Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

5
votes
2answers
393 views

Fixing Users and Computers accounts structure in Active Directory

I'm trying to fix a completely unplanned and unstructured Active Directory hierarchy. When the domain was first created on Windows Server 2000, no containers or OUs whatsoever were created for users ...
5
votes
1answer
1k views

“Touching” software deployment group policy programmatically or via script

I have an internal application that uses the Windows Installer. Each update to this application is a "major upgrade" (different product code, same upgrade code) and it calls RemoveExistingProducts. ...
5
votes
2answers
85 views

Minimal set of rights to run a process on a Microsoft Windows Server

I want to run a process (not a service) under a different user on a Microsoft Windows Server and I need the minimal set of rights which are needed to do so. The minimal set of rights is required, ...
5
votes
2answers
8k views

What is the best method to change the server used for folder redirection?

For years I've been using folder redirection for all my desktop clients (Win7). I am looking to migrate all data to a new server/share. I have already created a new share with the same ACL and used ...
5
votes
2answers
16k views

Hide Network Icon in File Explorer on Server 2012

How can I hide the network icon within Windows Explorer in Windows Server 2012, via group policy? I can do this on 2008R2 using the Windows Explorer "Extra's" settings, but no such setting exists for ...
5
votes
1answer
3k views

Company Wide Windows Auth with Chrome and Firefox

I know that we can allow Firefox to allow passing through of Windows credentials by editing the following about:config settings --If using Kerberos-- network.negotiate-auth.trusted-uris ...
5
votes
3answers
7k views

Windows 2008 startup script will not run?

I am trying to get a very simple batch script to run when my Windows 2008 Server (R2) system starts up. I have added the script to the "Startup Scripts" in the local group policy by running ...
5
votes
3answers
154 views

Where default settings are stored after applying GPO?

When I apply a GPO that changes Service startup settings, where the default service startup settings are kept? And how can I read and modify them? The reason of the question is that I have a hundred ...
5
votes
1answer
10k views

How to apply an Group Policy only to Clients in a specific IP range? (using WMI Filter)

I need to apply a GPO only to some computers in a specific network range. I'm aware that there many other solutions for this issue. I could group them into an OU or use Sites. But the current ...
5
votes
2answers
6k views

Windows Domain Admin rights insufficient?

I have a lab(ish) environment where I have a single domain in a single forest. I have a Windows 7 image for the clients that was given to my by my organization (I didn't build it, not entirely sure ...
5
votes
1answer
3k views

How to do exceptions in Group Policy?

We're implementing Group Policy for the first time at our organization and have some questions about best practices and capabilities. We've already done some work and want to see if there is a better ...
5
votes
2answers
3k views

How do I disable SID security check for folder redirection with Group Policy?

How do I disable the SID security check for folder redirections with Group Policy? This isn't about weakening security, but rather about having Active Directory and Samba play nicely together. I have ...
5
votes
3answers
5k views

Windows GPO default mapped drives

Is there a way, using Windows GPO, to set up a list of "default" mapped drives that can be applied to a group of users? I runs small network and would like to make sure that certain groups of users ...
5
votes
2answers
20k views

Why is GPO Tool reporting a GPO version mismatch when the GPO version #'s do match?

Any ideas why the group policy diagnostic utility GPOTool would report a GPO version mismatch between two domain controllers if the version numbers are a match? Policy {GUID} Error: Version mismatch ...
5
votes
1answer
8k views

Is there a way to set access to WMI using GroupPolicy?

From various documentation it appears that to change WMI access you need to use WMI to access the running service and modify specific parts of the tree. Its kind of annoying changing 150,000 hosts ...
5
votes
1answer
3k views

Windows Server 2008 mapped drives not showing on workstations?

I am running Windows Server 2008 Standard Edition with a Windows XP Pro workstation setup as a test unit. I have added an Organisational Unit called 'Misc Users' and have linked a GP called 'Basic ...
5
votes
1answer
4k views

GPO to remove “Highlight new programs”?

