Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

4
votes
1answer
1k views

Consistently slow domain logins / folder redirection

I've been trying to diagnose slow logins to my domain. One of my first stops was Domain login very slow 10+ minutes. So far I've been able to tell it has to do with my policy that applies folder ...
0
votes
1answer
198 views

Deploying Ossec HIDS Windows Agent via GPO

I am trying to deploy OSSEC agent to about 100 Windows 7 boxes through GPO on our AD. I understand that I need to create and MSI from the EXE and import the specific client.keys file for the windows ...
2
votes
1answer
428 views

Error Code 0x800700a1 when trying to add registry key through GPO

I'm trying to add a new group policy to our domain so that images are automatically sent with emails in Outlook 2013. So I created the following GPO: This policy doesn't have any effect though. ...
3
votes
1answer
471 views

GPO Rule of thumb for: Disabled vs Enabled vs Not Configured

Is there any documentation that explains difference between these: Policy Not Configured Policy Disabled Policy Enabled, Setting Enabled Policy Enabled, Setting Disabled Policy Enabled, Setting ...
3
votes
2answers
623 views

Group Policy installation failed error %%1274

OK, I have a really tough one I've already spent all morning on. PC is a Win7 64 with SP1 and all MS Patches Usual error everyone is familiar with: The assignment of application Adobe Reader X MUI ...
0
votes
1answer
1k views

The sysvol permissions for one or more GPOs on this domain controller are not in sync with the permissions for the GPOs on the baseline domain

I have recently installed a second domain controller and all replication seems to be working fine except for group policy - In windows 2012r2, through the new Group Policy Management, when I click on ...
3
votes
2answers
320 views

Ensure drive is mapped at login on laptop with strictly wireless

So, $software runs on a 'server' (windows client w/ file sharing to share out the db folder), and laptop client has the drive mapped and $software also installed. This is the vendor's recommended ...
3
votes
2answers
285 views

Domain Account Does Not Receive Proper Se Privledges from Group Policies

I am attempting to install software that requires SeBackupPrivilege, SeDebugPrivilege, and SeSecurityPrivilegebut I cannot seem to get my Domain Account to retrieve these specific privileges. I ...
4
votes
3answers
188 views

If an email is sent to a user redirects if OOF is on

Is there a way to make a global change to either Exchange or group policy so if an email is received from an email address it will not go into the users mailbox but be forwarded on instead. Basically ...
3
votes
2answers
551 views

Installing MSI Before User Logon

I have a requirement to install a MSI's to our workstations before logon, it's periodically updated and provides updates to our LOB applications. The problem we are encountering is when setting logon ...
0
votes
1answer
58 views

Why does windows xp standalone group policy apply in the safe mode to the default administrator?

I am trying to turn standalone Windows XP installed on VirtualBox virtual machine into an AppStation-style machine (only one allowed application, taskbar, start with lone shutdown option, and a ...
0
votes
1answer
134 views

Using AD/GPO to add machines to WSUS in Windows Server 2012

I was following this guide: http://knowledge.quickstart.com/configure-wsus-to-deploy-updates-using-group-policy/ I've rebooted the machines after the policy updates to ensure they took them. I ran ...
2
votes
0answers
46 views

GPO: Applying a home page to Win7 and Vista Clients running IE9

I am trying to set the homepage on several Windows 7 and Vista machines via Group Policy Preferences. Both are running Internet Explorer 9. The "apply once and do not reapply" option is enabled, as i ...
1
vote
1answer
2k views

Best practice deploy printer in 2012R2 RDSH?

I have 3 servers with 2012 R2 RDS Session Host, where my users log on. I have 4 printers. What is best practice to deploy these 4 printers to my users?... Using GPO shared printers or Deploy ...
2
votes
1answer
183 views

Can I install applications to Remote Desktop Session Hosts via Group Policy?

I have a GPO that installs an application using the Software installation policy under Computer Configuration. I assign this GPO to the OU with our desktop/laptop computers, and my clients all install ...
0
votes
2answers
2k views

Deleted printers keeps coming back - and multiply

My users are on 2012 R2 RDS Session Host servers. I've used "Deploy Printers" (from Print Manager) to deploy 4 printers. The last week, I've had a lot of problems where users can't print. If I ...
0
votes
1answer
55 views

Group policy to auto-enable plug and play disk

Good afternoon, I have an additional disk which is attached to the VM, however every time the server is rebooted the disk shows up in device manager but is disabled "due to group policy" I can then ...
2
votes
1answer
198 views

Transition from GPO to GPP

I have a Windows network with a 2003 server as the PDC, and a 2008R2 server as a DC. We have used GPO sparsely when the majority of our workstations were WinXP, but now we have Windows 7 clients and ...
0
votes
1answer
259 views

GPO to configure Excel 2013?

