Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

1
vote
3answers
7k views

Group Policy Task Schedule deployed to User Configuration not working, works when in Computer Configuration?

I added a Scheduled Task on my Windows 2008 R2 Domain Controller in the Group Policy Manager: MyDomain Policy User Configuration Preferences Control Panel Settings ...
3
votes
4answers
5k views

Printers deployed using Group Policy?

I am trying to deploy three printers on our network. I have added the role of Print and Document Services to our Domain Controller and then added the printers. I have right clicked on the printers ...
1
vote
3answers
1k views

Group Policy, Printers and Additional Domain Controller

We have a number of Windows Server 2008 R2 on our network, one is the master domain controller and another is the additional domain controller. When I setup the additional domain controller (with the ...
0
votes
1answer
61 views

Reuse old transform with new Java update?

We just started deploying Java through GPO. Currently have Java 6 update 23 being pushed out and I would like to move to update 25. Do I need to recreate the transform for each update or can I just ...
1
vote
2answers
4k views

group policy deployed printers - print management - (redirected 1) issue?

im having an issue with group policy deployed printers.. i have a/d OUs for each category of computers.. example: top OU: Computers dtsc 5 computers - deploys dtsc printers with group policy lvm ...
0
votes
1answer
6k views

Configuring Windows ActiveX Installer Service for WebEx

I'd like to make use of the Windows ActiveX Installer Service Group Policy to allow users to install the WebEx client without the need for security elevation from an administrator. I realize that I ...
3
votes
2answers
79 views

Run legacy application on Windows

I've got an application (guiformat) which needs to run on clients in a network. However, it seems to require Administrator privileges to run. Clients run either Windows XP or Windows 7, and users log ...
5
votes
1answer
8k views

Is there a way to set access to WMI using GroupPolicy?

From various documentation it appears that to change WMI access you need to use WMI to access the running service and modify specific parts of the tree. Its kind of annoying changing 150,000 hosts ...
2
votes
2answers
78 views

Folder access in group policy Windows XP

Is there any way I can set a group policy that gives a user restricted access to some folders in shared system? Can I know all the folders a user has access to in my system, is there a tool like ...
0
votes
2answers
5k views

Server 2008 GPO To Use Small Taskbar Icons

I'm using SBS 2011 for Group Policy on a Windows Server 2008 R2 server used as a terminal server. Does anyone know a way to set through Group Policy to 'Use Small Icons' in the taskbar?
1
vote
1answer
15k views

Server 2008 GPO To Remove 'Administrative Tools'

Is there a way to remove the 'Administrative Tools' link from the Start Menu of a Windows Server 2008 R2 (SBS 2011) using Group Policy?
6
votes
4answers
642 views

Is it better to map drives and printers to users or computers?

I've posted a few "best practices" questions like this. Question says it all. Current practice is to map the drives and install the printers on the computer for each user/computer combination. I'd ...
0
votes
2answers
1k views

Startup Script + Local System user = no functional program UI

I currently have a group policy startup script (CMD file). It runs during startup, as expected, but there is no UI for the program the script invokes. For example purposes, let's say I have this ...
0
votes
1answer
1k views

Deploy BgInfo Utility via a GPO

When I deploy to a client the BgInfo utility via a GPO,I am receiving the following error. Error code:800A408 here is my script code. Set objShell = CreateObject(“Wscript.Shell”) objShell.Run ...
1
vote
2answers
6k views

Difficulties with Server 2008 R2 Group Policy not applying

I'm having some problems with a newly installed Server 2008 R2 box. I've created my Domain and users and all the computers are up and connected. Everyone can login and share folders, no problems ...
1
vote
3answers
680 views

Adobe Reader keep uninstalling when deployed via Group Policy

I've configured a Group Policy Object to install Adobe Reader X, but one machine keeps uninstalling the package on start-up - even if it is installed manually. This one machine also doesn't show ...
1
vote
2answers
804 views

Printer Deployment Issue

I've got some network printers shared on a 2003 server. I set them as deployed in a GPO. All my XP machines get the printer. My windows 7 machines show success in applying the policy, but the printers ...
5
votes
1answer
8k views

“log on as a batch job” user rights removed by what GPO?

