Questions tagged [group-policy]
Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.
3,228
questions
4
votes
2
answers
3k
views
Group Policy application on Domain Controllers
I am building a test Active Directory forest in a virtual environment. I will be part of a team in the future that will build a new Forest for our organization. I don't have experience managing a ...
- 177
4
votes
3
answers
5k
views
Group policy preferences mapping same drive multiple times
I recently changed over our old login script that mapped network drives over to group policy preference drive maps. Worked through a few issues at first, but appears to be working fine for all of our ...
- 2,023
4
votes
2
answers
5k
views
Distributing Files using a Group Policy on Windows Server 2003
A piece of software that we use at our office has recently moved to a new licensing system. This means that from now on a new set of license key files will need to be distributed to each of our 25 ...
- 383
4
votes
3
answers
67k
views
Excluding a specific machine from Group Policy - Server Essentials 2012
Server OS: Server Essentials 2012
Client OS Windows 8.1
I have a domain set up using SE 2012 and have used the group Policy wizard to apply Folder Redirection and "Security Settings".
Can I make an ...
4
votes
3
answers
70k
views
How to change default region/culture settings in Windows 2012
I have researched this topic through the web but can't find a definitive answer.
Our server team has recently upgraded our SQL Servers VMs from Win 2003 to Win 2012.
Given our region we run all our ...
- 149
4
votes
1
answer
25k
views
How Can I Apply Local Group Policy to multiple computers
Exactly like the title said, How can I apply local group policy to multiple computers? Around 500 PCs (I think) I understand the domain group policy can push down the policy but for my scenario here, ...
- 69
4
votes
1
answer
15k
views
Will User GPO settings apply to a Computer OU
If I have a GPO that contains a handful of user settings - if i apply this to a OU container which contains computer objects - will those User Policies then apply to any user who logs onto that ...
- 1,684
4
votes
1
answer
4k
views
port 445 blocked by Group Policy
I have managed to block port 445 in the windows firewall using Group Policy, now the server that has this GPO applied is unable to read further GPO updates from the domain controller.
Is there any ...
- 345
4
votes
2
answers
102k
views
Disable Windows locking with a GPO?
I have set up a lab with a number of Windows Server 2012 R2 machines. The lab has an Active Directory domain (DFL: Windows Server 2012 R2, FFL: Windows Server 2012 R2) and these machines are joined to ...
- 972
4
votes
1
answer
7k
views
SID in AD - SID from psgetsid?
Wondering if anyone can shed some light on some SID confusion.
Currently having an issue with some policy applying to a few machines that were all based off the same image. One of our admins, ran ...
- 333
4
votes
1
answer
24k
views
GPO Rule of thumb for: Disabled vs Enabled vs Not Configured
Is there any documentation that explains difference between these:
Policy Not Configured
Policy Disabled
Policy Enabled, Setting Enabled
Policy Enabled, Setting Disabled
Policy Enabled, Setting ...
- 223
4
votes
2
answers
24k
views
Accessing the Computer Configuration node in Group Policy settings
I am trying to configure Terminal Services printing related group policy settings and the technet doc says I need to go here:
Computer Configuration\Policies\Administrative Templates\Windows ...
- 141
4
votes
1
answer
4k
views
SIDs in Active Directory GPO
I am looking into some weird issues with active directory and group policy. This domain has been upgraded from windows NT and has had a few different administrators over the years. I am looking ...
- 341
4
votes
1
answer
199
views
Group Policy Preferences in Server 2008 R2
I am reinstalling a Domain Controller after a hard drive failure (new backup system is already in place!) and I have come to the part where I need to re-create the group policies.
Originally we were ...
- 2,727
4
votes
1
answer
4k
views
Can screen resolution be set in Active Directory Domain Group Policy?
Is there anywhere that screen resolution can be set for the users at the domain group policy level?
- 2,348
4
votes
2
answers
337
views
Best practice on deploying MSIs via group policies: from dedicated share or from the AD itself?
For years I have been using GPOs to install MSIs to our Windows clients. All MSIs resided under a single \\fileserver\share, with a GPO assigned to each MSI for installation. Currently, out AD servers ...
- 163
4
votes
2
answers
1k
views
Use "Client Site Name" in Group Policy Preferences
In Active Directory, you can map IP addresses to Client Sites.
...and then you can map Group Policy objects to sites.
Which is great and all, but I have a client that is growing rapidly, and they ...
