Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
4answers
3k views

Bizarre - Domain Admin has no rights to modify domain scripts directory

Here is a quickie that has had me scratching my head. Not a showstopper, so an answer isn’t urgent, but still. I am trying to modify the logon scripts directory to include a login script. I have gone ...
4
votes
1answer
89 views

Create a security group that can promote a member server to domain controller without being in the domain admins group

I am trying to figure out a way to delegate permission to a security group to add domain controllers to a domain. The catch is I do not want to add them to the Domain Admin or Enterprise Admin ...
1
vote
3answers
2k views

GPO is both applied AND filtered out

I have a GPO that is applied to MyUser's OU and filtered to MyUser. I run a gpupdate on his machine and I see that the GPO is listed under "Applied Group Policy Objects", yet it is also listed under ...
0
votes
2answers
40 views

How can I set up group policy to give non-admin users the ability to use local admin account to update non-MS apps?

Currently the users do not have admin rights. I wanted to be able to let them update their own applications (non-microsoft) by using the local admin account at the elevated privilege prompt. What ...
0
votes
1answer
6k views

How to remove programs from the start menu windows 7 client using a GPO managed on window server 2008 r2

I have a windows server 2008 r2 with a domain where windows 7 desktop pcs connect to. There are only 3 programs I'd like to display on the start menu for users. All client computers have the same ...
1
vote
2answers
228 views

IE (10) blocked this website from displaying content with security certificate errors - show content

Currently having an issue with a client that is getting the following error when loading a certain website: I have added the site to trusted sites and enabled 'display mixed content' through GPO. ...
2
votes
1answer
537 views

Wallpaper Breach in window xp

I have applied group policy for my Company Wallpaper. But in window xp, if i right click on images in web browser and than select Set as wallpaper, than the wallpaper changes. ( please see the below ...
-6
votes
2answers
48 views

How to protect Windows Server 2008 r2 from persons, which have physical access to computer? [closed]

One server is available for other users, and we think that someone may steal passwords from it. I can not set a password on boot, because sometimes there is electricity failure, and UPS can hold it ...
1
vote
0answers
84 views

How to use Group Policy to control local administration access (LOCAL ONLY)

At the company I work for, we have about 75 computer users. We have a Microsoft Domain Controller in our server environment (MS Server 2012) with Active Directory. When users need to install ...
-1
votes
1answer
34 views

GPO to lock computer when idle effects also when out of the domain [closed]

I applied a GPO to lock screens when idle after 5 minutes. Funny thing is, it affects computers also when not connected to the domain (at home for instance). Any idea how to avoid this? Thanks
1
vote
1answer
87 views

IE connection setting: Automatic configuration vs. manual proxy server - precedence?

When I choose Use automatic configuration script and point it to our proxies pac-file, will the proxy setting on the bottom become inactive?
9
votes
6answers
11k views

Group Policy: Administrator Rights for Specific Users on Specific Computers

I'm a programmer stuck trying to administer an Active Directory setup for a small company. The Domain Controller is running Windows Small Business Server 2008. We have a staff of field workers using ...
0
votes
2answers
87 views

Enable Windows Time Service on Secondary Domain Controller

We have an interesting scenario at my workplace. Our primary domain controller started to fail, so we installed a secondary domain controller to allow people to login when the primary would fail. ...
5
votes
1answer
503 views

Disable Outlook Web Access Junk filtering in Exchange 2013

By default, Outlook Web Access (OWA) in Exchange 2013 seems to move suspected junk mail to the Junk Email folder. This is undesirable behavior in most of my environments because we have Barracuda Spam ...
0
votes
1answer
63 views

RDS Farm setting applied through GPO causing connection issues

I'm having a strange issue with some RDS GPO's. Since automating the RDS server build process through SCCM I've moved the RDS farm / connection broker settings to a GPO. This works fine, once the ...
0
votes
2answers
1k views

Adminstrator cannot log on to server via remote desktop after changing default domain policy

I wanted to enabled remote desktop access for a domain security group so I search and followed the instruction here to get to the setting which was shown as "Not Defined" then I change the setting to ...
2
votes
1answer
70 views

CIS benchmark differences between 2008R2 to 2012R2

I'm looking at hardening our golden image inline with the CIS benchmarks for Windows Server 2008R2 and 2012R2. But, after looking at the two benchmark documents(registration required - sorry) from ...
0
votes
3answers
8k views

Can I use Powershell to configure Local group policy settings in windows server 2008 r2

in Windows server 2008 r2 , for this manual process open run >gpedit.msc > computer configuration > windows templates > windows update > specify intranet microsoft update service location > ...
0
votes
0answers
20 views

Install program to single RDS user

I'm looking to install an application to a single user in a RDS environment without installing it to the other users. The user is an Admin. I have very little experience with GPO but imagine it's ...
0
votes
0answers
78 views

GPO Office Installation - Script runs on PC, How could I get it to appear when a user logs in?

