Questions tagged [group-policy]

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.

Filter by
Sorted by
Tagged with
0 votes
1 answer
1k views

Buffalo NAS Active Directory Integration Group Policy Changes

as a part of effort to integrate buffalo NAS terrastation pro with our AD, we found out that following changes need to be made in the Group policy; The following need to be altered in Domain-> ...
Darktux's user avatar
  • 837
8 votes
3 answers
21k views

How do I disable "Restart your computer to finish installing updates" popup with GPO?

I've got some kiosk computers that are on a domain and permanently logged in, and receive updates for FEP through WSUS. This works great, except that occasionally, I get this dialog appearing in the ...
growse's user avatar
  • 8,050
1 vote
4 answers
9k views

Folder redirect policy does not apply to one user

I'm running Windows Server 2008 R2, my station runs Windows 7. while defining folder redirection policy (and others) I find that the redirection does not apply (or appear) in rsop.msc checkout. ...
Yoffe's user avatar
  • 53
1 vote
2 answers
4k views

Block Domain User login

I have created a Domain User id ( for example - Auser ). I have integrated my LDAP login with Firewall. I use this user to login in to firewall only. So, I want to block all the login for this User ...
Param's user avatar
  • 1,367
2 votes
3 answers
4k views

set attachment size limit in outlook with a domain policy

Is there a way to add a domain policy to a Windows 2008 domain that sets the attachments size limit for Outlook (various versions) and Windows Mail?
Valerio Santinelli's user avatar
11 votes
5 answers
39k views

Applying a GPO to one user on one computer only

I have a GPO that I need to apply to the user DOMAIN\DumbGuy, but only when he logs on to DOMAIN\DumbGuysComputer$. When DOMAIN\NiceReceptionist logs on to DOMAIN\DumbGuysComputer$ it should not apply....
Mark Henderson's user avatar
3 votes
1 answer
230 views

What's the difference between these two GPO options?

What's the difference between the two GPO options below? NETWORK ACCESS : DO NOT ALLOW storage of credentials or .NET passports for network NETWORK ACCESS : DO NOT ALLOW storage of passwords and ...
LaLuna's user avatar
  • 31
2 votes
3 answers
5k views

GPO Software Uninstall Not Taking Place

I am having some trouble with my software GPO's and can't seem to find any answers using Google. I successfully deployed software using my policy but when I delete another, the uninstallation of the ...
burmat's user avatar
  • 195
6 votes
3 answers
56k views

How do you apply proxy settings per computer instead of per user?

So far, I've used a user group policy object utilizing Internet Explorer maintenance to set a proxy for the user in IE. We have now deployed the Enterprise Client (EC) starter group policy to our ...
Oliver Salzburg's user avatar
1 vote
3 answers
2k views

Which GPO is making my Domain Controller my clients' DNS server?

I maintain a small domain (about 20 clients) and we need to make some changes to the DNS server that's being used by the clients. All the clients have been hard coded to use the domain controller as ...
Harry Muscle's user avatar
14 votes
5 answers
16k views

Applocker vs Software restriction policy

The goal is to prevent users from running unwanted programs on a terminal server. I have read many articles from Microsoft and others saying that the new Applocker feature is 100% better than the ...
gpo1278's user avatar
  • 141
0 votes
1 answer
788 views

Backup & Restore Group Policy of Workgroup Window XP [closed]

I have around 20 system in Workgroup, I have configured a Group policy along with Administrative Template on one system. Do you know, how to transfer this Group Policy along with Administrative ...
Param's user avatar
  • 1,367
1 vote
1 answer
180 views

Knowing the number of users with a group policy aplied

The question is pretty simple. Is there any way to get the number of users on an Active Directory with a specific Group policy applied? For example, i need to know how many users has the strong ...
Pelirrojilla's user avatar
0 votes
1 answer
113 views

AutoDisable Domain Login --- Windows Server 2008 [duplicate]

Possible Duplicate: How to automatically disable inactive accounts when AD is not used Is it possible to Auto-Disable Domain Login id, if user don't login in his system for 10-20 days. is there ...
Param's user avatar
  • 1,367
-1 votes
4 answers
278 views

Group Policy fault - Students force [closed]

Work at a school and we've got a scenario. We block F8 on all computers so students cannot access Safe Mode to bypass Group Policy... But students are logging into their accounts using AD, and they ...
x06265616e's user avatar
1 vote
2 answers
5k views

How do I set a local user a user rights assignment on an active directory GPO?

