Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

1
vote
1answer
42 views

Upgrading from 2008 to R2 didn't update Group Policy Management

I recently updated our domain controllers from Windows Server 2008 to Windows Server 2008 R2. The main reason for this was group policy. We had machines in our domain that were 2008 R2 and the ...
1
vote
1answer
25 views

Single, parameterized GPO for managing group membership

We have a OU design in our domain in which each "system" (web services and similar) has it's own OU, under which is nested the servers and accounts that it uses: ... + System A + Servers ...
0
votes
2answers
142 views

GPO Policy 'Applied' but not taking effect unless gpupdate /force is run

I do not yet have a 2012 DC or a Win 8 machine to manage IE 10 / 11 settings via GPMC. So I have created a policy with a registry setting so that users in a specific OU get specific .PAC settings in ...
0
votes
1answer
41 views

Group policy redirection of 'recent items' to network share

Was tasked with finding a way to redirect a user's recent items to \[network share]\recent. Server 2008 GPME: User Configuration-Windows Settings-Folder Redirection doesn't have recent items as an ...
2
votes
1answer
82 views

Managing power options

For various reasons, we want our clients' computers to not sleep when on AC. We have been running the following script with moderate success: powercfg /change standby-timeout-ac 0 However, the ...
1
vote
1answer
34 views

Gpresult provides wrong output on vista machine regarding UAC settings

I have two workstations running Windows 7 Professional 64bit with SP1 and Windows Vista Business 32bit with SP2. Both are in the same OU and have a GPO linked named Hardening_Computers_Clients. This ...
4
votes
1answer
1k views

Is there a way to disable “check online for updates from windows update” in windows update settings?

I have configured WSUS server in order to preserve bandwith in the network wile keeping essential updates turned on using that WSUS. Intranet WSUS server pointing to client pc and other settings are ...
0
votes
1answer
2k views

GPOTool - Windows 2008R2

I am trying to troubleshoot some GPO issues and began using gpotool.exe to diagnose the issue. I got the tool from 2003 resource kit. Here is one of the first errors I am seeing: Policy ...
0
votes
0answers
342 views

Cannot enable more than 2 simultaneous Remote Desktop Connection

Windows Server 2012 is unable to allow more than 2 simultaneous Remote Desktop Connections: Instead of editing the group policy : "Limit Number of connections to 999999" Disabling "Restrict Remote ...
3
votes
4answers
22k views

Diagnosing why a Group Policy Object is inaccessible

I have a Windows Server 2003 domain. One of the Group Policy Objects appears as a linked item in an OU but all I can see if the Unique ID and that the Link Status is Enabled. There is a red minus icon ...
2
votes
3answers
4k views

Desktop Wallpaper through group policy for Windows 8 client

I Have Windows 2008R2 server with active directory. All client systems are Windows 8/8.1 Pro. I need to push corporate wallpaper through AD GPO on client system, I have created a shared folder on ...
2
votes
2answers
214 views

Troubleshooting Group Policies?

we built a plain Windows 2008 Server park a few months back, and set up a few Group Policies. Most of them seem to work fine, but once in a while I have the feeling that one or more have not been ...
2
votes
0answers
59 views

Do GPOs apply to interactive logon only?

I am trying to enable certificate autoenrollment and credential roaming through a GPO in an ADS domain (DCs are Windows Server 2008 R2). I can interactively log on as a newly created user (on a member ...
0
votes
1answer
372 views

Suppress pop up “This operation has been cancelled due to restrictions in effect on this computer”

I've implemented a new Group Policy infrastructure at a school. I'm at the final stages of tidy up before go live next week but there is one thing thats got me stuck. As expected I've locked the ...
1
vote
1answer
170 views

Group Policy Caching for Folder Redirection

I recently set up a new file share on a new server for Folder Redirection for a subset of our users. I robocopied the files, applied the policy last week, replacing the old policy, tested with a few ...
0
votes
1answer
114 views

Windows Server 2012 - GPO settings - Security Filtering and “Authenticated Users” confusion

So I want to add a GPO for a few computers at first then deploy this rule to all computers when everything is confirmed OK on the test systems. I am having troubles getting the GPO to deploy to only ...
0
votes
1answer
39 views

