Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

-2
votes
0answers
29 views

Domain Policy - Windows Server 2012 R2 Essentials role

I have a Win 8.1 Workstation joinde in a Windows Server 2012 R2 Domain (Essentials role). When trying to save Remote Desktop credentials I got this message. Your system administrator does not ...
1
vote
1answer
914 views

Windows 2008 Group Policy Setting? - Migration Headache

I have a small domain of users that I just migrated from a linux domain running open-ldap. Our new servers are running Windows 2008 Standard. I've installed Active Directory and everything is ...
2
votes
1answer
1k views

How to enable Kerberos Authentication Service auditing on 2008 server

I have a 2008-level Windows domain running 5 x 2008 (non-R2) DCs (it's on the roadmap to migrate to R2 or possibly 2012 in the next 9-12 months, but this project needs to be working first), and I need ...
0
votes
1answer
15 views

Disable secure logon for tablets connected to domain

I have a domain set up with Windows 2008 R2, and by default requires Ctrl + alt + del to unlock computers. I have been pulling my hair out trying to configure GPO so that tablets will not require Ctrl ...
0
votes
2answers
20k views

How do I import ADMX files for Microsoft Office 2013?

There is no ADM file (policy template) that I can find for MS Office 2013 so I can't figure out how to get the ADMX files imported to create GPOs. Any help would be greatly appreciated.
2
votes
1answer
2k views

IE9 GPO Setting “Configure Tracking Protection Lists”

I've just installed IE9 on my workstations and Server in our network. According to technet article http://technet.microsoft.com/en-us/library/gg699401.aspx There is a GPO setting for IE9 called ...
5
votes
2answers
253 views

Applying group policy loopback to any user on specific computers

In a server 2008 R2 and Windows 7 environment, I have a GPO that specifies screen saver settings in the user settings policy for the entire domain. However, for specific computers, this is not ideal. ...
6
votes
3answers
912 views

GPO to Disable Screensaver only when connected via RDP

Is there a GPO option to disable the idle-time screensaver for RDP connections, but keep the idle-time screensaver options for interactive logins? Edit: All users are TS users as well a local so they ...
0
votes
1answer
49 views

Can't open Active Directory Users and Computers, Group Policy settings issues

In the past I've been able to open "Active Directory Users and Computers" to manage the users and computers on our Windows Server 2008 R2 box. We just recently made some changes to our Group Policy to ...
0
votes
0answers
19 views

Windows Server 2012 R2 Update Notification on login spash screen

we are have two load balanced svr 2012 R2 machines, front end netscaler, using citrix reciever to login. The issue i have is i cannot seem to disable the notifications when users are logging in that ...
2
votes
1answer
21 views

Remote Computer Management from Active Directory Snap-In fails with DCOM error 10006

So here's a little background. Our system originally started with Windows Server 2003 machines and eventually over time expanded and grew. We still have a few Server 2003's but they're being removed. ...
0
votes
2answers
806 views

I Cannot create a .BAT file in the root of C “Access is Denied” Server 2k3

I have an oracle db server on a windows 2k3 box. I am currently unable to create or copy a batch file to the root of c. I can create batch files on different folders (i.e. in my user directory) or I ...
2
votes
4answers
180 views

Difference between HKLM:\SOFTWARE\Policies\ and HKLM:\SYSTEM\CurrentControlSet\

What is the difference between editing settings in HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services and HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server? Similar settings seem to ...
2
votes
1answer
3k views

Deleting Local Profiles when using Roaming Profiles at Log off

I'm currently building an environment that will host about 5,000 users over 20 AppServer. I have finalized my GPOs but I'm experiencing an issue with the user's local profile when roaming profiles is ...
3
votes
1answer
95 views

Acrobat Reader XI addon gets disabled periodically in Internet Explorer within Windows domain

We have a followig problem that happens on new workstations with Windows 7 x64 and Acrobat Reader XI only. Every few days the following key is automatically added to registry: ...
-1
votes
1answer
44 views

GPO edit mess , system error [closed]

I messed around with a GPO editing tool in order to implement "hide computer drives" policy on windows 2003 server. Since then I got a system error on my events log to say : Windows cannot access the ...
0
votes
1answer
1k views

Why is my loopbacked GPO reporting as disabled

Let me start by saying that my experience with GPO is limited to tentatively poking at settings until they fall into place by trial and error. It is entirely possible this will be a very obvious ...
1
vote
2answers
2k views

GPO: Add Specific items in 'All Programs' on the start menu?

