Tagged Questions

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

1
vote
1answer
22 views

Desktop Wallpaper through group policy for Windows 8 client

I Have Windows 2008R2 server with active directory. All client systems are Windows 8/8.1 Pro. I need to push corporate wallpaper through AD GPO on client system, I have created a shared folder on ...
3
votes
1answer
31 views

Where does Domain Controller's local security policy come from?

I just fixed a weird group policy problem on a newly-promoted DC. We have a group policy applied to the "Domain Computers" group with the "Deny logon through Remote Desktop" setting. After the ...
1
vote
1answer
47 views

Possible to override a GPO that doesn't have an 'Enabled' or 'Disabled' option?

I have a GPO that is directly under the domain in the tree in group policy manager. Meaning it applies to all OUs in the domain. (This wasn't my doing) The "Interactive logon: Message text for users ...
0
votes
1answer
22 views

My GPO only runs the first time it is linked to the OU

I am attempting to distribute a .msi file via GPO to Win7 machines from a Server 2008 R2 network. I am getting a funny result. The first time I link the GPO to a OU the program loads. I uninstall ...
3
votes
1answer
139 views

port 445 blocked by Group Policy

I have managed to block port 445 in the windows firewall using Group Policy, now the server that has this GPO applied is unable to read further GPO updates from the domain controller. Is there any ...
2
votes
0answers
26 views

Group Policy Files - Active Directory

I am having a whole lot of trouble getting some files distributed across the network. My settings are: Action: Replace Source: \\[fqdn]\Repo\sqljdbcl.jar Destination: ...
1
vote
1answer
21 views

Disable Java auto updater via policy/script or some other automated means

I started researching on this and it turned out that this was not as easy as it seemed it would be. Basically looking to get some sort of automated way that I can turn off all the "an update is ready ...
4
votes
1answer
61 views

New implementation of home and department shares; help me get it right the first time?

I've the rare opportunity to set up from scratch our first home and department share server in a mid sized company (about 250 people), and would like to make something that's reasonable. We're going ...
1
vote
0answers
12 views

HowTo enforce SHA512 in Outlook 2010 (and above) for S/Mime?

When you setup S/Mime in Outlook 2010 you can also choose the hash algorithm as seen here: Can we control that via GPO? I would like to disable all the other options if possible.
1
vote
1answer
169 views

Jave 8 Update 25 Install Over GPO - Not Working

I am trying to set up our Active Directory DC to automatically install Java 8 Update 25 (jre1.8.0_25.msi) using the GPO. Going to Computer Configuration > Policies > Software Settings, ...
2
votes
0answers
19 views

Printer server hostname changed - deploy printers via GPO no longer works

We use the Deploy Printers feature of local group policy in Windows 8.1, so that our users can log into any machine and printers will already be configured. This was working flawlessly for all users ...
0
votes
0answers
27 views

Windows 7 Group Policy Printer not Loading

I'm trying to create a group policy that applies printers to a specific user security group, but facing difficulties. When loading a GPO with 4 printers in it, all but two PCs load all 4 printers. ...
0
votes
1answer
16 views

How can I know where and how a security group is triggering a logon script for some users?

The organization I work for has implemented application access and scripts via Security Groups. This is, if a person needs to access some applications or have a script run when he logs on, we add ...
0
votes
1answer
36 views

Windows 8: GPO to block shutdown without blocking restart?

Windows has a local security policy for disabling the ability to shut down a computer, but this also blocks the ability to restart the machine. Is there a way to block only shutdown without blocking ...
8
votes
2answers
277 views

How do I block inheritance/application of a single GPO?

Due to the workload generated by recent ransomware outbreaks (Cryptolocker/Cryptowall/etc.), I was recently tasked with implementing Software Restriction policies to block program execution from ...
0
votes
1answer
23 views

How do I make browser shortcuts w/custom proxy settings available on user desktops?

In our environment, we have about 30 testers (website testers) located at different physical locations. However, they all log on to the same AD. As it is now, their MSIE is configured to access the ...
0
votes
2answers
27 views

Software installation by group policy

I have a server with windows 2008 r2, it is connected N client. Clients use software that releases updates. Is there an application that I install on the server, which allows you to select the ...
3
votes
1answer
23 views

If a GPO is not the Winning GPO does none or part of the GPO get applied?

