Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
3answers
749 views

Server service fails to start, event 7023, error 1079

Hello, Environment: Windows Server 2008 R2 fully patched, working as Domain Controller in Win 2003 native domain. Users started to report problems with share, it turned out that server service won't ...
0
votes
2answers
17 views

Which Group Policy wins out of two enforced policies with similar settings?

I have a situation where I need to modify an enforced group policy object, however due to the sensitive nature I must test my results first to one test user. In order to do this I plan to create new ...
4
votes
2answers
79 views

Determining if group policy needs to run synchronously

I have been working on speeding up network logins. As part of this process I'm disabling the 'always wait for network' option. This isn't inherently a problem, but I would really like to be able to ...
1
vote
1answer
661 views

Getting Windows 7 to run Scripts from Other Shares then NETLOGON

I have several Windows Server 2003 Environments I administer. These are separate disparate domains with their own structures and policies. I generalize as much as possible when I administer these ...
1
vote
1answer
53 views

Let users install software without local administrator rights on domain

I manage the network of a small company. As I'm not always in the office it is a wish from the employees to be able to install software without having to go to me. My predecessor set it up that ...
4
votes
1answer
55 views

Installing Lync 2013 Standard silently

I am trying to find a good way to deploy Lync 2013 standard & basic clients silently on computers with Windows 7 / Office 2010 & ahve a few roadblocks. 1) I am successful installing the ...
3
votes
0answers
24 views

Proxy Server setting stuck on Server 2003 R2 for Windows Updates

Stay a while and listen. This is going to be a long one. We've been having a problem the last couple of months with Updates on very specific Microsoft Server 2003 R2 Machines. This problem has ...
1
vote
1answer
1k views

Adding static route through group policy

We are trying to add a static route across all of our end user machines, we have setup a GPO object under Computer configuration > Policies > Windows Settings > Scripts (startup/shutdown) > Startup. ...
3
votes
1answer
1k views

Is there a way to set access to WMI using GroupPolicy?

From various documentation it appears that to change WMI access you need to use WMI to access the running service and modify specific parts of the tree. Its kind of annoying changing 150,000 hosts ...
0
votes
1answer
21 views

WSUS: How to combine targeting groups from multiple GPOs

I am trying to use group policy with WSUS to prevent stuff like Silverlight from being installed unless it is requried. I want computer groups for each of the software (so a computer will end up in ...
1
vote
3answers
740 views

set attachment size limit in outlook with a domain policy

Is there a way to add a domain policy to a Windows 2008 domain that sets the attachments size limit for Outlook (various versions) and Windows Mail?
4
votes
1answer
680 views

GPO to Disable Screensaver only when connected via RDP

Is there a GPO option to disable the idle-time screensaver for RDP connections, but keep the idle-time screensaver options for interactive logins? Edit: All users are TS users as well a local so they ...
4
votes
1answer
759 views

Printers intermittently not being set as default

We have a lab of computers with printers being deployed to and set as default with Group Policy Preferences, but we're getting a large number of users who don't pick up the default settings. There's ...
1
vote
0answers
11 views

Configuring Service Login Credentials with Group Policy following MS14-025

With Microsoft security bulletin MS14-025, GPMC and related tools are now patched to no longer allow the use of configuration items within Group Policy Prefs that would embed obfuscated passwords. The ...
2
votes
1answer
31 views

How do I correctly install windows 8 group policy on a 2008 server?

I'm currently working on a customer server that is running Windows Server 2008 R2. They are in the process of upgrading their machines to Windows 8. The problem they have is they don't want all the ...
5
votes
1answer
215 views

Server 2012r2 RDS - Start Screen

I'm in the process of setting up an RDS server. It will be multi-tenant, so it's locked right down. All user profile data is stored on the file server using GPO folder redirection. I want to lock ...
6
votes
1answer
150 views

Enable offline file sync for computer owner only

At the school I am interning at, all students and faculty have a mapped home folder known as the "M:" drive for storing files that they can access from all computers. For faculty who have laptops, we ...
4
votes
0answers
56 views

