Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

3
votes
4answers
11k views

What Group Policy settings MUST be set within the Default Domain Policy?

Does anyone have an authoritative source of policies that, if set, MUST be set within the Default Domain Policy (if one chooses to set them)? Off the top of my head, I know that password policies and ...
3
votes
1answer
104 views

GPO to Configure DHCP Options

Our environment has approximately 15 Domain Controllers that also provide DHCP functionality to their networks. We have discovered several to have incorrect DNS settings. Their are providing incorrect ...
1
vote
1answer
72 views

Browser caching by Windows clients is generating huge I/O to server

In our environment, our users have their My Documents folder stored on an ENC NAS device. I have noticed huge traffic coming from our isers machines, and I see that most of it is coming to cache ...
0
votes
0answers
13 views

Is it possible to set Server Performance Settings globally?

Is it possible to set the Performance Settings for example Smooth edges of screen fonts globally or do I have to log in to every user and set it manually? I couldn't find any setting in the GPOs that ...
1
vote
1answer
767 views

Disable speakers on Windows client machines?

I am looking for a way with which I can completely disable Windows-audio-output on on a group of computers that our students use. Ideally, I would like to disable it only for students and enable it ...
0
votes
2answers
50 views

Is there a way to control what browser plugins are installed across an enterprise? [closed]

Is there a way to control what browser plugins are installed across an enterprise, perhaps by group policy?
0
votes
0answers
82 views

Allow winzip file Software Restriction Policy

I have a path rule that denies extracting executable to temp folder in the software restriction policy. Now I need to allow certain applications that should run and extract their contents in the Temp ...
2
votes
2answers
1k views

Advanced Audit Policy not getting applied on 2012 R2

I have configured several avanced audit policy settings under: Computer Configuration => Policies => Windows Settings => Security Settings => Advanced Audit policy Configuration => ...
3
votes
1answer
51 views

How to find all GPOs in a domain that define password policies?

We have a bunch of GPOs that have grown organically over time. I assume that many of them are defining password policies. I am aware of the fact that it only can be set once in a domain (besides PSOs ...
1
vote
1answer
189 views

Local Group Policy IE9

I have this weird issue on Windows 7 64bit desktop, I am trying to lock it down from Internet usage (it's a stand alone machine with several local users), so I use local GP. Well, I enabled the ...
2
votes
1answer
106 views

Active Directory

If I have a situation where there is inappropriate use of security and distribution groups against file shares, and very liberal permissions, what would be the best way to go about handling it? Are ...
1
vote
1answer
60 views

GPO install Live Meeting 2007 on Windows 8.1

Errors: The removal of the assignment of application Microsoft Office Live Meeting 2007 from policy LiveMeeting 2007 failed. The error was : %%2 The description for Event ID 103 from source ...
1
vote
1answer
2k views

How do I use Group Policy on a domain to delete Temporary Internet Files?

I have a domain controller running on Windows 2008 Server R2 and users login to application servers on which Windows 2003 Server SP2 is installed. I have applied a Group Policy to clean temporary ...
2
votes
1answer
144 views

How to programmatically logout idle users on Windows Server 2012 R2?

I've searched a lot but couldn't find a direct solution. Can anyone tell me how to logoff idle users from a remote desktop connection to a Windows Server 2012 server after a period of time? These are ...
0
votes
3answers
3k views

Uncheck Automatically detect proxy for Terminal Server users via GPO

Good morning, I have a registry key that changes local users Internet Explorer LAN Settings to uncheck the "Automatically detect settings" tickbox. When I add this policy to the Terminal Servers ...
0
votes
0answers
43 views

Difference in File System Security group policy between Windows 7 and 8 clients

I have an unexplained difference of behaviour between a Windows 7 client and a Windows 8 client. I have the following files: C:\testdir\allow_domainusers.txt C:\testdir\allow_everyone.txt ...
8
votes
4answers
5k views

I deployed Flash Player via a Software Installation policy. How to upgrade?

I have a Windows Server 2008 machine as my DC. Earlier this year I created a Software Installation GPO to deploy Adobe Flash Player plugin MSI. I assigned the policy to the computers, about half run ...
3
votes
0answers
2k views

Is MSIZAP still useful, or is it obsolete?

