Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
1answer
188 views

Centrally Deploying a wireless SSID

So I want deploy a WPA2-Personal SSID that our managed clients will already have the network settings setup for(windows vista and windows 7 x64). I also want to deploy the network configuration via ...
0
votes
2answers
270 views

Group Policy to prevent accessing other sites

We have a website, a library management system - http://mylibrary. Now, for a certain set of users alone accessing via Citrix, I need to provide access to this URL. However, they should not be able ...
3
votes
3answers
12k views

IE8 Compatibility View group policy list not working

We recently rolled out IE8 to our organisation (2,500 people). Given we had several legacy internal web apps that did not support IE8 (but worked fine in Compatibility Mode), we decided to put our ...
1
vote
1answer
1k views

Active Directory - Define logon hours from Group Policy (Windows 2003 R2)

I have a bunch of computers in an OU in my Active Directory. These computers are located on a theoretically less secure site (they are in a warehouse) I want to stop these computers being logged in to ...
0
votes
3answers
2k views

Active Directory - Lightweight Directory Services and Domain Password Policy

Greetings all, We have an active directory domain which enforces a strict password policy. Hooray! Now, for the project we are working on, we are going to be storing users of our website ...
4
votes
3answers
2k views

Auto Log-Off Windows users - Windows 2003 domain

I am trying to make windows clients automatically log off after some time, I have been trying to use the winexit.scr which I have seen working else where in a similar environment. After working ...
0
votes
2answers
272 views

How can I set password restrictions in my domain?

Most of the users on my Active Directory use the same password. How can I restrict them of this? Can I use a GPO?
0
votes
3answers
90 views

GPO config problems

I'm administrating an ou. And I have applied a rule for screen saver lockout. Some OU's under my OU have applied the settings and some haven't..., What can be the cause of this? Is there a way to ...
2
votes
4answers
1k views

Blocking downloads (But allow Windows Update) using Group Policy?

We have a Draytek VigorPro 5510 that is configured to block downloads on the 10.0.65.xxx range (this is the range all of our user workstations are on) but allow them on 10.0.10.xxx range (this is the ...
2
votes
1answer
1k views

Clients of replica WSUS aren't targetted to groups and appear in 'Unassigned Computers'

I have two WSUS v3 servers, our company has a single domain AD that spans two sites, and each site has one WSUS server. The stub site's WSUS server is configured as a replica. Settings, groups, ...
6
votes
2answers
5k views

GPO Installs - Differentiating between 64 and 32 bit systems

What is the easiest way to use group policies to install the 64 bit version of a package on 64bit systems and the 32bit package on 32 bit systems. I have done some searching and I am not seeing ...
1
vote
3answers
14k views

Allowing users to install fonts in Windows 7 (through GPO)

This is somewhat related to my previous question, http://serverfault.com/questions/48155/why-do-installed-fonts-disappear-after-reboot. Having got the font install issue sorted out under XP just ...
1
vote
1answer
2k views

Grant “Manage Printers” permission for all printers on XP clients via GPO?

Is it possible to grant "Manage Printers" permissions to all printer objects on client machines via group policy? By default, it looks like this permission is granted to Power Users and ...
1
vote
3answers
4k views

Group Policy for IE Security Zones

We are currently using the following Group Policy to control the Internet Explorer security zones: User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control ...
2
votes
1answer
854 views

Kiosk Computer GPO

We have several kiosk PCs that are used in common areas. I have GPOs in place to lock these machines down (one GPO has all the Computer settings and another has all the User settings). These GPOs are ...
1
vote
1answer
286 views

PolicyMaker for Windows Server 2003

I still have a Windows Server 2003 domain. We'll be moving this to Server 2008 R2 in February. I know in 2006, Microsoft bought DesktopStandard and moved their PolicyMaker product into what's now ...
2
votes
3answers
21k views

Default Search provider in Internet Explorer 8 Via GP?

