Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

5
votes
2answers
12k views

Can I override domain group policy with local group policy as a local admin?

I am trying to provision a few special case laptops. I would like to create a local guest account. That's fine but when I try to create it I prompted that my guest password does not meet the ...
0
votes
0answers
34 views

What is the best practice for employee users and their applications when they are replaced?

Here's my small office scenario (for simplicity sake): Windows Server 2012 R2 Essentials (Active Directory) with (4) workstations. (1) for each employee user. PLUS (1) production workstation that ...
-1
votes
0answers
11 views

All Programs button via Group Policy

This article describes a method to get an "All Programs" button on the Windows 8.1 taskbar, but I would like to know how to do something like this via Group Policy so I can push it out to all of our ...
2
votes
1answer
22 views

Reversible Encryption - Not Defined but Showing as Enabled?

I'm reviewing our complex password policy that was setup by a previous admin and I'm trying to gain some clarification on the setting for Reversible Encryption. In our organization, reversible ...
0
votes
1answer
36 views

Is it mandatory to use Group Policy to install or deploy applications?

Using Windows Server 2012 R2 Essentials on 1 server and about 5 workstations, do I have to use GPO to "deploy" the applications? i.e. CorelDraw, Adobe CS6, Office, Acrobat, etc. Or can I just go to ...
0
votes
0answers
10 views

Enable ping across domain

I want to enable the "File and Printer Sharing (Echo Request)" firewall rules in Windows Firewall with Advanced Security for all servers in the domain. How do I do this with Group Policy?
1
vote
1answer
18 views

Active Directory Group Policy - Default Domain Policy CSE GUID

The active directory attribute: "gPCUserExtensionNames" contain a CSE GUID and a Tool Extension GUID string value in order pass information for GPO behavior. I have found in the Default Domain ...
2
votes
2answers
939 views

Unable to add a 64-bit MSI package to a Group Policy Object on Windows Server 2003 (32 bit)

I am trying to remotely install a 32 -bit MSI and a 64-bit MSI, using Group Policies in Windows Server 2003 (32 bit). I've created a distribution point and a Group Policy Object. When I try to ...
0
votes
1answer
1k views

Open custom port for IIS windows firewall or group policy

I am running Windows SBS 2011. I have added a web site to IIS using port 8888 and it works perfectly when connecting locally, but not from any other PC on the network (domain). I think I need to open ...
6
votes
4answers
1k views

GPO to Disable Screensaver only when connected via RDP

Is there a GPO option to disable the idle-time screensaver for RDP connections, but keep the idle-time screensaver options for interactive logins? Edit: All users are TS users as well a local so they ...
2
votes
2answers
87 views

compatibility mode server 2008 R2 higher than IE 7?

I have 4 terminal servers, all running server 2008 R2, that need to run a few websites in compatibility mode. When I create the GPO, all I see is IE 7 compatibility mode... This works for all the ...
2
votes
1answer
6k views

Deleting Local Profiles when using Roaming Profiles at Log off

I'm currently building an environment that will host about 5,000 users over 20 AppServer. I have finalized my GPOs but I'm experiencing an issue with the user's local profile when roaming profiles is ...
27
votes
7answers
123k views

Disable password complexity rule in Active Directory

Where do I go to disable the password complexity policy for the domain? I've logged onto the domain controller (Windows Server 2008) and found the option in local policies which is of course locked ...
0
votes
1answer
2k views

Why is my loopbacked GPO reporting as disabled

Let me start by saying that my experience with GPO is limited to tentatively poking at settings until they fall into place by trial and error. It is entirely possible this will be a very obvious ...
2
votes
1answer
2k views

GPO to set firefox proxy

CONTEXT I have recently assigned to restructure a corporate network that contains about 100 client computers. There is an active directory domain (2003 functional level) for the whole network. The ...
2
votes
3answers
12k views

IE Setting in group policy — Disable automatically detect setting in LAN Settings

have been trying to hunt this down for weeks with no luck. i need a way to disable a setting.. in IE. Tools > Connections > Lan Setting i need to uncheck "automatically detect settings" does ...
0
votes
1answer
2k views

