Questions tagged [group-policy]
Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.
3,227
questions
3
votes
1
answer
11k
views
Windows Server: what is the difference between Security Filtering (under the Scope tab) and the Delegation tab in Group Policy Management?
I notice that anything I add to Security Filtering also appears under Delegation, so I’m not sure how or why they both exist, and if they are redundant or not?
Until now I had been exclusively using ...
- 1,624
0
votes
1
answer
243
views
Running Net Stop unelevated
First of all, this is one of those borderline questions between serverfault and superuser. In the end, I decided it belonged here because of the fact that most aspects of it revolve around a domain ...
- 271
4
votes
2
answers
5k
views
Disable password complexity on Windows 2012 R2
I have a Windows Server 2012 R2 that is my domain controller. I want to disable the password complexity rule for a few users only.
I have created a group (called Formation) in AD to identify these ...
- 155
3
votes
1
answer
9k
views
How to connect clients to INTERNAL WSUS server but download the approved updates from Microsoft?
I have client-side targeting setup to handle some remote workstations on our network. They VPN in from time to time -- so they can hit the internal WSUS server when they are connected.
I essentially ...
- 378
1
vote
1
answer
70
views
Archive Eventlog every x days
I have a large number of 2k12 r2 servers and I'd like to keep archives of their Eventlogs every 30 days.
I was looking for a centralized solution, possibly a GPO.
But from what I saw it's only ...
- 649
0
votes
1
answer
6k
views
Group Policy Objects stopped applying to most security groups [duplicate]
I have a Server 2008 R2 Domain with quite a few Group Policy Objects that should be applied to various OUs and security groups (Using security filtering).
I got reports from users that they were ...
- 1,389
1
vote
1
answer
3k
views
Auditing Log is Full - Eventlog Archive GPO not working
I am trying to create an Archive for Eventlog but it does not seem to work.
Server 2k12 R2 Environment.
Following is the GPO I have enabled:
I have rebooted the server and made sure it is being ...
- 649
1
vote
2
answers
2k
views
Does GPO Security Filtering need to match ANY or ALL rules in the Filter?
my main question is this:
Is the security filtering for a GPO calculated using AND logic or with OR logic to apply the filters?
Here is the context of my situation for a background on why I am ...
- 2,277
1
vote
1
answer
6k
views
Connect Access Domain Controller Over VPN
We have a remote base which we would like to connect to our main office. We bought a VPN capable router thinking this would dial the vpn and our remote PC would connect seamlessly.
Unfortunately ...
- 319
0
votes
1
answer
4k
views
negative WMI-Filter for security filtering in GPO
I need to create a group policy object (GPO) that will disable printer redirection for all computers except certain servers.
I considered making a security group and adding all the computers except ...
3
votes
2
answers
9k
views
GPO - is it possible to override enabled policy with not configured?
we have a request to allow customer to change firewall settings for servers in some OUs. These OUs inherit some policy which sets firewall to off for public and private network profiles. I wonder if ...
- 157
2
votes
1
answer
1k
views
GPO software installation from SAMBA server denied
I have a similar issue at 2 sites: W10p desktops provisioned from scratch, pulling installation (MSI) binaries from local SAMBA server.
I've created a dedicated share (\nas\provisioning) & tried ...
- 21
17
votes
1
answer
46k
views
GPOs fail to apply; reason: Inaccessible, Empty, or Disabled; Server 2012 R2 and Windows 10
I have a Windows Server 2012 R2 Domain.
Yesterday, a computer’s (running Windows 10 Pro) network drive stopped working.
After further investigation (gpresult /h) it appears ALL group policy objects ...
- 1,624
-1
votes
1
answer
2k
views
Robocopy logon script - copy all files, except 1, unless it doesnt exist
Currently have a GPO that calls a batch file at logon, that copyies files from one folder to another:
Robocopy "C:\logon" "X:\user1" /mir /r:1 w:1
Exit
This overwrites all the files in the ...
- 333
2
votes
3
answers
18k
views
how to fix remote desktop access in Windows Server 2012 R2
Kind of an embarrassing question but...
One day I was playing around with GPOs to try and grant local Administrator access to a specific User group for a specific Client computer.
Somehow, I messed ...
- 1,624
1
vote
1
answer
8k
views
WLAN profile GPO settings and saved user credentials
We are distributing wireless profiles in our Windows domain (AD servers are 2012, domain level is 2008, various client Windows versions - mostly Win7 and Win10). However, it seems we just cannot ...
