Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
1answer
77 views

How to completely reset Group Policy on a domain member?

We have a problem where domain members built from a certain Windows 8 image can no longer update Computer Group Policy. These domain member have recently been moved to a new Organisational Unit, but ...
0
votes
0answers
52 views

WMI filter working for some Windows 7 machines but not for others

I'm trying to use this WMI filter for our Windows 7 64bit machines: select * from Win32_OperatingSystem where (Caption like "Microsoft Windows 7%") or (Version like "6.1%" and ProductType = "1" and ...
2
votes
1answer
47 views

How do I restrict user log ins to only a specific set of computers

I want to restrict user admin access with regards to their department. I want to give access to users in Security Group A to computers in Security Group B and i want to create similar access for 9 ...
1
vote
1answer
233 views

Group Policy error 1006 with and error code 52

I have a hyper-v cluster operating on win2k8 R2 in a 2003 forest. These servers are at our NOC with a DC that connects to our PDC at HQ via a persistent VPN. The cluster boxes are reporting a error ...
3
votes
2answers
204 views

Domain Account Does Not Receive Proper Se Privledges from Group Policies

I am attempting to install software that requires SeBackupPrivilege, SeDebugPrivilege, and SeSecurityPrivilegebut I cannot seem to get my Domain Account to retrieve these specific privileges. I ...
-1
votes
1answer
127 views

how to prevent other computers from seeing our network computers through vpn

We have a local office domain consisting of Windows 7 and XP machines that is running on Windows Server 2008 R2. We also have users that connect via VPN into our network. My concern is that when a ...
1
vote
2answers
171 views

WSUS on Win2012R2 doesn't see Windows 8.1

WSUS on Win2012R2 doesn't see Windows 8.1. Both machines can ping each other. Computers are assigned to WSUS by: 'Use Group Policy or registry settings on computers' Local GPO on Win8.1 is set as ...
4
votes
2answers
346 views

Complete Active Directory redesign and GPO application

after much testing and hundreds of tries and hours invested I decided to consult you experts here. Overview: I want to apply some GPO to our users which will add some specific site to the Trusted ...
0
votes
2answers
6k views

Show Mail Control Panel item from Outlook 2010 (32-bit)on Windows 2008R2 Terminal Server

Hi I try to show the Mail Control Panel item in Windows 2008 R2. I only type the Name "Mail" in to the "Show only specified Contol Panel items Properties" in the Group Policy. In Windows 2008 R2 that ...
0
votes
2answers
1k views

I have a Windows 2008 R2 Amazon EC2 server, it can't ls via ftp client, what do I have to do to fix that?

I have a Windows 2008 R2 Amazon EC2 and it needs to download a file from an external server via ftp. The file name is different everyday so I have to ls and then get the newest file. ls fails: ...
1
vote
1answer
33 views

Restict Internet Connection Except using Proxy

Given (as-is) A router with DHCP enabled An Active Directory Server Two Windows 7 clients joined the domain Planning (to-be) A proxy server Two clients are set to restrict internet connection ...
0
votes
2answers
82 views

Group Policy - Backup and Restore

I am currently automating the creation of our enterprise domain controller and its configuration in case of SAN failure etc. I can create the server, install the necessary roles, create complete ou ...
2
votes
2answers
385 views

Apply GPO to user AD group when using computers in a certain OU

We have a logon-script that copies a number of remoteapp.rdp-files to some users desktops. However these users sometimes also has to connect directly to our terminal server through a remote desktop ...
1
vote
2answers
2k views

Group policy logon script copies files to client PC but does not execute exe

We are trying to copy 3 files from our domain controller to a user PC and have it execute from a .bat file when a user logs in via Active Directory. When we associate the .bat file to a user in AD ...
2
votes
1answer
106 views

How do I properly configure Internet Explorer Connection Settings via Group Policy?

