Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
2answers
1k views

Automatic Log off in Windows 7

Is there a way of using group policy to set a Windows 7 AD attached desktop to logoff after 15+ mins? I want the machine just go back to the login prompt after kicking off the user.
4
votes
1answer
4k views

How do I package this vbscript as a msi for Group Policy

I had a developer that is no longer with us create an msi to do this for me, but the package is outdated now and we need to deploy new files. Basically I need to do the following: Take the code at ...
0
votes
2answers
174 views

How do I get detailed information about what happens during logon

Due to my IT department leaving I am now responsible for all our IT systems. I now have several problems to get my head around and fix. I run Active Directory on windows server 2003 and use group ...
13
votes
4answers
5k views

How can I make WSUS less invasive for our users?

We have WSUS pushing updates out to our user's workstations, and things are going relatively well with one annoying caveat: there seems to be an issue with a pop-up being displayed in front of some ...
1
vote
2answers
893 views

Is it possible to set a group policy (or similar) which kills certain processes between certain hours?

The title really says it all. We're running a windows network and there are some applications which benefit from being killed overnight, but we don't want to have to enforce a reboot to do that. Is ...
0
votes
2answers
722 views

Change local time on XP box - local admin but group policy restricts time change

I am a developer in need of doing some temporal unit testing on my local XP box. I am local admin but there is a group policy enforced centrally that prohibits changing local time (a severe case of ...
0
votes
2answers
8k views

Default Domain Policy Overriding Custom GPO even though Custom GPO is Enforced

I'm trying to apply a custom GPO to an OU with a specific account in it. Even though I enforce the GPO, the default domain policy is still overriding my custom GPO and settings are not being applied ...
2
votes
3answers
28k views

Config Time Service on Server 2008 DC using Group Policy Only

I want to configure the Time Service using only GP in a Server 2008 R2 domain. I have created a GP as follows: Computer Config, Policies, Administrative Templates, System, Windows Time Policy: ...
0
votes
1answer
1k views

enable offline files for all users home drives via Group policy or other

I am trying to get all users of particular notebooks to make the user's H: drive offline. I know you can do it manually but is there a way to set this value somewhere so that users don't have to do it ...
0
votes
1answer
8k views

Limit folder size on Windows Server 2008

I do have a file server on Windows server 2008 and I am trying to limit the size of each folder as 2GB. What is the best way to do it? I have two types of users which are connected as an Active ...
0
votes
1answer
2k views

Active Directory Password Policy Problem

To Clarify: my question is why isn't my password policy applying to people in the domain. Hey guys, having trouble with our password policy in Active Directory. Sometimes it just helps me to type out ...
1
vote
2answers
51 views

Computers displaying an unwanted password change prompt

We run a small network of users from a central SBS 2008 server that handles group policy & AD. Most of our users operate under a policy that propts them for a password change every 6 months as a ...
2
votes
4answers
3k views

Why would my domain admins turn off UAC? [closed]

I'm a developer of internal software in our company, I've gotten used to UAC in Win7, I prefer to run with in enabled so that our software works correctly with it enabled. Sysadmins have recently ...
2
votes
1answer
219 views

When GPO no longer applies, is deployed software automatically uninstalled?

Are packages installed by GPO automatically removed when the GPO no longer applies?
1
vote
1answer
463 views

Temporary user-profiles on Windows Server 2008 TS

for a publicly accessible terminal server I have created a user profile which only allows running of a few programs (demonstration of applications). This results in many people connecting to the ...
5
votes
1answer
41k views

How to force background colour with GPO centred wallpaper?

As subject really. I can force a wallpaper through GPO, but how can I mandate that the desktop should be black? We have a mix of XP, Vista, and Windows 7 machines.
4
votes
2answers
516 views

Change default profile directory per group

Is it possible to force windows to create profiles for members of one active directory group in a different folder from members in another active directory group? The school here uses DeepFreeze to ...
1
vote
1answer
106 views

What aspects of a GPO is stored in AD

I'd like to know what components of a GPO are stored in Active Directory. Is it all on the file system?
0
votes
1answer
2k views

Can we disable/hide Automatic Update notifications for Local Admin users on Windows 2008 TS?

