Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
0answers
97 views

AD: GPO mapped drive and/or setting home in user profile

I discovered something interesting today that I have no idea the consequences of. Having inherited a large, complex and patchwork system with very little design, I discovered what I would consider an ...
1
vote
0answers
25 views

Is there a group policy or permission to create local shares?

I have some custom windows services which need the ability to create and remove local shares. In trying to lock down security, I also don't want to run the services as administrators. Is there a ...
0
votes
0answers
22 views

Remove specific site/application/domain from IE cache

Apparently one of our web applications changed a path when we went to a new version. Now we're faced with many users who have the application in their IE cache getting errors because the browser has ...
1
vote
1answer
66 views

How to filter RSOP to show only modified policies?

Is it possible to view only those elements of GPO that are actually modified/specified? For example, when looking at RSOP for an OU, I have loads of options which are mostly not specified - can I ...
0
votes
1answer
390 views

User Group Policy in Server 2008 to set Default Profile settings

I have computers to deploy and want to apply changes to the default user policy on these PCs automatically. What's the best way to do this? Our current procedure is: Create the computer account in ...
0
votes
3answers
191 views

Certificate address mismatch warning GPO cannot be Disabled

I found the "Turn on certificate address mismatch warning" and I need to set it to Disabled. Seems like the Console is not accepting that option (I Can set it to enabled and it will work) and I'd like ...
0
votes
1answer
1k views

IE Setting in group policy — Disable automatically detect setting in LAN Settings

have been trying to hunt this down for weeks with no luck. i need a way to disable a setting.. in IE. Tools > Connections > Lan Setting i need to uncheck "automatically detect settings" does ...
3
votes
1answer
217 views

How to abort applying group policy when it is stuck for too long?

I had a problem with a Win2k8 Domain Controller and had to restart it. It restarted with no issues and reached the "PRESS CTRL + DEL TO LOGON" screen. And so I did a usual logon with an ...
0
votes
0answers
79 views

Limit display/session resolution for machines @ VDI environment on RDS 2012

I have couple of windows 7 entprise virtual machines in collection as part of VDI environment - so users connecting to them through RDS 2012 web site. Is there any way to fix resolution of remote ...
7
votes
1answer
250 views

Everything says Applocker is supposed to work: Why doesn't it?

I've setup a basic group policy consisting of the default Applocker rules. Per Microsoft's technet article on the subject, any files not explicitly allowed to run by the policy are supposed to be ...
0
votes
0answers
137 views

Add FTP Network Location via Group Policy

I currently have a FTP website running on IIS, Windows Server 2008 R2. I would like to deploy this ftp location to all computers on our domain so that our users can upload and download to the FTP ...
0
votes
0answers
46 views

GPO applied though WMI filter says false

I have a GPO which configures the folder redirection to a network share. This works fine on all workstations with this WMI filter: SELECT * FROM Win32_OperatingSystem WHERE ProductType = "1" But an ...
1
vote
2answers
129 views

Redirecting documents folder for windows 7

I have a GPO set to redirect the Documents folder to the H: drive of our students. It works, but conditionally. If the student already has My Pictures, My Videos, and/or My Music folders already in ...
1
vote
1answer
49 views

Group policy - deploying printers

I am trying to deploy printers using group-policy, we have a mixed domain of XP and windows 7 pc's I've used the printer management console to deploy the printers and its been smooth enough for the ...
1
vote
1answer
524 views

Give user permissions to change system time on Windows Server 2012 domain controller

I realize that this title instantly sounds like a bad idea, so I'll justify the need in addition to describing the problem. The need to change system time I've recently set up a Windows Server 2012 ...
0
votes
0answers
23 views

Least obtrusive method of resetting default gpo objects

In my early days of fiddling with our AD domain I modified the default gpo objects. Now I want to reset them back to default and ensure they are not used this time around. I found the dcgpofix ...
1
vote
1answer
30 views

Does removing an imported *.adm template from a GPO also disable all settings?

