Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

1
vote
2answers
68 views

Group Policy Loopback for OU or Security Group of Computers

I have a rather complex setup in mind, and I am quite new to Active Directory. I want to configure group policy loopback processing so that: Certain users (in different OUs), on certain computers ...
3
votes
1answer
112 views

How do I grant users permission to create hard links (using GPO or registry entries)?

I'm working in an AD domain with one DC running Windows Server 2012 R2, and clients running mostly Windows 7 Professional. I need to be able to grant certain user groups the permission to create hard ...
2
votes
1answer
178 views

Missing sections and settings in Group Policy editor

I'm trying to edit an AD group policy that maps network drives. The policy works fine, I can view the settings under the Settings tab and see the existing drive mappings, the structure in Sysvol is ...
0
votes
0answers
67 views

event id's 1030 & 1058. Can dir \\mail\sysvol but not dir \\domain.org\sysvol?

I'm running Win2003 Server 32 bit that also runs Windows DNS Server and Exchange Server. I'm getting event id's of 1030 and 1058 every 5 minutes. I was forced by my co-location provider to change ...
0
votes
0answers
10 views

GPO to grant modify permission for certain group [duplicate]

I have created a restricted group for help desk for limited elevated access on DC local workstations however I'd like to grant all help desk group members access to all file server partitions with ...
0
votes
1answer
66 views

GPO unable to override a restricted group policy

We have a global GPO that grants Local Admin permission to "Domain Users" via Restricted Groups. I was asked to remove the Local Admin to few users by applying a security filter on their computers. ...
1
vote
1answer
419 views

Permission to enable\disable devices in device manager without admin rights?

Short question: Can you use group policy to allow users to disable\enable devices without giving them full administrative rights to a machine? More detailed: We have machines that crash on ...
0
votes
1answer
70 views

Missing Account audit events on DC's

I recently discovered that all of our Domain controllers (2008 R2, domain and forest fuctional level is 2008 R2) are no longer logging AD account logon events to the Security Log. The Default ...
1
vote
1answer
40 views

Group Policy: Screen Saver Timeout is not being honoured by some client machines

I am having a hard time trying to solve this issue. Recently I created a GPO on a Win2k8 R2 domain controller to set the screen to lock after 30 minutes. The settings are then applied to a security ...
1
vote
2answers
68 views

Internet Explorer 10 group policy

This question is related to Internet Explorer 9 & 10 Group Policy Preferences missing I have about 20 domain controllers and when I try edit a group policy object then go to user configuration > ...
1
vote
0answers
72 views

Setting screensaver via GPO [closed]

I am trying to set a single .scr presentation as a screen saver across a selection of machines here. the only issue being the machines are a nice mix of Win2000, XP and 7 - so all (afaik) have ...
5
votes
1answer
302 views

Set printers up on a per-room basis using Group Policy

Trying to build a new Group Policy structure on a secondary school site. Technical context: Windows environment 2008 R2 domain Windows 7 on all machines 3 print servers Logical context: Most ...
0
votes
1answer
75 views

Configuring Windows Times Service for non-PDC emulator

Not to get to deep into the weeds, here's the gist. A SysAdmin of ours created GPOs on the Domain Controllers Policy (DCP) and we've been having time issues ever since. Neither he nor I know if the ...
1
vote
1answer
49 views

Windows 8.1 IPSec by GPO - no firewall rules generated

I am seeing very strange behavior on Windows 8.1 clients when attempting to configure IPSec rules via group policy. I am configuring several rules through several policies, to be able to target the ...
7
votes
2answers
394 views

Why should you disable network login for local accounts?

This question is in reference to @SwiftOnSecurity's Twitter thread: https://twitter.com/SwiftOnSecurity/status/655208224572882944 After reading through the thread, I still don't quite get why you ...
1
vote
0answers
23 views

Allow log on locally custom message

I recently moved into a new position and we have a few computer labs that are currently restricting access by running a script on logon that checks the user's group membership and if not in the ...
0
votes
0answers
35 views

IIS Intranet Users Login

I have a web application deployed in IIS 7. I want to configure it so that others from all intranet Domains can login to the web application. Here are the things I've done: Enabled IIS Windows ...
1
vote
1answer
188 views

Why are Active Directory password resets ignoring the Password History Count rule?

