Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
0answers
48 views

Keyboard layout not being pushed through GPO

I'm trying to push keyboard layouts to all users using a GPO that creates a registry key. The key is created under HKEY_CURRENT_USER\Keyboard Layout\Preload. In my case the value data of the key is ...
0
votes
0answers
31 views

Windows explorer not loading drives or thumbnails on whole domain

Every computer on the domain seems to have an issue where explorer sometimes opens up to only show favorites and libraries for available locations, and they both have a magnifying-glass over top of ...
1
vote
1answer
617 views

GPO Mapped Drive Issues on Windows 10 Clients

We are running Windows SBS 2011 as our file server and AD, a 2008 R2 server that is sharing files, and a 2012 R2 terminal server. I have a GPO that maps network drives to users based on security roles ...
0
votes
2answers
25 views

Security filtering not working in GPO

Not sure if this would be the right place to ask this. On my domain controllers, I have created all my users and computers inside an OU. I have a group named Support which is in the local admins group ...
1
vote
2answers
91 views

Shared Printer DENY Print ACL assigned to AD Security Group not Working

I have three servers. Server 1 - Print Server, Windows Server 2008 Standard Server 2 - Domain Controller, Windows Server 2008 R2 Standard Server 3 - Terminal Services Server, Windows Server 2008 R2 ...
0
votes
3answers
68 views

Missing GPO “Allow job name in event logs” in Windows Server 2012 R2

I am using Windows Server 2012 R2 (6.3.9600 Build 9600) for two different servers. However, one server has the GPO option "Allow job name in event logs" while the other one does not. I have examined ...
0
votes
0answers
177 views

Default Program via GPO Windows 7

I tried to configure the default program to open .docx/.doc files via gpo as mentioned here: http://www.grouppolicy.biz/2011/09/how-to-use-group-policy-to-change-open-with-file-associations/ I've ...
2
votes
1answer
57 views

How do I enable “Logon as a service” dialog buttons?

Group Policy newbie here. I need to be able to run some of my services as a user that also has access to SQL Server. How do I enable the "Add User or Group..." and "Remove" buttons on the "Logon as a ...
0
votes
0answers
27 views

Allow Administrators to Override Device Installation Restrictions

I am trying to set up our Active Directory domain to lock down unauthorised hardware installation. I am testing the Device Installation Restrictions in Group Policy, using the settings under Computer ...
1
vote
1answer
138 views

Clients can't update dNSHostName attribute after DNS suffix change

We have a bunch of Windows 7 and Windows Vista clients that belong to domain contoso.com. The clients are registered in DNS to client.contoso.com. We have changed the DNS suffix via GPO from client....
1
vote
1answer
41 views

Windows Security Policy not Updating - Admin templates work fine

I have a domain with a mix of physical and virtual servers. Some time ago another admin may have performed some manual scripted updates at the client level that are now preventing changes in the ...
1
vote
1answer
32 views

Restrict Control Panel items GPO on Server 2003 - AD is 2008 R2

I'm having trouble applying a GPO to restrict Control Panel Items on Server 2003. My DC is 2008 R2 and the policy I'm using is: User configuration > Administrative Templates > Control Panel > Show ...
0
votes
0answers
31 views

OpenVPN with IPSec

OpenVPN with IPSec We are using OpenVPN to connect multiple devices. The customer requires using IPSec, but OpenVPN is SSL VPN. Their website says this OpenVPN's security model is based on using ...
1
vote
1answer
63 views

Remotely change local group policy server 2008R2

I'm trying to find a way I can edit the 'trusted hosts' list under local group policy remotely. Path from within Local Group Policy is: \local computer policy\computer configuration\administrative ...
0
votes
0answers
45 views

Group policy not pushed to client for offline files setting

I have setup group policy for "Offline Files" but I noticed that the configuration is not pushed to clients. With another setup I had no problem. The configuration path is \\Computer Configuration\...
1
vote
2answers
166 views

Group Policy to disable USB in windows 7 clients

I want to disable the USB for Windows 7 clients through the Active Directory group policy ,is it possible ???and anyone can give me instructions please .
1
vote
3answers
75 views

Windows 10 search bar and group policies

I'm administrating a Windows 7 (now Windows 10) machine which has one account that is pretty locked down. Users can only start specific programs (via white list in the group policies), have no access ...
0
votes
0answers
7 views

Can I use policy to filter get requests or strings in URLs not found in the domain?

