Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

1
vote
4answers
884 views

How to apply a policy at the ou level on Windows 2003

OK, so I am going to level, I am a software engineer trying to do the work of a System Admin. I asked a question about overriding password policies and got an answer that sounded right, but that I ...
0
votes
2answers
337 views

What is an ADM Template?

In the context of Windows Group Policy, what is an ADM Template?
2
votes
1answer
2k views

How to Disable the Password Policy for Local Users on Windows 2003

I have one Windows Server 2003 VM that I need to disable the Password Complexity policy for Local users on. I still want the Active Directory users to use the domain Password Complexity Policy. Is ...
0
votes
3answers
7k views

Apply Registry or ADM to Group Policy for Login to Specific Servers

I have some Windows 2008 Server terminal services servers that run a shared app. Unfortunately, to operate correctly the app has some HKEY_CURRENT_USER settings that need written to each user's ...
2
votes
1answer
583 views

Can you enforce Internet Explorer 6 AcceptLanguage headers with Group Policy?

Can the "AcceptLanguage" header that IE sends be specified by a GPO on the client? The setting I want to push out is, HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International ...
0
votes
2answers
2k views

Set Single-Click in Active Desktop through GPO

I'm trying to set Single-Click (in explorer) in some Kiosk-like PCs, running Windows XP, but I can't find any way to set it through GPO. Is there any way to do this?
1
vote
4answers
12k views

Group Policy to Specify DNS Servers in DHCP Environment - Good or Bad?

I just encountered several hours worth of work trying to untangle DNS problems in my domain after I demoted a DC/DNS server (illustrated here ...
3
votes
1answer
10k views

Troubleshooting windows 2008 shutdown issue

When I shutdown or reboot a couple of my Windows 2008 servers they hang for a long time and display the messaging "Shutting down Group Policy Client service ...". This forum post seems to suggest ...
1
vote
3answers
6k views

Why does the “Remote Desktop Users” group keep emptying itself? And more weird RDP issues

I'm running a Windows Server 2003 PDC with AD and we have 2 machines that we require everyone to be able to remotely log in to. So I add "Domain Users" to the built in "Remote Desktop Users" account ...
1
vote
1answer
4k views

GPO Policy Object removal 'Unwilling' to process the request

This is a tough one in which I don't think anyone can find the answer for, not microsoft yet at least... There is a Group Policy Object on the primary domain controller, and when I say primary, its ...
14
votes
9answers
2k views

'Windows Update' Best Practices

I'm finding that most users ignore the "There are updates ready to be installed, click here to install" message that WSUS pushes out. Until now we haven't forced the install but I'm thinking about ...
2
votes
2answers
5k views

What is your basic lockdown Group Policy for Terminal Services servers

I'm looking for direction on some general settings to configure for a Terminal Services server group policy. It is running Server 2003 Standard and hosts about 20 people simultaneously. Obviously ...
3
votes
3answers
4k views

Automatically disable the “Manage Your Server” screen on Windows 2003?

Is there a line I can add to my login scripts or something with GPO to prevent the "Manage Your Server" screen from showing up when I log in to a Windows 2003 Server?
1
vote
1answer
839 views

How can I change the boot.ini file on a number of machine by script?

How can I change the boot.ini file on a group of client PCs at the same time by using something such as a group policy?
5
votes
1answer
15k views

How to disable autocomplete for passwords in IE8 via GPO?

In IE6 there was a registry key hidden away that would allow you to enable autocomplete but only for usernames, not passwords. This key no longer has any effect in IE8. I can either enable or disable ...
0
votes
1answer
1k views

Accounts Password Stays Expired After Group Policy Change

Let's say I have a group policy that sets the maximum password age at 90 days. Some user doesn't change their password for 91 days, so their password should be expired. If I then remove that group ...
3
votes
1answer
2k views

Modifying Word's Normal template company-wide

We use Word 2003 on all computers; we also use Group Policy to set a shared "workgroup templates" folder, which is really useful as we can just copy .DOT files into there to make them accessible to ...
7
votes
2answers
538 views

Vista Power Management GPO

I've created a loopback GPO that has several settings (both computer and user) including a Custom User Interface (Access 2007 Application) and Power Management (has the computer sleep after being idle ...
2
votes
2answers
5k views

How to have downloads be automatically unblocked?

