Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

2
votes
1answer
241 views

Is there a way to disable file browse dialogs in IE/Windows Explorer?

We have an application that runs as a custom shell/kiosk in windows. One part of this application provides access to a web portal (via a .NET BrowserControl). The problem is this web portal allows ...
2
votes
1answer
2k views

IE9 GPO Setting “Configure Tracking Protection Lists”

I've just installed IE9 on my workstations and Server in our network. According to technet article http://technet.microsoft.com/en-us/library/gg699401.aspx There is a GPO setting for IE9 called ...
2
votes
1answer
666 views

Unable to add a 64-bit MSI package to a Group Policy Object on Windows Server 2003 (32 bit)

I am trying to remotely install a 32 -bit MSI and a 64-bit MSI, using Group Policies in Windows Server 2003 (32 bit). I've created a distribution point and a Group Policy Object. When I try to ...
1
vote
1answer
36 views

Lockdown Mozilla Thunderbird on Windows Remote Desktop Services

I've installed Mozilla Thunderbird 31.3.0 on a Windows Server 2012 R2 which has the Remote Desktop Services role. I want to configure the Thunderbird program and set each user's email account etc and ...
1
vote
1answer
49 views

Can't access share sometimes and some strange performance issues

I'm getting error 0x80070043 "The network name cannot be found" when accessing \\dc01 (the root), but can access shares via \\dc01\share. When I get that error I also didn't get the network drive on ...
1
vote
1answer
41 views

How can I get rid of duplicate profile folders in a newly created profile due to folder redirection?

How can I get rid of duplicate profile folders in a newly created profile due to folder redirection? I am using a Folder Redirection GPO to redirect most of my user profile folders to a server. In ...
1
vote
1answer
59 views

Restoring file / folder permission using GPO

Initially, in our Windows domain environment, all Domain Users are by default Local Administrator of their own workstation. After some deliberation, it was decided that Domain Users should be removed ...
1
vote
1answer
79 views

GPO is both applied AND filtered out

I have a GPO that is applied to MyUser's OU and filtered to MyUser. I run a gpupdate on his machine and I see that the GPO is listed under "Applied Group Policy Objects", yet it is also listed under ...
1
vote
1answer
160 views

Server 2012r2 change login screen language with registry

I am installing a Windows Server 2012R2 RDS farm. The OS language is English, but my users are Dutch. I already installerd the Dutch MUI pack in windows via the command prompt. Via a user GPO the ...
1
vote
1answer
66 views

Group Policy doesn't restart service as configured

I have configured group policy to tell a particular service (Winrm) to restart when the policy is applied. When the policy applies, I see that it tries to stop and start the service. Stopping works, ...
1
vote
1answer
240 views

When is a user considered “Everyone” in the “Access this computer from the network” policy

I am a bit puzzled by the existance of the "Everyone" group in this policy. Per http://technet.microsoft.com/en-us/magazine/dd637754.aspx: The Everyone identity All interactive, network, dial-up, ...
1
vote
1answer
39 views

GPOs do not apply when logging into Windows 7 via RDP

I am developing a set of GPOs which that I've applied to an OU containing some Windows 7 x64 computers. loopback processing is enabled of course. This computers are located in a different room so i ...
1
vote
1answer
3k views

Adding static route through group policy

We are trying to add a static route across all of our end user machines, we have setup a GPO object under Computer configuration > Policies > Windows Settings > Scripts (startup/shutdown) > Startup. ...
1
vote
1answer
118 views

How to filter RSOP to show only modified policies?

Is it possible to view only those elements of GPO that are actually modified/specified? For example, when looking at RSOP for an OU, I have loads of options which are mostly not specified - can I ...
1
vote
1answer
56 views

Big problems with AD gpo

I have a problem with a gpo on AD. Well, I have a domain root where I have only one domain policy. In the policy there is a permission on "log on as service" and two 2 groups added. Down the root I ...
1
vote
1answer
241 views

Pass unlock credentials to powershell script

I have a powershell script that is run as a scheduled task and is triggered to run "On workstation unlock". The script is programmed to reconnect an SSTP VPN connection if the connection becomes ...
1
vote
1answer
238 views

Windows 7: Allow installation of software by non-admins?

