Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
0answers
42 views

Group Policy Scheduled Task not asking for password

I'm trying to deploy a scheduled Task to our Servers via GPO, but something doesn't seem quite right. I want the Task to be run with a Service account, wheter the user is logged on or not. I know that ...
0
votes
0answers
185 views

Map Network Drive GPO not working on login

I have created a group policy which should map the network folder \\SHARED\data to drive letter H:. The policy is applied if I run gpupdate /force, but when I restart the computer and login, the ...
3
votes
1answer
3k views

GPO Rule of thumb for: Disabled vs Enabled vs Not Configured

Is there any documentation that explains difference between these: Policy Not Configured Policy Disabled Policy Enabled, Setting Enabled Policy Enabled, Setting Disabled Policy Enabled, Setting ...
2
votes
1answer
111 views

Remote Desktop: What is the difference between “Run these programs at logon” and “Start the following program on connection”?

My organization is running a Terminal Server Farm in order to provide a specific application to the users. The setup consists of a AD domain controller plus two Terminal Servers running the Remote ...
0
votes
3answers
55 views

Group Policy applied but Network Drive wont show up

Server 2012 DC + Server 2012 on the client side. I have the following group policy in place: The policy is applied when I run gpresult /r /scope computer: Yet the drive does not show up. Also ...
2
votes
0answers
42 views

group policy being applied from offsite Domain Controller: why?

Site 2: I have a small branch with 1 DC and 4 clients. Site 1: Meanwhile my main branch has 2 DCs and lots of clients. I made some GP changes on DC-site2, and I was wondering why they weren't ...
0
votes
0answers
12 views

Scanned Files from printer in Home folder Takes a while to apper - GPO issue?

I don't even know where to start with this. I recently setup home folders for those users that needed it. Then I used a GPO to created a subfolder in the home folder where our networked ...
2
votes
2answers
44 views

Limit programs based off group policy

What I'm attempting to accomplish is having certain executables allowed in a 2012 Active Directory environment based off of a group policy. I have 3 different types of users in my AD. Group A ...
0
votes
4answers
36 views

User Preference GPO on a specific set of computers

I hope you can help me with this situation: I’ve been asked to deploy a specific wallpaper to front office computers. I’m not allowed to move the users from the Users OU container. This means the GPO ...
0
votes
1answer
38 views

Configure Remote Desktop Desktop based on Group

I have a few different AD groups accessing the same remote desktop server (Windows Server 2008 R2) and I need to configure each desktop so that every user in the same group has the same icons appear ...
0
votes
0answers
10 views

excluding specific user from USB Access GPO only on specific computer

I have a small domain, and I want to restrict access to USB for all users except for a specific user when using a specific computer. In GPO there is setting in both "User Settings" and "Computer ...
3
votes
1answer
6k views

How to abort applying group policy when it is stuck for too long?

I had a problem with a Win2k8 Domain Controller and had to restart it. It restarted with no issues and reached the "PRESS CTRL + DEL TO LOGON" screen. And so I did a usual logon with an ...
0
votes
1answer
46 views

Remote Desktop Server does not update group policies

I have a domain with 4 Remote Desktop Servers running Win2k8 R2. If i change the GPO on my domain controller for the Remote Desktop Servers i am having some issues. After running: gpupdate /force ...
0
votes
1answer
117 views

How to disable integrated Windows authentication Internet Explorer in Group Policy Management on Windows Server 2012?

I'm wondering if it is possible to disable the integrated Windows authentication of Internet Explorer by using Group Policy Management on Windows Server 2012.
2
votes
0answers
26 views

WMI Query - First and Fourth IP octet

Is anyone aware of any WMI queries that could be used within group policy which only lists all IP address, which end in .200 and I have multiple sites, multiple networks, I only need to list the ...
0
votes
0answers
41 views

RDS - Change single click option is item via GPO or Registry

I have a problem on my servers RDS, my users can not change their themes windows, folder options and many more due to some GPO. However, in recent days there is a problem concerning the opening of ...
1
vote
1answer
45 views

