Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

3
votes
1answer
48 views

Edit local policy via powershell

i'm searching for a way to edit this policy via powershell : Computer Configuration -> Administrative Templates -> System -> Credentials Delegation -> Allow Delegating Fresh Credentials with ...
3
votes
1answer
3k views

WMI filter for Internet Explorer 10+

I need to apply a GPO on all machines with IE 10+ but the setting does not need to be and shouldn't be applied to ie 9. All the machines are Windows Vista, 7, and 8 (some 32 bit and others 64). I ...
3
votes
1answer
817 views

How to abort applying group policy when it is stuck for too long?

I had a problem with a Win2k8 Domain Controller and had to restart it. It restarted with no issues and reached the "PRESS CTRL + DEL TO LOGON" screen. And so I did a usual logon with an ...
3
votes
1answer
1k views

Is there a way to set access to WMI using GroupPolicy?

From various documentation it appears that to change WMI access you need to use WMI to access the running service and modify specific parts of the tree. Its kind of annoying changing 150,000 hosts ...
2
votes
1answer
67 views

How do I properly configure Internet Explorer Connection Settings via Group Policy?

I've configured the location of our automatic configuration script under "User Configuration > Preferences > Control Panel Settings > Internet Settings > Internet Explorer 8 > Connections > LAN ...
2
votes
1answer
557 views

Deleting Local Profiles when using Roaming Profiles at Log off

I'm currently building an environment that will host about 5,000 users over 20 AppServer. I have finalized my GPOs but I'm experiencing an issue with the user's local profile when roaming profiles is ...
2
votes
1answer
624 views

How to enable Kerberos Authentication Service auditing on 2008 server

I have a 2008-level Windows domain running 5 x 2008 (non-R2) DCs (it's on the roadmap to migrate to R2 or possibly 2012 in the next 9-12 months, but this project needs to be working first), and I need ...
2
votes
1answer
384 views

Windows Installer GPO - “Prohibit user installs” value is missing on Windows 7

The old Windows XP GPO template had three options for "Windows Installer\Prohibit user installs": Allow user installs Hide user installs Prohibit user installs The new Windows 7 template has only ...
2
votes
1answer
402 views

updating drive mapping GPO programmatically using powershell

I have a Group Policy in a domain that have lots of drive mapping settings. I would like to change the path for a lot of these servers in this gpo with powershell if possible. I know i could do this ...
2
votes
1answer
222 views

weird Group Policy behaviour

Server: Windows Server 2008 R2 x64 Enterprise; Installed and tested roles: AD(PDC), DNS, DHCP Joined client: Windows XP sp2 professional; Installed updates:Group Policy Preference Client Side ...
2
votes
1answer
249 views

PEAP Trusted Root CA setting not being Applied as directed by Group Policy

I have created a GPO and linked it to a test OU. This GPO has Windows 7 Wireless Policy that directs the machines to auth on the network with PEAP in computer auth mode. This auth is being done with ...
2
votes
1answer
206 views

Is there a way to disable file browse dialogs in IE/Windows Explorer?

We have an application that runs as a custom shell/kiosk in windows. One part of this application provides access to a web portal (via a .NET BrowserControl). The problem is this web portal allows ...
2
votes
1answer
1k views

IE9 GPO Setting “Configure Tracking Protection Lists”

I've just installed IE9 on my workstations and Server in our network. According to technet article http://technet.microsoft.com/en-us/library/gg699401.aspx There is a GPO setting for IE9 called ...
2
votes
1answer
575 views

Unable to add a 64-bit MSI package to a Group Policy Object on Windows Server 2003 (32 bit)

I am trying to remotely install a 32 -bit MSI and a 64-bit MSI, using Group Policies in Windows Server 2003 (32 bit). I've created a distribution point and a Group Policy Object. When I try to ...
1
vote
1answer
27 views

Group Policy doesn't restart service as configured

I have configured group policy to tell a particular service (Winrm) to restart when the policy is applied. When the policy applies, I see that it tries to stop and start the service. Stopping works, ...
1
vote
1answer
188 views

When is a user considered “Everyone” in the “Access this computer from the network” policy

I am a bit puzzled by the existance of the "Everyone" group in this policy. Per http://technet.microsoft.com/en-us/magazine/dd637754.aspx: The Everyone identity All interactive, network, dial-up, ...
1
vote
1answer
37 views