I've configured the location of our automatic configuration script under "User Configuration > Preferences > Control Panel Settings > Internet Settings > Internet Explorer 8 > Connections > LAN ...
1
vote
1answer
361 views

Use Roaming Profiles as Default in AD (running Samba)

I've just set up an Active Directory Domain Controller (running Samba 4), created users, shares, groups, etc and everything is working. However, I have an environment where the use of roaming ...
0
votes
1answer
30 views

Combining DWORD Values

I'm trying to permit automatic silent install of some internal ActiveX controls using AXIS, as per this Microsoft article. In the article, it states that you can define how HTTPS exceptions are ...
2
votes
1answer
523 views

Advanced Audit Policy not getting applied on 2012 R2

I have configured several avanced audit policy settings under: Computer Configuration => Policies => Windows Settings => Security Settings => Advanced Audit policy Configuration => ...
3
votes
4answers
2k views

802.1x PEAP GPO that trusts self-signed CA certificate

I am working on a Freeradius backed 802.1.x authentication infrastructure for our wireless clients. I am using a rather generic Freeradius configuration with EAP-PEAP. Our clients are predominantly ...
2
votes
0answers
44 views

Can't Access Computer Configuration > Preferences or user configuration > Preferences

After creating a new GPO in Windows Server 2008R2 Right click Edit on the newly created GPO Group policy Management Editor opens Clicking on Preferences shows this popup error After Clicking ok ...
4
votes
1answer
56 views

How to dump(collect) all the group policies in a domain?

I want to collect all the GPOs in a domain , for reviewing settings. How many ways are there to do it. I used Get-GPOREPORT in Powershell, but it gave a comprehensive html file, is these a way to ...
0
votes
0answers
2k views

GPO Run these programs at user logon not taking effect

When on our W2k8-R2 DC I create a new GPO and configure "Computer Configuration/Policies/Windows Settings/Administrative Templates/System/Logon/run these programs at user logon" to ...
3
votes
1answer
168 views

How can I pin an Internet Explorer URL shortcut or favorite to the Start screen with Group Policy in Windows 8.1?

I created my Start UI like I want and used this PowerShell cmdlet to create the .xml file for a user's default layout: export-startlayout –path <path><file name>.xml -as xml ...
4
votes
1answer
179 views

How to define the built-in administrators group in a group-policy object?

How do I define the built-in administrators group in a group policy? For example Computer Configuration => Policies => Windows Settings => Security Options => Local Policies => User ...
2
votes
1answer
1k views

Windows 7 UAC - Local Administrator and Secpol.msc

I am trying to change my group policy settings temporarily to disable completely UAC. I have local admin rights on my machine, however the UAC options in Secpol.msc are disabled. Any ideas?
0
votes
0answers
153 views

Remote desktop instant logoff on disconnect?

I'm having a weird quirk on a Windows 8.1 VM that I'm using as a public-facing Remote Desktop slave, in that upon a client disconnect, the sessions is immediately logged off. This occurs ...
1
vote
0answers
68 views

CIS benchmark: How to define the BUILTIN\Administrator account within GPOs?

I am responsible for configuring GPOs according to the latest CIS benchmark policy. However the test for "Impersonate a client after authentication" always fails, although everything seems to be ...
4
votes
1answer
2k views

Hide Network Icon in File Explorer on Server 2012

How can I hide the network icon within Windows Explorer in Windows Server 2012, via group policy? I can do this on 2008R2 using the Windows Explorer "Extra's" settings, but no such setting exists for ...
1
vote
1answer
1k views

Add generic credential using group policy?

In Windows 7, if I go to control panel > user accounts > user account > manage your credentials, there are credentials saved for the local user. Is there a way to add a generic credential ...
0
votes
1answer
187 views

Screensaver startup script (batch or reg) GPO, silent install

I have an application, which after it disconnects from a VPN connection, resets the screensaver settings. What I'd like to do is create a GPO script or batch file to run every time the user logs into ...
0
votes
3answers
675 views

GPO Troubleshooting - Security Filtering - Computer Configuration

We have a GPO that includes a Computer Configuration that enables a Preference that adds a security group to the local Administrators group. Since this is a Computer Configuration, do you need to add ...
0
votes
1answer
67 views

Creating batch files from txt files - is this right?

Forgive me if I am completely of the rails here, but.... I am just learning about Group Policies and Domain Controllers etc. and I have a some .bat files, now I can edit them in notepad or any text ...
0
votes
2answers
680 views

Excluding a specific machine from Group Policy - Server Essentials 2012

Server OS: Server Essentials 2012 Client OS Windows 8.1 I have a domain set up using SE 2012 and have used the group Policy wizard to apply Folder Redirection and "Security Settings". Can I make an ...
3
votes
1answer
70 views

Is it possible to add computers in a particular IP range to a particular Active Directory group?

