Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

3
votes
0answers
107 views

Server 2008 R2 WMI problems

I get error "1065" from Group Policy when trying to run GPUpdate, and Group Policy is specifying that it cannot process the WMI query. I can successfully run some queries manually, but WMIDiag ...
3
votes
0answers
321 views

Proxy Server setting stuck on Server 2003 R2 for Windows Updates

Stay a while and listen. This is going to be a long one. We've been having a problem the last couple of months with Updates on very specific Microsoft Server 2003 R2 Machines. This problem has ...
3
votes
0answers
2k views

Is MSIZAP still useful, or is it obsolete?

I update flash using MSI files installed by group policy. However, with every update, about a third of the workstations fail to update (Windows Vista and Windows 7 32/64-bit editions). In the event ...
2
votes
0answers
40 views

Best approach to deploy DLL file updates to Win7 clients

We are in a Windows 7 / Server 2008 R2 domain environment. We have a .NET application with lots of internal libraries for different UI and other features. We deploy it from a share where a directory ...
2
votes
0answers
15 views

Identify non-domain remote clients with Item-Level targeting

I would like to apply a group policy preference setting (to deploy a shared printer) only if a user is connecting to a RDSH server from a non domain-joined client computer. Many of these clients will ...
2
votes
0answers
56 views

Associate user picture to domain account

I want to assign users a picture (o let them assign their own picture) to their user domain account and wherever they log in, that picture should appear as well. How can I do this using group policy? ...
2
votes
0answers
53 views

Do GPOs apply to interactive logon only?

I am trying to enable certificate autoenrollment and credential roaming through a GPO in an ADS domain (DCs are Windows Server 2008 R2). I can interactively log on as a newly created user (on a member ...
2
votes
0answers
96 views

Group Policy - Drive Mapping Preferences - slow login even if only using Computer Config side

We are having some users with very slow login times, up to 20 minutes, but only for a handful of users. I've narrowed it down to a particular GPO that does nothing but Drive Mapping Preferences. I ...
2
votes
0answers
182 views

Chrome Not Applying GPO Policies

I'm having a little trouble getting Chrome installions on our workstation to update it's policies to reflect I've sent in GPO. I added the admx and adml to %systemroot%\policyDefinitions as our ...
2
votes
0answers
28 views

What does SBS 2011 do “under the hood” when you give a user admin access?

I have been using Windows Server for many years now and when I have someone who needs local admin access over their machine, I apply it through group policy in a similar way to this answer. One of my ...
2
votes
0answers
133 views

Is using the AD home directory attribute to map the home drive really no longer a best practice?

I have read some articles that claim that using the Active Directory user home directory attribute to automatically map the home drive is a legacy method, deprecated, or not recommended. The second ...
2
votes
0answers
39 views

EMET Configuration refresh

I deployed EMET on my domain and i'm configuring it with a GPO. I'd like to know if the system settings System DEP, System ASLR and System SEHOP are taken into account when i refresh the group ...
2
votes
0answers
64 views

Printer server hostname changed - deploy printers via GPO no longer works

We use the Deploy Printers feature of local group policy in Windows 8.1, so that our users can log into any machine and printers will already be configured. This was working flawlessly for all users ...
2
votes
0answers
109 views

Group policy deployed printer: One duplicates?

As a preface, no this doesn't have to do with Remote Desktop's Redirected printers at all. I've deployed an HP printer (called \Manager\Picasso) under User Configuration in a Group Policy object. ...
2
votes
0answers
32 views

Can I upgrade an program via group policy if it was initially installed manualy?

We have a program which was installed manually on workstations when they were initially setup. We now need to upgrade this software and I wish to do it via group policy. I have created an MST using ...
2
votes
0answers
62 views

Can't Access Computer Configuration > Preferences or user configuration > Preferences

After creating a new GPO in Windows Server 2008R2 Right click Edit on the newly created GPO Group policy Management Editor opens Clicking on Preferences shows this popup error After Clicking ok ...
2
votes
0answers
59 views

GPO: Applying a home page to Win7 and Vista Clients running IE9

I am trying to set the homepage on several Windows 7 and Vista machines via Group Policy Preferences. Both are running Internet Explorer 9. The "apply once and do not reapply" option is enabled, as i ...
2
votes
0answers
39 views

Deploying custom fxcop rules amongst developers

I am currently in the process of writing and deploying custom FxCop (Visual Studio Code Analysis) rules, allowing developers to check their code against a series of these custom designed rules. As a ...
2
votes
0answers
242 views

In the Local Security Policy, how do you avoid putting “IIS APPPOOL\” before “DefaultAppPool”?

