Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
1answer
593 views

“Group policy client service failed. The logon access is denied” when copying roaming profiles to new server. (Samba)

We have perfectly working roaming profiles on Samba 3.3.10 (SuSE) with Windows 7 clients. We configured our new server with same domain name, Samba 4.1.11 (Debian). On the new server, for newly ...
0
votes
2answers
81 views

Assign DNS settings on client via elevated script in GPO

i have installed windows 2012 as a member server in my existing windows 2008 DC. now i want to assign secondary DNS on my windows 7/8 client PCs. I do not have DHCP in my environment. I tried to find ...
1
vote
1answer
104 views

What are the security implications of the “Allow DNS Suffix Appending to Unqualified Multi-Label Name Queries” setting?

The Allow DNS Suffix Appending to Unqualified Multi-Label Name Queries group policy was introduced in Windows Vista, and blocks the behaviour of child subdomains being tested against domain suffix, ...
0
votes
0answers
73 views

Unsolicited Remote Assistance on domain

I manage a domain using win 2k8 r2 and 100 PC on Windows7. I have configured the Unsolicited Remote Assistance proceeding with all the requirements posted here ...
0
votes
0answers
83 views

Remove mapping drives from RDP to user from exteral network

I would like to know if you guys have a solution to my problem. I have a terminal server 2012 that can be accessed remotely after a VPN connection and from the LAN. My question is how can I create a ...
4
votes
2answers
228 views

Pin “Run” to taskbar through group policy

Is there are way to pin the "Run" button to taskbar through group policy or a script? Only the specific items needs to be pinned. The other items are not to be touched. Partial solutions I found on ...
1
vote
1answer
125 views

How to disable an account after being created 30 days

Is there any built-in group policy object in windows server 2003 or 2008 for disabling an account or set of accounts in an organizational unit after 30 days since that account was created. If there is ...
0
votes
0answers
1k views

Name Resolution failure on the current domain controller

I'm using windows server 2008 R2. One day my server got issue with Group Policy. Here is the log in event log: The processing of Group Policy failed. Windows could not resolve the computer name. ...
4
votes
2answers
492 views

Windows 7: Deploying Printer Settings without a Print Server

I am a part-time Windows 7 administrator in an office with about 10 PCs and a standalone networked printer... No Windows print server, though we do have an Active Directory domain. So I have been ...
1
vote
1answer
108 views

Can't access share sometimes and some strange performance issues

I'm getting error 0x80070043 "The network name cannot be found" when accessing \\dc01 (the root), but can access shares via \\dc01\share. When I get that error I also didn't get the network drive on ...
5
votes
2answers
75 views

BITS policies to limit bandwitdth usage is not taking effect

We have a fleet of roughly 1300 Windows 7 SP1 clients who use a centralized WSUS server to download updates from. We've implemented the following BITS policy to limit the bandwidth during working ...
5
votes
3answers
644 views

How do Administrative Templates (ADMX files) work?

I know basically nothing about Group Policy, other than that I've occasionally edited some settings using Local Group Policy Editor on my local Windows machine. I do have experience with applying ...
0
votes
1answer
634 views

Can't store TPM information in AD

I am attempting to use GP to store TPM information in AD. I have verified that the schema contains the proper object property, and verified that the property and the ACE is present on the given ...
1
vote
1answer
148 views

Group Policy WMI Filter to Check if Windows Feature is Installed

The following returns true for servers without the Server GUI installed: WMIC PATH Win32_OptionalFeature WHERE "Caption = 'Microsoft-Windows-Server-Gui-Shell-Package-DisplayName' AND InstallState = ...
0
votes
1answer
191 views

GPO's filtered out - wrong domain name reported by BGinfo

I am trying to locate a group policy deployment issue I have. The problem is that domain related GPO's are filtered out. We renamed our domain lately from: CONTOSO to: lan.CONTOSO.com (Netbios name ...
1
vote
1answer
934 views

gpupdate fails, access denied - event ID 1055

I became aware of this issue yesterday after pushing out GPO for Software Policy Restrictions. I am unable to push out MSI installations to certain computers. I went to look at the one of the ...
1
vote
1answer
5k views

Can I Deploy a batch file with Group Policy to run as administrator?

