Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

0
votes
0answers
2 views

Task Scheduler GPO deployed as System and not User

As a test on Windows server 2012, I configure Notepad to run when any user logs on to a specific computer. It runs but only in the background. It is listed in Task Manager with "System" as a user. ...
0
votes
0answers
11 views

How to change Account Lockout Threshold when the path cannot be found

I am trying to change the account lockout threshold for all the users on our domain. The threshold should be three, but there are users who get locked out after one mistyped password, and others who ...
0
votes
1answer
192 views

Windows 8.1/ Server 2012r2 Setting Default Browser vis GPO

I have an RDS 2012r2 server currently has Chrome and IE on it. I am having some issues with chrome and want to get a subset of users using IE instead. I have set two registry keys in GPO as below, ...
0
votes
2answers
46 views

Group Policy | New Password Policy for a few users

We have a few users that are traveling and I would like their passwords to be changed more often than the rest of the folks in the office. How should I go about creating a new policy with their ...
2
votes
2answers
24 views

Can I apply GPO settings to 2008 R2 member servers if I have a 2003 domain functional level?

I was asked to help out in a problem, there is a domain still operating at a 2003 functional level, there are 2008 R2 member servers in this domain and we need to know if there is anything we have to ...
0
votes
1answer
25 views

How do I schedule a batch file to run on startup or shutdown?

I have 2 batch files that send emails intended to notify of a server shutdown or startup. The batch files call an exe with a single argument, the message to be sent. The exe comes from a vb.net ...
0
votes
4answers
2k views

Bizarre - Domain Admin has no rights to modify domain scripts directory

Here is a quickie that has had me scratching my head. Not a showstopper, so an answer isn’t urgent, but still. I am trying to modify the logon scripts directory to include a login script. I have gone ...
3
votes
1answer
37 views

Create a security group that can promote a member server to domain controller without being in the domain admins group

I am trying to figure out a way to delegate permission to a security group to add domain controllers to a domain. The catch is I do not want to add them to the Domain Admin or Enterprise Admin ...
1
vote
3answers
687 views

GPO is both applied AND filtered out

I have a GPO that is applied to MyUser's OU and filtered to MyUser. I run a gpupdate on his machine and I see that the GPO is listed under "Applied Group Policy Objects", yet it is also listed under ...
2
votes
2answers
865 views

Unable to add a 64-bit MSI package to a Group Policy Object on Windows Server 2003 (32 bit)

I am trying to remotely install a 32 -bit MSI and a 64-bit MSI, using Group Policies in Windows Server 2003 (32 bit). I've created a distribution point and a Group Policy Object. When I try to ...
0
votes
2answers
36 views

How can I set up group policy to give non-admin users the ability to use local admin account to update non-MS apps?

Currently the users do not have admin rights. I wanted to be able to let them update their own applications (non-microsoft) by using the local admin account at the elevated privilege prompt. What ...
0
votes
1answer
4k views

How to remove programs from the start menu windows 7 client using a GPO managed on window server 2008 r2

I have a windows server 2008 r2 with a domain where windows 7 desktop pcs connect to. There are only 3 programs I'd like to display on the start menu for users. All client computers have the same ...
1
vote
2answers
30 views

IE (10) blocked this website from displaying content with security certificate errors - show content

Currently having an issue with a client that is getting the following error when loading a certain website: I have added the site to trusted sites and enabled 'display mixed content' through GPO. ...
2
votes
1answer
5k views

Deleting Local Profiles when using Roaming Profiles at Log off

I'm currently building an environment that will host about 5,000 users over 20 AppServer. I have finalized my GPOs but I'm experiencing an issue with the user's local profile when roaming profiles is ...
2
votes
1answer
497 views

Wallpaper Breach in window xp

I have applied group policy for my Company Wallpaper. But in window xp, if i right click on images in web browser and than select Set as wallpaper, than the wallpaper changes. ( please see the below ...
1
vote
1answer
36 views

Enforce minimum wait time for network connection

We are currently using multiple HP ProCurve V1810-48G switches in our environment which are causing issue with GPO based software installation. We've attributed this to the Spanning Tree support, as ...
-1
votes
0answers
33 views