Using Excel 2013 (Office 2013, 32-bit, per MS recommendation) on Windows 7 Professional, 64bit in a Server 2008R2 domain. When trying to open an Excel 2013 document, we're getting the error box: ...
1
vote
1answer
1k views

How can I get SeSecurityPrivilege enabled?

I'm trying to install a hotfix for SQL Server 2008 and failing on the Rule Check with "Setup account privileges" failed. I am running SQL Server 2008 Standard on Windows Server 2008 R2. Searching on ...
1
vote
0answers
265 views

Why is GPOTool not finding all my GPOs?

I have 91 group policy objects linked to my domain. When I run GPOTool it only finds and reports on 47. Why would the results be missing the rest? I am running Windows 2008 R2 on all 6 domain ...
4
votes
3answers
976 views

How can I create a windows shutdown script from powershell/command-line?

I've read the TechNet pages that describe using computer/user startup/shutdown scripts, and that's great, but I'd like to create those scripts via the command-line (and not have to click around in ...
0
votes
1answer
458 views

GPO - Mapped drive for non-domain user on a domain computer

I am trying to add a mapped drive for a number of CNC machines that all run off Windows XP boxes that are joined to our domain, the computer policies apply fine but as the software for the CNC only ...
5
votes
4answers
261 views

powershell vs GPO for installation, configuration, maintenance

My question is about using powershell scripts to install, configure, update and maintain Windows 7 Pro/Ent workstations in a 2008R2 domain, versus using GPO/ADMX/msi. Here's the situation: Because ...
2
votes
1answer
717 views

GPO Preferences - applying preferences on first logon?

I am applying several preferences via group policy, e.g. drive mappings, regkeys, desktop icons and so on. The problem is that it takes two logons for this settings to get applied. Thinking about it ...
4
votes
1answer
2k views

Hide Network Icon in File Explorer on Server 2012

How can I hide the network icon within Windows Explorer in Windows Server 2012, via group policy? I can do this on 2008R2 using the Windows Explorer "Extra's" settings, but no such setting exists for ...
2
votes
2answers
742 views

Mapped Drive by OU

I want to implement a mapped drive which is hidden/exposed based on the OU of the user. I have a working version of this in one environment (Windows 2008R2; created by someone else), and I am trying ...
0
votes
1answer
2k views

Install RSClientPrint for Reporting Services 2012 using .bat file and still be able to use 2005

I have a Reporting Services 2005 server that when users accessed it and tried to print reports would get a message asking them to install the print control, which they could not do because of lack of ...
0
votes
0answers
43 views

How do I deploy VC++ 2012 Redistributable via Group Policy

I'm trying to rollout some software via group policy and I have hit a roadblock with the VC++ redist for 2012. The only available download is an exe which I cannot extract an msi from. I tried ...
2
votes
0answers
28 views

Deploying custom fxcop rules amongst developers

I am currently in the process of writing and deploying custom FxCop (Visual Studio Code Analysis) rules, allowing developers to check their code against a series of these custom designed rules. As a ...
2
votes
2answers
1k views

Removing address bar or Hiding its content from Windows Explorer - Windows Server 2008 R2

I'm currently trying to find a GPO or a registry edit that could either remove the address bar from Windows Explorer or prevent the bar from displaying the full UNC path. The current environment has ...
2
votes
1answer
121 views

How do I properly configure Internet Explorer Connection Settings via Group Policy?

I've configured the location of our automatic configuration script under "User Configuration > Preferences > Control Panel Settings > Internet Settings > Internet Explorer 8 > Connections > LAN ...
2
votes
1answer
3k views

Group policy to check/uncheck “require HTTPS” in Internet Explorer 11 trusted sites list?

