Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

2
votes
0answers
12 views

Windows Server: what is the difference between Security Filtering (under the Scope tab) and the Delegation tab in Group Policy Management?

I notice that anything I add to Security Filtering also appears under Delegation, so I’m not sure how or why they both exist, and if they are redundant or not? Until now I had been exclusively using ...
0
votes
0answers
9 views

“Move the contents of folder to the new location” not working

I have a GPO that applies to all of my users for folder redirection. The GPO is being processed and the folders are being redirected, however, the contents of the local profile folders are not being ...
0
votes
0answers
16 views

Group Policy - User setting not applying unless computer is added to scope

I have had a User Config policy in place that blocks some IE Settings, scoped to all authenticated users, in addition there is a second policy that doesn't block said IE Settings, scoped to certain ...
3
votes
1answer
2k views

Deny access to removable storage media for Windows XP client machines via Group Policy

I am currently editing a GPO for user accounts of a particular OU and I want to disable removable drives access on a particular OU, problem is that all the client machines are Windows XP and the ...
0
votes
1answer
17 views

Running Net Stop unelevated

First of all, this is one of those borderline questions between serverfault and superuser. In the end, I decided it belonged here because of the fact that most aspects of it revolve around a domain ...
4
votes
2answers
40 views

Disable password complexity on Windows 2012 R2

I have a Windows Server 2012 R2 that is my domain controller. I want to disable the password complexity rule for a few users only. I have created a group (called Formation) in AD to identify these ...
1
vote
1answer
1k views

Windows user privileges when running scheduled task

I posted a question a while ago about allowing a specific user to start/stop Windows services. Provide a user with service start/stop permissions I decided to revisit the issue. I have no idea what ...
0
votes
0answers
19 views

Security Filtering not working on group policy [duplicate]

I am trying to achieve something which should be theoretically straightforward: Group Policy Object called "Staff shared drives" applied to all users GPO contains a few drives mapped through User -> ...
0
votes
1answer
69 views

negative WMI-Filter for security filtering in GPO

I need to create a group policy object (GPO) that will disable printer redirection for all computers except certain servers. I considered making a security group and adding all the computers except ...
0
votes
1answer
51 views

Group Policy Objects stopped applying to most security groups [duplicate]

I have a Server 2008 R2 Domain with quite a few Group Policy Objects that should be applied to various OUs and security groups (Using security filtering). I got reports from users that they were ...
1
vote
0answers
3 views

Archive Eventlog every x days

I have a large number of 2k12 r2 servers and I'd like to keep archives of their Eventlogs every 30 days. I was looking for a centralized solution, possibly a GPO. But from what I saw it's only ...
-2
votes
0answers
16 views

Workstation in domain has PowerShell | No GP to disable

I am running Windows Server 2012 and I currently have 1 workstation Windows 7. It has powershell automatically installed with windows 7, I want to disable this throught group policy but I am unable to ...
1
vote
1answer
12 views

Auditing Log is Full - Eventlog Archive GPO not working

I am trying to create an Archive for Eventlog but it does not seem to work. Server 2k12 R2 Environment. Following is the GPO I have enabled: I have rebooted the server and made sure it is being ...
10
votes
1answer
702 views

GPOs fail to apply; reason: Inaccessible, Empty, or Disabled; Server 2012 R2 and Windows 10

I have a Windows Server 2012 R2 Domain. Yesterday, a computer’s (running Windows 10 Pro) network drive stopped working. After further investigation (gpresult /h) it appears ALL group policy objects ...
0
votes
0answers
21 views

Group Policy security filtering not getting applied [duplicate]

So I've got the following setup: Domain Controllers are Windows Server 2008 R2 Clients are Windows 10 Pro Group Policy is linked on Parent OU of departments containing the AD Users Group Policy has ...
0
votes
1answer
25 views

Connect Access Domain Controller Over VPN

We have a remote base which we would like to connect to our main office. We bought a VPN capable router thinking this would dial the vpn and our remote PC would connect seamlessly. Unfortunately ...
0
votes
2answers
27 views

Does GPO Security Filtering need to match ANY or ALL rules in the Filter?

my main question is this: Is the security filtering for a GPO calculated using AND logic or with OR logic to apply the filters? Here is the context of my situation for a background on why I am ...
1
vote
2answers
27 views

