Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

5
votes
1answer
296 views

Disable Outlook Web Access Junk filtering in Exchange 2013

By default, Outlook Web Access (OWA) in Exchange 2013 seems to move suspected junk mail to the Junk Email folder. This is undesirable behavior in most of my environments because we have Barracuda Spam ...
3
votes
1answer
85 views

Moving AppData to a new share: best practice for moving data

My company uses folder redirection to store the AppData folder on a network share. I will be moving the AppData to a new share and I was wondering about the automatic data transfering feature of the ...
3
votes
1answer
499 views

Edit local policy via powershell

i'm searching for a way to edit this policy via powershell : Computer Configuration -> Administrative Templates -> System -> Credentials Delegation -> Allow Delegating Fresh Credentials with ...
3
votes
1answer
2k views

How to abort applying group policy when it is stuck for too long?

I had a problem with a Win2k8 Domain Controller and had to restart it. It restarted with no issues and reached the "PRESS CTRL + DEL TO LOGON" screen. And so I did a usual logon with an ...
3
votes
1answer
2k views

Deny access to removable storage media for Windows XP client machines via Group Policy

I am currently editing a GPO for user accounts of a particular OU and I want to disable removable drives access on a particular OU, problem is that all the client machines are Windows XP and the ...
2
votes
1answer
50 views

How to Automatically Tust Auto Enrolled Code Signing Certificates

In my organization all developers are setup to be granted a Code signing certificate via Auto Enrollment. Additionally, PowerShell is configured by group policy to require all scripts to be signed. ...
2
votes
1answer
361 views

Users still get UAC prompt after allowing printer install and alter LAN connection by GPO?

I've implemented the following Group Policy settings to allow non-admins to install printer drivers and to enable / disable their wifi: User Configuration -> Administrative Templates -> Network ...
2
votes
1answer
64 views

When does the “Move the contents of [FolderName] to the new location.” option in a Folder Redirection GPO take effect?

Does the "Move the contents of [FolderName] to the new location." option only apply to files found in the users profile, or does it also apply when changing the destination of the redirection to a new ...
2
votes
1answer
666 views

IE11 Enterprise Mode gpo not working

I've followed the following articles to configure the Enterprise Mode gpo for IE11: http://msdn.microsoft.com/en-us/library/dn640699.aspx http://msdn.microsoft.com/en-us/library/dn640696.aspx I ...
2
votes
1answer
165 views

Windows 7 GPO Preventing admins from interactively logging in, but still allowing Run As / permission escalation

I'm implementing security restrictions for a client who would like to prevent admin accounts from logging into workstations. For example each person has a user account and an admin account and only ...
2
votes
1answer
129 views

How do I properly configure Internet Explorer Connection Settings via Group Policy?

I've configured the location of our automatic configuration script under "User Configuration > Preferences > Control Panel Settings > Internet Settings > Internet Explorer 8 > Connections > LAN ...
2
votes
1answer
4k views

Deleting Local Profiles when using Roaming Profiles at Log off

I'm currently building an environment that will host about 5,000 users over 20 AppServer. I have finalized my GPOs but I'm experiencing an issue with the user's local profile when roaming profiles is ...
2
votes
1answer
2k views

GPO to set firefox proxy

CONTEXT I have recently assigned to restructure a corporate network that contains about 100 client computers. There is an active directory domain (2003 functional level) for the whole network. The ...
2
votes
1answer
1k views

How to enable Kerberos Authentication Service auditing on 2008 server

I have a 2008-level Windows domain running 5 x 2008 (non-R2) DCs (it's on the roadmap to migrate to R2 or possibly 2012 in the next 9-12 months, but this project needs to be working first), and I need ...
2
votes
1answer
551 views

Windows Installer GPO - “Prohibit user installs” value is missing on Windows 7

The old Windows XP GPO template had three options for "Windows Installer\Prohibit user installs": Allow user installs Hide user installs Prohibit user installs The new Windows 7 template has only ...
2
votes
1answer
536 views

updating drive mapping GPO programmatically using powershell

I have a Group Policy in a domain that have lots of drive mapping settings. I would like to change the path for a lot of these servers in this gpo with powershell if possible. I know i could do this ...
2
votes
1answer
247 views

weird Group Policy behaviour

Server: Windows Server 2008 R2 x64 Enterprise; Installed and tested roles: AD(PDC), DNS, DHCP Joined client: Windows XP sp2 professional; Installed updates:Group Policy Preference Client Side ...
2
votes
1answer
260 views

