Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

1
vote
1answer
905 views

GPO Application Management Woes

So, I am trying to deploy several MSI packages in a GPO policy. All of the installers are on an external file share. Fortunately for me, this file share died and I was put in charge of salvaging ...
0
votes
3answers
1k views

GPO not mapping printers

I'm trying to map TCP/IP printer connections to my users using GPOs. I set up the GPO to map 3 different printer connections but it only maps the Printer 1 (the one that's set up as the default ...
1
vote
1answer
832 views

How can I monitor user access to a shared folder on Windows SBS 2008

I have multiple shared folders on Windows SBS 2008 server. I need to be able to tell if a domain user is accessing these shares and copying large quantities of files to their laptop. Is there a way of ...
0
votes
2answers
4k views

Windows Server 2008 R2: Hide My Network Places in win-explorer on client machines and show mapped drives to access network resources

Is it possible to hide the my network places icon (using GPO or any other means possible) from windows explorer of all client machines on the network and only make available mapped drives that they ...
0
votes
1answer
403 views

Group Policy to have different groups using different Windows update Source

I am trying to set up a group policy (Under Windows Server 2003) so that staff computers will point to a WSUS server for Windows update, while computers in another group (IT & Test group) will ...
3
votes
1answer
2k views

Deny access to removable storage media for Windows XP client machines via Group Policy

I am currently editing a GPO for user accounts of a particular OU and I want to disable removable drives access on a particular OU, problem is that all the client machines are Windows XP and the ...
3
votes
2answers
3k views

Set Time Zone for all Windows Servers on a Domain (2008 R2)

Is there a way I can set the time zone for all machines on my domain (perhaps using a group policy?). All the Windows machines are Server 2008 R2.
2
votes
1answer
455 views

How do I copy a directory structure from one Windows server to another and retain the ACL information?

I need to decommission a file server which is the target of a folder redirection GPO. I used the instructions in Mark Minasi's Server2003 book to setup the original share. I would like to copy the ...
0
votes
1answer
339 views

IE 7 Group Policy Settings Help

I'm trying to modify Internet Explorer 7 settings to support a internally located, web-based tool and need to do this via GPO. The tool requires that "always allow session cookies" and "check for ...
0
votes
1answer
1k views

Client won't run GPO or scripts on logon

I'm setting up a pair of windows 2008 servers, one handling norman endpoint security and the other handling network services. I have set up a logon script and some GPOs, but the problem is that ...
0
votes
2answers
114 views

How do I configure privileges for a Standard user account?

How do I limit the features of a Standard user account, without affecting the Admin account?
2
votes
2answers
489 views

Can I use active directory policies to install all updates and restart a server?

I'm a developer who is in the fortunate position of having access to 5 newly booted virtual servers for use as our corporate Web Servers. In the past the Web Servers haven't been anyone's direct ...
3
votes
1answer
4k views

AD: What is the difference between local, global and universal groups?

What is the basic difference between local, global and universal groups in Active Directory? What is the best practice when assigning users and groups to these groups?
1
vote
1answer
286 views

Power Off Monitors at Logoff

Mixed domain environment, xp, vista, 7 DC = Server 2003, 2008 Has anyone done this ? powering off the Monitor when a user shutsdown the machine or logs off ? I have checked the GPO Setting but they ...
4
votes
6answers
3k views

Disable group policy from a workstation [closed]

How can I, as a Workstation Administrator, disable Group Policy on that workstation? The Domain Administrator is feeding utter garbage via Group Policy and I want it stopped. Last antic: turning on ...
1
vote
2answers
792 views

Adding lines to text files through Group Policy

I need to add two lines to text files using group policy. I cannot replace the files with the updated one since the content of the files differs from one machine to another, but all of them have to be ...
1
vote
1answer
140 views

What's the best way to instruct the network to run a Windows Service during a specified time interval?

