Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

4
votes
4answers
35k views

Diagnosing why a Group Policy Object is inaccessible

I have a Windows Server 2003 domain. One of the Group Policy Objects appears as a linked item in an OU but all I can see if the Unique ID and that the Link Status is Enabled. There is a red minus icon ...
4
votes
2answers
801 views

Complete Active Directory redesign and GPO application

after much testing and hundreds of tries and hours invested I decided to consult you experts here. Overview: I want to apply some GPO to our users which will add some specific site to the Trusted ...
4
votes
3answers
2k views

GPO silent software deployment

I have added a software package to my networks Computer Configuration in the Group Policy Management Editor for SBS 2008. I've noticed that even after adding the package, and rebooting a machine on ...
4
votes
3answers
2k views

Group policy preferences mapping same drive multiple times

I recently changed over our old login script that mapped network drives over to group policy preference drive maps. Worked through a few issues at first, but appears to be working fine for all of our ...
4
votes
2answers
20k views

how to disable a user to install program being domain user?

My client (XP) can install Chrome in his system being a domain user account. how can i stop him/them from installation of Chrome through Windows Server 2003.
4
votes
2answers
4k views

Distributing Files using a Group Policy on Windows Server 2003

A piece of software that we use at our office has recently moved to a new licensing system. This means that from now on a new set of license key files will need to be distributed to each of our 25 ...
4
votes
1answer
899 views

port 445 blocked by Group Policy

I have managed to block port 445 in the windows firewall using Group Policy, now the server that has this GPO applied is unable to read further GPO updates from the domain controller. Is there any ...
4
votes
1answer
3k views

SID in AD - SID from psgetsid?

Wondering if anyone can shed some light on some SID confusion. Currently having an issue with some policy applying to a few machines that were all based off the same image. One of our admins, ran ...
4
votes
1answer
5k views

Will User GPO settings apply to a Computer OU

If I have a GPO that contains a handful of user settings - if i apply this to a OU container which contains computer objects - will those User Policies then apply to any user who logs onto that ...
4
votes
1answer
4k views

Apply Group Policy to Remote Desktop Services users but not when they log on to their local system

Running Windows Server 2008 Service Pack 2 with Remote Desktop Services role. I want to hide the servers drives using a GPO, but not the users local drives when they are logged on to their local ...
4
votes
1answer
156 views

Group Policy Preferences in Server 2008 R2

I am reinstalling a Domain Controller after a hard drive failure (new backup system is already in place!) and I have come to the part where I need to re-create the group policies. Originally we were ...
4
votes
1answer
3k views

Can screen resolution be set in Active Directory Domain Group Policy?

Is there anywhere that screen resolution can be set for the users at the domain group policy level?
4
votes
3answers
92 views

How to inherit from Default Domain GPO?

I recall reading somewhere that it's advisable to not make changes directly to the Default Domain GPO, but instead to create a new GPO that inherits from Default. This sounds reasonable. I'm a ...
4
votes
2answers
76 views

Use “Client Site Name” in Group Policy Preferences

In Active Directory, you can map IP addresses to Client Sites. ...and then you can map Group Policy objects to sites. Which is great and all, but I have a client that is growing rapidly, and ...
4
votes
1answer
109 views

New implementation of home and department shares; help me get it right the first time?

I've the rare opportunity to set up from scratch our first home and department share server in a mid sized company (about 250 people), and would like to make something that's reasonable. We're going ...
4
votes
3answers
9k views

Allow users to log on to computers in a domain

I work for a company we are on a domain. At the minute we have 8 meeting rooms and in those meeting rooms there is 8 mini PCs. At the moment the only people that are allowed to log on to this PC are ...
4
votes
1answer
1k views

How can I start a program from a login batch script if the Command Prompt is disabled?

