Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

1
vote
1answer
787 views

How do I whitelist Firefox installations from my Cryptolocker SRP GPO?

I've a GPO setup to try and prevent Cryptolocker from infecting systems in our environment. The below software restrictions are in place: %AppData%\*.exe %AppData%\*\*.exe ...
2
votes
1answer
3k views

FirefoxADM not applying settings - Using Group Policy

I've followed the deployment instructions on: http://homepages.ed.ac.uk/mcs/FirefoxADM/ADM_Deploy.pdf I've applied some settings to a GPO: However, When I do GPUPDATE, log out, log back in, nothing ...
0
votes
1answer
60 views

Windows Remote Desktop: Different configurations based on location

Is it possible to set up remote desktop (via group policy or another method) so that it has different settings based on where the user is connecting to the session from? In my scenario, I'd like to ...
2
votes
2answers
67 views

Can I use GPMC to edit a local policy?

I might be overlooking something obvious here, but can I use the Group Policy Management Console on Windows Server to edit a local policy? When I launch it I get a message saying that the machine ...
0
votes
0answers
48 views

GPO: Is there a way to apply NTFS permissions dynamically?

I would like to create a GPO that sets NTFS permissions on a set of folders and files. Computer Configuration => Policies => Windows Settings => Security Settings => File System and ...
2
votes
1answer
397 views

Set Document Mode for Website We Don't Control

There is a site developed by Oracle and hosted at our parent company that users at our company need access to. This site only renders properly if the Document Mode is set to IE8. Our users have ...
9
votes
7answers
26k views

Disabling IE add-ons and toolbars with Group Policy?

I'd love to have the peace of mind of knowing that none of my desktops have toolbars, "browser helpers" or any other crap like that running. Has anybody done this successfully with Group Policy? I ...
0
votes
3answers
2k views

Folder redirect policy does not apply to one user

I'm running Windows Server 2008 R2, my station runs Windows 7. while defining folder redirection policy (and others) I find that the redirection does not apply (or appear) in rsop.msc checkout. ...
1
vote
2answers
60 views

Installation of software on distributed laptops

We have company issued laptops distributed to our employees. Most employees keep these at home for working remotely. We want to install some remote management software on the machines, but the users ...
0
votes
3answers
107 views

GPO - Software restriction policy

I was trying to set up GPO - Software restriction policy, so i created the object on our Domain Controller. Fast forward the next day, everybody who turned off their systems at night could not login ...
8
votes
1answer
594 views

Everything says Applocker is supposed to work: Why doesn't it?

I've setup a basic group policy consisting of the default Applocker rules. Per Microsoft's technet article on the subject, any files not explicitly allowed to run by the policy are supposed to be ...
0
votes
1answer
31 views

Group policy access with active directory

Under Active Directory (Win2008-R2), I want all "authenticated users" be able to access the "Add/Remove windows components" menu But where do I have to go in group policy to set this grant ? In ...
0
votes
1answer
39 views

How can I disable Office 2007 online help function using GPOs?

As the title says: How can I disable the online help function in Office 2007 using a group policy? I just can't find a relevant setting within the administrative templates.
0
votes
1answer
43 views

Cannot unblock IE9 installation after GPO blocker kit

I need to unblock the installation of Internet Explorer 9, after using the Internet Explorer 9 Blocker Toolkit in a GPO. In a way the unblocking does work, after disabling it in the GPO, but the ...
7
votes
0answers
3k views

Prevent IE10 from creating WebCache through Group Policy

IE10 implemented the WebCache which appears to be the new way of doing Temporary Internet Files. The location of this is C:\Users\\AppData\Local\Microsoft\Windows\WebCache In my situation we have a ...
5
votes
2answers
2k views

How to circumvent or alter screen timeout group policy when not on the domain?

