Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

1
vote
1answer
1k views

DNS name resolution not being passed to NetBIOS

I have an XP workstation on a remote subnet that is not able to download the group policies. The Event Log entries are pretty clear. Upon troubleshooting it is clear that the workstation isn't able to ...
0
votes
1answer
118 views

Active Directory Group Policy: Script Errors

Anyone having issues with AD group policy script errors when enabling VMware Fusion's "Sharing" feature? I've run into this problem in version 2.0 and 3.0. I have a logon script applied on an AD OU. ...
2
votes
2answers
4k views

How do you add a site to the Internet Explorer Trusted Zone through GPO in server 2003?

How do you add a site to the Internet Explorer Trusted Zones through GPO in server 2003? If you do push a site through a GPO does it erase other Trusted Sites that may have been entered on the end ...
1
vote
3answers
4k views

How to deploy LogMeIn Free via GPO to entire domain?

I am looking to deploy LogMeIn to several clients. I am using LogMeIn Central with LogMeIn free. Central allows me to create an install URL to send to a client, but I want to create a GPO to ...
0
votes
2answers
447 views

Group Policy dealing with IE zone assignment not sticking!

I have a group policy (which ONLY deals with the zone assignment) -that is continually switching on and off with reboots. I thought it was a conflicting group policy but when I run group policy ...
1
vote
1answer
3k views

No “Terminal Services” branch in “Group Policy Object Editor”

We have several identical several servers in a hosting company. They run Windows 2003 R2 Std SP2 64bit. The servers are not in a domain. We have recently received a new server with the same ...
1
vote
2answers
9k views

GPO managed firewall exception not applying to Windows 7

I have a group policy managed exception for Windows Firewall File and Printer sharing enabled for our subnet, as shown here: This works fine for all of our Windows XP machines. However, when the ...
2
votes
3answers
1k views

Disable JavaScript in Acrobat Reader

Does anyone know where Acrobat Reader stores the setting to disable JavaScript? I'd like to centrally apply an update (through a policy, or a startup script, or a login script) on every machine on ...
0
votes
1answer
128 views

Logon scripts from linux to linux

I have some linux desktop boxes and I would like to launch different logon scripts depending on which user logs to each computer. I would like to manage it from a centralized place, like windows gpo ...
1
vote
1answer
923 views

Windows 2008 Group Policy Setting? - Migration Headache

I have a small domain of users that I just migrated from a linux domain running open-ldap. Our new servers are running Windows 2008 Standard. I've installed Active Directory and everything is ...
0
votes
1answer
187 views

Centrally Deploying a wireless SSID

So I want deploy a WPA2-Personal SSID that our managed clients will already have the network settings setup for(windows vista and windows 7 x64). I also want to deploy the network configuration via ...
0
votes
2answers
269 views

Group Policy to prevent accessing other sites

We have a website, a library management system - http://mylibrary. Now, for a certain set of users alone accessing via Citrix, I need to provide access to this URL. However, they should not be able ...
3
votes
3answers
12k views

IE8 Compatibility View group policy list not working

We recently rolled out IE8 to our organisation (2,500 people). Given we had several legacy internal web apps that did not support IE8 (but worked fine in Compatibility Mode), we decided to put our ...
1
vote
1answer
1k views

Active Directory - Define logon hours from Group Policy (Windows 2003 R2)

I have a bunch of computers in an OU in my Active Directory. These computers are located on a theoretically less secure site (they are in a warehouse) I want to stop these computers being logged in to ...
0
votes
3answers
2k views

Active Directory - Lightweight Directory Services and Domain Password Policy

Greetings all, We have an active directory domain which enforces a strict password policy. Hooray! Now, for the project we are working on, we are going to be storing users of our website ...
4
votes
3answers
2k views

Auto Log-Off Windows users - Windows 2003 domain

I am trying to make windows clients automatically log off after some time, I have been trying to use the winexit.scr which I have seen working else where in a similar environment. After working ...
0
votes
2answers
270 views

How can I set password restrictions in my domain?