Our Terminal Servers has two Group Policies in place: one that includes disabling the command prompt, and another that runs a batch script to startup a program upon login. But the startup program ...
4
votes
1answer
1k views

Syncing Domain Controller Clocks

It appears some computers in our computer lab have clocks running about 3-4 minutes fast. As of right now, when we join a computer to the domain, it sets the clock based on our server's Domain ...
4
votes
1answer
4k views

GPO with SAMBA as DC

I am working on a network of 500 Windows workstations with Linux servers. SAMBA 4 is in use as the domain controller. Users can move between workstations, and as a results the contents of their ...
4
votes
1answer
253 views

If a GPO is not the Winning GPO does none or part of the GPO get applied?

I am reviewing some gpresults settings and it shows the Winning GPO as a server configured GPO. If another GPO has already won and a second GPO tries to set a conflicting settings does the second ...
4
votes
1answer
979 views

Can I apply a Group Policy only to systems that have specific software installed?

If I wanted to setup a group policy that installed Java, this would be no problem. But is it possible for the group policy to only apply to systems that have Mozilla Firefox installed? I don't know ...
4
votes
1answer
48k views

How to lock Windows 7 workstation after inactivity via GPO (no screensaver or blank screen- just lock screen)

Our users have increasingly started leaving their workstations logged in and unattended (during lunch breaks etc.) To tackle the security threat this poses, we have enforced a password-protected ...
4
votes
1answer
5k views

How to configure Chrome on a Terminal Server

I have installed Google Chrome on a Windows 2003 Terminal Server and I now want to configure it for the users. How do I do that? For example clear cookies when browser close, set favorites and the ...
4
votes
3answers
681 views

Redeploying Office to a single client after manual uninstall

One of our client PC's recently got random crash issues with MS Word. I manually uninstalled Office 2003 locally on the client, ran "gpupdate /force /boot" and expected the client to reinstall Office ...
4
votes
5answers
882 views

Conficker: Should steps taken in group policy to secure against virus remain?

We got nailed two weeks ago by Conficker, I ran through the 26 step checklist from Mircrosoft on my own computer, as well as on our domain server. It says near the end to reverse all the changes, but ...
4
votes
1answer
271 views

Create a security group that can promote a member server to domain controller without being in the domain admins group

I am trying to figure out a way to delegate permission to a security group to add domain controllers to a domain. The catch is I do not want to add them to the Domain Admin or Enterprise Admin groups....
4
votes
1answer
194 views

Deploy Software via GPO, but also deploy configuration file

When deploying software through a group policy, is there any special trick that will allow you to also deploy a separate, say config, file along with it? Here's the specific problem: We have a ...
4
votes
1answer
9k views

Java 8 Update 25 Install Via GPO Not Working

I am trying to set up our Active Directory DC to automatically install Java 8 Update 25 (jre1.8.0_25.msi) using Group Policy. When attempting to add the jre1.8.0_25.msi package in the GPO at Computer ...
4
votes
1answer
650 views

Changing password expiration policy at next password change

We have a password policy with a maximum password age of 180 days. For various reasons we need to change it to 90 days, with a minimum impact for the users. Our users are normally warned about the ...
4
votes
3answers
10k views

Install chrome extensions via GPO

I'm attepting to install the adblock chrome extension using Google's Chrome ADM's. User Configuration/Policies/Classic Administrative Templates/Google/Google Chrome/Extensions Configure the list of ...
4
votes
1answer
2k views

Publish Bookmarks in FireFox with Active Directory (AD)

Issue: We have a number of bookmarks that we need to publish to our users computers that are bound to active directory. We can easily accomplish this with group policy for Internet Explorer. At the ...
4
votes
1answer
3k views

local admin vs domain admin on a domain controller

I would like to create a group policy to set a specific password for all local administrator users. Now even though you can't manage local users on a domain controller ("This snap-in cannot be used on ...
4
votes
2answers
4k views

Event ID for modified GPOs

I have to know, who (usersid or loginname) changed a specified GPO for a specified OU in the Active Directory. Given our audit settings include this, what would be the right Event ID to look for?
4
votes
2answers
54 views

Disable password complexity on Windows 2012 R2

I have a Windows Server 2012 R2 that is my domain controller. I want to disable the password complexity rule for a few users only. I have created a group (called Formation) in AD to identify these ...
4
votes
1answer
63 views

What happens to non-domain controller workstations/servers when user rights assignment policies are removed/no longer apply?

