Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

1
vote
2answers
71 views

Extending GPO in MS Active Directory

Is there a repository/site or any update package for the administrative templates in the GPO (Group Policy) of the MS Active Directory?
3
votes
1answer
670 views

Which tool to use for managing GPOs: AGPM or SCM?

I am investigating the different solutions available to manage GPOs. I see that Microsoft proposes two tools, which are AGPM (Advanced Group Policy Management), part of the Desktop Optimization Pack ...
0
votes
1answer
17k views

How do I hide Administrative Tools on Windows Server 2008 R2 using group-policy?

We're locking down our terminal server machine for remote desktop users and can't seem to find how to hide Administrative Tools from the Start Menu for remote desktop users. thank you!
8
votes
2answers
4k views

Upgrade software package installed with GPO

Since recently I have been using AD policies to deploy software packages through GPO on a small domain. This had been working well, but I am not sure what is the correct procedure for upgrading a ...
0
votes
1answer
83 views

Disabling applications through group-policy

How do I disable office applications from loading on client machines through group policy?
5
votes
1answer
5k views

Deploying Printers to Computers vs. Users via GPO

When I deploy a printer to a computer it only seems to deploy to our Windows XP machines. If I deploy to users it deploys to our Windows XP and 7 machines. When I look in the RSoP Snap-in it shows the ...
6
votes
6answers
8k views

How do you manage computers without Active Directory?

I need to setup between 5 - 10 computers to start with for a charity organization which can't offord to be running a dedicated server that maintains group policies for a growing number of staff. Is ...
7
votes
3answers
19k views

Where do ADMX files go in a mixed environment?

When I download ADMX files to use on our Windows Server 2008 machine, do I store them under Sysvol on our domain controller which is a Windows Server 2003 machine or do I put them in the ...
1
vote
1answer
157 views

Can we use GPMC on our new Windows Server 2008 R2 machine instead of our old Windows Server 2003 SP2 Domain Controller Machines?

We want to be able to access all the new admx templates that come with 2008R2 out of the box to set up our terminal service desktop policies operating on our Windows 2008R2 machine. Is it true that ...
0
votes
4answers
286 views

Why user logons to Windows always look like the first logon

I have Windows Server 2003 and all the users have windows XP with administrative privileges in local group setting, so I want to reduce them to normal users. i.e. Currently normal user in active ...
5
votes
1answer
1k views

List of What Policies Require Background Refresh, Which Require Reboot

Yes, I know the obvious ones. I am very specifically looking for any doc by Microsoft/MSDN that indicates which policies in Group Policy specifically require reboot and which do not. I love trial and ...
2
votes
2answers
948 views

Why Isn't My GPO Being Applied?

I have an OU named "Asia" wherein I've set regional settings via a GPO named "Asian Settings." This GPO is linked to the "Asia" OU and the link is enabled. However, when I run gpresult the log ...
0
votes
1answer
392 views

Enabling WMI and corresponding firewall exception via a Group Policy Object

Hey guys, I have tried enabling WMI on my local domain using a group policy object which sets the service as on at startup. In addition i added an exception for it via the windows firewall policy ...
3
votes
2answers
1k views

Deploy MSI silently - Cisco CAD Client Configuration

Deploy a MSI using Group Policy. Sounds easy right? This MSI (CAD Client Configuration.msi) prompts for the IP address of our UCCX server. Most MSI's I have dealt with I can install silently uisng ...
0
votes
1answer
249 views

Desktop background applied through GPO not fully loading on some PCs

This is a network of about 100 PC's. On most of the PC's the JPG loads correctly from a network share but daily on a few seemingly random machines across different OSes the wallpaper will only load ...
2
votes
4answers
3k views

Windows 7 Group Policy to delete old user profiles does not work

Background information: I currently manage a series of computer labs (127 machines running Windows 7 x64 Enterprise) for the engineering school of a university. These machines are used constantly by ...
1
vote
2answers
30k views

How to set group policy in windows server 2008 domain?

