Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

1
vote
1answer
24 views

Scheduled task deployed via GP, that runs a powershell script on a network share by a AD service account

I've created a powershell script that runs Chocolatey updates as well as does some logging locally and on a network share. The script itself resides on a network share, and I'm hoping to be able to ...
6
votes
3answers
4k views

Why is this preventing me installing an MSI: The System Administrator has set policies to prevent this installation

I am trying to install an MSI on a Windows Server 2012 machine which is part of my lab domain. I am local and domain admin, but I seem to be prevented from installing this MSI. For clarification, ...
9
votes
2answers
914 views

Registry key / GPO to disable and block Windows 10 upgrade?

One of our remote Windows 7 Professional users just reported that he received an Upgrade Reservation Offer for Windows 10. It appears the Get Windows 10 "App" running in his system tray is legit. So ...
0
votes
0answers
10 views

Windows Server 2008r2 User Mapped Drives disconnect when GPO Mapped Drives are in effectg

I am trying to find out if a user can map their own drives and have them stay in place when they are subject to GPO mapped drives. The GPO that is in place will Map a drive which is assigned Q and ...
1
vote
1answer
15 views

Homepage setting in Local Group Policy not working on first launch of session

I have a Windows 7 Professional x64 computer I am trying to "lock down" in the absence of Steady State. I have set the policy for the Internet Explorer homepage under Administrative Templates - ...
-1
votes
1answer
18 views

group policy preferences missing in windows 7

I have Windows 7 Professional 64-bit which is part of a workgroup network (no Windows server or Active Directory). I have an MMC console containing local group policies for Administrative and ...
0
votes
2answers
60 views

How do I schedule a batch file to run on startup or shutdown?

I have 2 batch files that send emails intended to notify of a server shutdown or startup. The batch files call an exe with a single argument, the message to be sent. The exe comes from a vb.net ...
2
votes
2answers
899 views

Unable to add a 64-bit MSI package to a Group Policy Object on Windows Server 2003 (32 bit)

I am trying to remotely install a 32 -bit MSI and a 64-bit MSI, using Group Policies in Windows Server 2003 (32 bit). I've created a distribution point and a Group Policy Object. When I try to ...
2
votes
2answers
27 views

Active Directory - Make sure users who are never on premises receive AD policies on a regular basis

I have a few users in the field 100% of the time. I would like to have them authenticate to AD so that policies like Password changes and even maybe group policies are applied regularly. I want to ...
2
votes
1answer
5k views

Deleting Local Profiles when using Roaming Profiles at Log off

I'm currently building an environment that will host about 5,000 users over 20 AppServer. I have finalized my GPOs but I'm experiencing an issue with the user's local profile when roaming profiles is ...
1
vote
2answers
4k views

Prompt message after logon

I am trying to get the group policy to work where after logon the user gets a message prompt. I've set the group policy, but the message doesn't show. I first searched and seen another post with the ...
6
votes
1answer
580 views

How can I eliminate the “Several add-ons are ready for use” prompt in Internet Explorer?

The issue I describe here is the same as that in Group Policy Internet Explorer, Add-on list not working, but I provide more detail and troubleshooting steps, so I thought it was worth re-asking. I ...
0
votes
1answer
2k views

Why is my loopbacked GPO reporting as disabled

Let me start by saying that my experience with GPO is limited to tentatively poking at settings until they fall into place by trial and error. It is entirely possible this will be a very obvious ...
2
votes
1answer
2k views

GPO to set firefox proxy

CONTEXT I have recently assigned to restructure a corporate network that contains about 100 client computers. There is an active directory domain (2003 functional level) for the whole network. The ...
5
votes
1answer
187 views

Allow domain users to modify local printer settings Windows 7 via Group Policy

I've been scouring the internet for days and thus far have had zero luck in finding a solution. Short Version: I need to allow users to modify their locally installed printers. Specifically, they ...
6
votes
4answers
1k views

GPO to Disable Screensaver only when connected via RDP

Is there a GPO option to disable the idle-time screensaver for RDP connections, but keep the idle-time screensaver options for interactive logins? Edit: All users are TS users as well a local so they ...
1
vote
1answer
101 views

Win 2008_R2 print spooler issues and Client freezes

Environment: Windows 2008 R2 Print Server (Virtual) 178 Printers installed. All using TCP/IP Many different printer brands Most all employees print through this print server Problems: The spooler ...
0
votes
1answer
1k views