We have a process where I work, where any changes to active directory GPOs are performed on test servers, backed up and then the backups applied to the live AD. I'm in the process of amending a GPO ...
daed's user avatar
  • 148
0 votes
1 answer
147 views

gpo proxy server settinngs for all applications

i am trying to set all internet connections of all network PCs via proxy server that is installed on windows server 2003 i have editted proxy setting from gpo, but it only worked for internet browsers,...
begench's user avatar
1 vote
2 answers
197 views

Applying GPO: Applying Background

So I've created a few VM's and thought I'd have a go at trying to apply a few group policies to try and get my head around it. Put simply, all I want to do is to apply a GPO for a desktop background. ...
obious's user avatar
  • 181
3 votes
1 answer
9k views

Can I disable sticky keys through a Group Policy for all users?

Our users are constantly managing to turn sticky keys on and then call tech support because their keys are bring up windows instead of typing letters. Is there a way to disable StickyKeys in Group ...
Rachel's user avatar
  • 640
4 votes
2 answers
3k views

View windows 7 effective firewall rules when controlled by group policy

How do I view the actual, effective firewall rules for a Windows 7 computer where the local firewall is disabled but rules are established via group policy?: In particular, the primary users of these ...
Joshua Honig's user avatar
5 votes
3 answers
10k views

Windows 2008 startup script will not run?

I am trying to get a very simple batch script to run when my Windows 2008 Server (R2) system starts up. I have added the script to the "Startup Scripts" in the local group policy by running gpedit....
larsks's user avatar
  • 44.7k
4 votes
2 answers
13k views

Is there a way to centrally manage Dropbox/centrally disable LAN sync for all Dropbox clients on a Windows LAN?

We have a windows (7 pro) workstation LAN, managed via Group Policy. Lots of our users run Dropbox. Security concerns aside, one of our netadmins says that our routers/firewalls are handling and ...
Zac B's user avatar
  • 841
0 votes
1 answer
5k views

GPO Setting to allow workstations to use VPN

Is there a GPO setting that allows non-admins access to change their network settings. Which is what the SSLVPN does? If so, what is it? Background : I've got a few laptops that are used by Domains ...
NeerPatel's user avatar
  • 329
1 vote
1 answer
12k views

GPO Software Deployment Errors %%1274 and %%2

We migrated servers over the weekend to a new domain controller which had GPOs setup to deploy software. All of our clients had their OS reloaded, so they're "fresh" and most of them did get the ...
Gup3rSuR4c's user avatar
0 votes
1 answer
113 views

Batch file installing executable only gives SYSTEM permissions

So, I have a couple of batch files that install some executables and they work, but when the executables setup shortcuts on the desktop only SYSTEM has access to them. Is there a way I can prevent ...
Gup3rSuR4c's user avatar
3 votes
3 answers
79k views

Using a GPO to run a batch file once

Is it possible that I could setup a GPO list for newly installed computers with many batch files (mainly file moving) and these would run only once and never again? I am beginner on this and I haven'...
TryHarder's user avatar
  • 259
2 votes
2 answers
729 views

Windows GPO order - beginner

I have some software that requires a .NET 4 install before them. I wonder what is the best way to make a GPO order list. I also have some software that needs certain files, so I need to prepare them ...
TryHarder's user avatar
  • 259
3 votes
3 answers
1k views

How do I make on Domain Controller be used more to logon than another Domain controller on the same network?

I am currently working in an environment where there are 2 DC's running and another DC that is a backup but is currently running as well so that if the other 2 fail, the backup has everything needed ...
Joe Archer's user avatar
1 vote
4 answers
2k views

Setup.exe called from a batch file crashes with error 0x0000006

We're going to be installing some new software on pretty much all of our computers and I'm trying to setup a GPO to do it. We're running a Windows Server 2008 R2 domain controller and all of our ...
Gup3rSuR4c's user avatar
5 votes
1 answer
9k views

Apply Group Policy to Remote Desktop Services users but not when they log on to their local system

Running Windows Server 2008 Service Pack 2 with Remote Desktop Services role. I want to hide the servers drives using a GPO, but not the users local drives when they are logged on to their local ...
Kevin Murray's user avatar
0 votes
2 answers
335 views

Deploy .NET 4 Full to XP via GPO or WSUS

I am trying to deploy the full version of .NET 4.0 to client workstations running Windows XP. I have tried creating an MSI from the .exe using various free tools and assigning the install through a ...
hqrsie's user avatar
  • 101
3 votes
1 answer
7k views

Java update/install via group policy

I trying to deploy the latest Java RE version via GP, Java 7 update 9. I want to update computers that are currently running an older version of Java, a mixture of 7.6 and 7.7, some computers are ...
never_odd_or_even's user avatar
3 votes
2 answers
7k views

How Can I prevent a specific application from being run on a specific machine using Group Policy?

I know this is possible to do and I am working on it with limited success. I believe the Group Policy I want is "Do Not Run Specified Windows Applications" - I can enable this and add the .exe I want ...
Mike's user avatar
  • 67
8 votes
4 answers
8k views

I deployed Flash Player via a Software Installation policy. How to upgrade?

