Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
0answers
13 views

How do I deploy Outlook view customizations to users?

I've customized a view to use with the calendar, and then saved it while selecting either "this folder, visible to everyone" or "all calendar folders". Now I checked with another user and neither of ...
1
vote
2answers
22 views

Is there a refresh intervall for the local group policy?

As the title says, is there a (background) refresh intervall for the local group policy? How often does it get applied? Once at Startup/Login? Coudn't find anything on Technet...
0
votes
0answers
47 views

Add IE11 Search Providers by GP but do not restrict users in adding more

Is it possible to add search providers to IE11 without removing the users ability to add more? I've tried adding the necessary registry keys to both HKLM and HKCU Software/Microsoft/Internet Explorer/...
0
votes
0answers
11 views

Access to Sites/App Pools in IIS 7

I'm trying to grant non-admins access to manage or at least view sites and app pools in IIS 7 (Windows Server 2008 R2). Currently when they open IIS on a server (we have thousands of IIS servers), ...
0
votes
1answer
114 views

Group Policy applying only once?

For my own sanity can someone please advise why my GPO's to install application only works once? (both Machine level and User) When I say once, I let the script install to test on a virtual machine. ...
5
votes
2answers
107 views

Minimal set of rights to run a process on a Microsoft Windows Server

I want to run a process (not a service) under a different user on a Microsoft Windows Server and I need the minimal set of rights which are needed to do so. The minimal set of rights is required, ...
3
votes
0answers
145 views

Changed policy: locked out local and domain administrator account on Windows Server 2012

I'm kind of a rookie when it comes to servers and server hardening. I was following the CIS benchmark for Windows Server 2012 and changed the allow log on locally policy to include administrator, ...
-1
votes
1answer
28 views

Windows 8.1 - Group Policy Settings set, but not executet when offline

Enviremental information: Windows Domain with 3 2012 R2 Domain Controlers. I am trying to build a Windows 8.1 in kiosk mode, only a browser with access to specific websites. With the help of GPO - ...
0
votes
0answers
32 views

openldap ppolicy users login Access denied

I'm having trouble logging in User created after following steps from Youtube link https://www.youtube.com/watch?v=_ZvnNVwWk-M&list=PLrUFyg1unBb8n0SJxJqQYMo9kRcY2Mly0&index=7 This video ...
0
votes
1answer
43 views

GPO with computer configurations are not applied

server running server 2012 R2 - clients running server 2012 R2 and windows 8.1 pro one strange issue am facing ! i have several GPOs linked to the domain root some have user configurations only ...
2
votes
0answers
73 views

Bitlocker says PIN is incorrect

I have new batch laptops to image, almost all of them are done but 2 of them (same models) have an issue I can't resolve. I enable bitlocker and make sure that its also recoverable by PIN. This works ...
1
vote
0answers
34 views

Bypassing group policy

I'm trying to prevent users from pressing CTRL + ALT + DEL while their accounts are logging in to our domain (ie. while the system is creating the user profile, applying group policies, etc.). Due to ...
3
votes
0answers
92 views

How can I programmatically unbind IPv6 from a network interface on a Windows 7 machine?

I need to unbind the IPv6 services from a number of client workstations running Windows 7. ("Untick" the selected box in the screenclip below.) For what it matters, they currently all have a single,...
2
votes
1answer
195 views

How can I allow Domain Users to update printer drivers without any prompts?

Each time Xerox release a new printer driver and we update our network printers on our servers we have to go around each domain computer and enter the Administrator details in to the update printer ...
4
votes
2answers
250 views

“Disable machine account password changes” Group Policy setting - when should it be enabled?

I am setting up a test environment on Amazon Web Services comprising 2 web servers, 1 database server and 1 domain controller. All of them are Windows Server 2012 and joined to the domain. ...
3
votes
0answers
87 views

Group Policy Application on Boot with MSTP & really really fast computers

The latest generation HP computers with solid state drives and Win 10 are booting so fast that Multiple Spanning Tree Protocol is not allowing network access in time for Group Policy to process on ...
3
votes
3answers
84 views

Deploy multiple printers with group policy preferences with one policy

I am having trouble with deploying printers with GPP. I have 40 Printers that need to be deployed to different users. Only certain users need certain printers. I've got a GPO setup with user printer ...
1
vote
1answer
78 views

Is there a GPO or registry tweak to show taskbar buttons on taskbar where windows is open?

