 2008 Active Directory group policy?

We have a mapped drive M: in our Server 2008 R2 64 AD Domain. There is an important exe and a windows help file on the drive that all users need to access from there. How can I remove the security ...
0
votes
1answer
63 views

Windows Remote Desktop: Different configurations based on location

Is it possible to set up remote desktop (via group policy or another method) so that it has different settings based on where the user is connecting to the session from? In my scenario, I'd like to ...
0
votes
1answer
2k views

Assigning software through group policy - how does client know if the package is installed or not

I'm recently trying to use group policy to push out some software at our company. We're running server 2008 R2. When I create the computer GPO and assign the package it will install the first time. ...
-1
votes
1answer
161 views

Is “Domain Controllers” the correct scope for Update Services Client Computer Policy group policy?

My company migrated from Windows SBS 2003 to 2011 and there are a quite a few redundant group policies. One policy in particular is the "Update Services Client Computer Policy", it looks like the ...
1
vote
1answer
132 views

Conditional authentication based on group membership in AD

I need to authenticate AD users logging into their workstations only if they belong to the security group AT THE MOMENT OF AUTHENTICATION. They're being added to this privileged group right before ...
2
votes
2answers
1k views

Group Policy that overrides Windows Authentication?

We have some servers that we're trying to allow domain users to log into the web site. Unfortunately, it seems that only administrators can do so. All other users get 401.2 authentication errors. I'...
2
votes
1answer
1k views

Windows domain software deployment not applying at startup - NETLOGON error 5719

I've recently tried to push out software (and updates) through windows server 2008 gpo. I did not work for quite some time and I wasn't getting any indication that it was even trying to install the ...
1
vote
2answers
2k views

Restricted Groups not working

I have several GPOs set up on our domain at work, in one GPO I have the group set to be Local Administrators via the Restricted Groups feature. However, when one of the users in this group logs in to ...
0
votes
0answers
72 views

Permitting Remote Deskop Users group to login in

I've been running into an issue where members of our IT department are unable to login to the servers we have recently set up. I have added the IT group to the Remote Desktop Users group and they are ...
1
vote
2answers
93 views

GPO - Group Policy Object acknowledgement

Is there any way to get Automatically Acknowledgment on My Domain Controller, as soon as Group Policy Object example: ABC is applied to Domain PC. Server OS - Window Server 2008 R2 Standard Edition ( ...
0
votes
1answer
148 views

Group Policy Update Confirmation

Server OS - Window Server 2008 R2 Standard ( Domain Controller ) Client OS - Window XP & Window 7 ( Desktop & Laptop ) I have implemented some Group Policy including Group Policy Preference ...
4
votes
2answers
3k views

GPO Enforced Precedence

What is the precedence for Enforeced GPOs, I can't really find any MS articles which give a refined answer. My current understanding is as follows: Lets say we have 5 GPO's - GPO1 through GP05. I ...
1
vote
1answer
600 views

Windows 7: Update a file in the system32 folder via GPO

I'd need to update a Windows file in the system32-folder I've made a script to do this task. When I run it locally on a system (from a prompt with elevated privileges) it works fine. I've created a ...
3
votes
1answer
3k views

How to enable Kerberos Authentication Service auditing on 2008 server

I have a 2008-level Windows domain running 5 x 2008 (non-R2) DCs (it's on the roadmap to migrate to R2 or possibly 2012 in the next 9-12 months, but this project needs to be working first), and I need ...
3
votes
1answer
1k views

what does local group policy do in Dc?

when you have a dc, in fact you don't have LSD because it has migrated to GSD .But if you type Gpedit.msc in Run box it will open local group policy console . I've read that policies you have set in ...
2
votes
1answer
1k views

What happens if unlink a GPO?