Deploy printer via GPO but GPO update show fault

I've just deploy new printer via GPO but it is not working. I checked by update GPO by run cmd gpupdate /force but it shown me the error as below. Please help me , Where to check ? what is the ...
-6
votes
2answers
38 views

How to protect Windows Server 2008 r2 from persons, which have physical access to computer? [closed]

One server is available for other users, and we think that someone may steal passwords from it. I can not set a password on boot, because sometimes there is electricity failure, and UPS can hold it ...
0
votes
2answers
4k views

Disable USB mass storage access on client machines

This might not be a new question for this forum but for me it is very critical. I am having a network of 10 PCs, one is having Windows Server 2012 and Others having Windows 7/Windows 8.1. The server ...
1
vote
0answers
26 views

How to use Group Policy to control local administration access (LOCAL ONLY)

At the company I work for, we have about 75 computer users. We have a Microsoft Domain Controller in our server environment (MS Server 2012) with Active Directory. When users need to install ...
-1
votes
1answer
20 views

GPO to lock computer when idle effects also when out of the domain [closed]

I applied a GPO to lock screens when idle after 5 minutes. Funny thing is, it affects computers also when not connected to the domain (at home for instance). Any idea how to avoid this? Thanks
1
vote
1answer
17 views

IE connection setting: Automatic configuration vs. manual proxy server - precedence?

When I choose Use automatic configuration script and point it to our proxies pac-file, will the proxy setting on the bottom become inactive?
9
votes
6answers
10k views

Group Policy: Administrator Rights for Specific Users on Specific Computers

I'm a programmer stuck trying to administer an Active Directory setup for a small company. The Domain Controller is running Windows Small Business Server 2008. We have a staff of field workers using ...
6
votes
3answers
1k views

GPO to Disable Screensaver only when connected via RDP

Is there a GPO option to disable the idle-time screensaver for RDP connections, but keep the idle-time screensaver options for interactive logins? Edit: All users are TS users as well a local so they ...
2
votes
1answer
2k views

GPO to set firefox proxy

CONTEXT I have recently assigned to restructure a corporate network that contains about 100 client computers. There is an active directory domain (2003 functional level) for the whole network. The ...
0
votes
3answers
1k views

GPO Troubleshooting - Security Filtering - Computer Configuration

We have a GPO that includes a Computer Configuration that enables a Preference that adds a security group to the local Administrators group. Since this is a Computer Configuration, do you need to add ...
2
votes
2answers
873 views

Default Domain Policy Corrupted

It appears that our domain's default domain policy is corrupted. The GPT.ini file is corrupted. When I go to open it, I get an access denied error. I tried to take ownership through explorer, takeown, ...
0
votes
2answers
38 views

Enable Windows Time Service on Secondary Domain Controller

We have an interesting scenario at my workplace. Our primary domain controller started to fail, so we installed a secondary domain controller to allow people to login when the primary would fail. ...
5
votes
1answer
379 views

Disable Outlook Web Access Junk filtering in Exchange 2013

By default, Outlook Web Access (OWA) in Exchange 2013 seems to move suspected junk mail to the Junk Email folder. This is undesirable behavior in most of my environments because we have Barracuda Spam ...
0
votes
1answer
1k views

Open custom port for IIS windows firewall or group policy

I am running Windows SBS 2011. I have added a web site to IIS using port 8888 and it works perfectly when connecting locally, but not from any other PC on the network (domain). I think I need to open ...
0
votes
1answer
21 views

RDS Farm setting applied through GPO causing connection issues

I'm having a strange issue with some RDS GPO's. Since automating the RDS server build process through SCCM I've moved the RDS farm / connection broker settings to a GPO. This works fine, once the ...
0
votes
2answers
940 views

Adminstrator cannot log on to server via remote desktop after changing default domain policy

I wanted to enabled remote desktop access for a domain security group so I search and followed the instruction here to get to the setting which was shown as "Not Defined" then I change the setting to ...
0
votes
1answer
1k views

Why is my loopbacked GPO reporting as disabled

Let me start by saying that my experience with GPO is limited to tentatively poking at settings until they fall into place by trial and error. It is entirely possible this will be a very obvious ...
2
votes
1answer
18 views