GPO - is it possible to override enabled policy with not configured?

we have a request to allow customer to change firewall settings for servers in some OUs. These OUs inherit some policy which sets firewall to off for public and private network profiles. I wonder if ...
0
votes
2answers
1k views

Windows 8.1/ Server 2012r2 Setting Default Browser vis GPO

I have an RDS 2012r2 server currently has Chrome and IE on it. I am having some issues with chrome and want to get a subset of users using IE instead. I have set two registry keys in GPO as below, ...
15
votes
9answers
3k views

Should you force a reboot after pushing out Windows updates?

I'm finding that most users ignore the "There are updates ready to be installed, click here to install" message that WSUS pushes out. Until now we haven't forced the install but I'm thinking about ...
0
votes
0answers
28 views

GPO software installation from SAMBA server denied

I have a similar issue at 2 sites: W10p desktops provisioned from scratch, pulling installation (MSI) binaries from local SAMBA server. I've created a dedicated share (\nas\provisioning) & tried ...
0
votes
3answers
3k views

GPO Troubleshooting - Security Filtering - Computer Configuration

We have a GPO that includes a Computer Configuration that enables a Preference that adds a security group to the local Administrators group. Since this is a Computer Configuration, do you need to add ...
0
votes
1answer
25 views

Robocopy logon script - copy all files, except 1, unless it doesnt exist

Currently have a GPO that calls a batch file at logon, that copyies files from one folder to another: Robocopy "C:\logon" "X:\user1" /mir /r:1 w:1 Exit This overwrites all the files in the ...
3
votes
1answer
56 views

The password on this account cannot be changed at this time?

A user in my company forgot his password and I had to reset it to a temporary one. I checked the box that says "User Must Change Password at Next Logon". When he logged on and entered the temporary ...
2
votes
2answers
1k views

Force a specific theme for entire network using GPO

I am attempting to force a specific theme to all machines in my network. I know that the GPO "Load a Specific Theme" in: User Configuration/Administrative Templates/Control Panel/Personalization Is ...
2
votes
1answer
66 views

how to fix remote desktop access in Windows Server 2012 R2

Kind of an embarrassing question but... One day I was playing around with GPOs to try and grant local Administrator access to a specific User group for a specific Client computer. Somehow, I messed ...
1
vote
0answers
15 views

WLAN profile GPO settings and saved user credentials

We are distributing wireless profiles in our Windows domain (AD servers are 2012, domain level is 2008, various client Windows versions - mostly Win7 and Win10). However, it seems we just cannot ...
2
votes
0answers
21 views

Group Policy - BITS not applying on Windows10

We are upgrading our PCs to Windows 10 and are running into a few problems with updates. OUR SETUP: We have 2 sites based in the UK (Norwich & Preston) and we have a WSUS server in our Norwich ...
-1
votes
2answers
47 views

Windows 10 how to force domain users to logon with temporary profile

We have one special computer in our company and we need it to be always "fresh". When there was windows7 all users where logged there with temporary profile and everything was great. Unfortunately ...
-1
votes
1answer
13 views

How to create GPO for put cleanmgr on users desktop?

I already create some shortcut on desktop user from gpo but i dont understand how to create a shortcut for running cleanmgr from users desktop. Like that they can run this one when they want to. ...
2
votes
1answer
20 views

Unattended Windows server 2012R2 with WSUS updates and Local Group Policies

I am working on a project on automating windows (2012 STD, R2 and 2008R2) Image creation for which I am creating the Autouattend file for 2012 R2 using WSIM. I have created almost everything except ...
5
votes
2answers
2k views

How to let non-admins manage selected domain groups' membership?

I'm on Windows Server 2012, Active Directory is on and working. All the project we manage have 2 dedicated groups, one for managers with access to all related files (including invoices, timetables and ...
0
votes
1answer
1k views

Error on RSOP for Audit policy on DC

Domain Controller - Windows Server 2008 R2 Standard Please see the print-screen, I am unable to understood why such error is showing on my Domain Controller. I have also checked on Winlogon.log, ...
0
votes
0answers
181 views

GPO drive mapping fails and other (logon) problems

We recently increased our user amount on our RDS 2012 R2. We are starting to experience some issues. We have 4 Windows 2012 R2 RDS Servers and 1 Domain Controller/File server also running Windows ...
5
votes
6answers
20k views

How can I remove local administrator permissions?

