Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

1
vote
1answer
54 views

How can I remove the minimum password length for a specified user in an OU?

How can I remove the minimum password length for a specified user in an OU? (I do not want the default domain password policy affecting my GPO.) When the "minimum password length" in my default ...
0
votes
2answers
4k views

GPO for drive mapping won't work with %LogonUser% in location field

I'm struggling with a problematic drive mapping user preference where I'm trying to use the user's %LogonUser% variable to a network location (eg. \server\folder\users\%LogonUser%), but the drive ...
0
votes
1answer
18 views

Default mail registry

I'm deploying Win 8.1 via. SCCM with Office 2013 pre installed. I got an issue where even though Outlook 2013 is the default mail. the specific value mail:to (opening a direct mail link) .. attempts ...
0
votes
2answers
121 views

editing local group policy for all domain computers

I'm stumped on a strange group policy issue. I know that Domain GPO should take authority over local group policy settings, but lately i've been having an issue and I can't think of anything else it ...
1
vote
2answers
64 views

GPO to map drives conditionally

We have a file server that is sharing out user drives from //server/user$. We also have webDav enabled so it can be access externally by https://fileserver.company.com/user. My challenge is to map ...
5
votes
1answer
270 views

Drive mapping maps two different folders for elevated and non-elevated programs

I have a Windows 2012 Domain with a couple of Windows 8 x64 Enterprise members. I want to use Group Policies to map a drive X: to a folder on a file server. The drive X: should be available on the ...
0
votes
0answers
207 views

Task scheduler VS GPO do not allow storage of password

I have a scheduled task in one of my DC, running to check LastLogon date of AD accounts in each DCs everyday. The task was previously running in a Win 2003 DC without problem but now we are going to ...
0
votes
0answers
23 views

Windows SRV2012 : gpEvent_NO_NETWORK

For an unknow reason, a computer on my Active Directory domain display an error when I try to execute the gpudate ( and gpupdate /force ) command as Administrator. The domain controler and the ...
0
votes
1answer
29 views

Group policy issue: when I'd like to write a compact disk

I couldn't write compact disk in any machines in our local domain even if I set the deny write cd feature to Not Configured or disable. Every PCs have windows 7 and our server is windows server ...
0
votes
0answers
71 views

In Group Policy how do I remove Shortcuts from My Network Places

I have found that in Group Policy I can add a shortcut to My Network Places under User Configuration > Preferences > Windows Settings > Shortcuts and create a shortcut as File System ...
1
vote
3answers
782 views

GPO or logon scripts to remove access to public “libraries” folders

I have two Windows 2012 R2 Domain Controllers and will be implementing 7 Windows 2008 R2 remote desktop servers once their setup and testing is complete (I have one built now that is my test server). ...
-3
votes
3answers
2k views

Automate RDP and VPN deployment windows server 2008

My current network is a mix of XP and Windows 7 machines with a Server 2008 primary domain controller. As it stands now, when we have new laptops come in we need to manually add in two RDP links and a ...
2
votes
2answers
4k views

How do you add a site to the Internet Explorer Trusted Zone through GPO in server 2003?

How do you add a site to the Internet Explorer Trusted Zones through GPO in server 2003? If you do push a site through a GPO does it erase other Trusted Sites that may have been entered on the end ...
0
votes
1answer
66 views

Bitlocker Group Policy for Windows 8.1 and Windows Server 2008 R2

it seems when I try to encrypt my hard drive on Windows 8.1, I get this error: When I check the Group Policy settings on the server, that's what we have, although, it says it's only compatible with ...
1
vote
1answer
60 views

Cross-Domain / Cross-Forest Group Policies

Our company has a domain forest with two domains (domain.EMEA and domain.GLOBAL) We previously acquired a company (domain.LOCAL) and all the workstations at this site are members of domain.LOCAL, but ...
1
vote
2answers
316 views

Pass unlock credentials to powershell script

I have a powershell script that is run as a scheduled task and is triggered to run "On workstation unlock". The script is programmed to reconnect an SSTP VPN connection if the connection becomes ...
1
vote
4answers
2k views

Shutdown clients when no one is logged in at a specified time

At our company, the people stop working at 7PM. At 8PM we run a scheduled task with GPO to warn the logged-in user that the computer is going to shutdown. This works fine. When no one is logged-in ...
1
vote
1answer
54 views