I'm running a public library with PCs available for people to use. I'm setting up the next upgrade for the PCs, which will be running Windows 7. We use Deepfreeze to maintain the PC's state (a brief ...
1
vote
1answer
1k views

“Fast link detected” warning in GP management console

There is a message that is shown in every report i make in Group Policy Results section of Group Policy Management Console, saying that "A fast link is detected". I followed the link in the waring, ...
1
vote
1answer
592 views

windows server 2012 remote desktop session SSL certificate

My windows server 2012 currently seems to have gone on holiday and is ignoring the SSL certificate I have asked it to use for Remote Desktop connections via wmic ...
1
vote
1answer
814 views

Why are group policy preference drive mappings not applied to the domain administrator account?

I have a working policy on my entire domain. I just found out, when logging with the domain administrator, that this policy is not applied (EDIT: Running : gpresult shows that the GPO's are applied - ...
1
vote
1answer
349 views

Possible to disable smart card PIN change in Windows 7?

I'm looking for a way to disable the smart card PIN change ability provided with Windows 7's native minidriver. It doesn't allow us to enforce any PIN complexity requirements such that users could ...
1
vote
1answer
71 views

Group policy not allowing url to be added

I'm trying to add a specific web server URL into the local Intranet Zone on my client PCs using a Group Policy. The policy works for all remote sites but does not work for the local site where the ...
1
vote
1answer
131 views

Will IE7 .msi push-install via GPO cause problems with current IE8?

My company (finally!) are upgrading from Internet Explorer 6 to Internet Explorer 7. We plan on pushing the installation via GPO. However, some laptops and/or workstations in the office are already ...
1
vote
1answer
304 views

New machines do not accept home page from Group Policy

I've just got two new machines from Dell and did a fresh reinstall of Win7 64 bit pro to remove the obligatory dell preinstalled crapware, joined my domain and rebooted. For some reason the home page ...
1
vote
1answer
326 views

query group policy settings across all group policy objects on an AD server

I'd like to find if a single Group policy setting has been applied on a specific domain / AD server. In the simple case of modifying the the default group policy I can look up the policy setting via: ...
1
vote
1answer
203 views

How to restrict access to command shell/explorer for non admin users

Is there a way to restrict access for specific (non admin) users to cmd, windows tools, explorer on an Wim XP system? Partially I consider to do this through group policy & logon script 1. deny ...
1
vote
1answer
352 views

Apply custom IE8 CSS via Group Policy

I have an internal website that I need to strip some components via CSS only for specific users (kiosk users). Is there a way I can apply the CSS file via group policy my kiosk OU? The kiosks connect ...
1
vote
1answer
912 views

Windows 2008 Group Policy Setting? - Migration Headache

I have a small domain of users that I just migrated from a linux domain running open-ldap. Our new servers are running Windows 2008 Standard. I've installed Active Directory and everything is ...
0
votes
1answer
83 views

Can't store TPM information in AD

I am attempting to use GP to store TPM information in AD. I have verified that the schema contains the proper object property, and verified that the property and the ACE is present on the given ...
0
votes
1answer
50 views

Bginfo via GPO Server 2008 r2 - Timer Not Working

I am running Bginfo via GPO on Server 2008 r2 with Windows 7 clients. The bat file (below) is run by: User Configuration > Policies > Windows Settings > Scripts (Logon/Logoff). Bat File ...
0
votes
1answer
64 views

How do I make browser shortcuts w/custom proxy settings available on user desktops?

In our environment, we have about 30 testers (website testers) located at different physical locations. However, they all log on to the same AD. As it is now, their MSIE is configured to access the ...
0
votes
1answer
67 views

Pre-Moving user files prior to folder redirection to new folder

I have folder redirection in place at the office I work for. The user files currently reside in a folder on my file server. I am in the process of reworking the GPO and AD structure to facilitate ...
0
votes
1answer
282 views

GPOTool - Windows 2008R2

I am trying to troubleshoot some GPO issues and began using gpotool.exe to diagnose the issue. I got the tool from 2003 resource kit. Here is one of the first errors I am seeing: Policy ...
0
votes
1answer
710 views

Samba4 domain controller, group policy processing fails, gpupdate fails

I'm using a Samba4 domain controller, and on the machines joined to the domain I'm seeing this message: The processing of Group Policy failed. Windows attempted to read the file ...
0
votes
1answer
78 views

What exactly do the two “Do not process the legacy run list” group policy settings do?