I am reviewing some gpresults settings and it shows the Winning GPO as a server configured GPO. If another GPO has already won and a second GPO tries to set a conflicting settings does the second ...
0
votes
3answers
35 views

Network based automount drive in GPO

For starters, I know about net use for this, but I need a more sophisticated solution. We have two branches, and both have a server with shared drives, both of which have are (or will have) the same ...
1
vote
1answer
22 views

Group Policy WMI Filter query

I'm putting in place a policy to install AV software but only want it to apply when the computer has no AV software installed, I know WMI can be used for this but don't have a clue how it can be done. ...
0
votes
0answers
41 views

Firewall is Enabled after Server is Moved to New OU

I am experiencing an issue with Windows Firewall via Group Policy on Windows SBS 2008. When moving any machine, physical or virtual, from our primary SBSComputers OU to our SBSServers OU (no ...
3
votes
0answers
27 views

Server 2008 R2 WMI problems

I get error "1065" from Group Policy when trying to run GPUpdate, and Group Policy is specifying that it cannot process the WMI query. I can successfully run some queries manually, but WMIDiag ...
0
votes
1answer
41 views

Pre-Moving user files prior to folder redirection to new folder

I have folder redirection in place at the office I work for. The user files currently reside in a folder on my file server. I am in the process of reworking the GPO and AD structure to facilitate ...
6
votes
1answer
88 views

How do I set default internet zone level with Group policy?

I have been trying for a while to get this done with no success. It looks like my group policy settings are being applied when I run the group policy results wizard. Here is what I am doing to set ...
2
votes
1answer
27 views

GPO's between domains with a trust relationship

Is it possible to apply a GPO from one domain to another domain with a trust relationship? We have a GPO that adds a management security group to the local admin group of domain joined computers. My ...
2
votes
2answers
32 views

Group policy WMI Logon Server

I'm trying to setup a GP to do tasks if in a certain location, I believe the best way in doing this is a WMI filter. Could someone help me out? I've never used this part of GP before. Was looking ...
0
votes
0answers
12 views

SQL Reporting Denying Access to User After Move to New Group

We have a SQL Server 2008 server setup with reporting services so that users can log in and run certain reports. I have a user that was granted browse permissions to this as we had their initial ...
2
votes
1answer
28 views

Automate Windows Server 2008 Local Policy Changes?

I'm a student assistant in IT at a large organization with several less than cooperative separate IT departments. My little IT group currently doesn't have Active Directory rights to send a Group ...
5
votes
1answer
36 views

W2K8R2 - A way to convert effecitve Group Policy settings to import on stand-alone machines for local policy?

If I have a relatively robust domain environment (e.g. 20 Security related Group Policy Objects) applying to my servers as a baseline set of policy settings and I have a stand-alone server that I want ...
0
votes
0answers
24 views

Change dnserror.htm page when cannot locate website in Internet Explorer via Group Policy

When you type in a URL in Internet Explorer and it cannot be located via DNS it loads dnserror.htm from a .DLL in C:\Windows\System32\en-US\ieframe.dll.mui. I have read that you can use a program ...
0
votes
1answer
53 views

GPO To Modify Registry Setting Not Applying

I have a XenApp Server running on Server 2008, and would like to apply a Group Policy Object to the server to modify the following registry setting: HKLM\Software\Symantec\Symantec Endpoint ...
0
votes
1answer
42 views

How to Push out OneDrive for Business on multiple network computers

I have several network computers that I need to install Microsoft's OneDrive for Business software agent on. It can be downloaded here: http://support2.microsoft.com/kb/2903984 It is an exe so Group ...
-1
votes
2answers
34 views

Disable user printing from browser in corporate intranet [closed]

... per a suggestion I've moved this from StackOverflow Within a corporate intranet, can the browser be controlled via policy and/or command line parameters to prevent a user from printing a specific ...
0
votes
0answers
27 views