I update flash using MSI files installed by group policy. However, with every update, about a third of the workstations fail to update (Windows Vista and Windows 7 32/64-bit editions). In the event ...
5
votes
2answers
5k views

Windows Domain Admin rights insufficient?

I have a lab(ish) environment where I have a single domain in a single forest. I have a Windows 7 image for the clients that was given to my by my organization (I didn't build it, not entirely sure ...
0
votes
2answers
120 views

GPO not applying to Clients

I am having issues applying the below GPOs to clients. Computer Configuration \ Policies \ Administrative Templates \ System \ Remote assistance \ "Offer Remote Assistance" Computer Configuration \ ...
0
votes
1answer
16 views

Group Policies For Wallpaper Failing

We have some computers that are no longer getting our wallpaper pushed by group policy. In checking to see if they can access the UNC for the wallpaper (\domain.com\NETLOGON\LogonFiles\our-logo.jpg) ...
0
votes
0answers
4k views

Why gpupdate fails?

So I have a Windows Active Directory Domain with two domain controllers, DC1 and DC2, both running Windows Server 2008 R2. DC1 is the primary DC holding all FSMO roles. It was functioning all right as ...
5
votes
6answers
49k views

How can I export all group policies to a easily-parseable format?

I need to dump all the Group Policies within Active Directory to review offline at a later date. Is there a way I can easily export all the Group Policies to text or some other easily-parseable ...
0
votes
1answer
47 views

Allowing multiple executables into a “Run only specified applications” group policy at one time

At my workplace we whitelist executables using a "Run only specified Windows applications" group policy applied to the domain. At certain times we need to whitelist large number of executables at a ...
2
votes
4answers
203 views

Different group policies in one domain

I'm using powershell to display the password expiration of an account before I reset it at work. But the global GP from what I can see, is 180 days, and there are some employees who have 90 days set ...
2
votes
0answers
101 views

Chrome Not Applying GPO Policies

I'm having a little trouble getting Chrome installions on our workstation to update it's policies to reflect I've sent in GPO. I added the admx and adml to %systemroot%\policyDefinitions as our ...
2
votes
4answers
725 views

Hidden registry settings

Scenario: I'm performing a configuration audit on a server that's joined to the domain. For the mandatory security configuration settings, there are group policies defined and being pushed out to ...
0
votes
1answer
46 views

Problems applying reg keys via group policy

I'm having a major issue with some music software, I was hoping if I quickly explained what I have done, some GPO guru might be able to spot where I have went wrong? Server 2012 Client OS - XP SP3 ...
0
votes
3answers
60 views

In which order will GPOs be applied when a USER try to login to a PC in a different OU

If we have this Group Policy Management configuration (Windows Server 2008): domain.local OU1 PC1 USR1 GPO1 (Linked) OU2 PC2 USR2 GPO2 (Linked) ...
0
votes
0answers
30 views

Password policy GPO not working as intended [duplicate]

I have the following policy set up for my Server 2012 domain, and has been applied to my computer: The GPO is applied to all computers in the OU, and no other conflicting policies are defined. ...
0
votes
1answer
56 views

Set Group Policy for RDP session users on selected Computers

I have domain users by group with respective privileges set via group policy. I.E (Department A has access to control panel and access to install software, Department B does not have both) My ...
4
votes
1answer
6k views

Java 8 Update 25 Install Via GPO Not Working

I am trying to set up our Active Directory DC to automatically install Java 8 Update 25 (jre1.8.0_25.msi) using Group Policy. When attempting to add the jre1.8.0_25.msi package in the GPO at Computer ...
5
votes
2answers
1k views

Server 2012r2 RDS - Start Screen

I'm in the process of setting up an RDS server. It will be multi-tenant, so it's locked right down. All user profile data is stored on the file server using GPO folder redirection. I want to lock ...
0
votes
3answers
910 views

I Cannot create a .BAT file in the root of C “Access is Denied” Server 2k3

I have an oracle db server on a windows 2k3 box. I am currently unable to create or copy a batch file to the root of c. I can create batch files on different folders (i.e. in my user directory) or I ...
2
votes
0answers
103 views

Is using the AD home directory attribute to map the home drive really no longer a best practice?

