Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

3
votes
1answer
108 views

W2K8 - Why did GPOs break when I moved them to an OU?

I set up some GPOs and linked them to the top-level domain in the forest. They had security filtering enabled so that they would apply to a particular group, and everything worked great. My GPO tree ...
3
votes
3answers
6k views

Users are getting a temporary profile

A bit about current setup: It is windows 2008 R2 AD servers (all of them are 2008R2) and couple locations which set as Sites. Each location has DFS on AD server. Roaming profiles are not used nor ...
3
votes
1answer
381 views

SIDs in Active Directory GPO

I am looking into some weird issues with active directory and group policy. This domain has been upgraded from windows NT and has had a few different administrators over the years. I am looking ...
3
votes
1answer
189 views

Can active directory GPO's apply to a group object?

I know I can set up an OU, move user objects in to it, and link a GPO to that OU and that GPO will apply to those users. Is it possible to set up an OU, move a group in to the OU, and have a linked ...
3
votes
4answers
5k views

Printers deployed using Group Policy?

I am trying to deploy three printers on our network. I have added the role of Print and Document Services to our Domain Controller and then added the printers. I have right clicked on the printers ...
3
votes
1answer
501 views

Group Policy Design

I am planning the layout of an Active Directory installation for our organization. I am looking into the use of Group Policy to enforce particular settings, enhance security on our desktops and ...
3
votes
3answers
11k views

Changing IE Home Page through GPO?

Seems this should be simple, but I'm unable to find the combination of GPO options to default the home page so that the user can't change it, but to let them add any of their own home pages to the ...
3
votes
1answer
93 views

Disable TCP/IP Filtering via GPO

Is it possible to disable/overwrite Windows TCP/IP filtering settings via a Group Policy object? I have a server running 2012 R2 which I was setting up RRAS on, and I inadvertently cut myself off ...
3
votes
1answer
31 views

How to easily remove a large number of GPOs from Group Policy Management

I was setting up a group policy when I noticed what appears to be a large number of GPOs created by Kasperky AV. Im positive they were from a failed installation of the management software 2 years ...
3
votes
5answers
3k views

How to disable Java across all browsers via registry?

With the known Java threat on the loose, I've pushed a GPO to disable Java within IE. However, I'd like to disable Java across all browsers. Java provides documentation on how to do this via their ...
3
votes
2answers
234 views

Block Domain User login

I have created a Domain User id ( for example - Auser ). I have integrated my LDAP login with Firewall. I use this user to login in to firewall only. So, I want to block all the login for this User ...
3
votes
1answer
239 views

Audit when users log on and off servers

We have contractors periodically remoting into our production servers and goodness know what changes that they could potentially make. So What can I use to log when users log on or off a server(s)? ...
3
votes
1answer
2k views

Deploying .msi application through GPO doesn't work

I've been trying to deploy the forticlient SSL VPN application (.msi format) into my domain machines, using a GPO. Even though I made a silent previous installation by issuing the command: msiexec /qb ...
3
votes
2answers
1k views

What security context does the Group Policy engine run under on Windows?

More specifically… I would like to create a policy that runs a login script to copy a file from a share to a local folder. What account do I need to grant access to on the share in order for the ...
3
votes
1answer
670 views

Can I move the default domain Administrator account to a new OU without breaking something?

Question really asks it all. I want to apply a GP to the Domain Administrator account, but when I go to GPMC, you don't see the default OUs like Computers or Users listed. Can I move the account to ...
3
votes
4answers
3k views

Need to push a mass desktop background change

I need to find a quick way to change the background on all computers on my domain other than going to each one of them. I have already tried gpedit.msc user configuration/administrative ...
3
votes
1answer
2k views

Modifying Word's Normal template company-wide

We use Word 2003 on all computers; we also use Group Policy to set a shared "workgroup templates" folder, which is really useful as we can just copy .DOT files into there to make them accessible to ...
3
votes
6answers
4k views

