Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

2
votes
1answer
2k views

Group policy to check/uncheck “require HTTPS” in Internet Explorer 11 trusted sites list?

When adding a list of trusted sites to Internet Explorer 11 in Windows 7 Professional SP1, there is a checkbox called "Require server verification (https:) for all sites in this zone". Is there a way ...
0
votes
2answers
120 views

Restricting User Rights Assigning in Default Domain Controller Policy

I am currently reviewing my work's default domain controller policy GPO against the MS Security Compliance Manager, and one of the things I have found is that there are many things that have user ...
2
votes
1answer
248 views

Can I use the GroupPolicy PowerShell module on non-AD standalone servers?

I am trying to use the GroupPolicy PowerShell module to manipulate and read local group policy settings on a standalone Windows 2012R2 server. When I try to execute the Get-GPOReport cmdlet: ...
0
votes
1answer
187 views

GPO: Preferences and Drive Maps not getting applied in second RD session

I have a group policy object that maps several network drives. This is getting done via group policy preferences. When a user log's on to a remote desktop server the drives are getting connected - so ...
2
votes
1answer
2k views

Deleting Local Profiles when using Roaming Profiles at Log off

I'm currently building an environment that will host about 5,000 users over 20 AppServer. I have finalized my GPOs but I'm experiencing an issue with the user's local profile when roaming profiles is ...
3
votes
1answer
3k views

Can I override domain group policy with local group policy as a local admin?

I am trying to provision a few special case laptops. I would like to create a local guest account. That's fine but when I try to create it I prompted that my guest password does not meet the ...
2
votes
0answers
85 views

In the Local Security Policy, how do you avoid putting “IIS APPPOOL\” before “DefaultAppPool”?

Doesn't seem to be a whole lot on the Internet about this. I was tweaking the Local Security Policy of one of our test servers (Windows Server 2008 R2 Standard Service Pack 1), when I got this error. ...
0
votes
0answers
154 views

Using Powershell (RSAT ) to get GPO from against another domain

I can't find any clear info online for what I'm trying to do, hope you can give me an answer :) I'm using a Windows 7 client (pctest) joint in a domain (domain1.intranet). I've installed the RSAT to ...
1
vote
0answers
20 views

No “Compatibility View” Options

I'm working on setting up a GPO to push out some compatibility view settings for IE. But in my Group Policy editor there are no "Compatibility View" settings. I'm looking in Administrative Templates > ...
2
votes
1answer
166 views

Removing deny everyone permissions from GPO

As part of the workaround for CVE-2014-1776 I created a group policy object that applied Deny permissions to everyone on VGX.DLL. I am now trying to undo this group policy and having a lot of ...
0
votes
0answers
34 views

Group Policy with Win7

All, I wasn't sure how to search for this. It seems that many of our Windows 7 Machines are processing group policy in unpredictable ways. Here's an test example: I created a brand new policy. I ...
2
votes
3answers
717 views

Windows server 2012 essentials GPO AD/SYSVOL MISMATCH

I am having an issue with Group policys and will do my best to describe the issue below: GPRESULT, ADSI and GPT.ini shows the group policy with mismatching AD/SYSVOL versions, the SYSVOL version ...
3
votes
3answers
222 views

Update a network driver through GPO/AD

Our organization has just deployed new computers with Windows 8.1. Roughly 50 of them. We've run into an issue with the driver on the new computers which is flooding the network with ipv6/multicast ...
2
votes
1answer
187 views

Access an AD attribute in a first-time logon scenario?

I have been tasked with improving our current image deployment. Right now we do a fair amount of manual setup after imaging to reduce the work for users who get a newly imaged machine. I would like to ...
1
vote
3answers
561 views

Shutdown clients when no one is logged in at a specified time

At our company, the people stop working at 7PM. At 8PM we run a scheduled task with GPO to warn the logged-in user that the computer is going to shutdown. This works fine. When no one is logged-in ...
2
votes
1answer
87 views

Structuring an OU to properly model an Organizational Hierarchy

I'm experimenting with using OUs in my network's Active Directory and group policy. However, I'm having a little trouble figuring out the right way to structure my OUs so that I can have individual ...
0
votes
1answer
2k views

Windows Server 2012: How to activate network discovery in GPO?

