Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

4
votes
5answers
59k views

Enforcing lock screen after idle time via GPO

I run a network of computers and I would like enforce a GPO which locks the screen after a predefined idle time. I can't find this setting, I can only find a screen saver idle time setting, how can I ...
4
votes
2answers
493 views

Complete Active Directory redesign and GPO application

after much testing and hundreds of tries and hours invested I decided to consult you experts here. Overview: I want to apply some GPO to our users which will add some specific site to the Trusted ...
4
votes
3answers
1k views

GPO silent software deployment

I have added a software package to my networks Computer Configuration in the Group Policy Management Editor for SBS 2008. I've noticed that even after adding the package, and rebooting a machine on ...
4
votes
3answers
901 views

Group policy preferences mapping same drive multiple times

I recently changed over our old login script that mapped network drives over to group policy preference drive maps. Worked through a few issues at first, but appears to be working fine for all of our ...
4
votes
2answers
12k views

how to disable a user to install program being domain user?

My client (XP) can install Chrome in his system being a domain user account. how can i stop him/them from installation of Chrome through Windows Server 2003.
4
votes
2answers
589 views

When mapping Shares and Printers — GPO or Logon Scripts?

I'd like to get everyone's opinion on whether it's better to use GPO or Logon Scripts when mapping shares and printers. From my understanding, please let me know if I'm wrong, GPO seems like a ...
4
votes
3answers
28k views

How do I add a URL with a Windows Group Policy into a client's “Local Intranet Zone”?

I'm trying to add a specific web server URL into the local Intranet Zone on my client PCs using a Group Policy. Any ideas what policy to apply? I can do it via the Internet Explorer Internet ...
4
votes
1answer
379 views

port 445 blocked by Group Policy

I have managed to block port 445 in the windows firewall using Group Policy, now the server that has this GPO applied is unable to read further GPO updates from the domain controller. Is there any ...
4
votes
1answer
3k views

Apply Group Policy to Remote Desktop Services users but not when they log on to their local system

Running Windows Server 2008 Service Pack 2 with Remote Desktop Services role. I want to hide the servers drives using a GPO, but not the users local drives when they are logged on to their local ...
4
votes
1answer
2k views

Can screen resolution be set in Active Directory Domain Group Policy?

Is there anywhere that screen resolution can be set for the users at the domain group policy level?
4
votes
2answers
276 views

OK to modify HKLM\Software\Policies and HKCU\SOFTWARE\Policies on a domain?

Background: I have a domain (2003 Functional Level) with a mix of Windows XP and Windows 7 clients. We have been using Group Policy to manage our workstations. Now, I am in a situation I need to ...
4
votes
3answers
19k views

Users are getting a temporary profile

A bit about current setup: It is windows 2008 R2 AD servers (all of them are 2008R2) and couple locations which set as Sites. Each location has DFS on AD server. Roaming profiles are not used nor ...
4
votes
1answer
1k views

How can I start a program from a login batch script if the Command Prompt is disabled?

Our Terminal Servers has two Group Policies in place: one that includes disabling the command prompt, and another that runs a batch script to startup a program upon login. But the startup program ...
4
votes
1answer
1k views

Syncing Domain Controller Clocks

It appears some computers in our computer lab have clocks running about 3-4 minutes fast. As of right now, when we join a computer to the domain, it sets the clock based on our server's Domain ...
4
votes
1answer
110 views

How to let non-admins manage selected domain groups' membership?

I'm on Windows Server 2012, Active Directory is on and working. All the project we manage have 2 dedicated groups, one for managers with access to all related files (including invoices, timetables and ...
4
votes
1answer
133 views

Is there a way to disable “check online for updates from windows update” in windows update settings?

I have configured WSUS server in order to preserve bandwith in the network wile keeping essential updates turned on using that WSUS. Intranet WSUS server pointing to client pc and other settings are ...
4
votes
1answer
67 views

New implementation of home and department shares; help me get it right the first time?

I've the rare opportunity to set up from scratch our first home and department share server in a mid sized company (about 250 people), and would like to make something that's reasonable. We're going ...
4
votes
1answer
49 views

If a GPO is not the Winning GPO does none or part of the GPO get applied?

