Tagged Questions

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

1
vote
1answer
29 views

Restict Internet Connection Except using Proxy

Given (as-is) A router with DHCP enabled An Active Directory Server Two Windows 7 clients joined the domain Planning (to-be) A proxy server Two clients are set to restrict internet connection ...
0
votes
2answers
68 views

Group Policy - Backup and Restore

I am currently automating the creation of our enterprise domain controller and its configuration in case of SAN failure etc. I can create the server, install the necessary roles, create complete ou ...
2
votes
2answers
296 views

Apply GPO to user AD group when using computers in a certain OU

We have a logon-script that copies a number of remoteapp.rdp-files to some users desktops. However these users sometimes also has to connect directly to our terminal server through a remote desktop ...
0
votes
1answer
28 views

Combining DWORD Values

I'm trying to permit automatic silent install of some internal ActiveX controls using AXIS, as per this Microsoft article. In the article, it states that you can define how HTTPS exceptions are ...
5
votes
1answer
173 views

Disable Outlook Web Access Junk filtering in Exchange 2013

By default, Outlook Web Access (OWA) in Exchange 2013 seems to move suspected junk mail to the Junk Email folder. This is undesirable behavior in most of my environments because we have Barracuda Spam ...
2
votes
1answer
354 views

Advanced Audit Policy not getting applied on 2012 R2

I have configured several avanced audit policy settings under: Computer Configuration => Policies => Windows Settings => Security Settings => Advanced Audit policy Configuration => ...
2
votes
3answers
134 views

Difference between HKLM:\SOFTWARE\Policies\ and HKLM:\SYSTEM\CurrentControlSet\

What is the difference between editing settings in HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services and HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server? Similar settings seem to ...
2
votes
1answer
399 views

PowerShell startup script applied via GPO failing ambiguously

Script: $folder = "$env:HOMEDRIVE\TestFolder" New-Item -ItemType directory -Path $folder note that the same group policy error occurs when $folder is set to "C:\..." Execution policy is ...
2
votes
0answers
251 views

IE11 Enterprise Mode gpo not working

I've followed the following articles to configure the Enterprise Mode gpo for IE11: http://msdn.microsoft.com/en-us/library/dn640699.aspx http://msdn.microsoft.com/en-us/library/dn640696.aspx I ...
1
vote
1answer
131 views

Server 2012r2 change login screen language with registry

I am installing a Windows Server 2012R2 RDS farm. The OS language is English, but my users are Dutch. I already installerd the Dutch MUI pack in windows via the command prompt. Via a user GPO the ...
2
votes
1answer
68 views

Group Policy Files Not Being Deployed to UNC Paths

When attempting to deploy files via Group Policy Preferences, there is a well-known issue wherein you may receive an error to the effect of: 0x80070003 The system cannot find the path specified. This ...
2
votes
0answers
43 views

Can't Access Computer Configuration > Preferences or user configuration > Preferences

After creating a new GPO in Windows Server 2008R2 Right click Edit on the newly created GPO Group policy Management Editor opens Clicking on Preferences shows this popup error After Clicking ok ...
0
votes
1answer
895 views

Group Policy Preferences Printers Server 2008R2 Error 0x80070bc4 does not set default printer after a printer has been created

Alright after calling upon the almighty Google I have been unable to find a good solutions to this problem along with many other users. So I am turning to Server Fault for some support here. I am in ...
4
votes
1answer
45 views

How to dump(collect) all the group policies in a domain?

I want to collect all the GPOs in a domain , for reviewing settings. How many ways are there to do it. I used Get-GPOREPORT in Powershell, but it gave a comprehensive html file, is these a way to ...
1
vote
1answer
264 views

Use Roaming Profiles as Default in AD (running Samba)

I've just set up an Active Directory Domain Controller (running Samba 4), created users, shares, groups, etc and everything is working. However, I have an environment where the use of roaming ...
3
votes
1answer
138 views

How can I pin an Internet Explorer URL shortcut or favorite to the Start screen with Group Policy in Windows 8.1?

I created my Start UI like I want and used this PowerShell cmdlet to create the .xml file for a user's default layout: export-startlayout –path <path><file name>.xml -as xml ...
4
votes
1answer
104 views

How to define the built-in administrators group in a group-policy object?