Applying group policy loopback to any user on specific computers

In a server 2008 R2 and Windows 7 environment, I have a GPO that specifies screen saver settings in the user settings policy for the entire domain. However, for specific computers, this is not ideal. ...
3
votes
2answers
737 views

Applocker vs Software restriction policy

The goal is to prevent users from running unwanted programs on a terminal server. I have read many articles from Microsoft and others saying that the new Applocker feature is 100% better than the ...
0
votes
1answer
33 views

Roaming Profile Accounts logoff instantly

I am working on setting up roaming profile accounts. When I log in as one of my users, they disconnect instantly. How do I find errors on what is going on? I've check the SMB Share permissions and ...
2
votes
1answer
29 views

Active Directory Force Update Fails

I tried looking up this error and problem and found nothing. Could this be a firewall issue?
3
votes
1answer
229 views

Windows - Software restriction policy to block exe files in all subdirectories

How can I block all executables in %APPDATA%? I've read for CryptoLocker this is a good policy: C:\Users\User\AppData\Roaming\*\*.exe But that apparently won't protect more than one layer ...
4
votes
2answers
517 views

Does Group Policy detect installed version before downloading an MSI from network

I used group policy to deploy an Adobe Reader X .msi file, which successfully updated the machines it was targeted to. The computer group those machines belong to still has a link to the GPO which ...
1
vote
1answer
579 views

Windows GPO Software Restrictions Policy not working with %TEMP% variable

I'm trying to put in some meagre additional malware prevention measures, by restricting the execution of *.exe in a handful of locations -- in particular, the temporary folders that various ...
0
votes
2answers
226 views

GPO Software Restriction Policy

Just a quick little question here, i am trying to block exe's and such from running from users home drives but running into problems. Sure I can add a hash rule for all the exe's but this is tedious ...
4
votes
1answer
53 views

Consistently slow domain logins / folder redirection

I've been trying to diagnose slow logins to my domain. One of my first stops was Domain login very slow 10+ minutes. So far I've been able to tell it has to do with my policy that applies folder ...
0
votes
2answers
3k views

processing of Group Policy failed only on 2008 Servers and Name Resolution failure on the current domain controller

Spent last 3 months doing a upgrade from 2003 domain to a 2008R2 domain. our last DC was rebuilt (5 total) and brought up on line. After it was put on line we have some 2008 and 2008R2 servers (10 ...
0
votes
2answers
82 views

Deleted printers keeps coming back - and multiply

My users are on 2012 R2 RDS Session Host servers. I've used "Deploy Printers" (from Print Manager) to deploy 4 printers. The last week, I've had a lot of problems where users can't print. If I ...
2
votes
2answers
2k views

Disable save password in Firefox by Group Policy?

Alright, so a huge security flaw is that Firefox saves passwords in plain text. How can we disallow saving of passwords in Firefox the quickest way. Is it possible by Group Policy or anything like ...
4
votes
3answers
168 views

If an email is sent to a user redirects if OOF is on

Is there a way to make a global change to either Exchange or group policy so if an email is received from an email address it will not go into the users mailbox but be forwarded on instead. Basically ...
2
votes
2answers
638 views

Cannot find Registry Setting for Office Shared Templates

We have our Templates for Office 2003 located in a shared location \servername\Templates$ This is also the location of our Word Startup Folder. Both settings are set in a User Group Policy. This has ...
0
votes
0answers
18 views

Deploying Ossec HIDS Windows Agent via GPO

I am trying to deploy OSSEC agent to about 100 Windows 7 boxes through GPO on our AD. I understand that I need to create and MSI from the EXE and import the specific client.keys file for the windows ...
0
votes
1answer
64 views

The sysvol permissions for one or more GPOs on this domain controller are not in sync with the permissions for the GPOs on the baseline domain

I have recently installed a second domain controller and all replication seems to be working fine except for group policy - In windows 2012r2, through the new Group Policy Management, when I click on ...
2
votes
1answer
18 views

Error Code 0x800700a1 when trying to add registry key through GPO

I'm trying to add a new group policy to our domain so that images are automatically sent with emails in Outlook 2013. So I created the following GPO: This policy doesn't have any effect though. ...
0
votes
1answer
869 views

