Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

1
vote
1answer
109 views

Restoring file / folder permission using GPO

Initially, in our Windows domain environment, all Domain Users are by default Local Administrator of their own workstation. After some deliberation, it was decided that Domain Users should be removed ...
3
votes
1answer
452 views

SID in AD - SID from psgetsid?

Wondering if anyone can shed some light on some SID confusion. Currently having an issue with some policy applying to a few machines that were all based off the same image. One of our admins, ran ...
1
vote
0answers
41 views

gpo ie user force update

We use two 2008 Domain-Controllers and one 2012 DC In a gpo we set the proxy for IE-11 per user. eg: X use proxy, server: proxyserver, port: 3131 This gpo is not mandatory, so users could change ...
1
vote
1answer
42 views

Drive Maps via Group Policy - Overlapping Policies

((NOTE: We are on Windows 8.1 with a 2008R2 domain)) We have decided to move away from mapping drives via a log in script and attempting to do it via Group Policy. I have personally been doing this ...
1
vote
2answers
608 views

WSUS & GPOS - Force restart and disable choosing updates W12R2

My objective is that Windows Update runs everyday, install all available updates and (if necessary) automatically restarts the computer, giving the chance to the users to postpone it to maximum 4 ...
0
votes
2answers
89 views

Random domain members are added to the local administrator group

Every computer in the local administrator group (and remote desktop users group) contains a random selection of domain members. After deleting them they come back after a restart or forcing an ...
4
votes
3answers
748 views

Group policy preferences mapping same drive multiple times

I recently changed over our old login script that mapped network drives over to group policy preference drive maps. Worked through a few issues at first, but appears to be working fine for all of our ...
0
votes
3answers
207 views

GPResults say my GPOs are not applied because they are “empty”

I am trying to apply several policies to my domain (running on Windows 2008 R2). Below is a sample of how I have structured my OUs. Test OU {Computer based policy} {User Based Policy} OU Users ...
0
votes
1answer
829 views

GPOTool - Windows 2008R2

I am trying to troubleshoot some GPO issues and began using gpotool.exe to diagnose the issue. I got the tool from 2003 resource kit. Here is one of the first errors I am seeing: Policy ...
1
vote
2answers
216 views

Single user change with forced domain firewall GPO

I have an issue which i need some help with. Current Scenario: I have a domain firewall policy, which turns the firewall ON and is enforced on "Authenticated users". The domain policy locks the ...
0
votes
2answers
97 views

How can I manage remote site printers?

Please bear with me, my server and networking knowledge is not amazing. The company that I work for has a central 'Head Office'. This is where our server room is located. We have a bunch of Windows ...
2
votes
0answers
28 views

Can I upgrade an program via group policy if it was initially installed manualy?

We have a program which was installed manually on workstations when they were initially setup. We now need to upgrade this software and I wish to do it via group policy. I have created an MST using ...
1
vote
3answers
6k views

Force IE 11 compatibility mode for certain sites within domain

When setting compatibility mode in IE 11 it wants to add our whole domain (somedomain.co.uk) but we don't want every site (*.somedomain.co.uk) to be covered by this. We want just ...
1
vote
1answer
71 views

How to make Group Policy to the same User Group at different Computer Groups? (VDI)

I made two Organizational Unit in my domain Thin Clients (there are the physical computer objects) Virtual Clients (there are the virtual computer objects) And I have the default Users (there ...
1
vote
2answers
456 views

GPO is both applied AND filtered out

I have a GPO that is applied to MyUser's OU and filtered to MyUser. I run a gpupdate on his machine and I see that the GPO is listed under "Applied Group Policy Objects", yet it is also listed under ...
0
votes
1answer
4k views

Network drive map through GPO not working on Windows 2012 (Neither via logon script nor drive maps)

Although I though this would be easy I am unable to automatically connect to a network drive via GPO. I tried through a batch file on (User Configuration / Policies / Windows Settings / Script / ...
0
votes
1answer
1k views

Samba4 domain controller, group policy processing fails, gpupdate fails

I'm using a Samba4 domain controller, and on the machines joined to the domain I'm seeing this message: The processing of Group Policy failed. Windows attempted to read the file ...
-2
votes
1answer
36 views

