Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

12
votes
1answer
893 views

GPOs fail to apply; reason: Inaccessible, Empty, or Disabled; Server 2012 R2 and Windows 10

I have a Windows Server 2012 R2 Domain. Yesterday, a computer’s (running Windows 10 Pro) network drive stopped working. After further investigation (gpresult /h) it appears ALL group policy objects ...
9
votes
6answers
9k views

What are the popular (free?) options for application deployment? [closed]

I manage a small school network with about 150 machines. I am looking for an easy way to deploy software to all the machines without having to visit each one. I've used Symantec Ghost to get the ...
23
votes
3answers
17k views

What is Group Policy and how does it work?

This is a Canonical Question about Active Directory Group Policy Basics What is Group Policy? How does it work and why should I use it? Note: This is a Question & Answer to new administrator ...
31
votes
10answers
124k views

Group Policy installation failed error 1274

I'm trying to deploy an MSI via the Group Policy in Active Directory. But these are the errors I'm getting in the System event log after logging in: The assignment of application XStandard from ...
7
votes
3answers
847 views

What group-policies have you applied?

I have set about 10 group-policies, and it works OK. Although, it would be interesting to see what kind of things IT-administrators enforce. If you have a ton of policies, just show some, that you ...
13
votes
3answers
21k views

What is the order group policy settings are applied?

So I have been reading the document "Group Policy processing and precedence". I get that policies are applied in the order of local, site, domain, organizational unit, child organizational unit. The ...
9
votes
1answer
39k views

Internet Explorer 9 & 10 Group Policy Preferences missing

I have a single Domain Controller network (Windows Server 2008 R2, running on the 2003 Forest/domain level), with the clients currently migrating from WinXP Pro to Win7 Pro. I Need to control the ...
9
votes
3answers
158k views

How to set the Internet Explorer Home Page via GPO?

I need to set the default home page for the entire domain via GPO. Where is the IE Home Page Policy located?
5
votes
2answers
17k views

Windows 10: Group Policy fails to apply directly after boot, succeeds later

My problem is that Group Policy is not applied when a client is freshly booted. Directly after boot, the client posts an error message in the event log with source "GroupPolicy (Microsoft-Windows-...
5
votes
1answer
3k views

Windows Server 2008 mapped drives not showing on workstations?

I am running Windows Server 2008 Standard Edition with a Windows XP Pro workstation setup as a test unit. I have added an Organisational Unit called 'Misc Users' and have linked a GP called 'Basic ...
1
vote
2answers
8k views

Is it possible to add a local user to the admins group through group policy?

I'd like to have a local user in the admins group for when the computer isn't connected to the domain. Currently I use a start up script to create the user and add it to the admins group. Is there a ...
45
votes
5answers
106k views

How do I grant start/stop/restart permissions on a service to an arbitrary user or group on a non-domain-member server?

We have a suite of Windows Services running on our servers which perform a bunch of automated tasks independently of one another, with the exception of one service which looks after the other services....
34
votes
7answers
166k views

Disable password complexity rule in Active Directory

Where do I go to disable the password complexity policy for the domain? I've logged onto the domain controller (Windows Server 2008) and found the option in local policies which is of course locked ...
10
votes
2answers
14k views

How do I deploy an internal certificate authority?

IE7 aggressively warns about certificate failure; we have some internal sites that run over HTTPS and thus need a valid cert. We appear to have an certificate authority on the intranet that can sign ...
11
votes
13answers
46k views

What Are Some Good Open Source Alternatives to Active Directory?

I'm looking for a good open-source alternative to active directory that can handle: Authorization/Authentication Group Policy Replication and Trust Monitoring In addition, are there any ...
7
votes
2answers
16k views

Group policy preferences that only target 32bit or 64bit os

I am currently deploying some files through GPP to a folder under program files. I now have to differ between a 64bits and 32bits os. What is the easy way to filter out what computer to target with ...
10
votes
2answers
815 views

Warn user if they try to logoff

I want a certain local user to not log off. ever. It's much like this silly question, however I don't necessarily care if the buttons are there, I want to pop up a messagebox that says "Please do not ...
5
votes
1answer
6k views

How do I deploy MS hotfix KB959628 exe/msp via a gpo easily?