I have a Windows Server 2008 machine as my DC. Earlier this year I created a Software Installation GPO to deploy Adobe Flash Player plugin MSI. I assigned the policy to the computers, about half run ...
eleven81's user avatar
  • 417
1 vote
1 answer
4k views

Lockdown users on Windows Server 2012

I set up a Active Directory on a server machine with Windows Server 2012 and I'd like to create some users with limitations like Windows Steady State does in Windows XP (locally). Seen already the ...
el.severo's user avatar
3 votes
4 answers
425 views

GPO: Deploying software

I've set up a lab with 3 machines (2 Win7, 1 Win8) with the host being Win2008R2 acting as the DC (ADUC installed etc..). I've created a software package GPO and linked it to my domain: Here's the ...
obious's user avatar
  • 181
5 votes
3 answers
55k views

Users are getting a temporary profile

A bit about current setup: It is windows 2008 R2 AD servers (all of them are 2008R2) and couple locations which set as Sites. Each location has DFS on AD server. Roaming profiles are not used nor ...
Serhiy's user avatar
  • 174
1 vote
1 answer
528 views

GPO - How to troubleshoot a slow Windows startup

I'm in a network with thousands of workstations. There is a bunch of GPOs applied to all domain users, and also a couple of Startup scripts in GPOs. When the workstations are starting up, there is a ...
Jonathan Rioux's user avatar
2 votes
2 answers
162 views

How can I make it so that computer-based GPOs don't apply to local administrators?

I am in charge of locking down many public computers for a public library. Because Windows SteadyState is not supported in Windows 7, I use group policies. These policies affect all users, including ...
cop1152's user avatar
  • 2,676
1 vote
1 answer
3k views

Group Policies not applied to single pc on domain - client side extension error 8196

Certain Group Policies are not being applied to a windows 7 64 client; only this pc seems to have this problem so far. This started this morning. When trying to add a printer the error message ...
JasonC's user avatar
  • 196
0 votes
1 answer
116 views

Group Policy Software Installation

Is there a way when making a group policy object to install an MSI that you can have this install run as administrator on the computers? Trying to run a fix that needs to be run as administrator to ...
netadmin2008's user avatar
1 vote
1 answer
6k views

use correct-resolution background desktop image

I have a desktop background image (a picture) in a half-dozen different resolutions, that I'd like to deploy to a disparate collection of computers with different monitors and video cards and whatnot. ...
Rob Bos's user avatar
  • 874
2 votes
1 answer
14k views

GPO: how to limit the users able to logon to PC?

In an active directory domain I'd like to have some PCs assigned to single people. For example on computer_a, the only people allowed to logon should be person_a plus the various administrators. ...
Daniel's user avatar
  • 1,713
1 vote
2 answers
2k views

Issue with Administratively Assigned Offline Files

I need to use Administratively Assigned Offline files in conjunction with folder redirection, but user home folders live on 26 different shares. Do I just need to add 52 file paths similar to: \\...
znewman's user avatar
  • 165
2 votes
1 answer
4k views

Windows Server 2008 R2, how to define local administrator on each machine?

I need to get a little help in tuning my Active Directory. I would like to be able to give the right of 'local administrator' to a group of users already defined in AD. This is in order not to have to ...
MixturaDementiae's user avatar
2 votes
1 answer
2k views

Windows Installer GPO - "Prohibit user installs" value is missing on Windows 7

The old Windows XP GPO template had three options for "Windows Installer\Prohibit user installs": Allow user installs Hide user installs Prohibit user installs The new Windows 7 template has only ...
tt567's user avatar
  • 21
3 votes
1 answer
10k views

How to set a deployed printer as default using group-policy?

Using a windows-server-2008-r2 I added the print-management role to it. Using that, I added a new printer and attached it to a currently set GPO Assuming I done things right, looking at the linked ...
Saariko's user avatar
  • 1,801
4 votes
1 answer
563 views

Server 2008: Link security group to organisational unit

I've created a test domain with 2 VM's to experiment and try to gain some knowledge using Server 2008 (+GPO's, OU's, ADUC etc) however I've become a little stuck. I've created an OU called User ...
obious's user avatar
  • 181
-3 votes
1 answer
1k views

GPO Startup script did not execute on some computers [closed]

The GPO Startup scripts works fine on other machine but not for another half of the machine. gpresult show that GPO was there. I ran RSOP and it show that the Startup script was there but it was never ...
Aaron Ooi's user avatar
1 vote
3 answers
853 views

How to run a logon script but not as the current user

I want to create a log of when people login or logout of computers in a computer lab. My first idea was to just create login/logout scripts that contact a server, but the problem is since these ...
ptsoccer's user avatar

1
43 44
45
46 47
65