Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

4
votes
2answers
4k views

What is the best method to change the server used for folder redirection?

For years I've been using folder redirection for all my desktop clients (Win7). I am looking to migrate all data to a new server/share. I have already created a new share with the same ACL and used ...
4
votes
2answers
2k views

Group Policy installation failed error %%1274

OK, I have a really tough one I've already spent all morning on. PC is a Win7 64 with SP1 and all MS Patches Usual error everyone is familiar with: The assignment of application Adobe Reader X MUI ...
4
votes
1answer
2k views

Company Wide Windows Auth with Chrome and Firefox

I know that we can allow Firefox to allow passing through of Windows credentials by editing the following about:config settings --If using Kerberos-- network.negotiate-auth.trusted-uris ...
4
votes
1answer
760 views

Targetting Printer GPO to a Subnet

I'm aware that you can target specific printers via the individual Item-level targeting to a subnet. I have about 20 printers that I would rather put the full group policy into maybe a WMI filter for ...
4
votes
3answers
6k views

Windows 2008 startup script will not run?

I am trying to get a very simple batch script to run when my Windows 2008 Server (R2) system starts up. I have added the script to the "Startup Scripts" in the local group policy by running ...
4
votes
1answer
363 views

Server 2008: Link security group to organisational unit

I've created a test domain with 2 VM's to experiment and try to gain some knowledge using Server 2008 (+GPO's, OU's, ADUC etc) however I've become a little stuck. I've created an OU called User ...
4
votes
1answer
8k views

How to apply an Group Policy only to Clients in a specific IP range? (using WMI Filter)

I need to apply a GPO only to some computers in a specific network range. I'm aware that there many other solutions for this issue. I could group them into an OU or use Sites. But the current ...
4
votes
2answers
107 views

Windows 2003 DC GPO Asking for Password on Startup

Simple answer I am sure...I an trying to deploy Office 2010 to clients via the GPO startup script but am having issues. Soon as the computer starts, it prepares network connections then goes on to ...
4
votes
2answers
1k views

Exactly HOW are machine start-up Group Policies processed and what is required?

We have Server 2008 R2 and Windows 7 Enterprise. I'm asking this because we have several hundred laptops and netbooks at our organization. We do'nt have a NAC or a RADIUS server so all the wireless ...
4
votes
2answers
510 views

Change default profile directory per group

Is it possible to force windows to create profiles for members of one active directory group in a different folder from members in another active directory group? The school here uses DeepFreeze to ...
4
votes
5answers
6k views

Printer deployment via Group Policy not working on a single system

One of my coworkers just got a new laptop running Windows 7 Pro x64. We use a GPO to deploy the printers to every system, but for some reason it is not working on this system. I have been breaking my ...
4
votes
2answers
3k views

Windows 7 - Group Policy - Allow RDP Credentials to be Saved

Im trying to use RDP and save my credentials in a file so I dont have to entire it each time I connect. I remember doing it before and it involved changing a group policy setting. What exactly do I ...
4
votes
4answers
683 views

Published software not displayed in Add/Remove Programs

I just followed How to use Group Policy to remotely install software in Windows Server 2003 to try publishing a software (MSI file). I could follow all the steps, but the supposedly successfully ...
4
votes
2answers
17k views

How can I edit local security policy from a batch file?

I am trying to write a utility as a batch file that, among other things, adds a user to the "Deny logon locally" local security policy. This batch file will be used on hundreds of independent ...
4
votes
1answer
7k views

Windows cannot access the file gpt.ini for GPO CN={31B2F340-016D-11D2-945F-00C04FB984F9}

I'm in the middle of a "swing" migration from Windows SBS 2003 to Server 2003 Standard. It's going okay so far but we're getting event 1058 on client machines: Windows cannot access the file gpt.ini ...
4
votes
2answers
58 views

Adding registry values to all users on domain

I have four registry values I would like to add to both HKCU and HKLM for all users connected to a network domain. Currently we are manually running a batch file on each of the computers when ...
4
votes
1answer
134 views

How to dump(collect) all the group policies in a domain?