I have read some articles that claim that using the Active Directory user home directory attribute to automatically map the home drive is a legacy method, deprecated, or not recommended. The second ...
5
votes
4answers
465 views

Applying group policy loopback to any user on specific computers

In a server 2008 R2 and Windows 7 environment, I have a GPO that specifies screen saver settings in the user settings policy for the entire domain. However, for specific computers, this is not ideal. ...
3
votes
3answers
6k views

Update driver on deployed printer

I re-deployed a printer via group policy after updating the printer drivers on the print server. On some Windows 7 workstations the drivers could be updated on a printer by right-clicking it --> ...
2
votes
0answers
27 views

What does SBS 2011 do “under the hood” when you give a user admin access?

I have been using Windows Server for many years now and when I have someone who needs local admin access over their machine, I apply it through group policy in a similar way to this answer. One of my ...
0
votes
0answers
28 views

Domain policy expiration doesn't match net user command

In Active Directory, we have recently changed our password policy. We had our users set to where their passwords would not expire previously. Now, we have set max password age in our domain policy ...
0
votes
0answers
28 views

IE11 & 2012R2 History GPO

probably a really simple one but I've not been able to find it. I am running a 2012R2/Win 8.1 environment and want to stop IE from storing any browsing history on a machine level. I've already set ...
0
votes
1answer
152 views

Want to be able to configure IE 11 group policy settings from Win 7 Client

I want to be able to configure IE 11 group policy settings from my Win 7 client. I have IE 11 installed on this client. The client has been joined to a mixed Windows Server 2003/2008R2 domain. When I ...
1
vote
1answer
388 views

Apply group policy to specific users (in an OU) on specific computers (not in an OU)

This has been bugging me for a while. Here's the setup: We have ~20 Win2k8r2 servers. They are separated into various OUs that I can't change. I have created a security group "DevHostsSG" that ...
0
votes
0answers
83 views

Turn system icons off with GPO or Registry

I need to turn off "Input Indicator" on the taskbar with a GPO or a Registry setting (which will turn into a GPO). It took me quite a while to figure out how to do it in Control Panel, now I have to ...
2
votes
1answer
3k views

How do you manage “network locations” through domain group policies?

I know how to map network drives through GPOs, but I would like to map a "network location": I know how to add those on the workstation itself through Windows Explorer: But I don't know how to ...
2
votes
2answers
12k views

IE Setting in group policy — Disable automatically detect setting in LAN Settings

have been trying to hunt this down for weeks with no luck. i need a way to disable a setting.. in IE. Tools > Connections > Lan Setting i need to uncheck "automatically detect settings" does ...
0
votes
3answers
553 views

RSOP resolves wrong computer name

I have imaged a computer using Acronis Snap Deploy. The source computer from where the image have been taken is SOURCEW7, and the computer created with this image is W7TEST When I do a RSOP ...
0
votes
2answers
248 views

Software install GPO on server 2012 (not R2) is not being deployed to windows 8 and 8.1 clients but is being deployed to windows 7 clients

I am trying to deploy some management MSI files via GPO running on Server 2012 (not R2) and the GPOs aren't being deployed to the Windows 8 and 8.1 clients. However the GPO is is working fine to the ...
0
votes
1answer
1k views

Remove Server Manager and Powershell icons from the Taskbar

Up until recently we have had two Windows Server 2003 Domain Controllers and five Windows Server 2003 Terminal Servers. I'm in the process of upgrading the network and have recently replaced the DC's ...
1
vote
1answer
90 views

Addressing built-in groups and local policies in Windows independently of localized names

Recently I saw an application failing to do certain check/manipulation with built-in groups/local policies on localized version of Windows Server 2012 R2 (French, German). In localized versions of ...
2
votes
3answers
3k views

Samba3 GPO Alternative

Samba4 isn't ready for production so I'm stuck with Samba3 but I want GPOs for my Windows 7 clients. Is there a way to implement GPOs or something like it using Samba3 without resorting to manually ...