GPOs do not apply when logging into Windows 7 via RDP

I am developing a set of GPOs which that I've applied to an OU containing some Windows 7 x64 computers. loopback processing is enabled of course. This computers are located in a different room so i ...
1
vote
1answer
484 views

GPO to set firefox proxy

CONTEXT I have recently assigned to restructure a corporate network that contains about 100 client computers. There is an active directory domain (2003 functional level) for the whole network. The ...
1
vote
1answer
2k views

Adding static route through group policy

We are trying to add a static route across all of our end user machines, we have setup a GPO object under Computer configuration > Policies > Windows Settings > Scripts (startup/shutdown) > Startup. ...
1
vote
1answer
86 views

How to filter RSOP to show only modified policies?

Is it possible to view only those elements of GPO that are actually modified/specified? For example, when looking at RSOP for an OU, I have loads of options which are mostly not specified - can I ...
1
vote
1answer
55 views

Big problems with AD gpo

I have a problem with a gpo on AD. Well, I have a domain root where I have only one domain policy. In the policy there is a permission on "log on as service" and two 2 groups added. Down the root I ...
1
vote
1answer
179 views

Pass unlock credentials to powershell script

I have a powershell script that is run as a scheduled task and is triggered to run "On workstation unlock". The script is programmed to reconnect an SSTP VPN connection if the connection becomes ...
1
vote
1answer
59 views

Entering the user's name in a URL for Chrome through Group Policy

I am managing a Windows Server 2008 R2 server, with several Windows 7 machines, and we have recently deployed Google Chrome using Group Policy. We also have a locally hosted intranet for storing ...
1
vote
1answer
178 views

Windows 7: Allow installation of software by non-admins?

I'm running a public library with PCs available for people to use. I'm setting up the next upgrade for the PCs, which will be running Windows 7. We use Deepfreeze to maintain the PC's state (a brief ...
1
vote
1answer
755 views

“Fast link detected” warning in GP management console

There is a message that is shown in every report i make in Group Policy Results section of Group Policy Management Console, saying that "A fast link is detected". I followed the link in the waring, ...
1
vote
1answer
419 views

windows server 2012 remote desktop session SSL certificate

My windows server 2012 currently seems to have gone on holiday and is ignoring the SSL certificate I have asked it to use for Remote Desktop connections via wmic ...
1
vote
1answer
699 views

Why are group policy preference drive mappings not applied to the domain administrator account?

I have a working policy on my entire domain. I just found out, when logging with the domain administrator, that this policy is not applied (EDIT: Running : gpresult shows that the GPO's are applied - ...
1
vote
1answer
296 views

Possible to disable smart card PIN change in Windows 7?

I'm looking for a way to disable the smart card PIN change ability provided with Windows 7's native minidriver. It doesn't allow us to enforce any PIN complexity requirements such that users could ...
1
vote
1answer
71 views

Group policy not allowing url to be added

I'm trying to add a specific web server URL into the local Intranet Zone on my client PCs using a Group Policy. The policy works for all remote sites but does not work for the local site where the ...
1
vote
1answer
130 views

Will IE7 .msi push-install via GPO cause problems with current IE8?

My company (finally!) are upgrading from Internet Explorer 6 to Internet Explorer 7. We plan on pushing the installation via GPO. However, some laptops and/or workstations in the office are already ...
1
vote
1answer
281 views

New machines do not accept home page from Group Policy

I've just got two new machines from Dell and did a fresh reinstall of Win7 64 bit pro to remove the obligatory dell preinstalled crapware, joined my domain and rebooted. For some reason the home page ...
1
vote
1answer
730 views

Getting Windows 7 to run Scripts from Other Shares then NETLOGON

I have several Windows Server 2003 Environments I administer. These are separate disparate domains with their own structures and policies. I generalize as much as possible when I administer these ...
1
vote
1answer
279 views

query group policy settings across all group policy objects on an AD server

I'd like to find if a single Group policy setting has been applied on a specific domain / AD server. In the simple case of modifying the the default group policy I can look up the policy setting via: ...
1
vote
1answer
199 views

How to restrict access to command shell/explorer for non admin users

Is there a way to restrict access for specific (non admin) users to cmd, windows tools, explorer on an Wim XP system? Partially I consider to do this through group policy & logon script 1. deny ...
1
vote
1answer
313 views