PEAP Trusted Root CA setting not being Applied as directed by Group Policy

I have created a GPO and linked it to a test OU. This GPO has Windows 7 Wireless Policy that directs the machines to auth on the network with PEAP in computer auth mode. This auth is being done with ...
2
votes
1answer
2k views

IE9 GPO Setting “Configure Tracking Protection Lists”

I've just installed IE9 on my workstations and Server in our network. According to technet article http://technet.microsoft.com/en-us/library/gg699401.aspx There is a GPO setting for IE9 called ...
1
vote
1answer
45 views

Setting HomePath to EmployeeNumber as a variable

We are planning to use the EmployeeNumber user attribute in AD to create the path to each user's Home drive. Reason for this is that AD user names are currently based on last name, which changes often ...
1
vote
1answer
91 views

Apply group policy to specific users (in an OU) on specific computers (not in an OU)

This has been bugging me for a while. Here's the setup: We have ~20 Win2k8r2 servers. They are separated into various OUs that I can't change. I have created a security group "DevHostsSG" that ...
1
vote
1answer
154 views

Disabling the Microsoft LLDP Protocol Driver using Group Policy

I need to campus-wide disable the Microsoft LLDP Protocol Driver using Group Policy / SCCM / or any other means of centralized management, because I've written my own LLDP broadcast service I plan on ...
1
vote
1answer
45 views

GPO install Live Meeting 2007 on Windows 8.1

Errors: The removal of the assignment of application Microsoft Office Live Meeting 2007 from policy LiveMeeting 2007 failed. The error was : %%2 The description for Event ID 103 from source ...
1
vote
1answer
172 views

Windows user privileges when running scheduled task

I posted a question a while ago about allowing a specific user to start/stop Windows services. Provide a user with service start/stop permissions I decided to revisit the issue. I have no idea what ...
1
vote
1answer
78 views

Lockdown Mozilla Thunderbird on Windows Remote Desktop Services

I've installed Mozilla Thunderbird 31.3.0 on a Windows Server 2012 R2 which has the Remote Desktop Services role. I want to configure the Thunderbird program and set each user's email account etc and ...
1
vote
1answer
79 views

Can't access share sometimes and some strange performance issues

I'm getting error 0x80070043 "The network name cannot be found" when accessing \\dc01 (the root), but can access shares via \\dc01\share. When I get that error I also didn't get the network drive on ...
1
vote
1answer
55 views

How can I get rid of duplicate profile folders in a newly created profile due to folder redirection?

How can I get rid of duplicate profile folders in a newly created profile due to folder redirection? I am using a Folder Redirection GPO to redirect most of my user profile folders to a server. In ...
1
vote
1answer
84 views

Restoring file / folder permission using GPO

Initially, in our Windows domain environment, all Domain Users are by default Local Administrator of their own workstation. After some deliberation, it was decided that Domain Users should be removed ...
1
vote
1answer
275 views

GPO is both applied AND filtered out

I have a GPO that is applied to MyUser's OU and filtered to MyUser. I run a gpupdate on his machine and I see that the GPO is listed under "Applied Group Policy Objects", yet it is also listed under ...
1
vote
1answer
221 views

Server 2012r2 change login screen language with registry

I am installing a Windows Server 2012R2 RDS farm. The OS language is English, but my users are Dutch. I already installerd the Dutch MUI pack in windows via the command prompt. Via a user GPO the ...
1
vote
1answer
106 views

Group Policy doesn't restart service as configured

I have configured group policy to tell a particular service (Winrm) to restart when the policy is applied. When the policy applies, I see that it tries to stop and start the service. Stopping works, ...
1
vote
1answer
369 views

When is a user considered “Everyone” in the “Access this computer from the network” policy

I am a bit puzzled by the existance of the "Everyone" group in this policy. Per http://technet.microsoft.com/en-us/magazine/dd637754.aspx: The Everyone identity All interactive, network, dial-up, ...
1
vote
1answer
48 views

GPOs do not apply when logging into Windows 7 via RDP

I am developing a set of GPOs which that I've applied to an OU containing some Windows 7 x64 computers. loopback processing is enabled of course. This computers are located in a different room so i ...
1
vote
1answer
6k views

How to change default region/culture settings in Windows 2012

I have researched this topic through the web but can't find a definitive answer. Our server team has recently upgraded our SQL Servers VMs from Win 2003 to Win 2012. Given our region we run all our ...
1
vote
1answer
129 views

How to filter RSOP to show only modified policies?