CIS benchmark differences between 2008R2 to 2012R2

I'm looking at hardening our golden image inline with the CIS benchmarks for Windows Server 2008R2 and 2012R2. But, after looking at the two benchmark documents(registration required - sorry) from ...
0
votes
2answers
2k views

The sysvol permissions for one or more GPOs on this domain controller are not in sync with the permissions for the GPOs on the baseline domain

I have recently installed a second domain controller and all replication seems to be working fine except for group policy - In windows 2012r2, through the new Group Policy Management, when I click on ...
0
votes
3answers
5k views

Can I use Powershell to configure Local group policy settings in windows server 2008 r2

in Windows server 2008 r2 , for this manual process open run >gpedit.msc > computer configuration > windows templates > windows update > specify intranet microsoft update service location > ...
0
votes
0answers
8 views

Install program to single RDS user

I'm looking to install an application to a single user in a RDS environment without installing it to the other users. The user is an Admin. I have very little experience with GPO but imagine it's ...
0
votes
1answer
39 views

GPO Office Installation - Script runs on PC, How could I get it to appear when a user logs in?

I currently have a GPO created that installs Office 2010 for users during startup of the PC. This script is set to run for specific PCs. Is there any way that I can get the script to appear and run ...
0
votes
0answers
41 views

replace/update user32.dll.mui in System32 through GPO doesn't work

I edited the user32.dll.mui in system32 to display our company name as a watermark. I have already tried it on my PC manually and its working, now i just need to implement it to over 100 PC clients ...
5
votes
2answers
2k views

Applocker vs Software restriction policy

The goal is to prevent users from running unwanted programs on a terminal server. I have read many articles from Microsoft and others saying that the new Applocker feature is 100% better than the ...
1
vote
0answers
15 views

Disable Start menu new Items highlighting by GPO in Windows 2012 R2

I need to disable the new items highlighting (New items are marked with "New") on Windows 2012 R2 (remote desktops). I tried setting the registry value ...
2
votes
1answer
6k views

How Can I Apply Local Group Policy to multiple computers

Exactly like the title said, How can I apply local group policy to multiple computers? Around 500 PCs (I think) I understand the domain group policy can push down the policy but for my scenario here, ...
1
vote
3answers
7k views

Force IE 11 compatibility mode for certain sites within domain

When setting compatibility mode in IE 11 it wants to add our whole domain (somedomain.co.uk) but we don't want every site (*.somedomain.co.uk) to be covered by this. We want just ...
2
votes
1answer
1k views

IE11 Enterprise Mode gpo not working

I've followed the following articles to configure the Enterprise Mode gpo for IE11: http://msdn.microsoft.com/en-us/library/dn640699.aspx http://msdn.microsoft.com/en-us/library/dn640696.aspx I ...
0
votes
1answer
2k views

Samba4 domain controller, group policy processing fails, gpupdate fails

I'm using a Samba4 domain controller, and on the machines joined to the domain I'm seeing this message: The processing of Group Policy failed. Windows attempted to read the file ...
4
votes
1answer
111 views

How to let non-admins manage selected domain groups' membership?

I'm on Windows Server 2012, Active Directory is on and working. All the project we manage have 2 dedicated groups, one for managers with access to all related files (including invoices, timetables and ...
1
vote
0answers
33 views

Firewall rules to allow Hyper V Manager to connect to Hyper V Server 2012 R2?

I moved a Hyper V host into our Servers OU in Active Directory, which has some group policies linked. Now I am unable to connect to the Hyper V host with Hyper V manager. It was working fine before ...
4
votes
2answers
3k views

Why is this preventing me installing an MSI: The System Administrator has set policies to prevent this installation

I am trying to install an MSI on a Windows Server 2012 machine which is part of my lab domain. I am local and domain admin, but I seem to be prevented from installing this MSI. For clarification, ...
0
votes
0answers
22 views

Editing the default meeting time

Does anyone know how to edit the default meeting time via GP for Office 2010 ? I've looked everywhere for this setting and cannot find it on any GP Admin Templates, we are looking to make the default ...
1
vote
3answers
859 views

“Allow logon locally” policy missing on Win XP

My active directory (SBS 2003) domain users cannot log on locally to a given client machine (XP SP3). Logon with the domain admin works. I would like users to be able to logon locally to this ...