Prevent authentication from specific machines [duplicate]

I have two domains PRIMARY and DEV. These both contain matching service accounts for various applications. PRIMARY also contains user accounts We have a one way trust relationship such that DEV ...
4
votes
3answers
7k views

Install chrome extensions via GPO

I'm attepting to install the adblock chrome extension using Google's Chrome ADM's. User Configuration/Policies/Classic Administrative Templates/Google/Google Chrome/Extensions Configure the list of ...
2
votes
1answer
362 views

How to hide running logon scripts from users (.vbs) without using a wrapper script?

I have a GPO (configured with loopback replace) that runs a logon script (.vbs) and linked it to an OU containing a W2012R2 RDS host. I have made these (question related) changes to the policy: ...
0
votes
3answers
3k views

GPO Printer Deployment Ordering greyed out

I have two Windows 2008 Data Centre Domain Controllers, which are used for a single domain. I applied a GPO for an OU. Rules are definitely working. Printer deployment rules are set in "User ...
3
votes
1answer
140 views

How to remove a GPO setting that used a custom ADM

I'm trying to deal with some legacy group policies that applied registry settings using ADM files. I'd like to remove these registry settings and set them up as group policy preferences, but how do I ...
6
votes
1answer
4k views

Password Authentication Fails - NTLMv2

Environment: Windows 2000 sp4 EDIT: Domain Controller with no trust setup with the Win2008 Server Windows XP machines Windows 2008 Server Netapp NAS Problem: We have a shared folder that resides ...
2
votes
2answers
145 views

How do I use PowerShell GPO cmdlets to set up file security?

I need to automate the creation several security groups, then create and apply a GPO that includes OU / Security group specific file permissions and auditing. I have the OU and group creation done. ...
1
vote
0answers
138 views

Various printer deployment issue with Server 2012 R2

I have just set up a new remote desktop infrastructure, with all servers being built on Server 2012 R2. I have 7 session hosts, and a central file/print server. On the print server, I have added ...
3
votes
1answer
416 views

Group Policy Preferences - Registry: 0x80070005 Access is denied

I have created a GPO to apply several registry keys to a Windows Server 2008 R2 machine in my lab. The relevant keys are within HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Internet and I have therefor ...
3
votes
3answers
2k views

Use Script To Edit Local Group Policy Windows Server 2012

I'm hardening a Windows Server 2012 R2 machine for serving secure web pages and following a guide that lays out multiple Local Group Policy Settings and Registry Settings. When researching how to ...
1
vote
0answers
84 views

Microsoft Server 2012r2 GPO templates

I have a question to ask regarding Windows Server 2012 R2, but before I ask let me give you some details about our environment. We have a single forest, with a single domain, and our functional ...
-2
votes
1answer
60 views

How to add bunch of admin accounts to 20 Windows 2012 servers

Is there a quick way to add bunch of admin accounts to 20+ Windows 2012 servers? It would be way too cumbersome to rdp to each server and add accounts to the local admin group.
2
votes
1answer
2k views

Edit “Remote Desktop Users” through group policy

I have a number of Windows 2003 and 2008 servers on a domain. I want to enable remote Desktop and control the group that has remote desktop rights (NOT terminal services) but I can't figure out how ...
3
votes
2answers
4k views

Group Policy settings for Event Logs

On a Windows Server 2008 R2 Standard Edition Domain Controller, with Windows 7 and Windows XP clients, is it "OK" to keep the setting below for Event Log files? And which setting will apply? ...
0
votes
1answer
337 views

Windows XP Clients cannot access \\domain.local\SYSVOL share on 2012 R2 Domain Controllers

We've recently promoted 3 new 2012 R2 domain controllers and still have 1 2003 domain controller on the network, which we're planning on demoting in the next week or two. We seem to be having a ...
0
votes
0answers
34 views

Terminal Session Targeting by IP Range broken

We have a group policy preference to connect terminal server users to the printers at their site with Terminal Session Targeting for an IP address range. It works well for users that use the IGEL thin ...
5
votes
2answers
7k views

