Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

4
votes
2answers
2k views

GPO - Set Desktop Background But allow users to change

We have a policy setup to use an image for our desktop background, this works, however we have decided that by default this should be the setting but if the user wants to change it then they can, ...
4
votes
3answers
12k views

Users are getting a temporary profile

A bit about current setup: It is windows 2008 R2 AD servers (all of them are 2008R2) and couple locations which set as Sites. Each location has DFS on AD server. Roaming profiles are not used nor ...
4
votes
1answer
1k views

How can I start a program from a login batch script if the Command Prompt is disabled?

Our Terminal Servers has two Group Policies in place: one that includes disabling the command prompt, and another that runs a batch script to startup a program upon login. But the startup program ...
4
votes
1answer
1k views

Syncing Domain Controller Clocks

It appears some computers in our computer lab have clocks running about 3-4 minutes fast. As of right now, when we join a computer to the domain, it sets the clock based on our server's Domain ...
4
votes
1answer
63 views

New implementation of home and department shares; help me get it right the first time?

I've the rare opportunity to set up from scratch our first home and department share server in a mid sized company (about 250 people), and would like to make something that's reasonable. We're going ...
4
votes
1answer
32 views

If a GPO is not the Winning GPO does none or part of the GPO get applied?

I am reviewing some gpresults settings and it shows the Winning GPO as a server configured GPO. If another GPO has already won and a second GPO tries to set a conflicting settings does the second ...
4
votes
1answer
5k views

Can I override domain group policy with local group policy as a local admin?

I am trying to provision a few special case laptops. I would like to create a local guest account. That's fine but when I try to create it I prompted that my guest password does not meet the ...
4
votes
1answer
3k views

Deploying Printers to Computers vs. Users via GPO

When I deploy a printer to a computer it only seems to deploy to our Windows XP machines. If I deploy to users it deploys to our Windows XP and 7 machines. When I look in the RSoP Snap-in it shows the ...
4
votes
2answers
266 views

Fixing Users and Computers accounts structure in Active Directory

I'm trying to fix a completely unplanned and unstructured Active Directory hierarchy. When the domain was first created on Windows Server 2000, no containers or OUs whatsoever were created for users ...
4
votes
3answers
620 views

Redeploying Office to a single client after manual uninstall

One of our client PC's recently got random crash issues with MS Word. I manually uninstalled Office 2003 locally on the client, ran "gpupdate /force /boot" and expected the client to reinstall Office ...
4
votes
5answers
848 views

Conficker: Should steps taken in group policy to secure against virus remain?

We got nailed two weeks ago by Conficker, I ran through the 26 step checklist from Mircrosoft on my own computer, as well as on our domain server. It says near the end to reverse all the changes, but ...
4
votes
2answers
52 views

Windows 7: Deploying Printer Settings without a Print Server

I am a part-time Windows 7 administrator in an office with about 10 PCs and a standalone networked printer... No Windows print server, though we do have an Active Directory domain. So I have been ...
4
votes
1answer
136 views

Changing password expiration policy at next password change

We have a password policy with a maximum password age of 180 days. For various reasons we need to change it to 90 days, with a minimum impact for the users. Our users are normally warned about the ...
4
votes
2answers
4k views

Install chrome extensions via GPO

I'm attepting to install the adblock chrome extension using Google's Chrome ADM's. User Configuration/Policies/Classic Administrative Templates/Google/Google Chrome/Extensions Configure the list of ...
4
votes
1answer
1k views

Publish Bookmarks in FireFox with Active Directory (AD)

Issue: We have a number of bookmarks that we need to publish to our users computers that are bound to active directory. We can easily accomplish this with group policy for Internet Explorer. At the ...
4
votes
1answer
2k views

local admin vs domain admin on a domain controller

I would like to create a group policy to set a specific password for all local administrator users. Now even though you can't manage local users on a domain controller ("This snap-in cannot be used on ...
4
votes
1answer
65 views

Group Policy Files - Active Directory

I am having a whole lot of trouble getting some files distributed across the network. My settings are: Action: Replace Source: \\[fqdn]\Repo\sqljdbcl.jar Destination: ...
4
votes
1answer
2k views

Java 8 Update 25 Install Via GPO Not Working

I am trying to set up our Active Directory DC to automatically install Java 8 Update 25 (jre1.8.0_25.msi) using Group Policy. When attempting to add the jre1.8.0_25.msi package in the GPO at Computer ...
4
votes
2answers
302 views

What is the best method to change the server used for folder redirection?