I need to apply group policy to several computers in a Windows Server 2008 domain. After running gpmc.msc, we can see Default Domain Policy and Default Domain Controller Policy Can you tell me their ...
1
vote
2answers
2k views

Terminal Server Loopback Policy and Excluding Admin

I have my Terminal Servers (Windows 2k3) in their own OU with their own Group Policy. Loopback "merge" is enabled and everything, in general works OK. For Computer Configuration, under ...
1
vote
1answer
774 views

Samba Domain Controller with Group Policy on Debian

What version of Samba do I need to be able to implement as a Domain Controller with the ability to support Group Policies for Windows 7 clients on Debian Squeeze? If I could install as a .deb it ...
1
vote
0answers
1k views

EventID 4098 : Group Policy Power Options gets Access Denied when applying a power scheme

I created a Group Policy Preference on my Server 2008 R2 DC to Update the Always On power scheme and make that the Active Scheme. I see the GPO apply in GPResult but the power settings do not ...
4
votes
1answer
2k views

Hide Total Size and Free Space on Network Drives

I would like to know if there is a way, preferably through Group Policy, that one can hide the total size listing and the free space listing on network drives. We have an active directory environment ...
1
vote
1answer
177 views

Corporate Windows Domain: How to restrict selection of Wallpapers

All my users workstations are part of our corporate domain. Currently we have a group policy that forces the company wallpaper through to all workstations. This is working fine. However, we have a ...
0
votes
1answer
2k views

Server 2008 R2 - GPO To Remove 'Menu Bar'

I'm making a lock down policy for my 2008 R2 terminal server, and am wondering if anyone knows how to remove the 'Menu Bar' from explorer. It's the bar that has 'File, Edit, Views, Tools, Help' in it. ...
2
votes
1answer
239 views

Using GPO to install/update java on windows terminal servers

We've been using GPO to manage java + reader installs on user PCs for a while now... I'm wondering if there would be any issue using the same method on terminal servers. How do you handle switching ...
1
vote
1answer
165 views

delegating RSOP rights

I have delegated RSOP rights for an OU. (In fact I ended up delegating full control). But when the users that I delegated to tries to run RSOP they get 'you do not have permission' error. Any ideas?
3
votes
1answer
102 views

How I can tell if a right is being removed by a remote Group Policy?

I need to know how I can tell if a right is being removed by a Group Policy. The right in question is SC_MANAGER_ENUMERATE_SERVICE and is preventing code from opening the Service Control Manager on a ...
1
vote
3answers
7k views

Group Policy Task Schedule deployed to User Configuration not working, works when in Computer Configuration?

I added a Scheduled Task on my Windows 2008 R2 Domain Controller in the Group Policy Manager: MyDomain Policy User Configuration Preferences Control Panel Settings ...
3
votes
4answers
5k views

Printers deployed using Group Policy?

I am trying to deploy three printers on our network. I have added the role of Print and Document Services to our Domain Controller and then added the printers. I have right clicked on the printers ...
1
vote
3answers
1k views

Group Policy, Printers and Additional Domain Controller

We have a number of Windows Server 2008 R2 on our network, one is the master domain controller and another is the additional domain controller. When I setup the additional domain controller (with the ...
0
votes
1answer
61 views

Reuse old transform with new Java update?

We just started deploying Java through GPO. Currently have Java 6 update 23 being pushed out and I would like to move to update 25. Do I need to recreate the transform for each update or can I just ...
1
vote
2answers
4k views

group policy deployed printers - print management - (redirected 1) issue?

im having an issue with group policy deployed printers.. i have a/d OUs for each category of computers.. example: top OU: Computers dtsc 5 computers - deploys dtsc printers with group policy lvm ...
0
votes
1answer
6k views

Configuring Windows ActiveX Installer Service for WebEx

I'd like to make use of the Windows ActiveX Installer Service Group Policy to allow users to install the WebEx client without the need for security elevation from an administrator. I realize that I ...
3
votes
2answers
78 views

Run legacy application on Windows

I've got an application (guiformat) which needs to run on clients in a network. However, it seems to require Administrator privileges to run. Clients run either Windows XP or Windows 7, and users log ...
5
votes
1answer
8k views

Is there a way to set access to WMI using GroupPolicy?