Removing programs for specific computers [closed]

i am currently working for a company as an intern. i have been given the task to remove Java on specific computers that have already installed the program manually. this means that there's no GPO ...
1
vote
0answers
61 views

WMI request (Wbemtest), access is denied to domain computer

let me explain our setup first! We have 2 site location with Cyberoam CR50ING Firewall, IPSec between the 2 Subnet. Cyberoam firewall has an AD authentication with their software linked to the ...
0
votes
2answers
4k views

Can I use Powershell to configure Local group policy settings in windows server 2008 r2

in Windows server 2008 r2 , for this manual process open run >gpedit.msc > computer configuration > windows templates > windows update > specify intranet microsoft update service location > ...
10
votes
2answers
403 views

How to enable BitLocker with no prompts to the end user

I have configured BitLocker and TPM settings in Group Policy such that all the options are set and the recovery keys stored in Active Directory. All our machines are running Windows 7 with a standard ...
0
votes
1answer
164 views

What exactly do the two “Do not process the legacy run list” group policy settings do?

The two "Do not process the legacy run list" settings appear under Computer Configuration -> Polices -> Administrative Templates -> System -> Logon and under User Configuration -> Policies -> ...
0
votes
2answers
710 views

IE11: Allow display of local HTML files

How can I enable Internet Explorer 11 that has Enhanced Protected Mode turned on to display local HTML files? This is very annoying also I see the security need behind this feature. Can someone ...
1
vote
0answers
160 views

Prevent user interactive logon to domain computers

I currently have a user DOMAINJOINER (located in the WIN7Support OU) which I use to deploy Windows 7 machines. This user can Create and Delete Computer Objects in the WIN7Computers OU, that's about it ...
0
votes
0answers
76 views

WMI filter working for some Windows 7 machines but not for others

I'm trying to use this WMI filter for our Windows 7 64bit machines: select * from Win32_OperatingSystem where (Caption like "Microsoft Windows 7%") or (Version like "6.1%" and ProductType = "1" and ...
0
votes
1answer
358 views

How to completely reset Group Policy on a domain member?

We have a problem where domain members built from a certain Windows 8 image can no longer update Computer Group Policy. These domain member have recently been moved to a new Organisational Unit, but ...
-1
votes
1answer
192 views

how to prevent other computers from seeing our network computers through vpn

We have a local office domain consisting of Windows 7 and XP machines that is running on Windows Server 2008 R2. We also have users that connect via VPN into our network. My concern is that when a ...
0
votes
1answer
120 views

GPO backup fails

When trying to backup a GPO using the GP management console (choosing the GP to backup, right click, hitting backup, and choosing a target directory "c:\ADB"), the backup fails. In the Application ...
2
votes
1answer
59 views

How do I restrict user log ins to only a specific set of computers

I want to restrict user admin access with regards to their department. I want to give access to users in Security Group A to computers in Security Group B and i want to create similar access for 9 ...
4
votes
2answers
453 views

Complete Active Directory redesign and GPO application

after much testing and hundreds of tries and hours invested I decided to consult you experts here. Overview: I want to apply some GPO to our users which will add some specific site to the Trusted ...
1
vote
1answer
37 views

Restict Internet Connection Except using Proxy

Given (as-is) A router with DHCP enabled An Active Directory Server Two Windows 7 clients joined the domain Planning (to-be) A proxy server Two clients are set to restrict internet connection ...
0
votes
2answers
141 views

Group Policy - Backup and Restore

I am currently automating the creation of our enterprise domain controller and its configuration in case of SAN failure etc. I can create the server, install the necessary roles, create complete ou ...
2
votes
2answers
619 views

Apply GPO to user AD group when using computers in a certain OU

We have a logon-script that copies a number of remoteapp.rdp-files to some users desktops. However these users sometimes also has to connect directly to our terminal server through a remote desktop ...
0
votes
1answer
59 views

Can I connect all the available network printers without using a logonscript?

