Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

6
votes
3answers
2k views

Applocker vs Software restriction policy

The goal is to prevent users from running unwanted programs on a terminal server. I have read many articles from Microsoft and others saying that the new Applocker feature is 100% better than the ...
0
votes
2answers
2k views

The sysvol permissions for one or more GPOs on this domain controller are not in sync with the permissions for the GPOs on the baseline domain

I have recently installed a second domain controller and all replication seems to be working fine except for group policy - In windows 2012r2, through the new Group Policy Management, when I click on ...
1
vote
2answers
1k views

Deploy MS Access Runtime via group policy

I am trying to deploy Access 2007 runtime via group policy and I am having a problem. So, i downloaded the AccessRT.exe and run accessrt.exe /extract to get the msi file. Then when I try to attach the ...
0
votes
1answer
2k views

Samba4 domain controller, group policy processing fails, gpupdate fails

I'm using a Samba4 domain controller, and on the machines joined to the domain I'm seeing this message: The processing of Group Policy failed. Windows attempted to read the file ...
2
votes
1answer
1k views

How do you manage Internet Explorer using IEAK and Group Policy?

We've always used "Internet Explorer Maintenance" (IEM) in Group Policies to manage Internet Explorer settings. Apparently since IE 10, we need to use Internet Explorer Administration Kit (IEAK) to ...
1
vote
1answer
601 views

Disabling the Microsoft LLDP Protocol Driver using Group Policy

I need to campus-wide disable the Microsoft LLDP Protocol Driver using Group Policy / SCCM / or any other means of centralized management, because I've written my own LLDP broadcast service I plan on ...
1
vote
0answers
29 views

RunOnce key can't be run at startup with restricted public account in Windows

Let me be brief. We have arround a 1000 public computers for users to use for the internet and office and so on. We image these using SCCM2012r2. Everything is fine until we added a software package ...
0
votes
1answer
81 views

Restricted Groups - Locks down workstations and servers too much

I am a developer not a sysadmin but I was recently asked to lock down the workstations - in terms of stopping users from adding software. I followed the online articles on adding domain admins and ...
3
votes
3answers
2k views

Allow users to log on to computers in a domain

I work for a company we are on a domain. At the minute we have 8 meeting rooms and in those meeting rooms there is 8 mini PCs. At the moment the only people that are allowed to log on to this PC are ...
0
votes
0answers
7 views

Is there a way to obtain list of policies applied to built in accounts (e.g LocalSystem, IIS_USRS, etc.)

Is there a way to obtain list of policies applied to built in accounts (e.g LocalSystem, IIS_USRS, etc.)? I am working on a tool, which should monitor policies applied to specific set of users, ...
1
vote
2answers
38 views

Windows 8.1 locks account after 3 invalid attempts even if GP is not defined

I mistyped my password three times today, and my account became locked on my windows 8.1 pro workstation. I checked Resultant Set of Policies (rsop.msc) and all three relevant settings are "Not ...
0
votes
0answers
1k views

Change companyweb to intranet.companyname.com

We're having issues with a sister company that has an SBS 2011 Standard server on site on a separate domain to ours - they have problems editing documents via SharePoint, whereas my manager can get in ...
1
vote
1answer
33 views

Group policy infrastructure failed due to network access is denied

A number of my servers are not able to sync into our WSUS server. On digging, we noticed a number of group policies are not being applied. On running rsop.msc, I get the following error message: ...
1
vote
3answers
46 views

Run a script when joining a domain

I have a Microsoft domain (mostly 2008r2\7). I looking for a way to run a script immediately after (the restart after) joining a domain (without requiring user login), and so far I've failed. Also, I ...
2
votes
1answer
54 views

Enforce minimum wait time for network connection

We are currently using multiple HP ProCurve V1810-48G switches in our environment which we believe are causing issue with GPO based software installations. This problem surfaced after installing SSD ...
1
vote
3answers
9k views

Force IE 11 compatibility mode for certain sites within domain

When setting compatibility mode in IE 11 it wants to add our whole domain (somedomain.co.uk) but we don't want every site (*.somedomain.co.uk) to be covered by this. We want just ...
2
votes
1answer
1k views

IE11 Enterprise Mode gpo not working

I've followed the following articles to configure the Enterprise Mode gpo for IE11: http://msdn.microsoft.com/en-us/library/dn640699.aspx http://msdn.microsoft.com/en-us/library/dn640696.aspx I ...
3
votes
1answer
2k views

Enabling SSL for Remote Desktop

Ok so I'm trying to remove a number of my systems from our Nessus scan from having this medium vulnerability. Microsoft Windows Remote Desktop Protocol Server Man-in-the-Middle Weakness I set the ...
8
votes
1answer
2k views

Everything says Applocker is supposed to work: Why doesn't it?