I currently have a GPO created that installs Office 2010 for users during startup of the PC. This script is set to run for specific PCs. Is there any way that I can get the script to appear and run ...
0
votes
0answers
112 views

replace/update user32.dll.mui in System32 through GPO doesn't work

I edited the user32.dll.mui in system32 to display our company name as a watermark. I have already tried it on my PC manually and its working, now i just need to implement it to over 100 PC clients ...
3
votes
1answer
9k views

How Can I Apply Local Group Policy to multiple computers

Exactly like the title said, How can I apply local group policy to multiple computers? Around 500 PCs (I think) I understand the domain group policy can push down the policy but for my scenario here, ...
4
votes
1answer
222 views

How to let non-admins manage selected domain groups' membership?

I'm on Windows Server 2012, Active Directory is on and working. All the project we manage have 2 dedicated groups, one for managers with access to all related files (including invoices, timetables and ...
1
vote
0answers
87 views

Firewall rules to allow Hyper V Manager to connect to Hyper V Server 2012 R2?

I moved a Hyper V host into our Servers OU in Active Directory, which has some group policies linked. Now I am unable to connect to the Hyper V host with Hyper V manager. It was working fine before ...
0
votes
0answers
61 views

Editing the default meeting time

Does anyone know how to edit the default meeting time via GP for Office 2010 ? I've looked everywhere for this setting and cannot find it on any GP Admin Templates, we are looking to make the default ...
1
vote
3answers
912 views

“Allow logon locally” policy missing on Win XP

My active directory (SBS 2003) domain users cannot log on locally to a given client machine (XP SP3). Logon with the domain admin works. I would like users to be able to logon locally to this ...
0
votes
0answers
26 views

List of new and changed group policy settings between 2008 and R2

We recently upgraded our DCs to 2008 R2 from non-R2 2008 servers. Since doing that our KCD authentication has been broken. I assume this is some new or changed group policy object that has been ...
1
vote
0answers
207 views

Configure Calendar time scale to 15 minutes in Outlook (via Group Policy)

Outlook by default allows users to book meetings in 30 minute increments; this can be manually changed to allow 15 minute increments (Change the calendar time scale). I need to deploy/control this ...
1
vote
3answers
2k views

GPO Replication SysVol Inaccessible on Windows Server 2003

In our current AD setup, we have the following Domain Controllers: DC1: Server 2012 R2, Operations Master (All roles) DC2: Server 2012 R2 Mailserver1: Server 2003, Also hosts Exchange 2007 The ...
3
votes
1answer
44 views

What happens to non-domain controller workstations/servers when user rights assignment policies are removed/no longer apply?

I'm trying to do a good ol' fashioned Group Policy Object clean-up job on our domain controller that was upgraded from Windows 2000 (Small Business I think) to Windows Server 2008R2. In my company's ...
1
vote
0answers
67 views

Getting Group Policy identifier in PowerShell

Some of our computers have a random "local group policy" being set that forces them to check a nonexistent intranet server for Windows Updates instead of using WU over the internet as they should. ...
1
vote
1answer
79 views

Group policy drive mapping extension not applying to Vista SP2 machine

I have one GPO (called Desktop_User) that applies to a Windows 7 and a Windows Vista machine. When I log on to this systems, the drive mapping works on the Windows 7 machine but the Windows Vista ...
0
votes
0answers
35 views

Folder Redirection for user logging into workstation and server

We have 4 admins that administer multiple Windows 2012r2 servers. Our IT Manager has asked that we change the way we log on to servers now for auditing reasons after an ex admin went rogue. We have ...
1
vote
1answer
46 views