Group Policy to set desktop background to say machine name

Is there a way to easily set in group policy for each of the machines in our domain to say the machine name on the desktop background? Our users log into multiple machines in a day and tend to get ...
-1
votes
1answer
83 views

GPO edit mess , system error

I messed around with a GPO editing tool in order to implement "hide computer drives" policy on windows 2003 server. Since then I got a system error on my events log to say : Windows cannot access the ...
1
vote
5answers
2k views

Server 2012 GPO: PowerShell Script on Computer Startup not running

I've got a couple of Server 2012 instances on Amazon EC2 and I'm in the process of setting up the GPOs. All of the settings of the GPOs are being applied fine, except none of the PowerShell scripts ...
1
vote
0answers
83 views

How to allow permission via GPO to remove bluetooth devices in Windows 7

We have 'Standard' users who test Bluetooth devices. This involves pairing them to a Windows 7 machine. Unfortunately, each device adds a unique entry to the "Devices and Printers" which 'Standard' ...
1
vote
1answer
39 views

Need clearer instructions on using .admx group policy templates

I have a Windows Server 2008 domain controller running group policy for our domain. Recently we started adding some Windows Server 2012 servers to the domain and some of the group policy settings do ...
2
votes
1answer
464 views

Remote Computer Management from Active Directory Snap-In fails with DCOM error 10006

So here's a little background. Our system originally started with Windows Server 2003 machines and eventually over time expanded and grew. We still have a few Server 2003's but they're being removed. ...
1
vote
2answers
1k views

Proxy Settings per Machine not working on windows server 2008 R2 SP1

i have a very interesting problem and would appreciate any help for it. In my scenario i have scripts which bring up a VM inside a domain. Now i want to enable internet access for all the VM's and ...
0
votes
1answer
576 views

“Group policy client service failed. The logon access is denied” when copying roaming profiles to new server. (Samba)

We have perfectly working roaming profiles on Samba 3.3.10 (SuSE) with Windows 7 clients. We configured our new server with same domain name, Samba 4.1.11 (Debian). On the new server, for newly ...
-1
votes
1answer
111 views

Domain Policy - Windows Server 2012 R2 Essentials role

I have a Win 8.1 Workstation joinde in a Windows Server 2012 R2 Domain (Essentials role). When trying to save Remote Desktop credentials I got this message. Your system administrator does not ...
0
votes
3answers
5k views

Task Scheduler : Logon as Batch Job Rights

I'm trying to set up a scheduled task which will work under the Network Administrators account, whether the account is logged in or not (on a specificed computer) According to the Task Scheduler, I ...
0
votes
1answer
86 views

Disable secure logon for tablets connected to domain

I have a domain set up with Windows 2008 R2, and by default requires Ctrl + alt + del to unlock computers. I have been pulling my hair out trying to configure GPO so that tablets will not require Ctrl ...
0
votes
2answers
26k views

How do I import ADMX files for Microsoft Office 2013?

There is no ADM file (policy template) that I can find for MS Office 2013 so I can't figure out how to get the ADMX files imported to create GPOs. Any help would be greatly appreciated.
0
votes
1answer
389 views

Can't open Active Directory Users and Computers, Group Policy settings issues

In the past I've been able to open "Active Directory Users and Computers" to manage the users and computers on our Windows Server 2008 R2 box. We just recently made some changes to our Group Policy to ...
0
votes
0answers
341 views

Windows Server 2012 R2 Update Notification on login spash screen

we are have two load balanced svr 2012 R2 machines, front end netscaler, using citrix reciever to login. The issue i have is i cannot seem to disable the notifications when users are logging in that ...
2
votes
4answers
367 views

Difference between HKLM:\SOFTWARE\Policies\ and HKLM:\SYSTEM\CurrentControlSet\

What is the difference between editing settings in HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services and HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server? Similar settings seem to ...
1
vote
1answer
1k views

Drive mappings via group policy preferences are causing VERY slow logins for clients that are away from the domain

We've recently moved away from using a login script to map network shares and are now mapping via group policy preferences. This has been working great except I recently discovered that when our ...
1
vote
2answers
3k views

GPO: Add Specific items in 'All Programs' on the start menu?

