Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

1
vote
3answers
2k views

SharePoint service configuration fails on Windows Server 2008 R2

I am building a SharePoint test farm with SharePoint server 2007 Enterprise based on Windows Server 2008 R2. There are 3 different virtual machines (Hyper-V), all in the same domain, UCTEST. When I ...
0
votes
1answer
153 views

Server 2003 Proxy Policy

I'm working on a small Windows Server 2003 domain that has a policy set on a single OU to apply proxy settings. At the time that this policy was created, it was reported to be working just fine. ...
0
votes
1answer
85 views

How do you globally remove the 'Post Reply' button from public folders in Outlook

We run on a Microsoft Small Business Server 2008 domain. Is there a way to manipulate toolbars via Group Policy? This is a fork from this question.
1
vote
1answer
405 views

custom adm file for IE search providers on Windows 2003

I have been stumped by this issue for some time, I created a custom ADM template for a customer to populate the search providers in Internet Explorer 7 and 8. The custom ADM works fine and I have set ...
3
votes
3answers
2k views

Is Active Directory Unreliable or is there Another Issue Here?

We have an organization of approximately 1200 Windows PC clients on an Active Directory network. We have noticed that there seems to be random systems that don't get policies set. For example, we ...
0
votes
1answer
969 views

New IE windows open in background on restricted computer

We have a new computer build that is locked down via GPO. We have locked it down as tight as we can, but now new IE windows that are opened with shortcuts open behind the active window. I can post ...
0
votes
2answers
1k views

Destroyed the Volume Shadow Copy Service for an Entire Domain

So I decided to add users to the Backup Operators group to all computers in the Domain by editing the default domain policy and adding a restricted group. I also set the Volume Shadow copy to start ...
1
vote
1answer
13k views

Event ID: 861 - The Windows Firewall has detected an application listening for incoming traffic

Firstly, my machines aren't compromised any person suggesting such will be DV'd. The security logs on some of my networks client machines (all Windows Xp Sp3) get filled with these useless error ...
3
votes
3answers
4k views

Language Bar Turn Off Advanced Text services Global Policy

Is there a way I can set a global policy to turn off advanced text services so I can stop having to click this checkbox 8 million times? Client base is all Windows XP and the domain controller is ...
0
votes
6answers
952 views

Disable User Account Remotely

I work for a highly distributed IT based consulting firm with approximately 150 users in the field at different client sites at any given time. As we have grown we have needed to ability to disable a ...
2
votes
1answer
5k views

Why do I have to DisableDHCPMediaSense in some WinXP clients for Group Policies to apply correctly?

This problem appears to apply to multiple XP clients connected to a 3Com Baseline2948 Gigabit switch. The clients don't share a common network card, some are Intel based, others nVidia. All clients ...
2
votes
2answers
16k views

How to import an ADMX into a GPO

I'm trying to deploy an policy for the compatabilty list in IE 8 though at this point I'd settle for just being able to use a .admx The basic problem I'm running into is when creating/editing a GPO I ...
5
votes
3answers
10k views

Is it possible to use Group Policy to grant the permission to manage Windows services?

Is it possible to use Group Policy to grant the permission to manage Windows services? I would really like to know if this is even possible, and if so, where do you recommend I look for more ...
5
votes
2answers
4k views

Terminal Server - Group Policy prevent command line

I have a Windows 2008 Terminal Server. Terminal Server Configuration(licence server, session broker, etc) is managed by group policy. If i want to disable logon via: change logon /disable The Error ...
1
vote
1answer
1k views

Installing Group Policy Template

We're prepping to roll out IE8 to our organisation. I'm trying to figure out how to install the policy template to the W2K3 DC so I can configure the policy options. I get the feeling that installing ...
10
votes
6answers
6k views

What are the popular (free?) options for application deployment?

I manage a small school network with about 150 machines. I am looking for an easy way to deploy software to all the machines without having to visit each one. I've used Symantec Ghost to get the ...
11
votes
3answers
19k views

What is the order group policy settings are applied?

