Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
2answers
1k views

Remote GPO through BATCH Script exiting

Right so, I'm trying to make a remote GPO script that from one of our management machines will push the GPUPDATE command to certain servers. After some googling I found a script that I tried to ...
6
votes
4answers
37k views

Push new registry keys via group policy

Recently I have added registry keys in active directory and I need to push them via group policy instead of going to each PC to apply the new ones. How can I push new registry keys (not modify ...
2
votes
1answer
6k views

Adding secondary DNS IP to workstations with GPOs?

If I have a new DC running Windows Server 2008R2, which is obviously running DNS, is it possible to add the IP address of the new DC to all workstations as a secondary DNS server? Currently we have ...
3
votes
1answer
20k views

Group Policy Internet Explorer default security settings?

Since re-installing our Domain Controller (Windows Server 2008R2) and re-creating all of our group policies I have stumbled across an strange issue. When a user logs in and goes no the internet, ...
1
vote
1answer
3k views

Replication of domain controllers - JRNL_WRAP_ERROR - EventID: 13568

I noticed a problem when setting up GPOs that some settings were copied to the local computer's registry, while some didn't. Although they are in the very same GPO. So I checked the EventViewer and ...
1
vote
1answer
5k views

Difference between rsop.msc results and gpresult /v group policy being applied

I have applied a GPO to a series of computers on a test network. It applies fine except on one Vista machine that is ignoring it. The only setting in the GPO is to set Allow Inbound Remote ...
2
votes
2answers
162 views

Local Admin and Policies

I have company/domain setup with about 150 + users. I don't want to grant the users a local admin account to prevent them from installing programs that may used to attack - harm the network or other ...
1
vote
1answer
416 views

Can't get XP workstations to honor remote administration policy

I am trying to set all the systems on my test network (1 x Win Server 2008 R2, 2 x Win XP SP3, 2 x Win 7) so that Remote Admin Mode is enabled, but I am having difficulty doing this with the XP ...
0
votes
1answer
89 views

Group Policy object not updating

I have a Folder Redirection policy and I changed the path on our 2003 domain. However even after gpupdate /force the client (Win 7) still tries to access the old path and give me the "Windows cannot ...
1
vote
1answer
689 views

Modifying local intranet settings of users

I have to create a domain policy that will add an intranet site to Local Intranet zone of domain users. I know this can be done with Internet Explorer 7 but I can't set it with IE8 and IE9. Can ...
0
votes
1answer
225 views

Group policy define new services with install them in main server

I have Active Directory with Windows Server 2003 64-bit. One of my users asked me if it is possible if he can start and stop Oracle and MYSQL services from start --> control panel --> services. From ...
2
votes
1answer
2k views

Edit “Remote Desktop Users” through group policy

I have a number of Windows 2003 and 2008 servers on a domain. I want to enable remote Desktop and control the group that has remote desktop rights (NOT terminal services) but I can't figure out how ...
0
votes
2answers
2k views

Add Group Policy by Script

I'm trying to make it easy to add a LogOff script to Group Policy and am having difficulty finding any information on adding Group Policy via script. I already have the script I want to run at Logoff,...
4
votes
1answer
156 views

Group Policy Preferences in Server 2008 R2

I am reinstalling a Domain Controller after a hard drive failure (new backup system is already in place!) and I have come to the part where I need to re-create the group policies. Originally we were ...
1
vote
2answers
998 views

I need a tool that could help verify replication timing of GPO

I have created a domain level GPO that causes the message "Logon is prohibited to unauthorized personnel" to be presented to users when logging on. I need to modify the GPO such that the domain ...
0
votes
1answer
1k views

why domain gpo wallpaper is getting applied to the desktops only after logoff or restart

I've appllied wallpaper to Win XP and Win7 PCs through group policy and it is getting applied to all these PCs. My problem is when I change wallpaper jpeg file in server, wallpaper is not ...
1
vote
1answer
201 views

GPO settings for IE7 not sticking

Setup: Running Windows Server 2008 Standard with SP2. Function levels are both set to 2008. I'm having issues setting IE7 security settings and having them stick. When I go to User Configuration > ...
0
votes
1answer
2k views