Samba4 domain controller, group policy processing fails, gpupdate fails

I'm using a Samba4 domain controller, and on the machines joined to the domain I'm seeing this message: The processing of Group Policy failed. Windows attempted to read the file ...
4
votes
6answers
66k views

Enforcing lock screen after idle time via GPO

I run a network of computers and I would like enforce a GPO which locks the screen after a predefined idle time. I can't find this setting, I can only find a screen saver idle time setting, how can I ...
3
votes
1answer
28k views

How to lock Windows 7 workstation after inactivity via GPO (no screensaver or blank screen- just lock screen)

Our users have increasingly started leaving their workstations logged in and unattended (during lunch breaks etc.) To tackle the security threat this poses, we have enforced a password-protected ...
38
votes
5answers
84k views

How do I grant start/stop/restart permissions on a service to an arbitrary user or group on a non-domain-member server?

We have a suite of Windows Services running on our servers which perform a bunch of automated tasks independently of one another, with the exception of one service which looks after the other ...
2
votes
2answers
951 views

Default Domain Policy Corrupted

It appears that our domain's default domain policy is corrupted. The GPT.ini file is corrupted. When I go to open it, I get an access denied error. I tried to take ownership through explorer, takeown, ...
0
votes
1answer
28 views

Local group policy not applying (gpresult says its empty, but it's not)

We are running a strange AD constellation here, where the same logon script is defined within the local group policy on each server (don't ask me for the reason, it wasn't my idea). Then an (AD-) ...
6
votes
2answers
3k views

Applocker vs Software restriction policy

The goal is to prevent users from running unwanted programs on a terminal server. I have read many articles from Microsoft and others saying that the new Applocker feature is 100% better than the ...
3
votes
2answers
54 views

Deploying printers to specific users via Group Policy

I have noticed two different ways of deploying printers to specific user with Group Policy in Windows Server 2012. The first method is by creating separate GPOs for each group, and the second method ...
0
votes
1answer
8 views

What is the syntax for the SNMP trap configuration group policy?

I want to configure SNMP traps through group policy, but the trap configuration dialog is just a plain list of strings. What do I have to enter here to configure the community name and trap server? ...
1
vote
1answer
21 views

Implementing A Custom Lock Screen Image Via GPO

I have a Domain running at the Windows Server 2008 functional level, which cannot be upgraded currently due to logistics reasons. I have a group of Student-access clients all running Windows Server ...
3
votes
1answer
34 views

Change an Applications and Services Logs log path using GPO

I am wanting to change the AppLocker Log path by a GPO. The specific log is found at Event Viewer \ Applications and Services Logs \ Microsoft \ Windows \ AppLocker \ EXE and DLL. I know you can ...
2
votes
2answers
4k views

How do you manage “network locations” through domain group policies?

I know how to map network drives through GPOs, but I would like to map a "network location": I know how to add those on the workstation itself through Windows Explorer: But I don't know how to ...
0
votes
1answer
21 views

Printers already installed but would like to block spooler to prevent future print jobs

I have tens of client machines over domain with Windows 7/8/8.1 installed and almost all machines are connected to different printers. Only one main printer is listed in AD which can be easily ...
0
votes
1answer
30 views

Implementing Custom Lock Screen image

I have a Domain running at the Windows Server 2008 functional level, which cannot be upgraded currently due to logistics reasons. I have a group of Student-access clients all running Windows Server ...
1
vote
3answers
12k views

Force IE 11 compatibility mode for certain sites within domain

When setting compatibility mode in IE 11 it wants to add our whole domain (somedomain.co.uk) but we don't want every site (*.somedomain.co.uk) to be covered by this. We want just ...
2
votes
1answer
28 views

Checking Who Applied GPO

I know how to check what GPOs are applied on systems and users, but I'm wondering, is there a way to check who applied a specific GPO?
2
votes
1answer
1k views

IE11 Enterprise Mode gpo not working

I've followed the following articles to configure the Enterprise Mode gpo for IE11: http://msdn.microsoft.com/en-us/library/dn640699.aspx http://msdn.microsoft.com/en-us/library/dn640696.aspx I ...
-1
votes
1answer
21 views

