Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

2
votes
2answers
791 views

Force a specific theme for entire network using GPO

I am attempting to force a specific theme to all machines in my network. I know that the GPO "Load a Specific Theme" in: User Configuration/Administrative Templates/Control Panel/Personalization Is ...
0
votes
2answers
554 views

Disable Flash player in Chrome via group policy

How would I disable Flash player in Google Chrome browsers for my 50 AD computers via group policy or script 2008 R2? I have tried a couple of applications, PDQDeploy_6 among them, but this software ...
0
votes
2answers
45 views

Server 2008r2 File lost in Group Policy Redirection?

I keep an Access database in My Documents. We have a Group Policy redirecting documents to "\\server\userhomes\%username%\My Documents". I was experimenting with a Group Policy to redirect My ...
3
votes
1answer
156 views

Remove all sites from allowed list for plugin in IE via GP

I would like to remove all sites from the list of approved sites for a plugin in Internet Explorer as described here but I would like to do so via Group Policy. Is this possible? I know I can disable ...
1
vote
2answers
182 views

Windows Server 2008 Disabling Password Complexity Requirements

I'm using a Server 2008 R2 domain controller, trying to troubleshoot a bug where password complexity requirements seem to be enabled, even though they are disabled in group policy. Some notes: I am ...
1
vote
0answers
44 views

Override computer settings GPO when specific user is logged in [closed]

Let me explain what I mean... Example AD structure - a domain with two OUs: Domain example.com - Admins (Admin User Accounts) - Computers I have a computer settings GPO, which I apply to ...
1
vote
2answers
52 views

Is is possible to apply a Group Policy for the same user logged-on to different computers?

I have a user (say, domain.local\admin) in my domain. When he logons to vpn.domain.local in group Servers I want to apply a policy. When he logons to laptop.domain.local in group Destop Computers I ...
0
votes
1answer
39 views

Can you install a service through GPO?

I know it's possible to run and stop services that are already installed, but is it possible to install a brand new service with a given executable?
1
vote
2answers
123 views

Is it possible to enforce local GPO over the domain?

I want to enforce local GPO settings on specific servers so that the domain GPO does not overwrite them. These systems were hardened specifically, but due to way too many issues to list, we cannot ...
1
vote
1answer
56 views

GPO Outlook 2013 to set non-cached mode is preventing Outlook from opening

I have a GPO applied to my conference room computers that forces Outlook to use non-cached mode (for quicker opening and to save HDD space by preventing everyone's OST from being created). When I try ...
0
votes
1answer
75 views

Best way to troubleshoot a GPO that is being applied but not working?

We are using GPO to push out proxy settings and it is applying and working for most users. There is a small group of users, admittedly in a separate OU, that it's just not working for. I can do a ...
1
vote
1answer
39 views

Add a scheduled task to the GPO progrematically

The assumption is I'm on a DC with admin rights. I want to add an immediate task to the GPO to run a .exe on the workstations, but I want to do it without the GUI i.e. quietly. Is there a way to do ...
2
votes
2answers
54 views

Multiple GPOs with Security Filtering or Single GPO with Item Level Targeting?

I have multiple GPOs for User Experience stuff (Eg: Shortcuts as GPP in User Configuration) which impacts a number of OUs and their users. It's currently one GPO per 'item' (Eg: shortcut, file) with a ...
0
votes
0answers
35 views

What is the best practice for employee users and their applications when they are replaced? [duplicate]

Here's my small office scenario (for simplicity sake): Windows Server 2012 R2 Essentials (Active Directory) with (4) workstations. (1) for each employee user. PLUS (1) production workstation that ...
2
votes
1answer
83 views

Reversible Encryption - Not Defined but Showing as Enabled?

I'm reviewing our complex password policy that was setup by a previous admin and I'm trying to gain some clarification on the setting for Reversible Encryption. In our organization, reversible ...
1
vote
1answer
92 views

Is it mandatory to use Group Policy to install or deploy applications?