From various documentation it appears that to change WMI access you need to use WMI to access the running service and modify specific parts of the tree. Its kind of annoying changing 150,000 hosts ...
2
votes
2answers
78 views

Folder access in group policy Windows XP

Is there any way I can set a group policy that gives a user restricted access to some folders in shared system? Can I know all the folders a user has access to in my system, is there a tool like ...
0
votes
2answers
5k views

Server 2008 GPO To Use Small Taskbar Icons

I'm using SBS 2011 for Group Policy on a Windows Server 2008 R2 server used as a terminal server. Does anyone know a way to set through Group Policy to 'Use Small Icons' in the taskbar?
1
vote
1answer
15k views

Server 2008 GPO To Remove 'Administrative Tools'

Is there a way to remove the 'Administrative Tools' link from the Start Menu of a Windows Server 2008 R2 (SBS 2011) using Group Policy?
6
votes
4answers
632 views

Is it better to map drives and printers to users or computers?

I've posted a few "best practices" questions like this. Question says it all. Current practice is to map the drives and install the printers on the computer for each user/computer combination. I'd ...
0
votes
2answers
1k views

Startup Script + Local System user = no functional program UI

I currently have a group policy startup script (CMD file). It runs during startup, as expected, but there is no UI for the program the script invokes. For example purposes, let's say I have this ...
0
votes
1answer
1k views

Deploy BgInfo Utility via a GPO

When I deploy to a client the BgInfo utility via a GPO,I am receiving the following error. Error code:800A408 here is my script code. Set objShell = CreateObject(“Wscript.Shell”) objShell.Run ...
1
vote
2answers
6k views

Difficulties with Server 2008 R2 Group Policy not applying

I'm having some problems with a newly installed Server 2008 R2 box. I've created my Domain and users and all the computers are up and connected. Everyone can login and share folders, no problems ...
1
vote
3answers
666 views

Adobe Reader keep uninstalling when deployed via Group Policy

I've configured a Group Policy Object to install Adobe Reader X, but one machine keeps uninstalling the package on start-up - even if it is installed manually. This one machine also doesn't show ...
1
vote
2answers
800 views

Printer Deployment Issue

I've got some network printers shared on a 2003 server. I set them as deployed in a GPO. All my XP machines get the printer. My windows 7 machines show success in applying the policy, but the printers ...
5
votes
1answer
8k views

“log on as a batch job” user rights removed by what GPO?

I am not much of a server administrator, but get my feet wet when I have to. Right now I'm running some COTS software on a Windows 2008 Server machine. The software installer creates a few user ...
5
votes
2answers
375 views

Fixing Users and Computers accounts structure in Active Directory

I'm trying to fix a completely unplanned and unstructured Active Directory hierarchy. When the domain was first created on Windows Server 2000, no containers or OUs whatsoever were created for users ...
1
vote
1answer
445 views

Applying group policy objects to OUs

I'm having a bit of a hard time understanding the scope of GPOs, links, and security filters. From what I understand, then LINK establishes to whom the GPO may apply to and that the security filter ...
0
votes
1answer
661 views

Is there a GPO setting to enable/disable “show autocomplete suggestions” in word 2003?

Searched through all the GPO settings a few times and can't see anything for this setting... Does anyone know if this can be done? Thanks!
6
votes
2answers
8k views

GPO to lock workstation after it is idle for X minutes without forcing a specific screensaver

I'm trying to lock XP workstations after a period of inactivity via GPO. From what I can tell, one of the requirements is that a screensaver must be set. It appears that the only way to force the ...
2
votes
2answers
374 views

Adding and Organizing clients in WSUS

I have set up WSUS on a Windows Server 2008 box and I have it working with just my machine reporting to it. Now that I'm ready to make this large scale across the company, I'm trying to figure out ...
0
votes
1answer
3k views

Server 2008 R2 GPO Lock Down - Remove Search Everywhere

I'm trying to create a lock down GPO on a terminal server running Windows Server 2008 R2. Is there a way to get rid of that search field that is in the Start Menu? I think it is called 'Everywhere ...