Battling with Office 2007/2010 GPOs

I just set a GPO for the Shared Themes Path for the entire Office 2007 and 2010 suite using the Group Policy: User Policy --> Administrative Templates --> Microsoft Office 2007 System --> ...
0
votes
1answer
669 views

GPO Proxy Settings for IE yielding “Processing of this Wininet.dll connection settings failed”

I have two forests/domains A and B with a non-transitive trust and cross-forest user GPOs enabled. I am enforcing IE proxy settings via a user GPO linked to a server OU in Domain B. It actually ...
0
votes
1answer
4k views

AD DC - Group Policy Event ID 1055

I have a lot of event ids 1055 and others with a red mark in event viewer on a Windows 2008R2 Server configured as a DC (MyDC1.lan) I ran a portqueryui and it tells me that the following ports are ...
1
vote
1answer
1k views

UAG Direct Access - Exporting GPO to offline hosts

I'm probably missing something here, but I couldn't find any reference to this. I have a host that is using Direct Access from a remote location. We had to make changes on the server side and ofc, ...
0
votes
1answer
202 views

Any link between deploying printers with group policy and sharing printer setting?

Greets, Struggling a bit with deploying HP printers on a windows network using windows 2003R2 servers, Active Directory, and Windows XP Pro clients. The printers are all connected to the network ...
4
votes
1answer
3k views

Can screen resolution be set in Active Directory Domain Group Policy?

Is there anywhere that screen resolution can be set for the users at the domain group policy level?
2
votes
3answers
108 views

How can I share existing folder without going to the user

I would like to know if there a way to share folders on a remote machine with out having to be in front of it. For example I have user1 and he has folder called TEST and he asking me to share it. How ...
0
votes
1answer
905 views

Administrator and Administrators Group difference Windows Server 2008 and 2008 R2

Sorry if this question is not unique. 1) Is there any difference in permissions between a user in Administrators GROUP and USER Administrator. 2) If they differ, are this differences the same for ...
0
votes
3answers
601 views

Group policy not applying to new win7 box

I just took delivery of a new desktop from Dell with win7 pro preinstalled. I removed the preinstalled dell crapware and then installed the software I really needed, ran updates and joined my domain. ...
0
votes
1answer
1k views

Remove local accounts but leave domain accounts in local administrators?

I'm trying to rename the local administrator account on all the PCs in a 2003 domain. The GP I have that uses GPP to rename the local administrator seems to work. However the problem I'm having is ...
4
votes
1answer
3k views

local admin vs domain admin on a domain controller

I would like to create a group policy to set a specific password for all local administrator users. Now even though you can't manage local users on a domain controller ("This snap-in cannot be used on ...
1
vote
0answers
2k views

Windows GPO “Allow Remote Shell Access”, where to set 'False' once you enable it?

OS : Windows 7 64 bit Under Local Group Policy Editor > Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Windows Remote Shell > there is a policy ...
0
votes
2answers
146 views

Force Downloads to appear in Windows 7 Start Menu

I see the policy to force removal of the Downloads "link" in the Start Menu, but is there a way to force Downloads to be present by default?
0
votes
2answers
3k views

Group Policy for Multiple SNMP Permitted Managers

I have a group policy to add the IP of a permitted SNMP Manager: How would I alter this to add additional permitted managers (More IPs)?
1
vote
2answers
1k views

Win7 desktop can't access network share while updating Group Policy causing GP to fail

I've got a bunch of desktops that are members of a domain. There's a couple of group policy items set on these, and some of these involve copying files from a network share locally (things like config ...
7
votes
2answers
2k views

Is there a way of consolidating multiple GPOs into one GPO

I have about 100 GPOs that I would like to merge down to 15-20. Is there a way of merging them together. I found this article: http://blogs.technet.com/b/ashleymcglone/archive/2011/01/19/finally-copy-...
0
votes
1answer
39 views

Setting maximum time allowed for a group policy to be allowed and then setting back to default

We have to make accounts for certain users who work on location and their passwords are 3 characters. We disable password complexity and minimum length when we make these accounts and then renable it ...
0
votes
1answer
2k views

Can the users can apply Windows update without local administrator rights?