I need to disable the "highlight new programs" feature in Windows start menu via a GPO but can't find such a setting. Does such a thing even exist or is it achievable only through registry ...
5
votes
1answer
2k views

Allow domain users to modify local printer settings Windows 7 via Group Policy

I've been scouring the internet for days and thus far have had zero luck in finding a solution. Short Version: I need to allow users to modify their locally installed printers. Specifically, they ...
5
votes
1answer
782 views

W2K8R2 - A way to convert effecitve Group Policy settings to import on stand-alone machines for local policy?

If I have a relatively robust domain environment (e.g. 20 Security related Group Policy Objects) applying to my servers as a baseline set of policy settings and I have a stand-alone server that I want ...
5
votes
4answers
996 views

Applying group policy loopback to any user on specific computers

In a server 2008 R2 and Windows 7 environment, I have a GPO that specifies screen saver settings in the user settings policy for the entire domain. However, for specific computers, this is not ideal. ...
5
votes
1answer
349 views

Drive mapping maps two different folders for elevated and non-elevated programs

I have a Windows 2012 Domain with a couple of Windows 8 x64 Enterprise members. I want to use Group Policies to map a drive X: to a folder on a file server. The drive X: should be available on the ...
5
votes
1answer
195 views

Windows 8 profile creation video

I have a piece of software that deploys a local account on workstations via an MSI and creates a profile for it. In versions of windows prior to windows 8, the first time this account was used it ...
5
votes
3answers
6k views

Automatically make user local administrator on their computer through GPO?

In our AD 2003 domain each user gets local admin permissions on their computer. Everyone else can login with their domain account as normal user. Right now this means going to the desktop and ...
5
votes
2answers
135 views

How to use a tab character within a GPP registry item?

I am in the process of packaging an some software settings for deployment with a GPP. I need to include a few tab characters within string and eventually multi string values. When I paste tabs into ...
5
votes
5answers
842 views

Restricting Internet Access in Windows 7

On a Windows 7 Professional laptop, not on a domain, what's the best way to restrict access to the internet (and preferably network) to Administrator users only? I don't want to simply set a bogus ...
5
votes
3answers
11k views

Windows Server 2008 R2 Map User Specific Drive

On our old Windows 2003 SBS, the guy that set up the network created a login script that fired to map some drives and add a network printer. I would like to do away with that script and just use the ...
5
votes
1answer
2k views

List of What Policies Require Background Refresh, Which Require Reboot

Yes, I know the obvious ones. I am very specifically looking for any doc by Microsoft/MSDN that indicates which policies in Group Policy specifically require reboot and which do not. I love trial and ...
5
votes
2answers
1k views

Windows 7 Office 2007 GPO install

I have a GPO that works fine for installing Office 2007 Pro Plus on Vista and XP but when it installs Office on Windows 7 somehow the office key does not get entered via the customized msp, and needs ...
5
votes
1answer
17k views

How to disable autocomplete for passwords in IE8 via GPO?

In IE6 there was a registry key hidden away that would allow you to enable autocomplete but only for usernames, not passwords. This key no longer has any effect in IE8. I can either enable or disable ...
5
votes
2answers
700 views

BITS policies to limit bandwitdth usage is not taking effect

We have a fleet of roughly 1300 Windows 7 SP1 clients who use a centralized WSUS server to download updates from. We've implemented the following BITS policy to limit the bandwidth during working ...
5
votes
2answers
1k views

Users still get UAC prompt after allowing printer install and alter LAN connection by GPO?