Apply group policy based on RDP Client O.S

I created a group policy to change the default shell, so that handheld PC can RDP to a Terminal Server and have the lob application kiosked. This work fine, but, sometime, is necessary to RDP with the ...
2
votes
1answer
67 views

GPO with SAMBA as DC

I am working on a network of 500 Windows workstations with Linux servers. SAMBA 4 is in use as the domain controller. Users can move between workstations, and as a results the contents of their ...
-6
votes
2answers
972 views

Join a domain without adopting group policy… through registry permissions? [closed]

As a local machine admin, is it possible to join a domain but still block group policy from being applied? I'm thinking it should be possible to remove all write access to the registry under, for ...
3
votes
1answer
3k views

How to abort applying group policy when it is stuck for too long?

I had a problem with a Win2k8 Domain Controller and had to restart it. It restarted with no issues and reached the "PRESS CTRL + DEL TO LOGON" screen. And so I did a usual logon with an ...
0
votes
0answers
14 views

Force a GPO to run synchronously on Windows Server 2008

We have authored a powershell script which carries out a number of installation and configuration steps in order to turn a bare Windows Server 2008 machine into a development workstation. The script ...
3
votes
1answer
2k views

Enabling SSL for Remote Desktop

Ok so I'm trying to remove a number of my systems from our Nessus scan from having this medium vulnerability. Microsoft Windows Remote Desktop Protocol Server Man-in-the-Middle Weakness I set the ...
2
votes
1answer
67 views

Disable Start menu new Items highlighting by GPO in Windows 2012 R2

I need to disable the new items highlighting (New items are marked with "New") on Windows 2012 R2 (remote desktops). I tried setting the registry value ...
8
votes
1answer
2k views

Everything says Applocker is supposed to work: Why doesn't it?

I've setup a basic group policy consisting of the default Applocker rules. Per Microsoft's technet article on the subject, any files not explicitly allowed to run by the policy are supposed to be ...
1
vote
0answers
57 views

How to use Local Group Policy on Windows 7 to allow or block URL’s for chrome and firefox?

I am a regular user not system admin. I need the help to use local group policy to allow to open one domain. For example, www.xxxx.com to open on the chrome or firefox (third-party browser), and make ...
1
vote
1answer
31 views

Homepage setting in Local Group Policy not working on first launch of session

I have a Windows 7 Professional x64 computer I am trying to "lock down" in the absence of Steady State. I have set the policy for the Internet Explorer homepage under Administrative Templates - ...
0
votes
2answers
5k views

processing of Group Policy failed only on 2008 Servers and Name Resolution failure on the current domain controller

Spent last 3 months doing a upgrade from 2003 domain to a 2008R2 domain. our last DC was rebuilt (5 total) and brought up on line. After it was put on line we have some 2008 and 2008R2 servers (10 ...
0
votes
1answer
32 views

How to disable Microsoft Office's first run wizard

I have a Windows 7 Professional computer in a workgroup. This computer has a mandatory user profile and uses Local GPO to configure the profile on each login. My issue is that I have recently ...
1
vote
1answer
1k views

Can't store TPM information in AD

I am attempting to use GP to store TPM information in AD. I have verified that the schema contains the proper object property, and verified that the property and the ACE is present on the given ...
2
votes
2answers
3k views

Windows GPO Software Restrictions Policy not working with %TEMP% variable

I'm trying to put in some meagre additional malware prevention measures, by restricting the execution of *.exe in a handful of locations -- in particular, the temporary folders that various ...
2
votes
1answer
25 views

I’m unable to get GPO Security Filtering to work for users

I’m unable to get GPO Security Filtering to work for users (called TestUser) and custom security groups (called TestGroup.) It does work for Authenticated Users or if I add the Computer. I did a ...
0
votes
2answers
9k views

GPO to disable server manager icon does not restrict access for users

I have two servers in a domain, running on VMWare. WS2K8R2 domain controller and Server 2012 RD Session host. I want to disable/remove the server manager and powershell icons from the taskbar, and ...
1
vote
2answers
2k views

Restore legacy audit policies on Windows Server 2008 R2

Recently, I was trying to reduce spam of my security audits by disabling auditing of "Filtering Platform Packet Drop". In a week's time, I get enough of these audits the fill a 200Mb logfile. I tried ...