Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

4
votes
6answers
3k views

Disable group policy from a workstation [closed]

How can I, as a Workstation Administrator, disable Group Policy on that workstation? The Domain Administrator is feeding utter garbage via Group Policy and I want it stopped. Last antic: turning on ...
4
votes
3answers
234 views

What setting in XP stops executables being run unless you're an administrator?

If I go to a workstation in a certain large organisation and try to run an executable from a USB drive it doesn't let me. What setting is this in Group Policy or wherever else that does this?
4
votes
3answers
2k views

Multiple installers attached to a single GPO?

Can more than one installer (msi, mst) be linked to a GPO to deploy multiple packages at once?
4
votes
3answers
17k views

How do you override a GPO with another GPO?

If there is a GPO which is applied to all Domain Computers which disables something, is there a way to re-enable the disabled thing for some hosts in the domain, without taking those hosts out of the ...
4
votes
5answers
62k views

Enforcing lock screen after idle time via GPO

I run a network of computers and I would like enforce a GPO which locks the screen after a predefined idle time. I can't find this setting, I can only find a screen saver idle time setting, how can I ...
4
votes
2answers
529 views

Complete Active Directory redesign and GPO application

after much testing and hundreds of tries and hours invested I decided to consult you experts here. Overview: I want to apply some GPO to our users which will add some specific site to the Trusted ...
4
votes
3answers
1k views

GPO silent software deployment

I have added a software package to my networks Computer Configuration in the Group Policy Management Editor for SBS 2008. I've noticed that even after adding the package, and rebooting a machine on ...
4
votes
3answers
1k views

Group policy preferences mapping same drive multiple times

I recently changed over our old login script that mapped network drives over to group policy preference drive maps. Worked through a few issues at first, but appears to be working fine for all of our ...
4
votes
2answers
12k views

how to disable a user to install program being domain user?

My client (XP) can install Chrome in his system being a domain user account. how can i stop him/them from installation of Chrome through Windows Server 2003.
4
votes
2answers
605 views

When mapping Shares and Printers — GPO or Logon Scripts?

I'd like to get everyone's opinion on whether it's better to use GPO or Logon Scripts when mapping shares and printers. From my understanding, please let me know if I'm wrong, GPO seems like a ...
4
votes
3answers
28k views

How do I add a URL with a Windows Group Policy into a client's “Local Intranet Zone”?

I'm trying to add a specific web server URL into the local Intranet Zone on my client PCs using a Group Policy. Any ideas what policy to apply? I can do it via the Internet Explorer Internet ...
4
votes
1answer
418 views

port 445 blocked by Group Policy

I have managed to block port 445 in the windows firewall using Group Policy, now the server that has this GPO applied is unable to read further GPO updates from the domain controller. Is there any ...
4
votes
1answer
3k views

Apply Group Policy to Remote Desktop Services users but not when they log on to their local system

Running Windows Server 2008 Service Pack 2 with Remote Desktop Services role. I want to hide the servers drives using a GPO, but not the users local drives when they are logged on to their local ...
4
votes
1answer
137 views

Group Policy Preferences in Server 2008 R2

I am reinstalling a Domain Controller after a hard drive failure (new backup system is already in place!) and I have come to the part where I need to re-create the group policies. Originally we were ...
4
votes
1answer
2k views

Can screen resolution be set in Active Directory Domain Group Policy?

Is there anywhere that screen resolution can be set for the users at the domain group policy level?
4
votes
1answer
138 views

How to let non-admins manage selected domain groups' membership?

I'm on Windows Server 2012, Active Directory is on and working. All the project we manage have 2 dedicated groups, one for managers with access to all related files (including invoices, timetables and ...
4
votes
1answer
84 views

New implementation of home and department shares; help me get it right the first time?

I've the rare opportunity to set up from scratch our first home and department share server in a mid sized company (about 250 people), and would like to make something that's reasonable. We're going ...
4
votes
2answers
294 views

OK to modify HKLM\Software\Policies and HKCU\SOFTWARE\Policies on a domain?