I've implemented the following Group Policy settings to allow non-admins to install printer drivers and to enable / disable their wifi: User Configuration -> Administrative Templates -> Network ...
5
votes
1answer
5k views

Consistently slow domain logins / folder redirection

I've been trying to diagnose slow logins to my domain. One of my first stops was Domain login very slow 10+ minutes. So far I've been able to tell it has to do with my policy that applies folder ...
5
votes
2answers
2k views

Server 2012r2 RDS - Start Screen

I'm in the process of setting up an RDS server. It will be multi-tenant, so it's locked right down. All user profile data is stored on the file server using GPO folder redirection. I want to lock ...
5
votes
1answer
9k views

WMI filter for Internet Explorer 10+

I need to apply a GPO on all machines with IE 10+ but the setting does not need to be and shouldn't be applied to ie 9. All the machines are Windows Vista, 7, and 8 (some 32 bit and others 64). I ...
5
votes
1answer
805 views

Group policy software installation Upgrade vs Replace

I select upgrade in gpo software install to upgrade an existing package. I am not replacing the package. Will the old package and the upgrade package be installed on new computers joining the domain? ...
5
votes
1answer
831 views

Disable Outlook Web Access Junk filtering in Exchange 2013

By default, Outlook Web Access (OWA) in Exchange 2013 seems to move suspected junk mail to the Junk Email folder. This is undesirable behavior in most of my environments because we have Barracuda Spam ...
5
votes
0answers
234 views

Group policy issues

We are having an issue on one of our clients relatively new sbs installs. The domain consists of a single SBS 2011 server with 4 Windows 7 clients and 3 XP clients. Most of the time everything is ...
4
votes
2answers
2k views

Is WINs Still supported by Microsoft?

I heard through the grapevine that WINS was going to be phased out / not supported officially from Microsoft any more [ and yet they have it in Windows server 2008 ]. I can't find any information ...
4
votes
2answers
3k views

GPO option for “Show Desktop Icons”?

Is there a GPO setting (Server 2008 R2 domain) that we can use to set the following desktop property? View > Show Desktop Icons
4
votes
3answers
2k views

Managing Redundant/Conflicting Group Policies

Is there any tool that would help us get a handle on all our group policies to discover and remove the conflicting and redundant group policies that are giving us a headache? We change one group ...
4
votes
3answers
3k views

Multiple installers attached to a single GPO?

Can more than one installer (msi, mst) be linked to a GPO to deploy multiple packages at once?
4
votes
3answers
575 views

What is the best way to automatically configure Windows desktops and laptops in an AD environment to use a proxy server?

I have recently setup a Squid proxy server for caching purposes and would like to start pointing my desktops and laptops to it. My computers are running Windows XP with IE8 and Windows 7 with IE9.
4
votes
3answers
235 views

What setting in XP stops executables being run unless you're an administrator?

If I go to a workstation in a certain large organisation and try to run an executable from a USB drive it doesn't let me. What setting is this in Group Policy or wherever else that does this?
4
votes
3answers
20k views

How do I add items to 'Favorites' via GPO?

How do I add items to all users 'Favorites', preferably via GPO? the screenshot is just an example from W7 but I'm actually working with 2008R2 Server and RDS
4
votes
2answers
3k views

GPO Enforced Precedence

What is the precedence for Enforeced GPOs, I can't really find any MS articles which give a refined answer. My current understanding is as follows: Lets say we have 5 GPO's - GPO1 through GP05. I ...
4
votes
4answers
30k views

Diagnosing why a Group Policy Object is inaccessible

I have a Windows Server 2003 domain. One of the Group Policy Objects appears as a linked item in an OU but all I can see if the Unique ID and that the Link Status is Enabled. There is a red minus icon ...
4
votes
2answers
792 views

Complete Active Directory redesign and GPO application

after much testing and hundreds of tries and hours invested I decided to consult you experts here. Overview: I want to apply some GPO to our users which will add some specific site to the Trusted ...
4
votes
3answers
2k views

GPO silent software deployment

I have added a software package to my networks Computer Configuration in the Group Policy Management Editor for SBS 2008. I've noticed that even after adding the package, and rebooting a machine on ...
4
votes
3answers
2k views

Group policy preferences mapping same drive multiple times

I recently changed over our old login script that mapped network drives over to group policy preference drive maps. Worked through a few issues at first, but appears to be working fine for all of our ...
4
votes
2answers
20k views

how to disable a user to install program being domain user?

My client (XP) can install Chrome in his system being a domain user account. how can i stop him/them from installation of Chrome through Windows Server 2003.