Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

4
votes
2answers
2k views

Exactly HOW are machine start-up Group Policies processed and what is required?

We have Server 2008 R2 and Windows 7 Enterprise. I'm asking this because we have several hundred laptops and netbooks at our organization. We do'nt have a NAC or a RADIUS server so all the wireless ...
6
votes
2answers
11k views

How can I prevent Terminal Server Users from restarting the server after an Automatic Update?

We have a Windows Server 2003 terminal server, and our IT department does not want to disable Automatic Updates. The problem is, when an update gets applied that requires a reboot, users get a popup ...
1
vote
3answers
3k views

VERY slow startup in a Windows Domain, why is this?

I recently joined a Windows 7 computer to a domain. There is one Computer Policy configured: the use of roaming profiles. From the moment I restarted the client, I could stare for hours at the "...
2
votes
1answer
2k views

Parent Domain Admins for Child Domain Clients

I have a situation where we have a parent/child domain. We have a universal group called Enterprise Admins with the PARENT\Domain Admin in this group. Under the Child domain account BUILD-IN\...
1
vote
0answers
34 views

Supress 'server properties' options in printers dialog

is there a way to supress the 'server properties' options (and the other one's) via GPO on Windows Server 2008? I don't want the user to see the print server settings etc. Niklas
0
votes
3answers
825 views

Active Directory: How to let a group manage another group

I have a group (group1) containing users. In real life, this group is handled by two people (group1-leads). I want group1-leads to be able to manage group1. So I double-click on group1 navigate to ...
2
votes
1answer
951 views

Mass moving users to new printers with group policy?

I work for a small IT company that does a lot of network/systems administration and consultation for small businesses. We've been helping one of our clients move away from an old Dell 2950 with ...
0
votes
1answer
9k views

View list of Internet Explorer 9 Trusted Sites on Group-policy controlled Windows 7

I'm having issues running an ActiveX control in IE9 on a Windows 7 machine. Before I report the issue to the sysadmin, I wanted to check if the site was listed in the "Trusted sites" zone. I have some ...
2
votes
1answer
587 views

What GPO rights are required for an exchange service account?

I'm trying to create an exchange domain service account. I'd like to define the rights in a Group Policy Object. since this is for both a 2 node DAG, and 2 node CAS Array, I need to know the rights ...
1
vote
4answers
273 views

Assigned Software Installation

I'm trying to deploy a commercial product through Active Directory and a group policy; about a handful of computers are NOT downloading/installing the software. Anyone have any ideas/suggestions on ...
2
votes
3answers
2k views

Group Policy not being applied because of mysteriously missing file

A single machine on my network won't apply ANY policies because it cannot retrieve \\my.domain.net\SysVol\my.domain.net\Policies\{hash}\gpt.ini . The file is visible under \\controller.my.domain.net\...
1
vote
1answer
2k views

Group Policy: Auto Disconnect Idle Remote Desktop Sessions

Several of our admins have a bad habit of closing but not logging off from, their remote desktop sessions to multiple servers. We would like to setup a GPO that will automatically log off RDP sessions ...
8
votes
4answers
4k views

Speeding up Group Policy, and how will implementing Group Policy Preferences impact logon time?

I'm looking for some advice on speeding up and upgrading our logon system to make it more robust and faster. I inherited an older logon system, which was migrated over from Novell Netware originally. ...
0
votes
1answer
128 views

Group policy proxy settings and Sql Server .NET Client Data Provider connections

Would the proxy settings enacted upon a user by a group policy configuration be applied to a Sql Server connection made by the Sql Server .NET Client Data Provider library, under the following ...
0
votes
1answer
1k views

Access Denied to Group Policy Objects

So I've been trying to add a group policy to our servers for the last day or so. After installing the GPMC and creating an new account with every group membership in the company when I right click on ...
0
votes
1answer
3k views

How to update existing desktop shortcuts?

