Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

1
vote
1answer
824 views

Allow non-admins to install fonts on Windows 7 without GPO

Is there a way in Windows 7 to allow users without admin rights to install fonts on their machine? Our designers need to install new fonts regularly, but with no admin access, this means putting in ...
1
vote
2answers
1k views

Outlook - Setting Default Font via GPO?

I have a nasty feeling I know the answer to this one, however... We're looking at how to enforce a corporate standard on email, obviously outbound is the priority over internal mail. Is there any ...
-1
votes
0answers
11 views

Auditing tool for Windows security policies [closed]

What tools do you use to audit Windows security policies. For example, I configured a Windows machine (A) with the policies (GPO security policies) that we want. (A) now is a baseline. How then could ...
1
vote
2answers
59 views

Apply a password group policy seperate from the Default Domain Policy?

Im trying to keep my Default Domain Policy clean and standard and I want to make a GPO for my password policies. I made it but it still gets the policies from the Default Domain Policy object. I ...
-1
votes
1answer
32 views

“Removable Storage Access” Group Policy and RSAT

I've seen that there is a capability with Group Policy to prevent users from writing to USB drives. ...
2
votes
4answers
2k views

Windows 7 Group Policy to delete old user profiles does not work

Background information: I currently manage a series of computer labs (127 machines running Windows 7 x64 Enterprise) for the engineering school of a university. These machines are used constantly by ...
0
votes
1answer
82 views

Show logon process on windows 8

I'm experimenting with server admin on windows 2008 since I started a new tech job and want to learn things. I'm using a windows 8.1 pro client computer. The question is, is there any way to show the ...
0
votes
0answers
61 views

Can't Remote Desktop on LAN, Firewall Rules in Place, Yet Packets Dropped

I've banged my head for a few hours on this. I'm beginning to move several computers to a new subnet, all Windows 7, all domain joined. On the original subnet (192.168.145.X) everything works as ...
3
votes
2answers
4k views

Assign DFS share to intranet zone via GPO?

This seems like it shouldn't be hard, but I haven't had any luck with either guessing or searching. I'll admit I'm no Windows guru, so forgive me if the answer should be obvious. I'm trying to get ...
2
votes
1answer
50 views

Restricted Groups not working with UAC

I have a Restricted Group in a group policy in an organizational unit called org_unit_a. This organizational unit has all the computers. The restricted group is My_domain\Workstation Admins Has ...
3
votes
1answer
2k views

How to enable Kerberos Authentication Service auditing on 2008 server

I have a 2008-level Windows domain running 5 x 2008 (non-R2) DCs (it's on the roadmap to migrate to R2 or possibly 2012 in the next 9-12 months, but this project needs to be working first), and I need ...
1
vote
0answers
81 views

Create shared folder on share automatically

I know there is a group policy where I can map a specific share. What if I want the group policy to create a folder on that share and map it during log on? I know there must be a way to do this in ...
6
votes
1answer
59 views

How to filter settings within a GPO that only applies to Windows XP?

We have several GPOs containing many settings that have accumluated over time. I have spot-checked some of them and stumbled over settings that only apply to Windows XP (we exclusively run Vista and ...
0
votes
2answers
42 views

Group Policy to force all web traffic to a specific page OR GPO to display unclosable popup to get users attention

We have a number of tasks users need to complete over the month (time sheets, reports, etc) and I am trying to think of the best way to force users to complete these tasks. Currently, we send ...
0
votes
1answer
153 views

Reflect HKLM registry changes to HKCU

Ok so I have a Local Group Policy (under Computer Config, not User Config) to force install extensions in Chrome. This policy needs to run for every user of the computer. The value is going to change ...
2
votes
1answer
183 views

Prevent users from sharing network printers in Server 2008R2 Win 7 environment

I have a server 2008R2-level AD domain in which all the printers are networked. I have a highly mobile workforce of about 350 in the facility, and when they move from one work area to another, they ...
0
votes
0answers
31 views