How to correctly deploy Adobe Reader 9.1

I have recently tried to deploy Adobe Reader 9.1 onto our network here. (SBS 2003 server and XP Workstations) I followed the instructions for the extraction of the installer and .msi and then ...
3
votes
1answer
63 views

GPO Rule of thumb for: Disabled vs Enabled vs Not Configured

Is there any documentation that explains difference between these: Policy Not Configured Policy Disabled Policy Enabled, Setting Enabled Policy Enabled, Setting Disabled Policy Enabled, Setting ...
3
votes
2answers
65 views

Ensure drive is mapped at login on laptop with strictly wireless

So, $software runs on a 'server' (windows client w/ file sharing to share out the db folder), and laptop client has the drive mapped and $software also installed. This is the vendor's recommended ...
3
votes
1answer
444 views

Can I override domain group policy with local group policy as a local admin?

I am trying to provision a few special case laptops. I would like to create a local guest account. That's fine but when I try to create it I prompted that my guest password does not meet the ...
3
votes
1answer
51 views

Writing fully manageable administrative template

I'm writing administrative template for GPO. For example my policy is like this: CLASS MACHINE CATEGORY !!GMC CATEGORY !!Programos CATEGORY !!VNC POLICY ...
3
votes
1answer
1k views

How to configure Chrome on a Terminal Server

I have installed Google Chrome on a Windows 2003 Terminal Server and I now want to configure it for the users. How do I do that? For example clear cookies when browser close, set favorites and the ...
3
votes
1answer
429 views

Disabling Password Complexity for OU and C# App creating AD accounts

I created a C# app that is creating a series of AD accounts from a database. The issue i am running into is the passwords i am gathering had no complexity requirements so when i am passing them into ...
3
votes
1answer
121 views

What's the difference between these two GPO options?

What's the difference between the two GPO options below? NETWORK ACCESS : DO NOT ALLOW storage of credentials or .NET passports for network NETWORK ACCESS : DO NOT ALLOW storage of passwords and ...
3
votes
3answers
13k views

Using a GPO to run a batch file once

Is it possible that I could setup a GPO list for newly installed computers with many batch files (mainly file moving) and these would run only once and never again? I am beginner on this and I ...
3
votes
1answer
236 views

Is there a rule of thumb for when Group Policy GPO edits will require 1 or 2 restarts?

I've noticed that GPO edits sometimes require 0, 1, 2 and even 3 restarts. In all of these cases I made the policy change in the LAN domain controller and then forced replication to all servers. ...
3
votes
3answers
282 views

Backing up Group Policy Objects and their OU Links

I realise there are multiple ways in which you can backup GPO's - via Powershell, via Group Policy Mgmt and so forth, but how in Windows are you able to backup not only the GPO's themselves, but their ...
3
votes
1answer
3k views

Where Do I Find The Update URL For Google Chrome Extensions?

I'm trying to setup group policy for Google Chrome (http://support.google.com/installer/bin/answer.py?hl=en&answer=146164) particularily I'm working on setting up the Configuring the list of ...
3
votes
1answer
124 views

Sharing and Security model for local accounts: Any reason to use this Setting in a domain?

I am trying to solve an issue I have with logging into computers with local users remotely, and stumbled on this setting in GP on our Domain controller: This might solve my problem, but than there ...
3
votes
2answers
2k views

Deploy binary hex registry via GPO or PowerShell

I am trying to deploy a custom registry entry which I exported from a test machine. It looks like below. I came across THIS similar request on another site, but I couldn't make it to work. ...
3
votes
1answer
360 views

Which tool to use for managing GPOs: AGPM or SCM?