How do I define the built-in administrators group in a group policy? For example Computer Configuration => Policies => Windows Settings => Security Options => Local Policies => User ...
0
votes
0answers
123 views

Remote desktop instant logoff on disconnect?

I'm having a weird quirk on a Windows 8.1 VM that I'm using as a public-facing Remote Desktop slave, in that upon a client disconnect, the sessions is immediately logged off. This occurs ...
1
vote
0answers
59 views

CIS benchmark: How to define the BUILTIN\Administrator account within GPOs?

I am responsible for configuring GPOs according to the latest CIS benchmark policy. However the test for "Impersonate a client after authentication" always fails, although everything seems to be ...
1
vote
2answers
118 views

WSUS on Win2012R2 doesn't see Windows 8.1

WSUS on Win2012R2 doesn't see Windows 8.1. Both machines can ping each other. Computers are assigned to WSUS by: 'Use Group Policy or registry settings on computers' Local GPO on Win8.1 is set as ...
0
votes
1answer
161 views

Screensaver startup script (batch or reg) GPO, silent install

I have an application, which after it disconnects from a VPN connection, resets the screensaver settings. What I'd like to do is create a GPO script or batch file to run every time the user logs into ...
0
votes
1answer
57 views

Creating batch files from txt files - is this right?

Forgive me if I am completely of the rails here, but.... I am just learning about Group Policies and Domain Controllers etc. and I have a some .bat files, now I can edit them in notepad or any text ...
0
votes
3answers
457 views

GPO Troubleshooting - Security Filtering - Computer Configuration

We have a GPO that includes a Computer Configuration that enables a Preference that adds a security group to the local Administrators group. Since this is a Computer Configuration, do you need to add ...
0
votes
2answers
370 views

Excluding a specific machine from Group Policy - Server Essentials 2012

Server OS: Server Essentials 2012 Client OS Windows 8.1 I have a domain set up using SE 2012 and have used the group Policy wizard to apply Folder Redirection and "Security Settings". Can I make an ...
0
votes
1answer
107 views

Group Policy for Time Sync = ARP Flood?

I have a Windows Server 2008 R2 domain controller and a bunch of workstations of various versions of Windows - XP SP3, Vista, 7, 8.1. Time sync wasn't working correctly on a few PCs so I followed the ...
0
votes
2answers
215 views

Is there a GPO to allow standard users to access Resource Monitor

I need to allow standard domain users to be able to access the Resource Monitor on Windows 7 without adding them into the administrators group on any local machines. Is there a domain GPO setting to ...
3
votes
1answer
337 views

Edit local policy via powershell

i'm searching for a way to edit this policy via powershell : Computer Configuration -> Administrative Templates -> System -> Credentials Delegation -> Allow Delegating Fresh Credentials with ...
0
votes
1answer
562 views

IE11: How to check into which zone a URL falls?

I have applied several internet explorer settings via group policy. Especially a long list of URLs in the "site to zone assignment" setting. However it seems that one URL still falls into the ...
4
votes
1answer
106 views

Changing password expiration policy at next password change

We have a password policy with a maximum password age of 180 days. For various reasons we need to change it to 90 days, with a minimum impact for the users. Our users are normally warned about the ...
0
votes
0answers
38 views

domain admin account unable to modify IE settings, other DOMadmin group accounts can

When I log into one of the servers on our domain as DOMAIN\administrator, IE settings are locked, and indicate that I'll have to check with the system administrator. If I log into the same server ...
1
vote
1answer
51 views

Group Policy doesn't restart service as configured

I have configured group policy to tell a particular service (Winrm) to restart when the policy is applied. When the policy applies, I see that it tries to stop and start the service. Stopping works, ...
2
votes
1answer
111 views

Windows 7 GPO Preventing admins from interactively logging in, but still allowing Run As / permission escalation

I'm implementing security restrictions for a client who would like to prevent admin accounts from logging into workstations. For example each person has a user account and an admin account and only ...
0
votes
2answers
104 views

Which Group Policy wins out of two enforced policies with similar settings?