Allow Non-Administrators to Install Specific Devices - Classes

I'm automating driver installation with the use of a central driver store. An important part of this approach is to add the Class GUID's of the devices/drivers to the GPO (Allow Non-Administrators to ...
0
votes
1answer
75 views

Set User Time Zone by GPO on Windows Server 2012

I am trying to set the time zone of users in Windows Server 2012 by using a user GPO. To be more precise, I have an application which users can log into by RDP, what I am trying to do is when they ...
-1
votes
2answers
43 views

Audit policy applied, then removed after each gpupdate

This question addresses my issue, however the solution isn't solving it on all my workstations. One of my workstations turned off auditing this morning magically on its own. Each time I run a gpupdate ...
-2
votes
1answer
37 views

Assigning a GPO to a computer?

I have a sales area with 30 Computers in it. The Employee turn over is very high and I was tired of setting multiple users up everyday. I made a Sale1 logon and am having all 30 Computers use it. The ...
3
votes
1answer
36 views

Moving AppData to a new share: best practice for moving data

My company uses folder redirection to store the AppData folder on a network share. I will be moving the AppData to a new share and I was wondering about the automatic data transfering feature of the ...
1
vote
0answers
22 views

Group policy deployed printer: One duplicates?

As a preface, no this doesn't have to do with Remote Desktop's Redirected printers at all. I've deployed an HP printer (called \Manager\Picasso) under User Configuration in a Group Policy object. ...
1
vote
1answer
44 views

Impact of enforcing software restriction policies via GPO 2008r2

We are trying to prevent the execution of certain system related executables by regular users on our network (mmc, cmd, ldp, etc.). I have suggested the use of software hashing rules but I am ...
3
votes
1answer
52 views

Windows Firewall: Remote Desktop block action by local policy

On a fresh domain-joined Server 2012 R2 install I see a peculiarity where an enabled "Remote Desktop" rule is set to Block in the Domain profile: As block rules take precedence over allow rules, I ...
1
vote
1answer
26 views

Group Policy not blocking RDP saved credentials when using hostname

Group policy is set up to prevent users from using saved credentials, works fine when connecting to the RDP via IP address or FQDN. But connecting in through just the hostname allows a user to save ...
1
vote
0answers
29 views

Configure Calendar time scale to 15 minutes in Outlook (via Group Policy)

Outlook by default allows users to book meetings in 30 minute increments; this can be manually changed to allow 15 minute increments (Change the calendar time scale). I need to deploy/control this ...
-1
votes
0answers
23 views

password change policy - smart phone caused account locked [duplicate]

My company use all microsoft solutions. Mainly Exchange and Windows 7 laptop all across the board. We only provide company laptop to employee. we have 3 months password policy in place. so every three ...
1
vote
1answer
23 views

How can I get rid of duplicate profile folders in a newly created profile due to folder redirection?

How can I get rid of duplicate profile folders in a newly created profile due to folder redirection? I am using a Folder Redirection GPO to redirect most of my user profile folders to a server. In ...
0
votes
2answers
32 views

restrict media access by user

I recently took over a network and I'm still pretty raw in regards to AD and group policy. I've been trying to use group policy to restrict CD burning rights to only 3 users and only their 3 ...
2
votes
1answer
33 views

When does the “Move the contents of [FolderName] to the new location.” option in a Folder Redirection GPO take effect?

Does the "Move the contents of [FolderName] to the new location." option only apply to files found in the users profile, or does it also apply when changing the destination of the redirection to a new ...
2
votes
0answers
42 views

Is there any way to exclude a list of applications from Software Restriction Policies?

As a result of a number of recent Cryptowall outbreaks ay my current employer, I've been tasked with finding a way to stop it from happening again, basically. The obvious solution would seem to be ...
0
votes
1answer
188 views

Disable Windows locking with a GPO?

I have set up a lab with a number of Windows Server 2012 R2 machines. The lab has an Active Directory domain (DFL: Windows Server 2012 R2, FFL: Windows Server 2012 R2) and these machines are joined to ...
4
votes
2answers
164 views

What is the best method to change the server used for folder redirection?

For years I've been using folder redirection for all my desktop clients (Win7). I am looking to migrate all data to a new server/share. I have already created a new share with the same ACL and used ...