Open custom port for IIS windows firewall or group policy

I am running Windows SBS 2011. I have added a web site to IIS using port 8888 and it works perfectly when connecting locally, but not from any other PC on the network (domain). I think I need to open ...
0
votes
3answers
2k views

GPO Troubleshooting - Security Filtering - Computer Configuration

We have a GPO that includes a Computer Configuration that enables a Preference that adds a security group to the local Administrators group. Since this is a Computer Configuration, do you need to add ...
2
votes
2answers
911 views

Default Domain Policy Corrupted

It appears that our domain's default domain policy is corrupted. The GPT.ini file is corrupted. When I go to open it, I get an access denied error. I tried to take ownership through explorer, takeown, ...
6
votes
2answers
2k views

Applocker vs Software restriction policy

The goal is to prevent users from running unwanted programs on a terminal server. I have read many articles from Microsoft and others saying that the new Applocker feature is 100% better than the ...
0
votes
2answers
2k views

The sysvol permissions for one or more GPOs on this domain controller are not in sync with the permissions for the GPOs on the baseline domain

I have recently installed a second domain controller and all replication seems to be working fine except for group policy - In windows 2012r2, through the new Group Policy Management, when I click on ...
1
vote
2answers
1k views

Deploy MS Access Runtime via group policy

I am trying to deploy Access 2007 runtime via group policy and I am having a problem. So, i downloaded the AccessRT.exe and run accessrt.exe /extract to get the msi file. Then when I try to attach the ...
0
votes
1answer
2k views

Samba4 domain controller, group policy processing fails, gpupdate fails

I'm using a Samba4 domain controller, and on the machines joined to the domain I'm seeing this message: The processing of Group Policy failed. Windows attempted to read the file ...
2
votes
1answer
1k views

How do you manage Internet Explorer using IEAK and Group Policy?

We've always used "Internet Explorer Maintenance" (IEM) in Group Policies to manage Internet Explorer settings. Apparently since IE 10, we need to use Internet Explorer Administration Kit (IEAK) to ...
1
vote
1answer
669 views

Disabling the Microsoft LLDP Protocol Driver using Group Policy

I need to campus-wide disable the Microsoft LLDP Protocol Driver using Group Policy / SCCM / or any other means of centralized management, because I've written my own LLDP broadcast service I plan on ...
1
vote
0answers
36 views

RunOnce key can't be run at startup with restricted public account in Windows

Let me be brief. We have arround a 1000 public computers for users to use for the internet and office and so on. We image these using SCCM2012r2. Everything is fine until we added a software package ...
0
votes
1answer
81 views

Restricted Groups - Locks down workstations and servers too much

I am a developer not a sysadmin but I was recently asked to lock down the workstations - in terms of stopping users from adding software. I followed the online articles on adding domain admins and ...
3
votes
3answers
2k views

Allow users to log on to computers in a domain

I work for a company we are on a domain. At the minute we have 8 meeting rooms and in those meeting rooms there is 8 mini PCs. At the moment the only people that are allowed to log on to this PC are ...
0
votes
0answers
11 views

Is there a way to obtain list of policies applied to built in accounts (e.g LocalSystem, IIS_USRS, etc.)

Is there a way to obtain list of policies applied to built in accounts (e.g LocalSystem, IIS_USRS, etc.)? I am working on a tool, which should monitor policies applied to specific set of users, ...
1
vote
2answers
44 views

Windows 8.1 locks account after 3 invalid attempts even if GP is not defined

I mistyped my password three times today, and my account became locked on my windows 8.1 pro workstation. I checked Resultant Set of Policies (rsop.msc) and all three relevant settings are "Not ...
0
votes
0answers
1k views

Change companyweb to intranet.companyname.com

We're having issues with a sister company that has an SBS 2011 Standard server on site on a separate domain to ours - they have problems editing documents via SharePoint, whereas my manager can get in ...
1
vote
1answer
40 views

Group policy infrastructure failed due to network access is denied

A number of my servers are not able to sync into our WSUS server. On digging, we noticed a number of group policies are not being applied. On running rsop.msc, I get the following error message: ...
1
vote
3answers
55 views

