Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

4
votes
1answer
7k views

Windows cannot access the file gpt.ini for GPO CN={31B2F340-016D-11D2-945F-00C04FB984F9}

I'm in the middle of a "swing" migration from Windows SBS 2003 to Server 2003 Standard. It's going okay so far but we're getting event 1058 on client machines: Windows cannot access the file gpt.ini ...
4
votes
2answers
44 views

Adding registry values to all users on domain

I have four registry values I would like to add to both HKCU and HKLM for all users connected to a network domain. Currently we are manually running a batch file on each of the computers when ...
4
votes
1answer
99 views

How to dump(collect) all the group policies in a domain?

I want to collect all the GPOs in a domain , for reviewing settings. How many ways are there to do it. I used Get-GPOREPORT in Powershell, but it gave a comprehensive html file, is these a way to ...
4
votes
3answers
209 views

If an email is sent to a user redirects if OOF is on

Is there a way to make a global change to either Exchange or group policy so if an email is received from an email address it will not go into the users mailbox but be forwarded on instead. Basically ...
4
votes
2answers
2k views

How do I disable SID security check for folder redirection with Group Policy?

How do I disable the SID security check for folder redirections with Group Policy? This isn't about weakening security, but rather about having Active Directory and Samba play nicely together. I have ...
4
votes
1answer
288 views

Group Policy - Transferring to another domain

I am in the process of setting up two RDS servers in different locations on different domains, I've set one up and I am very happy with it, it looks like a windows 7 desktop and its really fast so I ...
4
votes
2answers
853 views

Invalid directory pathname trying to back up GPO

DFSR replication seems to be broken in my domain, and before starting to fix that, I wanted to take backups of the current Group Policy Objects. However, I am unable to back up the Default Domain ...
4
votes
1answer
998 views

Exchange 2010 - Change “Conversation View” default setting in Outlook Web App

I'm converting an organization to Exchange from an older Linux-based Sendmail/Dovecot POP3 setup. In an attempt to ease the transition, I'd like to leverage Outlook Web App to help acclimate users to ...
4
votes
3answers
24k views

How do you apply proxy settings per computer instead of per user?

So far, I've used a user group policy object utilizing Internet Explorer maintenance to set a proxy for the user in IE. We have now deployed the Enterprise Client (EC) starter group policy to our ...
4
votes
1answer
235 views

Merging group policies

So basically, we have a dozen or more group policies which make the process of applying/changing/adding new policies a PITA. What I want to do is merge all the policies together and basically end up ...
4
votes
2answers
15k views

How can I edit local security policy from a batch file?

I am trying to write a utility as a batch file that, among other things, adds a user to the "Deny logon locally" local security policy. This batch file will be used on hundreds of independent ...
4
votes
3answers
2k views

Auto Log-Off Windows users - Windows 2003 domain

I am trying to make windows clients automatically log off after some time, I have been trying to use the winexit.scr which I have seen working else where in a similar environment. After working ...
4
votes
1answer
636 views

How to define the built-in administrators group in a group-policy object?

How do I define the built-in administrators group in a group policy? For example Computer Configuration => Policies => Windows Settings => Security Options => Local Policies => User ...
4
votes
1answer
6k views

Installing Lync 2013 Standard silently

I am trying to find a good way to deploy Lync 2013 standard & basic clients silently on computers with Windows 7 / Office 2010 & ahve a few roadblocks. 1) I am successful installing the ...
4
votes
1answer
2k views

What is the relationship between User Rights Assignment Policies vs. Membership of Local Groups

I just spent the better part of this morning on a support call with a vendor where we eventually resolved our issue by manually adding the service account their application was using to the following ...
4
votes
1answer
15k views

Local Group Policy not updating. RSOP and GPResult show stale data

This issue exists on a Windows 7 Pro x64 machine (Dell Inspiron E6420). I am trying to adjust a setting using gpedit.msc, but the change never seems to take effect. By that, I mean that setting that ...
4
votes
2answers
2k views