I'm thinking along the line of when a word document is moved the shortcut is only updated on those systems where a shortcut to it already exists. These shortcuts exist on the user's individual ...
1
vote
0answers
38 views

Win2008R2: Selecting files inside a browser and his file dialog

This happens only in the "file choose" dialog, not for example in windows explorer: Open IE Goto gmail.com login and Compose new email Click on "Attach file" Dialog pops up Try to select multiple ...
0
votes
3answers
185 views

Revert Folder Options Group Policy Setting

Under Computer Configuration -> Preferences -> Folder Options, I accidentally added an exe file type and now the icons for all the exes show up the same. How do I restore all the application icons ...
0
votes
1answer
270 views

Group Policy Filter Auto Populating a Server

How could a server keep showing up in a Security Filter in my Group Policy Manager? I've removed the servername$ manually and I've gone as far as to set the Deny check mark on Apply group policy ...
0
votes
1answer
404 views

Cannot edit group policy

I keep getting the error message "Failed to open the Group Policy Object. You may not have appropriate rights. Details: The specified domain either does not exist or could not be contacted." When ...
1
vote
1answer
173 views

Win 2003 AD Organisational Unit Group Policy not being applied to an XP client/user

I'm a developer and not much of a server admin, but am working on a project which requires me to build code which operates in a Windows 2003 domain environment, with XP client machines and so I need ...
3
votes
4answers
4k views

Sometimes do not get network drive maps in Windows 7 Enterprise

I have a user that has a AD (Windows 2003) loginscript that maps a number of drives. The user has to traverse an external network to login to the domain. It is a pretty reliable connection but it's ...
2
votes
2answers
2k views

Users cannot delete Public icons

We are rolling out new laptops to my company and we are no longer setting the user as a Local Admin. Instead, the user will be a part of the "Users" group. While I am not a part of the team that ...
0
votes
3answers
374 views

Unable to Deploy Application Using Active Directory and GPO

I'm unable to deploy an application using Active Directory and GPO, and I can't figure out why the deployment is not taking place. Below are the steps I took; does anyone know what is or could be ...
2
votes
2answers
14k views

Using Group Policy to set Domain client language / regionalization

I've got a Windows Server 2008 R2 domain with a number of Windows 7 workstations attached. These workstations could be anywhere in the world and are used as kiosk-like devices, so each workstation is ...
0
votes
1answer
440 views

gpupdate causes infinite loop

I've got a patch file with the following content: gpupdate /force /boot /logoff When executing this file it causes an infinite loop, executing the line in the same cmd window again and again. This ...
0
votes
2answers
1k views

Remote GPO through BATCH Script exiting

Right so, I'm trying to make a remote GPO script that from one of our management machines will push the GPUPDATE command to certain servers. After some googling I found a script that I tried to ...
6
votes
4answers
38k views

Push new registry keys via group policy

Recently I have added registry keys in active directory and I need to push them via group policy instead of going to each PC to apply the new ones. How can I push new registry keys (not modify ...
2
votes
1answer
6k views

Adding secondary DNS IP to workstations with GPOs?

If I have a new DC running Windows Server 2008R2, which is obviously running DNS, is it possible to add the IP address of the new DC to all workstations as a secondary DNS server? Currently we have ...
3
votes
1answer
20k views

Group Policy Internet Explorer default security settings?

Since re-installing our Domain Controller (Windows Server 2008R2) and re-creating all of our group policies I have stumbled across an strange issue. When a user logs in and goes no the internet, ...
1
vote
1answer
3k views

Replication of domain controllers - JRNL_WRAP_ERROR - EventID: 13568

I noticed a problem when setting up GPOs that some settings were copied to the local computer's registry, while some didn't. Although they are in the very same GPO. So I checked the EventViewer and ...
1
vote
1answer
5k views

Difference between rsop.msc results and gpresult /v group policy being applied

I have applied a GPO to a series of computers on a test network. It applies fine except on one Vista machine that is ignoring it. The only setting in the GPO is to set Allow Inbound Remote ...
2
votes
2answers
162 views

Local Admin and Policies

I have company/domain setup with about 150 + users. I don't want to grant the users a local admin account to prevent them from installing programs that may used to attack - harm the network or other ...
1
vote
1answer
417 views