I use terminal-server Windows Server 2012 and I need to create a map drive GPO, but it doesn't take effect and I think it might be because I nee to activate network discovery. How to enable network ...
2
votes
1answer
101 views

Deploying software through group policy

I'm trying to deploy an MSI to a specific security group that has all computer members. I've set the GPO to install via the UNC path, and it's a computer configuration. I've also made sure that ...
1
vote
2answers
870 views

Change Local Group Policies remotely on Windows workstations outside Windows domain

Is it possible to change Local Group Policies on Windows workstations remotely outside a Windows domain? Furthermore, can a script be written that would change GP on several workstations one by one? ...
1
vote
2answers
859 views

Shortcut for website using non-default browser

I am working on a GPO to push a desktop shortcut to a website using IE (which is not the default browser) out to my Windows 7 Pro machines. All machines are x64. Not sure why this isn't working: ...
1
vote
2answers
104 views

GPO: Do not run user logon scripts

Is there a way I can configure a GPO to NOT run the logon scripts that are defined within the AD user object? We have a very special AD environment and I am trying to get away from the old batch ...
0
votes
1answer
131 views

Error on RSOP for Audit policy on DC

Domain Controller - Windows Server 2008 R2 Standard Please see the print-screen, I am unable to understood why such error is showing on my Domain Controller. I have also checked on Winlogon.log, ...
1
vote
1answer
123 views

Backup Active Directory users' files, deploy via GPO? [closed]

Am looking for a solution which can be configured to be deployed via group policies. I've looked into Windows Backup, but it doesn't fulfill our requirements. We need something like this: Runs ...
1
vote
0answers
41 views

Group Policy Mapping Printer

There seems to be lots of different ways to map printers, all appear not to work (for me). Im running a Windows 2008 Environment with windows 7 clients, simple, hey? No.. I have a printer connected ...
1
vote
1answer
434 views

Group Policy “Maximum password age” fails to apply

In my Windows network with all AD servers (still) running Windows 2003, I encounter the following problem: The "Maximum password age" policy apparently does not apply. Even though some of the users ...
1
vote
2answers
721 views

GPO with loopback processing and folder redirection not working

I am pulling my hair here and trying to redirect folders on Windows 7 and Vista machines. I have therefor created a GPO which has loopback processing enabled (merge mode) and linked it to the OU ...
0
votes
2answers
176 views

GPO not applying properly

So I just set a user level GPO to apply a website to the trusted sites zone. It works when logging in to a desktop and trying to go to the website and the website shows up in the trusted sites zone ...
0
votes
1answer
484 views

How to enable Network mapping?

In the Control Panel there is a Network Map which is disabled by default in domain joined computers. When I go to Control Panel\All Control Panel Items\Network Map I receive the message Network ...
3
votes
3answers
15k views

How to set the Internet Explorer Home Page via GPO?

I need to set the default home page for the entire domain via GPO. Where is the IE Home Page Policy located?
5
votes
1answer
466 views

How to do exceptions in Group Policy?

We're implementing Group Policy for the first time at our organization and have some questions about best practices and capabilities. We've already done some work and want to see if there is a better ...
-1
votes
1answer
80 views

GPO installed network printers wont show up under user account but only admin login

I use GPO to push out a network printer per machine from server 2008. but it only shows up under admin account. I restarted the PC , login logoff , gpupdate /force.... then it still only shows up on ...
0
votes
1answer
91 views

LocalGPO compare fails with error

I was trying to run LocalGPO on my Windows 7 system with its "/Compare" option to compare the current policies with that of a backup. However, the process fails with an error in a Windows Powershell ...
0
votes
2answers
93 views

Deny AD-User Group to login on a certain AD-Computer Group

I have (simplified) two AD Groups for Users: bgs.ac.at\Students bgs.ac.at\Teachers I have (simplified) two AD Groups for Computers (like in two rooms) bgs.ac.at\Room1 bgs.ac.at\Room2 I want ...
0
votes
1answer
319 views

Will Windows 7 sysprep keep group policy settings?