So I have been reading the document "Group Policy processing and precedence". I get that policies are applied in the order of local, site, domain, organizational unit, child organizational unit. The ...
0
votes
2answers
856 views

Managing Users Logging into Multiple Workstations with Group Policy or AD Settings

Has anyone found a good way within Active Directory or Group Policy in order to prevent users from logging into multiple workstations simultaneously? As a bit of background, I currently am a System ...
3
votes
4answers
14k views

How to disable WSUS on our domain?

Our Network Admin, who toughed it out for 3 months here, setup a virtual WSUS server and added Group Policy to enforce a WSUS policy on about 1/3 of our workstations. The virtual WSUS server has since ...
0
votes
1answer
351 views

Default font in outlook

What's the best way, and easiest, to change our estate's default font in outlook? Do the office .adm files allow this?
1
vote
3answers
5k views

XP, How to allow users to force logoff other users on locked workstation

W2K3 AD domain, XP Pro workstations. User A logs in to a computer, walks away, screen gets locked. User B wants to use that computer. Current options are to find someone that knows the admin password ...
3
votes
1answer
4k views

Why do installed fonts disappear after reboot?

At my place of employment we have designers who have to be able to install fonts to complete their work so I have given them write access to %sysroot%\fonts and to %sysroot%\system32\FNTCACHE.DAT ...
3
votes
5answers
6k views

Implications of allowing Windows clients to use NTLMv1?

I have a web application that I'd like to authenticate to using pass-through NTLM for SSO. There is a problem, however, in that NTLMv2 apparently will not work in this scenario (without the ...
0
votes
2answers
3k views

Unable to create a Group Policy in Windows Server 2003 to install software

This is my first attempt at creating a Group Policy to install a software product for computers on our domain. When I attempt to add a package I receive the following error: Add operation failed. ...
0
votes
3answers
321 views

Group Policy Management Tool

This is a question about expected behavior when using the Group Policy Management Tool. I don't entirely trust the results I'm seeing, but perhaps I'm misunderstanding something. Let's say there are ...
1
vote
3answers
7k views

Firewall define program exceptions Group Policy not applying

I updated my domain's default policy to add exceptions to the Windows Firewall, under Administrative Templates < Network < Network Connection < Windows Firewall < Domain Profile I ...
5
votes
6answers
46k views

How can I export all group policies to a easily-parseable format?

I need to dump all the Group Policies within Active Directory to review offline at a later date. Is there a way I can easily export all the Group Policies to text or some other easily-parseable ...
-1
votes
1answer
474 views

Events 1030 and 1006 in Windows 2003

I've got a computer running Windows 2003 R2 Standard Edition Service Pack 2 and periodically (every 5 minutes) the systems generates 2 errors that can be seen in the event viewer. The codes of the ...
1
vote
3answers
25k views

Active Directory GPO which forbidds user to change proxy settings in IE?

Hi Today I installed an Astaro Web Gateway (Proxy appliance) in an Active Directory enviroment. I made a GPO to force the ad users to sent http traffic to the appliance and not to thier default ...
22
votes
9answers
85k views

Group Policy installation failed error 1274

I'm trying to deploy an MSI via the Group Policy in Active Directory. But these are the errors I'm getting in the System event log after logging in: The assignment of application XStandard from ...
3
votes
5answers
549 views

Recommendations for learning to use Server 2003 (or possibly 2008)

I am currently an IT employee who works primarily with hardware/software desktop support, as well as various projects. I feel like I need to learn more about server/network administration and my ...
3
votes
9answers
4k views

Windows domain password policy advice

I have windows domain that needs a password policy. Right now there isn't one. Anyone have feedback on a good balance between weak passwords and users having passwords so strong they just write them ...
1
vote
2answers
3k views

Event ID 1030/1058 causing DNS and Group Policy errors

I've discovered an on-going problem on our Windows Server 2003 domain where some clients are unable to access the UNC path using our root FQDN (we'll call it primary.org). This causes some interesting ...
0
votes
3answers
7k views

Corrupt or Missing Default Domain Policy

At my company, we have a Windows Server 2003 R2 server which is our primary AD server with just about everything Windows-based running on it (AD, filesharing, print sharing, etc). The Domain ...
0
votes
1answer
622 views

Different User roles on Terminal Server

all server gurus! I have a Terminal Server, that'll be used by many people, but for different purposes. Our program consists of 2 parts, let's call them user-part and manager-part. That are 2 ...
5
votes
6answers
15k views

How can I remove local administrator permissions?