When adding a list of trusted sites to Internet Explorer 11 in Windows 7 Professional SP1, there is a checkbox called "Require server verification (https:) for all sites in this zone". Is there a way ...
0
votes
2answers
142 views

Restricting User Rights Assigning in Default Domain Controller Policy

I am currently reviewing my work's default domain controller policy GPO against the MS Security Compliance Manager, and one of the things I have found is that there are many things that have user ...
2
votes
1answer
362 views

Can I use the GroupPolicy PowerShell module on non-AD standalone servers?

I am trying to use the GroupPolicy PowerShell module to manipulate and read local group policy settings on a standalone Windows 2012R2 server. When I try to execute the Get-GPOReport cmdlet: ...
0
votes
1answer
437 views

GPO: Preferences and Drive Maps not getting applied in second RD session

I have a group policy object that maps several network drives. This is getting done via group policy preferences. When a user log's on to a remote desktop server the drives are getting connected - so ...
2
votes
1answer
3k views

Deleting Local Profiles when using Roaming Profiles at Log off

I'm currently building an environment that will host about 5,000 users over 20 AppServer. I have finalized my GPOs but I'm experiencing an issue with the user's local profile when roaming profiles is ...
4
votes
1answer
6k views

Can I override domain group policy with local group policy as a local admin?

I am trying to provision a few special case laptops. I would like to create a local guest account. That's fine but when I try to create it I prompted that my guest password does not meet the ...
2
votes
0answers
127 views

In the Local Security Policy, how do you avoid putting “IIS APPPOOL\” before “DefaultAppPool”?

Doesn't seem to be a whole lot on the Internet about this. I was tweaking the Local Security Policy of one of our test servers (Windows Server 2008 R2 Standard Service Pack 1), when I got this error. ...
0
votes
0answers
171 views

Using Powershell (RSAT ) to get GPO from against another domain

I can't find any clear info online for what I'm trying to do, hope you can give me an answer :) I'm using a Windows 7 client (pctest) joint in a domain (domain1.intranet). I've installed the RSAT to ...
1
vote
0answers
23 views

No “Compatibility View” Options

I'm working on setting up a GPO to push out some compatibility view settings for IE. But in my Group Policy editor there are no "Compatibility View" settings. I'm looking in Administrative Templates > ...
2
votes
1answer
206 views

Removing deny everyone permissions from GPO

As part of the workaround for CVE-2014-1776 I created a group policy object that applied Deny permissions to everyone on VGX.DLL. I am now trying to undo this group policy and having a lot of ...
0
votes
0answers
36 views

Group Policy with Win7

All, I wasn't sure how to search for this. It seems that many of our Windows 7 Machines are processing group policy in unpredictable ways. Here's an test example: I created a brand new policy. I ...
2
votes
3answers
1k views

Windows server 2012 essentials GPO AD/SYSVOL MISMATCH

I am having an issue with Group policys and will do my best to describe the issue below: GPRESULT, ADSI and GPT.ini shows the group policy with mismatching AD/SYSVOL versions, the SYSVOL version ...
3
votes
3answers
516 views

Update a network driver through GPO/AD

Our organization has just deployed new computers with Windows 8.1. Roughly 50 of them. We've run into an issue with the driver on the new computers which is flooding the network with ipv6/multicast ...
2
votes
1answer
351 views

Access an AD attribute in a first-time logon scenario?

I have been tasked with improving our current image deployment. Right now we do a fair amount of manual setup after imaging to reduce the work for users who get a newly imaged machine. I would like to ...
1
vote
4answers
1k views

Shutdown clients when no one is logged in at a specified time

At our company, the people stop working at 7PM. At 8PM we run a scheduled task with GPO to warn the logged-in user that the computer is going to shutdown. This works fine. When no one is logged-in ...
2
votes
1answer
91 views

Structuring an OU to properly model an Organizational Hierarchy

I'm experimenting with using OUs in my network's Active Directory and group policy. However, I'm having a little trouble figuring out the right way to structure my OUs so that I can have individual ...
0
votes
1answer
4k views

Windows Server 2012: How to activate network discovery in GPO?

I use terminal-server Windows Server 2012 and I need to create a map drive GPO, but it doesn't take effect and I think it might be because I nee to activate network discovery. How to enable network ...
2
votes
1answer
112 views

Deploying software through group policy

I'm trying to deploy an MSI to a specific security group that has all computer members. I've set the GPO to install via the UNC path, and it's a computer configuration. I've also made sure that ...