I want to disable the permissions of local administrators in the machines of my domain, is this possible?, and only put administration rights to the Domain Administrators. And I want to do it with ...
0
votes
1answer
1k views

terminal server, hide desktop icons doesn't work as expected

In the User part of a GPO that i activate for users who log on a terminal server, i tried to set the Administrative Templates, Desktop, "Hide and disable all objects on the desktop" (may be that the ...
0
votes
1answer
38 views

When using RDP to log into a remote domain do my local domain logon scripts apply?

I've been asked to set up a user on our network with RDP access to a RDS server on a remote domain. We have set up the VPN just fine and the remote RDS server is reachable. The issue thus far is that ...
0
votes
1answer
1k views

Open custom port for IIS windows firewall or group policy

I am running Windows SBS 2011. I have added a web site to IIS using port 8888 and it works perfectly when connecting locally, but not from any other PC on the network (domain). I think I need to open ...
0
votes
1answer
1k views

Group policy not updating for user, corrupt profile?

I have 1 user on my SBS 2008 server that when logged in has no files in their documents/desktop etc. So the user's folders have not been redirected to the server. I tried to run gpupdate /forceto ...
2
votes
1answer
2k views

IE9 GPO Setting “Configure Tracking Protection Lists”

I've just installed IE9 on my workstations and Server in our network. According to technet article http://technet.microsoft.com/en-us/library/gg699401.aspx There is a GPO setting for IE9 called "...
0
votes
1answer
22 views

How to deploy files using Group Policy

I wish to share a couple files to every computer on my domain. I know I need to use Group Policy, but I'm not really sure where to go from there. I am using Windows Server 2003 R2.
1
vote
0answers
23 views

Server 2008/2012 (R2) group policy scheduled task not applying

I am at wit's end and totally confused. The goal is to take group policies(one per day of a week) and set a scheduled task which will trigger a reboot on that day at a specific time. So I made them (...
-2
votes
1answer
43 views

How? Setup Domain Group Policy to enable Remote Access to all PCs (even if from remote location) using DOMAIN\Admin credientials?

How and what Group Policy can I apply via the DC that allows the Domain\Admins to access any of the Machines PCs & Servers within the domain via the LAN or Internet/ Remote connection?
1
vote
1answer
9k views

GPO Run these programs at user logon not taking effect

When on our W2k8-R2 DC I create a new GPO and configure "Computer Configuration/Policies/Windows Settings/Administrative Templates/System/Logon/run these programs at user logon" to "c:\windows\...
3
votes
4answers
1k views

Hidden registry settings

Scenario: I'm performing a configuration audit on a server that's joined to the domain. For the mandatory security configuration settings, there are group policies defined and being pushed out to ...
0
votes
1answer
40 views

Looking for assistance with basic AppLocker setup

I'm working on implementing AppLocker, but I'm running into some issues with turning it on. I have a single OU with a single server and single GPO linked. This GPO has only the following AppLocker ...
0
votes
1answer
69 views

Windows 7 PCs in a domain - time source keeps changing

I need help figuring out why the time source on some PCs keeps changing. Right now they're on Local CMOS clock. If I do w32tm /config /syncfromflags:domhier /update net stop w32time net start ...
0
votes
0answers
24 views

Failure Forcing Google as default Search Engine in IE 11 on Windows 10 through GPO

Based on the advice of these 2 guides: https://community.spiceworks.com/how_to/122127-set-google-as-default-search-provider-in-ie-with-gpo I tried writing a GPO that would set Internet Explorer's ...
0
votes
2answers
475 views

Suggestions on a few Chrome Deployment issues

Greetings to everyone here. I'm a network admin in charge of deploying Chrome to my network and setting it as the default browser, though IE will of course still be available for users. I've ...
0
votes
2answers
62 views

Password policy in Active Directory - inactivation of complexity without effect

In my Samba Active Directory Domain, I want to allow passwords that are long (passphrase) and based only on small caps and special characters, i.e. no requirement for large caps and numbers. In ...