Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

3
votes
0answers
49 views

Server 2008 R2 WMI problems

I get error "1065" from Group Policy when trying to run GPUpdate, and Group Policy is specifying that it cannot process the WMI query. I can successfully run some queries manually, but WMIDiag ...
3
votes
0answers
208 views

Proxy Server setting stuck on Server 2003 R2 for Windows Updates

Stay a while and listen. This is going to be a long one. We've been having a problem the last couple of months with Updates on very specific Microsoft Server 2003 R2 Machines. This problem has ...
2
votes
0answers
25 views

EMET Configuration refresh

I deployed EMET on my domain and i'm configuring it with a GPO. I'd like to know if the system settings System DEP, System ASLR and System SEHOP are taken into account when i refresh the group ...
2
votes
0answers
29 views

Printer server hostname changed - deploy printers via GPO no longer works

We use the Deploy Printers feature of local group policy in Windows 8.1, so that our users can log into any machine and printers will already be configured. This was working flawlessly for all users ...
2
votes
0answers
24 views

Can I upgrade an program via group policy if it was initially installed manualy?

We have a program which was installed manually on workstations when they were initially setup. We now need to upgrade this software and I wish to do it via group policy. I have created an MST using ...
2
votes
0answers
44 views

Can't Access Computer Configuration > Preferences or user configuration > Preferences

After creating a new GPO in Windows Server 2008R2 Right click Edit on the newly created GPO Group policy Management Editor opens Clicking on Preferences shows this popup error After Clicking ok ...
2
votes
0answers
43 views

GPO: Applying a home page to Win7 and Vista Clients running IE9

I am trying to set the homepage on several Windows 7 and Vista machines via Group Policy Preferences. Both are running Internet Explorer 9. The "apply once and do not reapply" option is enabled, as i ...
2
votes
0answers
27 views

Deploying custom fxcop rules amongst developers

I am currently in the process of writing and deploying custom FxCop (Visual Studio Code Analysis) rules, allowing developers to check their code against a series of these custom designed rules. As a ...
2
votes
0answers
109 views

In the Local Security Policy, how do you avoid putting “IIS APPPOOL\” before “DefaultAppPool”?

Doesn't seem to be a whole lot on the Internet about this. I was tweaking the Local Security Policy of one of our test servers (Windows Server 2008 R2 Standard Service Pack 1), when I got this error. ...
2
votes
0answers
370 views

getting message open file security warning on remoteapp

I have an app published on Windows 2008R2 remoteapp. I am getting this message: This is how I have the setup of the drive: Local rdp machine is called rdpvm. //rdpvm/shared/company1 = i: ...
2
votes
0answers
247 views

Can I create a WMI filter that will evaluate to True for both Client computers and Terminal Servers?

I have a GPO that is currently being run only on client computers (XP, Vista, 7, etc.), by using a WMI filter with the following query: select * from Win32_OperatingSystem where ProductType='1' I ...
2
votes
0answers
564 views

Windows Firewall deployed by GPO detecting Public NL

Am struggling with Server 2008 R2 NLA and the Windows Firewall. Currently we are testing rolling out Windows Firewall via GP and have a test server that enables the firewall for Domain, Private and ...
2
votes
0answers
114 views

Strange Folder Redirection

I've recently inherited a client who has a folder redirection policy GPO and home paths specified through user attributes in AD. Now the strange thing is, I have literally no idea how it is working. ...
2
votes
0answers
1k views

Single Sign On 802.1x Wireless - saying “Connecting to <SSID>”, hangs for 10 seconds, fails with “Unable to connect to <SSID>, Logging on…”.

We are implementing WiFi on Windows 7 machines in our corporate environment. Machines should be able to log into the domain by WiFi as the Machine (Pre-Logon), and as the User (Post-Logon). We have ...
2
votes
0answers
189 views

Group policy issues

We are having an issue on one of our clients relatively new sbs installs. The domain consists of a single SBS 2011 server with 4 Windows 7 clients and 3 XP clients. Most of the time everything is ...
2
votes
0answers
290 views

Processing of group policy failed - Only on 32bit machines

When forcing a group policy update I get the following messgae, but only on 32bit windows machines. 64bit works fine. Running windows 7. The processing of Group Policy failed. Windows could not ...
2
votes
0answers
420 views