Can't get XP workstations to honor remote administration policy

I am trying to set all the systems on my test network (1 x Win Server 2008 R2, 2 x Win XP SP3, 2 x Win 7) so that Remote Admin Mode is enabled, but I am having difficulty doing this with the XP ...
0
votes
1answer
89 views

Group Policy object not updating

I have a Folder Redirection policy and I changed the path on our 2003 domain. However even after gpupdate /force the client (Win 7) still tries to access the old path and give me the "Windows cannot ...
1
vote
1answer
689 views

Modifying local intranet settings of users

I have to create a domain policy that will add an intranet site to Local Intranet zone of domain users. I know this can be done with Internet Explorer 7 but I can't set it with IE8 and IE9. Can ...
0
votes
1answer
228 views

Group policy define new services with install them in main server

I have Active Directory with Windows Server 2003 64-bit. One of my users asked me if it is possible if he can start and stop Oracle and MYSQL services from start --> control panel --> services. From ...
2
votes
1answer
2k views

Edit “Remote Desktop Users” through group policy

I have a number of Windows 2003 and 2008 servers on a domain. I want to enable remote Desktop and control the group that has remote desktop rights (NOT terminal services) but I can't figure out how ...
0
votes
2answers
2k views

Add Group Policy by Script

I'm trying to make it easy to add a LogOff script to Group Policy and am having difficulty finding any information on adding Group Policy via script. I already have the script I want to run at Logoff,...
4
votes
1answer
156 views

Group Policy Preferences in Server 2008 R2

I am reinstalling a Domain Controller after a hard drive failure (new backup system is already in place!) and I have come to the part where I need to re-create the group policies. Originally we were ...
1
vote
2answers
1k views

I need a tool that could help verify replication timing of GPO

I have created a domain level GPO that causes the message "Logon is prohibited to unauthorized personnel" to be presented to users when logging on. I need to modify the GPO such that the domain ...
0
votes
1answer
1k views

why domain gpo wallpaper is getting applied to the desktops only after logoff or restart

I've appllied wallpaper to Win XP and Win7 PCs through group policy and it is getting applied to all these PCs. My problem is when I change wallpaper jpeg file in server, wallpaper is not ...
1
vote
1answer
201 views

GPO settings for IE7 not sticking

Setup: Running Windows Server 2008 Standard with SP2. Function levels are both set to 2008. I'm having issues setting IE7 security settings and having them stick. When I go to User Configuration > ...
0
votes
1answer
2k views

Battling with Office 2007/2010 GPOs

I just set a GPO for the Shared Themes Path for the entire Office 2007 and 2010 suite using the Group Policy: User Policy --> Administrative Templates --> Microsoft Office 2007 System --> ...
0
votes
1answer
670 views

GPO Proxy Settings for IE yielding “Processing of this Wininet.dll connection settings failed”

I have two forests/domains A and B with a non-transitive trust and cross-forest user GPOs enabled. I am enforcing IE proxy settings via a user GPO linked to a server OU in Domain B. It actually ...
0
votes
1answer
4k views

AD DC - Group Policy Event ID 1055

I have a lot of event ids 1055 and others with a red mark in event viewer on a Windows 2008R2 Server configured as a DC (MyDC1.lan) I ran a portqueryui and it tells me that the following ports are ...
1
vote
1answer
1k views

UAG Direct Access - Exporting GPO to offline hosts

I'm probably missing something here, but I couldn't find any reference to this. I have a host that is using Direct Access from a remote location. We had to make changes on the server side and ofc, ...
0
votes
1answer
205 views

Any link between deploying printers with group policy and sharing printer setting?

Greets, Struggling a bit with deploying HP printers on a windows network using windows 2003R2 servers, Active Directory, and Windows XP Pro clients. The printers are all connected to the network ...
4
votes
1answer
3k views

Can screen resolution be set in Active Directory Domain Group Policy?

Is there anywhere that screen resolution can be set for the users at the domain group policy level?
2
votes
3answers
108 views

How can I share existing folder without going to the user

I would like to know if there a way to share folders on a remote machine with out having to be in front of it. For example I have user1 and he has folder called TEST and he asking me to share it. How ...