How to change default region/culture settings in Windows 2012

I have researched this topic through the web but can't find a definitive answer. Our server team has recently upgraded our SQL Servers VMs from Win 2003 to Win 2012. Given our region we run all our ...
3
votes
1answer
63 views

GPO Rule of thumb for: Disabled vs Enabled vs Not Configured

Is there any documentation that explains difference between these: Policy Not Configured Policy Disabled Policy Enabled, Setting Enabled Policy Enabled, Setting Disabled Policy Enabled, Setting ...
0
votes
1answer
978 views

Windows firewall logging. Log file is always blank

I have read many similar articles and posts on how to enable windows firewall logging. I have Win2k8r2 server without any Active Directory, DC, domains and other complicated stuff. Almost all of this ...
3
votes
2answers
38 views

Group Policy installation failed error %%1274

OK, I have a really tough one I've already spent all morning on. PC is a Win7 64 with SP1 and all MS Patches Usual error everyone is familiar with: The assignment of application Adobe Reader X MUI ...
0
votes
1answer
668 views

Add generic credential using group policy?

In Windows 7, if I go to control panel > user accounts > user account > manage your credentials, there are credentials saved for the local user. Is there a way to add a generic credential ...
0
votes
2answers
653 views

I Cannot create a .BAT file in the root of C “Access is Denied” Server 2k3

I have an oracle db server on a windows 2k3 box. I am currently unable to create or copy a batch file to the root of c. I can create batch files on different folders (i.e. in my user directory) or I ...
3
votes
2answers
66 views

Ensure drive is mapped at login on laptop with strictly wireless

So, $software runs on a 'server' (windows client w/ file sharing to share out the db folder), and laptop client has the drive mapped and $software also installed. This is the vendor's recommended ...
1
vote
1answer
894 views

Windows 2008 Group Policy Setting? - Migration Headache

I have a small domain of users that I just migrated from a linux domain running open-ldap. Our new servers are running Windows 2008 Standard. I've installed Active Directory and everything is ...
2
votes
0answers
22 views

Domain Account Does Not Receive Proper Se Privledges from Group Policies

I am attempting to install software that requires SeBackupPrivilege, SeDebugPrivilege, and SeSecurityPrivilegebut I cannot seem to get my Domain Account to retrieve these specific privileges. I ...
3
votes
2answers
232 views

Installing MSI Before User Logon

I have a requirement to install a MSI's to our workstations before logon, it's periodically updated and provides updates to our LOB applications. The problem we are encountering is when setting logon ...
11
votes
6answers
48k views

How to lock down Windows XP for use as an internet kiosk?

One of our clients, whose website we built, is a manufacturer of ultra-high-end bicycles. They would like to distribute kiosks -- basically, locked-down Windows XP boxes from Dell -- at some of their ...
0
votes
1answer
30 views

Why does windows xp standalone group policy apply in the safe mode to the default administrator?

I am trying to turn standalone Windows XP installed on VirtualBox virtual machine into an AppStation-style machine (only one allowed application, taskbar, start with lone shutdown option, and a ...
0
votes
1answer
38 views

Using AD/GPO to add machines to WSUS in Windows Server 2012

I was following this guide: http://knowledge.quickstart.com/configure-wsus-to-deploy-updates-using-group-policy/ I've rebooted the machines after the policy updates to ensure they took them. I ran ...
2
votes
1answer
1k views

IE9 GPO Setting “Configure Tracking Protection Lists”

I've just installed IE9 on my workstations and Server in our network. According to technet article http://technet.microsoft.com/en-us/library/gg699401.aspx There is a GPO setting for IE9 called ...
0
votes
2answers
790 views

Proxy Settings per Machine not working on windows server 2008 R2 SP1

i have a very interesting problem and would appreciate any help for it. In my scenario i have scripts which bring up a VM inside a domain. Now i want to enable internet access for all the VM's and ...
2
votes
3answers
252 views

Windows server 2012 essentials GPO AD/SYSVOL MISMATCH

I am having an issue with Group policys and will do my best to describe the issue below: GPRESULT, ADSI and GPT.ini shows the group policy with mismatching AD/SYSVOL versions, the SYSVOL version ...