Downloaded exe files requires me to open the properties of the file and click on "Unblock" because "This file came from another computer and might be blocked to help protect this computer." ...
3
votes
4answers
2k views

Update group policy installed software without requiring a log off

Our IT Support Dept. releases an internal software product that I write via group policy. Is it possible to force an update of a particular group policy software install without asking the users to ...
0
votes
2answers
5k views

Edit local user account remotely: set passwordreq:yes

I'm using Net user username /passwordreq:yes but I need to do this on a bunch of machines. I can run a batch through SCCM, but would like to do it with a script. Anyone have a way to do this? ...
8
votes
4answers
8k views

Is there a group policy that would push a new user name and password to all local machines on a network?

I work on a small network that runs on windows server 2003, and with machines running xp. Is there a group policy that could push a new user name and password to replace our old local administrator ...
16
votes
3answers
13k views

How do you manage Java in your Windows/Active Directory environment?

Like I suppose a lot of people, we have a Windows/Active Directory environment and a lot of internal line of business apps that require Java. Our experience is that Java does not play nice in such a ...
7
votes
7answers
11k views

What is the best (free) tool to wrap an .exe into a MSI?

I'm looking at deploying some software via GPSI and the current version of the software is distributed as a .exe so I need to convert it to an MSI file. furthermore, why does MS still distribute some ...
2
votes
3answers
4k views

Change group policy settings for accounts?

I am wondering if there is a way to change the group policy settings for accounts without using the GUI tools (GPMC or the GPO editor MMC snap in). In other words can I can change these settings via a ...
23
votes
6answers
96k views

Disable password complexity rule in Active Directory

Where do I go to disable the password complexity policy for the domain? I've logged onto the domain controller (Windows Server 2008) and found the option in local policies which is of course locked ...
2
votes
1answer
4k views

How to apply group policy to users from a trusted domain

Is there any way to specify a Group Policy only for the users who are members of a trusted active directory domain?
1
vote
5answers
4k views

List of GPO's

How do I get a list of GPO's applied against a machine in a Win2k8 environment remotely? I would prefer a powershell solution, but anything will help.
11
votes
6answers
49k views

How to lock down Windows XP for use as an internet kiosk?

One of our clients, whose website we built, is a manufacturer of ultra-high-end bicycles. They would like to distribute kiosks -- basically, locked-down Windows XP boxes from Dell -- at some of their ...
5
votes
10answers
3k views

How do you lock down workstations and still support legacy applications that require local administrator rights?

I know we all struggle to strike a balance between keeping our user's workstations locked down but still usable. I have a real problem with one client whose users are constantly installing toolbars, ...
6
votes
2answers
9k views

Group policy preferences that only target 32bit or 64bit os

I am currently deploying some files through GPP to a folder under program files. I now have to differ between a 64bits and 32bits os. What is the easy way to filter out what computer to target with ...
0
votes
2answers
630 views

Group policy preferences stopped working on vista sp2

After I installed service pack 2 on one of our Vista (amd64) workstations the group policy preferences stopped applying. The preferences are still working on our xp sp3 and vista sp1 workstations. ...
3
votes
3answers
2k views

Managing applications like Acrobat Reader and Flash player via Windows GPO?