We have a Windows 2008 standard Terminal Server which runs our business management software, which itself requires local admin access to run. When Automatic Updates are available users are presented ...
2
votes
2answers
9k views

Deploying internal certificate via GPO - will this only work for IE?

I am contemplating adding AD CA role to our server and using GPO to add a self signed, trusted certificate to all internal clients (to ease testing)... Some of the related questions regarding this ...
0
votes
2answers
2k views

Unable to access NAS device

I have a 3 site network A, B, and C. Each site has its own DC, that replicates to the others. Each site also has a local NAS (Thecus) device. The NAS devices should be accessible from every other ...
0
votes
1answer
907 views

How to see the RSOP for an OU?

Anyone knows how to see RSOP for an OU? If I just launch RSOP I see the policies for the domain but I want to know what's going on with one of the OUs that's misbehaving. And I can't find a way to see ...
0
votes
1answer
502 views

How to script GPO in Windows computers without Active Directory?

Does anyone know how to script GPO for users in a Windows computer that is not on any Active Directory network? I can't use GPMC because it doesn't work without a domain. I have been searching the ...
1
vote
0answers
575 views

Group Policy Screensaver's

Recently my company has decided that you must have the company wallpaper and screensaver. I have created two GPO's to do this applying to users within the domain, the first GPO applies the wallpaper ...
0
votes
1answer
1k views

Installing fonts via GPO?

Could I get confirmation that I haven't missed a "smart" way to do this, and it comes down to a computer startup script? If you do anything like this with non-standard fonts, any experience of the ...
0
votes
1answer
991 views

Group policy not updating for user, corrupt profile?

I have 1 user on my SBS 2008 server that when logged in has no files in their documents/desktop etc. So the user's folders have not been redirected to the server. I tried to run gpupdate /forceto ...
1
vote
2answers
1k views

Does anyone else uses Quest Authentication services? I have an issue with startup scripts not being launched by the GPO

we are using QAS 4_1_0_22 and I'm trying to launch an startup script from GPO when a computer starts. The script is lanched if I apply it to the user, but is not launched when configured as startup ...
3
votes
1answer
2k views

Group Policy processing and autologon on Windows 7

I'm trying to accomplish a few things via Group Policy on Windows 7. Software Installation, map drives, map printer, etc. I've got these computers set to autologon. The problem I'm running into is ...
-6
votes
2answers
1k views

Join a domain without adopting group policy… through registry permissions? [closed]

As a local machine admin, is it possible to join a domain but still block group policy from being applied? I'm thinking it should be possible to remove all write access to the registry under, for ...
0
votes
1answer
2k views

Setting a memory quota for Microsoft Terminal Server connection

Is there a way to 'throttle down' the amount of memory accessible to a given user (or all users) on a terminal server session? Note, this is just to debug an in-house app without physically going ...
1
vote
2answers
919 views

GPO does not get applied immediatly - normal behaviour?

We are currently testing an environment in which we roll out pc's with SCCM. We've been having trouble for a while now with computers on which we deploy XP do not show up as "in the domain" or with ...
3
votes
1answer
2k views

Folder Redirection on certain profiles is Labeled Wrong

FTR I also suffer from "previous-admin-itis". I had two client computers (Domain=SBS2003, Clients=Vista) that were using the improper folder for folder redirection. Instead of pointing My Documents ...
0
votes
5answers
585 views

Group Policy: Prevent Changing A/D Domain

is it possible to prevent local administrators from leaving the current A/D domain by group policy? We are using Windows Server 2008 and Windows XP/7 as clients. Thanks.
1
vote
2answers
1k views

Outlook - Setting Default Font via GPO?