I have been given a Microsoft hotfix that I need to deploy over the entire domain. I want to use GPO as the users do not have admin rights and Office was not deployed from an administrative point. It ...
4
votes
1answer
2k views

Hide Total Size and Free Space on Network Drives

I would like to know if there is a way, preferably through Group Policy, that one can hide the total size listing and the free space listing on network drives. We have an active directory environment ...
2
votes
3answers
3k views

Windows 7 blocks network access to network-installed apps

Windows 2008 R2 domain. Users, running Windows 7 Enterprise, are trying to run some software from a network share. Specifically, I've tested this with MATLAB and PuTTY. When starting, MATLAB has to ...
0
votes
3answers
4k views

Configuring location based GPO for WSUS updates but only for some clients

I would like to configure WSUS so that employees arrive in main location they use WSUS to download stuff, and when they are in other locations (different locations / home etc) they use Windows Updates....
0
votes
1answer
752 views

How to do folder redirection

I am using the instructions found here: http://www.informit.com/guides/content.aspx?g=windowsserver&seqNum=61 on a windows 2008 machine. My question is in regard to this step: 2.From the left ...
0
votes
1answer
1k views

Networkmapping script (VBS) Vista doesn't work, XP does

I've got a weird problem, (like always :p ) Okay: Situation: Windows 2003 domain with XP clients. With a GPO I'm running a VBS script on login to map a few drives. This works great on XP, but not on ...
21
votes
3answers
150k views

Registry key / GPO to disable and block Windows 10 upgrade?

One of our remote Windows 7 Professional users just reported that he received an Upgrade Reservation Offer for Windows 10. It appears the Get Windows 10 "App" running in his system tray is legit. So ...
10
votes
1answer
16k views

How can I restrict the java plugin to run only on certain sites in Internet Explorer?

I want to secure our centrally managed computers better and it is very difficult to automatically deploy the java runtime, but how to do that is another question. I find the security of Java ...
15
votes
9answers
3k views

Should you force a reboot after pushing out Windows updates?

I'm finding that most users ignore the "There are updates ready to be installed, click here to install" message that WSUS pushes out. Until now we haven't forced the install but I'm thinking about ...
11
votes
6answers
51k views

How to lock down Windows XP for use as an internet kiosk?

One of our clients, whose website we built, is a manufacturer of ultra-high-end bicycles. They would like to distribute kiosks -- basically, locked-down Windows XP boxes from Dell -- at some of their ...
10
votes
6answers
13k views

Group Policy: Administrator Rights for Specific Users on Specific Computers

I'm a programmer stuck trying to administer an Active Directory setup for a small company. The Domain Controller is running Windows Small Business Server 2008. We have a staff of field workers using ...
8
votes
4answers
7k views

I deployed Flash Player via a Software Installation policy. How to upgrade?

I have a Windows Server 2008 machine as my DC. Earlier this year I created a Software Installation GPO to deploy Adobe Flash Player plugin MSI. I assigned the policy to the computers, about half run ...
8
votes
3answers
3k views

How is software deployed via Active Directory?

What are the steps required for deploying a software package via Active Directory / GPO?
7
votes
2answers
25k views

Mapping printers using Group Policy Preferences; works on Windows XP, not on Windows 7 x64

I'm trying to use Group Policy Preferences to manage user connections to shared printers. The print server is Windows Server 2003 R2 Std edition. Several printers are installed, and I've added x64 ...
5
votes
1answer
5k views

Deploying Printers to Computers vs. Users via GPO

When I deploy a printer to a computer it only seems to deploy to our Windows XP machines. If I deploy to users it deploys to our Windows XP and 7 machines. When I look in the RSoP Snap-in it shows the ...
5
votes
1answer
4k views

GPO to remove “Highlight new programs”?

I need to disable the "highlight new programs" feature in Windows start menu via a GPO but can't find such a setting. Does such a thing even exist or is it achievable only through registry ...
4
votes
5answers
882 views

Conficker: Should steps taken in group policy to secure against virus remain?