I am not much of a server administrator, but get my feet wet when I have to. Right now I'm running some COTS software on a Windows 2008 Server machine. The software installer creates a few user ...
5
votes
2answers
393 views

Fixing Users and Computers accounts structure in Active Directory

I'm trying to fix a completely unplanned and unstructured Active Directory hierarchy. When the domain was first created on Windows Server 2000, no containers or OUs whatsoever were created for users ...
1
vote
1answer
459 views

Applying group policy objects to OUs

I'm having a bit of a hard time understanding the scope of GPOs, links, and security filters. From what I understand, then LINK establishes to whom the GPO may apply to and that the security filter ...
0
votes
1answer
664 views

Is there a GPO setting to enable/disable “show autocomplete suggestions” in word 2003?

Searched through all the GPO settings a few times and can't see anything for this setting... Does anyone know if this can be done? Thanks!
6
votes
2answers
8k views

GPO to lock workstation after it is idle for X minutes without forcing a specific screensaver

I'm trying to lock XP workstations after a period of inactivity via GPO. From what I can tell, one of the requirements is that a screensaver must be set. It appears that the only way to force the ...
2
votes
2answers
381 views

Adding and Organizing clients in WSUS

I have set up WSUS on a Windows Server 2008 box and I have it working with just my machine reporting to it. Now that I'm ready to make this large scale across the company, I'm trying to figure out ...
0
votes
1answer
3k views

Server 2008 R2 GPO Lock Down - Remove Search Everywhere

I'm trying to create a lock down GPO on a terminal server running Windows Server 2008 R2. Is there a way to get rid of that search field that is in the Start Menu? I think it is called 'Everywhere ...
2
votes
1answer
4k views

EventID 1058 Code 5, Sysvol is subdir of Sysvol - how to fix?

I have been trying to resolve this error, like many others: The processing of Group Policy failed. Windows attempted to read the file ...
0
votes
1answer
148 views

Server 2008 Group Policy controlled workstations?

We currently have around 35 workstations on our network each connected to our Server which is running as a domain controller, DNS server and file server. We are an animal hospital which means there ...
2
votes
1answer
3k views

Associate .ps1 to powershell.exe through domain GPO on 2008r2

I need to associate .ps1 with powershell.exe instead of Notepad via GPO from a 2008r2 DC. I've seen one question mention CSE under Computer Configuration\Preferences\Control Panel Settings\Folder ...
2
votes
2answers
662 views

Am I missing something about pushing a PS script via domain GPO

I've got a script that works. See here. Now my problem is getting it to run via a domain GPO. On my test clients, I've set the ExecutionPolicy to unrestricted. I've tried setting it as a startup ...
3
votes
1answer
483 views

Internet explorer 8 and group policy

Server environment: Windows Server 2003 R2 Clients: Windows XP SP3 with Internet Explorer 6 Change management: Conservative We are planning a phased implementation of IE 8. The problem is, in ...
2
votes
3answers
3k views

How do you add a batch of registry entries to group policy?

For example I want to add Google Search as the default search service to IE. The seven registry entries are below. Do I really have to enter each one individually under User Configuration > ...
0
votes
2answers
465 views

Custom Windows Group (Server 2008 R2) Security Principal

What is the easiest way to provision a Windows group on Server 2008 R2 that will allow me to add it to the list of authorized people that can RDP? Eg when I look at the object types allowed I have ...
1
vote
2answers
5k views

Prompt message after logon

I am trying to get the group policy to work where after logon the user gets a message prompt. I've set the group policy, but the message doesn't show. I first searched and seen another post with the ...
1
vote
1answer
284 views

Do GPO's cascade throughout child resources?