In our organisation we have around 30 printers an we are currently connecting for the user all the printers using a logon script that calls the command line app con2prt for a series of printers. ...
0
votes
1answer
34 views

Combining DWORD Values

I'm trying to permit automatic silent install of some internal ActiveX controls using AXIS, as per this Microsoft article. In the article, it states that you can define how HTTPS exceptions are ...
5
votes
1answer
332 views

Disable Outlook Web Access Junk filtering in Exchange 2013

By default, Outlook Web Access (OWA) in Exchange 2013 seems to move suspected junk mail to the Junk Email folder. This is undesirable behavior in most of my environments because we have Barracuda Spam ...
2
votes
2answers
1k views

Advanced Audit Policy not getting applied on 2012 R2

I have configured several avanced audit policy settings under: Computer Configuration => Policies => Windows Settings => Security Settings => Advanced Audit policy Configuration => ...
2
votes
4answers
346 views

Difference between HKLM:\SOFTWARE\Policies\ and HKLM:\SYSTEM\CurrentControlSet\

What is the difference between editing settings in HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services and HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server? Similar settings seem to ...
2
votes
1answer
808 views

PowerShell startup script applied via GPO failing ambiguously

Script: $folder = "$env:HOMEDRIVE\TestFolder" New-Item -ItemType directory -Path $folder note that the same group policy error occurs when $folder is set to "C:\..." Execution policy is ...
2
votes
1answer
899 views

IE11 Enterprise Mode gpo not working

I've followed the following articles to configure the Enterprise Mode gpo for IE11: http://msdn.microsoft.com/en-us/library/dn640699.aspx http://msdn.microsoft.com/en-us/library/dn640696.aspx I ...
1
vote
1answer
300 views

Server 2012r2 change login screen language with registry

I am installing a Windows Server 2012R2 RDS farm. The OS language is English, but my users are Dutch. I already installerd the Dutch MUI pack in windows via the command prompt. Via a user GPO the ...
2
votes
1answer
283 views

Group Policy Files Not Being Deployed to UNC Paths

When attempting to deploy files via Group Policy Preferences, there is a well-known issue wherein you may receive an error to the effect of: 0x80070003 The system cannot find the path specified. This ...
2
votes
0answers
51 views

Can't Access Computer Configuration > Preferences or user configuration > Preferences

After creating a new GPO in Windows Server 2008R2 Right click Edit on the newly created GPO Group policy Management Editor opens Clicking on Preferences shows this popup error After Clicking ok ...
1
vote
1answer
2k views

Group Policy Preferences Printers Server 2008R2 Error 0x80070bc4 does not set default printer after a printer has been created

Alright after calling upon the almighty Google I have been unable to find a good solutions to this problem along with many other users. So I am turning to Server Fault for some support here. I am in ...
4
votes
1answer
84 views

How to dump(collect) all the group policies in a domain?

I want to collect all the GPOs in a domain , for reviewing settings. How many ways are there to do it. I used Get-GPOREPORT in Powershell, but it gave a comprehensive html file, is these a way to ...
1
vote
1answer
784 views

Use Roaming Profiles as Default in AD (running Samba)

I've just set up an Active Directory Domain Controller (running Samba 4), created users, shares, groups, etc and everything is working. However, I have an environment where the use of roaming ...
3
votes
1answer
230 views

How can I pin an Internet Explorer URL shortcut or favorite to the Start screen with Group Policy in Windows 8.1?

I created my Start UI like I want and used this PowerShell cmdlet to create the .xml file for a user's default layout: export-startlayout –path <path><file name>.xml -as xml ...
4
votes
1answer
484 views

How to define the built-in administrators group in a group-policy object?

How do I define the built-in administrators group in a group policy? For example Computer Configuration => Policies => Windows Settings => Security Options => Local Policies => User ...
0
votes
0answers
192 views

Remote desktop instant logoff on disconnect?

I'm having a weird quirk on a Windows 8.1 VM that I'm using as a public-facing Remote Desktop slave, in that upon a client disconnect, the sessions is immediately logged off. This occurs ...
1
vote
0answers
111 views

CIS benchmark: How to define the BUILTIN\Administrator account within GPOs?

I am responsible for configuring GPOs according to the latest CIS benchmark policy. However the test for "Impersonate a client after authentication" always fails, although everything seems to be ...