I want to collect all the GPOs in a domain , for reviewing settings. How many ways are there to do it. I used Get-GPOREPORT in Powershell, but it gave a comprehensive html file, is these a way to ...
4
votes
3answers
267 views

If an email is sent to a user redirects if OOF is on

Is there a way to make a global change to either Exchange or group policy so if an email is received from an email address it will not go into the users mailbox but be forwarded on instead. Basically ...
4
votes
2answers
2k views

How do I disable SID security check for folder redirection with Group Policy?

How do I disable the SID security check for folder redirections with Group Policy? This isn't about weakening security, but rather about having Active Directory and Samba play nicely together. I have ...
4
votes
1answer
338 views

Group Policy - Transferring to another domain

I am in the process of setting up two RDS servers in different locations on different domains, I've set one up and I am very happy with it, it looks like a windows 7 desktop and its really fast so I ...
4
votes
2answers
975 views

Invalid directory pathname trying to back up GPO

DFSR replication seems to be broken in my domain, and before starting to fix that, I wanted to take backups of the current Group Policy Objects. However, I am unable to back up the Default Domain ...
4
votes
1answer
1k views

Exchange 2010 - Change “Conversation View” default setting in Outlook Web App

I'm converting an organization to Exchange from an older Linux-based Sendmail/Dovecot POP3 setup. In an attempt to ease the transition, I'd like to leverage Outlook Web App to help acclimate users to ...
4
votes
2answers
742 views

Does Group Policy detect installed version before downloading an MSI from network

I used group policy to deploy an Adobe Reader X .msi file, which successfully updated the machines it was targeted to. The computer group those machines belong to still has a link to the GPO which ...
4
votes
1answer
266 views

Merging group policies

So basically, we have a dozen or more group policies which make the process of applying/changing/adding new policies a PITA. What I want to do is merge all the policies together and basically end up ...
4
votes
3answers
2k views

Auto Log-Off Windows users - Windows 2003 domain

I am trying to make windows clients automatically log off after some time, I have been trying to use the winexit.scr which I have seen working else where in a similar environment. After working ...
4
votes
1answer
877 views

How to define the built-in administrators group in a group-policy object?

How do I define the built-in administrators group in a group policy? For example Computer Configuration => Policies => Windows Settings => Security Options => Local Policies => User ...
4
votes
1answer
8k views

Installing Lync 2013 Standard silently

I am trying to find a good way to deploy Lync 2013 standard & basic clients silently on computers with Windows 7 / Office 2010 & ahve a few roadblocks. 1) I am successful installing the ...
4
votes
1answer
2k views

What is the relationship between User Rights Assignment Policies vs. Membership of Local Groups

I just spent the better part of this morning on a support call with a vendor where we eventually resolved our issue by manually adding the service account their application was using to the following ...
4
votes
1answer
18k views

Local Group Policy not updating. RSOP and GPResult show stale data

This issue exists on a Windows 7 Pro x64 machine (Dell Inspiron E6420). I am trying to adjust a setting using gpedit.msc, but the change never seems to take effect. By that, I mean that setting that ...
4
votes
2answers
2k views

Managing Windows 8 Start Screen Tiles

Using DISM (Deployment Image Servicing and Management) it is possible to customize the initial Windows 8 Start Screen, although not in any satisfactory way. Is there an effective way to manage the ...
4
votes
1answer
2k views

Printers intermittently not being set as default

We have a lab of computers with printers being deployed to and set as default with Group Policy Preferences, but we're getting a large number of users who don't pick up the default settings. There's ...
4
votes
2answers
1k views

Group Policy GPO not 'seen' at client

I have a new OU (natorg.local\NATO\Users) that I am trying to apply GP to. I have created a new user in this OU, and linked the 3 GPO's to this OU: DESKTOP - Folder Redirection (AppData) DESKTOP - ...
4
votes
1answer
2k views

What does “Use mandatory profiles on the RD Session Host server” do?

The description for "Use mandatory profiles on the RD Session Host server" is a little ambiguous: This policy setting allows you to specify whether Remote Desktop Services uses a mandatory ...
4
votes
1answer
4k views

Group Policy Client failed the logon - Access Denied?