I'm using AWS and have a VPC which is connected to the local network via a VPN. I can launch EC2 instances, put them in various subnets in various AZ's and connect to them via internal IP. I can also ...
0
votes
1answer
124 views

Group Policy for Time Sync = ARP Flood?

I have a Windows Server 2008 R2 domain controller and a bunch of workstations of various versions of Windows - XP SP3, Vista, 7, 8.1. Time sync wasn't working correctly on a few PCs so I followed the ...
0
votes
2answers
291 views

Is there a GPO to allow standard users to access Resource Monitor

I need to allow standard domain users to be able to access the Resource Monitor on Windows 7 without adding them into the administrators group on any local machines. Is there a domain GPO setting to ...
3
votes
1answer
428 views

Edit local policy via powershell

i'm searching for a way to edit this policy via powershell : Computer Configuration -> Administrative Templates -> System -> Credentials Delegation -> Allow Delegating Fresh Credentials with ...
0
votes
3answers
2k views

Server service fails to start, event 7023, error 1079

Hello, Environment: Windows Server 2008 R2 fully patched, working as Domain Controller in Win 2003 native domain. Users started to report problems with share, it turned out that server service won't ...
4
votes
1answer
136 views

Changing password expiration policy at next password change

We have a password policy with a maximum password age of 180 days. For various reasons we need to change it to 90 days, with a minimum impact for the users. Our users are normally warned about the ...
1
vote
1answer
66 views

Group Policy doesn't restart service as configured

I have configured group policy to tell a particular service (Winrm) to restart when the policy is applied. When the policy applies, I see that it tries to stop and start the service. Stopping works, ...
0
votes
0answers
44 views

domain admin account unable to modify IE settings, other DOMadmin group accounts can

When I log into one of the servers on our domain as DOMAIN\administrator, IE settings are locked, and indicate that I'll have to check with the system administrator. If I log into the same server ...
0
votes
2answers
7k views

Domain User Account Locks: Correct password used

I have a domain (DC is running Windows Server 2008 R2) and have the Account Lockout Policy enabled. When a user attempts to log into their PC (with the correct password) they receive the following ...
0
votes
2answers
136 views

Which Group Policy wins out of two enforced policies with similar settings?

I have a situation where I need to modify an enforced group policy object, however due to the sensitive nature I must test my results first to one test user. In order to do this I plan to create new ...
4
votes
2answers
129 views

Determining if group policy needs to run synchronously

I have been working on speeding up network logins. As part of this process I'm disabling the 'always wait for network' option. This isn't inherently a problem, but I would really like to be able to ...
1
vote
1answer
5k views

Let users install software without local administrator rights on domain

I manage the network of a small company. As I'm not always in the office it is a wish from the employees to be able to install software without having to go to me. My predecessor set it up that ...
4
votes
1answer
3k views

Installing Lync 2013 Standard silently

I am trying to find a good way to deploy Lync 2013 standard & basic clients silently on computers with Windows 7 / Office 2010 & ahve a few roadblocks. 1) I am successful installing the ...
3
votes
0answers
215 views

Proxy Server setting stuck on Server 2003 R2 for Windows Updates

Stay a while and listen. This is going to be a long one. We've been having a problem the last couple of months with Updates on very specific Microsoft Server 2003 R2 Machines. This problem has ...
0
votes
1answer
181 views

WSUS: How to combine targeting groups from multiple GPOs

I am trying to use group policy with WSUS to prevent stuff like Silverlight from being installed unless it is requried. I want computer groups for each of the software (so a computer will end up in ...
1
vote
3answers
980 views

set attachment size limit in outlook with a domain policy

Is there a way to add a domain policy to a Windows 2008 domain that sets the attachments size limit for Outlook (various versions) and Windows Mail?
1
vote
0answers
111 views

Configuring Service Login Credentials with Group Policy following MS14-025

With Microsoft security bulletin MS14-025, GPMC and related tools are now patched to no longer allow the use of configuration items within Group Policy Prefs that would embed obfuscated passwords. The ...