Managing Windows 8 Start Screen Tiles

Using DISM (Deployment Image Servicing and Management) it is possible to customize the initial Windows 8 Start Screen, although not in any satisfactory way. Is there an effective way to manage the ...
4
votes
1answer
1k views

Printers intermittently not being set as default

We have a lab of computers with printers being deployed to and set as default with Group Policy Preferences, but we're getting a large number of users who don't pick up the default settings. There's ...
4
votes
2answers
1k views

Group Policy GPO not 'seen' at client

I have a new OU (natorg.local\NATO\Users) that I am trying to apply GP to. I have created a new user in this OU, and linked the 3 GPO's to this OU: DESKTOP - Folder Redirection (AppData) DESKTOP - ...
4
votes
1answer
2k views

What does “Use mandatory profiles on the RD Session Host server” do?

The description for "Use mandatory profiles on the RD Session Host server" is a little ambiguous: This policy setting allows you to specify whether Remote Desktop Services uses a mandatory ...
4
votes
1answer
3k views

Group Policy Client failed the logon - Access Denied?

Background We have a Server 2008 R2/Win7 domain. We have teachers and students using Windows 7 workstations, deployed via SCCM. Students all refer to a shared profile (\\dfsroot\\profiles\student, ...
4
votes
2answers
699 views

Does Group Policy detect installed version before downloading an MSI from network

I used group policy to deploy an Adobe Reader X .msi file, which successfully updated the machines it was targeted to. The computer group those machines belong to still has a link to the GPO which ...
4
votes
1answer
3k views

How do I package this vbscript as a msi for Group Policy

I had a developer that is no longer with us create an msi to do this for me, but the package is outdated now and we need to deploy new files. Basically I need to do the following: Take the code at ...
4
votes
1answer
2k views

How can I disable the “Do you want to allow this website to open a program on your computer?” warning for a specific program/moniker?

I've been playing with new URL monikers in Windows for a utility I'm working on. When I run the new URL from Start > Run, it just runs. If I send the URL to myself via Notes or enter it into the IE ...
4
votes
1answer
1k views

GPO startup script not being ran

I am unable to get a GPO to run a script on startup. The script creates a shared folder on each machine in a group of windows 8 machines. The script itself works great, but attaching it to a GPO is ...
4
votes
1answer
2k views

Consistently slow domain logins / folder redirection

I've been trying to diagnose slow logins to my domain. One of my first stops was Domain login very slow 10+ minutes. So far I've been able to tell it has to do with my policy that applies folder ...
4
votes
3answers
2k views

How can I create a windows shutdown script from powershell/command-line?

I've read the TechNet pages that describe using computer/user startup/shutdown scripts, and that's great, but I'd like to create those scripts via the command-line (and not have to click around in ...
4
votes
3answers
16k views

Using group policy preferences to push a file to C:\Windows on a restricted user

We have a really old Video learning program that we need to run from the network for our students. However it uses Director Player 6.0 and the students get the error: "Unable to copy the driver file ...
3
votes
2answers
348 views

GPO option for “Show Desktop Icons”?

Is there a GPO setting (Server 2008 R2 domain) that we can use to set the following desktop property? View > Show Desktop Icons
3
votes
3answers
1k views

How do I make on Domain Controller be used more to logon than another Domain controller on the same network?

I am currently working in an environment where there are 2 DC's running and another DC that is a backup but is currently running as well so that if the other 2 fail, the backup has everything needed ...
3
votes
5answers
6k views

Implications of allowing Windows clients to use NTLMv1?

I have a web application that I'd like to authenticate to using pass-through NTLM for SSO. There is a problem, however, in that NTLMv2 apparently will not work in this scenario (without the ...
3
votes
2answers
8k views

Password policy vs password never expires question

I'm new to the Server administration game. I'm about to push out my first group policy concerning passwords. I'm going to do something simple. Use MS's built in complexity requirements and an max ...
3
votes
9answers
4k views

Windows domain password policy advice

I have windows domain that needs a password policy. Right now there isn't one. Anyone have feedback on a good balance between weak passwords and users having passwords so strong they just write them ...
3
votes
3answers
12k views

How do I add items to 'Favorites' via GPO?