For example, imagine I have a GPO rule that states that nobody can change their wallpaper. In a child user group, would a GPO stating it can change take higher priority? Sort of like CSS, more ...
0
votes
3answers
2k views

Printing Problems Windows 7 group policy

I have a 2008 server that is the print server. I support Windows 7 clients that are mapping printers by Group Policy preferences. I have it as a user preference (because computer policies don't have ...
0
votes
1answer
644 views

Windows 2003 Domain - No Screensaver Tab visible on XP Clients (GPO Issue)

i have the following problem with our Windows 2003 infrastructure: Environment: There are two AD controllers running Windows 2003 Enterprise and some memberservers. Our network consists of some ...
2
votes
3answers
8k views

GPO Comparison Tool

Does anyone know of a GPO comparison tool, preferably free (or cheap). I need to compare settings from two GPOs to see what's missing in the target GPO. edit: just to clarify, I need a tool which ...
0
votes
1answer
463 views

Active Directory Group Policy

I have Windows Server 2003 Standard Edition SP2 64 bit and I have OU groups to apply policies like WSUS, deploying programs, etc. I had updated of administrative tools pack so I decide to install ...
2
votes
1answer
3k views

GPO Computer Settings not updating. Default Domain policy and all User Settings work fine

2008R2 Server, Win7 Clients I have a small domain with only three GPOs linked to the domain itself. First (link order 1) is the Default Domain Policy, which was created automatically and has settings ...
1
vote
2answers
4k views

How to allow access to firewall settings (domain/windows 7)

I'm running a Windows 7 Workstation in a domain setting. I'd like to disable the local firewall (temporarily), but I am not allowed to do this because of restrictions in the domain. "For your ...
0
votes
1answer
701 views

Adding WinRM .adm template to Win Svr 2003 AD

I'm trying to enable WinRM on our machines via Group Policy. When I use GPMC against one of our Win Svr 2003 DC's, add a new GPO and edit it, and navigate to Computer Configuration > Policies > ...
2
votes
2answers
2k views

Can you create multiple separate Active Directory GPO Logon Scripts?

In my active directory I currently have a GPO on the domain object that contains a logon script. I want to create a new group that I can add users to and have it run an additional / different logon ...
0
votes
1answer
4k views

Folder Redirection does not sync files back to share folders

I have a problem with folder redirection on Windows 7 client + Windows 2008 Server R2. The problem is files created in redirected folders (e.g. My Documents) never get synced back to the server. It ...
0
votes
1answer
691 views

Create a shortcut to users desktop and enable it for offline files, through script or GP

What I would like to do is have a shortcut on the desktop of all users that takes them to a network folder containing files. Easy enough to do. The part I am wanting to add on is to set it for ...
0
votes
1answer
433 views

Remotely Remove firewall thats blocking RPC

Here's one for you. A while ago one of our big clients bought and partially rolled out an integrated connectivity package provided by a large UK mobile provider. The software includes a firewall ...
2
votes
1answer
2k views

IE9 GPO Setting “Configure Tracking Protection Lists”

I've just installed IE9 on my workstations and Server in our network. According to technet article http://technet.microsoft.com/en-us/library/gg699401.aspx There is a GPO setting for IE9 called ...
1
vote
2answers
615 views

Restrict windows 2003 user to a single program

I have a windows server 2003 sp1 (maybe will update to sp2 tomorrow, didnt update cause never needed). Currently it has just a user, the admin. But, I would like to create a user, so it could access ...
0
votes
2answers
671 views

Remote Desktop Services - remove adminstrative tools

I have setup Remote Desktop Services on my Windows 2008 Server and having some issues with the permissions. I made a GPO that removes the Administrative Tools from the Start menu but normal users can ...
0
votes
1answer
3k views

Oracle 11g dbca on Windows Server 2008 failing with error about services - needs some more permissions?

The domain account (a slightly-reduced privilege account for managing servers) we're installing with is a member of the administrators group on the machine, but doesn't seem to have exactly the same ...
0
votes
1answer
2k views

Cannot Change “Log on through Terminal Services” in Local Security Policy XP from Server 2008 GP

This is a mixed AD environment, Server 2003 R2 and 2008 R2 I have a 2003 AD R2 and a 2008 R2 AD. GPO is usually managed from the 2008 R2 machine. I have a RD Gateway on another server as well. I ...
0
votes
2answers
1k views

HOWTO: registry settings for domain user for specific user\computer combination

I have two groups of computers (regular and hardened) and two groups of users (regular and administrators) and I need to have different registry settings for each combination (mostly windows policy ...