Hide Network Icon in File Explorer on Server 2012

How can I hide the network icon within Windows Explorer in Windows Server 2012, via group policy? I can do this on 2008R2 using the Windows Explorer "Extra's" settings, but no such setting exists for ...
0
votes
0answers
52 views

Win7 Desktops secpol and local security policy not showing auditing

I have a Server 2008 R2 and Windows 7 Desktops where I have a Server 2008 GPO to Audit Events on the server and desktops, however at the desktops locally auditing is greyed out and displaying ‘no ...
0
votes
0answers
56 views

Folder Redirection Server 2003 Redirect to the local userprofile location does not work on some files on some computers

Was using GP Folder Redirection for three years on AppData, Desktop, and My Documents folders. Worked with no problems. Redirect location was \Server1\Redirect. Needed to move files back to ...
2
votes
1answer
17k views

Group Policy Internet Explorer default security settings?

Since re-installing our Domain Controller (Windows Server 2008R2) and re-creating all of our group policies I have stumbled across an strange issue. When a user logs in and goes no the internet, ...
0
votes
3answers
4k views

Security Tab missing on internet explorer

I have a windows 2003 SBS domain, which I administrate to the best of my limited abilities. I need to install an active X-control for which I must change settings in internet explorer. It surfaced ...
3
votes
2answers
239 views

Windows default sound scheme using GPO

We have 50 windows 7 clinet computers in an AD OU for which we need to change Windows Default Sound Scheme to None. How this could be accomplished using AD group policy?
1
vote
2answers
37 views

View GPOs applied to a specific security group

A group was created in the Active Directory Users and Computers to give local admin rights to certain users on our domain. After taking over management of this system from a previous employee I am ...
1
vote
0answers
62 views

Remote Desktop Server: Restrict drive redirection on per user basis?

For a Remote Desktop Server, drive redirection can be controlled via Group Policy. Unfortunately, this is a computer configuration, so it will either apply to all users or none. Is there a ...
20
votes
3answers
11k views

What is Group Policy and how does it work?

This is a Canonical Question about Active Directory Group Policy Basics What is Group Policy? How does it work and why should I use it? Note: This is a Question & Answer to new ...
1
vote
0answers
14 views

connections blocked to remote computer while no user logged on windows 7

A have a bunch of computers, all in the same OU, that are not contactable over the LAN (no pinging, no c$, no computer management, no SCCM connection) while the computer is not being used. The ...
18
votes
1answer
1k views

How to time-bomb a GPO?

I am doing a lot of work in higher education where it is a rather common requirement to reconfigure a number of Windows domain members (e.g. PCs in a classroom) for the duration of a specific course ...
2
votes
1answer
328 views

Disabling the prompt to “Click Continue to permanently get access to this folder” (e.g. via GPO)

http://support.microsoft.com/en-us/kb/950934 describes the manner in which, when a member of the Administrators group uses Explorer to navigate to a folder to which the Administrators group has ...
1
vote
0answers
44 views

Windows Servers Deny Remote Creditials

Here's the layout: -Four domain controllers(2003 & 2008) -Windows Servers (2003 & 2008) -The PDC is Windows 2008 and there are some GPOs -All servers ping, no firewalls, no major or much ...
0
votes
1answer
52 views
1
vote
1answer
41 views

Will Microsoft Disable Group Policy on an Unsupported OS?

While researching Group Policy settings for Windows Update on this TechNet library page, I ran across this worrisome statement describing what OSes the settings are supported on: Supported on: ...
3
votes
2answers
629 views

GPO option for “Show Desktop Icons”?

Is there a GPO setting (Server 2008 R2 domain) that we can use to set the following desktop property? View > Show Desktop Icons
2
votes
1answer
1k views

Is there a way to setup .net trust in Group policy?

We are using roaming profiles where our settings are stored on a mapped drive. Is there a way for me to set .net to trust this user profile path in group policy?
8
votes
7answers
8k views

Locked myself out of Group Policy Editor

I set 'only allow certain applications' restrictions and accidentally applied them across the board to all accounts. Now I'm restricted to only running a browser and can't run the group policy editor! ...