I've setup a basic group policy consisting of the default Applocker rules. Per Microsoft's technet article on the subject, any files not explicitly allowed to run by the policy are supposed to be ...
2
votes
0answers
26 views

Best approach to deploy DLL file updates to Win7 clients

We are in a Windows 7 / Server 2008 R2 domain environment. We have a .NET application with lots of internal libraries for different UI and other features. We deploy it from a share where a directory ...
3
votes
1answer
3k views

How to abort applying group policy when it is stuck for too long?

I had a problem with a Win2k8 Domain Controller and had to restart it. It restarted with no issues and reached the "PRESS CTRL + DEL TO LOGON" screen. And so I did a usual logon with an ...
2
votes
0answers
12 views

Identify non-domain remote clients with Item-Level targeting

I would like to apply a group policy preference setting (to deploy a shared printer) only if a user is connecting to a RDSH server from a non domain-joined client computer. Many of these clients will ...
2
votes
2answers
3k views

Windows GPO Software Restrictions Policy not working with %TEMP% variable

I'm trying to put in some meagre additional malware prevention measures, by restricting the execution of *.exe in a handful of locations -- in particular, the temporary folders that various ...
2
votes
3answers
37 views

How to use Group Policy to force user compliance

I need recommendations for using group policy to restrict a user's computer/network access until the user takes an action, in this case acknowledging he has read an acceptable use policy. The user ...
0
votes
1answer
34 views

mmc.exe blocked by group policy

I am changing some permissions on a small work network that I've been playing in. Domain admin and administrator permissions were so tied up that they essentially were the same account. After getting ...
0
votes
1answer
35 views

Trying to deploy Adobe Reader XI via GPO on Server 2012 R2 and Windows 7

this is what I did: Downloaded .exe from Adobe-ftp successfully extracted with "AdbeRdr11010_de_DE.exe" -nos_ne 'slipstreamed' the .msp into the .msi with klaus-hartnegg's tool made a .mst with ...
1
vote
3answers
3k views

Deleted printers keeps coming back - and multiply

My users are on 2012 R2 RDS Session Host servers. I've used "Deploy Printers" (from Print Manager) to deploy 4 printers. The last week, I've had a lot of problems where users can't print. If I ...
0
votes
2answers
5k views

processing of Group Policy failed only on 2008 Servers and Name Resolution failure on the current domain controller

Spent last 3 months doing a upgrade from 2003 domain to a 2008R2 domain. our last DC was rebuilt (5 total) and brought up on line. After it was put on line we have some 2008 and 2008R2 servers (10 ...
0
votes
1answer
7 views

Identifying AGPM changes not yet in production

How do I find AGPM checked in changes that haven't yet been pushed to production? It seems like this should be easy, but I haven't found documentation anywhere. I was originally thinking that the ...
1
vote
2answers
33 views

Deploying Client Software via GPO - Will server reboot affect?

I have deployed a MSI file via a GPO to one of my AD OUs. For an MSI to install via the GPO, I know the clients need to be rebooted. I have planned a reboot for the clients, but I was also planning ...
4
votes
1answer
29 views

GPMC missing Hide/Show links

We currently have a single 2012 R2 server in our domain. As we're rolling out Windows 8+ machines I like using it for Group Policy Management. For some reason the Group Policy Management Console on ...
3
votes
3answers
104 views

WMI Processor Filtering Preventing GPO Software Installation?

I've been battling this issue for a few days. I've been trying to deploy Symantec Endpoint Protection for a few days. I created a GPO and linked it to a WMI Filter so that it would only target the ...
1
vote
1answer
1k views

Group Policy “Maximum password age” fails to apply

In my Windows network with all AD servers (still) running Windows 2003, I encounter the following problem: The "Maximum password age" policy apparently does not apply. Even though some of the users ...
2
votes
1answer
23 views

Network drives not mapping correctly with group policy

One of my clients is having random issues with the mapping of network drives. Users get mapped drives from group policy based on the security groups they are in. An example issue with one user: ...
35
votes
5answers
81k views

How do I grant start/stop/restart permissions on a service to an arbitrary user or group on a non-domain-member server?