Is it possible to view only those elements of GPO that are actually modified/specified? For example, when looking at RSOP for an OU, I have loads of options which are mostly not specified - can I ...
1
vote
1answer
58 views

Big problems with AD gpo

I have a problem with a gpo on AD. Well, I have a domain root where I have only one domain policy. In the policy there is a permission on "log on as service" and two 2 groups added. Down the root I ...
1
vote
1answer
275 views

Windows 7: Allow installation of software by non-admins?

I'm running a public library with PCs available for people to use. I'm setting up the next upgrade for the PCs, which will be running Windows 7. We use Deepfreeze to maintain the PC's state (a brief ...
1
vote
1answer
1k views

“Fast link detected” warning in GP management console

There is a message that is shown in every report i make in Group Policy Results section of Group Policy Management Console, saying that "A fast link is detected". I followed the link in the waring, ...
1
vote
1answer
701 views

windows server 2012 remote desktop session SSL certificate

My windows server 2012 currently seems to have gone on holiday and is ignoring the SSL certificate I have asked it to use for Remote Desktop connections via wmic ...
1
vote
1answer
119 views

System Restore Points

Currently I am investigating how to schedule an automatic initiation of a system restore point for all of the workstations in my office. It seems that Task Scheduler already has some nice defaults ...
1
vote
1answer
872 views

Why are group policy preference drive mappings not applied to the domain administrator account?

I have a working policy on my entire domain. I just found out, when logging with the domain administrator, that this policy is not applied (EDIT: Running : gpresult shows that the GPO's are applied - ...
1
vote
1answer
1k views

How do I apply WinHTTP proxy settings domain-wide?

We're already configuring Internet Explorer proxy settings through group policy and it works great. Sadly, I've recently run into multiple issues where those settings are ignored by certain services. ...
1
vote
1answer
372 views

Possible to disable smart card PIN change in Windows 7?

I'm looking for a way to disable the smart card PIN change ability provided with Windows 7's native minidriver. It doesn't allow us to enforce any PIN complexity requirements such that users could ...
1
vote
1answer
71 views

Group policy not allowing url to be added

I'm trying to add a specific web server URL into the local Intranet Zone on my client PCs using a Group Policy. The policy works for all remote sites but does not work for the local site where the ...
1
vote
1answer
133 views

Will IE7 .msi push-install via GPO cause problems with current IE8?

My company (finally!) are upgrading from Internet Explorer 6 to Internet Explorer 7. We plan on pushing the installation via GPO. However, some laptops and/or workstations in the office are already ...
1
vote
1answer
305 views

New machines do not accept home page from Group Policy

I've just got two new machines from Dell and did a fresh reinstall of Win7 64 bit pro to remove the obligatory dell preinstalled crapware, joined my domain and rebooted. For some reason the home page ...
1
vote
1answer
340 views

query group policy settings across all group policy objects on an AD server

I'd like to find if a single Group policy setting has been applied on a specific domain / AD server. In the simple case of modifying the the default group policy I can look up the policy setting via: ...
1
vote
1answer
205 views

How to restrict access to command shell/explorer for non admin users

Is there a way to restrict access for specific (non admin) users to cmd, windows tools, explorer on an Wim XP system? Partially I consider to do this through group policy & logon script 1. deny ...
1
vote
1answer
374 views

Apply custom IE8 CSS via Group Policy

I have an internal website that I need to strip some components via CSS only for specific users (kiosk users). Is there a way I can apply the CSS file via group policy my kiosk OU? The kiosks connect ...
1
vote
1answer
922 views

Windows 2008 Group Policy Setting? - Migration Headache

I have a small domain of users that I just migrated from a linux domain running open-ldap. Our new servers are running Windows 2008 Standard. I've installed Active Directory and everything is ...