Using Windows Server 2012 R2 Essentials on 1 server and about 5 workstations, do I have to use GPO to "deploy" the applications? i.e. CorelDraw, Adobe CS6, Office, Acrobat, etc. Or can I just go to ...
0
votes
0answers
87 views

Enable ping across domain

I want to enable the "File and Printer Sharing (Echo Request)" firewall rules in Windows Firewall with Advanced Security for all servers in the domain. How do I do this with Group Policy?
1
vote
1answer
35 views

Active Directory Group Policy - Default Domain Policy CSE GUID [closed]

The active directory attribute: "gPCUserExtensionNames" contain a CSE GUID and a Tool Extension GUID string value in order pass information for GPO behavior. I have found in the Default Domain ...
2
votes
2answers
245 views

compatibility mode server 2008 R2 higher than IE 7?

I have 4 terminal servers, all running server 2008 R2, that need to run a few websites in compatibility mode. When I create the GPO, all I see is IE 7 compatibility mode... This works for all the ...
0
votes
0answers
19 views

Give a right to domain user to manage his system's firewall

How can a we give a right to domain user to manage his system's firewall? We're having a Windows setup, and using Windows Server 2012 for managing domain group policies.
0
votes
1answer
345 views

Local group policy not applying (gpresult says its empty, but it's not)

We are running a strange AD constellation here, where the same logon script is defined within the local group policy on each server (don't ask me for the reason, it wasn't my idea). Then an (AD-) ...
0
votes
1answer
19 views

What is the syntax for the SNMP trap configuration group policy?

I want to configure SNMP traps through group policy, but the trap configuration dialog is just a plain list of strings. What do I have to enter here to configure the community name and trap server? ...
1
vote
1answer
731 views

Implementing A Custom Lock Screen Image Via GPO

I have a Domain running at the Windows Server 2008 functional level, which cannot be upgraded currently due to logistics reasons. I have a group of Student-access clients all running Windows Server ...
0
votes
1answer
39 views

Printers already installed but would like to block spooler to prevent future print jobs

I have tens of client machines over domain with Windows 7/8/8.1 installed and almost all machines are connected to different printers. Only one main printer is listed in AD which can be easily ...
0
votes
1answer
48 views

Implementing Custom Lock Screen image

I have a Domain running at the Windows Server 2008 functional level, which cannot be upgraded currently due to logistics reasons. I have a group of Student-access clients all running Windows Server ...
3
votes
2answers
415 views

Deploying printers to specific users via Group Policy

I have noticed two different ways of deploying printers to specific user with Group Policy in Windows Server 2012. The first method is by creating separate GPOs for each group, and the second method ...
2
votes
1answer
34 views

Checking Who Applied GPO

I know how to check what GPOs are applied on systems and users, but I'm wondering, is there a way to check who applied a specific GPO?
-1
votes
1answer
33 views

Apply group policy based on RDP Client O.S

I created a group policy to change the default shell, so that handheld PC can RDP to a Terminal Server and have the lob application kiosked. This work fine, but, sometime, is necessary to RDP with the ...
3
votes
1answer
2k views

GPO with SAMBA as DC

I am working on a network of 500 Windows workstations with Linux servers. SAMBA 4 is in use as the domain controller. Users can move between workstations, and as a results the contents of their ...
0
votes
0answers
48 views

Force a GPO to run synchronously on Windows Server 2008

We have authored a powershell script which carries out a number of installation and configuration steps in order to turn a bare Windows Server 2008 machine into a development workstation. The script ...
0
votes
2answers
3k views

How to disable Microsoft Office's first run wizard

I have a Windows 7 Professional computer in a workgroup. This computer has a mandatory user profile and uses Local GPO to configure the profile on each login. My issue is that I have recently ...
1
vote
1answer
180 views

How to use Local Group Policy on Windows 7 to allow or block URL’s for chrome and firefox?

I am a regular user not system admin. I need the help to use local group policy to allow to open one domain. For example, www.xxxx.com to open on the chrome or firefox (third-party browser), and make ...
0
votes
1answer
30 views

I’m having fundamental issue with Computer Group Policy Objects working but not showing as applied in gpresult

I created a Computer GPO that tells the workstations to make the monitor sleep in two minutes (just for testing.) I applied the GPO to the Computers OU. It works fine… I manually change the sleep ...
3
votes
1answer
189 views

Change an Applications and Services Logs log path using GPO

I am wanting to change the AppLocker Log path by a GPO. The specific log is found at Event Viewer \ Applications and Services Logs \ Microsoft \ Windows \ AppLocker \ EXE and DLL. I know you can ...
2
votes
1answer
57 views