I am investigating the different solutions available to manage GPOs. I see that Microsoft proposes two tools, which are AGPM (Advanced Group Policy Management), part of the Desktop Optimization Pack ...
3
votes
2answers
72 views

Run legacy application on Windows

I've got an application (guiformat) which needs to run on clients in a network. However, it seems to require Administrator privileges to run. Clients run either Windows XP or Windows 7, and users log ...
3
votes
1answer
2k views

Folder Redirection on certain profiles is Labeled Wrong

FTR I also suffer from "previous-admin-itis". I had two client computers (Domain=SBS2003, Clients=Vista) that were using the improper folder for folder redirection. Instead of pointing My Documents ...
3
votes
1answer
1k views

How to determine how map drives are being mapped

I know there are several ways to map a drive letter to a networked resource in a Windows environment. What I would like to know is how to quickly determine the means for which each mapped drive is ...
3
votes
1answer
677 views

How do I upgrade Group Policy for Windows 7?

How do I upgrade Group Policy for Windows 7? Currently when I edit a policy I only see settings for 2000/XP. What do I need to do?
3
votes
3answers
4k views

Language Bar Turn Off Advanced Text services Global Policy

Is there a way I can set a global policy to turn off advanced text services so I can stop having to click this checkbox 8 million times? Client base is all Windows XP and the domain controller is ...
3
votes
1answer
3k views

Why do installed fonts disappear after reboot?

At my place of employment we have designers who have to be able to install fonts to complete their work so I have given them write access to %sysroot%\fonts and to %sysroot%\system32\FNTCACHE.DAT ...
3
votes
1answer
9k views

Troubleshooting windows 2008 shutdown issue

When I shutdown or reboot a couple of my Windows 2008 servers they hang for a long time and display the messaging "Shutting down Group Policy Client service ...". This forum post seems to suggest ...
3
votes
4answers
2k views

Set _default_ printer via group policy in 2003R2 to XP

Win 2003 R2 setup. I can push the printer via group policy, and pushprinterconnections.exe, but the printer isn't set as the default printer. Any ideas on how to set the default printer for an XP box ...
3
votes
1answer
64 views

Start Menu Folder Redirection - Extra items being added

Using Server 2012 on Win 7 machines, folder Redirection applied by GPO. It's an inherited network so I'm trying to find the cause of this issue as the previous techs left very little info. Problem: ...
3
votes
1answer
91 views

RDP Certificate subject name though a gateway

I have Server 2012 R2 setup with the Hyper-V and Server Essentials role enabled. I am running multiple machines that I would like to RDP to through a RDP Gateway. The gateway is correctly configured ...
3
votes
1answer
68 views

Can I apply a Group Policy only to systems that have specific software installed?

If I wanted to setup a group policy that installed Java, this would be no problem. But is it possible for the group policy to only apply to systems that have Mozilla Firefox installed? I don't know ...
3
votes
2answers
155 views

Active Directory - How to find what machine applied a GPO

I've got a GPO that is configured to change the local builtin Administrator's password on certain machines. I need to find what machines have applied this GPO to themselves. I've written a script that ...
3
votes
1answer
182 views

Remove access to drive “Properties” in My Computer

I'm attempting to lock down a Windows 7 build but I've noticed that users (In this case, students) can highlight a drive and get to the properties menu. I'd like to disable this if possible. I ...
3
votes
1answer
104 views

what does local group policy do in Dc?

when you have a dc, in fact you don't have LSD because it has migrated to GSD .But if you type Gpedit.msc in Run box it will open local group policy console . I've read that policies you have set in ...
3
votes
1answer
99 views

Create a Lockout policy for RDP

In my city there was a recent incident that some hackers login to a server by using brute force attack on RDP. I have got a server and I want to enable some security policy to lockout the account if ...
3
votes
1answer
574 views

No password is complex enough

I have one user in my AD domain who seems to not be able to self-select a password. I may have another one, but they're on a different enough password-expiration schedule that I can't remember who it ...
3
votes
3answers
3k views

Windows 2008 startup script will not run?

I am trying to get a very simple batch script to run when my Windows 2008 Server (R2) system starts up. I have added the script to the "Startup Scripts" in the local group policy by running ...
3
votes
1answer
114 views

How to install remote software NOT on a domain?

I have a situation where some software (that I wrote) is going to be deployed on 60 laptops for an event. The laptops are all running windows 7, but there is no domain controller, and they will all ...