Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

5
votes
0answers
50 views

How can I eliminate the “Several add-ons are ready for use” prompt in Internet Explorer?

The issue I describe here is the same as that in Group Policy Internet Explorer, Add-on list not working, but I provide more detail and troubleshooting steps, so I thought it was worth re-asking. I ...
3
votes
0answers
69 views

Server 2008 R2 WMI problems

I get error "1065" from Group Policy when trying to run GPUpdate, and Group Policy is specifying that it cannot process the WMI query. I can successfully run some queries manually, but WMIDiag ...
3
votes
0answers
244 views

Proxy Server setting stuck on Server 2003 R2 for Windows Updates

Stay a while and listen. This is going to be a long one. We've been having a problem the last couple of months with Updates on very specific Microsoft Server 2003 R2 Machines. This problem has ...
2
votes
0answers
43 views

Chrome Not Applying GPO Policies

I'm having a little trouble getting Chrome installions on our workstation to update it's policies to reflect I've sent in GPO. I added the admx and adml to %systemroot%\policyDefinitions as our ...
2
votes
0answers
20 views

What does SBS 2011 do “under the hood” when you give a user admin access?

I have been using Windows Server for many years now and when I have someone who needs local admin access over their machine, I apply it through group policy in a similar way to this answer. One of my ...
2
votes
0answers
52 views

Is using the AD home directory attribute to map the home drive really no longer a best practice?

I have read some articles that claim that using the Active Directory user home directory attribute to automatically map the home drive is a legacy method, deprecated, or not recommended. The second ...
2
votes
0answers
30 views

EMET Configuration refresh

I deployed EMET on my domain and i'm configuring it with a GPO. I'd like to know if the system settings System DEP, System ASLR and System SEHOP are taken into account when i refresh the group ...
2
votes
0answers
38 views

Printer server hostname changed - deploy printers via GPO no longer works

We use the Deploy Printers feature of local group policy in Windows 8.1, so that our users can log into any machine and printers will already be configured. This was working flawlessly for all users ...
2
votes
0answers
50 views

Group policy deployed printer: One duplicates?

As a preface, no this doesn't have to do with Remote Desktop's Redirected printers at all. I've deployed an HP printer (called \Manager\Picasso) under User Configuration in a Group Policy object. ...
2
votes
0answers
28 views

Can I upgrade an program via group policy if it was initially installed manualy?

We have a program which was installed manually on workstations when they were initially setup. We now need to upgrade this software and I wish to do it via group policy. I have created an MST using ...
2
votes
0answers
48 views

Can't Access Computer Configuration > Preferences or user configuration > Preferences

After creating a new GPO in Windows Server 2008R2 Right click Edit on the newly created GPO Group policy Management Editor opens Clicking on Preferences shows this popup error After Clicking ok ...
2
votes
0answers
50 views

GPO: Applying a home page to Win7 and Vista Clients running IE9

I am trying to set the homepage on several Windows 7 and Vista machines via Group Policy Preferences. Both are running Internet Explorer 9. The "apply once and do not reapply" option is enabled, as i ...
2
votes
0answers
30 views

Deploying custom fxcop rules amongst developers

I am currently in the process of writing and deploying custom FxCop (Visual Studio Code Analysis) rules, allowing developers to check their code against a series of these custom designed rules. As a ...
2
votes
0answers
156 views

In the Local Security Policy, how do you avoid putting “IIS APPPOOL\” before “DefaultAppPool”?

Doesn't seem to be a whole lot on the Internet about this. I was tweaking the Local Security Policy of one of our test servers (Windows Server 2008 R2 Standard Service Pack 1), when I got this error. ...
2
votes
0answers
204 views

Group Policy Internet Explorer, Add-on list not working

We have group policy setup at our company something similar to the setup below Domain Policy OU Policy The domain policy is set to enabled for "Do not allow users to enable or disable add-ons" ...
2
votes
0answers
429 views

getting message open file security warning on remoteapp

I have an app published on Windows 2008R2 remoteapp. I am getting this message: This is how I have the setup of the drive: Local rdp machine is called rdpvm. //rdpvm/shared/company1 = i: ...
2
votes
0answers
288 views

Can I create a WMI filter that will evaluate to True for both Client computers and Terminal Servers?

