Questions tagged [group-policy]

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.

Filter by
Sorted by
Tagged with
1 vote
4 answers
725 views

Group Policy: Setting Desktop Access Rights

I work part time as a network/system administrator for a small school. The school uses a commercial student information system that gets updated quarterly. After the server is updated users cannot ...
Kenneth Cochran's user avatar
1 vote
1 answer
3k views

How can I create a REG_MULTI_SZ key through Group Policy?

I'm trying to add an entry to registry via Group Policy, but I can only seem to create either a REG_SZ or REG_DWORD value. If I insert the value as a REG_SZ key then it isn't picked up / processed as ...
user avatar
1 vote
3 answers
2k views

SharePoint service configuration fails on Windows Server 2008 R2

I am building a SharePoint test farm with SharePoint server 2007 Enterprise based on Windows Server 2008 R2. There are 3 different virtual machines (Hyper-V), all in the same domain, UCTEST. When I ...
Colin Dekker's user avatar
1 vote
1 answer
437 views

custom adm file for IE search providers on Windows 2003

I have been stumped by this issue for some time, I created a custom ADM template for a customer to populate the search providers in Internet Explorer 7 and 8. The custom ADM works fine and I have set ...
user avatar
1 vote
1 answer
17k views

Event ID: 861 - The Windows Firewall has detected an application listening for incoming traffic

Firstly, my machines aren't compromised any person suggesting such will be DV'd. The security logs on some of my networks client machines (all Windows Xp Sp3) get filled with these useless error ...
Chris Marisic's user avatar
1 vote
1 answer
1k views

Installing Group Policy Template

We're prepping to roll out IE8 to our organisation. I'm trying to figure out how to install the policy template to the W2K3 DC so I can configure the policy options. I get the feeling that installing ...
christianlinnell's user avatar
1 vote
3 answers
8k views

Firewall define program exceptions Group Policy not applying

I updated my domain's default policy to add exceptions to the Windows Firewall, under Administrative Templates < Network < Network Connection < Windows Firewall < Domain Profile I ...
Chris Marisic's user avatar
1 vote
2 answers
6k views

Event ID 1030/1058 causing DNS and Group Policy errors

I've discovered an on-going problem on our Windows Server 2003 domain where some clients are unable to access the UNC path using our root FQDN (we'll call it primary.org). This causes some interesting ...
rlmadmin's user avatar
1 vote
0 answers
25 views

Hiding Script Host error when network path not found

I have a Group Policy logon script that is located at and runs from the NETLOGON share. When a user is off domain and logs on, an error is displayed that the path is not found. This frightens and ...
NetAdmin's user avatar
1 vote
1 answer
202 views

Change of the keyboard language and operating system language on users' computers using GPO (Windows Server)

I am responsible for managing a fleet of computers in my organization, and I would like to know how to configure the change of keyboard language and operating system language on users' computers using ...
Oskar Sokolowski's user avatar
1 vote
0 answers
72 views

AGPM and Production Delegation

Advanced Group Policy Management (AGPM) and Production Delegation. The Production Delegation should set the delegation permissions on a GPO, i.e. Read, Edit, or Edit, Delete and Modify Security. In ...
Air_'s user avatar
  • 11
1 vote
0 answers
38 views

Domain administrator unable to connect via remote desktop after group policy deployment

The network I administer has two virtualized Windows Server DC and a handful of Windows clients. I wanted to enable remote desktop on all computers (some had it, some hadn't) via group policy and so I ...
HtSkll's user avatar
  • 11
1 vote
2 answers
53 views

Stuck with a GPO, no class or attribute on AD Object?

I may have blundered a GPO towards the end of my shift. A fairly important (at least to me and future weeks) had its links go red and unreachable after I altered Delegation settings on a specific ...
paypercorn's user avatar
1 vote
0 answers
357 views

PowerShell - Failure to load built-in modules due to software restrictions

Yesterday, I was working with PowerShellEditorServices to develop a tool. Internally, it uses named pipes to communicate between the client and server. They are both running locally. At some point, ...
Adam Driscoll's user avatar
1 vote
0 answers
163 views

Find Group Policy object to allow ms-appinstaller protocol

We're running a proof of concept of an application, the preferred deployment method is web install: The user goes to the locally hosted app server If the user is in the AD Group for the application a ...
baralong's user avatar
  • 121
1 vote
0 answers
206 views

Migrating to another AD domain/forest: advice needed on handling of GPO-based software installations and existing file shares

We have been administering 3 AD 2019 servers serving around 150 Windows 10 clients, in a single AD domain. As part of an organization merging, a single AD domain will be created and a task to migrate ...
carmik's user avatar
  • 163
1 vote
0 answers
815 views

