Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
2answers
237 views

software package disappeared in GPO after access rights change

in GPO, this item Computer > Software settings > Assigned applications > IE8_package was on Security tab set "Authenticated users" to "Deny". After that it disappeared from GPO, it is ...
0
votes
2answers
867 views

Where can one disable the start menu items for clients of an AD using GPMC?

I have a windows AD server setup with a few user groups, however I need to add a policy so that any user that log into the domain items or the entire start menu should be disabled. I can use Group ...
0
votes
4answers
1k views

How do I debug a problem with GPO not allowing RDP sessions?

I have a Windows 2008 SP2 VM and I am attempting to configure it to allow people to log into it using MSTSC client. As far as I understand you can set this up locally enabling RDP and adding users to ...
0
votes
2answers
2k views

Group Policy Exemptions using filters

I have set a policy to enforce screensaver with a lockout after 7 minutes prompting for password. I have found that there are a few machines as exemptions. I have made another policy to disable the ...
0
votes
2answers
165 views

Is it possible to use GPO's to your advantage with RDP over HTTP?

I'll start out by saying that I am an extremely basic "n00b" to Servers. It was a miracle that I could even get some the things to work. Realize that this is a Server 2003 on my home network so ...
0
votes
2answers
874 views

Troubleshooting Windows Group Policy Permissions

I have got stumped on a privileges issue on a Windows AD Domain. I have a Windows Server 2008 Server (with Several Windows Server 2003 vms) which are all members of a domain (but in no way backup ...
1
vote
2answers
3k views

Blocking password policy (expiry) for a particular OU in AD

Situation is this: I need to have a particular container in my AD environment which blocks password expiry policy, but accepts all other policies. Is this something that would work by simply adding ...
5
votes
4answers
8k views

Force windows 2003 session to log off (RDP)

We have a number of Windows 2003 machines that we RDP on to. Naturally, a lot of people forget to log off, and simply close their rdp window - which causes the max number of sessions exceeded error. ...
0
votes
1answer
612 views

How to do folder redirection

I am using the instructions found here: http://www.informit.com/guides/content.aspx?g=windowsserver&seqNum=61 on a windows 2008 machine. My question is in regard to this step: 2.From the left ...
0
votes
5answers
12k views

How to auto mapping network drive using GPO in 2k8

I have a .bat file which is net use z: \\.... to map network drive, and tested it with no problem under win xp Then I try to put that as "startup script" under GPO (which is managed by 2k8 AD) -> ...
0
votes
1answer
124 views

Restoring Windows Group Policy

After playing with some Group Policy settings and breaking privileges for System accounts, I have learnt the hard lesson to have a proper configuration management policy in place. So that will cover ...
2
votes
3answers
402 views

List of GPO's for Windows Admins

I am hoping we can get a list together of usful/must use GPOs for Windows Admins. Maybe explain how to set them up and why they are helpful?
4
votes
1answer
2k views

How can I disable the “Do you want to allow this website to open a program on your computer?” warning for a specific program/moniker?

I've been playing with new URL monikers in Windows for a utility I'm working on. When I run the new URL from Start > Run, it just runs. If I send the URL to myself via Notes or enter it into the IE ...
0
votes
2answers
2k views

Active Directory Group Policy Security Groups Differ From User's Groups

I've been having some weird group policy issues lately, so I wanted to test on a clean setup and haven't had any luck, so I'm hoping someone else can shed some light. This is on Windows 2003 R2. I ...
0
votes
1answer
2k views

Using AD and GPO to turn off print and file sharing

I want to start building, I believe a base GPO to lock down the machines that will be on the network. How do I go about doing this. The first thing I want to do is disable file and print sharing for ...
0
votes
3answers
4k views

Security Tab missing on internet explorer

I have a windows 2003 SBS domain, which I administrate to the best of my limited abilities. I need to install an active X-control for which I must change settings in internet explorer. It surfaced ...
1
vote
1answer
2k views

How can I create a REG_MULTI_SZ key through Group Policy?