Group Policy Printer Mapping: Some printers are being skipped

I have a Group Policy Object designed for users in a particular department which should delete all existing printer mappings, and then map all users to 9 different printers (all on the same server). ...
1
vote
1answer
93 views

Add Startup and shutdown scripts to Local Group Policy using Powershell

I am trying to automate adding startup and shutdown scripts to Local Group Policy (gpedit.msc). One solution is to write to registry directly as pointed out in ...
2
votes
1answer
144 views

Error denying permissions on GPO with Powershell

I was trying to find a way to set "Apply policy" to "Deny" for a certain group in several GPOs (about 50), so I was looking for a way to do it automatically, when I came across this post at an ...
0
votes
2answers
451 views

Group Policy to disable Printer Preferences

Can someone please advise on how we can disable users being able to open Printer Preferences on network printers that they have added to their computers? We have deployed around 100 new printers with ...
6
votes
2answers
4k views

How can I disable the “Do you want to allow this website to open a program on your computer?” warning for a specific program/moniker?

I've been playing with new URL monikers in Windows for a utility I'm working on. When I run the new URL from Start > Run, it just runs. If I send the URL to myself via Notes or enter it into the IE ...
0
votes
0answers
143 views

Delete User Profiles Older than a Specified Number of Days on System Restart, does not delete parent folder of profile

I have seen multiple question and answers in forum regarding this GPO to Delete User Profiles Older than a Specified Number of Days on System Restart not working or some hotfixes, in my environment it ...
3
votes
1answer
2k views

Group Policy to disable Thumbs.db caching Server 2012 and Windows 7 clients

We are trying to push out GPO to Windows 7 clients to disable Thumbs.db caching. The setting Turn off the caching of thumbnails in hidden thumbs.db files is found here: User Configuration > ...
0
votes
0answers
34 views

Not Updating Group Policy Changes

I have been working on updating my companies group policies and I have run into a problem with the user policy not applying correctly. Previously the old policy had a folder redirect for the desktop ...
1
vote
1answer
52 views

Using GPP to set local admins

Using Server 2012 r2 in domain environment, I'm trying to add specific groups of users to the Administrators(local)group to computers organized in OUs using GPP and item-level targeting. While the ...
0
votes
0answers
86 views

Devices and printers wrong icon and missing printer details from group policy

Situation In our environment we have a windows 2008 server with a group policy to deploy printers to Windows 7 and Windows 10 client computers. Problem Everything is working fine except that on the ...
3
votes
2answers
179 views

Not all printers are deployed on the client using Group Policy

Situation in our environment we are using the following servers to deploy printers in our domain forest: Windows Small Business Server 2008: contains the group policy to deploy the printers Windows ...
0
votes
0answers
20 views

Group policy file / folder deployment

I have a question in relation to file / folder deployment in group policy. I would like my deployment method of files / folders to fall into good practice standards. So essentially I have a public ...
1
vote
2answers
302 views

GPO - Software Restriction Policies - add exception

Windows Server 2012 R2 and GPO. I wanted to increase security so I blocked %AppData%\*.exe and %AppData%\*\*.exe Spotify stopped working of course. I created another rule ...
4
votes
3answers
1k views

Default Domain Policy Corrupted

It appears that our domain's default domain policy is corrupted. The GPT.ini file is corrupted. When I go to open it, I get an access denied error. I tried to take ownership through explorer, takeown, ...
2
votes
1answer
126 views

How to script a backup/restore of the Default Domain Policy to a reinstalled PDC

First I'll say that I've just now discovered that my practice of making changes directly to the Default Domain Policy isn't the recommended way of doing things. I admit I'm not sure why this is the ...
1
vote
0answers
1k views

Windows 7 Screen Saver timeout problems using GPO

In our Windows 2003 domain, we are enforcing screensavers with timeouts through GPO. The settings currently in effect are: Screen Saver = Enabled Screen Saver executable name = ...
1
vote
1answer
56 views

Mapped drives aren't syncing on workstations

It seems like a few workstations on our network aren't syncing with the mapped drives, pretty randomly, so for example, different users on the same computer would see different files on the mapped ...
-2
votes
1answer
42 views