Most of the users on my Active Directory use the same password. How can I restrict them of this? Can I use a GPO?
0
votes
3answers
90 views

GPO config problems

I'm administrating an ou. And I have applied a rule for screen saver lockout. Some OU's under my OU have applied the settings and some haven't..., What can be the cause of this? Is there a way to ...
2
votes
4answers
1k views

Blocking downloads (But allow Windows Update) using Group Policy?

We have a Draytek VigorPro 5510 that is configured to block downloads on the 10.0.65.xxx range (this is the range all of our user workstations are on) but allow them on 10.0.10.xxx range (this is the ...
2
votes
1answer
1k views

Clients of replica WSUS aren't targetted to groups and appear in 'Unassigned Computers'

I have two WSUS v3 servers, our company has a single domain AD that spans two sites, and each site has one WSUS server. The stub site's WSUS server is configured as a replica. Settings, groups, ...
6
votes
2answers
5k views

GPO Installs - Differentiating between 64 and 32 bit systems

What is the easiest way to use group policies to install the 64 bit version of a package on 64bit systems and the 32bit package on 32 bit systems. I have done some searching and I am not seeing ...
1
vote
3answers
14k views

Allowing users to install fonts in Windows 7 (through GPO)

This is somewhat related to my previous question, http://serverfault.com/questions/48155/why-do-installed-fonts-disappear-after-reboot. Having got the font install issue sorted out under XP just ...
1
vote
1answer
2k views

Grant “Manage Printers” permission for all printers on XP clients via GPO?

Is it possible to grant "Manage Printers" permissions to all printer objects on client machines via group policy? By default, it looks like this permission is granted to Power Users and ...
1
vote
3answers
4k views

Group Policy for IE Security Zones

We are currently using the following Group Policy to control the Internet Explorer security zones: User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control ...
2
votes
1answer
846 views

Kiosk Computer GPO

We have several kiosk PCs that are used in common areas. I have GPOs in place to lock these machines down (one GPO has all the Computer settings and another has all the User settings). These GPOs are ...
1
vote
1answer
286 views

PolicyMaker for Windows Server 2003

I still have a Windows Server 2003 domain. We'll be moving this to Server 2008 R2 in February. I know in 2006, Microsoft bought DesktopStandard and moved their PolicyMaker product into what's now ...
2
votes
3answers
21k views

Default Search provider in Internet Explorer 8 Via GP?

Does anyone know how to change the default search provider in IE8 Via Group Policy? IE7 seemed to work okay but once I rolled out the IE8 browser update via WSUS, it defaults back to Bing search on ...
0
votes
1answer
194 views

Can't see all GPO listing for Windows Update

Yesterday, I was working on a Dell computer, installed the GPMC and then, I was able to see all listing for Windows Update GPO. I'm trying to install WSUS... This morning, I use my normal laptop and ...
4
votes
3answers
634 views

Redeploying Office to a single client after manual uninstall

One of our client PC's recently got random crash issues with MS Word. I manually uninstalled Office 2003 locally on the client, ran "gpupdate /force /boot" and expected the client to reinstall Office ...
0
votes
1answer
218 views

Latest WSUS Server Sync expired Group Policy Preference CSEs

Last night's sync of my WSUS server expired the KB943729 updates for all OS versions. I can't seem to find a reason for this. I assume they're due to be replaced, but haven't been yet. Unless I'm ...
0
votes
1answer
684 views

Problem accessing GP from Windows Server 2003

I got a problem with my DC configuration: most computers can access the GP just as they should, just one Windows Server 2003 R2 (SP2) is unable to read the policy information. I get the following ...
2
votes
1answer
1k views

Moving Group Policy Folder Redirection root path

I have all my users on my domain enabled for Folder Redirection and they all point to the same root path (Basic Redirection). Here are the settings. I want to move only a subset of those users out to ...
0
votes
1answer
9k views

How do I install an update to all my machines via group policy?