We have a suite of Windows Services running on our servers which perform a bunch of automated tasks independently of one another, with the exception of one service which looks after the other ...
1
vote
2answers
2k views

Restore legacy audit policies on Windows Server 2008 R2

Recently, I was trying to reduce spam of my security audits by disabling auditing of "Filtering Platform Packet Drop". In a week's time, I get enough of these audits the fill a 200Mb logfile. I tried ...
1
vote
0answers
21 views

Windows 7 Pro 64-bit Standard User Default Profile: Local Group Policy or Sysprep?

I have a Windows 7 Pro 64-bit machine that will be hosting three Windows 7 Pro 64-bit VMware Player 7 virtual machines. I have the first VM completed and am about to create the first standard user on ...
3
votes
1answer
2k views

Deny access to removable storage media for Windows XP client machines via Group Policy

I am currently editing a GPO for user accounts of a particular OU and I want to disable removable drives access on a particular OU, problem is that all the client machines are Windows XP and the ...
1
vote
1answer
2k views

“Fast link detected” warning in GP management console

There is a message that is shown in every report i make in Group Policy Results section of Group Policy Management Console, saying that "A fast link is detected". I followed the link in the waring, ...
1
vote
4answers
5k views

GPO for Multiple Home Page tabs in IE 7

The organization in question currently has a GPO set which was primarily setup in IE6 days. This GPO enforced a non-changeable homepage of the company portal page. Since IE7 and tabbed browsing have ...
1
vote
1answer
46 views

Mass updating Group Policy, may be with scripts

Sorry for long preamble and thanks in advance to one who could read it all. I have about 60 network printers. Some are in HQ, some are in distant locations (from 1 to 300 km away of HQ). Some ...
2
votes
1answer
33 views

Group Policy to disable Thumbs.db caching Server 2012 and Windows 7 clients

We are trying to push out GPO to Windows 7 clients to disable Thumbs.db caching. The setting Turn off the caching of thumbnails in hidden thumbs.db files is found here: User Configuration > ...
1
vote
1answer
9k views

How to change default region/culture settings in Windows 2012

I have researched this topic through the web but can't find a definitive answer. Our server team has recently upgraded our SQL Servers VMs from Win 2003 to Win 2012. Given our region we run all our ...
2
votes
1answer
29 views

Group Policy and Internet Explorer's Site to Zone assignment issues?

We are using GPO to apply Site to Zone assignements for our users so that we can add some specific addresses into their Internet Explorer's Intranet and Trusted zones. Using the Site to Zone GPO ...
23
votes
9answers
91k views

Group Policy installation failed error 1274

I'm trying to deploy an MSI via the Group Policy in Active Directory. But these are the errors I'm getting in the System event log after logging in: The assignment of application XStandard from ...
4
votes
2answers
44 views

Adding registry values to all users on domain

I have four registry values I would like to add to both HKCU and HKLM for all users connected to a network domain. Currently we are manually running a batch file on each of the computers when ...
4
votes
1answer
6k views

Installing Lync 2013 Standard silently

I am trying to find a good way to deploy Lync 2013 standard & basic clients silently on computers with Windows 7 / Office 2010 & ahve a few roadblocks. 1) I am successful installing the ...
0
votes
2answers
976 views

Remove or Disable “Add a Network Location”

I've not been able to find anyway to do this via registry or GPO. I want to remove standard users ability to right-click computer and open the "Add a Network Location" button, or just disable the ...
0
votes
1answer
946 views

terminal server, hide desktop icons doesn't work as expected

In the User part of a GPO that i activate for users who log on a terminal server, i tried to set the Administrative Templates, Desktop, "Hide and disable all objects on the desktop" (may be that the ...
2
votes
2answers
3k views

Installing Powershell 3.0 or 4.0 on Windows 7 machines through Group Policy or SCCM

I am trying to update all of the Windows 7 machines that we have in one of our OUs in Active Directory with either Powershell 3.0 or 4.0. I would like to use either Group Policy or SCCM 2012 and would ...