Doesn't seem to be a whole lot on the Internet about this. I was tweaking the Local Security Policy of one of our test servers (Windows Server 2008 R2 Standard Service Pack 1), when I got this error. ...
2
votes
0answers
310 views

Group Policy Internet Explorer, Add-on list not working

We have group policy setup at our company something similar to the setup below Domain Policy OU Policy The domain policy is set to enabled for "Do not allow users to enable or disable add-ons" ...
2
votes
0answers
542 views

getting message open file security warning on remoteapp

I have an app published on Windows 2008R2 remoteapp. I am getting this message: This is how I have the setup of the drive: Local rdp machine is called rdpvm. //rdpvm/shared/company1 = i: ...
2
votes
0answers
353 views

Can I create a WMI filter that will evaluate to True for both Client computers and Terminal Servers?

I have a GPO that is currently being run only on client computers (XP, Vista, 7, etc.), by using a WMI filter with the following query: select * from Win32_OperatingSystem where ProductType='1' I ...
2
votes
0answers
823 views

Windows Firewall deployed by GPO detecting Public NL

Am struggling with Server 2008 R2 NLA and the Windows Firewall. Currently we are testing rolling out Windows Firewall via GP and have a test server that enables the firewall for Domain, Private and ...
2
votes
0answers
136 views

Strange Folder Redirection

I've recently inherited a client who has a folder redirection policy GPO and home paths specified through user attributes in AD. Now the strange thing is, I have literally no idea how it is working. ...
2
votes
0answers
2k views

Single Sign On 802.1x Wireless - saying “Connecting to <SSID>”, hangs for 10 seconds, fails with “Unable to connect to <SSID>, Logging on…”.

We are implementing WiFi on Windows 7 machines in our corporate environment. Machines should be able to log into the domain by WiFi as the Machine (Pre-Logon), and as the User (Post-Logon). We have ...
2
votes
0answers
203 views

Group policy issues

We are having an issue on one of our clients relatively new sbs installs. The domain consists of a single SBS 2011 server with 4 Windows 7 clients and 3 XP clients. Most of the time everything is ...
2
votes
0answers
351 views

Processing of group policy failed - Only on 32bit machines

When forcing a group policy update I get the following messgae, but only on 32bit windows machines. 64bit works fine. Running windows 7. The processing of Group Policy failed. Windows could not ...
2
votes
0answers
477 views

Logon script does not run for all users

We have a standalone common-use workstation running Windows XP Pro SP3 and have created a script using Javascript (scriptname.js) that is to be run for each user. The file was added as a user logon ...
2
votes
0answers
663 views

Windows XP not mapping drives after logging into a windows 7 PC

Bit of background. We map out network drives via GPO. This works fine for both XP and windows 7 clients. The GPO’s are served by a Win2008R2 DC. I have a user that has to works in 2 departments. The ...
2
votes
0answers
747 views

Is GPP Item Level Targeting any faster or slower than WMI filtering?

I need to filter a GPO so that it only applies if an application is installed. From what I can see, I should be able to do this either with WMI or with GPP item level targeting. Is there a performance ...
2
votes
0answers
834 views

Network Topology Discovery – Windows 7 Via GPO

I wish to enable Network Discovery on my network (For various reasons) I need to apply this via GPO due to the nature of our setup. This is on a Windows 2008 R2 Domain with Windows 7/XP Clients. I ...
2
votes
0answers
222 views

Using GPO to install/update java on windows terminal servers

We've been using GPO to manage java + reader installs on user PCs for a while now... I'm wondering if there would be any issue using the same method on terminal servers. How do you handle switching ...
1
vote
0answers
2 views

Add a scheduled task to the GPO progrematically

The assumption is I'm on a DC with admin rights. I want to add an immediate task to the GPO to run a .exe on the workstations, but I want to do it without the GUI i.e. quietly. Is there a way to do ...
1
vote
0answers
60 views

How to use Local Group Policy on Windows 7 to allow or block URL’s for chrome and firefox?