Is there a registry tweak or a group policy object that would allow me to set a setting which displays application icons only on taskbars where the window is open? Without GPO or registry tweak this ...
0
votes
0answers
47 views

Group Policy - Only Apply to One Computer, and non-admins

Where am I going wrong with the below? We have a server running Server 2008 R2 which users connect to via remote desktop to run a CRM application. This server has SQL Server 2012 installed, along ...
0
votes
1answer
12 views

Client applied to group policy object but cant find in WSUS

My client is subscribed to my group policy, But I cant find the computer in my WSUS when I look under All Computers. When I typed the command gpresult /r on my client it shows: computer settings ----...
0
votes
0answers
54 views

Keyboard layout not being pushed through GPO

I'm trying to push keyboard layouts to all users using a GPO that creates a registry key. The key is created under HKEY_CURRENT_USER\Keyboard Layout\Preload. In my case the value data of the key is ...
0
votes
0answers
31 views

Windows explorer not loading drives or thumbnails on whole domain

Every computer on the domain seems to have an issue where explorer sometimes opens up to only show favorites and libraries for available locations, and they both have a magnifying-glass over top of ...
1
vote
1answer
821 views

GPO Mapped Drive Issues on Windows 10 Clients

We are running Windows SBS 2011 as our file server and AD, a 2008 R2 server that is sharing files, and a 2012 R2 terminal server. I have a GPO that maps network drives to users based on security roles ...
0
votes
2answers
30 views

Security filtering not working in GPO

Not sure if this would be the right place to ask this. On my domain controllers, I have created all my users and computers inside an OU. I have a group named Support which is in the local admins group ...
1
vote
2answers
99 views

Shared Printer DENY Print ACL assigned to AD Security Group not Working

I have three servers. Server 1 - Print Server, Windows Server 2008 Standard Server 2 - Domain Controller, Windows Server 2008 R2 Standard Server 3 - Terminal Services Server, Windows Server 2008 R2 ...
0
votes
3answers
73 views

Missing GPO “Allow job name in event logs” in Windows Server 2012 R2

I am using Windows Server 2012 R2 (6.3.9600 Build 9600) for two different servers. However, one server has the GPO option "Allow job name in event logs" while the other one does not. I have examined ...
0
votes
0answers
187 views

Default Program via GPO Windows 7

I tried to configure the default program to open .docx/.doc files via gpo as mentioned here: http://www.grouppolicy.biz/2011/09/how-to-use-group-policy-to-change-open-with-file-associations/ I've ...
2
votes
1answer
68 views

How do I enable “Logon as a service” dialog buttons?

Group Policy newbie here. I need to be able to run some of my services as a user that also has access to SQL Server. How do I enable the "Add User or Group..." and "Remove" buttons on the "Logon as a ...
0
votes
0answers
28 views

Allow Administrators to Override Device Installation Restrictions

I am trying to set up our Active Directory domain to lock down unauthorised hardware installation. I am testing the Device Installation Restrictions in Group Policy, using the settings under Computer ...
1
vote
1answer
157 views

Clients can't update dNSHostName attribute after DNS suffix change

We have a bunch of Windows 7 and Windows Vista clients that belong to domain contoso.com. The clients are registered in DNS to client.contoso.com. We have changed the DNS suffix via GPO from client....
1
vote
1answer
41 views

Windows Security Policy not Updating - Admin templates work fine

I have a domain with a mix of physical and virtual servers. Some time ago another admin may have performed some manual scripted updates at the client level that are now preventing changes in the ...
1
vote
1answer
33 views

Restrict Control Panel items GPO on Server 2003 - AD is 2008 R2

I'm having trouble applying a GPO to restrict Control Panel Items on Server 2003. My DC is 2008 R2 and the policy I'm using is: User configuration > Administrative Templates > Control Panel > Show ...
0
votes
0answers
31 views

OpenVPN with IPSec

OpenVPN with IPSec We are using OpenVPN to connect multiple devices. The customer requires using IPSec, but OpenVPN is SSL VPN. Their website says this OpenVPN's security model is based on using ...
1
vote
1answer
63 views