- 834
4
votes
1
answer
7k
views
The password on this account cannot be changed at this time?
A user in my company forgot his password and I had to reset it to a temporary one. I checked the box that says "User Must Change Password at Next Logon".
When he logged on and entered the temporary ...
- 7,059
3
votes
3
answers
10k
views
Windows 10 how to force domain users to logon with temporary profile
We have one special computer in our company and we need it to be always "fresh". When there was windows7 all users where logged there with temporary profile and everything was great. Unfortunately ...
- 41
2
votes
0
answers
472
views
Group Policy - BITS not applying on Windows10
We are upgrading our PCs to Windows 10 and are running into a few problems with updates.
OUR SETUP:
We have 2 sites based in the UK (Norwich & Preston) and we have a WSUS server in our Norwich ...
0
votes
1
answer
174
views
When using RDP to log into a remote domain do my local domain logon scripts apply?
I've been asked to set up a user on our network with RDP access to a RDS server on a remote domain. We have set up the VPN just fine and the remote RDS server is reachable. The issue thus far is that ...
- 518
2
votes
3
answers
53k
views
How to deploy files using Group Policy
I wish to share a couple files to every computer on my domain. I know I need to use Group Policy, but I'm not really sure where to go from there. I am using Windows Server 2003 R2.
- 21
3
votes
3
answers
8k
views
Server 2008/2012 (R2) group policy scheduled task not applying
I am at wit's end and totally confused. The goal is to take group policies(one per day of a week) and set a scheduled task which will trigger a reboot on that day at a specific time.
So I made them (...
- 1,239
2
votes
1
answer
233
views
Unattended Windows server 2012R2 with WSUS updates and Local Group Policies
I am working on a project on automating windows (2012 STD, R2 and 2008R2) Image creation for which I am creating the Autouattend file for 2012 R2 using WSIM. I have created almost everything except ...
- 141
-2
votes
1
answer
821
views
How? Setup Domain Group Policy to enable Remote Access to all PCs (even if from remote location) using DOMAIN\Admin credientials?
How and what Group Policy can I apply via the DC that allows the Domain\Admins to access any of the Machines PCs & Servers within the domain via the LAN or Internet/ Remote connection?
0
votes
1
answer
165
views
Looking for assistance with basic AppLocker setup
I'm working on implementing AppLocker, but I'm running into some issues with turning it on. I have a single OU with a single server and single GPO linked. This GPO has only the following AppLocker ...
- 101
0
votes
1
answer
1k
views
Windows 7 PCs in a domain - time source keeps changing
I need help figuring out why the time source on some PCs keeps changing. Right now they're on Local CMOS clock. If I do w32tm /config /syncfromflags:domhier /update net stop w32time net start ...
0
votes
2
answers
5k
views
Password policy in Active Directory - inactivation of complexity without effect
In my Samba Active Directory Domain, I want to allow passwords that are long (passphrase) and based only on small caps and special characters, i.e. no requirement for large caps and numbers.
In ...
- 973
1
vote
1
answer
3k
views
Can't restore GPO to new domain/new OS/new NETBIOS name
I'm trying to restore from an old GPO backup for which the OS installation no longer exists, but I'm not having much luck.
Some things have changed for the new installation:
The NETBIOS name (was ...
- 765
0
votes
1
answer
1k
views
gpupdate works for user fails on computer error 1006
I have a machine on my network that refuses to sync our Gpupdate. I am getting error code 1006 error code 49 which points to bad credentials but I am using the same user that I would on any other ...
- 3
3
votes
1
answer
1k
views
Create EventLog Source using Group Policy
In our environment we want to force all our system engineers who write scripts to write logging to the EventLog.
To keep track of all logging of our scripts we want to write this to a specific source ...
- 91
0
votes
2
answers
844
views
Targeted GPO deployments from Samba (4) DC
I've seem to be stuck. I come from a mostly POSIX background, & thrown into the deep-end on this one, so learning as I go along - so not sure if there's no solution, or if it's my own Dunning-...
- 21
0
votes
2
answers
1k
views
Why is my PolicyDefintions folder being renamed?
I was trying to update our Central Store with new policies for Windows 10. Originally I made a copy of the store in the same location and named it .bak just in case.
I copied the local definitions ...
- 670
0
votes
2
answers
5k
views
What does "Administrator" have that allows them to RDP into a server?
I am trying to setup an Active Directory so that "Domain Users" can via RDP. If I assign the role "Domain Admin" to the user, they can login via RDP no problem but when I follow many tutorials (this ...