Run a script when joining a domain

I have a Microsoft domain (mostly 2008r2\7). I looking for a way to run a script immediately after (the restart after) joining a domain (without requiring user login), and so far I've failed. Also, I ...
2
votes
1answer
57 views

Enforce minimum wait time for network connection

We are currently using multiple HP ProCurve V1810-48G switches in our environment which we believe are causing issue with GPO based software installations. This problem surfaced after installing SSD ...
1
vote
3answers
10k views

Force IE 11 compatibility mode for certain sites within domain

When setting compatibility mode in IE 11 it wants to add our whole domain (somedomain.co.uk) but we don't want every site (*.somedomain.co.uk) to be covered by this. We want just ...
2
votes
1answer
1k views

IE11 Enterprise Mode gpo not working

I've followed the following articles to configure the Enterprise Mode gpo for IE11: http://msdn.microsoft.com/en-us/library/dn640699.aspx http://msdn.microsoft.com/en-us/library/dn640696.aspx I ...
3
votes
1answer
2k views

Enabling SSL for Remote Desktop

Ok so I'm trying to remove a number of my systems from our Nessus scan from having this medium vulnerability. Microsoft Windows Remote Desktop Protocol Server Man-in-the-Middle Weakness I set the ...
8
votes
1answer
2k views

Everything says Applocker is supposed to work: Why doesn't it?

I've setup a basic group policy consisting of the default Applocker rules. Per Microsoft's technet article on the subject, any files not explicitly allowed to run by the policy are supposed to be ...
2
votes
0answers
28 views

Best approach to deploy DLL file updates to Win7 clients

We are in a Windows 7 / Server 2008 R2 domain environment. We have a .NET application with lots of internal libraries for different UI and other features. We deploy it from a share where a directory ...
3
votes
1answer
3k views

How to abort applying group policy when it is stuck for too long?

I had a problem with a Win2k8 Domain Controller and had to restart it. It restarted with no issues and reached the "PRESS CTRL + DEL TO LOGON" screen. And so I did a usual logon with an ...
2
votes
0answers
13 views

Identify non-domain remote clients with Item-Level targeting

I would like to apply a group policy preference setting (to deploy a shared printer) only if a user is connecting to a RDSH server from a non domain-joined client computer. Many of these clients will ...
2
votes
2answers
3k views

Windows GPO Software Restrictions Policy not working with %TEMP% variable

I'm trying to put in some meagre additional malware prevention measures, by restricting the execution of *.exe in a handful of locations -- in particular, the temporary folders that various ...
2
votes
3answers
39 views

How to use Group Policy to force user compliance

I need recommendations for using group policy to restrict a user's computer/network access until the user takes an action, in this case acknowledging he has read an acceptable use policy. The user ...
0
votes
1answer
36 views

mmc.exe blocked by group policy

I am changing some permissions on a small work network that I've been playing in. Domain admin and administrator permissions were so tied up that they essentially were the same account. After getting ...
0
votes
1answer
41 views

Trying to deploy Adobe Reader XI via GPO on Server 2012 R2 and Windows 7

this is what I did: Downloaded .exe from Adobe-ftp successfully extracted with "AdbeRdr11010_de_DE.exe" -nos_ne 'slipstreamed' the .msp into the .msi with klaus-hartnegg's tool made a .mst with ...
1
vote
3answers
4k views

Deleted printers keeps coming back - and multiply

My users are on 2012 R2 RDS Session Host servers. I've used "Deploy Printers" (from Print Manager) to deploy 4 printers. The last week, I've had a lot of problems where users can't print. If I ...
0
votes
2answers
5k views

processing of Group Policy failed only on 2008 Servers and Name Resolution failure on the current domain controller

Spent last 3 months doing a upgrade from 2003 domain to a 2008R2 domain. our last DC was rebuilt (5 total) and brought up on line. After it was put on line we have some 2008 and 2008R2 servers (10 ...
0
votes
1answer
7 views

Identifying AGPM changes not yet in production

How do I find AGPM checked in changes that haven't yet been pushed to production? It seems like this should be easy, but I haven't found documentation anywhere. I was originally thinking that the ...
1
vote
2answers
34 views

Deploying Client Software via GPO - Will server reboot affect?

I have deployed a MSI file via a GPO to one of my AD OUs. For an MSI to install via the GPO, I know the clients need to be rebooted. I have planned a reboot for the clients, but I was also planning ...