I'm just learning to use group policy to administer my network. I found the handy feature of mapping drives, but it wont work on xp without an update. I downoloaded the file, but is there a way to ...
5
votes
1answer
896 views

“Touching” software deployment group policy programmatically or via script

I have an internal application that uses the Windows Installer. Each update to this application is a "major upgrade" (different product code, same upgrade code) and it calls RemoveExistingProducts. ...
5
votes
2answers
1k views

Windows 7 Office 2007 GPO install

I have a GPO that works fine for installing Office 2007 Pro Plus on Vista and XP but when it installs Office on Windows 7 somehow the office key does not get entered via the customized msp, and needs ...
8
votes
5answers
10k views

Group Policy: Administrator Rights for Specific Users on Specific Computers

I'm a programmer stuck trying to administer an Active Directory setup for a small company. The Domain Controller is running Windows Small Business Server 2008. We have a staff of field workers using ...
4
votes
5answers
56k views

Enforcing lock screen after idle time via GPO

I run a network of computers and I would like enforce a GPO which locks the screen after a predefined idle time. I can't find this setting, I can only find a screen saver idle time setting, how can I ...
1
vote
2answers
2k views

Enabling remote desktop via GPO

I'm administrating a network of XP SP2 machines, and I would like to enable remote desktop for every one of them. How can I get this done using a GPO? Thanks.
0
votes
2answers
1k views

Windows startup script using Samba to install programs

I'm trying to install a couple of programs - McAfee's ePO agent & MS's SMS client via a startup script on our ~300 PCs. The problem I have is that the startup/login scripts that the System ...
0
votes
4answers
1k views

Change Location of Mapped Drive using VBScript at Logon

I have a script, applied by group policy, that runs at user logon to remove specific mapped drives if they exist and then remaps them. Here's an example of the script: Option Explicit Dim ...
0
votes
3answers
118 views

Find Edit rights on GPO

All DCs : Windows 2003 SP2 DFL& FFL at Windows 2003 In our environment we have 500+ GPOs, I want to know which groups/users have been given rights to edit GPOs. and we need this list for each ...
0
votes
2answers
619 views

Installing Application with the Windows Installer disabled by Group Policy

We are using a Samba "Domain" to manage our PC's (all our XP). We are just rolling out McAfee ePO - this needs to install the framepkg.exe on every machine and then update whatever version of McAfee ...
0
votes
1answer
193 views

Add IUSR_Machine to group using group policy

Background: My developers complained that they were no longer able to run IIS in their development environments and they very usefully tracked it down to the following issue: ...
7
votes
2answers
23k views

Mapping printers using Group Policy Preferences; works on Windows XP, not on Windows 7 x64

I'm trying to use Group Policy Preferences to manage user connections to shared printers. The print server is Windows Server 2003 R2 Std edition. Several printers are installed, and I've added x64 ...
0
votes
2answers
2k views

Remove machines from WSUS

We're running the latest WSUS server 3.0 sp-something-or-other. Add the admin template to domain group policy to get everyone into the pool, so to speak. Now, for various reasons, I have two servers ...
1
vote
4answers
664 views

Group Policy: Setting Desktop Access Rights

I work part time as a network/system administrator for a small school. The school uses a commercial student information system that gets updated quarterly. After the server is updated users cannot ...
0
votes
2answers
1k views

Unable to install Office 2007 x64 on Windows 7 via GPO

I have a GPO that I use to push Office 2007 to our XP and Vista clients in our 2003 domain. I just installed a Windows 7 x64 Pro RTM machine and I'm trying to install Office 2007 in the same manner, ...
0
votes
2answers
237 views

software package disappeared in GPO after access rights change

in GPO, this item Computer > Software settings > Assigned applications > IE8_package was on Security tab set "Authenticated users" to "Deny". After that it disappeared from GPO, it is ...
0
votes
2answers
867 views

Where can one disable the start menu items for clients of an AD using GPMC?

I have a windows AD server setup with a few user groups, however I need to add a policy so that any user that log into the domain items or the entire start menu should be disabled. I can use Group ...
0
votes
4answers
1k views

How do I debug a problem with GPO not allowing RDP sessions?

I have a Windows 2008 SP2 VM and I am attempting to configure it to allow people to log into it using MSTSC client. As far as I understand you can set this up locally enabling RDP and adding users to ...