Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

5
votes
1answer
3k views

How to do exceptions in Group Policy?

We're implementing Group Policy for the first time at our organization and have some questions about best practices and capabilities. We've already done some work and want to see if there is a better ...
5
votes
2answers
3k views

How do I disable SID security check for folder redirection with Group Policy?

How do I disable the SID security check for folder redirections with Group Policy? This isn't about weakening security, but rather about having Active Directory and Samba play nicely together. I have ...
5
votes
3answers
5k views

Windows GPO default mapped drives

Is there a way, using Windows GPO, to set up a list of "default" mapped drives that can be applied to a group of users? I runs small network and would like to make sure that certain groups of users ...
5
votes
2answers
19k views

Why is GPO Tool reporting a GPO version mismatch when the GPO version #'s do match?

Any ideas why the group policy diagnostic utility GPOTool would report a GPO version mismatch between two domain controllers if the version numbers are a match? Policy {GUID} Error: Version mismatch ...
5
votes
1answer
3k views

Windows Server 2008 mapped drives not showing on workstations?

I am running Windows Server 2008 Standard Edition with a Windows XP Pro workstation setup as a test unit. I have added an Organisational Unit called 'Misc Users' and have linked a GP called 'Basic ...
5
votes
1answer
4k views

GPO to remove “Highlight new programs”?

I need to disable the "highlight new programs" feature in Windows start menu via a GPO but can't find such a setting. Does such a thing even exist or is it achievable only through registry ...
5
votes
1answer
2k views

Allow domain users to modify local printer settings Windows 7 via Group Policy

I've been scouring the internet for days and thus far have had zero luck in finding a solution. Short Version: I need to allow users to modify their locally installed printers. Specifically, they ...
5
votes
1answer
624 views

W2K8R2 - A way to convert effecitve Group Policy settings to import on stand-alone machines for local policy?

If I have a relatively robust domain environment (e.g. 20 Security related Group Policy Objects) applying to my servers as a baseline set of policy settings and I have a stand-alone server that I want ...
5
votes
4answers
842 views

Applying group policy loopback to any user on specific computers

In a server 2008 R2 and Windows 7 environment, I have a GPO that specifies screen saver settings in the user settings policy for the entire domain. However, for specific computers, this is not ideal. ...
5
votes
1answer
335 views

Drive mapping maps two different folders for elevated and non-elevated programs

I have a Windows 2012 Domain with a couple of Windows 8 x64 Enterprise members. I want to use Group Policies to map a drive X: to a folder on a file server. The drive X: should be available on the ...
5
votes
1answer
194 views

Windows 8 profile creation video

I have a piece of software that deploys a local account on workstations via an MSI and creates a profile for it. In versions of windows prior to windows 8, the first time this account was used it ...
5
votes
3answers
6k views

Automatically make user local administrator on their computer through GPO?

In our AD 2003 domain each user gets local admin permissions on their computer. Everyone else can login with their domain account as normal user. Right now this means going to the desktop and ...
5
votes
2answers
133 views

How to use a tab character within a GPP registry item?

I am in the process of packaging an some software settings for deployment with a GPP. I need to include a few tab characters within string and eventually multi string values. When I paste tabs into ...
5
votes
5answers
810 views

Restricting Internet Access in Windows 7

On a Windows 7 Professional laptop, not on a domain, what's the best way to restrict access to the internet (and preferably network) to Administrator users only? I don't want to simply set a bogus ...
5
votes
3answers
10k views

Windows Server 2008 R2 Map User Specific Drive

On our old Windows 2003 SBS, the guy that set up the network created a login script that fired to map some drives and add a network printer. I would like to do away with that script and just use the ...
5
votes
2answers
1k views

Windows 7 Office 2007 GPO install

I have a GPO that works fine for installing Office 2007 Pro Plus on Vista and XP but when it installs Office on Windows 7 somehow the office key does not get entered via the customized msp, and needs ...
5
votes
1answer
16k views

How to disable autocomplete for passwords in IE8 via GPO?