"Managed by your organization" in Google Chrome browser

My Chrome browser (Windows 10) shows "Managed by your organization" at the end of the menu. I went into the chrome://policy/ and saw some policies that seem to be set exclusively by active ...
nonlinear's user avatar
1 vote
0 answers
76 views

Microsoft Active Directory Admin - Discriminate usable USB Disk devices

good morning, I have been trying for a while through policy management or other microsoft media to restrict the use of USB removable disks. I know that through Active Direcory I can enable and disable ...
Cris9400's user avatar
1 vote
0 answers
453 views

Wsus gpo applied but not used

On my server, I have a GPO dedicated to enabling wsus in the environment but is some time that on the server the gpo are processed correctly and in gpresult and rsop are all ok, here is a screen: . ...
Alessandro's user avatar
1 vote
0 answers
889 views

GPO VBS Script does not run at startup

I need to setup a GPO that execute a VBS script at Startup. I already create a script and test it without GPO and works perfectly, but when I do gpupdate /force and restart computer, nothing changes. ...
Diogo Jesus's user avatar
1 vote
0 answers
309 views

GPO Printer Share - Terminal Server is added printer multiple times

I have created a GPO for some of our users to roll out the printer (the same printer with different settings): The printer is also assigned to the user accordingly, as you can see here on the TS: ...
beli3ver's user avatar
  • 145
1 vote
0 answers
249 views

Can you apply user group policy to be valid only on a server but not workstations?

I've applied user policy to remove ctrl+alt+del on a Citrix server but the user doesn't have it on their laptop either. Is there a way to apply user group policy selectively, based on a device? Note: ...
JurajB's user avatar
  • 188
1 vote
2 answers
205 views

How to find out & set policy in Window Server 2016. To search in security event viewer for users accidentally delete shared network folder?

I am trying to set GPO so that I can search user in event viewer who accidentally deleted the share drive in the network. What other event IDs list can I search so that I know which category it ...
OSS IT's user avatar
  • 25
1 vote
0 answers
2k views

GPO - Disable Lock Screen & Display turn off after 15 min

we have Windows Server with AD. After 15 minutes of inactivity the computer screen turns off and the computer locks. I want to turn this off, I want the computer to work always in display mode even ...
user avatar
1 vote
1 answer
3k views

How to restrict NTLM V1 to select servers?

The domain I'm working on currently has NTLM V1 enabled for Domain Controllers. I've done some tests and discovered that only a few application servers require NTLM V1. Unfortunately I have to allow ...
Prox's user avatar
  • 111
1 vote
0 answers
455 views

Export Local Group Policy Settings to Another Computer

I have a problem that can solve, a client of mine have access free laptop for young people to research job or do paperwork. Those laptop cannot be on the domain. The administration of those computer ...
user968517's user avatar
1 vote
0 answers
2k views

Block or Disable USB tethering using Windows AD GroupPolicy

For Windows based PCs connected with Windows AD with Group policy, we want to block USB phone tethering options. And we have tried following things which seems to be working for some people but not us....
Krunal's user avatar
  • 231
1 vote
0 answers
812 views

Block Windows 11 via GPO without specifying sub-version

as shown in here Group Policy for Blocking Windows 11 Upgrade Prompts Microsoft allows blocking the Windows 11 Update via a GPO, howver as far as it seems you have to specify both the main (e.g. ...
My1's user avatar
  • 123
1 vote
1 answer
1k views

How to enable Windows Hello on stand-alone server

Does anyone know how I can enable Windows Hello facial sign-on a Windows 2019 stand-alone server? I am the administrator of this stand-alone server, and have installed the Windows Biometric Framework, ...
chuacw's user avatar
  • 145
1 vote
1 answer
1k views

Windows 10 Enterprise systems disobeying lock screen background GPO

The following GPO is configured at the domain level for our systems: Local Computer Policy > Computer Configuration > Administrative Templates > Control Panel > Personalization > "...
Brandon's user avatar
  • 13
1 vote
0 answers
161 views

Task Scheduler GPO for purging files does not apply due to OneDrive

I am trying to create a task with the following PS script: $locations="$env:userprofile\Desktop\New folder (2)","$env:userprofile\Desktop\New folder (3)" $Daysback = "-30"...
Stefanie Gergova's user avatar
1 vote
1 answer
266 views

Using GPO to create 2 shortcuts that link to the same page causing issues

My company wants to create a shortcut on the desktop that links to a certain website using chrome. However I found that some users have chrome installed under C:\Program Files (x86)\Google\Chrome\...
guyfromvancouver67's user avatar
1 vote
0 answers
68 views

Windows 10: how to restrict settings available to user through provisioning package?