I have a GPO that is currently being run only on client computers (XP, Vista, 7, etc.), by using a WMI filter with the following query: select * from Win32_OperatingSystem where ProductType='1' I ...
2
votes
0answers
666 views

Windows Firewall deployed by GPO detecting Public NL

Am struggling with Server 2008 R2 NLA and the Windows Firewall. Currently we are testing rolling out Windows Firewall via GP and have a test server that enables the firewall for Domain, Private and ...
2
votes
0answers
120 views

Strange Folder Redirection

I've recently inherited a client who has a folder redirection policy GPO and home paths specified through user attributes in AD. Now the strange thing is, I have literally no idea how it is working. ...
2
votes
0answers
2k views

Single Sign On 802.1x Wireless - saying “Connecting to <SSID>”, hangs for 10 seconds, fails with “Unable to connect to <SSID>, Logging on…”.

We are implementing WiFi on Windows 7 machines in our corporate environment. Machines should be able to log into the domain by WiFi as the Machine (Pre-Logon), and as the User (Post-Logon). We have ...
2
votes
0answers
192 views

Group policy issues

We are having an issue on one of our clients relatively new sbs installs. The domain consists of a single SBS 2011 server with 4 Windows 7 clients and 3 XP clients. Most of the time everything is ...
2
votes
0answers
309 views

Processing of group policy failed - Only on 32bit machines

When forcing a group policy update I get the following messgae, but only on 32bit windows machines. 64bit works fine. Running windows 7. The processing of Group Policy failed. Windows could not ...
2
votes
0answers
443 views

Logon script does not run for all users

We have a standalone common-use workstation running Windows XP Pro SP3 and have created a script using Javascript (scriptname.js) that is to be run for each user. The file was added as a user logon ...
2
votes
0answers
589 views

Windows XP not mapping drives after logging into a windows 7 PC

Bit of background. We map out network drives via GPO. This works fine for both XP and windows 7 clients. The GPO’s are served by a Win2008R2 DC. I have a user that has to works in 2 departments. The ...
2
votes
0answers
2k views

Enabling SSL for Remote Desktop

Ok so I'm trying to remove a number of my systems from our Nessus scan from having this medium vulnerability. http://www.nessus.org/plugins/index.php?view=single&id=18405 I set the following GPO ...
2
votes
0answers
764 views

Network Topology Discovery – Windows 7 Via GPO

I wish to enable Network Discovery on my network (For various reasons) I need to apply this via GPO due to the nature of our setup. This is on a Windows 2008 R2 Domain with Windows 7/XP Clients. I ...
2
votes
0answers
218 views

Using GPO to install/update java on windows terminal servers

We've been using GPO to manage java + reader installs on user PCs for a while now... I'm wondering if there would be any issue using the same method on terminal servers. How do you handle switching ...
1
vote
0answers
66 views

How to allow permission via GPO to remove bluetooth devices in Windows 7

We have 'Standard' users who test Bluetooth devices. This involves pairing them to a Windows 7 machine. Unfortunately, each device adds a unique entry to the "Devices and Printers" which 'Standard' ...
1
vote
0answers
120 views

%systemroot%\system32\GroupPolicy gone

DC Win2012, Client XP I have a couple of problems getting GPOs applied - well, they show up as getting applied (gpresult) but the software i tried to deploy didnt got deployed. I enabled ...
1
vote
0answers
28 views

HowTo enforce SHA512 in Outlook 2010 (and above) for S/Mime?

When you setup S/Mime in Outlook 2010 you can also choose the hash algorithm as seen here: Can we control that via GPO? I would like to disable all the other options if possible.
1
vote
0answers
105 views

Configure Calendar time scale to 15 minutes in Outlook (via Group Policy)

Outlook by default allows users to book meetings in 30 minute increments; this can be manually changed to allow 15 minute increments (Change the calendar time scale). I need to deploy/control this ...
1
vote
0answers
37 views

gpo ie user force update

We use two 2008 Domain-Controllers and one 2012 DC In a gpo we set the proxy for IE-11 per user. eg: X use proxy, server: proxyserver, port: 3131 This gpo is not mandatory, so users could change ...
1
vote
0answers
55 views

WMI request (Wbemtest), access is denied to domain computer

let me explain our setup first! We have 2 site location with Cyberoam CR50ING Firewall, IPSec between the 2 Subnet. Cyberoam firewall has an AD authentication with their software linked to the ...
1
vote
0answers
139 views

Prevent user interactive logon to domain computers

I currently have a user DOMAINJOINER (located in the WIN7Support OU) which I use to deploy Windows 7 machines. This user can Create and Delete Computer Objects in the WIN7Computers OU, that's about it ...
1
vote
0answers
95 views

CIS benchmark: How to define the BUILTIN\Administrator account within GPOs?