I have a nasty feeling I know the answer to this one, however... We're looking at how to enforce a corporate standard on email, obviously outbound is the priority over internal mail. Is there any ...
2
votes
2answers
836 views

Do HKLM registry keys get removed from group policy when changing organisational unit in Active Directory?

My understanding of the way group policy works is that some of the settings in the policy in effect make changes to the HKLM registry hive. They equally make changes in the HKCU part of the registry. ...
1
vote
1answer
3k views

Disable Outlook signatures by group policy

Is there a way of disabling Outlook signatures for all users/computers via group policy and administrative templates? We are implementing a third-party centrally managed signature solution and want ...
-1
votes
1answer
93 views

Spawned Process Terminated in GP Startup Script

I have a Group Policy Startup Script which runs synchronously. I now need this script to run one process asynchronously. So far I have managed to get the spawned process running via the command below, ...
0
votes
2answers
10k views

Desktop Shortcut to network drive using group policy

I am looking to create a desktop shortcut to a network drive. We are on a domain, so I am looking to do this via group policy. I would like the shortcut to be placed on the users desktop and be to the ...
0
votes
2answers
239 views

Win7 and Server 2008 - multiple intermittent issues

I'm battling a hydra here, and I'd love a hand (and an aspirin) We've just upgraded to Windows 7, and Server 2008. We've got users (students) using mandatory profiles signing in, and one of a few GPs ...
0
votes
1answer
3k views

IE8: Prompting for downloading files although website is a trusted site

We have a website setup as a trusted site which is set by group policy. Despite this being a trusted site IE8 still displays the Download File toolbar pop-up instead of file download dialog box. This ...
2
votes
2answers
2k views

GPO startup script not copying files

I created a GPO startup script to execute for computers in a specific AD container. The script takes a file from the AD netlogon share and places it on a directory on the computer. Given the right ...
0
votes
1answer
167 views

Turn on browser caching per site

We have a windows 2003 AD domain users use IE6 clients. Browser caching is turned off as a domain policy. Question is: Is it possible to override this for a group of users for a specific web site?
2
votes
3answers
4k views

What group policy settings do you apply for laptop users?

I've a number of users with laptops who take them off-site. Currently I've got policies mapping drives and the like, which won't work unless they're connected to the domain. It also takes a while ...
1
vote
1answer
2k views

Internet Explorer Maintenance GPO, only set some settings

I'm trying to set up a GPO to add 3 sites to the Trusted sites zone and change some of the security settings for the same zone (Allow unsigned ActiveX and such). I used a clean PC and added the ...
0
votes
1answer
178 views

XP shutdown script using the network

On an XP Pro box, using gpedit.msc I set up a shutdown script to log something over the network. However, the script was failing, and after some research, it appears that the network is practically ...
0
votes
2answers
1k views

Folder Redirection and Offline Files make for 1 hour logons on laptops

I have enabled Folder Redirection, and Offline files via group policy, and now laptops take an and to "applying computer settings" and then the logon itself takes an amazing amount of time. These are ...
0
votes
1answer
126 views

Windows Server 2003 Updates settings and client Win7 computers

I have a Windows Server 2003 machine which is the server for a small network of Window 7 Pro machines. I have set the "Windows Update" settings in group policy to download only and ask user whether to ...
1
vote
2answers
284 views

Using Active Directory Security Groups as Hierarchical Tags

Because active directory security groups can... hold objects regardless of OU. be used for reporting, documentation, inventory, etc. be referenced by automated processes (Get-QADGroupMember). be ...
1
vote
4answers
290 views

Preventing a program from opening

I am supporting a few offices across the country running Windows XP. They are stand alone, no Windows Server or Active Directory, anything like that. I just switched them over to Google Apps, and in ...
0
votes
1answer
642 views

Policy exception for Windows User Account Controls and Update.exe

So... Apparently Windows has a list of filenames that require extra rights to run, included in this list is Update.exe, which happens to be the name of the file I'd like my clients to run without ...