Without using additional software, how are people managing software like Acrobat Reader and Flash Player in a Windows domain? I can deploy these applications via GPO software installation. Am I ...
0
votes
4answers
574 views

Applying Group Policy to Cross-OU Collections

Are there other ways in Active Directory to organize computer objects for Group Policy application besides OU? How could one apply a policy only to certain computers in many disparate OUs? I'm ...
1
vote
1answer
1k views

GPO, UAC, and Active X not playing nice

I have a set of users that I want to be able to install ActiveX controls from websites. I have deployed a GPO that allows them to do this, however I still fail when it comes to UAC. The ActiveX ...
8
votes
3answers
2k views

How is software deployed via Active Directory?

What are the steps required for deploying a software package via Active Directory / GPO?
0
votes
2answers
71 views

Problem with archive

On the terminal server windows 2003 is 7zip. The problem is that it does not follow the rules of the GPO. And users can use the archive as a explorer. while in Group Policy to use the explorer is ...
3
votes
6answers
4k views

How to correctly deploy Adobe Reader 9.1

I have recently tried to deploy Adobe Reader 9.1 onto our network here. (SBS 2003 server and XP Workstations) I followed the instructions for the extraction of the installer and .msi and then ...
9
votes
2answers
10k views

How do I deploy an internal certificate authority?

IE7 aggressively warns about certificate failure; we have some internal sites that run over HTTPS and thus need a valid cert. We appear to have an certificate authority on the intranet that can sign ...
1
vote
4answers
10k views

Run a .REG file in a logon script where regedit is disabled?

I need to run a .REG to add entries to the registry on logoff, but our GP environment disables regedit. I could probably accomplish this by turning regedit on, running the script, and then turning it ...
2
votes
2answers
210 views

Troubleshooting Group Policies?

we built a plain Windows 2008 Server park a few months back, and set up a few Group Policies. Most of them seem to work fine, but once in a while I have the feeling that one or more have not been ...
9
votes
5answers
12k views

Disable Windows Server Network Locations

I'm not sure what exactly this feature is called. But in Windows Server 2008, it has the Vista Public/Private/Domain locations. This makes sense for laptops, and none at all for servers. My problem ...
0
votes
5answers
25k views

Why is folder redirection failing on Windows Vista with event ID 502?

I am redirecting several folders using Group Policy. Everything works as expected on Windows XP clients, but on a Windows Vista client, some of the folders redirect, and some of them fail to ...
1
vote
5answers
6k views

IE8 Deployment Issues

We're attempting to deploy IE8 to finally upgrade our environment from IE6. However, we've hit a couple of issues and wondered if anyone else has had similar problems. I've downloaded IEAK for IE8 ...
4
votes
1answer
7k views

Windows cannot access the file gpt.ini for GPO CN={31B2F340-016D-11D2-945F-00C04FB984F9}

I'm in the middle of a "swing" migration from Windows SBS 2003 to Server 2003 Standard. It's going okay so far but we're getting event 1058 on client machines: Windows cannot access the file gpt.ini ...
4
votes
5answers
848 views

Conficker: Should steps taken in group policy to secure against virus remain?

We got nailed two weeks ago by Conficker, I ran through the 26 step checklist from Mircrosoft on my own computer, as well as on our domain server. It says near the end to reverse all the changes, but ...
7
votes
4answers
13k views

How do I disable remote printers using group policy

When I configure a new remote desktop connection to connect to servers I often forget to uncheck the option inside of local devices and resources for remote printers. This creates exceptions in the ...
1
vote
4answers
661 views

GPO Randomly applying

I got a problem since a while with my XP client connected on a 2003 R2 Server Active Directory. Sometime GPO doesn't load when a user log on. Some other time, It work. I search many time on google ...
3
votes
4answers
2k views

Set _default_ printer via group policy in 2003R2 to XP

Win 2003 R2 setup. I can push the printer via group policy, and pushprinterconnections.exe, but the printer isn't set as the default printer. Any ideas on how to set the default printer for an XP box ...
4
votes
4answers
561 views

Published software not displayed in Add/Remove Programs

I just followed How to use Group Policy to remotely install software in Windows Server 2003 to try publishing a software (MSI file). I could follow all the steps, but the supposedly successfully ...