I am a regular user not system admin. I need the help to use local group policy to allow to open one domain. For example, www.xxxx.com to open on the chrome or firefox (third-party browser), and make ...
1
vote
0answers
58 views

Windows 7 Pro 64-bit Standard User Default Profile: Local Group Policy or Sysprep?

I have a Windows 7 Pro 64-bit machine that will be hosting three Windows 7 Pro 64-bit VMware Player 7 virtual machines. I have the first VM completed and am about to create the first standard user on ...
1
vote
0answers
53 views

How to use Group Policy to control local administration access (LOCAL ONLY)

At the company I work for, we have about 75 computer users. We have a Microsoft Domain Controller in our server environment (MS Server 2012) with Active Directory. When users need to install ...
1
vote
0answers
71 views

Firewall rules to allow Hyper V Manager to connect to Hyper V Server 2012 R2?

I moved a Hyper V host into our Servers OU in Active Directory, which has some group policies linked. Now I am unable to connect to the Hyper V host with Hyper V manager. It was working fine before ...
1
vote
0answers
53 views

Getting Group Policy identifier in PowerShell

Some of our computers have a random "local group policy" being set that forces them to check a nonexistent intranet server for Windows Updates instead of using WU over the internet as they should. ...
1
vote
0answers
105 views

Various printer deployment issue with Server 2012 R2

I have just set up a new remote desktop infrastructure, with all servers being built on Server 2012 R2. I have 7 session hosts, and a central file/print server. On the print server, I have added ...
1
vote
0answers
75 views

Microsoft Server 2012r2 GPO templates

I have a question to ask regarding Windows Server 2012 R2, but before I ask let me give you some details about our environment. We have a single forest, with a single domain, and our functional ...
1
vote
0answers
51 views

Remote Desktop Server: Restrict drive redirection on per user basis?

For a Remote Desktop Server, drive redirection can be controlled via Group Policy. Unfortunately, this is a computer configuration, so it will either apply to all users or none. Is there a ...
1
vote
0answers
11 views

connections blocked to remote computer while no user logged on windows 7

A have a bunch of computers, all in the same OU, that are not contactable over the LAN (no pinging, no c$, no computer management, no SCCM connection) while the computer is not being used. The ...
1
vote
0answers
43 views

Windows Servers Deny Remote Creditials

Here's the layout: -Four domain controllers(2003 & 2008) -Windows Servers (2003 & 2008) -The PDC is Windows 2008 and there are some GPOs -All servers ping, no firewalls, no major or much ...
1
vote
0answers
54 views

RunOnce key can't be run at startup with restricted public account in Windows

Let me be brief. We have arround a 1000 public computers for users to use for the internet and office and so on. We image these using SCCM2012r2. Everything is fine until we added a software package ...
1
vote
0answers
83 views

Create shared folder on share automatically

I know there is a group policy where I can map a specific share. What if I want the group policy to create a folder on that share and map it during log on? I know there must be a way to do this in ...
1
vote
0answers
121 views

How to allow permission via GPO to remove bluetooth devices in Windows 7

We have 'Standard' users who test Bluetooth devices. This involves pairing them to a Windows 7 machine. Unfortunately, each device adds a unique entry to the "Devices and Printers" which 'Standard' ...
1
vote
0answers
223 views

%systemroot%\system32\GroupPolicy gone

DC Win2012, Client XP I have a couple of problems getting GPOs applied - well, they show up as getting applied (gpresult) but the software i tried to deploy didnt got deployed. I enabled ...
1
vote
0answers
48 views

HowTo enforce SHA512 in Outlook 2010 (and above) for S/Mime?

When you setup S/Mime in Outlook 2010 you can also choose the hash algorithm as seen here: Can we control that via GPO? I would like to disable all the other options if possible.
1
vote
0answers
186 views

Configure Calendar time scale to 15 minutes in Outlook (via Group Policy)

Outlook by default allows users to book meetings in 30 minute increments; this can be manually changed to allow 15 minute increments (Change the calendar time scale). I need to deploy/control this ...
1
vote
0answers
44 views

gpo ie user force update

We use two 2008 Domain-Controllers and one 2012 DC In a gpo we set the proxy for IE-11 per user. eg: X use proxy, server: proxyserver, port: 3131 This gpo is not mandatory, so users could change ...