Disabled all the items in the 'All Programs' via GPO using Windows Server 2012 I have set "Remove common program groups from Start Menu" to Enabled. Everything in 'All Programs' is now empty, how ...
2
votes
2answers
46 views

Group Policy to Place Shortcut on All Users Desktops

We're looking at using a GPO to put a shortcut to a company web app on all users' desktops. Different users are on different Windows versions, meaning the location varies: c:\documents and ...
1
vote
1answer
3k views

Adding static route through group policy

We are trying to add a static route across all of our end user machines, we have setup a GPO object under Computer configuration > Policies > Windows Settings > Scripts (startup/shutdown) > Startup. ...
2
votes
1answer
29 views

How to Automatically Tust Auto Enrolled Code Signing Certificates

In my organization all developers are setup to be granted a Code signing certificate via Auto Enrollment. Additionally, PowerShell is configured by group policy to require all scripts to be signed. ...
7
votes
2answers
66 views

Enable Certificate Enrollment Policy and Request a Cert using PowerShell

Right now, I'm doing the following to request a cert from a CEP server: Open gpedit.msc Under Computer Configuration > Windows Settings > Security Settings > Public Key Policies, double click ...
1
vote
1answer
26 views

Can GPO templates in Server 2012R2 manage Win8.1 Win10 & Server 2012R2?

We just upgraded our DC to server 2012 R2 and testing Win8.1 / Win10 / Server 2012R2 with it. Just wondering that if the native admin templates in 2012R2's GPO can manage all win8.1/Win10/2012r2? or ...
2
votes
1answer
1k views

GPO to set firefox proxy

CONTEXT I have recently assigned to restructure a corporate network that contains about 100 client computers. There is an active directory domain (2003 functional level) for the whole network. The ...
4
votes
2answers
156 views

Pin “Run” to taskbar through group policy

Is there are way to pin the "Run" button to taskbar through group policy or a script? Only the specific items needs to be pinned. The other items are not to be touched. Partial solutions I found on ...
0
votes
1answer
905 views

Open custom port for IIS windows firewall or group policy

I am running Windows SBS 2011. I have added a web site to IIS using port 8888 and it works perfectly when connecting locally, but not from any other PC on the network (domain). I think I need to open ...
0
votes
3answers
36 views

Active Directory Export GPO user

I would like to get in .csv (or any other readable format) all my AD users and the policies that they need to comply (the type of authentication each user needs, his event logging properties and even ...
2
votes
1answer
260 views

Provide a user with service start/stop permissions

I have a very basic domain that I use for development. I want to create a GPO that provides users in the Backup Operators group with start/stop permissions for two specific services on a specific ...
0
votes
1answer
46 views

Can I connect all the available network printers without using a logonscript?

In our organisation we have around 30 printers an we are currently connecting for the user all the printers using a logon script that calls the command line app con2prt for a series of printers. ...
1
vote
0answers
93 views

Add site to Internet Explorer Security Zone in GP without deleting all other settings

What I have figured out is this: GP: User Configuration -> Administrative Templates -> Internet Explorer -> Internet Control Panel -> Site to Zone Assignment list. If I enable it, and add a site ...
0
votes
1answer
1k views

Group Policy Preferences Printers Server 2008R2 Error 0x80070bc4 does not set default printer after a printer has been created

Alright after calling upon the almighty Google I have been unable to find a good solutions to this problem along with many other users. So I am turning to Server Fault for some support here. I am in ...
1
vote
0answers
32 views

Windows user privileges when running scheduled task

I posted a question a while ago about allowing a specific user to start/stop Windows services. Provide a user with service start/stop permissions I decided to revisit the issue. I have no idea what ...
0
votes
1answer
1k views

The sysvol permissions for one or more GPOs on this domain controller are not in sync with the permissions for the GPOs on the baseline domain

I have recently installed a second domain controller and all replication seems to be working fine except for group policy - In windows 2012r2, through the new Group Policy Management, when I click on ...
4
votes
2answers
1k views

Applocker vs Software restriction policy

The goal is to prevent users from running unwanted programs on a terminal server. I have read many articles from Microsoft and others saying that the new Applocker feature is 100% better than the ...
0
votes
0answers
17 views

