Questions tagged [group-policy]
Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.
3,227
questions
0
votes
1
answer
1k
views
Buffalo NAS Active Directory Integration Group Policy Changes
as a part of effort to integrate buffalo NAS terrastation pro with our AD, we found out that following changes need to be made in the Group policy;
The following need to be altered in Domain-> ...
8
votes
3
answers
21k
views
How do I disable "Restart your computer to finish installing updates" popup with GPO?
I've got some kiosk computers that are on a domain and permanently logged in, and receive updates for FEP through WSUS. This works great, except that occasionally, I get this dialog appearing in the ...
1
vote
4
answers
9k
views
Folder redirect policy does not apply to one user
I'm running Windows Server 2008 R2, my station runs Windows 7.
while defining folder redirection policy (and others) I find that the redirection does not apply (or appear) in rsop.msc checkout.
...
1
vote
2
answers
4k
views
Block Domain User login
I have created a Domain User id ( for example - Auser ). I have integrated my LDAP login with Firewall. I use this user to login in to firewall only. So, I want to block all the login for this User ...
2
votes
3
answers
4k
views
set attachment size limit in outlook with a domain policy
Is there a way to add a domain policy to a Windows 2008 domain that sets the attachments size limit for Outlook (various versions) and Windows Mail?
11
votes
5
answers
39k
views
Applying a GPO to one user on one computer only
I have a GPO that I need to apply to the user DOMAIN\DumbGuy, but only when he logs on to DOMAIN\DumbGuysComputer$. When DOMAIN\NiceReceptionist logs on to DOMAIN\DumbGuysComputer$ it should not apply....
3
votes
1
answer
230
views
What's the difference between these two GPO options?
What's the difference between the two GPO options below?
NETWORK ACCESS : DO NOT ALLOW storage of credentials or .NET passports for network
NETWORK ACCESS : DO NOT ALLOW storage of passwords and ...
2
votes
3
answers
5k
views
GPO Software Uninstall Not Taking Place
I am having some trouble with my software GPO's and can't seem to find any answers using Google. I successfully deployed software using my policy but when I delete another, the uninstallation of the ...
6
votes
3
answers
56k
views
How do you apply proxy settings per computer instead of per user?
So far, I've used a user group policy object utilizing Internet Explorer maintenance to set a proxy for the user in IE. We have now deployed the Enterprise Client (EC) starter group policy to our ...
1
vote
3
answers
2k
views
Which GPO is making my Domain Controller my clients' DNS server?
I maintain a small domain (about 20 clients) and we need to make some changes to the DNS server that's being used by the clients. All the clients have been hard coded to use the domain controller as ...
14
votes
5
answers
16k
views
Applocker vs Software restriction policy
The goal is to prevent users from running unwanted programs on a terminal server.
I have read many articles from Microsoft and others saying that the new Applocker feature is 100% better than the ...
0
votes
1
answer
788
views
Backup & Restore Group Policy of Workgroup Window XP [closed]
I have around 20 system in Workgroup, I have configured a Group policy along with Administrative Template on one system.
Do you know, how to transfer this Group Policy along with Administrative ...
1
vote
1
answer
180
views
Knowing the number of users with a group policy aplied
The question is pretty simple. Is there any way to get the number of users on an Active Directory with a specific Group policy applied?
For example, i need to know how many users has the strong ...
0
votes
1
answer
113
views
AutoDisable Domain Login --- Windows Server 2008 [duplicate]
Possible Duplicate:
How to automatically disable inactive accounts when AD is not used
Is it possible to Auto-Disable Domain Login id, if user don't login in his system for 10-20 days.
is there ...
-1
votes
4
answers
278
views
Group Policy fault - Students force [closed]
Work at a school and we've got a scenario.
We block F8 on all computers so students cannot access Safe Mode to bypass Group Policy... But students are logging into their accounts using AD, and they ...
1
vote
2
answers
5k
views
How do I set a local user a user rights assignment on an active directory GPO?
We have a process where I work, where any changes to active directory GPOs are performed on test servers, backed up and then the backups applied to the live AD.
I'm in the process of amending a GPO ...