Does anyone know how to change the default search provider in IE8 Via Group Policy? IE7 seemed to work okay but once I rolled out the IE8 browser update via WSUS, it defaults back to Bing search on ...
0
votes
1answer
194 views

Can't see all GPO listing for Windows Update

Yesterday, I was working on a Dell computer, installed the GPMC and then, I was able to see all listing for Windows Update GPO. I'm trying to install WSUS... This morning, I use my normal laptop and ...
4
votes
3answers
640 views

Redeploying Office to a single client after manual uninstall

One of our client PC's recently got random crash issues with MS Word. I manually uninstalled Office 2003 locally on the client, ran "gpupdate /force /boot" and expected the client to reinstall Office ...
0
votes
1answer
218 views

Latest WSUS Server Sync expired Group Policy Preference CSEs

Last night's sync of my WSUS server expired the KB943729 updates for all OS versions. I can't seem to find a reason for this. I assume they're due to be replaced, but haven't been yet. Unless I'm ...
0
votes
1answer
692 views

Problem accessing GP from Windows Server 2003

I got a problem with my DC configuration: most computers can access the GP just as they should, just one Windows Server 2003 R2 (SP2) is unable to read the policy information. I get the following ...
2
votes
1answer
1k views

Moving Group Policy Folder Redirection root path

I have all my users on my domain enabled for Folder Redirection and they all point to the same root path (Basic Redirection). Here are the settings. I want to move only a subset of those users out to ...
0
votes
1answer
10k views

How do I install an update to all my machines via group policy?

I'm just learning to use group policy to administer my network. I found the handy feature of mapping drives, but it wont work on xp without an update. I downoloaded the file, but is there a way to ...
5
votes
1answer
905 views

“Touching” software deployment group policy programmatically or via script

I have an internal application that uses the Windows Installer. Each update to this application is a "major upgrade" (different product code, same upgrade code) and it calls RemoveExistingProducts. ...
5
votes
2answers
1k views

Windows 7 Office 2007 GPO install

I have a GPO that works fine for installing Office 2007 Pro Plus on Vista and XP but when it installs Office on Windows 7 somehow the office key does not get entered via the customized msp, and needs ...
9
votes
6answers
10k views

Group Policy: Administrator Rights for Specific Users on Specific Computers

I'm a programmer stuck trying to administer an Active Directory setup for a small company. The Domain Controller is running Windows Small Business Server 2008. We have a staff of field workers using ...
4
votes
5answers
60k views

Enforcing lock screen after idle time via GPO

I run a network of computers and I would like enforce a GPO which locks the screen after a predefined idle time. I can't find this setting, I can only find a screen saver idle time setting, how can I ...
1
vote
2answers
2k views

Enabling remote desktop via GPO

I'm administrating a network of XP SP2 machines, and I would like to enable remote desktop for every one of them. How can I get this done using a GPO? Thanks.
0
votes
2answers
1k views

Windows startup script using Samba to install programs

I'm trying to install a couple of programs - McAfee's ePO agent & MS's SMS client via a startup script on our ~300 PCs. The problem I have is that the startup/login scripts that the System ...
0
votes
4answers
1k views

Change Location of Mapped Drive using VBScript at Logon

I have a script, applied by group policy, that runs at user logon to remove specific mapped drives if they exist and then remaps them. Here's an example of the script: Option Explicit Dim ...
0
votes
3answers
118 views

Find Edit rights on GPO

All DCs : Windows 2003 SP2 DFL& FFL at Windows 2003 In our environment we have 500+ GPOs, I want to know which groups/users have been given rights to edit GPOs. and we need this list for each ...
0
votes
2answers
620 views

Installing Application with the Windows Installer disabled by Group Policy

We are using a Samba "Domain" to manage our PC's (all our XP). We are just rolling out McAfee ePO - this needs to install the framepkg.exe on every machine and then update whatever version of McAfee ...
0
votes
1answer
193 views

Add IUSR_Machine to group using group policy

Background: My developers complained that they were no longer able to run IIS in their development environments and they very usefully tracked it down to the following issue: ...
7
votes
2answers
23k views

Mapping printers using Group Policy Preferences; works on Windows XP, not on Windows 7 x64