I'm trying to add an entry to registry via Group Policy, but I can only seem to create either a REG_SZ or REG_DWORD value. If I insert the value as a REG_SZ key then it isn't picked up / processed as ...
0
votes
1answer
994 views

Migrating workstations from one domain to another

We recently had a new management company come in for our business - new AD forest, totally new domains, totally new everything. Our old machines were in their own AD forest and domain. From what ...
0
votes
2answers
217 views

How to apply GPOs without having to relog users?

hI, I am using Windows Server 2008 and I have to do a final migration from the Windows 2000 Server (demoted long ago). I have to transfer group, public and user files on the new server. The only ...
1
vote
1answer
8k views

NetLogon and RPC Errors

Situation: Co-located DCs connected by T1 to client working location. The T1 is averaging at about 2/3 usage. All 1 Active Directory. I am trying to deploy a start-up script to clients at the ...
7
votes
3answers
758 views

What group-policies have you applied?

I have set about 10 group-policies, and it works OK. Although, it would be interesting to see what kind of things IT-administrators enforce. If you have a ton of policies, just show some, that you ...
1
vote
4answers
5k views

GPO for Multiple Home Page tabs in IE 7

Evening All, Here is the situation. The organisation in question currently has a GPO set which was primarily setup in IE6 days. This GPO enforced a non-changeable homepage of the company portal page. ...
2
votes
2answers
3k views

The system administrator has set policies to prevent this installation

I have set up a domain and added a workstation to it. I'm trying to install VMware server and it says, "The system administrator has set policies to prevent this installation". I tried running the ...
0
votes
1answer
7k views

IE8 Compatability View Mode for Intranet Sites Group Policy

Is there a group policy to disable this checkbox, I don't want compatibility view mode to be allowed on my network at all for anything or for any site. I don't even understand why Microsoft added it. ...
2
votes
1answer
795 views

WSUS vs. GPO: What Policy takes Precedence?

I have a WSUS 3.0 SP2 server that has XP Pro workstations getting updates from it. I have a GPO that specifies that the workstation should get updates from the WSUS server and install them at 3am ...
4
votes
3answers
28k views

How do I add a URL with a Windows Group Policy into a client's “Local Intranet Zone”?

I'm trying to add a specific web server URL into the local Intranet Zone on my client PCs using a Group Policy. Any ideas what policy to apply? I can do it via the Internet Explorer Internet ...
0
votes
1answer
1k views

Networkmapping script (VBS) Vista doesn't work, XP does

I've got a weird problem, (like always :p ) Okay: Situation: Windows 2003 domain with XP clients. With a GPO I'm running a VBS script on login to map a few drives. This works great on XP, but not on ...
0
votes
3answers
1k views

Restricting Internet Access with Group Policy

In a Windows Server 2003 environment, does anyone know a way of restricting internet access with groups and group policy?
3
votes
3answers
10k views

Domain User can RDP into Domain Controller?

Vanilla Windows Server 2008 x64 Standard DC (AD, DNS). I was remoting into my DC to do a bit of work and, thru force of habit, logged into the server using a regular domain account, not a domain ...
1
vote
3answers
2k views

SharePoint service configuration fails on Windows Server 2008 R2

I am building a SharePoint test farm with SharePoint server 2007 Enterprise based on Windows Server 2008 R2. There are 3 different virtual machines (Hyper-V), all in the same domain, UCTEST. When I ...
0
votes
1answer
153 views

Server 2003 Proxy Policy

I'm working on a small Windows Server 2003 domain that has a policy set on a single OU to apply proxy settings. At the time that this policy was created, it was reported to be working just fine. ...
0
votes
1answer
87 views

How do you globally remove the 'Post Reply' button from public folders in Outlook

We run on a Microsoft Small Business Server 2008 domain. Is there a way to manipulate toolbars via Group Policy? This is a fork from this question.
1
vote
1answer
407 views

custom adm file for IE search providers on Windows 2003

I have been stumped by this issue for some time, I created a custom ADM template for a customer to populate the search providers in Internet Explorer 7 and 8. The custom ADM works fine and I have set ...
3
votes
3answers
2k views

Is Active Directory Unreliable or is there Another Issue Here?