I have a situation whereby an AD domain I am working with has a sensible enough password policy in place (e.g., sufficiently high PasswordHistoryCount, MinPasswordLength settings etc.). I can change a ...
1
vote
1answer
30 views

Modify “Policy” without Group Policy: Best Practice?

I have a need to address some policy settings on a number of machines that are not on a domain. Specifically, we are dealing with a technology conference lab, built with loaner machines from various ...
0
votes
1answer
57 views

Possible to use group policies configured with Office 2010 Administrative Template Files with office 2013?

I was simply wondering if group policy settings configured using the Office 2010 Group Policy Administrative Template files (http://www.microsoft.com/en-us/download/confirmation.aspx?id=18968 ) apply ...
1
vote
0answers
32 views

Group Policy: delegate definition of local group memberships

In a heavily branched organization with Active Directory, I am working with the head IT department and we are delegating control to parts of the branch OU to the respective branch admins. Our ...
1
vote
1answer
69 views

WMI filter is ignored by certain clients in group policies

The applied WMI filter to a group policy is ignored by certain clients. It works fine on other clients, returns the correct value, but on some clients it is just not applied and does not appear in ...
0
votes
0answers
39 views

The Unique ID still shows up as Winning GPO in Group Policy Results even after it is deleted

I have deleted a group policy object in Group Policy Management Window. I thought this would also delete all the links to policies, but the links are still there in Group Policy Results and it is ...
1
vote
0answers
46 views

Windows Server 2008 R2 - allow more time to reset password

Good morning everyone! I apologize if this has been asked - I have tried searching every where I can think of, to include the search bar here on serverfault. I work as an IT technician at a high ...
2
votes
1answer
198 views

GPO to create subfolder and copy file

I am wanting to create a GPO (other methods are open for discussion as well) for the issue below. Any and all help would be appreciated, thanks! Users logs in, GPO creates a sub folder in ...
0
votes
0answers
26 views

Log off local active directory user (force) [duplicate]

How do I force logoff from my windows server 2008 on a locally logged in active directory user that is logged in to a physical computer (no terminal services) I need this for emergency cases if ...
2
votes
1answer
716 views

Disabling dynamic DNS updates with Group Policy

I am administering a system which for reasons beyond my control have a disjoint DNS namespace. I don't like it, but that's how it is, and I have no way of changing this. The reason is that the servers ...
0
votes
0answers
118 views

Documents Redirect not working on machine after moving user into different ou

I've recently been making some changes to an AD OU structure, in attempt to make the structure look cleaner for other admins & allow us to get more granular with Group Policies. By changes I mean ...
0
votes
1answer
92 views

Windows Update GPO not applying 'Empty' on client computers SBS 2011

I have a Windows Update Group Policy that is not applying to the Client PCs. The policy is created in the Domain local policy list under Computer Configuration\Administrative Templates\Windows ...
0
votes
0answers
54 views

Different group results for GPResult -vs- “net users MyName /domain”?

I have a user that is set up as a member of "My Test Group". When I am logged in as that user and do a "GPResult /R" that user does not appear to be a member of "My Test Group" but when I do "Net ...
4
votes
2answers
4k views

Windows 8.1 / 10 GPO mapped drives won't connect

UPDATE: not solved... The issue persists, I also tried the hardened UNC paths approach, still no luck. I'll keep updating this thread if I encounter something new. UPDATE and solved (hopefully) ...
5
votes
2answers
14k views

Windows 10: Group Policy fails to apply directly after boot, succeeds later

My problem is that Group Policy is not applied when a client is freshly booted. Directly after boot, the client posts an error message in the event log with source "GroupPolicy ...
-1
votes
1answer
27 views

Local Group Policy not applied [closed]

My client cant isnt showing up in the WSUS server. Could anyone help me thru chat? I would appreciate it a lot. Thanks in advance
1
vote
1answer
51 views

Using GPP to set local admins

Using Server 2012 r2 in domain environment, I'm trying to add specific groups of users to the Administrators(local)group to computers organized in OUs using GPP and item-level targeting. While the ...
3
votes
1answer
128 views

Loopback Processing Merge Mode

I am part of a team of IT Engineers who are currently revamping a large organisation. The previous IT department had some Group Policy objects in place for installing software(s), applying security ...
2
votes
1answer
50 views

Does “Folder Redirection” and “Drive-Mapping” CSE really require “Always wait for the network…” to be enabled?

