Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

1
vote
1answer
177 views

Why are Active Directory password resets ignoring the Password History Count rule?

I have a situation whereby an AD domain I am working with has a sensible enough password policy in place (e.g., sufficiently high PasswordHistoryCount, MinPasswordLength settings etc.). I can change a ...
1
vote
1answer
30 views

Modify “Policy” without Group Policy: Best Practice?

I have a need to address some policy settings on a number of machines that are not on a domain. Specifically, we are dealing with a technology conference lab, built with loaner machines from various ...
0
votes
1answer
53 views

Possible to use group policies configured with Office 2010 Administrative Template Files with office 2013?

I was simply wondering if group policy settings configured using the Office 2010 Group Policy Administrative Template files (http://www.microsoft.com/en-us/download/confirmation.aspx?id=18968 ) apply ...
1
vote
0answers
31 views

Group Policy: delegate definition of local group memberships

In a heavily branched organization with Active Directory, I am working with the head IT department and we are delegating control to parts of the branch OU to the respective branch admins. Our ...
1
vote
1answer
68 views

WMI filter is ignored by certain clients in group policies

The applied WMI filter to a group policy is ignored by certain clients. It works fine on other clients, returns the correct value, but on some clients it is just not applied and does not appear in ...
0
votes
0answers
39 views

The Unique ID still shows up as Winning GPO in Group Policy Results even after it is deleted

I have deleted a group policy object in Group Policy Management Window. I thought this would also delete all the links to policies, but the links are still there in Group Policy Results and it is ...
1
vote
0answers
44 views

Windows Server 2008 R2 - allow more time to reset password

Good morning everyone! I apologize if this has been asked - I have tried searching every where I can think of, to include the search bar here on serverfault. I work as an IT technician at a high ...
2
votes
1answer
165 views

GPO to create subfolder and copy file

I am wanting to create a GPO (other methods are open for discussion as well) for the issue below. Any and all help would be appreciated, thanks! Users logs in, GPO creates a sub folder in ...
0
votes
0answers
26 views

Log off local active directory user (force) [duplicate]

How do I force logoff from my windows server 2008 on a locally logged in active directory user that is logged in to a physical computer (no terminal services) I need this for emergency cases if ...
2
votes
1answer
586 views

Disabling dynamic DNS updates with Group Policy

I am administering a system which for reasons beyond my control have a disjoint DNS namespace. I don't like it, but that's how it is, and I have no way of changing this. The reason is that the servers ...
0
votes
0answers
107 views

Documents Redirect not working on machine after moving user into different ou

I've recently been making some changes to an AD OU structure, in attempt to make the structure look cleaner for other admins & allow us to get more granular with Group Policies. By changes I mean ...
0
votes
1answer
84 views

Windows Update GPO not applying 'Empty' on client computers SBS 2011

I have a Windows Update Group Policy that is not applying to the Client PCs. The policy is created in the Domain local policy list under Computer Configuration\Administrative Templates\Windows ...
0
votes
0answers
47 views

Different group results for GPResult -vs- “net users MyName /domain”?

I have a user that is set up as a member of "My Test Group". When I am logged in as that user and do a "GPResult /R" that user does not appear to be a member of "My Test Group" but when I do "Net ...
4
votes
2answers
3k views

Windows 8.1 / 10 GPO mapped drives won't connect

UPDATE: not solved... The issue persists, I also tried the hardened UNC paths approach, still no luck. I'll keep updating this thread if I encounter something new. UPDATE and solved (hopefully) ...
5
votes
2answers
12k views

Windows 10: Group Policy fails to apply directly after boot, succeeds later

My problem is that Group Policy is not applied when a client is freshly booted. Directly after boot, the client posts an error message in the event log with source "GroupPolicy ...
-1
votes
1answer
27 views

Local Group Policy not applied [closed]

My client cant isnt showing up in the WSUS server. Could anyone help me thru chat? I would appreciate it a lot. Thanks in advance
1
vote
1answer
44 views

Using GPP to set local admins

Using Server 2012 r2 in domain environment, I'm trying to add specific groups of users to the Administrators(local)group to computers organized in OUs using GPP and item-level targeting. While the ...
3
votes
1answer
116 views

Loopback Processing Merge Mode

I am part of a team of IT Engineers who are currently revamping a large organisation. The previous IT department had some Group Policy objects in place for installing software(s), applying security ...
2
votes
1answer
47 views

Does “Folder Redirection” and “Drive-Mapping” CSE really require “Always wait for the network…” to be enabled?

