Questions tagged [group-policy]
Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.
3,227
questions
1
vote
4
answers
725
views
Group Policy: Setting Desktop Access Rights
I work part time as a network/system administrator for a small school. The school uses a commercial student information system that gets updated quarterly. After the server is updated users cannot ...
1
vote
1
answer
3k
views
How can I create a REG_MULTI_SZ key through Group Policy?
I'm trying to add an entry to registry via Group Policy, but I can only seem to create either a REG_SZ or REG_DWORD value. If I insert the value as a REG_SZ key then it isn't picked up / processed as ...
1
vote
3
answers
2k
views
SharePoint service configuration fails on Windows Server 2008 R2
I am building a SharePoint test farm with SharePoint server 2007 Enterprise based on Windows Server 2008 R2. There are 3 different virtual machines (Hyper-V), all in the same domain, UCTEST. When I ...
1
vote
1
answer
437
views
custom adm file for IE search providers on Windows 2003
I have been stumped by this issue for some time, I created a custom ADM template for a customer to populate the search providers in Internet Explorer 7 and 8.
The custom ADM works fine and I have set ...
1
vote
1
answer
17k
views
Event ID: 861 - The Windows Firewall has detected an application listening for incoming traffic
Firstly, my machines aren't compromised any person suggesting such will be DV'd.
The security logs on some of my networks client machines (all Windows Xp Sp3) get filled with these useless error ...
1
vote
1
answer
1k
views
Installing Group Policy Template
We're prepping to roll out IE8 to our organisation. I'm trying to figure out how to install the policy template to the W2K3 DC so I can configure the policy options.
I get the feeling that installing ...
1
vote
3
answers
8k
views
Firewall define program exceptions Group Policy not applying
I updated my domain's default policy to add exceptions to the Windows Firewall, under
Administrative Templates < Network < Network Connection < Windows Firewall < Domain Profile
I ...
1
vote
2
answers
6k
views
Event ID 1030/1058 causing DNS and Group Policy errors
I've discovered an on-going problem on our Windows Server 2003 domain where some clients are unable to access the UNC path using our root FQDN (we'll call it primary.org). This causes some interesting ...
1
vote
0
answers
25
views
Hiding Script Host error when network path not found
I have a Group Policy logon script that is located at and runs from the NETLOGON share.
When a user is off domain and logs on, an error is displayed that the path is not found.
This frightens and ...
1
vote
1
answer
202
views
Change of the keyboard language and operating system language on users' computers using GPO (Windows Server)
I am responsible for managing a fleet of computers in my organization, and I would like to know how to configure the change of keyboard language and operating system language on users' computers using ...
1
vote
0
answers
72
views
AGPM and Production Delegation
Advanced Group Policy Management (AGPM) and Production Delegation. The Production Delegation should set the delegation permissions on a GPO, i.e. Read, Edit, or Edit, Delete and Modify Security. In ...
1
vote
0
answers
38
views
Domain administrator unable to connect via remote desktop after group policy deployment
The network I administer has two virtualized Windows Server DC and a handful of Windows clients. I wanted to enable remote desktop on all computers (some had it, some hadn't) via group policy and so I ...
1
vote
2
answers
53
views
Stuck with a GPO, no class or attribute on AD Object?
I may have blundered a GPO towards the end of my shift.
A fairly important (at least to me and future weeks) had its links go red and unreachable after I altered Delegation settings on a specific ...
1
vote
0
answers
357
views
PowerShell - Failure to load built-in modules due to software restrictions
Yesterday, I was working with PowerShellEditorServices to develop a tool. Internally, it uses named pipes to communicate between the client and server. They are both running locally.
At some point, ...
1
vote
0
answers
163
views
Find Group Policy object to allow ms-appinstaller protocol
We're running a proof of concept of an application, the preferred deployment method is web install:
The user goes to the locally hosted app server
If the user is in the AD Group for the application a ...
1
vote
0
answers
206
views
Migrating to another AD domain/forest: advice needed on handling of GPO-based software installations and existing file shares
We have been administering 3 AD 2019 servers serving around 150 Windows 10 clients, in a single AD domain. As part of an organization merging, a single AD domain will be created and a task to migrate ...
