Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

3
votes
1answer
682 views

How do I upgrade Group Policy for Windows 7?

How do I upgrade Group Policy for Windows 7? Currently when I edit a policy I only see settings for 2000/XP. What do I need to do?
2
votes
1answer
3k views

Software restriction policies set in the registry don't update Local Group Policy

The joys of a Samba domain... First off Domain Group policy can't be used until Samba 4 arrives. We need to setup Software Restriction Policies (SRPs) on most of the computers in our Samba domain ...
3
votes
2answers
5k views

WPA2 Personal - Deploying via GPO

I've got 300+ win7 clients I need to deploy WPA2 Personal PSK on. I can use a GPO to deploy the SSID information on the clients which is good but not the PSK. Is there a clean/easy way to script it ...
0
votes
1answer
334 views

Workstation file synchronization to deploy though a group policy

I have roughly 20 PC i want to back up myDocuments folder to one of our servers. Need some recommendations on a file sync program that i can deploy though a group policy. And Looking for a work around ...
5
votes
1answer
779 views

Group policy software installation Upgrade vs Replace

I select upgrade in gpo software install to upgrade an existing package. I am not replacing the package. Will the old package and the upgrade package be installed on new computers joining the domain? ...
1
vote
2answers
1k views

Enabling remote connections via Group Policy on Windows xp workstations

Is there a way to automatically enable remote desktop connections to my workstations? I've tried enabling the following: Windows Components / Remote Desktop Service / Remote Desktop Session Host ...
0
votes
1answer
1k views

Logon script not running

I tried making a logon script to map some network drives since I need more than homedir. I have applied to script to "logon" in a GPO on server 2008, but it does not run on the PC when I logon. When ...
3
votes
2answers
1k views

Password policy problem windows server 2008

I'm creating a domain and I need to make users that can have an empty password but administrators have to comply with password complexity how to I solve this problem? Thanks in advance
1
vote
3answers
872 views

Antivirus patch using gpo?

Can i use gpo for antivirus patches or update ? is there any way i can extend wsus to do it ?
1
vote
1answer
299 views

Software deployment to Vista and Win7

How we can deploy software using GPO from Server 2003 to Vista or Win7?
1
vote
1answer
370 views

Export local security policy

I am trying to export the local security policy on a number of servers into a template file which I can then import into a group policy. I cna do this manually without issue but I have been ...
3
votes
2answers
3k views

Is it possible to apply a group policy only to certain computers / groups of computers?

I want to setup folder redirection for all of the workstations in the office, with the exception of several laptop users. Is there a way to create a Group Policy that applies only to a certain set of ...
1
vote
1answer
705 views

Delegate “Read” Ability to GPO's

Is there a way to allow a non-administrator to "read" (as in browse and look at the settings) of domain gpo's? I see in GPMC there is an option to allow delegation of "Read Group Policy Results ...
1
vote
3answers
849 views

Open Source or Freeware public computer management? [closed]

We have a bunch of public computers at our school and would love the ability to do basic computer management from our Windows Server 2003 machine. All the others are Windows XP Pro. Things like ...
3
votes
1answer
1k views

Removing Debug-Program privileges via GPO - should I leave Local System?

Per recommendations from SANS and others to mitigate against hash dumping and other attacks, I'm looking at defining the 'Debug Programs' user rights assignments using a group policy. When not ...
1
vote
3answers
1k views

Group Policy Editor is not showing in Administration tool's list

I just installed the Windows 2003 server administration pack SP1 but I need to set a new GPO but it's not listed in All Programs - Administrative Tools When I open MMC, I add a snap-in and the Group ...
2
votes
1answer
87 views

Upcoming browser ballot choice, will it be pr. user or machine, and can it be set via policies?

The upcoming browser ballot choice is coming soon, and I have a couple of questions, if anyone knows: Will the choice be per user or per machine? For a school, which has one domain user per student, ...
2
votes
1answer
485 views

Preventing local network access on a RDC or LOGMEIN connection…?