GPO not removing from client

I have a windows 2012 server. And I have applied a setting using scheduler that, it will run an .exe file every one hour. After that, I have removed the policy from server. But the .exe file is still ...
0
votes
2answers
4k views

Samba4 domain controller, group policy processing fails, gpupdate fails

I'm using a Samba4 domain controller, and on the machines joined to the domain I'm seeing this message: The processing of Group Policy failed. Windows attempted to read the file ...
4
votes
0answers
70 views

Windows Server Clear on Logout Policy

I was wondering is it possible to create a policy on Windows Server 2008 R2 or 2012 that will clear everything (all files from desktop, documents, etc) once the user has logged out of the system? It ...
0
votes
3answers
127 views

Are incorrectly configured DNS servers the root cause of slow logins to the windows domain?

We have six AD Windows servers (I believe they are all 2008 R2, running at a functional 2008 R2 domain) All six servers have the AD role and DNS role. We have about 1200 workstations in our ...
0
votes
1answer
38 views

Windows - do not require password (GPO)

I'm setting up a small Active Directory installation for a company where they gave me the following requirement: While users should enter a password to logon in the morning, it is not required that ...
0
votes
0answers
17 views

Execute script/gpo via Microsoft VPN

I've put together a small script to install a piece of software that will help us in migrating to Office 365. It's successfully deployed to majority of the hard wired/wireless domain connected ...
5
votes
2answers
1k views

Users still get UAC prompt after allowing printer install and alter LAN connection by GPO?

I've implemented the following Group Policy settings to allow non-admins to install printer drivers and to enable / disable their wifi: User Configuration -> Administrative Templates -> Network ...
0
votes
0answers
113 views

Disable WiFi management on Windows 8 using Active Directory

We have a domain composed by a Windows Server 2012R2 that controls 40 laptop with Windows 8 connected via WiFi. Our goal is to prevent users to disconnect the wifi or, even worst, connect to other ...
0
votes
1answer
40 views

Group Policy Partially Applied

I am applying a Domain level group policy to all my machines including in Domain Controllers. The PDC is getting the policy correctly but the other domain controller is not showing the "Account ...
0
votes
1answer
34 views

domain controller naming group policy [closed]

i have two domain controller setup one on 192.168.1.10 companyname.local and 192.168.1.20 companyname.local as backup. i was task of rebuilding the backup and make it the main domain controller. i ...
0
votes
0answers
51 views

Cannot disable profile storage space error on windows 2000 domain

We have a client on a windows 2000 domain with approximately 22 servers and 30 workstations. This client is extremely out of date and we've been trying to bring them up to speed. Last week their ...
0
votes
1answer
83 views

Disable Removable Storage classes doesn't work via GPO on Windows 7

Could you please help me with very strange situation: Test environment: DC - Windows Server 2012R2, Workstation - Windows 7 Professional N SP1 Case: disable USB via Group Policy. Normally, I go to ...
-1
votes
1answer
9 views

Desktop redirected Icons

I need to set a static custom icon for a website's shortcut. The desktop is redirected on a server 2008 domain via GP. Need an easily recognizable icon for young children versus having Chrome or IE ...
3
votes
2answers
259 views

Apply GPO to single workgroup computer

I have a GPO I've exported from Group Policy Editor on a domain controller. Is there a way to apply this policy to a computer that isn't connected to a domain at all? Just a one-time application of ...
0
votes
2answers
242 views

a conflict with Internet Explorer kiosk mode and the Windows 10 taskbar

I have a silly little problem I'm trying to solve: I'm using Windows 10 Pro on an AD Domain. If I launch Internet Explorer in kiosk mode (%ProgramFiles%\Internet Explorer\iexplore.exe -k) either ...
1
vote
1answer
53 views

Configure Windows Firewall using GPO: Logging file path cannot be set

We are having a strange issue with Windows Firewall setting. The logging file path cannot be set. After I have enabled the Logging setting and click on OK to save the setting. When I open up logging ...
4
votes
0answers
76 views

How do companies handle the need for different Java requirements on the same user?

In our company, we use GPOs to push software updates such as Java updates. We have about 150 users in different offices located in different countries, all using Windows 7. We have a few ...