1
vote
0
answers
815
views
"Managed by your organization" in Google Chrome browser
My Chrome browser (Windows 10) shows "Managed by your organization" at the end of the menu. I went into the chrome://policy/ and saw some policies that seem to be set exclusively by active ...
1
vote
0
answers
76
views
Microsoft Active Directory Admin - Discriminate usable USB Disk devices
good morning, I have been trying for a while through policy management or other microsoft media to restrict the use of USB removable disks. I know that through Active Direcory I can enable and disable ...
1
vote
0
answers
453
views
Wsus gpo applied but not used
On my server, I have a GPO dedicated to enabling wsus in the environment but is some time that on the server the gpo are processed correctly and in gpresult and rsop are all ok, here is a screen:
.
...
1
vote
0
answers
889
views
GPO VBS Script does not run at startup
I need to setup a GPO that execute a VBS script at Startup.
I already create a script and test it without GPO and works perfectly, but when I do gpupdate /force and restart computer, nothing changes.
...
1
vote
0
answers
309
views
GPO Printer Share - Terminal Server is added printer multiple times
I have created a GPO for some of our users to roll out the printer (the same printer with different settings):
The printer is also assigned to the user accordingly, as you can see here on the TS:
...
1
vote
0
answers
249
views
Can you apply user group policy to be valid only on a server but not workstations?
I've applied user policy to remove ctrl+alt+del on a Citrix server but the user doesn't have it on their laptop either.
Is there a way to apply user group policy selectively, based on a device?
Note: ...
1
vote
2
answers
205
views
How to find out & set policy in Window Server 2016. To search in security event viewer for users accidentally delete shared network folder?
I am trying to set GPO so that I can search user in event viewer who accidentally deleted the share drive in the network.
What other event IDs list can I search so that I know which category it ...
1
vote
0
answers
2k
views
GPO - Disable Lock Screen & Display turn off after 15 min
we have Windows Server with AD.
After 15 minutes of inactivity the computer screen turns off and the computer locks.
I want to turn this off, I want the computer to work always in display mode even ...
1
vote
1
answer
3k
views
How to restrict NTLM V1 to select servers?
The domain I'm working on currently has NTLM V1 enabled for Domain Controllers. I've done some tests and discovered that only a few application servers require NTLM V1. Unfortunately I have to allow ...
1
vote
0
answers
455
views
Export Local Group Policy Settings to Another Computer
I have a problem that can solve, a client of mine have access free laptop for young people to research job or do paperwork. Those laptop cannot be on the domain. The administration of those computer ...
1
vote
0
answers
2k
views
Block or Disable USB tethering using Windows AD GroupPolicy
For Windows based PCs connected with Windows AD with Group policy, we want to block USB phone tethering options. And we have tried following things which seems to be working for some people but not us....
1
vote
0
answers
812
views
Block Windows 11 via GPO without specifying sub-version
as shown in here
Group Policy for Blocking Windows 11 Upgrade Prompts
Microsoft allows blocking the Windows 11 Update via a GPO, howver as far as it seems you have to specify both the main (e.g. ...
1
vote
1
answer
1k
views
How to enable Windows Hello on stand-alone server
Does anyone know how I can enable Windows Hello facial sign-on a Windows 2019 stand-alone server?
I am the administrator of this stand-alone server, and have installed the Windows Biometric Framework, ...
1
vote
1
answer
1k
views
Windows 10 Enterprise systems disobeying lock screen background GPO
The following GPO is configured at the domain level for our systems:
Local Computer Policy > Computer Configuration > Administrative
Templates > Control Panel > Personalization > "...
1
vote
0
answers
161
views
Task Scheduler GPO for purging files does not apply due to OneDrive
I am trying to create a task with the following PS script:
$locations="$env:userprofile\Desktop\New folder (2)","$env:userprofile\Desktop\New folder (3)"
$Daysback = "-30"...
1
vote
1
answer
266
views
Using GPO to create 2 shortcuts that link to the same page causing issues
My company wants to create a shortcut on the desktop that links to a certain website using chrome. However I found that some users have chrome installed under C:\Program Files (x86)\Google\Chrome\...
1
vote
0
answers
68
views
Windows 10: how to restrict settings available to user through provisioning package?
With Windows Configuration Designer I've created a provisioning package with only one application and the settings available to a user "Test". This is a "multi-app kiosk". There is ...