0
votes
1
answer
147
views
gpo proxy server settinngs for all applications
i am trying to set all internet connections of all network PCs via proxy server that is installed on windows server 2003
i have editted proxy setting from gpo, but it only worked for internet browsers,...
1
vote
2
answers
197
views
Applying GPO: Applying Background
So I've created a few VM's and thought I'd have a go at trying to apply a few group policies to try and get my head around it.
Put simply, all I want to do is to apply a GPO for a desktop background.
...
3
votes
1
answer
9k
views
Can I disable sticky keys through a Group Policy for all users?
Our users are constantly managing to turn sticky keys on and then call tech support because their keys are bring up windows instead of typing letters.
Is there a way to disable StickyKeys in Group ...
4
votes
2
answers
3k
views
View windows 7 effective firewall rules when controlled by group policy
How do I view the actual, effective firewall rules for a Windows 7 computer where the local firewall is disabled but rules are established via group policy?:
In particular, the primary users of these ...
5
votes
3
answers
10k
views
Windows 2008 startup script will not run?
I am trying to get a very simple batch script to run when my Windows 2008 Server (R2) system starts up. I have added the script to the "Startup Scripts" in the local group policy by running gpedit....
4
votes
2
answers
13k
views
Is there a way to centrally manage Dropbox/centrally disable LAN sync for all Dropbox clients on a Windows LAN?
We have a windows (7 pro) workstation LAN, managed via Group Policy. Lots of our users run Dropbox. Security concerns aside, one of our netadmins says that our routers/firewalls are handling and ...
0
votes
1
answer
5k
views
GPO Setting to allow workstations to use VPN
Is there a GPO setting that allows non-admins access to change their network settings. Which is what the SSLVPN does? If so, what is it?
Background :
I've got a few laptops that are used by Domains ...
1
vote
1
answer
12k
views
GPO Software Deployment Errors %%1274 and %%2
We migrated servers over the weekend to a new domain controller which had GPOs setup to deploy software. All of our clients had their OS reloaded, so they're "fresh" and most of them did get the ...
0
votes
1
answer
113
views
Batch file installing executable only gives SYSTEM permissions
So, I have a couple of batch files that install some executables and they work, but when the executables setup shortcuts on the desktop only SYSTEM has access to them. Is there a way I can prevent ...
3
votes
3
answers
79k
views
Using a GPO to run a batch file once
Is it possible that I could setup a GPO list for newly installed computers with many batch files (mainly file moving) and these would run only once and never again?
I am beginner on this and I haven'...
2
votes
2
answers
729
views
Windows GPO order - beginner
I have some software that requires a .NET 4 install before them. I wonder what is the best way to make a GPO order list. I also have some software that needs certain files, so I need to prepare them ...
3
votes
3
answers
1k
views
How do I make on Domain Controller be used more to logon than another Domain controller on the same network?
I am currently working in an environment where there are 2 DC's running and another DC that is a backup but is currently running as well so that if the other 2 fail, the backup has everything needed ...
1
vote
4
answers
2k
views
Setup.exe called from a batch file crashes with error 0x0000006
We're going to be installing some new software on pretty much all of our computers and I'm trying to setup a GPO to do it. We're running a Windows Server 2008 R2 domain controller and all of our ...
5
votes
1
answer
9k
views
Apply Group Policy to Remote Desktop Services users but not when they log on to their local system
Running Windows Server 2008 Service Pack 2 with Remote Desktop Services role. I want to hide the servers drives using a GPO, but not the users local drives when they are logged on to their local ...
0
votes
2
answers
335
views
Deploy .NET 4 Full to XP via GPO or WSUS
I am trying to deploy the full version of .NET 4.0 to client workstations running Windows XP.
I have tried creating an MSI from the .exe using various free tools and assigning the install through a ...
3
votes
1
answer
7k
views
Java update/install via group policy
I trying to deploy the latest Java RE version via GP, Java 7 update 9. I want to update computers that are currently running an older version of Java, a mixture of 7.6 and 7.7, some computers are ...
3
votes
2
answers
7k
views
How Can I prevent a specific application from being run on a specific machine using Group Policy?
I know this is possible to do and I am working on it with limited success. I believe the Group Policy I want is "Do Not Run Specified Windows Applications" - I can enable this and add the .exe I want ...