I am reviewing some gpresults settings and it shows the Winning GPO as a server configured GPO. If another GPO has already won and a second GPO tries to set a conflicting settings does the second ...
4
votes
1answer
10k views

Can I override domain group policy with local group policy as a local admin?

I am trying to provision a few special case laptops. I would like to create a local guest account. That's fine but when I try to create it I prompted that my guest password does not meet the ...
4
votes
2answers
3k views

Why is this preventing me installing an MSI: The System Administrator has set policies to prevent this installation

I am trying to install an MSI on a Windows Server 2012 machine which is part of my lab domain. I am local and domain admin, but I seem to be prevented from installing this MSI. For clarification, ...
4
votes
1answer
3k views

How to configure Chrome on a Terminal Server

I have installed Google Chrome on a Windows 2003 Terminal Server and I now want to configure it for the users. How do I do that? For example clear cookies when browser close, set favorites and the ...
4
votes
1answer
4k views

Deploying Printers to Computers vs. Users via GPO

When I deploy a printer to a computer it only seems to deploy to our Windows XP machines. If I deploy to users it deploys to our Windows XP and 7 machines. When I look in the RSoP Snap-in it shows the ...
4
votes
2answers
289 views

Fixing Users and Computers accounts structure in Active Directory

I'm trying to fix a completely unplanned and unstructured Active Directory hierarchy. When the domain was first created on Windows Server 2000, no containers or OUs whatsoever were created for users ...
4
votes
3answers
640 views

Redeploying Office to a single client after manual uninstall

One of our client PC's recently got random crash issues with MS Word. I manually uninstalled Office 2003 locally on the client, ran "gpupdate /force /boot" and expected the client to reinstall Office ...
4
votes
5answers
854 views

Conficker: Should steps taken in group policy to secure against virus remain?

We got nailed two weeks ago by Conficker, I ran through the 26 step checklist from Mircrosoft on my own computer, as well as on our domain server. It says near the end to reverse all the changes, but ...
4
votes
1answer
50 views

Deploy Software via GPO, but also deploy configuration file

When deploying software through a group policy, is there any special trick that will allow you to also deploy a separate, say config, file along with it? Here's the specific problem: We have a ...
4
votes
2answers
524 views

Windows 7: Deploying Printer Settings without a Print Server

I am a part-time Windows 7 administrator in an office with about 10 PCs and a standalone networked printer... No Windows print server, though we do have an Active Directory domain. So I have been ...
4
votes
1answer
6k views

Java 8 Update 25 Install Via GPO Not Working

I am trying to set up our Active Directory DC to automatically install Java 8 Update 25 (jre1.8.0_25.msi) using Group Policy. When attempting to add the jre1.8.0_25.msi package in the GPO at Computer ...
4
votes
1answer
266 views

Changing password expiration policy at next password change

We have a password policy with a maximum password age of 180 days. For various reasons we need to change it to 90 days, with a minimum impact for the users. Our users are normally warned about the ...
4
votes
3answers
6k views

Install chrome extensions via GPO

I'm attepting to install the adblock chrome extension using Google's Chrome ADM's. User Configuration/Policies/Classic Administrative Templates/Google/Google Chrome/Extensions Configure the list of ...
4
votes
1answer
2k views

Publish Bookmarks in FireFox with Active Directory (AD)

Issue: We have a number of bookmarks that we need to publish to our users computers that are bound to active directory. We can easily accomplish this with group policy for Internet Explorer. At the ...
4
votes
1answer
2k views

local admin vs domain admin on a domain controller

I would like to create a group policy to set a specific password for all local administrator users. Now even though you can't manage local users on a domain controller ("This snap-in cannot be used on ...
4
votes
2answers
234 views

Pin “Run” to taskbar through group policy

Is there are way to pin the "Run" button to taskbar through group policy or a script? Only the specific items needs to be pinned. The other items are not to be touched. Partial solutions I found on ...
4
votes
1answer
186 views

Group Policy Files - Active Directory

I am having a whole lot of trouble getting some files distributed across the network. My settings are: Action: Replace Source: \\[fqdn]\Repo\sqljdbcl.jar Destination: ...
4
votes
2answers
2k views

What is the best method to change the server used for folder redirection?