Logon script does not run for all users

We have a standalone common-use workstation running Windows XP Pro SP3 and have created a script using Javascript (scriptname.js) that is to be run for each user. The file was added as a user logon ...
2
votes
0answers
554 views

Windows XP not mapping drives after logging into a windows 7 PC

Bit of background. We map out network drives via GPO. This works fine for both XP and windows 7 clients. The GPO’s are served by a Win2008R2 DC. I have a user that has to works in 2 departments. The ...
2
votes
0answers
1k views

Enabling SSL for Remote Desktop

Ok so I'm trying to remove a number of my systems from our Nessus scan from having this medium vulnerability. http://www.nessus.org/plugins/index.php?view=single&id=18405 I set the following GPO ...
2
votes
0answers
737 views

Network Topology Discovery – Windows 7 Via GPO

I wish to enable Network Discovery on my network (For various reasons) I need to apply this via GPO due to the nature of our setup. This is on a Windows 2008 R2 Domain with Windows 7/XP Clients. I ...
2
votes
0answers
216 views

Using GPO to install/update java on windows terminal servers

We've been using GPO to manage java + reader installs on user PCs for a while now... I'm wondering if there would be any issue using the same method on terminal servers. How do you handle switching ...
1
vote
0answers
25 views

Windows user privileges when running scheduled task

I posted a question a while ago about allowing a specific user to start/stop Windows services. Provide a user with service start/stop permissions I decided to revisit the issue. I have no idea what ...
1
vote
0answers
59 views

%systemroot%\system32\GroupPolicy gone

DC Win2012, Client XP I have a couple of problems getting GPOs applied - well, they show up as getting applied (gpresult) but the software i tried to deploy didnt got deployed. I enabled ...
1
vote
0answers
18 views

HowTo enforce SHA512 in Outlook 2010 (and above) for S/Mime?

When you setup S/Mime in Outlook 2010 you can also choose the hash algorithm as seen here: Can we control that via GPO? I would like to disable all the other options if possible.
1
vote
0answers
33 views

Group policy deployed printer: One duplicates?

As a preface, no this doesn't have to do with Remote Desktop's Redirected printers at all. I've deployed an HP printer (called \Manager\Picasso) under User Configuration in a Group Policy object. ...
1
vote
0answers
64 views

Configure Calendar time scale to 15 minutes in Outlook (via Group Policy)

Outlook by default allows users to book meetings in 30 minute increments; this can be manually changed to allow 15 minute increments (Change the calendar time scale). I need to deploy/control this ...
1
vote
0answers
29 views

gpo ie user force update

We use two 2008 Domain-Controllers and one 2012 DC In a gpo we set the proxy for IE-11 per user. eg: X use proxy, server: proxyserver, port: 3131 This gpo is not mandatory, so users could change ...
1
vote
0answers
41 views

WMI request (Wbemtest), access is denied to domain computer

let me explain our setup first! We have 2 site location with Cyberoam CR50ING Firewall, IPSec between the 2 Subnet. Cyberoam firewall has an AD authentication with their software linked to the ...
1
vote
0answers
98 views

Prevent user interactive logon to domain computers

I currently have a user DOMAINJOINER (located in the WIN7Support OU) which I use to deploy Windows 7 machines. This user can Create and Delete Computer Objects in the WIN7Computers OU, that's about it ...
1
vote
0answers
66 views

CIS benchmark: How to define the BUILTIN\Administrator account within GPOs?

I am responsible for configuring GPOs according to the latest CIS benchmark policy. However the test for "Impersonate a client after authentication" always fails, although everything seems to be ...
1
vote
0answers
109 views

Configuring Service Login Credentials with Group Policy following MS14-025

With Microsoft security bulletin MS14-025, GPMC and related tools are now patched to no longer allow the use of configuration items within Group Policy Prefs that would embed obfuscated passwords. The ...
1
vote
0answers
246 views

Why is GPOTool not finding all my GPOs?