The two "Do not process the legacy run list" settings appear under Computer Configuration -> Polices -> Administrative Templates -> System -> Logon and under User Configuration -> Policies -> ...
0
votes
1answer
77 views

How to completely reset Group Policy on a domain member?

We have a problem where domain members built from a certain Windows 8 image can no longer update Computer Group Policy. These domain member have recently been moved to a new Organisational Unit, but ...
0
votes
1answer
179 views

WSUS: How to combine targeting groups from multiple GPOs

I am trying to use group policy with WSUS to prevent stuff like Silverlight from being installed unless it is requried. I want computer groups for each of the software (so a computer will end up in ...
0
votes
1answer
49 views

Roaming Profile Accounts logoff instantly

I am working on setting up roaming profile accounts. When I log in as one of my users, they disconnect instantly. How do I find errors on what is going on? I've check the SMB Share permissions and ...
0
votes
1answer
173 views

Deploying Ossec HIDS Windows Agent via GPO

I am trying to deploy OSSEC agent to about 100 Windows 7 boxes through GPO on our AD. I understand that I need to create and MSI from the EXE and import the specific client.keys file for the windows ...
0
votes
1answer
1k views

The sysvol permissions for one or more GPOs on this domain controller are not in sync with the permissions for the GPOs on the baseline domain

I have recently installed a second domain controller and all replication seems to be working fine except for group policy - In windows 2012r2, through the new Group Policy Management, when I click on ...
0
votes
1answer
1k views

Install RSClientPrint for Reporting Services 2012 using .bat file and still be able to use 2005

I have a Reporting Services 2005 server that when users accessed it and tried to print reports would get a message asking them to install the print control, which they could not do because of lack of ...
0
votes
1answer
245 views

Error on RSOP for Audit policy on DC

Domain Controller - Windows Server 2008 R2 Standard Please see the print-screen, I am unable to understood why such error is showing on my Domain Controller. I have also checked on Winlogon.log, ...
0
votes
1answer
167 views

How to restrict DVD access using Windows Server 2003 Group Policy?

I have a Windows Server 2003 DC with 3 Win7 (32) desktops. I want to use an GPO to restrict the DVD on all the desktops (Either 'hide' or not have available) for all domain users except for domain ...
0
votes
1answer
485 views

Deploy Advanced Firewall Rules via GPO - How to avoid merging?

I am trying to deploy a set of advanced windows firewall ACLs to several 2008 R2 servers. I would like to (i have to) ensure that no local or old rules are getting applied. So I set "Apply local ...
0
votes
1answer
55 views

Cannot unblock IE9 installation after GPO blocker kit

I need to unblock the installation of Internet Explorer 9, after using the Internet Explorer 9 Blocker Toolkit in a GPO. In a way the unblocking does work, after disabling it in the GPO, but the ...
0
votes
1answer
83 views

Why does GPO for firewall inbound connections still allows change from “Block (Default)” to “Block all connections”

I found an interesting issue where I set a GPO to control the firewall policy to "Block (default)" the inbound connections, however that setting is not completely enforced. It still allows an ...
0
votes
1answer
4k views

How to change default region/culture settings in Windows 2012

I have researched this topic through the web but can't find a definitive answer. Our server team has recently upgraded our SQL Servers VMs from Win 2003 to Win 2012. Given our region we run all our ...
0
votes
1answer
526 views

SBS 2011 Folder Redirection not working after migration

I followed the Migrate SBS 2008 to SBS 2011 guide which worked well. However RedirectedFolders haven't migrated over properly - Windows 7 workstations are still actively connecting to the old ...
0
votes
1answer
307 views

Force mapped drive to ask for credential per log on session

On Windows Server, is there an option in Group Policy or otherwise, to map a network drive that asks for network credentials on each log on session? The reason I want to do this is that for some ...
0
votes
1answer
56 views

Truobles with Windows Update Domain Policy on Windows Server 2003

I got a problem with Windows Update Domain Policy. The Domain Policy is configured with automatic automatic download of updates, but dont installation (Option 3). Everytime i check the policy and ...