Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

10
votes
1answer
6k views

Prevent IE10 from creating WebCache through Group Policy

IE10 implemented the WebCache which appears to be the new way of doing Temporary Internet Files. The location of this is C:\Users\\AppData\Local\Microsoft\Windows\WebCache In my situation we have a ...
8
votes
1answer
2k views

Everything says Applocker is supposed to work: Why doesn't it?

I've setup a basic group policy consisting of the default Applocker rules. Per Microsoft's technet article on the subject, any files not explicitly allowed to run by the policy are supposed to be ...
5
votes
1answer
376 views

Disable Outlook Web Access Junk filtering in Exchange 2013

By default, Outlook Web Access (OWA) in Exchange 2013 seems to move suspected junk mail to the Junk Email folder. This is undesirable behavior in most of my environments because we have Barracuda Spam ...
3
votes
1answer
108 views

Moving AppData to a new share: best practice for moving data

My company uses folder redirection to store the AppData folder on a network share. I will be moving the AppData to a new share and I was wondering about the automatic data transfering feature of the ...
3
votes
1answer
578 views

Edit local policy via powershell

i'm searching for a way to edit this policy via powershell : Computer Configuration -> Administrative Templates -> System -> Credentials Delegation -> Allow Delegating Fresh Credentials with ...
3
votes
1answer
3k views

How to abort applying group policy when it is stuck for too long?

I had a problem with a Win2k8 Domain Controller and had to restart it. It restarted with no issues and reached the "PRESS CTRL + DEL TO LOGON" screen. And so I did a usual logon with an ...
3
votes
1answer
2k views

Deny access to removable storage media for Windows XP client machines via Group Policy

I am currently editing a GPO for user accounts of a particular OU and I want to disable removable drives access on a particular OU, problem is that all the client machines are Windows XP and the ...
2
votes
1answer
17 views

CIS benchmark differences between 2008R2 to 2012R2

I'm looking at hardening our golden image inline with the CIS benchmarks for Windows Server 2008R2 and 2012R2. But, after looking at the two benchmark documents(registration required - sorry) from ...
2
votes
1answer
42 views

Restricted Groups not working with UAC

I have a Restricted Group in a group policy in an organizational unit called org_unit_a. This organizational unit has all the computers. The restricted group is My_domain\Workstation Admins Has ...
2
votes
1answer
67 views

How to Automatically Tust Auto Enrolled Code Signing Certificates

In my organization all developers are setup to be granted a Code signing certificate via Auto Enrollment. Additionally, PowerShell is configured by group policy to require all scripts to be signed. ...
2
votes
1answer
601 views

Users still get UAC prompt after allowing printer install and alter LAN connection by GPO?

I've implemented the following Group Policy settings to allow non-admins to install printer drivers and to enable / disable their wifi: User Configuration -> Administrative Templates -> Network ...
2
votes
1answer
80 views

When does the “Move the contents of [FolderName] to the new location.” option in a Folder Redirection GPO take effect?

Does the "Move the contents of [FolderName] to the new location." option only apply to files found in the users profile, or does it also apply when changing the destination of the redirection to a new ...
2
votes
1answer
1k views

IE11 Enterprise Mode gpo not working

I've followed the following articles to configure the Enterprise Mode gpo for IE11: http://msdn.microsoft.com/en-us/library/dn640699.aspx http://msdn.microsoft.com/en-us/library/dn640696.aspx I ...
2
votes
1answer
209 views

Windows 7 GPO Preventing admins from interactively logging in, but still allowing Run As / permission escalation

I'm implementing security restrictions for a client who would like to prevent admin accounts from logging into workstations. For example each person has a user account and an admin account and only ...
2
votes
1answer
150 views

How do I properly configure Internet Explorer Connection Settings via Group Policy?