I'm trying to use Group Policy Preferences to manage user connections to shared printers. The print server is Windows Server 2003 R2 Std edition. Several printers are installed, and I've added x64 ...
0
votes
2answers
2k views

Remove machines from WSUS

We're running the latest WSUS server 3.0 sp-something-or-other. Add the admin template to domain group policy to get everyone into the pool, so to speak. Now, for various reasons, I have two servers ...
1
vote
4answers
664 views

Group Policy: Setting Desktop Access Rights

I work part time as a network/system administrator for a small school. The school uses a commercial student information system that gets updated quarterly. After the server is updated users cannot ...
0
votes
2answers
1k views

Unable to install Office 2007 x64 on Windows 7 via GPO

I have a GPO that I use to push Office 2007 to our XP and Vista clients in our 2003 domain. I just installed a Windows 7 x64 Pro RTM machine and I'm trying to install Office 2007 in the same manner, ...
0
votes
2answers
239 views

software package disappeared in GPO after access rights change

in GPO, this item Computer > Software settings > Assigned applications > IE8_package was on Security tab set "Authenticated users" to "Deny". After that it disappeared from GPO, it is ...
0
votes
2answers
874 views

Where can one disable the start menu items for clients of an AD using GPMC?

I have a windows AD server setup with a few user groups, however I need to add a policy so that any user that log into the domain items or the entire start menu should be disabled. I can use Group ...
0
votes
4answers
1k views

How do I debug a problem with GPO not allowing RDP sessions?

I have a Windows 2008 SP2 VM and I am attempting to configure it to allow people to log into it using MSTSC client. As far as I understand you can set this up locally enabling RDP and adding users to ...
0
votes
2answers
2k views

Group Policy Exemptions using filters

I have set a policy to enforce screensaver with a lockout after 7 minutes prompting for password. I have found that there are a few machines as exemptions. I have made another policy to disable the ...
0
votes
2answers
165 views

Is it possible to use GPO's to your advantage with RDP over HTTP?

I'll start out by saying that I am an extremely basic "n00b" to Servers. It was a miracle that I could even get some the things to work. Realize that this is a Server 2003 on my home network so ...
0
votes
2answers
885 views

Troubleshooting Windows Group Policy Permissions

I have got stumped on a privileges issue on a Windows AD Domain. I have a Windows Server 2008 Server (with Several Windows Server 2003 vms) which are all members of a domain (but in no way backup ...
1
vote
2answers
3k views

Blocking password policy (expiry) for a particular OU in AD

Situation is this: I need to have a particular container in my AD environment which blocks password expiry policy, but accepts all other policies. Is this something that would work by simply adding ...
5
votes
4answers
8k views

Force windows 2003 session to log off (RDP)

We have a number of Windows 2003 machines that we RDP on to. Naturally, a lot of people forget to log off, and simply close their rdp window - which causes the max number of sessions exceeded error. ...
0
votes
1answer
625 views

How to do folder redirection

I am using the instructions found here: http://www.informit.com/guides/content.aspx?g=windowsserver&seqNum=61 on a windows 2008 machine. My question is in regard to this step: 2.From the left ...
0
votes
5answers
12k views

How to auto mapping network drive using GPO in 2k8

I have a .bat file which is net use z: \\.... to map network drive, and tested it with no problem under win xp Then I try to put that as "startup script" under GPO (which is managed by 2k8 AD) -> ...
0
votes
1answer
128 views

Restoring Windows Group Policy

After playing with some Group Policy settings and breaking privileges for System accounts, I have learnt the hard lesson to have a proper configuration management policy in place. So that will cover ...
2
votes
3answers
402 views

List of GPO's for Windows Admins

I am hoping we can get a list together of usful/must use GPOs for Windows Admins. Maybe explain how to set them up and why they are helpful?
4
votes
1answer
2k views

How can I disable the “Do you want to allow this website to open a program on your computer?” warning for a specific program/moniker?

I've been playing with new URL monikers in Windows for a utility I'm working on. When I run the new URL from Start > Run, it just runs. If I send the URL to myself via Notes or enter it into the IE ...