Removable Storage User Configuration Group Policy not working when Windows Server 2008 R2 is used as a client

I have enabled read write restriction for a group of users, if a user from this group is to log onto a win 8.1 system or Windows 7 system and tries accessing a USB drive it says access is denied, ...
1
vote
1answer
36 views

Lockdown Mozilla Thunderbird on Windows Remote Desktop Services

I've installed Mozilla Thunderbird 31.3.0 on a Windows Server 2012 R2 which has the Remote Desktop Services role. I want to configure the Thunderbird program and set each user's email account etc and ...
1
vote
2answers
1k views

Force IE 11 compatibility mode for certain sites within domain

When setting compatibility mode in IE 11 it wants to add our whole domain (somedomain.co.uk) but we don't want every site (*.somedomain.co.uk) to be covered by this. We want just ...
3
votes
1answer
51 views

2008 GPO not replicating on 2012 server

I have a Windows Server 2012 system and the domain controller is running Windows Server 2008. The domain controller also hosts the domain group policy. Most of the settings have replicated to the ...
0
votes
1answer
1k views

Network drive map through GPO not working on Windows 2012 (Neither via logon script nor drive maps)

Although I though this would be easy I am unable to automatically connect to a network drive via GPO. I tried through a batch file on (User Configuration / Policies / Windows Settings / Script / ...
0
votes
2answers
2k views

Disable USB mass storage access on client machines

This might not be a new question for this forum but for me it is very critical. I am having a network of 10 PCs, one is having Windows Server 2012 and Others having Windows 7/Windows 8.1. The server ...
5
votes
2answers
307 views

Is there a way to tell how long a machine has been in an security group?

Machines get added to a security group to prevent them from getting a GPO. I'd like the machines to get removed after 30 days of being in the group. Ideally, I'd like to also be able to generate a ...
1
vote
1answer
50 views

Can't access share sometimes and some strange performance issues

I'm getting error 0x80070043 "The network name cannot be found" when accessing \\dc01 (the root), but can access shares via \\dc01\share. When I get that error I also didn't get the network drive on ...
0
votes
0answers
63 views

“Group policy client service failed. The logon access is denied” when copying roaming profiles to new server. (Samba)

We have perfectly working roaming profiles on Samba 3.3.10 (SuSE) with Windows 7 clients. We configured our new server with same domain name, Samba 4.1.11 (Debian). On the new server, for newly ...
-1
votes
0answers
53 views

Microsoft Domain Controller, Account lockout polcy not locking out the users?

Just recently i have hardened the Microsoft 2003 domain controller, due to PCI-DSS requirement. I used CIS- cookbook as a guidance. the password threshold policy is set to 3. but as testing when i try ...
1
vote
2answers
2k views

Windows GPO Software Restrictions Policy not working with %TEMP% variable

I'm trying to put in some meagre additional malware prevention measures, by restricting the execution of *.exe in a handful of locations -- in particular, the temporary folders that various ...
0
votes
2answers
29 views

Assign DNS settings on client via elevated script in GPO

i have installed windows 2012 as a member server in my existing windows 2008 DC. now i want to assign secondary DNS on my windows 7/8 client PCs. I do not have DHCP in my environment. I tried to find ...
1
vote
1answer
39 views

What are the security implications of the “Allow DNS Suffix Appending to Unqualified Multi-Label Name Queries” setting?

The Allow DNS Suffix Appending to Unqualified Multi-Label Name Queries group policy was introduced in Windows Vista, and blocks the behaviour of child subdomains being tested against domain suffix, ...
0
votes
2answers
4k views

processing of Group Policy failed only on 2008 Servers and Name Resolution failure on the current domain controller

Spent last 3 months doing a upgrade from 2003 domain to a 2008R2 domain. our last DC was rebuilt (5 total) and brought up on line. After it was put on line we have some 2008 and 2008R2 servers (10 ...
0
votes
0answers
29 views

Unsolicited Remote Assistance on domain

I manage a domain using win 2k8 r2 and 100 PC on Windows7. I have configured the Unsolicited Remote Assistance proceeding with all the requirements posted here ...
1
vote
1answer
1k views

“Fast link detected” warning in GP management console

There is a message that is shown in every report i make in Group Policy Results section of Group Policy Management Console, saying that "A fast link is detected". I followed the link in the waring, ...