I know there's content advisor, but I don't get to access it, so I'd like to know what it can do before I ask questions to people who can access it. My goal is to filter out search queries using ...
0
votes
3answers
59 views

What is the most suitable path on Windows workstations to store admin scripts? [closed]

We have a need for a GPO to store admin scripts locally on Windows workstations (7 and above), and I was wondering if Microsoft has any recommendations or if you have any experience or thoughts on ...
-1
votes
2answers
80 views

Windows Server 2008R2 Active Directory Apply GPO only when connected to domain

We are trying to apply a SSID Restriction policy for computers where i work. We created a GPO which applies to computers in an specif OU without any security or WMI filters We want the computers to ...
32
votes
3answers
3k views

Why are many admins using 'Turn off Automatic Root Certificates Update' Policy?

My company distributes a Windows Installer for a Server based product. As per best practices it is signed using a certificate. In line with Microsoft's advice we use a GlobalSign code signing ...
0
votes
0answers
64 views

Group Policy Scheduled Task not asking for password

I'm trying to deploy a scheduled Task to our Servers via GPO, but something doesn't seem quite right. I want the Task to be run with a Service account, wheter the user is logged on or not. I know that ...
0
votes
2answers
270 views

Can't send to compressed (zipped) folder

I'm IT Technician at a Secondary School and our Network Manager is away on long term leave. Currently our student's aren't able to send to - compressed folder. When trying the error 'File not found ...
0
votes
0answers
262 views

Map Network Drive GPO not working on login

I have created a group policy which should map the network folder \\SHARED\data to drive letter H:. The policy is applied if I run gpupdate /force, but when I restart the computer and login, the ...
2
votes
1answer
125 views

Remote Desktop: What is the difference between “Run these programs at logon” and “Start the following program on connection”?

My organization is running a Terminal Server Farm in order to provide a specific application to the users. The setup consists of a AD domain controller plus two Terminal Servers running the Remote ...
0
votes
3answers
56 views

Group Policy applied but Network Drive wont show up

Server 2012 DC + Server 2012 on the client side. I have the following group policy in place: The policy is applied when I run gpresult /r /scope computer: Yet the drive does not show up. Also ...
2
votes
0answers
45 views

group policy being applied from offsite Domain Controller: why?

Site 2: I have a small branch with 1 DC and 4 clients. Site 1: Meanwhile my main branch has 2 DCs and lots of clients. I made some GP changes on DC-site2, and I was wondering why they weren't ...
0
votes
0answers
12 views

Scanned Files from printer in Home folder Takes a while to apper - GPO issue?

I don't even know where to start with this. I recently setup home folders for those users that needed it. Then I used a GPO to created a subfolder in the home folder where our networked copier/...
0
votes
1answer
38 views

Configure Remote Desktop Desktop based on Group

I have a few different AD groups accessing the same remote desktop server (Windows Server 2008 R2) and I need to configure each desktop so that every user in the same group has the same icons appear ...
0
votes
0answers
11 views

excluding specific user from USB Access GPO only on specific computer

I have a small domain, and I want to restrict access to USB for all users except for a specific user when using a specific computer. In GPO there is setting in both "User Settings" and "Computer ...
0
votes
4answers
36 views

User Preference GPO on a specific set of computers

I hope you can help me with this situation: I’ve been asked to deploy a specific wallpaper to front office computers. I’m not allowed to move the users from the Users OU container. This means the GPO ...
2
votes
2answers
49 views

Limit programs based off group policy

What I'm attempting to accomplish is having certain executables allowed in a 2012 Active Directory environment based off of a group policy. I have 3 different types of users in my AD. Group A ...
0
votes
1answer
198 views

Credential Provider showing incorrect tiles

EDIT: Turns out I was probably overthinking this. See answer below. This may or may not be better on SuperUser, it's regarding issues with a few workstations failing to cleave to the Enterprise ...
0
votes
1answer
52 views

Remote Desktop Server does not update group policies

I have a domain with 4 Remote Desktop Servers running Win2k8 R2. If i change the GPO on my domain controller for the Remote Desktop Servers i am having some issues. After running: gpupdate /force ...
0
votes
1answer
161 views

How to disable integrated Windows authentication Internet Explorer in Group Policy Management on Windows Server 2012?