I have a GPO that consists of several imported *.adm templates, which I now need to remove (due to an update to the software they relate to). I know how to remove the templates, but I can't find any ...
1
vote
2answers
61 views

Windows GPO Restricted groups append

I need to add an user to local administrators of all machines in domain. I read about Restricted Groups, however I don't want to replace all members, but just append a new one. Is it possibile?
1
vote
2answers
157 views

GPO's are being denied although filtering criteria is met

What I am trying to achieve We use centralised printing in one office only, so I need to ensure that in this office the relevant network printers exist when a user logs on to a Terminal Server, as ...
0
votes
1answer
150 views

SBS 2011 Folder Redirection not working after migration

I followed the Migrate SBS 2008 to SBS 2011 guide which worked well. However RedirectedFolders haven't migrated over properly - Windows 7 workstations are still actively connecting to the old ...
5
votes
2answers
146 views

Group policies not applying to specific server

I have one server - 2008 R2 Enterprise, running WSUS and our KMS server - which is failing to apply any group policies from the domain. I'm out of ideas of how to get this to process. Any ideas? My ...
1
vote
1answer
389 views

Windows 7 UAC - Local Administrator and Secpol.msc

I am trying to change my group policy settings temporarily to disable completely UAC. I have local admin rights on my machine, however the UAC options in Secpol.msc are disabled. Any ideas?
3
votes
1answer
180 views

Windows 7 starts a classic desktop theme unless admin logs in first

I'm running a bunch of computers which are pretty locked down with Group Policy (users can do virtually nothing other than browse the net and use Office), and local profiles are deleted from machines ...
1
vote
1answer
52 views

Big problems with AD gpo

I have a problem with a gpo on AD. Well, I have a domain root where I have only one domain policy. In the policy there is a permission on "log on as service" and two 2 groups added. Down the root I ...
1
vote
1answer
474 views

GPO: Add Specific items in 'All Programs' on the start menu?

Disabled all the items in the 'All Programs' via GPO using Windows Server 2012 I have set "Remove common program groups from Start Menu" to Enabled. Everything in 'All Programs' is now empty, how ...
0
votes
1answer
87 views

Force mapped drive to ask for credential per log on session

On Windows Server, is there an option in Group Policy or otherwise, to map a network drive that asks for network credentials on each log on session? The reason I want to do this is that for some ...
-2
votes
1answer
69 views

How Unattended Install is different from GPO Install? [closed]

I want to deploy Microsoft Office, Adobe Reader and FileZilla on the workstations but there are two way doing this, install via GPO or Unattended Install (deployment server). How Unattended Install ...
0
votes
0answers
103 views

Windows Server 2008 Standard R2 GroupPolicy error

Windows Server 2008 Standard R2 GroupPolicy error I am receiving an error in System log Event ID with the description "Windows failed to apply the Group Policy Local Users and Groups settings. Group ...
0
votes
0answers
32 views

How to remove a previous internet setting via group policy

I have the following issue, as below : I would like to remove the proxy.pac and "use automatic.." from internet explorer using group policy and use only the proxy server address, is it possible ? the ...
1
vote
2answers
133 views

WinXP GPO folder direction update ignored? Errors re: old path

I have a W2K3 server that's an AD DC. It has a GPO in place that directs users' Desktop and My Documents folders to \\oldserver\Users$\<username>. I wanted to migrate their folders to another ...
0
votes
0answers
40 views

Access to network share folder works in VDI, but not on desktops

I have two separate environments running in our lab computing spaces. We are phasing over to VDI. There are some weird differences going on in each environment, and I believe that the problem is ...
0
votes
0answers
132 views

My Documents folder not being redirected via Folder Redirection Group Policy

I have Folder Redirection applied for My Documents to users that log on to Windows 8 machines. The GPO is set and applied using a Windows Server 2003 machine. The My Music, My Pictures and My Videos ...
0
votes
0answers
91 views

Always Allow Windows Media Player in Internet Explorer - Group Policy

I am wanting to always allow the Windows Media Player add on for internet explorer to run without asking on all computers in my domain. We have a software client that sends sounds via internet ...
0
votes
0answers
51 views