With Windows Configuration Designer I've created a provisioning package with only one application and the settings available to a user "Test". This is a "multi-app kiosk". There is ...
Melou's user avatar
  • 111
1 vote
1 answer
872 views

Windows Server 2016 schedule automatic updates not working as set in Group Policy

I have a Windows Server 2016 VPS where a web app is hosted.it works fine but when windows install updates,nothing works because,in this case CPU usage is 99% and no user can access the app I've setup ...
mrapi's user avatar
  • 153
1 vote
1 answer
412 views

GP and RDP not working after Domain Rename

I recently carried out a domain rename on our domain controller. We switched from a .local to our domain name as we are planning to implement 365 very soon. Mostly everything went well with the ...
j748921's user avatar
  • 11
1 vote
2 answers
225 views

Are Windows GPOs encrypted?

We have a piece of COTS software that has a command line tool for server credential rotation. Instead of going to each machine to rotate the credentials with the tool, I would like to use GPO to run a ...
scmccart's user avatar
  • 111
1 vote
0 answers
55 views

How to configure windows server to satisfy azure policy

I have an azure vm running windows server 2016. I applied to it a policy that checks vm configuration through a guest configuration extension. For example for the policy Windows machines should meet ...
Damian's user avatar
  • 111
1 vote
0 answers
46 views

How to make printers installed by GPO/GPP have server-side settings?

I have a Windows Server 2019 domain controller which has some network printers installed using TCP/IP Port 9100 and publishes all of those printers as shares. The important thing to note is that while ...
Thorsten Schöning's user avatar
1 vote
1 answer
957 views

GPO Rule Denied (Security) on a Computer

I created a GPO that contains WSUS Group names, where the GPO Applied Computers should join to get their WSUS Updates. In the Filtering I created an AD Group that contains the Computers of the domain, ...
Gery's user avatar
  • 11
1 vote
0 answers
509 views

Grant database access through GPO

I have a domain in which I have couple servers with dedicated SQL Server databases. I also have couple external companies that need access to this servers and databases on different permission level (...
AnJ's user avatar
  • 151
1 vote
2 answers
1k views

Push out Commands to all Domain PCs

I'm looking for a way to push out commands to all workstations. The scenario is as follows: I often go to environments that I am not familiar with to audit the network. Part of that is a network scan, ...
Juan BrickTech's user avatar
1 vote
0 answers
850 views

2019 Server GPO Not Applying to Windows 10 Systems

I am having an issue with a freshly built 2019 Active Directory Domain. I built this domain from the ground up in parallel to the existing and very broken 2008 r2 domain and so far everything has been ...
OldTexasBiker's user avatar
1 vote
1 answer
446 views

Startup Script to Uninstall Google Chrome Not Working

I'm working with our sysadmin to uninstall Google Chrome on our network, which we manage via GPO. As it has been installed by the users themselves, by a GPO (which is now deleted) and manually by the ...
user avatar
1 vote
0 answers
62 views

DMZ Member Servers unable to return or authenticate internal domain accounts

I have DC in a DMZ where I can easily look up domain accounts from our internal domain under the NTFS permission if I tried to add users/groups to folder NTFS permission whiles logged in to the DMZ DC....
Saliu Maama's user avatar
1 vote
2 answers
8k views

Windows 10 InactivityTimeout ignoring GPO, Locking Screen after 5 minutes no matter what

We're having a problem where a subset of PC's lock after 5 minutes, but the GPO for "Interactive logon: Machine inactivity limit" is set to 900 seconds (15 minutes). So far I've tried the ...
Plasma's user avatar
  • 21
1 vote
1 answer
628 views

Active Directory Group Policy - Allow Outlook through proxy settings

I am trying to allow access to Outlook(MS Office Standard 2016) access through an Active Directory Group Policy proxy I have created. I am allowing a specific set of websites to a specific set of ...
Clyde Reed's user avatar
1 vote
1 answer
926 views

GPO and Security Groups in multiple domain

I have 2 forests, each with one domain with a bidirectional trust. I have created security groups in forest A, to access folders, where I have added both users from forest A and B, the accesses are ...
chart's user avatar
  • 13
1 vote
0 answers
139 views

How to let a non 'Administrator' user define a GPO in a Samba DC

I tried several times unsuccessfully to define a GPO in my Samba DC through RSAT "Group Policy Management" using the administrator account "adam1". "adam1" is a member of ...
Nicola Mingotti's user avatar
1 vote
0 answers
86 views

How can I place an .exe file on all of my domain machines?

I'm trying to place a specific .exe file on all of my domain machines, I'm not sure if this is possible but I'm trying to do using Group Policy Object. here are the screenshots of what I've done so ...
FakeMagician1's user avatar
1 vote
0 answers
257 views

How to force Group Policy Management Console to send LDAP queries via 636 port

There is an article stating that 636 port can be used by GPMC for secure communications. Active Directory Certificate Services were installed successfully. Certificate from DC was exported to the ...
oldovets's user avatar
  • 111

1
33 34
35
36 37
65