I'm wondering if it is possible to disable the integrated Windows authentication of Internet Explorer by using Group Policy Management on Windows Server 2012.
2
votes
0answers
27 views

WMI Query - First and Fourth IP octet

Is anyone aware of any WMI queries that could be used within group policy which only lists all IP address, which end in .200 and I have multiple sites, multiple networks, I only need to list the ...
0
votes
0answers
51 views

RDS - Change single click option is item via GPO or Registry

I have a problem on my servers RDS, my users can not change their themes windows, folder options and many more due to some GPO. However, in recent days there is a problem concerning the opening of ...
1
vote
1answer
57 views

Group Policy Printer Mapping: Some printers are being skipped

I have a Group Policy Object designed for users in a particular department which should delete all existing printer mappings, and then map all users to 9 different printers (all on the same server). ...
0
votes
0answers
161 views

Delete User Profiles Older than a Specified Number of Days on System Restart, does not delete parent folder of profile

I have seen multiple question and answers in forum regarding this GPO to Delete User Profiles Older than a Specified Number of Days on System Restart not working or some hotfixes, in my environment it ...
0
votes
2answers
567 views

Group Policy to disable Printer Preferences

Can someone please advise on how we can disable users being able to open Printer Preferences on network printers that they have added to their computers? We have deployed around 100 new printers with ...
0
votes
0answers
35 views

Not Updating Group Policy Changes

I have been working on updating my companies group policies and I have run into a problem with the user policy not applying correctly. Previously the old policy had a folder redirect for the desktop ...
0
votes
0answers
93 views

Devices and printers wrong icon and missing printer details from group policy

Situation In our environment we have a windows 2008 server with a group policy to deploy printers to Windows 7 and Windows 10 client computers. Problem Everything is working fine except that on the ...
1
vote
1answer
109 views

Add Startup and shutdown scripts to Local Group Policy using Powershell

I am trying to automate adding startup and shutdown scripts to Local Group Policy (gpedit.msc). One solution is to write to registry directly as pointed out in http://ccm.net/faq/3358-execute-a-script-...
0
votes
0answers
20 views

Group policy file / folder deployment

I have a question in relation to file / folder deployment in group policy. I would like my deployment method of files / folders to fall into good practice standards. So essentially I have a public ...
3
votes
2answers
220 views

Not all printers are deployed on the client using Group Policy

Situation in our environment we are using the following servers to deploy printers in our domain forest: Windows Small Business Server 2008: contains the group policy to deploy the printers Windows ...
1
vote
2answers
376 views

GPO - Software Restriction Policies - add exception

Windows Server 2012 R2 and GPO. I wanted to increase security so I blocked %AppData%\*.exe and %AppData%\*\*.exe Spotify stopped working of course. I created another rule %AppData%\Roaming\Spotify\...
2
votes
1answer
127 views

How to script a backup/restore of the Default Domain Policy to a reinstalled PDC

First I'll say that I've just now discovered that my practice of making changes directly to the Default Domain Policy isn't the recommended way of doing things. I admit I'm not sure why this is the ...
1
vote
1answer
66 views

Mapped drives aren't syncing on workstations

It seems like a few workstations on our network aren't syncing with the mapped drives, pretty randomly, so for example, different users on the same computer would see different files on the mapped ...
-2
votes
1answer
43 views

GPO not removing from client

I have a windows 2012 server. And I have applied a setting using scheduler that, it will run an .exe file every one hour. After that, I have removed the policy from server. But the .exe file is still ...
4
votes
0answers
71 views

Windows Server Clear on Logout Policy

I was wondering is it possible to create a policy on Windows Server 2008 R2 or 2012 that will clear everything (all files from desktop, documents, etc) once the user has logged out of the system? It ...