Apply custom IE8 CSS via Group Policy

I have an internal website that I need to strip some components via CSS only for specific users (kiosk users). Is there a way I can apply the CSS file via group policy my kiosk OU? The kiosks connect ...
1
vote
1answer
902 views

Windows 2008 Group Policy Setting? - Migration Headache

I have a small domain of users that I just migrated from a linux domain running open-ldap. Our new servers are running Windows 2008 Standard. I've installed Active Directory and everything is ...
0
votes
1answer
29 views

How to completely reset Group Policy on a domain member?

We have a problem where domain members built from a certain Windows 8 image can no longer update Computer Group Policy. These domain member have recently been moved to a new Organisational Unit, but ...
0
votes
1answer
115 views

Group Policy Preferences Printers Server 2008R2 Error 0x80070bc4 does not set default printer after a printer has been created

Alright after calling upon the almighty Google I have been unable to find a good solutions to this problem along with many other users. So I am turning to Server Fault for some support here. I am in ...
0
votes
1answer
34 views

WSUS: How to combine targeting groups from multiple GPOs

I am trying to use group policy with WSUS to prevent stuff like Silverlight from being installed unless it is requried. I want computer groups for each of the software (so a computer will end up in ...
0
votes
1answer
251 views

The sysvol permissions for one or more GPOs on this domain controller are not in sync with the permissions for the GPOs on the baseline domain

I have recently installed a second domain controller and all replication seems to be working fine except for group policy - In windows 2012r2, through the new Group Policy Management, when I click on ...
0
votes
1answer
308 views

How can I get SeSecurityPrivilege enabled?

I'm trying to install a hotfix for SQL Server 2008 and failing on the Rule Check with "Setup account privileges" failed. I am running SQL Server 2008 Standard on Windows Server 2008 R2. Searching on ...
0
votes
1answer
58 views

Error on RSOP for Audit policy on DC

Domain Controller - Windows Server 2008 R2 Standard Please see the print-screen, I am unable to understood why such error is showing on my Domain Controller. I have also checked on Winlogon.log, ...
0
votes
1answer
83 views

How to restrict DVD access using Windows Server 2003 Group Policy?

I have a Windows Server 2003 DC with 3 Win7 (32) desktops. I want to use an GPO to restrict the DVD on all the desktops (Either 'hide' or not have available) for all domain users except for domain ...
0
votes
1answer
647 views

GPO: User logon script not running

I have a GPO that is linked to an OU containing computers. Loopback processing is activated an set to merge. Within the user part of the GPO i have a powershell script defined that basically checks if ...
0
votes
1answer
192 views

Deploy Advanced Firewall Rules via GPO - How to avoid merging?

I am trying to deploy a set of advanced windows firewall ACLs to several 2008 R2 servers. I would like to (i have to) ensure that no local or old rules are getting applied. So I set "Apply local ...
0
votes
1answer
43 views

Cannot unblock IE9 installation after GPO blocker kit

I need to unblock the installation of Internet Explorer 9, after using the Internet Explorer 9 Blocker Toolkit in a GPO. In a way the unblocking does work, after disabling it in the GPO, but the ...
0
votes
1answer
50 views

Why does GPO for firewall inbound connections still allows change from “Block (Default)” to “Block all connections”

I found an interesting issue where I set a GPO to control the firewall policy to "Block (default)" the inbound connections, however that setting is not completely enforced. It still allows an ...
0
votes
1answer
272 views

Restore legacy audit policies on Windows Server 2008 R2

Recently, I was trying to reduce spam of my security audits by disabling auditing of "Filtering Platform Packet Drop". In a week's time, I get enough of these audits the fill a 200Mb logfile. I tried ...
0
votes
1answer
2k views

How to change default region/culture settings in Windows 2012

I have researched this topic through the web but can't find a definitive answer. Our server team has recently upgraded our SQL Servers VMs from Win 2003 to Win 2012. Given our region we run all our ...
0
votes
1answer
342 views

SBS 2011 Folder Redirection not working after migration

I followed the Migrate SBS 2008 to SBS 2011 guide which worked well. However RedirectedFolders haven't migrated over properly - Windows 7 workstations are still actively connecting to the old ...