My users are running on windows XP 32bit. normally WSUS automatically download and notify them to select which update want to install in the past they were in local administrator rights,now I reduce ...
1
vote
0answers
437 views

Cross-forest GPO between 2003 and 2008 Denied Beacuse it's “Inaccessible”

I have a two-way, non-transitive trust between two forests and domains, "W2003" and "W2008". In W2008 I have a GPO with user settings linked to a machine OU containing machine "Server". The GPO ...
2
votes
1answer
6k views

Windows can not find 'gpedit.msc'. Make sure you typed the name correctly

I have windows server 2003 standard edition sp2 64 bit and I have OU groups to apply policies like WSUS, deploying programs..etc, I had updated of administrative tools pack so I decide to install ...
2
votes
1answer
223 views

Deploying Printer with GPO W2K3R2 - isn't working

I am trying to deploy a network printer from my DC to my users. This is what I have done so far: Created a GPO: Named: Deploy printer login script has: pushprinterconnections.exe I have linked that ...
2
votes
3answers
2k views

Configuring only one Internet Explorer zone (IntranetZone) thru GPO without affecting other zones?

I need to deploy some trusted intranet sites into Intranet Zone in Internet Explorer. It works fine when using GPO at: Setting Path: Computer Configuration/Administrative Templates/Windows ...
0
votes
1answer
482 views

Force logoff when logon hour expires

I want to know how i can force to log off my ADDS user when their logon hour expires restricted by group policy. They are still able to log on their client PCs although their logon restricted time ...
0
votes
1answer
100 views

How to specify updates in WSUS

I have WSUS on Windows server 2003 64 bit. I want to specify updates for my clients, for example some PCs I don't want them to update to Internet explore 8 and WSUS has downloaded and updated by ...
1
vote
2answers
821 views

What are the side-effects of disabling the old Lan Manager hash?

All of the computers in our domain are running Windows XP/Server 2003 and above (with one exception, a Win2Ksp4 server, which is not a domain controller). I intend to disable the LM hashes via group ...
1
vote
1answer
5k views

How can I apply Group Policy object (GPO)user settings in GPO only if connecting to specific users?

I'm using Windows Server 2008 Enterprise Edition. How can I apply Group Policy object (GPO) user settings in GPO only if connecting to specific users? Or to put it in another way: I want to apply a ...
1
vote
3answers
6k views

How can give group in active directory folder access by group policy

I have windows server 2003 64bit and my clients running on windows xp 32bit. My clients have user rights so they can't install any program. I have some programs needs admin rights for example I have ...
0
votes
1answer
723 views

Group Policy Preferences Filtering

I'm having issues getting a 2008 Policy to apply on my 2003 domain. I attached Group Policy Management from a 2008 server to the domain and setup it's own policy. The policy is User Configuration > ...
4
votes
2answers
2k views

Set binary registry setting through GPO

I've got a REG_BINARY registry key that I'd like to set via GPO. However, the GPO interface to add registry settings simply has a 'Value Data' text field. I can set the type to REG_BINARY, but what ...
4
votes
3answers
1k views

Default Domain Policy Corrupted

It appears that our domain's default domain policy is corrupted. The GPT.ini file is corrupted. When I go to open it, I get an access denied error. I tried to take ownership through explorer, takeown, ...
8
votes
3answers
7k views

Local Admin user via GPO

I have a Windows 2008R2 DC (Just setup), we already had around 25 Windows 7 professional / ultimate clients, which we are now going to join to our new domain / dc. Users were already using the ...
1
vote
1answer
235 views

Migrate Active Directory Groups to Local Windows Server Groups

This may seem like an odd scenario, but for reasons that I have no control over I need to migrate a large list of user groups from an Active Directory server, to the local group policy of a server ...
1
vote
2answers
605 views

Configure monitor orientation through GPO?

Is it possible to force a particular monitor orientation through a GPO? I've got a bunch of Windows 7 PC's that are used for displays, and I'd like to be able to drop a computer into a group that ...