If I have a GPO that contains a handful of settings - let' say, configured to implement WSUS configuration, some random registry entries, some other Control Panel settings etc. If I unlink the policy,...
0
votes
3answers
4k views

Server service fails to start, event 7023, error 1079

Hello, Environment: Windows Server 2008 R2 fully patched, working as Domain Controller in Win 2003 native domain. Users started to report problems with share, it turned out that server service won't ...
0
votes
2answers
2k views

How to disable creation of VPN connections on Windows Server 2008 R2

I have a problem: users are connecting to our terminal server via remote desktop, and then creating VPN connections from it to another server, which then changes the networking and stops all ability ...
3
votes
1answer
45 views

How to easily remove a large number of GPOs from Group Policy Management

I was setting up a group policy when I noticed what appears to be a large number of GPOs created by Kasperky AV. Im positive they were from a failed installation of the management software 2 years ...
0
votes
1answer
1k views

Open custom port for IIS windows firewall or group policy

I am running Windows SBS 2011. I have added a web site to IIS using port 8888 and it works perfectly when connecting locally, but not from any other PC on the network (domain). I think I need to open ...
1
vote
1answer
543 views

GPO still applying old setting

AD functional level: 2003 4 DCs: One Server '03 R2 (SP2), three Server '08 R2s. GPO: ADM for Microsoft Communicator created a few years ago. Usage: The ADM does a few things, but one of which is ...
1
vote
1answer
749 views

Group Policy for Office 2013 Home and Business

On our network we have Office 2013 Group Policy settings, but users that have Office 2013 Home and Business installed are not seeing these settings. I have checked the RSOP.MSC, and the settings are ...
0
votes
1answer
1k views

No Remote Desktop Serivces Available in Group Policy?

I have a Windows Server 2008 SP 2 Standard domain controller. Attempting to enable RDP on workstations throughout the network using Group Policy. Everything I see says to go to Computer Configuration--...
1
vote
1answer
162 views

Win8 in Active Directory - remove Apps

We have a joined a Win8 Client for the first time to our AD. Before doing so, I removed all uneccessary Apps and Programs which came pre-installed. We have no clean deployable image for this time. ...
2
votes
1answer
1k views

Group Policy Default Policy is applied from a DC that no longer exists

I have been trying to get the company I am currently working for up to snuff on thier active directory implementation, unfortunately I have hit a bit of a snag. I was modifying their default domain ...
5
votes
1answer
3k views

Company Wide Windows Auth with Chrome and Firefox

I know that we can allow Firefox to allow passing through of Windows credentials by editing the following about:config settings --If using Kerberos-- network.negotiate-auth.trusted-uris network....
0
votes
1answer
2k views

Win 2008 Group Policy : Does Drive Maps (GPP) run before Logon Script setting? Both user configs are set within same policy [duplicate]

I'm on Win 2008 R2 DC with XP and Win7 desktops. On one of User GPOs, there is Drive Maps and Logon Script configured. Drive Maps are under GPP, and Logon Script is under user config. Both user ...
1
vote
1answer
49 views

Windows Server denied policy administrator deadlock

I was trying to deny some administrative tools access to certain domain user, so I opened the policies manager and enabled the deny control panel access, and other (including MMC) in local user... ...
2
votes
1answer
129 views

Server 2012 Group Policy Script

What is the best way through Group Policy to make a registry file run on logon for computers in a domain? I'm testing on a Windows Server 2012, with Windows 8 clients. I have created a Group Policy ...
0
votes
2answers
2k views

GPO error 0x80070547 with Server 2008 R2 and XP SP3, but not Win7

I have a Windows 2008 R2 server managing XP SP3 and Windows 7 SP1 clients. There are no issues with the Windows 7 clients. However, on the Windows XP clients, I get errors for power options, ...
1
vote
1answer
932 views

Is it possible to increase the max limit of 10 pc's to any number of times without making the user a domain admin?

Normally a domain user has a maximum limit for 10 computers to join to a domain. But what i want to know is, is it possible (by joining a account to a group) to do this any number of times without ...
0
votes
1answer
3k views

Why is my loopbacked GPO reporting as disabled

Let me start by saying that my experience with GPO is limited to tentatively poking at settings until they fall into place by trial and error. It is entirely possible this will be a very obvious ...
0
votes
0answers
1k views

Changing HKCR registry key with group policy

I'm trying to change permissions of some keys in HKCR (HKEY_CLASSES_ROOT) to get a misbehaving program working. I originally tried to script it, but realized that group policy can handle the change ...
0
votes
0answers
183 views

Windows clients XP and 2000 “Log spooler information events” through GPO

I have some clients (XP and 2000) on which I would like to enable printing of documents on local printers. Therefor I need to enable "Log spooler information events" on the Advanced Tab of the Print ...
4
votes
2answers
3k views

Managing Windows 8 Start Screen Tiles

Using DISM (Deployment Image Servicing and Management) it is possible to customize the initial Windows 8 Start Screen, although not in any satisfactory way. Is there an effective way to manage the ...