As part of my organisation's Windows 7 rollout process, we would deploy a Windows 7 image onto a target machine, then manually install LocalGPO on it followed by applying a set of group policies via ...
0
votes
1answer
89 views

Startup Script Launch IE Browser

how to launch a startup script (batch file or VBS or PowerShell) that will open a browser on startup? I want to deploy this using GPO, i'm only able to achieve this by using logon script, but if used ...
2
votes
1answer
365 views

Where's the best place to deploy a proxy.pac file to?

Instead of having separate proxy settings in Group Policy for several web browsers (Google Chrome, Internet Explorer and FrontMotion Firefox), I decided that it would be better to create a proxy.pac ...
2
votes
3answers
3k views

GPO: Run powershell logon script after explorer.exe has been loaded

I know there is the GPO setting "Computer Configuration => Admin. Templates => System => Scripts => Run logon scripts synchronously". This however ensures that logon scripts run before windows ...
5
votes
1answer
439 views

Server 2012r2 RDS - Start Screen

I'm in the process of setting up an RDS server. It will be multi-tenant, so it's locked right down. All user profile data is stored on the file server using GPO folder redirection. I want to lock ...
1
vote
1answer
129 views

Fake Recycle Bin via Group Policy

Is it possible to create a fake recycle bin where the files aren't actually deleted using MS AD/ Group Policy? The goal is to be able to recover 'deleted' files after, let's say, a dirty resignation. ...
0
votes
0answers
53 views

Domain group policies not applied on Win8

I'm totally desperate, I'm not able to set any group policy on domain level (with Samba 4 domain controler). The only user, the policies are applied on, is the Administrator. I have no idea, what's ...
1
vote
1answer
94 views

Querying GPO Details

I need some help on querying GPO. I want to know how many total GPOs applied for each OU. GPO with out no parameters and no link GPO's With less than 2 parameters and less than 2 links Can any ...
5
votes
2answers
154 views

Issues With Printer GPO

I have a Windows Server 2008 R2 print server. The client machines are Windows 7 Professional. I am having issues with user accounts not getting the printer added when they login. Things that I have ...
0
votes
1answer
71 views

GPO Software Deployment not working

I am trying to deploy an MSI via GPO, without success. It is an Outlook plugin, and the MSI works (from that location) if I install it manually. I have set it up to be assigned as follows: When I ...
0
votes
0answers
40 views

Is it possible to check using nagios, if a group X is denied access a particular file/folder in Windows

This is basically a GPO key that has been applied and need to check if the key is in place/working which involves restricting a group of users from accessing a particular file or folder using a ...
0
votes
0answers
23 views

Log on as a batch job - group policy

I would like to configure the "Log on as a batch job" setting in our domain group policy object for servers. The problem I see is that I don't know which users/groups to add. I know the default for ...
0
votes
2answers
291 views

How does one backup / restore Group Policies on Windows Server 2008 R2? [duplicate]

We're inheriting a Windows Server 2008 R2 server on a network full of Windows 7 machines. There are already Group Polices in place, and they work. How can we back them up and restore them in case ...
0
votes
1answer
116 views

How to restrict DVD access using Windows Server 2003 Group Policy?

I have a Windows Server 2003 DC with 3 Win7 (32) desktops. I want to use an GPO to restrict the DVD on all the desktops (Either 'hide' or not have available) for all domain users except for domain ...
0
votes
1answer
577 views

Why is this preventing me installing an MSI: The System Administrator has set policies to prevent this installation (non VMWare install)

I am trying to install an MSI on a Windows Server 2012 machine which is part of my lab domain. I am local and domain admin, but I seem to be prevented from installing this MSI. For clarification, ...
3
votes
1answer
109 views

Applying a group policy at the domain level and scoping vs. applying at the OU level

The way I see it, if I have a GPO and want to apply it, 2 options I have are: Linking the GPO to the domain and then scoping to security groups and maybe users Linking the GPO to an OU that contains ...
3
votes
1answer
118 views

Start Menu Folder Redirection - Extra items being added

Using Server 2012 on Win 7 machines, folder Redirection applied by GPO. It's an inherited network so I'm trying to find the cause of this issue as the previous techs left very little info. Problem: ...