In IE6 there was a registry key hidden away that would allow you to enable autocomplete but only for usernames, not passwords. This key no longer has any effect in IE8. I can either enable or disable ...
5
votes
2answers
460 views

BITS policies to limit bandwitdth usage is not taking effect

We have a fleet of roughly 1300 Windows 7 SP1 clients who use a centralized WSUS server to download updates from. We've implemented the following BITS policy to limit the bandwidth during working ...
5
votes
2answers
1k views

Users still get UAC prompt after allowing printer install and alter LAN connection by GPO?

I've implemented the following Group Policy settings to allow non-admins to install printer drivers and to enable / disable their wifi: User Configuration -> Administrative Templates -> Network ...
5
votes
1answer
5k views

Consistently slow domain logins / folder redirection

I've been trying to diagnose slow logins to my domain. One of my first stops was Domain login very slow 10+ minutes. So far I've been able to tell it has to do with my policy that applies folder ...
5
votes
2answers
2k views

Server 2012r2 RDS - Start Screen

I'm in the process of setting up an RDS server. It will be multi-tenant, so it's locked right down. All user profile data is stored on the file server using GPO folder redirection. I want to lock ...
5
votes
1answer
8k views

WMI filter for Internet Explorer 10+

I need to apply a GPO on all machines with IE 10+ but the setting does not need to be and shouldn't be applied to ie 9. All the machines are Windows Vista, 7, and 8 (some 32 bit and others 64). I ...
5
votes
1answer
1k views

List of What Policies Require Background Refresh, Which Require Reboot

Yes, I know the obvious ones. I am very specifically looking for any doc by Microsoft/MSDN that indicates which policies in Group Policy specifically require reboot and which do not. I love trial and ...
5
votes
1answer
799 views

Group policy software installation Upgrade vs Replace

I select upgrade in gpo software install to upgrade an existing package. I am not replacing the package. Will the old package and the upgrade package be installed on new computers joining the domain? ...
5
votes
1answer
718 views

Disable Outlook Web Access Junk filtering in Exchange 2013

By default, Outlook Web Access (OWA) in Exchange 2013 seems to move suspected junk mail to the Junk Email folder. This is undesirable behavior in most of my environments because we have Barracuda Spam ...
5
votes
1answer
3k views

Is MSIZAP still useful, or is it obsolete?

I update flash using MSI files installed by group policy. However, with every update, about a third of the workstations fail to update (Windows Vista and Windows 7 32/64-bit editions). In the event ...
4
votes
2answers
2k views

Is WINs Still supported by Microsoft?

I heard through the grapevine that WINS was going to be phased out / not supported officially from Microsoft any more [ and yet they have it in Windows server 2008 ]. I can't find any information ...
4
votes
2answers
2k views

GPO option for “Show Desktop Icons”?

Is there a GPO setting (Server 2008 R2 domain) that we can use to set the following desktop property? View > Show Desktop Icons
4
votes
3answers
2k views

Managing Redundant/Conflicting Group Policies

Is there any tool that would help us get a handle on all our group policies to discover and remove the conflicting and redundant group policies that are giving us a headache? We change one group ...
4
votes
3answers
3k views

Multiple installers attached to a single GPO?

Can more than one installer (msi, mst) be linked to a GPO to deploy multiple packages at once?
4
votes
3answers
570 views

What is the best way to automatically configure Windows desktops and laptops in an AD environment to use a proxy server?

I have recently setup a Squid proxy server for caching purposes and would like to start pointing my desktops and laptops to it. My computers are running Windows XP with IE8 and Windows 7 with IE9.
4
votes
3answers
235 views

What setting in XP stops executables being run unless you're an administrator?

If I go to a workstation in a certain large organisation and try to run an executable from a USB drive it doesn't let me. What setting is this in Group Policy or wherever else that does this?
4
votes
3answers
18k views

How do I add items to 'Favorites' via GPO?