I understand that both "Folder Redirection" and "Drive-Mapping"-CSE require synchronous GPO processing. However both CSE's are working here without having to force the GP-Client to work synchronously ...
2
votes
1answer
64 views

GPO: Folder-redirection from 2 locations: Getting personal folders twice?

We have one domain in two locations (connected with vpn). In both locations we are using VMview pools. In both locations we are using GPO for redirecting the user-folder to the file-server at each ...
4
votes
1answer
2k views

Windows 10 not getting gpo deployed printers

In a small network (5 clients, more "users"), I have two Windows Server 2008 R2 acting as Active Directory DC and file and print servers, where I did setup several GPO, and printer deployment. This ...
1
vote
1answer
72 views

Restrict XP to access internet in Server 2012 R2 Domain using GPO?

How can I restrict only XP machines to access internet in Server 2012 R2 Domain environment using GPO? I need to allow those XP machines to access local Intranet sites in the Domain environment just ...
0
votes
2answers
29 views

Local Policy gets overridden by a GPO

I my domain I have several SQL servers and I need the Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Audit Policy\Audit policy change policy defined with Success. I ...
2
votes
1answer
140 views

Does a GPO apply if “Security Filtering” tab is empty, but there is a security group in Delegation which has Read and Apply right?

As in the subject, does a GPO apply if "Security Filtering" tab is empty, but there is security group in Delegation which has Read and Apply rights? Security Filtering tab says "The settings in this ...
1
vote
1answer
64 views

GPO will only work after an Admin logs in with same policy being applied to the admin account

I have created a GPO that will put a shortcut on our receptionists desktops that is linked to a file share that is full of Internet shortcuts for Insurance verification. This has worked for almost 90% ...
3
votes
2answers
2k views

Block All Websites but One Server 2012

I'm working for a library who uses Internet-connected catalog machines that are designed to allow only a single website - www.catalog.com. All other sites are blocked via a Content Advisor GPO. ...
2
votes
1answer
69 views

Connect to VPN only when outside office LAN

I'm trying to figure out a way to make domain clients connect to office LAN using VPN only when it's physically disconnected to the said LAN. I've found this and this detailed official guides. As far ...
2
votes
1answer
24 views

GPO with security filterung applies to server - but why?

We have set up a GPO that has a security filtering using security groups. The GPO is linked to the OU, the server is a member of the security group (IN THE AD - more in a moment). We have not ...
0
votes
1answer
144 views

Group Policy Logon Script for Drive Mount is Executing but Not Applying

Thanks in advance for any assistance. I've been houding the internet for hours looking for answers and found many tips/items to note but nothing that has worked for me. Setup: Domain Controller = ...
0
votes
1answer
80 views

Server 2012, auditing GPO changes?

How does one find audit information about individual settings within a GPO? I've been searching and have hit a wall at "enabling advanced audit policy configuration" and enabled the Create/Delete ...
1
vote
1answer
297 views

Unable to run gpupdate after changing domains

I recently moved a Windows Server 2008 R2 machine from one domain to another. Everything appears fine on the surface. It attached to the new domain and I can remote to and log into it using an ...
0
votes
1answer
19 views

NTFS permissions set up in GPM overwrites current permissions

I'm trying to implement a policy in our current environment where NTFS permissions are added to the local drives. I've implemented this by editing the settings in Computer Configuration - Windows ...
0
votes
1answer
201 views

Migration from Windows server 2003 to 2012 R2

We went from Windows 2003 R2 to Windows Server 2012 R2. I did the following: Joined 2012 server to the 2003 domain Installed Active Directory Domain Services (aka dcpromo) on the server Transferred ...