I've got what may very well be an amazingly simple question (or not). Basically at the office we're using RDC and LOGMEIN-CENTRAL to manage access to computers. This allows branch offices access to ...
2
votes
1answer
425 views

How to use Group Policy force Office 2007 to save in Office 2003 format?

We have a few newer machines running Office 2007, but most of our users are still on Office 2003 (or even older versions) and I've had complaints from those users about receiving documents they can't ...
2
votes
2answers
2k views

Event ID for modified GPOs

I have to know, who (usersid or loginname) changed a specified GPO for a specified OU in the Active Directory. Given our audit settings include this, what would be the right Event ID to look for?
0
votes
1answer
1k views

Automated mechanism to disable USB storage media + log attempted mounts?

I need some help putting together the pieces to do this: Run a script or program that disables USB storage devices. Log any blocked device mounting to the system event log. Run a second script or ...
0
votes
1answer
228 views

When / how can I delete old source folders for software installed via group policy?

So I installed Acrobat Reader 9.3 via group policy. When the 9.3.1 patch came out, I copied the original 9.3 installation source folder to a new folder, and applied the patch there. Then I created a ...
0
votes
1answer
74 views

Why can't I modify the contents of this folder when I'm part of the group with full permissions?

dsmith@ip-xx-xxx-xxx-xx:~$ groups dsmith dsmith sudo py dsmith@ip-xx-xxx-xxx-xx:~$ sudo chmod -R g+rwxt /usr/local/virtualenvs dsmith@ip-xx-xxx-xxx-xx:~$ ls -al /usr/local ... drwxrwxr-x 2 root py ...
4
votes
3answers
1k views

GPO silent software deployment

I have added a software package to my networks Computer Configuration in the Group Policy Management Editor for SBS 2008. I've noticed that even after adding the package, and rebooting a machine on ...
1
vote
1answer
904 views

How to incorporate msiexec parameters in a mst

I'm using the Orca tool from Microsoft to create a transform to be used in a gpo deployment. I wonder how to edit the msi to get the same result as this commandline will get me: msiexec /qn+ /i ...
1
vote
1answer
1k views

Auto-drive mapping for each user

I'm trying to auto map for each users in my AD a folder on the server/ So I'm trying to use the new feature in SBS/Server 08 : User Configuration > Preferences > Windows Settings > Drive Maps ...
2
votes
2answers
7k views

What is the diference between GPOs, WSUS, SCCM and SCE in software and patch deployment?

If any one can explain to me the difference between sccm, wsus, gpo, sce "system center essential", in sw and patch deployment. Thanks
0
votes
1answer
1k views

Prevent an email address from going into Junkmail Domain Wide

The helpdesk has an email address and it all corespondense gets put into outlook junkmail. Is there a way to flag this address as not junk in group policy or exchange server? I know it can be done for ...
2
votes
1answer
960 views

Applying different group policy Computer Settings depending on which OU a user is in

I might be asking the impossible here, as I understand it "Computer Settings" are only applied once when the computer first boots up. What I would like to do is have different policy restrictions ...
8
votes
4answers
1k views

Windows 2003 GPO Software Restrictions

We're running a Terminal Server farm in a Windows 2003 Domain, and I found a problem with the Software Restrictions GPO settings that are being applied to our TS servers. Here are the details of our ...
7
votes
7answers
887 views

Is there a way to audit AD for a particular password?

Is there a way I can audit AD to check for a particular password? We used to use a "standard" password for all new users (e.g. MyPa55word). I want to make sure this is no longer in use anywhere on ...
2
votes
3answers
13k views

Windows 7 Folder Redirection (GPO)

I have been fighting this issue for a day or two now, so I am looking for some insight. I am taking over admin duties in a domain of 800 users, and the previous admins really did not employ much of ...
2
votes
1answer
286 views

New GPOs in Windows Server 2008 R2

I've been looking for this information all over, but I can't find it (and maybe it does not exist) But I'm looking for a specific list of new GPO in R2 compared to W2008 non-R2. I don't care about ...
2
votes
1answer
1k views

Forefront Client Security - Deploying to client PCs

I wonder if someone can help me - I'm a developer who's having to build/run a small network for a new startup until we can get a real Network Admin on board. I have very little experience with ...
6
votes
3answers
10k views

Registry key location for software deployed via Group Policy?