- 125
1
vote
2
answers
336
views
Allow remote desktop service to dc from specified computers
I'm planning an architecture of secure terminals only to access DC's.
So i have 2 computers which are secure and if i want to connect to the dc's i will have to log into those computers
So what i ...
1
vote
1
answer
3k
views
User logon PowerShell script not running under Windows 7 or 10
I'm testing out upgrading to Windows 10 on our domain, which is currently based on a Windows Server 2012 DC and all Windows 7 workstations. I was never able to make it work on Windows 7 so I gave up ...
- 661
0
votes
1
answer
788
views
Allow users to change theme but not desktop Windows Server 2012
I am running Windows Server 2012 for a school. I have recently updated the computers to Windows 10.
I am trying to allow students to change their theme, but not their desktop background. In GP, I had ...
- 113
1
vote
1
answer
66
views
How to know which files to specify exclusions for the installers of whitelisted apps using hashes with a Windows GPO?
To specify in the software restriction GPO, the hashes of executable/script files that are allowed to execute during the installation of a program run from, for example %LOCALAPPDATA%\Temp, during ...
- 4,919
0
votes
0
answers
89
views
Create windows task using group policy with limited privilages that anyone can run
Using group policy I created a windows task that any user can run manually but that runs under a specific domain user (e.g. DOMAIN\task_user) that has been assigned very limited access privileges. ...
- 768
3
votes
1
answer
2k
views
How to set an enforced IE homepage, whilst allowing additional user defined tabs
Is there a way to use a GPO to set the IE homepage for all users which ensures that this page is always set / cannot be changed, whilst still allowing users to keep/amend additional homepages in ...
- 1,312
1
vote
2
answers
2k
views
How to assign remote users from GPO/users not authorized
My account and my admins can remote into any machine on the network, but standard users get an "user not authorized" error. The only solution I've found is to manually add the users to the Approved ...
- 205
0
votes
1
answer
1k
views
Selective GPO drive mapping
I have two fileservers (Windows Server 2012 R2) that have joined my domain, namely filesrv01 & filesrv02. These fileservers should both contain exact copies of the user data, and if one fails; the ...
-1
votes
1
answer
258
views
How to create GPO for put cleanmgr on users desktop?
I already create some shortcut on desktop user from gpo but i dont understand how to create a shortcut for running cleanmgr from users desktop.
Like that they can run this one when they want to.
...
-1
votes
1
answer
5k
views
Creating & mapping user home folders on a network share using GPO
I have deployed a fileserver which has had its harddrive partioned to include a shared partition along with a shared folder within it. The fileserver has joined my domain, hosted on a Windows Server ...
1
vote
1
answer
125
views
H and V don't work on windows server 2012 log on
I'd like to log in to windows server 2012. It worked yesterday but today I couldn't enter my current password because the H and V keys didn't work and my password includes the h.
I connected ...
- 338
2
votes
2
answers
4k
views
deny access to file servers and PCs on a domain - guest user
We have 70+ PCs and servers, users access files by accessing the servers from their PCs.
Is it possible to deny access to all PCs and servers on a network for a guest user (he should only have ...
- 25
3
votes
1
answer
21k
views
Allow Outlook to display/download images from approved domains
Outlook wisely does not automatically display/download images embedded in HTML emails.
Is there way to modify this policy site-wide (group policy or something), so everyone will see images that are ...
- 1,069
1
vote
1
answer
600
views
Win 2012 - how to ensure shutdown script is the last thing to run
Anyone know of a way to ensure that a shutdown batch file (Local Computer Policy -> Windows Settings -> Scrips -> Shutdown) is the last thing to run before the machine shuts down?
At the moment the ...
- 2,513
0
votes
1
answer
787
views
WMI query to find lack of drive letter for Group Policy
I'm building a group policy to apply to a subset of users within my organization. This subset of users have no Home Directory set on their Active Directory object, whereas other users have an I:\ ...
- 2,085
0
votes
0
answers
783
views
Group policy printers not deploying - insufficient system resources
We have our Staff printers policy applied to our Staff users OU. This policy has ~60 printers deployed as Shared printers via Preferences.
All bar 2 of these printers are item level-targeted to OUs ...
- 76
0
votes
1
answer
4k
views
is it possible to deploy scanners with group policy or any other solution
we are a company of 60 employees/computers and want all employees to be able to scan, we purchased a Brother MFC-L2700DW and connected it with ethernet to network i'm able to scan just fine by adding ...
- 25