Remotely change local group policy server 2008R2

I'm trying to find a way I can edit the 'trusted hosts' list under local group policy remotely. Path from within Local Group Policy is: \local computer policy\computer configuration\administrative ...
0
votes
0answers
50 views

Group policy not pushed to client for offline files setting

I have setup group policy for "Offline Files" but I noticed that the configuration is not pushed to clients. With another setup I had no problem. The configuration path is \\Computer Configuration\...
1
vote
2answers
176 views

Group Policy to disable USB in windows 7 clients

I want to disable the USB for Windows 7 clients through the Active Directory group policy ,is it possible ???and anyone can give me instructions please .
1
vote
3answers
80 views

Windows 10 search bar and group policies

I'm administrating a Windows 7 (now Windows 10) machine which has one account that is pretty locked down. Users can only start specific programs (via white list in the group policies), have no access ...
0
votes
0answers
7 views

Can I use policy to filter get requests or strings in URLs not found in the domain?

I know there's content advisor, but I don't get to access it, so I'd like to know what it can do before I ask questions to people who can access it. My goal is to filter out search queries using ...
0
votes
3answers
59 views

What is the most suitable path on Windows workstations to store admin scripts? [closed]

We have a need for a GPO to store admin scripts locally on Windows workstations (7 and above), and I was wondering if Microsoft has any recommendations or if you have any experience or thoughts on ...
-1
votes
2answers
81 views

Windows Server 2008R2 Active Directory Apply GPO only when connected to domain

We are trying to apply a SSID Restriction policy for computers where i work. We created a GPO which applies to computers in an specif OU without any security or WMI filters We want the computers to ...
32
votes
3answers
3k views

Why are many admins using 'Turn off Automatic Root Certificates Update' Policy?

My company distributes a Windows Installer for a Server based product. As per best practices it is signed using a certificate. In line with Microsoft's advice we use a GlobalSign code signing ...
0
votes
0answers
75 views

Group Policy Scheduled Task not asking for password

I'm trying to deploy a scheduled Task to our Servers via GPO, but something doesn't seem quite right. I want the Task to be run with a Service account, wheter the user is logged on or not. I know that ...
0
votes
2answers
357 views

Can't send to compressed (zipped) folder

I'm IT Technician at a Secondary School and our Network Manager is away on long term leave. Currently our student's aren't able to send to - compressed folder. When trying the error 'File not found ...
0
votes
0answers
309 views

Map Network Drive GPO not working on login

I have created a group policy which should map the network folder \\SHARED\data to drive letter H:. The policy is applied if I run gpupdate /force, but when I restart the computer and login, the ...
2
votes
1answer
131 views

Remote Desktop: What is the difference between “Run these programs at logon” and “Start the following program on connection”?

My organization is running a Terminal Server Farm in order to provide a specific application to the users. The setup consists of a AD domain controller plus two Terminal Servers running the Remote ...
0
votes
3answers
58 views

Group Policy applied but Network Drive wont show up

Server 2012 DC + Server 2012 on the client side. I have the following group policy in place: The policy is applied when I run gpresult /r /scope computer: Yet the drive does not show up. Also ...
2
votes
0answers
54 views

group policy being applied from offsite Domain Controller: why?

Site 2: I have a small branch with 1 DC and 4 clients. Site 1: Meanwhile my main branch has 2 DCs and lots of clients. I made some GP changes on DC-site2, and I was wondering why they weren't ...
0
votes
0answers
13 views

Scanned Files from printer in Home folder Takes a while to apper - GPO issue?

I don't even know where to start with this. I recently setup home folders for those users that needed it. Then I used a GPO to created a subfolder in the home folder where our networked copier/...
0
votes
1answer
39 views

Configure Remote Desktop Desktop based on Group

I have a few different AD groups accessing the same remote desktop server (Windows Server 2008 R2) and I need to configure each desktop so that every user in the same group has the same icons appear ...
0
votes
0answers
12 views

excluding specific user from USB Access GPO only on specific computer

I have a small domain, and I want to restrict access to USB for all users except for a specific user when using a specific computer. In GPO there is setting in both "User Settings" and "Computer ...