I am responsible for configuring GPOs according to the latest CIS benchmark policy. However the test for "Impersonate a client after authentication" always fails, although everything seems to be ...
1
vote
0answers
134 views

Configuring Service Login Credentials with Group Policy following MS14-025

With Microsoft security bulletin MS14-025, GPMC and related tools are now patched to no longer allow the use of configuration items within Group Policy Prefs that would embed obfuscated passwords. The ...
1
vote
0answers
78 views

Group Policy Preference IE10

I am trying to apply a Group Policy Preference for IE10. There are a few settings I only want applied once. I configured this, but if I login to a system with multiple users on one system, the GPP ...
1
vote
0answers
54 views

Disable access to printers

In the below pic, if the user clicks the "Printers" button the Control Panel Printer window opens up. I've tried every GPO I can find to turn this off, but nothing seems to work. I've tried User ...
1
vote
0answers
281 views

Why is GPOTool not finding all my GPOs?

I have 91 group policy objects linked to my domain. When I run GPOTool it only finds and reports on 47. Why would the results be missing the rest? I am running Windows 2008 R2 on all 6 domain ...
1
vote
0answers
90 views

Group policy: deploying a space as a registry value

I am trying to use Group policy preferences to deploy a registry key that has an empty space as its only value (one press of the space bar). I am using: User Configuration -> Preferences -> Windows ...
1
vote
0answers
24 views

No “Compatibility View” Options

I'm working on setting up a GPO to push out some compatibility view settings for IE. But in my Group Policy editor there are no "Compatibility View" settings. I'm looking in Administrative Templates > ...
1
vote
0answers
57 views

Group Policy Mapping Printer

There seems to be lots of different ways to map printers, all appear not to work (for me). Im running a Windows 2008 Environment with windows 7 clients, simple, hey? No.. I have a printer connected ...
1
vote
0answers
473 views

Windows Server 2012 R2 cannot rename Administrator account via GPO

On Windows Server 2012 R2 the Administrator account does not seem to be able to be renamed. Have created the normal Rename Administrator GPO: Comp config -> Policies -> Windows settings -> Security ...
1
vote
0answers
92 views

Server 2003R2 DC Windows 7 and disable auto updates

I run an environment with Server 2003 R2 DC's and mostly WIndows 7 clients with just a few XP clients. The problem I am having is that the Windows 7 PC's are installing updates on their own. We have ...
1
vote
0answers
156 views

GPP Delete policy not working on Windows Server 2008 R2 RDS when deleting shared printee

I have one AD Security group for each shared printer, I have one GPP that map the printer if the user is in the security group that belong to the printer. And one GPP to delete the printer if the user ...
1
vote
0answers
84 views

How to prevent Domain Users group from being added to local Users group

I do not want the Domain Users group to be automatically added to the local "Users" group when a computer joins the domain, but am struggling with finding how to prevent this. In the default domain ...
1
vote
0answers
3k views

“The processing of Group Policy failed” while doing gpupdate

I'm trying to install MSI package from a Windows Server 2008 as a GPO in a computer-wide scope. When I log in to a Windows 7 client workstation and run: gpupdate /force I get the following error ...
1
vote
0answers
49 views

GPO extension to MPG and MPEG files

I have a 2008 R2 server with GPO that generates pop-up menus on extensions of GPG , MPG and MPEG files. This GPO is active in encoding servers. options that appear on the gpg files , mpeg , mpg are " ...
1
vote
0answers
428 views

How can I run a scheduled task on a Windows 2008 R2 Domain Controller as a non-admin user?

I'm trying to run an exe as a scheduled task on a Windows 2008 R2 Domain Controller. The exe runs fine when I try and run it manually using an account which is a Domain Administrator, but I don't ...
1
vote
0answers
36 views

Is there a group policy or permission to create local shares?

I have some custom windows services which need the ability to create and remove local shares. In trying to lock down security, I also don't want to run the services as administrators. Is there a ...