Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

10
votes
1answer
5k views

Prevent IE10 from creating WebCache through Group Policy

IE10 implemented the WebCache which appears to be the new way of doing Temporary Internet Files. The location of this is C:\Users\\AppData\Local\Microsoft\Windows\WebCache In my situation we have a ...
8
votes
1answer
2k views

Everything says Applocker is supposed to work: Why doesn't it?

I've setup a basic group policy consisting of the default Applocker rules. Per Microsoft's technet article on the subject, any files not explicitly allowed to run by the policy are supposed to be ...
0
votes
0answers
120 views

Windows 7 Group Policy Printer not Loading

I'm trying to create a group policy that applies printers to a specific user security group, but facing difficulties. When loading a GPO with 4 printers in it, all but two PCs load all 4 printers. ...
0
votes
0answers
61 views

Firewall is Enabled after Server is Moved to New OU

I am experiencing an issue with Windows Firewall via Group Policy on Windows SBS 2008. When moving any machine, physical or virtual, from our primary SBSComputers OU to our SBSServers OU (no ...
0
votes
0answers
27 views

SQL Reporting Denying Access to User After Move to New Group

We have a SQL Server 2008 server setup with reporting services so that users can log in and run certain reports. I have a user that was granted browse permissions to this as we had their initial ...
0
votes
0answers
112 views

Change dnserror.htm page when cannot locate website in Internet Explorer via Group Policy

When you type in a URL in Internet Explorer and it cannot be located via DNS it loads dnserror.htm from a .DLL in C:\Windows\System32\en-US\ieframe.dll.mui. I have read that you can use a program ...
0
votes
0answers
62 views

Allow Non-Administrators to Install Specific Devices - Classes

I'm automating driver installation with the use of a central driver store. An important part of this approach is to add the Class GUID's of the devices/drivers to the GPO (Allow Non-Administrators to ...
0
votes
0answers
73 views

WMI filter working for some Windows 7 machines but not for others

I'm trying to use this WMI filter for our Windows 7 64bit machines: select * from Win32_OperatingSystem where (Caption like "Microsoft Windows 7%") or (Version like "6.1%" and ProductType = "1" and ...
0
votes
0answers
186 views

Remote desktop instant logoff on disconnect?

I'm having a weird quirk on a Windows 8.1 VM that I'm using as a public-facing Remote Desktop slave, in that upon a client disconnect, the sessions is immediately logged off. This occurs ...
0
votes
0answers
49 views

domain admin account unable to modify IE settings, other DOMadmin group accounts can

When I log into one of the servers on our domain as DOMAIN\administrator, IE settings are locked, and indicate that I'll have to check with the system administrator. If I log into the same server ...
0
votes
0answers
53 views

How do I deploy VC++ 2012 Redistributable via Group Policy

I'm trying to rollout some software via group policy and I have hit a roadblock with the VC++ redist for 2012. The only available download is an exe which I cannot extract an msi from. I tried ...
0
votes
0answers
181 views

Using Powershell (RSAT ) to get GPO from against another domain

I can't find any clear info online for what I'm trying to do, hope you can give me an answer :) I'm using a Windows 7 client (pctest) joint in a domain (domain1.intranet). I've installed the RSAT to ...
0
votes
0answers
40 views

Group Policy with Win7

All, I wasn't sure how to search for this. It seems that many of our Windows 7 Machines are processing group policy in unpredictable ways. Here's an test example: I created a brand new policy. I ...
0
votes
0answers
61 views

Domain group policies not applied on Win8

I'm totally desperate, I'm not able to set any group policy on domain level (with Samba 4 domain controler). The only user, the policies are applied on, is the Administrator. I have no idea, what's ...
0
votes
0answers
47 views

Is it possible to check using nagios, if a group X is denied access a particular file/folder in Windows

This is basically a GPO key that has been applied and need to check if the key is in place/working which involves restricting a group of users from accessing a particular file or folder using a ...
0
votes
0answers
25 views

Log on as a batch job - group policy

I would like to configure the "Log on as a batch job" setting in our domain group policy object for servers. The problem I see is that I don't know which users/groups to add. I know the default for ...
0
votes
0answers
177 views

GPO: Is there a way to apply NTFS permissions dynamically?