I've been asked to look into a solution for our remote laptop users who are trying to give presentations in Powerpoint and Excel when at customer sites. We are running a Server 2008 /Win 7 ...
0
votes
2answers
25 views

Preventing windows from reconfiguring graphics on boot

Got a bunch of Windows boxes, each with two nvidia video cards, and each with either three or four monitors, that will every once in a while decide to rearrange the displays when the box is turned on. ...
1
vote
1answer
103 views

Loopback Processing Behavior - XP vs. Win7

Does Windows XP treat loopback processing differently than Windows 7? I have 4 various screen saver timeout GPOs (1 hour, 4 hour, disable, etc.) and they are set up the same way the answer in this ...
0
votes
1answer
327 views

Disable USB mass storage access on client machines

This might not be a new question for this forum but for me it is very critical. I am having a network of 10 PCs, one is having Windows Server 2012 and Others having Windows 7/Windows 8.1. The server ...
5
votes
3answers
2k views

Drive Mapping Through Group Preferences

My department is currently transitioning our servers to Server 2008R2 and we are looking into using Group Preferences to map network drives. Our users currently have a personal network drive and at ...
1
vote
1answer
68 views

Complex Group Policy Inheritance

I'm currently trying to design the OU and Group design for a new AD deployment. Firstly, taxonomy is hard. As a first guess attempt, we're trying to keep all User objects together in OU=Users, and ...
4
votes
2answers
102 views

OK to modify HKLM\Software\Policies and HKCU\SOFTWARE\Policies on a domain?

Background: I have a domain (2003 Functional Level) with a mix of Windows XP and Windows 7 clients. We have been using Group Policy to manage our workstations. Now, I am in a situation I need to ...
10
votes
3answers
583 views

Deploying Printers via GPO/GPP - is there a programmatic option?

For reasons beyond my control, I've been tasked with setting up GPO/GPPs to deploy our 100+ printers to our 1000+ clients. The good news is that we have over a dozen sites, and for the most part, I'm ...
0
votes
2answers
58 views

Server 2008 Terminal Server + Outlook 2007. I need to change the default font used in Outlook

Server 2008 used as terminal server with Office 2007 installed. I've been asked to deploy a GPO to make the default font used Veranda 11 for all Office Suite applications. I've been doing some ...
3
votes
1answer
78 views

“Deny Logon Locally” effects

I'm planning to harden my AD-based infrastructure. One privilege that I'm planning to limit is the "local logon" privilege. Now, if I push "Deny Logon Locally" through GPO, besides preventing ...
0
votes
0answers
23 views

Advanced Windows Firewall - Strange logging behavior

I have created a GPO that set's several firewall rules to Windows Server 2008 R2 machines within a specific OU. The default behavior is set to block on inbound and outbound on all profiles. Also I did ...
1
vote
1answer
284 views

Lock down a Windows 7 computer via GPO

I have a client who needs 3 systems locked down to only allow a user to log in and have access to 3 shortcuts on their desktop. These shortcuts are to batch files that run in separate folders (DOS ...
11
votes
2answers
10k views

How can I manipulate Windows 7 Libraries via Group Policy?

I'm trying to add and remove Library locations from Windows 7's "Library" locations in for each of my users. While its easy to do this from the desktop, and its easy to disable libraries appearing ...
0
votes
0answers
171 views

Always Allow Windows Media Player in Internet Explorer - Group Policy

I am wanting to always allow the Windows Media Player add on for internet explorer to run without asking on all computers in my domain. We have a software client that sends sounds via internet ...
4
votes
2answers
456 views

GPO - Set Desktop Background But allow users to change

We have a policy setup to use an image for our desktop background, this works, however we have decided that by default this should be the setting but if the user wants to change it then they can, ...
0
votes
0answers
192 views

SBS 2011 Group policy won't update/apply properly

i'm running SBS 2011 on a dell poweredge t110 II, and recently i've found that i am unable to apply/update group policies. I get the following error: The processing of Group Policy failed. Windows ...
1
vote
1answer
75 views

How can I either through vbscript or GPO push a Windows 7 Logon Screen to all my users

I know how to change the login screen, it's easy. But I would like to figure out a way to do it through GPO or login script. I have tried running the script as the computer start-up script as well as ...
-3
votes
1answer
57 views

Windows Server 2012: use GPO in multiple OU's but only for specific servers

sample: OU: A User1 User2 GPO1 OU: B User 3 User 4 GPO1 OU: C Server1 Server2 Server3 Now i want to restrict GPO1 to Server1 and Server2 -> how can i do this in a easy/smart way? thx
0
votes
1answer
50 views

Why does GPO for firewall inbound connections still allows change from “Block (Default)” to “Block all connections”

I found an interesting issue where I set a GPO to control the firewall policy to "Block (default)" the inbound connections, however that setting is not completely enforced. It still allows an ...
3
votes
1answer
33 views

