Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

1
vote
1answer
32 views

GPOs do not apply when logging into Windows 7 via RDP

I am developing a set of GPOs which that I've applied to an OU containing some Windows 7 x64 computers. loopback processing is enabled of course. This computers are located in a different room so i ...
1
vote
1answer
99 views

GPO to set firefox proxy

CONTEXT I have recently assigned to restructure a corporate network that contains about 100 client computers. There is an active directory domain (2003 functional level) for the whole network. The ...
1
vote
1answer
67 views

How to filter RSOP to show only modified policies?

Is it possible to view only those elements of GPO that are actually modified/specified? For example, when looking at RSOP for an OU, I have loads of options which are mostly not specified - can I ...
1
vote
1answer
394 views

Windows 7 UAC - Local Administrator and Secpol.msc

I am trying to change my group policy settings temporarily to disable completely UAC. I have local admin rights on my machine, however the UAC options in Secpol.msc are disabled. Any ideas?
1
vote
1answer
52 views

Big problems with AD gpo

I have a problem with a gpo on AD. Well, I have a domain root where I have only one domain policy. In the policy there is a permission on "log on as service" and two 2 groups added. Down the root I ...
1
vote
1answer
140 views

Pass unlock credentials to powershell script

I have a powershell script that is run as a scheduled task and is triggered to run "On workstation unlock". The script is programmed to reconnect an SSTP VPN connection if the connection becomes ...
1
vote
1answer
44 views

Entering the user's name in a URL for Chrome through Group Policy

I am managing a Windows Server 2008 R2 server, with several Windows 7 machines, and we have recently deployed Google Chrome using Group Policy. We also have a locally hosted intranet for storing ...
1
vote
1answer
134 views

Windows 7: Allow installation of software by non-admins?

I'm running a public library with PCs available for people to use. I'm setting up the next upgrade for the PCs, which will be running Windows 7. We use Deepfreeze to maintain the PC's state (a brief ...
1
vote
1answer
400 views

“Fast link detected” warning in GP management console

There is a message that is shown in every report i make in Group Policy Results section of Group Policy Management Console, saying that "A fast link is detected". I followed the link in the waring, ...
1
vote
1answer
337 views

windows server 2012 remote desktop session SSL certificate

My windows server 2012 currently seems to have gone on holiday and is ignoring the SSL certificate I have asked it to use for Remote Desktop connections via wmic ...
1
vote
1answer
561 views

Why are group policy preference drive mappings not applied to the domain administrator account?

I have a working policy on my entire domain. I just found out, when logging with the domain administrator, that this policy is not applied (EDIT: Running : gpresult shows that the GPO's are applied - ...
1
vote
1answer
246 views

Possible to disable smart card PIN change in Windows 7?

I'm looking for a way to disable the smart card PIN change ability provided with Windows 7's native minidriver. It doesn't allow us to enforce any PIN complexity requirements such that users could ...
1
vote
1answer
63 views

Group policy not allowing url to be added

I'm trying to add a specific web server URL into the local Intranet Zone on my client PCs using a Group Policy. The policy works for all remote sites but does not work for the local site where the ...
1
vote
1answer
129 views

Will IE7 .msi push-install via GPO cause problems with current IE8?

My company (finally!) are upgrading from Internet Explorer 6 to Internet Explorer 7. We plan on pushing the installation via GPO. However, some laptops and/or workstations in the office are already ...
1
vote
1answer
260 views

New machines do not accept home page from Group Policy

I've just got two new machines from Dell and did a fresh reinstall of Win7 64 bit pro to remove the obligatory dell preinstalled crapware, joined my domain and rebooted. For some reason the home page ...
1
vote
1answer
579 views

Getting Windows 7 to run Scripts from Other Shares then NETLOGON

I have several Windows Server 2003 Environments I administer. These are separate disparate domains with their own structures and policies. I generalize as much as possible when I administer these ...
1
vote
1answer
237 views

query group policy settings across all group policy objects on an AD server

I'd like to find if a single Group policy setting has been applied on a specific domain / AD server. In the simple case of modifying the the default group policy I can look up the policy setting via: ...
1
vote
1answer
190 views