How do I add items to all users 'Favorites', preferably via GPO? the screenshot is just an example from W7 but I'm actually working with 2008R2 Server and RDS
3
votes
4answers
965 views

Is it alright to turn off firewall in a LAN using Group Policy?

Is it a good idea or common practice to completely turn off windows firewall in an AD domain using Group Policy? At this time, even the servers' firewall are turned off. The only device not affected ...
3
votes
3answers
4k views

Automatically disable the “Manage Your Server” screen on Windows 2003?

Is there a line I can add to my login scripts or something with GPO to prevent the "Manage Your Server" screen from showing up when I log in to a Windows 2003 Server?
3
votes
5answers
553 views

Recommendations for learning to use Server 2003 (or possibly 2008)

I am currently an IT employee who works primarily with hardware/software desktop support, as well as various projects. I feel like I need to learn more about server/network administration and my ...
3
votes
2answers
861 views

Installing MSI Before User Logon

I have a requirement to install a MSI's to our workstations before logon, it's periodically updated and provides updates to our LOB applications. The problem we are encountering is when setting logon ...
3
votes
2answers
1k views

GPO Enforced Precedence

What is the precedence for Enforeced GPOs, I can't really find any MS articles which give a refined answer. My current understanding is as follows: Lets say we have 5 GPO's - GPO1 through GP05. I ...
3
votes
3answers
141 views

Precedence for GPO

I'm just trying to find what takes precedence in loading a GPO. Specifically, will drives map prior to scripts running? I have an .exe in a network share that I'm running every time a user logs in, ...
3
votes
4answers
329 views

GPO: Deploying software

I've set up a lab with 3 machines (2 Win7, 1 Win8) with the host being Win2008R2 acting as the DC (ADUC installed etc..). I've created a software package GPO and linked it to my domain: Here's the ...
3
votes
4answers
11k views

What Group Policy settings MUST be set within the Default Domain Policy?

Does anyone have an authoritative source of policies that, if set, MUST be set within the Default Domain Policy (if one chooses to set them)? Off the top of my head, I know that password policies and ...
3
votes
2answers
2k views

Distributing Files using a Group Policy on Windows Server 2003

A piece of software that we use at our office has recently moved to a new licensing system. This means that from now on a new set of license key files will need to be distributed to each of our 25 ...
3
votes
2answers
8k views

What URLs must be in IE's Trusted Sites list to allow Windows Update?

Particularly for servers in which IE Enhanced Security Configuration is enabled, you need to have all the Windows Update/Microsoft Update URLs in your "Trusted Sites" list in order to use the site. ...
3
votes
4answers
20k views

Diagnosing why a Group Policy Object is inaccessible

I have a Windows Server 2003 domain. One of the Group Policy Objects appears as a linked item in an OU but all I can see if the Unique ID and that the Link Status is Enabled. There is a red minus icon ...
3
votes
4answers
15k views

How to disable WSUS on our domain?

Our Network Admin, who toughed it out for 3 months here, setup a virtual WSUS server and added Group Policy to enforce a WSUS policy on about 1/3 of our workstations. The virtual WSUS server has since ...
3
votes
2answers
781 views

Setting up printers in active directory

I need some help setting up a printer in Active Directory. Specifically, deploying them via GPO. I want to have a computer associates with a specific shared computer so that anyone sitting there is ...
3
votes
2answers
3k views

Set Time Zone for all Windows Servers on a Domain (2008 R2)

Is there a way I can set the time zone for all machines on my domain (perhaps using a group policy?). All the Windows machines are Server 2008 R2.
3
votes
2answers
62 views

Is there a way to determine which client machines have installed software from a GPO?

If I assign software with a GPO, I assume that client machines will install this next time they reboot. However, I can't be certain without actually going to each of the clients and checking myself. ...
3
votes
2answers
6k views

WPA2 Personal - Deploying via GPO

I've got 300+ win7 clients I need to deploy WPA2 Personal PSK on. I can use a GPO to deploy the SSID information on the clients which is good but not the PSK. Is there a clean/easy way to script it ...