I've configured the location of our automatic configuration script under "User Configuration > Preferences > Control Panel Settings > Internet Settings > Internet Explorer 8 > Connections > LAN ...
2
votes
1answer
5k views

Deleting Local Profiles when using Roaming Profiles at Log off

I'm currently building an environment that will host about 5,000 users over 20 AppServer. I have finalized my GPOs but I'm experiencing an issue with the user's local profile when roaming profiles is ...
2
votes
1answer
2k views

GPO to set firefox proxy

CONTEXT I have recently assigned to restructure a corporate network that contains about 100 client computers. There is an active directory domain (2003 functional level) for the whole network. The ...
2
votes
1answer
600 views

Windows Installer GPO - “Prohibit user installs” value is missing on Windows 7

The old Windows XP GPO template had three options for "Windows Installer\Prohibit user installs": Allow user installs Hide user installs Prohibit user installs The new Windows 7 template has only ...
2
votes
1answer
583 views

updating drive mapping GPO programmatically using powershell

I have a Group Policy in a domain that have lots of drive mapping settings. I would like to change the path for a lot of these servers in this gpo with powershell if possible. I know i could do this ...
2
votes
1answer
262 views

weird Group Policy behaviour

Server: Windows Server 2008 R2 x64 Enterprise; Installed and tested roles: AD(PDC), DNS, DHCP Joined client: Windows XP sp2 professional; Installed updates:Group Policy Preference Client Side ...
2
votes
1answer
2k views

Enabling SSL for Remote Desktop

Ok so I'm trying to remove a number of my systems from our Nessus scan from having this medium vulnerability. http://www.nessus.org/plugins/index.php?view=single&id=18405 I set the following GPO ...
2
votes
1answer
269 views

PEAP Trusted Root CA setting not being Applied as directed by Group Policy

I have created a GPO and linked it to a test OU. This GPO has Windows 7 Wireless Policy that directs the machines to auth on the network with PEAP in computer auth mode. This auth is being done with ...
2
votes
1answer
2k views

IE9 GPO Setting “Configure Tracking Protection Lists”

I've just installed IE9 on my workstations and Server in our network. According to technet article http://technet.microsoft.com/en-us/library/gg699401.aspx There is a GPO setting for IE9 called ...
1
vote
1answer
36 views

Enforce minimum wait time for network connection

We are currently using multiple HP ProCurve V1810-48G switches in our environment which are causing issue with GPO based software installation. We've attributed this to the Spanning Tree support, as ...
1
vote
1answer
24 views

Gpresult provides wrong output on vista machine regarding UAC settings

I have two workstations running Windows 7 Professional 64bit with SP1 and Windows Vista Business 32bit with SP2. Both are in the same OU and have a GPO linked named Hardening_Computers_Clients. This ...
1
vote
1answer
55 views

Setting HomePath to EmployeeNumber as a variable

We are planning to use the EmployeeNumber user attribute in AD to create the path to each user's Home drive. Reason for this is that AD user names are currently based on last name, which changes often ...
1
vote
1answer
338 views

Apply group policy to specific users (in an OU) on specific computers (not in an OU)

This has been bugging me for a while. Here's the setup: We have ~20 Win2k8r2 servers. They are separated into various OUs that I can't change. I have created a security group "DevHostsSG" that ...
1
vote
1answer
483 views

Disabling the Microsoft LLDP Protocol Driver using Group Policy

I need to campus-wide disable the Microsoft LLDP Protocol Driver using Group Policy / SCCM / or any other means of centralized management, because I've written my own LLDP broadcast service I plan on ...
1
vote
1answer
58 views

GPO install Live Meeting 2007 on Windows 8.1

Errors: The removal of the assignment of application Microsoft Office Live Meeting 2007 from policy LiveMeeting 2007 failed. The error was : %%2 The description for Event ID 103 from source ...
1
vote
1answer
409 views

Windows user privileges when running scheduled task

I posted a question a while ago about allowing a specific user to start/stop Windows services. Provide a user with service start/stop permissions I decided to revisit the issue. I have no idea what ...
1
vote
1answer
137 views

Lockdown Mozilla Thunderbird on Windows Remote Desktop Services

I've installed Mozilla Thunderbird 31.3.0 on a Windows Server 2012 R2 which has the Remote Desktop Services role. I want to configure the Thunderbird program and set each user's email account etc and ...
1
vote
1answer
108 views

Can't access share sometimes and some strange performance issues

I'm getting error 0x80070043 "The network name cannot be found" when accessing \\dc01 (the root), but can access shares via \\dc01\share. When I get that error I also didn't get the network drive on ...
1
vote
1answer
64 views

How can I get rid of duplicate profile folders in a newly created profile due to folder redirection?