I have 91 group policy objects linked to my domain. When I run GPOTool it only finds and reports on 47. Why would the results be missing the rest? I am running Windows 2008 R2 on all 6 domain ...
1
vote
0answers
20 views

No “Compatibility View” Options

I'm working on setting up a GPO to push out some compatibility view settings for IE. But in my Group Policy editor there are no "Compatibility View" settings. I'm looking in Administrative Templates > ...
1
vote
0answers
50 views

Group Policy Mapping Printer

There seems to be lots of different ways to map printers, all appear not to work (for me). Im running a Windows 2008 Environment with windows 7 clients, simple, hey? No.. I have a printer connected ...
1
vote
0answers
352 views

Windows Server 2012 R2 cannot rename Administrator account via GPO

On Windows Server 2012 R2 the Administrator account does not seem to be able to be renamed. Have created the normal Rename Administrator GPO: Comp config -> Policies -> Windows settings -> Security ...
1
vote
0answers
162 views

Group Policy Internet Explorer, Add-on list not working

We have group policy setup at our company something similar to the setup below Domain Policy OU Policy The domain policy is set to enabled for "Do not allow users to enable or disable add-ons" ...
1
vote
0answers
88 views

Server 2003R2 DC Windows 7 and disable auto updates

I run an environment with Server 2003 R2 DC's and mostly WIndows 7 clients with just a few XP clients. The problem I am having is that the Windows 7 PC's are installing updates on their own. We have ...
1
vote
0answers
141 views

GPP Delete policy not working on Windows Server 2008 R2 RDS when deleting shared printee

I have one AD Security group for each shared printer, I have one GPP that map the printer if the user is in the security group that belong to the printer. And one GPP to delete the printer if the user ...
1
vote
0answers
73 views

How to prevent Domain Users group from being added to local Users group

I do not want the Domain Users group to be automatically added to the local "Users" group when a computer joins the domain, but am struggling with finding how to prevent this. In the default domain ...
1
vote
0answers
2k views

“The processing of Group Policy failed” while doing gpupdate

I'm trying to install MSI package from a Windows Server 2008 as a GPO in a computer-wide scope. When I log in to a Windows 7 client workstation and run: gpupdate /force I get the following error ...
1
vote
0answers
49 views

GPO extension to MPG and MPEG files

I have a 2008 R2 server with GPO that generates pop-up menus on extensions of GPG , MPG and MPEG files. This GPO is active in encoding servers. options that appear on the gpg files , mpeg , mpg are " ...
1
vote
0answers
392 views

How can I run a scheduled task on a Windows 2008 R2 Domain Controller as a non-admin user?

I'm trying to run an exe as a scheduled task on a Windows 2008 R2 Domain Controller. The exe runs fine when I try and run it manually using an account which is a Domain Administrator, but I don't ...
1
vote
0answers
31 views

Is there a group policy or permission to create local shares?

I have some custom windows services which need the ability to create and remove local shares. In trying to lock down security, I also don't want to run the services as administrators. Is there a ...
1
vote
0answers
47 views

Preventing Python as a gateway to CMD for Standard Users

Someone has hacked our system - using Python as a gateway to open command prompt as an admin - and the hacker shuts down computers remotely using shutdown /i. How can we prevent this using Group ...
1
vote
0answers
1k views

Is MSIZAP still useful, or is it obsolete?

I update flash using MSI files installed by group policy. However, with every update, about a third of the workstations fail to update (Windows Vista and Windows 7 32/64-bit editions). In the event ...
1
vote
0answers
224 views

IE: Cannot disable Settings button under Browsing history via group policy

Windows XP Pro SP3, IE8 (8.0.6001.18702), within local gpedit.msc I did the below: User Config/Admin Temp/Windows Comp/IE enabled: disable changing temporary internet file settings User ...
1
vote
0answers
41 views

GPO Templates Resource?

I am in the process of designing the group policies for my organization, and I'm wondering if there is somewhere I can go to look at templates, to see how other people have set theirs up, and even ...
1
vote
0answers
217 views

Windows Server 2008 R2 Software Deployment on Active Directory - Schema Issue

We have two servers, one running Windows Server 2003 SP2 and one running Windows Server 2008 R2. Both servers have their own versions of Group Policy Management (1.0.2 on 2003 and 6.0.0.1 on 2008). ...
1
vote
0answers
145 views

Automatic binding of Windows 8 account with Live ID

Is it possible to do automatic binding of Windows 8 account with Live ID thru GPO, scripts, or some sort automated way that will basically do it for everyone in domain. There is an assumption that ...
1
vote
0answers
265 views

“hkcu\volatile environment” missing, hkcu\environment not read

This question is very similar to this one. Suddenly, my "HKCU\Volatile Environment" keys disappeared, and my system no longer reads HKCU\Environment unless I reset it explicitly using SETX (which I ...