4
votes
1
answer
132
views
New implementation of home and department shares; help me get it right the first time?
I've the rare opportunity to set up from scratch our first home and department share server in a mid sized company (about 250 people), and would like to make something that's reasonable.
We're going ...
4
votes
1
answer
6k
views
Can I apply a Group Policy only to systems that have specific software installed?
If I wanted to setup a group policy that installed Java, this would be no problem. But is it possible for the group policy to only apply to systems that have Mozilla Firefox installed?
I don't know ...
- 153
4
votes
1
answer
5k
views
Why do I not have "Shared printer" within group policy preferences in Win 2008 R2 gpmc?
I have performed some research, and it appears that I can target both XP and 7 clients with group policy preferences to add a shared printer.
This article describes the presence of a Shared Printer ...
- 1,860
4
votes
2
answers
13k
views
Is there a way to centrally manage Dropbox/centrally disable LAN sync for all Dropbox clients on a Windows LAN?
We have a windows (7 pro) workstation LAN, managed via Group Policy. Lots of our users run Dropbox. Security concerns aside, one of our netadmins says that our routers/firewalls are handling and ...
- 841
4
votes
1
answer
2k
views
How can I start a program from a login batch script if the Command Prompt is disabled?
Our Terminal Servers has two Group Policies in place: one that includes disabling the command prompt, and another that runs a batch script to startup a program upon login.
But the startup program ...
- 640
4
votes
2
answers
21k
views
Update driver on deployed printer
I re-deployed a printer via group policy after updating the printer drivers on the print server.
On some Windows 7 workstations the drivers could be updated on a printer by right-clicking it --> ...
- 485
4
votes
1
answer
2k
views
Syncing Domain Controller Clocks
It appears some computers in our computer lab have clocks running about 3-4 minutes fast.
As of right now, when we join a computer to the domain, it sets the clock based on our server's Domain ...
- 199
4
votes
1
answer
5k
views
Modifying Word's Normal template company-wide
We use Word 2003 on all computers; we also use Group Policy to set a shared "workgroup templates" folder, which is really useful as we can just copy .DOT files into there to make them accessible to ...
- 243
4
votes
2
answers
4k
views
Enable Windows Hello within domain machines
My goal is to allow users to use Windows Hello on their computers which are connected to the domain. It doesn't have to be Hello for business. At the moment users even can't see Windows Hellow section ...
- 195
4
votes
1
answer
561
views
Apply New Password Policy via GPO Gradually
I want to make changes to the password policy in our domain (for example, include password complexity) but I want to apply it gradually, to some OU's or users group first. As far as I know the ...
- 299
4
votes
5
answers
59k
views
How to enable PIN login for domain-joined Windows 10 Pro via Group Policy
First I tried enabling PIN using Computer Configuration/Administrative Templates/System/Logon/Turn on convenience PIN sign-in.
This did allow me to set a PIN on the client PC (previously this option ...
- 848
4
votes
2
answers
5k
views
Disable password complexity on Windows 2012 R2
I have a Windows Server 2012 R2 that is my domain controller. I want to disable the password complexity rule for a few users only.
I have created a group (called Formation) in AD to identify these ...
- 155
4
votes
5
answers
41k
views
How Can I Enable MSS Group Policy Settings Windows Server 2012
In the past I have gone through a server hardening checklist on a Windows Server 2008 web server for PCI compliance. Basically there are a lot of Group Policy, Registry, and other settings that need ...
- 113
4
votes
1
answer
4k
views
If a GPO is not the Winning GPO does none or part of the GPO get applied?
I am reviewing some gpresults settings and it shows the Winning GPO as a server configured GPO. If another GPO has already won and a second GPO tries to set a conflicting settings does the second ...
- 1,046
4
votes
1
answer
8k
views
How to configure Chrome on a Terminal Server
I have installed Google Chrome on a Windows 2003 Terminal Server and I now want to configure it for the users. How do I do that? For example clear cookies when browser close, set favorites and the ...
- 265
4
votes
4
answers
16k
views
GPO Security Filtering Not Working
I have a problem with my domain, were the group policies aren't applying.
I currently have two security groups; 1) 32bit clients 2) 64 bit clients
In these two groups are our different computers, ...
- 279
4
votes
1
answer
5k
views
local admin vs domain admin on a domain controller
I would like to create a group policy to set a specific password for all local administrator users. Now even though you can't manage local users on a domain controller ("This snap-in cannot be used on ...