Disabled all the items in the 'All Programs' via GPO using Windows Server 2012 I have set "Remove common program groups from Start Menu" to Enabled. Everything in 'All Programs' is now empty, how ...
2
votes
2answers
367 views

Group Policy to Place Shortcut on All Users Desktops

We're looking at using a GPO to put a shortcut to a company web app on all users' desktops. Different users are on different Windows versions, meaning the location varies: c:\documents and ...
2
votes
1answer
64 views

How to Automatically Tust Auto Enrolled Code Signing Certificates

In my organization all developers are setup to be granted a Code signing certificate via Auto Enrollment. Additionally, PowerShell is configured by group policy to require all scripts to be signed. ...
7
votes
2answers
425 views

Enable Certificate Enrollment Policy and Request a Cert using PowerShell

Right now, I'm doing the following to request a cert from a CEP server: Open gpedit.msc Under Computer Configuration > Windows Settings > Security Settings > Public Key Policies, double click ...
1
vote
1answer
58 views

Can GPO templates in Server 2012R2 manage Win8.1 Win10 & Server 2012R2?

We just upgraded our DC to server 2012 R2 and testing Win8.1 / Win10 / Server 2012R2 with it. Just wondering that if the native admin templates in 2012R2's GPO can manage all win8.1/Win10/2012r2? or ...
4
votes
2answers
221 views

Pin “Run” to taskbar through group policy

Is there are way to pin the "Run" button to taskbar through group policy or a script? Only the specific items needs to be pinned. The other items are not to be touched. Partial solutions I found on ...
0
votes
3answers
53 views

Active Directory Export GPO user

I would like to get in .csv (or any other readable format) all my AD users and the policies that they need to comply (the type of authentication each user needs, his event logging properties and even ...
2
votes
1answer
332 views

Provide a user with service start/stop permissions

I have a very basic domain that I use for development. I want to create a GPO that provides users in the Backup Operators group with start/stop permissions for two specific services on a specific ...
0
votes
1answer
62 views

Can I connect all the available network printers without using a logonscript?

In our organisation we have around 30 printers an we are currently connecting for the user all the printers using a logon script that calls the command line app con2prt for a series of printers. ...
1
vote
0answers
95 views

Add site to Internet Explorer Security Zone in GP without deleting all other settings

What I have figured out is this: GP: User Configuration -> Administrative Templates -> Internet Explorer -> Internet Control Panel -> Site to Zone Assignment list. If I enable it, and add a site ...
1
vote
1answer
2k views

Group Policy Preferences Printers Server 2008R2 Error 0x80070bc4 does not set default printer after a printer has been created

Alright after calling upon the almighty Google I have been unable to find a good solutions to this problem along with many other users. So I am turning to Server Fault for some support here. I am in ...
0
votes
0answers
46 views

Removable Storage User Configuration Group Policy not working when Windows Server 2008 R2 is used as a client

I have enabled read write restriction for a group of users, if a user from this group is to log onto a win 8.1 system or Windows 7 system and tries accessing a USB drive it says access is denied, ...
1
vote
1answer
123 views

Lockdown Mozilla Thunderbird on Windows Remote Desktop Services

I've installed Mozilla Thunderbird 31.3.0 on a Windows Server 2012 R2 which has the Remote Desktop Services role. I want to configure the Thunderbird program and set each user's email account etc and ...
3
votes
1answer
102 views

2008 GPO not replicating on 2012 server

I have a Windows Server 2012 system and the domain controller is running Windows Server 2008. The domain controller also hosts the domain group policy. Most of the settings have replicated to the ...
0
votes
1answer
4k views

Network drive map through GPO not working on Windows 2012 (Neither via logon script nor drive maps)

Although I though this would be easy I am unable to automatically connect to a network drive via GPO. I tried through a batch file on (User Configuration / Policies / Windows Settings / Script / ...
5
votes
2answers
321 views

Is there a way to tell how long a machine has been in an security group?

Machines get added to a security group to prevent them from getting a GPO. I'd like the machines to get removed after 30 days of being in the group. Ideally, I'd like to also be able to generate a ...
1
vote
1answer
107 views

Can't access share sometimes and some strange performance issues

I'm getting error 0x80070043 "The network name cannot be found" when accessing \\dc01 (the root), but can access shares via \\dc01\share. When I get that error I also didn't get the network drive on ...