How to restrict access to command shell/explorer for non admin users

Is there a way to restrict access for specific (non admin) users to cmd, windows tools, explorer on an Wim XP system? Partially I consider to do this through group policy & logon script 1. deny ...
1
vote
1answer
264 views

Apply custom IE8 CSS via Group Policy

I have an internal website that I need to strip some components via CSS only for specific users (kiosk users). Is there a way I can apply the CSS file via group policy my kiosk OU? The kiosks connect ...
1
vote
1answer
886 views

Windows 2008 Group Policy Setting? - Migration Headache

I have a small domain of users that I just migrated from a linux domain running open-ldap. Our new servers are running Windows 2008 Standard. I've installed Active Directory and everything is ...
0
votes
1answer
11 views

Error on RSOP for Audit policy on DC

Domain Controller - Windows Server 2008 R2 Standard Please see the print-screen, I am unable to understood why such error is showing on my Domain Controller. I have also checked on Winlogon.log, ...
0
votes
1answer
25 views

How to restrict DVD access using Windows Server 2003 Group Policy?

I have a Windows Server 2003 DC with 3 Win7 (32) desktops. I want to use an GPO to restrict the DVD on all the desktops (Either 'hide' or not have available) for all domain users except for domain ...
0
votes
1answer
61 views

GPO: User logon script not running

I have a GPO that is linked to an OU containing computers. Loopback processing is activated an set to merge. Within the user part of the GPO i have a powershell script defined that basically checks if ...
0
votes
1answer
45 views

Disable USB mass storage access on client machines

This might not be a new question for this forum but for me it is very critical. I am having a network of 10 PCs, one is having Windows Server 2012 and Others having Windows 7/Windows 8.1. The server ...
0
votes
1answer
26 views

Cannot unblock IE9 installation after GPO blocker kit

I need to unblock the installation of Internet Explorer 9, after using the Internet Explorer 9 Blocker Toolkit in a GPO. In a way the unblocking does work, after disabling it in the GPO, but the ...
0
votes
1answer
33 views

Why does GPO for firewall inbound connections still allows change from “Block (Default)” to “Block all connections”

I found an interesting issue where I set a GPO to control the firewall policy to "Block (default)" the inbound connections, however that setting is not completely enforced. It still allows an ...
0
votes
1answer
30 views

Windows Startup and Logon scripts proper permissions

I'd like to know what the appropriate permissions should be for Startup and Logon scripts that run for everyone. Should Startup scripts have System read and execute permissions and Logon scripts read ...
0
votes
1answer
84 views

Restore legacy audit policies on Windows Server 2008 R2

Recently, I was trying to reduce spam of my security audits by disabling auditing of "Filtering Platform Packet Drop". In a week's time, I get enough of these audits the fill a 200Mb logfile. I tried ...
0
votes
1answer
241 views

How to change default region/culture settings in Windows 2012

I have researched this topic through the web but can't find a definitive answer. Our server team has recently upgraded our SQL Servers VMs from Win 2003 to Win 2012. Given our region we run all our ...
0
votes
1answer
525 views

Adding static route through group policy

We are trying to add a static route across all of our end user machines, we have setup a GPO object under Computer configuration > Policies > Windows Settings > Scripts (startup/shutdown) > Startup. ...
0
votes
1answer
151 views

SBS 2011 Folder Redirection not working after migration

I followed the Migrate SBS 2008 to SBS 2011 guide which worked well. However RedirectedFolders haven't migrated over properly - Windows 7 workstations are still actively connecting to the old ...
0
votes
1answer
87 views

Force mapped drive to ask for credential per log on session

On Windows Server, is there an option in Group Policy or otherwise, to map a network drive that asks for network credentials on each log on session? The reason I want to do this is that for some ...
0
votes
1answer
38 views

Truobles with Windows Update Domain Policy on Windows Server 2003

I got a problem with Windows Update Domain Policy. The Domain Policy is configured with automatic automatic download of updates, but dont installation (Option 3). Everytime i check the policy and ...
0
votes
1answer
216 views

Remove or Disable “Add a Network Location”