- 89
4
votes
2
answers
480
views
Fixing Users and Computers accounts structure in Active Directory
I'm trying to fix a completely unplanned and unstructured Active Directory hierarchy.
When the domain was first created on Windows Server 2000, no containers or OUs whatsoever were created for users ...
- 699
4
votes
3
answers
758
views
Redeploying Office to a single client after manual uninstall
One of our client PC's recently got random crash issues with MS Word. I manually uninstalled Office 2003 locally on the client, ran "gpupdate /force /boot" and expected the client to reinstall Office ...
- 19.7k
4
votes
5
answers
1k
views
Conficker: Should steps taken in group policy to secure against virus remain?
We got nailed two weeks ago by Conficker, I ran through the 26 step checklist from Mircrosoft on my own computer, as well as on our domain server. It says near the end to reverse all the changes, but ...
- 2,298
4
votes
1
answer
3k
views
Last Logon error when Logging in using GPO setting
Trying to get my domain to show the last successful login by users on their Windows 7 machines. I have enabled the following Group Policy Setting:
Computer Configuration| Policies | Administrative ...
- 835
4
votes
2
answers
4k
views
Does group policy loopback apply to that policy, or all policies?
Does group policy loopback processing apply to that policy that it is defined in, or all policies applied to that container?
For example, assume there are 2 group policy objects: one has loopback ...
- 23.2k
4
votes
1
answer
91
views
Different GPO behaviour between Windows Server 2008 and Server 2012
In Windows Server 2008 I was able to create a GPO with both Computer configuration and User configuration.
This GPO I put in the OU of that certain group of computers.
When an Authenticated user would ...
- 111
4
votes
1
answer
683
views
gpresult /v and rsop.msc shows reverse values for GPO's on windows 10
In our domain we have a situation that keeps us confused:
We have created a GPO on our 2012 R2 AD and applied it to our windows 10 workstations.
When we examine the workstations with the "gpresult /...
4
votes
2
answers
2k
views
Enable Powershell logging - missing GPO
I want to enable script block logging for powershell. I have installed this new feature with a windows server 2016 VM. Now i want do test this with Windows server 2012 and Windows server 2008. First I ...
- 143
4
votes
2
answers
2k
views
Disable Microsoft Consumer Experience on Windows 10 Pro
We would rather not show all of our users a shortcut to Candy Crush Saga, Minecraft etc. on their work start menu. Sources such as this one state that you can remove this stuff with a GPO edit, but ...
- 316
4
votes
1
answer
7k
views
The password on this account cannot be changed at this time?
A user in my company forgot his password and I had to reset it to a temporary one. I checked the box that says "User Must Change Password at Next Logon".
When he logged on and entered the temporary ...
- 7,059
4
votes
1
answer
1k
views
Create a security group that can promote a member server to domain controller without being in the domain admins group
I am trying to figure out a way to delegate permission to a security group to add domain controllers to a domain. The catch is I do not want to add them to the Domain Admin or Enterprise Admin groups....
- 225
4
votes
1
answer
2k
views
Deploy Software via GPO, but also deploy configuration file
When deploying software through a group policy, is there any special trick that will allow you to also deploy a separate, say config, file along with it?
Here's the specific problem: We have a ...
- 294
4
votes
2
answers
12k
views
Java 8 Update 25 Install Via GPO Not Working
I am trying to set up our Active Directory DC to automatically install Java 8 Update 25 (jre1.8.0_25.msi) using Group Policy. When attempting to add the jre1.8.0_25.msi package in the GPO at Computer ...
4
votes
1
answer
2k
views
Changing password expiration policy at next password change
We have a password policy with a maximum password age of 180 days. For various reasons we need to change it to 90 days, with a minimum impact for the users.
Our users are normally warned about the ...
- 3,657
4
votes
2
answers
7k
views
Domain Account Does Not Receive Proper Se Privledges from Group Policies
I am attempting to install software that requires SeBackupPrivilege, SeDebugPrivilege, and SeSecurityPrivilegebut I cannot seem to get my Domain Account to retrieve these specific privileges.
I ...
- 145
4
votes
1
answer
59k
views
How to lock Windows 7 workstation after inactivity via GPO (no screensaver or blank screen- just lock screen)
Our users have increasingly started leaving their workstations logged in and unattended (during lunch breaks etc.)
To tackle the security threat this poses, we have enforced a password-protected ...
- 1,180