Windows 7 Search Indexing service is causing some problems on our network. We get a ton of use out of it, but can no longer run it during the day while users are actively working. Because search ...
0
votes
1answer
6k views

“Applying user settings” takes a long time for domain users

The boot up process for our laptop-domain users takes literally, forever to start. It sits at the "Applying user settings" stage and when you press ctrl+alt+del, it takes like another minute or so ...
2
votes
2answers
6k views

WMI Filter in GPO by UserName/UseGroup

We have a need to lock certain users down to a very restrictive desktop on our terminal servers as well as only serve them a single application which will auto launch. I have a GPO setup for each need ...
4
votes
1answer
264 views

Merging group policies

So basically, we have a dozen or more group policies which make the process of applying/changing/adding new policies a PITA. What I want to do is merge all the policies together and basically end up ...
3
votes
1answer
2k views

How to determine how map drives are being mapped

I know there are several ways to map a drive letter to a networked resource in a Windows environment. What I would like to know is how to quickly determine the means for which each mapped drive is ...
0
votes
2answers
82 views

Trust e-mail from our domain(s)

We have several notification e-mails that get generated by various systems for our users. I've been asked to make sure all e-mail to [anything]@ourcompany.com doesn't wind up in our users' junk ...
7
votes
3answers
388 views

Managing self-updating Windows software in GPO-deployed packages

Being very new to Windows software distribution for a small network (<50 clients) I was wondering how software packages like Adobe's Reader or Java are handled. I can deploy them as MSIs via group ...
1
vote
1answer
2k views

Disable password age policy for admin on Windows Server

By default on my SBS08, the Maximum password age is set to 1year. I'd like to disable this particular parameter for Domain Admin, not the entire policy (Default Domain Policy). Is that possible ? ...
1
vote
2answers
3k views

Store “Documents and Settings” on a different drive. Windows 2003 Terminal Server

The situation is this. I have 2 terminal servers in an estate with lots and lots of servers. The TS's can be used by anyone and will primarily be used for remote working (via a VPN solution). The ...
0
votes
1answer
2k views

Event id 1110 on Server 2003 Std R2

I keep getting event 1110 on my windows server std 2003 R2 with SP2. It started when I tried to implement Group policy. The description of the event is as below: Event Type: Error Event Source: ...
0
votes
1answer
83 views

Restricted Groups - Locks down workstations and servers too much

I am a developer not a sysadmin but I was recently asked to lock down the workstations - in terms of stopping users from adding software. I followed the online articles on adding domain admins and ...
0
votes
1answer
784 views

How to block Ports in Windows Firewall via GPO to Windows XP Machines?

How can I block certain ports for outbound communication for a set of Computers running Windows XP when joined in a Microsoft AD Domain
0
votes
1answer
470 views

Group Policy install script applied but software not installed

Where i work they use Group Policy to install Symantec Endpoint Protection. Lately they've been having me build a bunch of new systems they bought so that they can be sent out to the staff/replace old ...
0
votes
1answer
1k views

Using GPO to disable access to 16-bit applications via ntvdm.exe

A while back we enabled the "Prevent Access to 16-bit Applications" option under the Computer Configuration\Administrative Templates\Windows Components\Application Compatibility section of one of our ...
2
votes
2answers
834 views

Cannot find Registry Setting for Office Shared Templates

We have our Templates for Office 2003 located in a shared location \servername\Templates$ This is also the location of our Word Startup Folder. Both settings are set in a User Group Policy. This has ...
0
votes
2answers
210 views

windows 7 group policies for .net developers

I am trying to get to a comprehensive list of policy settings for developers using Visual Studio 2008 (2010 specific permissions are helpful too) to do .Net development on everything from a Command ...
0
votes
2answers
4k views

Creating Custom admx templates to deploy registry settings

I've got a 2k3 functional level domain environment. I'd like to use group policy to deploy a few registry settings. I know that this can be done through GP Preferences client side extentions (which ...
2
votes
2answers
563 views

Finding an Excel spreadsheet to plan GPO deployment

My boss gave me a spreadsheet that he says he found from MSFT somewhere. The problem is the spreadsheet is for 2003 GPOs and I need to find one for 2008. The spreadsheet lists all of the available ...
1
vote
2answers
6k views

How to disable group policy control over Windows Vista firewall?