How can I get rid of duplicate profile folders in a newly created profile due to folder redirection? I am using a Folder Redirection GPO to redirect most of my user profile folders to a server. In ...
0
votes
0answers
1k views

Wrong path in group policy

I'm the it-admin in a small section of my university. For several days, some of our employees experienced connection issues with our server (win server 2008 and win7 clients). Applications are slow ...
0
votes
0answers
35 views

Domain logon-dialog when opening “Computer management”

When I'm logged in to the domain on the client computer I need to logon to the domain again when I right-click "Computer" and chooses "Manage". No GPO has been set yet, and the user seems to be admin ...
0
votes
0answers
948 views

Scheduled Task to shutdown computer after 2 hours of inactivity?

We have around 900 machines in two locations. 95% of these machines are shared, and we find users don't log off or shutdown as often as they should to get updates. I thought I would create a ...
0
votes
0answers
179 views

Java 1.7.21 install via GPO fails on Win 8

Attempting to distribute Java runtime 7 update 21 via GPO to Windows 8. Problem is the GPO fails with: The install of application Java 7 Update 21 (64-bit) from policy Workstation 64-bit ...
0
votes
0answers
64 views

Permitting Remote Deskop Users group to login in

I've been running into an issue where members of our IT department are unable to login to the servers we have recently set up. I have added the IT group to the Remote Desktop Users group and they are ...
0
votes
0answers
626 views

Changing HKCR registry key with group policy

I'm trying to change permissions of some keys in HKCR (HKEY_CLASSES_ROOT) to get a misbehaving program working. I originally tried to script it, but realized that group policy can handle the change ...
0
votes
0answers
135 views

Windows clients XP and 2000 “Log spooler information events” through GPO

I have some clients (XP and 2000) on which I would like to enable printing of documents on local printers. Therefor I need to enable "Log spooler information events" on the Advanced Tab of the Print ...
0
votes
0answers
126 views

Windows Server 2008 GPO for Logon Scripts

I want to change my GPO to have the User logon script point to a different path other than the default NETLOGON share. I would like to put the script on one of my file server shares with the users ...
0
votes
0answers
30 views

Global Security Group AD Issue

This is on Windows Server 2003. I created a testgroup and add the testuserA on it. When I created a folder that has permission for testgroup, i try to log in to the testuserA's computer, and ...
0
votes
0answers
56 views

Manually updating software, installed via GPO, results in two versions installed

Notebook received a software package version 1 via GPO from a network share. Then v2 of the same application was installed manually on that computer. Installer removed old v1. Several days later, ...
0
votes
0answers
166 views

Deploy MSI via gpo for computers, but install after users log in

Is there a way to deploy msi via gpo for computers, but the installation should occur after users log in? The installation should be delayed. The reason is that when installing msi after computer ...
0
votes
0answers
375 views

Group Policy Email Signature Script

I have a VBS script that builds an Outlook Email signature and saves it to the user's machine. I want this to be called each time the user logs in, using group policy, but so far I've had no luck. ...
0
votes
0answers
50 views

Registry change on a key a server does not have

I have written a script that queries the registry on multiple servers looking for specific keys (dealing with iSCSI). After the query, I need to make changes to some of the keys in: ...
0
votes
0answers
139 views

vmware + active directory 2003 + windows xp sp2 + Fujitsu Zero Client + GPO propagation issues

i am trying to set up a domain controller with windows server 2008 (2003 functional level), and windows xp sp2 clients (both virtualized on a Fujitsu vmware server). My windows xp sp2 clients have ...
0
votes
0answers
188 views

roaming profile and offline folder setting on schools laptops and WIFI

I have a Win 2008 R2 server with Win7 SP1 laptops and a WIFI. Teachers in and out therefore often work from home but somehow the offline settings is not right on our system. Could someone guide me ...
0
votes
0answers
490 views

Active directory group policy for routing table

I installed openvpn client for restricted active directory test user. VPN connection is OK, but routes can't be added. Therefore, I have added a test user to "network configuration operators" group ...
-1
votes
0answers
32 views

Deploy printer via GPO but GPO update show fault

I've just deploy new printer via GPO but it is not working. I checked by update GPO by run cmd gpupdate /force but it shown me the error as below. Please help me , Where to check ? what is the ...