I understand that both "Folder Redirection" and "Drive-Mapping"-CSE require synchronous GPO processing. However both CSE's are working here without having to force the GP-Client to work synchronously ...
2
votes
1answer
60 views

GPO: Folder-redirection from 2 locations: Getting personal folders twice?

We have one domain in two locations (connected with vpn). In both locations we are using VMview pools. In both locations we are using GPO for redirecting the user-folder to the file-server at each ...
4
votes
1answer
2k views

Windows 10 not getting gpo deployed printers

In a small network (5 clients, more "users"), I have two Windows Server 2008 R2 acting as Active Directory DC and file and print servers, where I did setup several GPO, and printer deployment. This ...
1
vote
1answer
70 views

Restrict XP to access internet in Server 2012 R2 Domain using GPO?

How can I restrict only XP machines to access internet in Server 2012 R2 Domain environment using GPO? I need to allow those XP machines to access local Intranet sites in the Domain environment just ...
0
votes
2answers
29 views

Local Policy gets overridden by a GPO

I my domain I have several SQL servers and I need the Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Audit Policy\Audit policy change policy defined with Success. I ...
2
votes
1answer
123 views

Does a GPO apply if “Security Filtering” tab is empty, but there is a security group in Delegation which has Read and Apply right?

As in the subject, does a GPO apply if "Security Filtering" tab is empty, but there is security group in Delegation which has Read and Apply rights? Security Filtering tab says "The settings in this ...
1
vote
1answer
62 views

GPO will only work after an Admin logs in with same policy being applied to the admin account

I have created a GPO that will put a shortcut on our receptionists desktops that is linked to a file share that is full of Internet shortcuts for Insurance verification. This has worked for almost 90% ...
3
votes
2answers
2k views

Block All Websites but One Server 2012

I'm working for a library who uses Internet-connected catalog machines that are designed to allow only a single website - www.catalog.com. All other sites are blocked via a Content Advisor GPO. ...
2
votes
1answer
67 views

Connect to VPN only when outside office LAN

I'm trying to figure out a way to make domain clients connect to office LAN using VPN only when it's physically disconnected to the said LAN. I've found this and this detailed official guides. As far ...
2
votes
1answer
24 views

GPO with security filterung applies to server - but why?

We have set up a GPO that has a security filtering using security groups. The GPO is linked to the OU, the server is a member of the security group (IN THE AD - more in a moment). We have not ...
0
votes
1answer
125 views

Group Policy Logon Script for Drive Mount is Executing but Not Applying

Thanks in advance for any assistance. I've been houding the internet for hours looking for answers and found many tips/items to note but nothing that has worked for me. Setup: Domain Controller = ...
0
votes
1answer
70 views

Server 2012, auditing GPO changes?

How does one find audit information about individual settings within a GPO? I've been searching and have hit a wall at "enabling advanced audit policy configuration" and enabled the Create/Delete ...
1
vote
1answer
275 views

Unable to run gpupdate after changing domains

I recently moved a Windows Server 2008 R2 machine from one domain to another. Everything appears fine on the surface. It attached to the new domain and I can remote to and log into it using an ...
0
votes
1answer
19 views

NTFS permissions set up in GPM overwrites current permissions

I'm trying to implement a policy in our current environment where NTFS permissions are added to the local drives. I've implemented this by editing the settings in Computer Configuration - Windows ...
0
votes
1answer
184 views

Migration from Windows server 2003 to 2012 R2

We went from Windows 2003 R2 to Windows Server 2012 R2. I did the following: Joined 2012 server to the 2003 domain Installed Active Directory Domain Services (aka dcpromo) on the server Transferred ...
0
votes
0answers
25 views

Distribute a certificate within an organisation

I want to distribute a certificate (.cer file) to users within an OU. It is used to encrypt .pdf files so that only company machines with said certificate installed can view the file. I created the ...
1
vote
1answer
41 views