Limit access to local data and applications while accessing the desktop remotely

We need to access client systems (desktops) remotely to do routine troubleshooting activities, however this isn't a very secure method to do as it exposes the local data to support personnel. Also, ...
1
vote
1answer
177 views

When is a user considered “Everyone” in the “Access this computer from the network” policy

I am a bit puzzled by the existance of the "Everyone" group in this policy. Per http://technet.microsoft.com/en-us/magazine/dd637754.aspx: The Everyone identity All interactive, network, dial-up, ...
0
votes
1answer
42 views

Windows Startup and Logon scripts proper permissions

I'd like to know what the appropriate permissions should be for Startup and Logon scripts that run for everyone. Should Startup scripts have System read and execute permissions and Logon scripts read ...
1
vote
2answers
219 views

Controlling updates for Google Chrome enterprise deployment

We have been using Chrome's MSI and chrome's group policy templates to deploy it to all our users. Lately we have been bitten by a few bugs that made it into release updates. The latest being scroll ...
1
vote
1answer
37 views

GPOs do not apply when logging into Windows 7 via RDP

I am developing a set of GPOs which that I've applied to an OU containing some Windows 7 x64 computers. loopback processing is enabled of course. This computers are located in a different room so i ...
2
votes
1answer
611 views

Company Wide Windows Auth with Chrome and Firefox

I know that we can allow Firefox to allow passing through of Windows credentials by editing the following about:config settings --If using Kerberos-- network.negotiate-auth.trusted-uris ...
1
vote
3answers
225 views

GPO Replication SysVol Inaccessible on Windows Server 2003

In our current AD setup, we have the following Domain Controllers: DC1: Server 2012 R2, Operations Master (All roles) DC2: Server 2012 R2 Mailserver1: Server 2003, Also hosts Exchange 2007 The ...
15
votes
4answers
775 views

What can be done to properly re-enable the Windows Firewall on a domain?

BACKGROUND/RESEARCH I honestly believe that questions like this one: Using GPO in Active Directory domain to force workstations Windows Firewall to disabled - how? existed because Windows Admins in ...
2
votes
1answer
188 views

Practical Limits of Configuring WLAN SSIDs via Group Policy on Windows 7

Is there a practical limit to the number of SSIDs that can be configured on a single WLAN profile via Group Policy on Windows 7? I am thinking about hundreds of SSIDs in a single WLAN profile. ...
1
vote
1answer
33 views

GPO with Auto Updates Disabled Updates only from WSUS

I currently have an environment with Windows 7 and a GPO in place where automatic updates are completely disabled and can't be installed. I would like to have it set where the updates are only ...
1
vote
2answers
39 views

gpo set to disabled but still applied

I set the 'prohibit access to properties of a LAN connection' to 'disabled.' After forcing, I confirmed they were not applied by running a gpresult. Now I realize that there are instances where ...
1
vote
0answers
70 views

Server 2003R2 DC Windows 7 and disable auto updates

I run an environment with Server 2003 R2 DC's and mostly WIndows 7 clients with just a few XP clients. The problem I am having is that the Windows 7 PC's are installing updates on their own. We have ...
1
vote
0answers
84 views

GPP Delete policy not working on Windows Server 2008 R2 RDS when deleting shared printee

I have one AD Security group for each shared printer, I have one GPP that map the printer if the user is in the security group that belong to the printer. And one GPP to delete the printer if the user ...
1
vote
2answers
176 views

Win7 ignores Firewall for RemoteDesktop via GPO

Windows 7 ignores the firewall rule from Group Policy, that should restrict RemoteDesktop to certain IP addresses. It works for XP, but Win7 machines still allow Remote Desktop from everywhere. I ...
0
votes
0answers
84 views

Best way to enforce Bluetooth encryption/security on Windows 7 workstations?

My organization doesn't currently allow Bluetooth devices of any kind, even going so far as to totally remove the Bluetooth stack from many of our OS images. This stance is being re-evaluated, but ...
5
votes
2answers
445 views

Will GPO Software Installation re-install already installed applications from a different policy?

I'm looking to install our latest AV suite through a GPO Software Installation policy. (As in the below screenclip.) Unfortunately my request to use DFS has been denied and I'll need to create a ...