Background: I have a domain (2003 Functional Level) with a mix of Windows XP and Windows 7 clients. We have been using Group Policy to manage our workstations. Now, I am in a situation I need to ...
4
votes
3answers
21k views

Users are getting a temporary profile

A bit about current setup: It is windows 2008 R2 AD servers (all of them are 2008R2) and couple locations which set as Sites. Each location has DFS on AD server. Roaming profiles are not used nor ...
4
votes
1answer
1k views

How can I start a program from a login batch script if the Command Prompt is disabled?

Our Terminal Servers has two Group Policies in place: one that includes disabling the command prompt, and another that runs a batch script to startup a program upon login. But the startup program ...
4
votes
1answer
1k views

Syncing Domain Controller Clocks

It appears some computers in our computer lab have clocks running about 3-4 minutes fast. As of right now, when we join a computer to the domain, it sets the clock based on our server's Domain ...
4
votes
1answer
358 views

Is there a way to disable “check online for updates from windows update” in windows update settings?

I have configured WSUS server in order to preserve bandwith in the network wile keeping essential updates turned on using that WSUS. Intranet WSUS server pointing to client pc and other settings are ...
4
votes
1answer
54 views

If a GPO is not the Winning GPO does none or part of the GPO get applied?

I am reviewing some gpresults settings and it shows the Winning GPO as a server configured GPO. If another GPO has already won and a second GPO tries to set a conflicting settings does the second ...
4
votes
1answer
11k views

Can I override domain group policy with local group policy as a local admin?

I am trying to provision a few special case laptops. I would like to create a local guest account. That's fine but when I try to create it I prompted that my guest password does not meet the ...
4
votes
1answer
3k views

How to configure Chrome on a Terminal Server

I have installed Google Chrome on a Windows 2003 Terminal Server and I now want to configure it for the users. How do I do that? For example clear cookies when browser close, set favorites and the ...
4
votes
1answer
4k views

Deploying Printers to Computers vs. Users via GPO

When I deploy a printer to a computer it only seems to deploy to our Windows XP machines. If I deploy to users it deploys to our Windows XP and 7 machines. When I look in the RSoP Snap-in it shows the ...
4
votes
2answers
301 views

Fixing Users and Computers accounts structure in Active Directory

I'm trying to fix a completely unplanned and unstructured Active Directory hierarchy. When the domain was first created on Windows Server 2000, no containers or OUs whatsoever were created for users ...
4
votes
3answers
642 views

Redeploying Office to a single client after manual uninstall

One of our client PC's recently got random crash issues with MS Word. I manually uninstalled Office 2003 locally on the client, ran "gpupdate /force /boot" and expected the client to reinstall Office ...
4
votes
5answers
857 views

Conficker: Should steps taken in group policy to secure against virus remain?

We got nailed two weeks ago by Conficker, I ran through the 26 step checklist from Mircrosoft on my own computer, as well as on our domain server. It says near the end to reverse all the changes, but ...
4
votes
1answer
32 views

GPMC missing Hide/Show links

We currently have a single 2012 R2 server in our domain. As we're rolling out Windows 8+ machines I like using it for Group Policy Management. For some reason the Group Policy Management Console on ...
4
votes
1answer
58 views

Deploy Software via GPO, but also deploy configuration file

When deploying software through a group policy, is there any special trick that will allow you to also deploy a separate, say config, file along with it? Here's the specific problem: We have a ...
4
votes
2answers
784 views

Windows 7: Deploying Printer Settings without a Print Server

I am a part-time Windows 7 administrator in an office with about 10 PCs and a standalone networked printer... No Windows print server, though we do have an Active Directory domain. So I have been ...
4
votes
1answer
6k views

Java 8 Update 25 Install Via GPO Not Working

I am trying to set up our Active Directory DC to automatically install Java 8 Update 25 (jre1.8.0_25.msi) using Group Policy. When attempting to add the jre1.8.0_25.msi package in the GPO at Computer ...
4
votes
1answer
296 views