How do I add items to all users 'Favorites', preferably via GPO? the screenshot is just an example from W7 but I'm actually working with 2008R2 Server and RDS
4
votes
3answers
22k views

How do you override a GPO with another GPO?

If there is a GPO which is applied to all Domain Computers which disables something, is there a way to re-enable the disabled thing for some hosts in the domain, without taking those hosts out of the ...
4
votes
2answers
731 views

Complete Active Directory redesign and GPO application

after much testing and hundreds of tries and hours invested I decided to consult you experts here. Overview: I want to apply some GPO to our users which will add some specific site to the Trusted ...
4
votes
3answers
2k views

GPO silent software deployment

I have added a software package to my networks Computer Configuration in the Group Policy Management Editor for SBS 2008. I've noticed that even after adding the package, and rebooting a machine on ...
4
votes
3answers
2k views

Group policy preferences mapping same drive multiple times

I recently changed over our old login script that mapped network drives over to group policy preference drive maps. Worked through a few issues at first, but appears to be working fine for all of our ...
4
votes
2answers
18k views

how to disable a user to install program being domain user?

My client (XP) can install Chrome in his system being a domain user account. how can i stop him/them from installation of Chrome through Windows Server 2003.
4
votes
3answers
29k views

How do I add a URL with a Windows Group Policy into a client's “Local Intranet Zone”?

I'm trying to add a specific web server URL into the local Intranet Zone on my client PCs using a Group Policy. Any ideas what policy to apply? I can do it via the Internet Explorer Internet ...
4
votes
1answer
766 views

port 445 blocked by Group Policy

I have managed to block port 445 in the windows firewall using Group Policy, now the server that has this GPO applied is unable to read further GPO updates from the domain controller. Is there any ...
4
votes
1answer
2k views

SID in AD - SID from psgetsid?

Wondering if anyone can shed some light on some SID confusion. Currently having an issue with some policy applying to a few machines that were all based off the same image. One of our admins, ran ...
4
votes
1answer
4k views

Will User GPO settings apply to a Computer OU

If I have a GPO that contains a handful of user settings - if i apply this to a OU container which contains computer objects - will those User Policies then apply to any user who logs onto that ...
4
votes
1answer
4k views

Apply Group Policy to Remote Desktop Services users but not when they log on to their local system

Running Windows Server 2008 Service Pack 2 with Remote Desktop Services role. I want to hide the servers drives using a GPO, but not the users local drives when they are logged on to their local ...
4
votes
1answer
150 views

Group Policy Preferences in Server 2008 R2

I am reinstalling a Domain Controller after a hard drive failure (new backup system is already in place!) and I have come to the part where I need to re-create the group policies. Originally we were ...
4
votes
1answer
3k views

Can screen resolution be set in Active Directory Domain Group Policy?

Is there anywhere that screen resolution can be set for the users at the domain group policy level?
4
votes
1answer
829 views

How to let non-admins manage selected domain groups' membership?

I'm on Windows Server 2012, Active Directory is on and working. All the project we manage have 2 dedicated groups, one for managers with access to all related files (including invoices, timetables and ...
4
votes
1answer
107 views

New implementation of home and department shares; help me get it right the first time?

I've the rare opportunity to set up from scratch our first home and department share server in a mid sized company (about 250 people), and would like to make something that's reasonable. We're going ...
4
votes
3answers
6k views

Allow users to log on to computers in a domain

I work for a company we are on a domain. At the minute we have 8 meeting rooms and in those meeting rooms there is 8 mini PCs. At the moment the only people that are allowed to log on to this PC are ...
4
votes
3answers
33k views

Users are getting a temporary profile

A bit about current setup: It is windows 2008 R2 AD servers (all of them are 2008R2) and couple locations which set as Sites. Each location has DFS on AD server. Roaming profiles are not used nor ...
4
votes
1answer
1k views

How can I start a program from a login batch script if the Command Prompt is disabled?

Our Terminal Servers has two Group Policies in place: one that includes disabling the command prompt, and another that runs a batch script to startup a program upon login. But the startup program ...