I want to disable the permissions of local administrators in the machines of my domain, is this possible?, and only put administration rights to the Domain Administrators. And I want to do it with ...
1
vote
3answers
236 views

Installation rights management in Windows

Problem: We have a site where there is a mix of Windows 2000 and Windows XP machines. These currently have user accounts with Admin Rights which can install licensed/unlicensed software. We want to ...
0
votes
3answers
174 views

How do I give a roaming user account the install privilege on Windows Server 2003 through GPO?

I've been searching online for sometime trying to figure out how to do this, and I keep getting contradictory instructions. How to give a roaming user account the install privilege on Windows Server ...
0
votes
2answers
597 views

Link order and best practices when updating a computer assigned application in Group Policy/Active Directory

Say I've assigned Adobe Reader 9.1.0 to an organizational unit. I now want to update all the PCs in that OU to 9.1.2 I've created a new package to assign to the OU and it will deploy OK. I found how ...
1
vote
4answers
938 views

How to apply a policy at the ou level on Windows 2003

OK, so I am going to level, I am a software engineer trying to do the work of a System Admin. I asked a question about overriding password policies and got an answer that sounded right, but that I ...
0
votes
2answers
337 views

What is an ADM Template?

In the context of Windows Group Policy, what is an ADM Template?
2
votes
1answer
2k views

How to Disable the Password Policy for Local Users on Windows 2003

I have one Windows Server 2003 VM that I need to disable the Password Complexity policy for Local users on. I still want the Active Directory users to use the domain Password Complexity Policy. Is ...
0
votes
3answers
7k views

Apply Registry or ADM to Group Policy for Login to Specific Servers

I have some Windows 2008 Server terminal services servers that run a shared app. Unfortunately, to operate correctly the app has some HKEY_CURRENT_USER settings that need written to each user's ...
2
votes
1answer
597 views

Can you enforce Internet Explorer 6 AcceptLanguage headers with Group Policy?

Can the "AcceptLanguage" header that IE sends be specified by a GPO on the client? The setting I want to push out is, HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International ...
0
votes
2answers
2k views

Set Single-Click in Active Desktop through GPO

I'm trying to set Single-Click (in explorer) in some Kiosk-like PCs, running Windows XP, but I can't find any way to set it through GPO. Is there any way to do this?
1
vote
4answers
12k views

Group Policy to Specify DNS Servers in DHCP Environment - Good or Bad?

I just encountered several hours worth of work trying to untangle DNS problems in my domain after I demoted a DC/DNS server (illustrated here ...
3
votes
1answer
10k views

Troubleshooting windows 2008 shutdown issue

When I shutdown or reboot a couple of my Windows 2008 servers they hang for a long time and display the messaging "Shutting down Group Policy Client service ...". This forum post seems to suggest ...
1
vote
3answers
6k views

Why does the “Remote Desktop Users” group keep emptying itself? And more weird RDP issues

I'm running a Windows Server 2003 PDC with AD and we have 2 machines that we require everyone to be able to remotely log in to. So I add "Domain Users" to the built in "Remote Desktop Users" account ...
1
vote
1answer
4k views

GPO Policy Object removal 'Unwilling' to process the request

This is a tough one in which I don't think anyone can find the answer for, not microsoft yet at least... There is a Group Policy Object on the primary domain controller, and when I say primary, its ...
14
votes
9answers
2k views

'Windows Update' Best Practices

I'm finding that most users ignore the "There are updates ready to be installed, click here to install" message that WSUS pushes out. Until now we haven't forced the install but I'm thinking about ...