We have an organization of approximately 1200 Windows PC clients on an Active Directory network. We have noticed that there seems to be random systems that don't get policies set. For example, we ...
0
votes
1answer
982 views

New IE windows open in background on restricted computer

We have a new computer build that is locked down via GPO. We have locked it down as tight as we can, but now new IE windows that are opened with shortcuts open behind the active window. I can post ...
0
votes
2answers
1k views

Destroyed the Volume Shadow Copy Service for an Entire Domain

So I decided to add users to the Backup Operators group to all computers in the Domain by editing the default domain policy and adding a restricted group. I also set the Volume Shadow copy to start ...
1
vote
1answer
13k views

Event ID: 861 - The Windows Firewall has detected an application listening for incoming traffic

Firstly, my machines aren't compromised any person suggesting such will be DV'd. The security logs on some of my networks client machines (all Windows Xp Sp3) get filled with these useless error ...
3
votes
3answers
4k views

Language Bar Turn Off Advanced Text services Global Policy

Is there a way I can set a global policy to turn off advanced text services so I can stop having to click this checkbox 8 million times? Client base is all Windows XP and the domain controller is ...
0
votes
6answers
955 views

Disable User Account Remotely

I work for a highly distributed IT based consulting firm with approximately 150 users in the field at different client sites at any given time. As we have grown we have needed to ability to disable a ...
2
votes
1answer
5k views

Why do I have to DisableDHCPMediaSense in some WinXP clients for Group Policies to apply correctly?

This problem appears to apply to multiple XP clients connected to a 3Com Baseline2948 Gigabit switch. The clients don't share a common network card, some are Intel based, others nVidia. All clients ...
2
votes
2answers
16k views

How to import an ADMX into a GPO

I'm trying to deploy an policy for the compatabilty list in IE 8 though at this point I'd settle for just being able to use a .admx The basic problem I'm running into is when creating/editing a GPO I ...
5
votes
3answers
10k views

Is it possible to use Group Policy to grant the permission to manage Windows services?

Is it possible to use Group Policy to grant the permission to manage Windows services? I would really like to know if this is even possible, and if so, where do you recommend I look for more ...
5
votes
2answers
5k views

Terminal Server - Group Policy prevent command line

I have a Windows 2008 Terminal Server. Terminal Server Configuration(licence server, session broker, etc) is managed by group policy. If i want to disable logon via: change logon /disable The Error ...
1
vote
1answer
1k views

Installing Group Policy Template

We're prepping to roll out IE8 to our organisation. I'm trying to figure out how to install the policy template to the W2K3 DC so I can configure the policy options. I get the feeling that installing ...
10
votes
6answers
6k views

What are the popular (free?) options for application deployment?

I manage a small school network with about 150 machines. I am looking for an easy way to deploy software to all the machines without having to visit each one. I've used Symantec Ghost to get the ...
12
votes
3answers
19k views

What is the order group policy settings are applied?

So I have been reading the document "Group Policy processing and precedence". I get that policies are applied in the order of local, site, domain, organizational unit, child organizational unit. The ...
0
votes
2answers
858 views

Managing Users Logging into Multiple Workstations with Group Policy or AD Settings

Has anyone found a good way within Active Directory or Group Policy in order to prevent users from logging into multiple workstations simultaneously? As a bit of background, I currently am a System ...
3
votes
4answers
14k views

How to disable WSUS on our domain?

Our Network Admin, who toughed it out for 3 months here, setup a virtual WSUS server and added Group Policy to enforce a WSUS policy on about 1/3 of our workstations. The virtual WSUS server has since ...
0
votes
1answer
351 views

Default font in outlook

What's the best way, and easiest, to change our estate's default font in outlook? Do the office .adm files allow this?
1
vote
3answers
6k views

XP, How to allow users to force logoff other users on locked workstation

W2K3 AD domain, XP Pro workstations. User A logs in to a computer, walks away, screen gets locked. User B wants to use that computer. Current options are to find someone that knows the admin password ...