For years I've been using folder redirection for all my desktop clients (Win7). I am looking to migrate all data to a new server/share. I have already created a new share with the same ACL and used ...
4
votes
1answer
273 views

Server 2008: Link security group to organisational unit

I've created a test domain with 2 VM's to experiment and try to gain some knowledge using Server 2008 (+GPO's, OU's, ADUC etc) however I've become a little stuck. I've created an OU called User ...
4
votes
1answer
6k views

How to apply an Group Policy only to Clients in a specific IP range? (using WMI Filter)

I need to apply a GPO only to some computers in a specific network range. I'm aware that there many other solutions for this issue. I could group them into an OU or use Sites. But the current ...
4
votes
2answers
1k views

Exactly HOW are machine start-up Group Policies processed and what is required?

We have Server 2008 R2 and Windows 7 Enterprise. I'm asking this because we have several hundred laptops and netbooks at our organization. We do'nt have a NAC or a RADIUS server so all the wireless ...
4
votes
2answers
486 views

Change default profile directory per group

Is it possible to force windows to create profiles for members of one active directory group in a different folder from members in another active directory group? The school here uses DeepFreeze to ...
4
votes
5answers
5k views

Printer deployment via Group Policy not working on a single system

One of my coworkers just got a new laptop running Windows 7 Pro x64. We use a GPO to deploy the printers to every system, but for some reason it is not working on this system. I have been breaking my ...
4
votes
2answers
3k views

Windows 7 - Group Policy - Allow RDP Credentials to be Saved

Im trying to use RDP and save my credentials in a file so I dont have to entire it each time I connect. I remember doing it before and it involved changing a group policy setting. What exactly do I ...
4
votes
4answers
563 views

Published software not displayed in Add/Remove Programs

I just followed How to use Group Policy to remotely install software in Windows Server 2003 to try publishing a software (MSI file). I could follow all the steps, but the supposedly successfully ...
4
votes
1answer
7k views

Windows cannot access the file gpt.ini for GPO CN={31B2F340-016D-11D2-945F-00C04FB984F9}

I'm in the middle of a "swing" migration from Windows SBS 2003 to Server 2003 Standard. It's going okay so far but we're getting event 1058 on client machines: Windows cannot access the file gpt.ini ...
4
votes
2answers
156 views

Pin “Run” to taskbar through group policy

Is there are way to pin the "Run" button to taskbar through group policy or a script? Only the specific items needs to be pinned. The other items are not to be touched. Partial solutions I found on ...
4
votes
1answer
56 views

How to dump(collect) all the group policies in a domain?

I want to collect all the GPOs in a domain , for reviewing settings. How many ways are there to do it. I used Get-GPOREPORT in Powershell, but it gave a comprehensive html file, is these a way to ...
4
votes
3answers
185 views

If an email is sent to a user redirects if OOF is on

Is there a way to make a global change to either Exchange or group policy so if an email is received from an email address it will not go into the users mailbox but be forwarded on instead. Basically ...
4
votes
1answer
2k views

Hide Network Icon in File Explorer on Server 2012

How can I hide the network icon within Windows Explorer in Windows Server 2012, via group policy? I can do this on 2008R2 using the Windows Explorer "Extra's" settings, but no such setting exists for ...
4
votes
1answer
394 views

Removing GPO - comprehensive list of 'tattooed and non tattooed' registry settings

Is there a comprehensive collection or perhaps even a 'quick guide' to which GPO settings (or registry keys) are protected from GPO 'tattooing'? I have a few clients who have horrendous GPO policies ...
4
votes
2answers
1k views

How do I disable SID security check for folder redirection with Group Policy?