I would like to create a GPO that sets NTFS permissions on a set of folders and files. Computer Configuration => Policies => Windows Settings => Security Settings => File System and ...
0
votes
0answers
24 views

Advanced Windows Firewall - Strange logging behavior

I have created a GPO that set's several firewall rules to Windows Server 2008 R2 machines within a specific OU. The default behavior is set to block on inbound and outbound on all profiles. Also I did ...
0
votes
0answers
605 views

SBS 2011 Group policy won't update/apply properly

i'm running SBS 2011 on a dell poweredge t110 II, and recently i've found that i am unable to apply/update group policies. I get the following error: The processing of Group Policy failed. Windows ...
0
votes
0answers
96 views

Access to RSOP via WMI

I need to retrieve data from RSOP using the following script written in VBS: Const FL_FORCE_CREATE_NAMESPACE = 5 strComputer = "." Set objWMIService = ...
0
votes
0answers
3k views

GPO Run these programs at user logon not taking effect

When on our W2k8-R2 DC I create a new GPO and configure "Computer Configuration/Policies/Windows Settings/Administrative Templates/System/Logon/run these programs at user logon" to ...
0
votes
0answers
3k views

Why gpupdate fails?

So I have a Windows Active Directory Domain with two domain controllers, DC1 and DC2, both running Windows Server 2008 R2. DC1 is the primary DC holding all FSMO roles. It was functioning all right as ...
0
votes
0answers
133 views

Differentiating between “Not Defined” and some other value in registry key for group policy objects

So here is what I am trying to do: I have set a certain group policy setting to 'Enabled' and it gets reflected in corresponding registry key Now, I go and edit in the group policy editor and set it ...
0
votes
0answers
38 views

“Log on as a service” for a group doesn't work

I have a server that has a few services that run under different domain user accounts. If I create a group, add the user accounts to that group, and then add that group to the "Log on as a service" ...
0
votes
0answers
863 views

Change companyweb to intranet.companyname.com

We're having issues with a sister company that has an SBS 2011 Standard server on site on a separate domain to ours - they have problems editing documents via SharePoint, whereas my manager can get in ...
0
votes
0answers
849 views

Having issues removing a specific Registry key using GPO Preferences

Hello I attempting to remove the following registry key using GPO Preferences: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{031E4825-7B94-4dc3-B131-E946B44C8DD5} The key just ...
0
votes
0answers
25 views

Least obtrusive method of resetting default gpo objects

In my early days of fiddling with our AD domain I modified the default gpo objects. Now I want to reset them back to default and ensure they are not used this time around. I found the dcgpofix ...
0
votes
0answers
129 views

Access to network share folder works in VDI, but not on desktops

I have two separate environments running in our lab computing spaces. We are phasing over to VDI. There are some weird differences going on in each environment, and I believe that the problem is ...
0
votes
0answers
353 views

My Documents folder not being redirected via Folder Redirection Group Policy

I have Folder Redirection applied for My Documents to users that log on to Windows 8 machines. The GPO is set and applied using a Windows Server 2003 machine. The My Music, My Pictures and My Videos ...
0
votes
0answers
75 views

Apply two proxy servers to different windows PCs on the same network

We use microsoft CRM 2011 as our CRM software, Microsoft CRM does not support a proxy.pac file you need to use a static proxy server address for it to work with outlook. So I need to deploy two ...
0
votes
0answers
178 views

Windows 8 Lock Screen Background Disappears

I have a group policy that sets the lock screen background on Windows 8 and prevents users from changing it. It worked well for a while but recently it stopped functioning, and now the "Seattle" ...
0
votes
0answers
25 views

How can I use a group policy or similar to force specific folders on a share to have a different colour or icon?