I have a situation where I need to modify an enforced group policy object, however due to the sensitive nature I must test my results first to one test user. In order to do this I plan to create new ...
4
votes
2answers
119 views

Determining if group policy needs to run synchronously

I have been working on speeding up network logins. As part of this process I'm disabling the 'always wait for network' option. This isn't inherently a problem, but I would really like to be able to ...
1
vote
1answer
3k views

Let users install software without local administrator rights on domain

I manage the network of a small company. As I'm not always in the office it is a wish from the employees to be able to install software without having to go to me. My predecessor set it up that ...
3
votes
0answers
162 views

Proxy Server setting stuck on Server 2003 R2 for Windows Updates

Stay a while and listen. This is going to be a long one. We've been having a problem the last couple of months with Updates on very specific Microsoft Server 2003 R2 Machines. This problem has ...
0
votes
1answer
134 views

WSUS: How to combine targeting groups from multiple GPOs

I am trying to use group policy with WSUS to prevent stuff like Silverlight from being installed unless it is requried. I want computer groups for each of the software (so a computer will end up in ...
1
vote
0answers
93 views

Configuring Service Login Credentials with Group Policy following MS14-025

With Microsoft security bulletin MS14-025, GPMC and related tools are now patched to no longer allow the use of configuration items within Group Policy Prefs that would embed obfuscated passwords. The ...
6
votes
1answer
500 views

Enable offline file sync for computer owner only

At the school I am interning at, all students and faculty have a mapped home folder known as the "M:" drive for storing files that they can access from all computers. For faculty who have laptops, we ...
5
votes
1answer
230 views

Applying group policy loopback to any user on specific computers

In a server 2008 R2 and Windows 7 environment, I have a GPO that specifies screen saver settings in the user settings policy for the entire domain. However, for specific computers, this is not ideal. ...
2
votes
1answer
136 views

How do I correctly install windows 8 group policy on a 2008 server?

I'm currently working on a customer server that is running Windows Server 2008 R2. They are in the process of upgrading their machines to Windows 8. The problem they have is they don't want all the ...
4
votes
1answer
2k views

Installing Lync 2013 Standard silently

I am trying to find a good way to deploy Lync 2013 standard & basic clients silently on computers with Windows 7 / Office 2010 & ahve a few roadblocks. 1) I am successful installing the ...
0
votes
1answer
47 views

Roaming Profile Accounts logoff instantly

I am working on setting up roaming profile accounts. When I log in as one of my users, they disconnect instantly. How do I find errors on what is going on? I've check the SMB Share permissions and ...
3
votes
1answer
47 views

Active Directory Force Update Fails

I tried looking up this error and problem and found nothing. Could this be a firewall issue?
4
votes
1answer
816 views

Consistently slow domain logins / folder redirection

I've been trying to diagnose slow logins to my domain. One of my first stops was Domain login very slow 10+ minutes. So far I've been able to tell it has to do with my policy that applies folder ...
0
votes
1answer
128 views

Deploying Ossec HIDS Windows Agent via GPO

I am trying to deploy OSSEC agent to about 100 Windows 7 boxes through GPO on our AD. I understand that I need to create and MSI from the EXE and import the specific client.keys file for the windows ...
2
votes
1answer
264 views

Error Code 0x800700a1 when trying to add registry key through GPO

I'm trying to add a new group policy to our domain so that images are automatically sent with emails in Outlook 2013. So I created the following GPO: This policy doesn't have any effect though. ...
3
votes
1answer
270 views

GPO Rule of thumb for: Disabled vs Enabled vs Not Configured

Is there any documentation that explains difference between these: Policy Not Configured Policy Disabled Policy Enabled, Setting Enabled Policy Enabled, Setting Disabled Policy Enabled, Setting ...
3
votes
2answers
275 views

Group Policy installation failed error %%1274

OK, I have a really tough one I've already spent all morning on. PC is a Win7 64 with SP1 and all MS Patches Usual error everyone is familiar with: The assignment of application Adobe Reader X MUI ...
0
votes
1answer
916 views

The sysvol permissions for one or more GPOs on this domain controller are not in sync with the permissions for the GPOs on the baseline domain

I have recently installed a second domain controller and all replication seems to be working fine except for group policy - In windows 2012r2, through the new Group Policy Management, when I click on ...