For years I've been using folder redirection for all my desktop clients (Win7). I am looking to migrate all data to a new server/share. I have already created a new share with the same ACL and used ...
4
votes
2answers
5k views

Hide Network Icon in File Explorer on Server 2012

How can I hide the network icon within Windows Explorer in Windows Server 2012, via group policy? I can do this on 2008R2 using the Windows Explorer "Extra's" settings, but no such setting exists for ...
4
votes
1answer
2k views

Company Wide Windows Auth with Chrome and Firefox

I know that we can allow Firefox to allow passing through of Windows credentials by editing the following about:config settings --If using Kerberos-- network.negotiate-auth.trusted-uris ...
4
votes
3answers
5k views

Windows 2008 startup script will not run?

I am trying to get a very simple batch script to run when my Windows 2008 Server (R2) system starts up. I have added the script to the "Startup Scripts" in the local group policy by running ...
4
votes
1answer
317 views

Server 2008: Link security group to organisational unit

I've created a test domain with 2 VM's to experiment and try to gain some knowledge using Server 2008 (+GPO's, OU's, ADUC etc) however I've become a little stuck. I've created an OU called User ...
4
votes
1answer
7k views

How to apply an Group Policy only to Clients in a specific IP range? (using WMI Filter)

I need to apply a GPO only to some computers in a specific network range. I'm aware that there many other solutions for this issue. I could group them into an OU or use Sites. But the current ...
4
votes
2answers
104 views

Windows 2003 DC GPO Asking for Password on Startup

Simple answer I am sure...I an trying to deploy Office 2010 to clients via the GPO startup script but am having issues. Soon as the computer starts, it prepares network connections then goes on to ...
4
votes
2answers
1k views

Exactly HOW are machine start-up Group Policies processed and what is required?

We have Server 2008 R2 and Windows 7 Enterprise. I'm asking this because we have several hundred laptops and netbooks at our organization. We do'nt have a NAC or a RADIUS server so all the wireless ...
4
votes
2answers
500 views

Change default profile directory per group

Is it possible to force windows to create profiles for members of one active directory group in a different folder from members in another active directory group? The school here uses DeepFreeze to ...
4
votes
5answers
5k views

Printer deployment via Group Policy not working on a single system

One of my coworkers just got a new laptop running Windows 7 Pro x64. We use a GPO to deploy the printers to every system, but for some reason it is not working on this system. I have been breaking my ...
4
votes
2answers
3k views

Windows 7 - Group Policy - Allow RDP Credentials to be Saved

Im trying to use RDP and save my credentials in a file so I dont have to entire it each time I connect. I remember doing it before and it involved changing a group policy setting. What exactly do I ...
4
votes
4answers
617 views

Published software not displayed in Add/Remove Programs

I just followed How to use Group Policy to remotely install software in Windows Server 2003 to try publishing a software (MSI file). I could follow all the steps, but the supposedly successfully ...
4
votes
1answer
7k views

Windows cannot access the file gpt.ini for GPO CN={31B2F340-016D-11D2-945F-00C04FB984F9}

I'm in the middle of a "swing" migration from Windows SBS 2003 to Server 2003 Standard. It's going okay so far but we're getting event 1058 on client machines: Windows cannot access the file gpt.ini ...
4
votes
1answer
97 views

How to dump(collect) all the group policies in a domain?

I want to collect all the GPOs in a domain , for reviewing settings. How many ways are there to do it. I used Get-GPOREPORT in Powershell, but it gave a comprehensive html file, is these a way to ...
4
votes
3answers
203 views

If an email is sent to a user redirects if OOF is on

Is there a way to make a global change to either Exchange or group policy so if an email is received from an email address it will not go into the users mailbox but be forwarded on instead. Basically ...
4
votes
2answers
2k views

How do I disable SID security check for folder redirection with Group Policy?

How do I disable the SID security check for folder redirections with Group Policy? This isn't about weakening security, but rather about having Active Directory and Samba play nicely together. I have ...