How do I disable the SID security check for folder redirections with Group Policy? This isn't about weakening security, but rather about having Active Directory and Samba play nicely together. I have ...
4
votes
1answer
174 views

Group Policy - Transferring to another domain

I am in the process of setting up two RDS servers in different locations on different domains, I've set one up and I am very happy with it, it looks like a windows 7 desktop and its really fast so I ...
4
votes
2answers
620 views

Invalid directory pathname trying to back up GPO

DFSR replication seems to be broken in my domain, and before starting to fix that, I wanted to take backups of the current Group Policy Objects. However, I am unable to back up the Default Domain ...
4
votes
1answer
900 views

Exchange 2010 - Change “Conversation View” default setting in Outlook Web App

I'm converting an organization to Exchange from an older Linux-based Sendmail/Dovecot POP3 setup. In an attempt to ease the transition, I'd like to leverage Outlook Web App to help acclimate users to ...
4
votes
1answer
202 views

Merging group policies

So basically, we have a dozen or more group policies which make the process of applying/changing/adding new policies a PITA. What I want to do is merge all the policies together and basically end up ...
4
votes
3answers
2k views

Auto Log-Off Windows users - Windows 2003 domain

I am trying to make windows clients automatically log off after some time, I have been trying to use the winexit.scr which I have seen working else where in a similar environment. After working ...
4
votes
1answer
179 views

How to define the built-in administrators group in a group-policy object?

How do I define the built-in administrators group in a group policy? For example Computer Configuration => Policies => Windows Settings => Security Options => Local Policies => User ...
4
votes
1answer
3k views

Installing Lync 2013 Standard silently

I am trying to find a good way to deploy Lync 2013 standard & basic clients silently on computers with Windows 7 / Office 2010 & ahve a few roadblocks. 1) I am successful installing the ...
4
votes
1answer
2k views

What is the relationship between User Rights Assignment Policies vs. Membership of Local Groups

I just spent the better part of this morning on a support call with a vendor where we eventually resolved our issue by manually adding the service account their application was using to the following ...
4
votes
1answer
224 views

Drive mapping maps two different folders for elevated and non-elevated programs

I have a Windows 2012 Domain with a couple of Windows 8 x64 Enterprise members. I want to use Group Policies to map a drive X: to a folder on a file server. The drive X: should be available on the ...
4
votes
1answer
10k views

Local Group Policy not updating. RSOP and GPResult show stale data

This issue exists on a Windows 7 Pro x64 machine (Dell Inspiron E6420). I am trying to adjust a setting using gpedit.msc, but the change never seems to take effect. By that, I mean that setting that ...
4
votes
2answers
2k views

Managing Windows 8 Start Screen Tiles

Using DISM (Deployment Image Servicing and Management) it is possible to customize the initial Windows 8 Start Screen, although not in any satisfactory way. Is there an effective way to manage the ...
4
votes
1answer
1k views

Printers intermittently not being set as default

We have a lab of computers with printers being deployed to and set as default with Group Policy Preferences, but we're getting a large number of users who don't pick up the default settings. There's ...
4
votes
2answers
850 views

Group Policy GPO not 'seen' at client

I have a new OU (natorg.local\NATO\Users) that I am trying to apply GP to. I have created a new user in this OU, and linked the 3 GPO's to this OU: DESKTOP - Folder Redirection (AppData) DESKTOP - ...
4
votes
1answer
1k views

What does “Use mandatory profiles on the RD Session Host server” do?

The description for "Use mandatory profiles on the RD Session Host server" is a little ambiguous: This policy setting allows you to specify whether Remote Desktop Services uses a mandatory ...
4
votes
1answer
3k views

Group Policy Client failed the logon - Access Denied?

Background We have a Server 2008 R2/Win7 domain. We have teachers and students using Windows 7 workstations, deployed via SCCM. Students all refer to a shared profile (\\dfsroot\\profiles\student, ...
4
votes
2answers
592 views

Does Group Policy detect installed version before downloading an MSI from network

I used group policy to deploy an Adobe Reader X .msi file, which successfully updated the machines it was targeted to. The computer group those machines belong to still has a link to the GPO which ...
4
votes
1answer
3k views

How do I package this vbscript as a msi for Group Policy

I had a developer that is no longer with us create an msi to do this for me, but the package is outdated now and we need to deploy new files. Basically I need to do the following: Take the code at ...