With Windows Vista Business, I'd like to completely disable any group policy (both local and domain) control over the Windows Firewall so that I can turn it off and on at will on the computer ...
0
votes
2answers
367 views

Give a domain group full control to the profile folders of all servers and workstations

I have a domain group (called GSG_TECH_USER) which need "full control" right to the folder "document & setting" of all servers and workstation. I made a test with this configuration: On a ...
2
votes
4answers
20k views

Change printer to black and white with Windows group policy

I've got an interesting problem to solve with the printer on our network - we have a network of Windows 7 clients connecting to a Windows Server 2008, and we use group policy to assign our colour ...
4
votes
5answers
4k views

How can I erase the traces of Folder Redirection from the Default Domain Policy

I've taken over from an IT outsourcer and have found a struggle now that we're starting a migration to windows 7. Someone decided that they would setup Folder redirection in the Default Domain ...
0
votes
3answers
342 views

Group policy not applying

I am new to group policy, so there might be something simple that I'm missing here. I've created a policy at the User configuration level which calls a VBScript that pushes out a customized hosts ...
1
vote
2answers
1k views

Windows Explorer Folder Options w Active Directory

We are running Active directory on Windows Server 2008 R2. All servers and desktops are Windows 7 or Server 2008 R2. Is it possible to create a policy using GPO such that every account in an OU will ...
1
vote
1answer
128 views

Security Restrictions Downloading From the Internet

For some reason since we rolled out IE7 to the estate users are unable to download from the Internet, they get an error message "the operation could not be completed due to restrictions on the ...
1
vote
2answers
138 views

Windows Server 2003 GPO Applied to only a few users?

How do I apply the policy: Computer Configuration/Administrative Templates/Windows Components/Terminal Services/Client Server data redirection/Do not allow client printer redirection only to a few ...
1
vote
1answer
339 views

Group Policy Drive Mapping

How do I get to the screen which allows me to set drive mappings for Active Directory Group Policy?
1
vote
1answer
568 views

Windows 7 Printing to a network printer

We have a 2008 server as our print server. Clients that use windows xp with a logon script to map have no problems printing. When I test printing to a network printer on a windows 7 machine it works ...
2
votes
2answers
244 views

Disable the user of Internet explorer through policies when called from HTML help

I have a locked down environment where users are prohibited from doing, well, basically anything but run the specific programs we specify. We just switched a program from using the venerable ...
1
vote
4answers
4k views

How to stop domain users from installing any software?

I was wondering which policies, etc I could setup to stop any installations from occurring in a server 2003 domain environment? I have 2003 RC2 and XP Pro clients. I guess the quick easy way is to ...
0
votes
1answer
511 views

How Do I Get poledit.exe Out Of Windows 2000 Service Pack 4?

I've read that I can get poledit.exe from Windows 2000 Service Pack 4, but have been unable to figure out how. I've downloaded the service pack from Microsoft's website, "W2KSP4_EN.EXE", and ...
2
votes
2answers
5k views

Enabling WinRM by Group Policy

I'm having partial success enabling WinRM through Active Directory GPO's on our Server 2008 R2 environment. I've created a GPO that enables "Allow automatic configuration of listeners" and also ...
1
vote
1answer
87 views

Group Policy Trust Problem

I've setup a new group policy for our windows XP users but now when they run a link to a program they get a trust box which they have to click 'run' on. I think its a trusted locations thing ie, ...
2
votes
6answers
27k views

How can I prevent users from installing software?

Our organization is a bit different than most. During certain times of the year, we grow to thousands of employees, and during off-times, less than a hundred. Over the course of a few years, many ...