Possibilities and best practises regarding deployment of GPO for the user right “Log on as a service”

Background I have a case where a developer computer is in a environment where the IT department have set up a forced group policy for the user rights assignment policy "Log on as a service". The ...
0
votes
1answer
322 views

GPO aren't being applied for some users only because of slow link

I have encountered a situation where all GPO are applied for some user accounts, but only critical GPO get applied for other users because slow link was detected. Our offices are on different coasts ...
0
votes
0answers
122 views

Finding out where a Group Policy Object is located (OU Path)

I am currently looking in Group Policy under the 'Group Policy Objects' area. I have found the entry I am interested in however would like to find out which OU that GPO is sitting under. For example: ...
0
votes
0answers
73 views

Security Log Event ID 5136 - Attribute Value field is limited when attribute is gPLink

I encountered some problem while trying to analyze GPO link modifications using Microsoft security log. In event 5136, AttributeValue field is cut, seems to be limited to 1000 characters. It seems ...
2
votes
1answer
26 views

Define what usergroup or user that can authorize UAC

I'm wondering how I can make custom usergroups that is allowed to authorize UAC for installations and changes? Windows Server 2008 Standard Edition 70+ Clients
0
votes
1answer
85 views

Group Policy for restricting OU user to access 1 subnet

I run Windows 2008 R2 with AD, NPS. I have a OU call Wifi Only, I need every user in this OU can not access to any server in a specific VLAN Subnet 192.25.0.0/16 (isolate user) How can I achieve ...
6
votes
1answer
4k views

GPO to configure open file explorer to in windows 10

We are currently running windows server 2012 R2. We have upgraded computer to windows 10 and we wish to configure the setting Open file explorer to from GPO. We would like the file explorer open to ...
0
votes
1answer
19 views

Make usergroups able to authorize User Account Control Prompt

I was wondering how you could make a group in Active Directory that is allowed to elevate/authorize programs with their credentials without setting them as the built in administrator? Windows server ...
0
votes
2answers
60 views

Accomplishing the task of mapping a drive to user logged in as

I've searched for this and found bits and pieces but I think this question would be specific enough that I want to make sure I get it correct. So what I'm wanting to do us to unify all our different ...
0
votes
2answers
320 views

GPO not applying on a Windows 2012 R2 Terminal Server with Citrix VDA

We have a Citrix XenApp environment. In the environment we mostly use Server 2012 R2 as Terminal Servers and have a domain running on 2k8 R2. Now I want to configure Folder Redirection. Therefore I ...
0
votes
0answers
50 views

Windows Firewall on GPO

I am trying to trouble shoot a Windows Firewall on my Domain. Following services are allowed through the firewall DNS Active Directory File and Printer Sharing Network Discovery Remote Desktop ...
1
vote
1answer
55 views

Install RSAT by GPO on Win 8.1

I recently noticed that many Windows 8.1 Pro workstations do not have hidden shares, such as admin$ enabled. I need to have such shares available for remote app deployment. I noticed that RSAT ...
1
vote
0answers
273 views

Group Policy Preferences: Content Advisor disabled

We decommissioned our last Windows 2008 R2 server, and with it goes the ability to edit Internet Explorer Maintenance policy settings. Moving forward is Group Policy Preferences... so, I open up ...
2
votes
1answer
105 views

Apply Windows Firewall Rule GPO to Computer Group

One of our vendors is requesting that we provide Skype access, which uses specific ports and IPs. In order to facilitate the access, we need to deploy a set of Windows firewall rules. The target ...
2
votes
0answers
35 views

How to find which templates a GPO are using?

With a Windows 2012 R2 AD domain, we have a Central Store for group policy templates. Over time, a number of unnecessary templates were added to this store (most of them are not used) and it has ...
-1
votes
1answer
94 views

Why is my WSUS Server itself appearing in “Unassigned Computers” within the WSUS Console, even though it is in an Active Directory OU?

I have my WSUS linked to Active Directory via group policy. My WSUS server is contained within my "Servers" OU on Active Directory. I have multiple servers in this OU. However once I look at the WSUS ...