I have created a batch fill which will block Facebook by amending the hosts file in this location: C:\windows\system32\drivers\etc\hosts This is the contents of the file: @echo off echo ...
1
vote
1answer
235 views

gpupdate doesn't work on everything

On a Win2008 Domain Controller, I've changed an user account property "Account is sensitive..." Of course, I want that GPO to apply immediately So I try gpupdate (or gpupdate /force), but it ...
0
votes
2answers
511 views

Creating Scheduled Task from Group Policy. Can't write to network share?

I am using NinitePro and group policy to deploy and update software on our small network of 150 Win 7 and WinXP machines. I am roughly following these instructions: ...
-1
votes
1answer
162 views

Domain controller is not listening on port 445

Is there a way to find why the DC is not listening on 445? -> Firewall rules checked , no denies found and the traffic is allowed. -> file share and print share services running. What else to check? ...
0
votes
0answers
142 views

Local group policy taking precedence over Default domain controller policy

Modified Default domain controller policy to disable and rename the Guest account name using below settings Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> ...
-1
votes
1answer
58 views

802.1.x GPO configuration with restriction by computers and users

802.1.x configuration possible using Machine Policy GPO. So, typical scenario is creating security group for computers and applying our policy with 802.1.x to this group. After this all machines from ...
0
votes
1answer
157 views

Bginfo via GPO Server 2008 r2 - Timer Not Working

I am running Bginfo via GPO on Server 2008 r2 with Windows 7 clients. The bat file (below) is run by: User Configuration > Policies > Windows Settings > Scripts (Logon/Logoff). Bat File ...
0
votes
0answers
37 views

Win7 Desktops secpol and local security policy not showing auditing

I have a Server 2008 R2 and Windows 7 Desktops where I have a Server 2008 GPO to Audit Events on the server and desktops, however at the desktops locally auditing is greyed out and displaying ‘no ...
0
votes
1answer
113 views

Network Security: Lan Manager Authentication Level

I'm a little bit confused by the explanation provided for the setting "Network Security: LAN Manager AUthentication Level" in group policies. The provided explanation only talks about clients and ...
2
votes
1answer
142 views

How do I display users' folders (My Documents, Contacts, etc.) in their profile location after redirecting them to server?

I'm implementing folder redirection for a domain, and I'm trying to make this as seamless as possible for current users. I assumed the %USERNAME% subfolders would remain in the same place but point to ...
0
votes
0answers
100 views

Group policies overriding

I am a learner in AD and GPO's. Though I have implemented some GPO's in my environment, now a little bit confused.. My confusion is with the overriding of GPO. Basically what I am trying is that I ...
2
votes
1answer
590 views

Users still get UAC prompt after allowing printer install and alter LAN connection by GPO?

I've implemented the following Group Policy settings to allow non-admins to install printer drivers and to enable / disable their wifi: User Configuration -> Administrative Templates -> Network ...
1
vote
0answers
174 views

%systemroot%\system32\GroupPolicy gone

DC Win2012, Client XP I have a couple of problems getting GPOs applied - well, they show up as getting applied (gpresult) but the software i tried to deploy didnt got deployed. I enabled ...
1
vote
2answers
76 views

Windows Server Program Restrictions for Administrator?

I have a Windows Server 2008 R2 OS where I just created a standard user account. I went into the Local Group Policy Editor and set the OS to only allow certain programs to be run. I figured that this ...
4
votes
1answer
855 views

GPO startup script not being ran

I am unable to get a GPO to run a script on startup. The script creates a shared folder on each machine in a group of windows 8 machines. The script itself works great, but attaching it to a GPO is ...
2
votes
0answers
35 views

EMET Configuration refresh

I deployed EMET on my domain and i'm configuring it with a GPO. I'd like to know if the system settings System DEP, System ASLR and System SEHOP are taken into account when i refresh the group ...
2
votes
3answers
2k views

Desktop Wallpaper through group policy for Windows 8 client

I Have Windows 2008R2 server with active directory. All client systems are Windows 8/8.1 Pro. I need to push corporate wallpaper through AD GPO on client system, I have created a shared folder on ...
5
votes
1answer
681 views

Where does a Domain Controller's Local Security Policy come from?