1
vote
1
answer
872
views
Windows Server 2016 schedule automatic updates not working as set in Group Policy
I have a Windows Server 2016 VPS where a web app is hosted.it works fine but when windows install updates,nothing works because,in this case CPU usage is 99% and no user can access the app
I've setup ...
1
vote
1
answer
412
views
GP and RDP not working after Domain Rename
I recently carried out a domain rename on our domain controller. We switched from a .local to our domain name as we are planning to implement 365 very soon. Mostly everything went well with the ...
1
vote
2
answers
225
views
Are Windows GPOs encrypted?
We have a piece of COTS software that has a command line tool for server credential rotation. Instead of going to each machine to rotate the credentials with the tool, I would like to use GPO to run a ...
1
vote
0
answers
55
views
How to configure windows server to satisfy azure policy
I have an azure vm running windows server 2016. I applied to it a policy that checks vm configuration through a guest configuration extension. For example for the policy Windows machines should meet ...
1
vote
0
answers
46
views
How to make printers installed by GPO/GPP have server-side settings?
I have a Windows Server 2019 domain controller which has some network printers installed using TCP/IP Port 9100 and publishes all of those printers as shares. The important thing to note is that while ...
1
vote
1
answer
957
views
GPO Rule Denied (Security) on a Computer
I created a GPO that contains WSUS Group names, where the GPO Applied Computers should join to get their WSUS Updates.
In the Filtering I created an AD Group that contains the Computers of the domain, ...
1
vote
0
answers
509
views
Grant database access through GPO
I have a domain in which I have couple servers with dedicated SQL Server databases. I also have couple external companies that need access to this servers and databases on different permission level (...
1
vote
2
answers
1k
views
Push out Commands to all Domain PCs
I'm looking for a way to push out commands to all workstations. The scenario is as follows:
I often go to environments that I am not familiar with to audit the network. Part of that is a network scan, ...
1
vote
0
answers
850
views
2019 Server GPO Not Applying to Windows 10 Systems
I am having an issue with a freshly built 2019 Active Directory Domain. I built this domain from the ground up in parallel to the existing and very broken 2008 r2 domain and so far everything has been ...
1
vote
1
answer
446
views
Startup Script to Uninstall Google Chrome Not Working
I'm working with our sysadmin to uninstall Google Chrome on our network, which we manage via GPO. As it has been installed by the users themselves, by a GPO (which is now deleted) and manually by the ...
1
vote
0
answers
62
views
DMZ Member Servers unable to return or authenticate internal domain accounts
I have DC in a DMZ where I can easily look up domain accounts from our internal domain under the NTFS permission if I tried to add users/groups to folder NTFS permission whiles logged in to the DMZ DC....
1
vote
2
answers
8k
views
Windows 10 InactivityTimeout ignoring GPO, Locking Screen after 5 minutes no matter what
We're having a problem where a subset of PC's lock after 5 minutes, but the GPO for "Interactive logon: Machine inactivity limit" is set to 900 seconds (15 minutes). So far I've tried the ...
1
vote
1
answer
628
views
Active Directory Group Policy - Allow Outlook through proxy settings
I am trying to allow access to Outlook(MS Office Standard 2016) access through an Active Directory Group Policy proxy I have created.
I am allowing a specific set of websites to a specific set of ...
1
vote
1
answer
926
views
GPO and Security Groups in multiple domain
I have 2 forests, each with one domain with a bidirectional trust.
I have created security groups in forest A, to access folders, where I have added both users from forest A and B, the accesses are ...
1
vote
0
answers
139
views
How to let a non 'Administrator' user define a GPO in a Samba DC
I tried several times unsuccessfully to define a GPO in my Samba DC through RSAT "Group Policy Management" using the administrator account "adam1". "adam1" is a member of ...
1
vote
0
answers
86
views
How can I place an .exe file on all of my domain machines?
I'm trying to place a specific .exe file on all of my domain machines, I'm not sure if this is possible but I'm trying to do using Group Policy Object. here are the screenshots of what I've done so ...
1
vote
0
answers
257
views
How to force Group Policy Management Console to send LDAP queries via 636 port
There is an article stating that 636 port can be used by GPMC for secure communications.
Active Directory Certificate Services were installed successfully. Certificate from DC was exported to the ...