8
votes
4
answers
8k
views
I deployed Flash Player via a Software Installation policy. How to upgrade?
I have a Windows Server 2008 machine as my DC. Earlier this year I created a Software Installation GPO to deploy Adobe Flash Player plugin MSI. I assigned the policy to the computers, about half run ...
1
vote
1
answer
4k
views
Lockdown users on Windows Server 2012
I set up a Active Directory on a server machine with Windows Server 2012 and I'd like to create some users with limitations like Windows Steady State does in Windows XP (locally).
Seen already the ...
3
votes
4
answers
425
views
GPO: Deploying software
I've set up a lab with 3 machines (2 Win7, 1 Win8) with the host being Win2008R2 acting as the DC (ADUC installed etc..).
I've created a software package GPO and linked it to my domain:
Here's the ...
5
votes
3
answers
55k
views
Users are getting a temporary profile
A bit about current setup:
It is windows 2008 R2 AD servers (all of them are 2008R2) and couple locations which set as Sites. Each location has DFS on AD server. Roaming profiles are not used nor ...
1
vote
1
answer
528
views
GPO - How to troubleshoot a slow Windows startup
I'm in a network with thousands of workstations. There is a bunch of GPOs applied to all domain users, and also a couple of Startup scripts in GPOs.
When the workstations are starting up, there is a ...
2
votes
2
answers
162
views
How can I make it so that computer-based GPOs don't apply to local administrators?
I am in charge of locking down many public computers for a public library. Because Windows SteadyState is not supported in Windows 7, I use group policies. These policies affect all users, including ...
1
vote
1
answer
3k
views
Group Policies not applied to single pc on domain - client side extension error 8196
Certain Group Policies are not being applied to a windows 7 64 client; only this pc seems to have this problem so far. This started this morning.
When trying to add a printer the error message ...
0
votes
1
answer
116
views
Group Policy Software Installation
Is there a way when making a group policy object to install an MSI that you can have this install run as administrator on the computers?
Trying to run a fix that needs to be run as administrator to ...
1
vote
1
answer
6k
views
use correct-resolution background desktop image
I have a desktop background image (a picture) in a half-dozen different resolutions, that I'd like to deploy to a disparate collection of computers with different monitors and video cards and whatnot. ...
2
votes
1
answer
14k
views
GPO: how to limit the users able to logon to PC?
In an active directory domain I'd like to have some PCs assigned to single people.
For example on computer_a, the only people allowed to logon should be person_a plus the various administrators.
...
1
vote
2
answers
2k
views
Issue with Administratively Assigned Offline Files
I need to use Administratively Assigned Offline files in conjunction with folder redirection, but user home folders live on 26 different shares. Do I just need to add 52 file paths similar to:
\\...
2
votes
1
answer
4k
views
Windows Server 2008 R2, how to define local administrator on each machine?
I need to get a little help in tuning my Active Directory. I would like to be able to give the right of 'local administrator' to a group of users already defined in AD.
This is in order not to have to ...
2
votes
1
answer
2k
views
Windows Installer GPO - "Prohibit user installs" value is missing on Windows 7
The old Windows XP GPO template had three options for "Windows Installer\Prohibit user installs":
Allow user installs
Hide user installs
Prohibit user installs
The new Windows 7 template has only ...
3
votes
1
answer
10k
views
How to set a deployed printer as default using group-policy?
Using a windows-server-2008-r2 I added the print-management role to it.
Using that, I added a new printer
and attached it to a currently set GPO
Assuming I done things right, looking at the linked ...
4
votes
1
answer
563
views
Server 2008: Link security group to organisational unit
I've created a test domain with 2 VM's to experiment and try to gain some knowledge using Server 2008 (+GPO's, OU's, ADUC etc) however I've become a little stuck.
I've created an OU called User ...
-3
votes
1
answer
1k
views
GPO Startup script did not execute on some computers [closed]
The GPO Startup scripts works fine on other machine but not for another half of the machine. gpresult show that GPO was there. I ran RSOP and it show that the Startup script was there but it was never ...
1
vote
3
answers
853
views
How to run a logon script but not as the current user
I want to create a log of when people login or logout of computers in a computer lab. My first idea was to just create login/logout scripts that contact a server, but the problem is since these ...