I’m unable to get GPO Security Filtering to work for users

I’m unable to get GPO Security Filtering to work for users (called TestUser) and custom security groups (called TestGroup.) It does work for Authenticated Users or if I add the Computer. I did a ...
1
vote
1answer
67 views

Windows Server 2008: Group Policies Don't Apply Following WDS Install

We use WDS images combined with GPOs to automate the installation of our desktops. This all works great, except that when a WDS deployment to a new/existing PC is completed, there's a fifty/fifty ...
2
votes
1answer
130 views

Is it possible to configure domain joined computers via GP or otherwise to automatically register for the free Windows 10 upgrade

Is it possible to configure domain joined computers via GP or otherwise to automatically register for the free Windows 10 upgrade, but also prevent the upgrade from automatically installing? In other ...
0
votes
1answer
22 views

Remove drive given by gpo

I have a couple of GPOs that deliver out mapped drives through security groups. But when I remove someone from the group, the drive is still shown. The user don't have access to it, but it is still ...
1
vote
1answer
446 views

How to apply proxy settings per computer for only a specific computer group?

I want to apply windows proxy settings on a computer/location/OU basis using group policy (IE version for the moment is 8, but will be upgrading sooner or later). Presently, I have user objects and ...
0
votes
0answers
11 views

Printing preferences item level tagerting not working

I am trying to get Item level Targeting to work in Printing Preferences. This is on the Computer side. I have the security group set in ILT. On the object management screen, the Security Filtering ...
0
votes
2answers
159 views

How to assign by GPO a file/shortcut to desktop for both specific user and computer?

I have to put on my domain controler's desktops only a custom MMC for a specific user only. Tought the best course of action was: *Default_DC_OU containing DCs, applying the GPO for shortcut to MMC. ...
0
votes
0answers
190 views

0x80070bc4 No printers were found from Group Policy

We have several printers being deployed via Group Policy. We are constantly getting: '0x80070bc4 No printers were found.' error message on all of our printers every time a user logs into the system. ...
2
votes
1answer
2k views

Scheduled task deployed via GP, that runs a powershell script on a network share by a AD service account

I've created a powershell script that runs Chocolatey updates as well as does some logging locally and on a network share. The script itself resides on a network share, and I'm hoping to be able to ...
0
votes
0answers
173 views

Windows Server 2008r2 User Mapped Drives disconnect when GPO Mapped Drives are in effectg

I am trying to find out if a user can map their own drives and have them stay in place when they are subject to GPO mapped drives. The GPO that is in place will Map a drive which is assigned Q and ...
1
vote
1answer
90 views

Homepage setting in Local Group Policy not working on first launch of session

I have a Windows 7 Professional x64 computer I am trying to "lock down" in the absence of Steady State. I have set the policy for the Internet Explorer homepage under Administrative Templates - ...
21
votes
3answers
98k views

Registry key / GPO to disable and block Windows 10 upgrade?

One of our remote Windows 7 Professional users just reported that he received an Upgrade Reservation Offer for Windows 10. It appears the Get Windows 10 "App" running in his system tray is legit. So ...
-2
votes
1answer
241 views

group policy preferences missing in windows 7 [closed]

I have Windows 7 Professional 64-bit which is part of a workgroup network (no Windows server or Active Directory). I have an MMC console containing local group policies for Administrative and ...
3
votes
2answers
151 views

Active Directory - Make sure users who are never on premises receive AD policies on a regular basis

I have a few users in the field 100% of the time. I would like to have them authenticate to AD so that policies like Password changes and even maybe group policies are applied regularly. I want to ...
0
votes
0answers
18 views

Is there a way to obtain list of policies applied to built in accounts (e.g LocalSystem, IIS_USRS, etc.)

Is there a way to obtain list of policies applied to built in accounts (e.g LocalSystem, IIS_USRS, etc.)? I am working on a tool, which should monitor policies applied to specific set of users, ...
1
vote
2answers
139 views

Windows 8.1 locks account after 3 invalid attempts even if GP is not defined

I mistyped my password three times today, and my account became locked on my windows 8.1 pro workstation. I checked Resultant Set of Policies (rsop.msc) and all three relevant settings are "Not ...