I need to trigger a particular GPO-deployed application to reinstall. In the past I've just deleted a certain registry key that tells Windows: "this application has been installed". But I can't for ...
0
votes
1answer
2k views

How can I set a remote access policy / gpo to deny RAS VPN access to a particular OU?

On my Windows 2000 Native domain, I want to prevent service accounts from being able to connect via our MS VPN. (Via a Win2000 RAS server.) Say my AD structure is like this: MyDomain MyUsers ...
5
votes
3answers
2k views

Drive Mapping Through Group Preferences

My department is currently transitioning our servers to Server 2008R2 and we are looking into using Group Preferences to map network drives. Our users currently have a personal network drive and at ...
2
votes
2answers
1k views

SNMP Community String Permissions

I am looking at deploying SNMP Settings for windows servers via Group Policy and have an administrative template prepared. However I am noting strange behaviour when applying the policy. Two ...
1
vote
2answers
713 views

Is it possible to automatically invoke group policies when manually connecting to a VPN in Windows?

Our company has several laptop users (including myself) who log on to our VPN remotely, after logging in to a local domain profile on the laptop. The problem with this, however, is that group ...
0
votes
1answer
108 views

Are there any proper FREE virusscanners that can be deployed and managed from Windows Server 2008? [closed]

The question pretty much says it all. I have been looking for free solutions and have not found any so far, which leads me to think that there simply aren't any. Requirements: Deployable from a ...
0
votes
2answers
1k views

Batch add/import of a list of users to a group in Active Directory?

We have two lists of users (about 1000 each) that we need to add to groups in Active Directory (Windows Server 2003...one list will be in one group, one in the other). All the users currently exist in ...
2
votes
2answers
1k views

Group Policy: Trusted Location in User's My Documents?

I am trying to use group policy to add a subdirectory of the user's home directory as a trusted location for Microsoft Access 2007 (User Configuration/Administrative Templates/Microsoft Office Access ...
0
votes
2answers
1k views

Change/Force CMD properties like Window size & Screen Buffer size via GPO, or other ways

Is it possible to control CMD properties like Window size & Screen Buffer size via GPO? (or a VBS script that can be pushed using GPO :) I have Windows 7 / Windows Server 2008. Many thanks for ...
1
vote
2answers
3k views

Change/Force Left-handed Mouse settings via GPO, or other ways

Is it possible to control Left-handed Mouse settings via GPO? (or a script that can be pushed using GPO :) I have Windows 7 / Windows Server 2008. Many thanks for your advice. Toast
1
vote
1answer
5k views

Change/Force Mouse Pointer Schemes via GPO, or other ways

Is it possible to control Mouse Pointer Schemes via GPO without tampering with the registry? I have Windows 7 / Windows Server 2008, I need to be able to control the Mouse Pointer Schemes for certain ...
2
votes
2answers
2k views

How to migrate Windows print queues

I have a Windows 2003 print server that I need to retire, but I need to migrate the print queues off of it first onto another Win2k3 server. I have found some information on migrating, but it all ...
6
votes
1answer
5k views

Users on windows 2008 R2 server cannot change own password

I have a Win2k8R2 server configured as PDC and Terminal Services (yes, i know.). My manager would like users to be able to reset their own passwords by using the Start Menu -> Windows Security -> ...
5
votes
1answer
3k views

GPO to remove “Highlight new programs”?

I need to disable the "highlight new programs" feature in Windows start menu via a GPO but can't find such a setting. Does such a thing even exist or is it achievable only through registry ...
2
votes
2answers
197 views

Two identical Vista machines, only one processes Group Policy Registry Extension

I have two Panasonic Toughbook CF-30 machines setup from the same installer CD. Both machines were joined to the domain and moved into the same OU. Both machines have no errors in the event logs on ...
1
vote
0answers
730 views

Roaming profiles Win2K8 and deployed printers

I am having an issue with deployed printers using group policy and the 2008 print server. The print server is actually 2 servers setup in a failover cluster (server 2k8 x64) running a print server as ...