Please note I don't want to do this from the client side, it must be achieved only from the server side using a GP or something similar. I would like the specified folders to either be a different ...
0
votes
0answers
174 views

Mapping printers with SBS 2003 R1

We have an SBS 2003 R1 domain controller, and a mixture of Windows 7 and XP (domain-joined) workstations. There are 20 users, 20 PCs, and 5 printers. Printer drivers for all 5 printers are already ...
0
votes
0answers
1k views

Wrong path in group policy

I'm the it-admin in a small section of my university. For several days, some of our employees experienced connection issues with our server (win server 2008 and win7 clients). Applications are slow ...
0
votes
0answers
35 views

Domain logon-dialog when opening “Computer management”

When I'm logged in to the domain on the client computer I need to logon to the domain again when I right-click "Computer" and chooses "Manage". No GPO has been set yet, and the user seems to be admin ...
0
votes
0answers
883 views

Scheduled Task to shutdown computer after 2 hours of inactivity?

We have around 900 machines in two locations. 95% of these machines are shared, and we find users don't log off or shutdown as often as they should to get updates. I thought I would create a ...
0
votes
0answers
170 views

Java 1.7.21 install via GPO fails on Win 8

Attempting to distribute Java runtime 7 update 21 via GPO to Windows 8. Problem is the GPO fails with: The install of application Java 7 Update 21 (64-bit) from policy Workstation 64-bit ...
0
votes
0answers
60 views

Permitting Remote Deskop Users group to login in

I've been running into an issue where members of our IT department are unable to login to the servers we have recently set up. I have added the IT group to the Remote Desktop Users group and they are ...
0
votes
0answers
553 views

Changing HKCR registry key with group policy

I'm trying to change permissions of some keys in HKCR (HKEY_CLASSES_ROOT) to get a misbehaving program working. I originally tried to script it, but realized that group policy can handle the change ...
0
votes
0answers
126 views

Windows clients XP and 2000 “Log spooler information events” through GPO

I have some clients (XP and 2000) on which I would like to enable printing of documents on local printers. Therefor I need to enable "Log spooler information events" on the Advanced Tab of the Print ...
0
votes
0answers
120 views

Windows Server 2008 GPO for Logon Scripts

I want to change my GPO to have the User logon script point to a different path other than the default NETLOGON share. I would like to put the script on one of my file server shares with the users ...
0
votes
0answers
30 views

Global Security Group AD Issue

This is on Windows Server 2003. I created a testgroup and add the testuserA on it. When I created a folder that has permission for testgroup, i try to log in to the testuserA's computer, and ...
0
votes
0answers
52 views

Manually updating software, installed via GPO, results in two versions installed

Notebook received a software package version 1 via GPO from a network share. Then v2 of the same application was installed manually on that computer. Installer removed old v1. Several days later, ...
0
votes
0answers
148 views

Deploy MSI via gpo for computers, but install after users log in

Is there a way to deploy msi via gpo for computers, but the installation should occur after users log in? The installation should be delayed. The reason is that when installing msi after computer ...
0
votes
0answers
346 views

Group Policy Email Signature Script

I have a VBS script that builds an Outlook Email signature and saves it to the user's machine. I want this to be called each time the user logs in, using group policy, but so far I've had no luck. ...
0
votes
0answers
50 views

Registry change on a key a server does not have

I have written a script that queries the registry on multiple servers looking for specific keys (dealing with iSCSI). After the query, I need to make changes to some of the keys in: ...
0
votes
0answers
130 views

vmware + active directory 2003 + windows xp sp2 + Fujitsu Zero Client + GPO propagation issues

i am trying to set up a domain controller with windows server 2008 (2003 functional level), and windows xp sp2 clients (both virtualized on a Fujitsu vmware server). My windows xp sp2 clients have ...
0
votes
0answers
179 views

roaming profile and offline folder setting on schools laptops and WIFI

I have a Win 2008 R2 server with Win7 SP1 laptops and a WIFI. Teachers in and out therefore often work from home but somehow the offline settings is not right on our system. Could someone guide me ...
0
votes
0answers
468 views

Active directory group policy for routing table

I installed openvpn client for restricted active directory test user. VPN connection is OK, but routes can't be added. Therefore, I have added a test user to "network configuration operators" group ...
-1
votes
0answers
27 views

“Removable Storage Access” Group Policy and RSAT

I've seen that there is a capability with Group Policy to prevent users from writing to USB drives. ...