I'm trying to do a good ol' fashioned Group Policy Object clean-up job on our domain controller that was upgraded from Windows 2000 (Small Business I think) to Windows Server 2008R2. In my company's ...
4
votes
2answers
1k views

Set Windows default sound scheme using GPO

We have 50 Windows 7 client computers in an AD OU for which we need to change the Windows Default Sound Scheme to None. How can this be accomplished using Group Policy?
4
votes
2answers
668 views

Pin “Run” to taskbar through group policy

Is there are way to pin the "Run" button to taskbar through group policy or a script? Only the specific items needs to be pinned. The other items are not to be touched. Partial solutions I found on ...
4
votes
1answer
955 views

Group Policy Files - Active Directory

I am having a whole lot of trouble getting some files distributed across the network. My settings are: Action: Replace Source: \\[fqdn]\Repo\sqljdbcl.jar Destination: %ProgramFiles%\Java\jre1.8.0_25\...
4
votes
2answers
4k views

Group Policy installation failed error %%1274

OK, I have a really tough one I've already spent all morning on. PC is a Win7 64 with SP1 and all MS Patches Usual error everyone is familiar with: The assignment of application Adobe Reader X MUI ...
4
votes
2answers
5k views

Windows - Software restriction policy to block exe files in all subdirectories

How can I block all executables in %APPDATA%? I've read for CryptoLocker this is a good policy: C:\Users\User\AppData\Roaming\*\*.exe But that apparently won't protect more than one layer deep....
4
votes
1answer
1k views

Targetting Printer GPO to a Subnet

I'm aware that you can target specific printers via the individual Item-level targeting to a subnet. I have about 20 printers that I would rather put the full group policy into maybe a WMI filter for ...
4
votes
1answer
275 views

Create a Lockout policy for RDP

In my city there was a recent incident that some hackers login to a server by using brute force attack on RDP. I have got a server and I want to enable some security policy to lockout the account if ...
4
votes
1answer
3k views

How to hide “Log Off” button Windows 2008 R2?

I have created a Standard user and disabled the "Switch User/Lock" from registry with the followings : HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer [StartMenuLogOff=...
4
votes
1answer
408 views

Server 2008: Link security group to organisational unit

I've created a test domain with 2 VM's to experiment and try to gain some knowledge using Server 2008 (+GPO's, OU's, ADUC etc) however I've become a little stuck. I've created an OU called User ...
4
votes
2answers
111 views

Windows 2003 DC GPO Asking for Password on Startup

Simple answer I am sure...I an trying to deploy Office 2010 to clients via the GPO startup script but am having issues. Soon as the computer starts, it prepares network connections then goes on to ...
4
votes
2answers
2k views

Exactly HOW are machine start-up Group Policies processed and what is required?

We have Server 2008 R2 and Windows 7 Enterprise. I'm asking this because we have several hundred laptops and netbooks at our organization. We do'nt have a NAC or a RADIUS server so all the wireless ...
4
votes
2answers
2k views

Set binary registry setting through GPO

I've got a REG_BINARY registry key that I'd like to set via GPO. However, the GPO interface to add registry settings simply has a 'Value Data' text field. I can set the type to REG_BINARY, but what ...
4
votes
2answers
402 views

Applying Group Policy to the Security Groups

I'm using VBScript in my logon script to map network drives.. I know that a group policy should applied to individual user accounts and computer accounts by linking (GPOs) to Active Directory ...
4
votes
2answers
526 views

Change default profile directory per group

Is it possible to force windows to create profiles for members of one active directory group in a different folder from members in another active directory group? The school here uses DeepFreeze to ...
4
votes
5answers
7k views

Printer deployment via Group Policy not working on a single system

One of my coworkers just got a new laptop running Windows 7 Pro x64. We use a GPO to deploy the printers to every system, but for some reason it is not working on this system. I have been breaking my ...