Group POlicy and Default Printer by Computer

We have multiple sites with specific printers to be assigned to each location. All the printers reside on the same print server. We have group policies (Windows 2008) in place to deploy specific ...
0
votes
1answer
46 views

Folder redirection for multiple locations

I need to find a way to redirect a folder at one location to the file server at the same location and repeat this for all of the other sites. So all of the computers at SiteA will redirect to the ...
2
votes
0answers
92 views

Group Policy - Drive Mapping Preferences - slow login even if only using Computer Config side

We are having some users with very slow login times, up to 20 minutes, but only for a handful of users. I've narrowed it down to a particular GPO that does nothing but Drive Mapping Preferences. I ...
0
votes
2answers
112 views

Force Downloads to appear in Windows 7 Start Menu

I see the policy to force removal of the Downloads "link" in the Start Menu, but is there a way to force Downloads to be present by default?
0
votes
1answer
42 views

If I apply local group policy for the first time why it is not taking effect untill I restart the machine?

I applied local group policy (Computer Configuration - Software Restriction Policy) but policy is not taking effect. I tried this on domain member (machine is in connection with Domain Controller) and ...
2
votes
1answer
225 views

Running Batch file with elevated rights through GPO

I have a shortcut that specifically uses Google Chrome. We have XP and Windows 7 in our environment, and I want to only use one shortcut for both OS. The reason being is that our environment is quite ...
1
vote
1answer
359 views

Group Policy is blocking exe files

I teach programming in Visual Studio. We want to run it on a terminal server. The problem is that whenever we compile our programs, the Windows refuses to start the created exe file. (I didn't even ...
1
vote
1answer
60 views

Setting HomePath to EmployeeNumber as a variable

We are planning to use the EmployeeNumber user attribute in AD to create the path to each user's Home drive. Reason for this is that AD user names are currently based on last name, which changes often ...
0
votes
0answers
24 views

Restict user to acces only the one same folder on 100+ servers

I just developed a powershell script that is compressing all my old event logs into some zip files. I am launching this script remotely on 100+ servers with the "invoke-command" function. Basically, ...
2
votes
1answer
23 views

Finding out if shares are made available offline in Windows 7 by default without corrupting the offline files cache?

We have some rather large shares that people connect to at work, and it would be best if these shares did not even attempt to synchronize into the local Windows 7 offline files folder. How does one ...
0
votes
1answer
91 views

Why does windows xp standalone group policy apply in the safe mode to the default administrator?

I am trying to turn standalone Windows XP installed on VirtualBox virtual machine into an AppStation-style machine (only one allowed application, taskbar, start with lone shutdown option, and a ...
3
votes
1answer
43 views

Limit access to local data and applications while accessing the desktop remotely

We need to access client systems (desktops) remotely to do routine troubleshooting activities, however this isn't a very secure method to do as it exposes the local data to support personnel. Also, ...
1
vote
1answer
132 views

Can gpresult query the default user template on a standalone machine?

On a standalone machine I can query the local policy using gpresult and specifying the desired user account like so: gpresult /USER username /h C:\report.html How could I do the same thing, but for ...
1
vote
1answer
213 views

Group Policy for allowing non-admin users security log rotation

We recently turned on auditing in a GPO, and when non-admin level users login, an error about the "Security Log is Full" is presented. To work around it for now, I had to add the AD user to as a ...
1
vote
1answer
48 views

What is the advantage of moving Groups in Organization Units in AD environment beside organizing?

I know the advantage of using OUs (organizing and GPOs).with OUs you can organize your users and computers, assign group policy to them, and deligate control over a set of users and computers. But ...
1
vote
1answer
532 views

Windows user privileges when running scheduled task

I posted a question a while ago about allowing a specific user to start/stop Windows services. Provide a user with service start/stop permissions I decided to revisit the issue. I have no idea what ...
1
vote
0answers
62 views

Disable access to printers

In the below pic, if the user clicks the "Printers" button the Control Panel Printer window opens up. I've tried every GPO I can find to turn this off, but nothing seems to work. I've tried User ...
0
votes
1answer
75 views