Background We have a Server 2008 R2/Win7 domain. We have teachers and students using Windows 7 workstations, deployed via SCCM. Students all refer to a shared profile (\\dfsroot\\profiles\student, ...
4
votes
1answer
1k views

Hide Total Size and Free Space on Network Drives

I would like to know if there is a way, preferably through Group Policy, that one can hide the total size listing and the free space listing on network drives. We have an active directory environment ...
4
votes
1answer
3k views

How do I package this vbscript as a msi for Group Policy

I had a developer that is no longer with us create an msi to do this for me, but the package is outdated now and we need to deploy new files. Basically I need to do the following: Take the code at ...
4
votes
1answer
32 views

Identify non-domain remote clients with Item-Level targeting

I would like to apply a group policy preference setting (to deploy a shared printer) only if a user is connecting to a RDSH server from a non domain-joined client computer. Many of these clients will ...
4
votes
1answer
2k views

GPO startup script not being ran

I am unable to get a GPO to run a script on startup. The script creates a shared folder on each machine in a group of windows 8 machines. The script itself works great, but attaching it to a GPO is ...
4
votes
0answers
120 views

Server 2008 R2 WMI problems

I get error "1065" from Group Policy when trying to run GPUpdate, and Group Policy is specifying that it cannot process the WMI query. I can successfully run some queries manually, but WMIDiag ...
4
votes
0answers
368 views

Proxy Server setting stuck on Server 2003 R2 for Windows Updates

Stay a while and listen. This is going to be a long one. We've been having a problem the last couple of months with Updates on very specific Microsoft Server 2003 R2 Machines. This problem has ...
4
votes
1answer
3k views

Consistently slow domain logins / folder redirection

I've been trying to diagnose slow logins to my domain. One of my first stops was Domain login very slow 10+ minutes. So far I've been able to tell it has to do with my policy that applies folder ...
4
votes
3answers
2k views

How can I create a windows shutdown script from powershell/command-line?

I've read the TechNet pages that describe using computer/user startup/shutdown scripts, and that's great, but I'd like to create those scripts via the command-line (and not have to click around in ...
4
votes
0answers
2k views

Is MSIZAP still useful, or is it obsolete?

I update flash using MSI files installed by group policy. However, with every update, about a third of the workstations fail to update (Windows Vista and Windows 7 32/64-bit editions). In the event ...
4
votes
3answers
18k views

Using group policy preferences to push a file to C:\Windows on a restricted user

We have a really old Video learning program that we need to run from the network for our students. However it uses Director Player 6.0 and the students get the error: "Unable to copy the driver file ...
4
votes
5answers
4k views

How can I erase the traces of Folder Redirection from the Default Domain Policy

I've taken over from an IT outsourcer and have found a struggle now that we're starting a migration to windows 7. Someone decided that they would setup Folder redirection in the Default Domain ...
3
votes
3answers
1k views

How do I make on Domain Controller be used more to logon than another Domain controller on the same network?

I am currently working in an environment where there are 2 DC's running and another DC that is a backup but is currently running as well so that if the other 2 fail, the backup has everything needed ...
3
votes
5answers
6k views

Implications of allowing Windows clients to use NTLMv1?

I have a web application that I'd like to authenticate to using pass-through NTLM for SSO. There is a problem, however, in that NTLMv2 apparently will not work in this scenario (without the ...
3
votes
2answers
9k views

Password policy vs password never expires question

I'm new to the Server administration game. I'm about to push out my first group policy concerning passwords. I'm going to do something simple. Use MS's built in complexity requirements and an max ...
3
votes
9answers
4k views

Windows domain password policy advice

I have windows domain that needs a password policy. Right now there isn't one. Anyone have feedback on a good balance between weak passwords and users having passwords so strong they just write them ...
3
votes
3answers
14k views

How do I add items to 'Favorites' via GPO?

How do I add items to all users 'Favorites', preferably via GPO? the screenshot is just an example from W7 but I'm actually working with 2008R2 Server and RDS