Apply two proxy servers to different windows PCs on the same network

We use microsoft CRM 2011 as our CRM software, Microsoft CRM does not support a proxy.pac file you need to use a static proxy server address for it to work with outlook. So I need to deploy two ...
1
vote
1answer
41 views

Group policies not being applied

I have 3 Group Policies set, and I wish to apply them as follows - Default Domain Policy - Every logon RDP File - Only when logging on to a machine in the dynedrewett.com\DD\Workstations\ OU Folder ...
1
vote
1answer
198 views

Hidden registry settings

Scenario: I'm performing a configuration audit on a server that's joined to the domain. For the mandatory security configuration settings, there are group policies defined and being pushed out to ...
1
vote
1answer
348 views

Trying to create a GPO shortcut to local app data directory

We have a lockdown browser application that was installed on all of our students' laptops, but it was installed to the local app data of the user that performed the install. Therefore, none of our ...
-4
votes
1answer
58 views

Configuring the GPO: Computer and User Configuration [closed]

What is the difference between the two configuration? When to use or configure these configuration in a AD Domain? Does the individual affect each other? What is the best practice when configuring ...
2
votes
2answers
346 views

Windows Mapped Drives: GPO vs. login script

I'm running Windows 2003 R2 for DC's. The question has come up concerning mapping user's network shares via GPO rather than the tradition login scripts. I've read about updating Windows 2003 server ...
0
votes
0answers
88 views

Windows 8 Lock Screen Background Disappears

I have a group policy that sets the lock screen background on Windows 8 and prevents users from changing it. It worked well for a while but recently it stopped functioning, and now the "Seattle" ...
7
votes
2answers
887 views

Is there a performance impact of direct AD universal groups assignment?

I'm implementing a tool which secures certain shared resources within AD forest (mostly file shares). By some criteria a list of users from different domains is generated, those users are added to a ...
3
votes
2answers
665 views

IE 10 missing Proxy GPO settings

Is there any way to remove the users possibility to change the proxy settings from IE 10 with GPO ? In IE 9 you had the "Disable Changing Proxy Settings" setting in \Administrative templates\Windows ...
1
vote
1answer
52 views

How do I stop users folder redirection

I am setting up a new Windows Server 2003 machine, and with it I've set up a new Group Policy that includes Folder Redirection. I accidentally linked this new GP to the wrong OU, and Folder ...
1
vote
1answer
146 views

env variable: username returns hostname within a Scheduled Task - GPO

I am editing a Group Policy Scheduled Task. In General, Security Options "When running the task, use the following user account:" I have the following- %USERDOMAIN%\%USERNAME% Updating the gpo, and ...
4
votes
2answers
428 views

How do I disable SID security check for folder redirection with Group Policy?

How do I disable the SID security check for folder redirections with Group Policy? This isn't about weakening security, but rather about having Active Directory and Samba play nicely together. I have ...
0
votes
1answer
38 views

Truobles with Windows Update Domain Policy on Windows Server 2003

I got a problem with Windows Update Domain Policy. The Domain Policy is configured with automatic automatic download of updates, but dont installation (Option 3). Everytime i check the policy and ...
0
votes
1answer
277 views

Security has requested to process its policy settings again. Error

I am receiving the following error with a yellow exclamation mark in the group policy results wizard when deploying software using a GPO. Security has requested to process its policy settings ...
1
vote
1answer
138 views

Pass unlock credentials to powershell script

I have a powershell script that is run as a scheduled task and is triggered to run "On workstation unlock". The script is programmed to reconnect an SSTP VPN connection if the connection becomes ...
0
votes
1answer
168 views

GPO folder redirection - creates .tmp files

I am using a 2008 SP2 Small Business Server, and my test machine is Windows XP SP3. I have setup a GPO to do folder redirection, but it is only sortof working. The policy is applied to a security ...
0
votes
1answer
43 views

allowing only access to TFS to external

Recently I've found the need for allowing access to external people to my TFS server, but I have to be sure that they can't access others servers. This is what I've tried so far: Created a security ...