Win Server GPO Mapped Drive Missing “Connect As” functionality

We're having an issue trying to create a policy for mapping drives. We're unable to specify a "connect as" username and password.
3
votes
2answers
778 views

Windows Firewall: Remote Desktop block action by local policy

On a fresh domain-joined Server 2012 R2 install I see a peculiarity where an enabled "Remote Desktop" rule is set to Block in the Domain profile: As block rules take precedence over allow rules, I ...
3
votes
3answers
6k views

GPO: Run PowerShell logon script after explorer.exe has been loaded

I know there is the GPO setting "Computer Configuration => Admin. Templates => System => Scripts => Run logon scripts synchronously". This, however, ensures that logon scripts run before ...
0
votes
2answers
483 views

WSUS: How to combine targeting groups from multiple GPOs

I am trying to use group policy with WSUS to prevent stuff like Silverlight from being installed unless it is requried. I want computer groups for each of the software (so a computer will end up in ...
-4
votes
1answer
54 views

How to apply Default wallpaper to clients in Active Directory [closed]

I have one Dell poweredge 1850 server running on server 2012. I installed ADDS and Make one OU in it then i make users (approx 20) and then move all users to OU. But know when i tried to manage the ...
9
votes
5answers
17k views

Applying a GPO to one user on one computer only

I have a GPO that I need to apply to the user DOMAIN\DumbGuy, but only when he logs on to DOMAIN\DumbGuysComputer$. When DOMAIN\NiceReceptionist logs on to DOMAIN\DumbGuysComputer$ it should not ...
3
votes
4answers
11k views

What Group Policy settings MUST be set within the Default Domain Policy?

Does anyone have an authoritative source of policies that, if set, MUST be set within the Default Domain Policy (if one chooses to set them)? Off the top of my head, I know that password policies and ...
3
votes
1answer
175 views

GPO to Configure DHCP Options

Our environment has approximately 15 Domain Controllers that also provide DHCP functionality to their networks. We have discovered several to have incorrect DNS settings. Their are providing incorrect ...
1
vote
1answer
72 views

Browser caching by Windows clients is generating huge I/O to server

In our environment, our users have their My Documents folder stored on an ENC NAS device. I have noticed huge traffic coming from our isers machines, and I see that most of it is coming to cache ...
0
votes
0answers
14 views

Is it possible to set Server Performance Settings globally?

Is it possible to set the Performance Settings for example Smooth edges of screen fonts globally or do I have to log in to every user and set it manually? I couldn't find any setting in the GPOs that ...
1
vote
1answer
882 views

Disable speakers on Windows client machines?

I am looking for a way with which I can completely disable Windows-audio-output on on a group of computers that our students use. Ideally, I would like to disable it only for students and enable it ...
0
votes
2answers
61 views

Is there a way to control what browser plugins are installed across an enterprise? [closed]

Is there a way to control what browser plugins are installed across an enterprise, perhaps by group policy?
0
votes
0answers
108 views

Allow winzip file Software Restriction Policy

I have a path rule that denies extracting executable to temp folder in the software restriction policy. Now I need to allow certain applications that should run and extract their contents in the Temp ...
2
votes
2answers
2k views

Advanced Audit Policy not getting applied on 2012 R2

I have configured several avanced audit policy settings under: Computer Configuration => Policies => Windows Settings => Security Settings => Advanced Audit policy Configuration => ...
3
votes
1answer
59 views

How to find all GPOs in a domain that define password policies?

We have a bunch of GPOs that have grown organically over time. I assume that many of them are defining password policies. I am aware of the fact that it only can be set once in a domain (besides PSOs ...
1
vote
1answer
189 views

Local Group Policy IE9

I have this weird issue on Windows 7 64bit desktop, I am trying to lock it down from Internet usage (it's a stand alone machine with several local users), so I use local GP. Well, I enabled the ...
2
votes
1answer
110 views

Active Directory

If I have a situation where there is inappropriate use of security and distribution groups against file shares, and very liberal permissions, what would be the best way to go about handling it? Are ...