In Group Policy we have the Deny logon through Remote Desktop setting enabled for the Domain Computers group . I promoted a computer that was a member of this group to be a Domain Controller. After ...
2
votes
1answer
170 views

Possible to override a GPO that doesn't have an 'Enabled' or 'Disabled' option?

I have a GPO that is directly under the domain in the tree in group policy manager. Meaning it applies to all OUs in the domain. (This wasn't my doing) The "Interactive logon: Message text for users ...
1
vote
1answer
42 views

My GPO only runs the first time it is linked to the OU

I am attempting to distribute a .msi file via GPO to Win7 machines from a Server 2008 R2 network. I am getting a funny result. The first time I link the GPO to a OU the program loads. I uninstall ...
4
votes
1answer
368 views

port 445 blocked by Group Policy

I have managed to block port 445 in the windows firewall using Group Policy, now the server that has this GPO applied is unable to read further GPO updates from the domain controller. Is there any ...
4
votes
1answer
179 views

Group Policy Files - Active Directory

I am having a whole lot of trouble getting some files distributed across the network. My settings are: Action: Replace Source: \\[fqdn]\Repo\sqljdbcl.jar Destination: ...
1
vote
1answer
258 views

Disable Java auto updater via policy/script or some other automated means

I started researching on this and it turned out that this was not as easy as it seemed it would be. Basically looking to get some sort of automated way that I can turn off all the "an update is ready ...
4
votes
1answer
67 views

New implementation of home and department shares; help me get it right the first time?

I've the rare opportunity to set up from scratch our first home and department share server in a mid sized company (about 250 people), and would like to make something that's reasonable. We're going ...
1
vote
0answers
39 views

HowTo enforce SHA512 in Outlook 2010 (and above) for S/Mime?

When you setup S/Mime in Outlook 2010 you can also choose the hash algorithm as seen here: Can we control that via GPO? I would like to disable all the other options if possible.
4
votes
1answer
6k views

Java 8 Update 25 Install Via GPO Not Working

I am trying to set up our Active Directory DC to automatically install Java 8 Update 25 (jre1.8.0_25.msi) using Group Policy. When attempting to add the jre1.8.0_25.msi package in the GPO at Computer ...
2
votes
0answers
48 views

Printer server hostname changed - deploy printers via GPO no longer works

We use the Deploy Printers feature of local group policy in Windows 8.1, so that our users can log into any machine and printers will already be configured. This was working flawlessly for all users ...
0
votes
0answers
201 views

Windows 7 Group Policy Printer not Loading

I'm trying to create a group policy that applies printers to a specific user security group, but facing difficulties. When loading a GPO with 4 printers in it, all but two PCs load all 4 printers. ...
1
vote
1answer
74 views

How can I know where and how a security group is triggering a logon script for some users?

The organization I work for has implemented application access and scripts via Security Groups. This is, if a person needs to access some applications or have a script run when he logs on, we add ...
2
votes
1answer
169 views

Windows 8: GPO to block shutdown without blocking restart?

Windows has a local security policy for disabling the ability to shut down a computer, but this also blocks the ability to restart the machine. Is there a way to block only shutdown without blocking ...
8
votes
2answers
1k views

How do I block inheritance/application of a single GPO?

Due to the workload generated by recent ransomware outbreaks (Cryptolocker/Cryptowall/etc.), I was recently tasked with implementing Software Restriction policies to block program execution from ...
0
votes
1answer
104 views

How do I make browser shortcuts w/custom proxy settings available on user desktops?

In our environment, we have about 30 testers (website testers) located at different physical locations. However, they all log on to the same AD. As it is now, their MSIE is configured to access the ...
1
vote
2answers
43 views

Software installation by group policy

I have a server with windows 2008 r2, it is connected N client. Clients use software that releases updates. Is there an application that I install on the server, which allows you to select the ...
4
votes
1answer
49 views

If a GPO is not the Winning GPO does none or part of the GPO get applied?

I am reviewing some gpresults settings and it shows the Winning GPO as a server configured GPO. If another GPO has already won and a second GPO tries to set a conflicting settings does the second ...