We got nailed two weeks ago by Conficker, I ran through the 26 step checklist from Mircrosoft on my own computer, as well as on our domain server. It says near the end to reverse all the changes, but ...
4
votes
4answers
35k views

Diagnosing why a Group Policy Object is inaccessible

I have a Windows Server 2003 domain. One of the Group Policy Objects appears as a linked item in an OU but all I can see if the Unique ID and that the Link Status is Enabled. There is a red minus icon ...
13
votes
5answers
24k views

Disable Windows Server Network Locations

I'm not sure what exactly this feature is called. But in Windows Server 2008, it has the Vista Public/Private/Domain locations. This makes sense for laptops, and none at all for servers. My problem ...
10
votes
3answers
4k views

Deploying Printers via GPO/GPP - is there a programmatic option?

For reasons beyond my control, I've been tasked with setting up GPO/GPPs to deploy our 100+ printers to our 1000+ clients. The good news is that we have over a dozen sites, and for the most part, I'm ...
7
votes
3answers
406 views

Managing self-updating Windows software in GPO-deployed packages

Being very new to Windows software distribution for a small network (<50 clients) I was wondering how software packages like Adobe's Reader or Java are handled. I can deploy them as MSIs via group ...
6
votes
3answers
12k views

Is it possible to use Group Policy to grant the permission to manage Windows services?

Is it possible to use Group Policy to grant the permission to manage Windows services? I would really like to know if this is even possible, and if so, where do you recommend I look for more ...
5
votes
3answers
25k views

How do you override a GPO with another GPO?

If there is a GPO which is applied to all Domain Computers which disables something, is there a way to re-enable the disabled thing for some hosts in the domain, without taking those hosts out of the ...
5
votes
2answers
9k views

Find out which Group Policies take forever to complete at boot

I want to analyse which group policies are inflating the bootup time. What's the best way to do so? Something like gpresult including timestamps/periods would be really helpfull!
5
votes
3answers
30k views

How do I add a URL with a Windows Group Policy into a client's “Local Intranet Zone”?

I'm trying to add a specific web server URL into the local Intranet Zone on my client PCs using a Group Policy. Any ideas what policy to apply? I can do it via the Internet Explorer Internet Options.....
3
votes
3answers
3k views

Is Active Directory Unreliable or is there Another Issue Here?

We have an organization of approximately 1200 Windows PC clients on an Active Directory network. We have noticed that there seems to be random systems that don't get policies set. For example, we ...
2
votes
3answers
972 views

Are there any tools to do change management with Active Directory / Group Policy?

We seem to be having a lot of problems related to "forgetting some mundane detail" while managing our Group Policy settings in Active Directory, so I am curious as to whether there are any well-...
9
votes
4answers
2k views

Windows 2003 GPO Software Restrictions

We're running a Terminal Server farm in a Windows 2003 Domain, and I found a problem with the Software Restrictions GPO settings that are being applied to our TS servers. Here are the details of our ...
9
votes
3answers
6k views

Applocker vs Software restriction policy

The goal is to prevent users from running unwanted programs on a terminal server. I have read many articles from Microsoft and others saying that the new Applocker feature is 100% better than the ...
6
votes
6answers
62k views

How can I export all group policies to a easily-parseable format?

I need to dump all the Group Policies within Active Directory to review offline at a later date. Is there a way I can easily export all the Group Policies to text or some other easily-parseable format?...
5
votes
1answer
3k views

How to do exceptions in Group Policy?

We're implementing Group Policy for the first time at our organization and have some questions about best practices and capabilities. We've already done some work and want to see if there is a better ...
3
votes
2answers
11k views

Where Do I Find The Update URL For Google Chrome Extensions?

I'm trying to setup group policy for Google Chrome (http://support.google.com/installer/bin/answer.py?hl=en&answer=146164) particularily I'm working on setting up the Configuring the list of force-...
3
votes
6answers
4k views

Disable group policy from a workstation [closed]

How can I, as a Workstation Administrator, disable Group Policy on that workstation? The Domain Administrator is feeding utter garbage via Group Policy and I want it stopped. Last antic: turning on ...