Changing password expiration policy at next password change

We have a password policy with a maximum password age of 180 days. For various reasons we need to change it to 90 days, with a minimum impact for the users. Our users are normally warned about the ...
4
votes
3answers
6k views

Install chrome extensions via GPO

I'm attepting to install the adblock chrome extension using Google's Chrome ADM's. User Configuration/Policies/Classic Administrative Templates/Google/Google Chrome/Extensions Configure the list of ...
4
votes
1answer
2k views

Publish Bookmarks in FireFox with Active Directory (AD)

Issue: We have a number of bookmarks that we need to publish to our users computers that are bound to active directory. We can easily accomplish this with group policy for Internet Explorer. At the ...
4
votes
1answer
2k views

local admin vs domain admin on a domain controller

I would like to create a group policy to set a specific password for all local administrator users. Now even though you can't manage local users on a domain controller ("This snap-in cannot be used on ...
4
votes
2answers
266 views

Pin “Run” to taskbar through group policy

Is there are way to pin the "Run" button to taskbar through group policy or a script? Only the specific items needs to be pinned. The other items are not to be touched. Partial solutions I found on ...
4
votes
1answer
218 views

Group Policy Files - Active Directory

I am having a whole lot of trouble getting some files distributed across the network. My settings are: Action: Replace Source: \\[fqdn]\Repo\sqljdbcl.jar Destination: ...
4
votes
2answers
2k views

What is the best method to change the server used for folder redirection?

For years I've been using folder redirection for all my desktop clients (Win7). I am looking to migrate all data to a new server/share. I have already created a new share with the same ACL and used ...
4
votes
2answers
5k views

Hide Network Icon in File Explorer on Server 2012

How can I hide the network icon within Windows Explorer in Windows Server 2012, via group policy? I can do this on 2008R2 using the Windows Explorer "Extra's" settings, but no such setting exists for ...
4
votes
1answer
2k views

Company Wide Windows Auth with Chrome and Firefox

I know that we can allow Firefox to allow passing through of Windows credentials by editing the following about:config settings --If using Kerberos-- network.negotiate-auth.trusted-uris ...
4
votes
3answers
6k views

Windows 2008 startup script will not run?

I am trying to get a very simple batch script to run when my Windows 2008 Server (R2) system starts up. I have added the script to the "Startup Scripts" in the local group policy by running ...
4
votes
1answer
334 views

Server 2008: Link security group to organisational unit

I've created a test domain with 2 VM's to experiment and try to gain some knowledge using Server 2008 (+GPO's, OU's, ADUC etc) however I've become a little stuck. I've created an OU called User ...
4
votes
1answer
7k views

How to apply an Group Policy only to Clients in a specific IP range? (using WMI Filter)

I need to apply a GPO only to some computers in a specific network range. I'm aware that there many other solutions for this issue. I could group them into an OU or use Sites. But the current ...
4
votes
2answers
104 views

Windows 2003 DC GPO Asking for Password on Startup

Simple answer I am sure...I an trying to deploy Office 2010 to clients via the GPO startup script but am having issues. Soon as the computer starts, it prepares network connections then goes on to ...
4
votes
2answers
1k views

Exactly HOW are machine start-up Group Policies processed and what is required?

We have Server 2008 R2 and Windows 7 Enterprise. I'm asking this because we have several hundred laptops and netbooks at our organization. We do'nt have a NAC or a RADIUS server so all the wireless ...
4
votes
2answers
500 views

Change default profile directory per group

Is it possible to force windows to create profiles for members of one active directory group in a different folder from members in another active directory group? The school here uses DeepFreeze to ...
4
votes
5answers
5k views

Printer deployment via Group Policy not working on a single system

One of my coworkers just got a new laptop running Windows 7 Pro x64. We use a GPO to deploy the printers to every system, but for some reason it is not working on this system. I have been breaking my ...
4
votes
2answers
3k views

Windows 7 - Group Policy - Allow RDP Credentials to be Saved

Im trying to use RDP and save my credentials in a file so I dont have to entire it each time I connect. I remember doing it before and it involved changing a group policy setting. What exactly do I ...