Upgrading from 2008 to R2 didn't update Group Policy Management

I recently updated our domain controllers from Windows Server 2008 to Windows Server 2008 R2. The main reason for this was group policy. We had machines in our domain that were 2008 R2 and the ...
1
vote
1answer
25 views

Single, parameterized GPO for managing group membership

We have a OU design in our domain in which each "system" (web services and similar) has it's own OU, under which is nested the servers and accounts that it uses: ... + System A + Servers ...
0
votes
2answers
171 views

GPO Policy 'Applied' but not taking effect unless gpupdate /force is run

I do not yet have a 2012 DC or a Win 8 machine to manage IE 10 / 11 settings via GPMC. So I have created a policy with a registry setting so that users in a specific OU get specific .PAC settings in ...
0
votes
1answer
45 views

Group policy redirection of 'recent items' to network share

Was tasked with finding a way to redirect a user's recent items to \[network share]\recent. Server 2008 GPME: User Configuration-Windows Settings-Folder Redirection doesn't have recent items as an ...
2
votes
1answer
97 views

Managing power options

For various reasons, we want our clients' computers to not sleep when on AC. We have been running the following script with moderate success: powercfg /change standby-timeout-ac 0 However, the ...
1
vote
1answer
36 views

Gpresult provides wrong output on vista machine regarding UAC settings

I have two workstations running Windows 7 Professional 64bit with SP1 and Windows Vista Business 32bit with SP2. Both are in the same OU and have a GPO linked named Hardening_Computers_Clients. This ...
4
votes
1answer
2k views

Is there a way to disable “check online for updates from windows update” in windows update settings?

I have configured WSUS server in order to preserve bandwith in the network wile keeping essential updates turned on using that WSUS. Intranet WSUS server pointing to client pc and other settings are ...
1
vote
0answers
526 views

Cannot enable more than 2 simultaneous Remote Desktop Connection

Windows Server 2012 is unable to allow more than 2 simultaneous Remote Desktop Connections: Instead of editing the group policy : "Limit Number of connections to 999999" Disabling "Restrict Remote ...
3
votes
4answers
23k views

Diagnosing why a Group Policy Object is inaccessible

I have a Windows Server 2003 domain. One of the Group Policy Objects appears as a linked item in an OU but all I can see if the Unique ID and that the Link Status is Enabled. There is a red minus icon ...
2
votes
3answers
4k views

Desktop Wallpaper through group policy for Windows 8 client

I Have Windows 2008R2 server with active directory. All client systems are Windows 8/8.1 Pro. I need to push corporate wallpaper through AD GPO on client system, I have created a shared folder on ...
2
votes
2answers
215 views

Troubleshooting Group Policies?

we built a plain Windows 2008 Server park a few months back, and set up a few Group Policies. Most of them seem to work fine, but once in a while I have the feeling that one or more have not been ...
3
votes
0answers
64 views

Do GPOs apply to interactive logon only?

I am trying to enable certificate autoenrollment and credential roaming through a GPO in an ADS domain (DCs are Windows Server 2008 R2). I can interactively log on as a newly created user (on a member ...
0
votes
1answer
398 views

Suppress pop up “This operation has been cancelled due to restrictions in effect on this computer”

I've implemented a new Group Policy infrastructure at a school. I'm at the final stages of tidy up before go live next week but there is one thing thats got me stuck. As expected I've locked the ...
1
vote
1answer
253 views

Group Policy Caching for Folder Redirection

I recently set up a new file share on a new server for Folder Redirection for a subset of our users. I robocopied the files, applied the policy last week, replacing the old policy, tested with a few ...
0
votes
1answer
133 views

Windows Server 2012 - GPO settings - Security Filtering and “Authenticated Users” confusion

So I want to add a GPO for a few computers at first then deploy this rule to all computers when everything is confirmed OK on the test systems. I am having troubles getting the GPO to deploy to only ...
0
votes
1answer
40 views

Prevent authentication from specific machines [duplicate]

I have two domains PRIMARY and DEV. These both contain matching service accounts for various applications. PRIMARY also contains user accounts We have a one way trust relationship such that DEV ...
4
votes
3answers
7k views

Install chrome extensions via GPO

I'm attepting to install the adblock chrome extension using Google's Chrome ADM's. User Configuration/Policies/Classic Administrative Templates/Google/Google Chrome/Extensions Configure the list of ...