I've not been able to find anyway to do this via registry or GPO. I want to remove standard users ability to right-click computer and open the "Add a Network Location" button, or just disable the ...
0
votes
1answer
89 views

How To map a network Drive through preferences by using wmi in server 2008

I want to map a network drive through Group Policy Preferences option. For this mapping i want to go with wmi query, which is in item level targeting. I am done with all the initial work like giving ...
0
votes
1answer
54 views

GPO result test

Running gpresult,from computer policy we are getting computer components access denied. We try : nslookup %USERDNSDOMAIN% net view %USERDNSDOMAIN% cd \%USERDNSDOMAIN%\SYSVOL\%USERDNSDOMAIN%\ and ...
0
votes
1answer
19 views

Security Policy Logs On Windows 7 - Determine Why A Certain Software Function Fails

Is there a log file or administrator screen (like Event Viewer) where one can see specific rules that are being enforced? You know how you can use Process Monitor to monitor a task and see registry ...
0
votes
1answer
95 views

Installing a software through group policy

I want to install a software through group policy to the users in a particular OU. I have production OU. I have 4 users in that OU I have to apply group policy in such a way that a software should be ...
0
votes
1answer
302 views

terminal server, hide desktop icons doesn't work as expected

In the User part of a GPO that i activate for users who log on a terminal server, i tried to set the Administrative Templates, Desktop, "Hide and disable all objects on the desktop" (may be that the ...
0
votes
1answer
59 views

Windows Azure Cloud Service - add Local Security Policy to a user account in startup task

I have a Windows Azure Cloud Service project that includes a startup task Startup.cmd file to create some scheduled tasks. In this file I am using the command line to create a user account which I ...
0
votes
1answer
301 views

Open custom port for IIS windows firewall or group policy

I am running Windows SBS 2011. I have added a web site to IIS using port 8888 and it works perfectly when connecting locally, but not from any other PC on the network (domain). I think I need to open ...
0
votes
1answer
367 views

Why is my loopbacked GPO reporting as disabled

Let me start by saying that my experience with GPO is limited to tentatively poking at settings until they fall into place by trial and error. It is entirely possible this will be a very obvious ...
0
votes
1answer
75 views

Java group policy install succeeds but not fully installing

I am attempting to deploy java over group policy and am running into a few issues. Sometimes when the msi installs, the installer reports that it succeeded in the event viewer, but when I go to the ...
0
votes
1answer
332 views

How to add port exception range via group policy

I am currently working in a Windows Server 2003 environment. We've recently picked up Spiceworks and are having some issues getting all of the machines on our network scanned properly. So far it seems ...
0
votes
1answer
327 views

Group policy configuration error - Server Essentials 2012

I am trying to use the "Implement Group Policy" wizard in Windows Server 2012 Essentials. I have a domain created and a computer included in that domain. When I choose to "Implement Group Policy" I ...
0
votes
1answer
184 views

GPP: Scheduled Task

Any help would be greatly appreciated. I am a beginner System Administrator trying to setup a scheduled task on GPO. Ultimately, I am trying to execute a .exe to install an application at a ...
0
votes
1answer
117 views

How to prevent particular program from using particular network connection under Windows?

In my company almost every user has 3G mobile connection and many of them travel a lot. To prevent expensive mobile charges I'm looking for a solution that would prevent particular program (Windows ...
0
votes
1answer
207 views

GPO WMI username filter not working over RDP

I'm trying to write a WMI filter to prevent a GPO from applying to certain users SELECT * from Win32_ComputerSystem WHERE NOT UserName LIKE 'domain\\user1_%' AND NOT UserName LIKE 'domain\\user2_%' ...
0
votes
1answer
111 views

How do you log the output of startup.bat from a GPO?

I'm trying to write some .bat files for GPO. I would like a way to see the output of the script to help debug problems. For the life of me I can't get it to log anything. I have tried the ...
0
votes
1answer
92 views

gpo proxy server settinngs for all applications

i am trying to set all internet connections of all network PCs via proxy server that is installed on windows server 2003 i have editted proxy setting from gpo, but it only worked for internet ...