Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

learn more… | top users | synonyms (1)

5
votes
0answers
234 views

Group policy issues

We are having an issue on one of our clients relatively new sbs installs. The domain consists of a single SBS 2011 server with 4 Windows 7 clients and 3 XP clients. Most of the time everything is ...
4
votes
0answers
70 views

Windows Server Clear on Logout Policy

I was wondering is it possible to create a policy on Windows Server 2008 R2 or 2012 that will clear everything (all files from desktop, documents, etc) once the user has logged out of the system? It ...
4
votes
0answers
76 views

How do companies handle the need for different Java requirements on the same user?

In our company, we use GPOs to push software updates such as Java updates. We have about 150 users in different offices located in different countries, all using Windows 7. We have a few ...
4
votes
0answers
544 views

Proxy Server setting stuck on Server 2003 R2 for Windows Updates

Stay a while and listen. This is going to be a long one. We've been having a problem the last couple of months with Updates on very specific Microsoft Server 2003 R2 Machines. This problem has ...
3
votes
0answers
85 views

How to configure Windows to trust a network share using a GPO?

I keep getting the following warning whenever I try to open a share from my DFS. How can I configure Windows (10 in this case) to trust anything under the root of my DFS via GP? It seems odd that ...
3
votes
0answers
76 views

Cannot set DSCP on Windows 10 Pro via group policy

Setting 'policy based QoS' on Windows 10 does not apply the DSCP value to outgoing traffic. I want to be able to set the value of DSCP traffic for certain processes. Using gpedit.msc group policy ...
3
votes
0answers
87 views

Changed policy: locked out local and domain administrator account on Windows Server 2012

I'm kind of a rookie when it comes to servers and server hardening. I was following the CIS benchmark for Windows Server 2012 and changed the allow log on locally policy to include administrator, ...
3
votes
0answers
79 views

How can I programmatically unbind IPv6 from a network interface on a Windows 7 machine?

I need to unbind the IPv6 services from a number of client workstations running Windows 7. ("Untick" the selected box in the screenclip below.) For what it matters, they currently all have a ...
3
votes
0answers
73 views

Group Policy Application on Boot with MSTP & really really fast computers

The latest generation HP computers with solid state drives and Win 10 are booting so fast that Multiple Spanning Tree Protocol is not allowing network access in time for Group Policy to process on ...
3
votes
0answers
101 views

Do GPOs apply to interactive logon only?

I am trying to enable certificate autoenrollment and credential roaming through a GPO in an ADS domain (DCs are Windows Server 2008 R2). I can interactively log on as a newly created user (on a member ...
2
votes
0answers
61 views

Group Policy - Not automatically running on all machines

We are facing an issue on one of our domains where machines are not all running group policy refreshes at its default interval. I am not seeing the 1501 events logged in the system log, I occasionally ...
2
votes
0answers
51 views

Bitlocker says PIN is incorrect

I have new batch laptops to image, almost all of them are done but 2 of them (same models) have an issue I can't resolve. I enable bitlocker and make sure that its also recoverable by PIN. This works ...
2
votes
0answers
41 views

group policy being applied from offsite Domain Controller: why?

Site 2: I have a small branch with 1 DC and 4 clients. Site 1: Meanwhile my main branch has 2 DCs and lots of clients. I made some GP changes on DC-site2, and I was wondering why they weren't ...
2
votes
0answers
26 views

WMI Query - First and Fourth IP octet

Is anyone aware of any WMI queries that could be used within group policy which only lists all IP address, which end in .200 and I have multiple sites, multiple networks, I only need to list the ...
2
votes
0answers
35 views

How to find which templates a GPO are using?

With a Windows 2012 R2 AD domain, we have a Central Store for group policy templates. Over time, a number of unnecessary templates were added to this store (most of them are not used) and it has ...
2
votes
0answers
104 views

Windows 8.1 clients querying wrong ldap SRV record?

I just spotted than my PC, running Windows 8.1 Pro on a Windows 2012 R2 domain has been querying DNS for SRV records that doesn't exist. All of the dcdiag /dnsall tests pass, but I wonder if there's ...
2
votes
0answers
255 views

Windows Server 2012 R2 Personalization Pane not showing color picker

We are running a RemoteApp server on 2012 R2 and want to let our users select a border color and font size. Other than that, we don't want them messing around in the control panel. At first we set ...
2
votes
0answers
732 views

Various printer deployment issue with Server 2012 R2

I have just set up a new remote desktop infrastructure, with all servers being built on Server 2012 R2. I have 7 session hosts, and a central file/print server. On the print server, I have added ...
2
votes
0answers
455 views

Group Policy - Drive Mapping Preferences - slow login even if only using Computer Config side

We are having some users with very slow login times, up to 20 minutes, but only for a handful of users. I've narrowed it down to a particular GPO that does nothing but Drive Mapping Preferences. I ...
2
votes
0answers
1k views

Chrome Not Applying GPO Policies

I'm having a little trouble getting Chrome installions on our workstation to update it's policies to reflect I've sent in GPO. I added the admx and adml to %systemroot%\policyDefinitions as our ...
2
votes
0answers
517 views

Is using the AD home directory attribute to map the home drive really no longer a best practice?

I have read some articles that claim that using the Active Directory user home directory attribute to automatically map the home drive is a legacy method, deprecated, or not recommended. The second ...
2
votes
0answers
55 views

EMET Configuration refresh

I deployed EMET on my domain and i'm configuring it with a GPO. I'd like to know if the system settings System DEP, System ASLR and System SEHOP are taken into account when i refresh the group ...
2
votes
0answers
83 views

Printer server hostname changed - deploy printers via GPO no longer works

We use the Deploy Printers feature of local group policy in Windows 8.1, so that our users can log into any machine and printers will already be configured. This was working flawlessly for all users ...
2
votes
0answers
320 views

Group policy deployed printer: One duplicates?

As a preface, no this doesn't have to do with Remote Desktop's Redirected printers at all. I've deployed an HP printer (called \Manager\Picasso) under User Configuration in a Group Policy object. ...
2
votes
0answers
227 views

Configuring Service Login Credentials with Group Policy following MS14-025

With Microsoft security bulletin MS14-025, GPMC and related tools are now patched to no longer allow the use of configuration items within Group Policy Prefs that would embed obfuscated passwords. The ...
2
votes
0answers
66 views

GPO: Applying a home page to Win7 and Vista Clients running IE9

I am trying to set the homepage on several Windows 7 and Vista machines via Group Policy Preferences. Both are running Internet Explorer 9. The "apply once and do not reapply" option is enabled, as i ...
2
votes
0answers
41 views

Deploying custom fxcop rules amongst developers

I am currently in the process of writing and deploying custom FxCop (Visual Studio Code Analysis) rules, allowing developers to check their code against a series of these custom designed rules. As a ...
2
votes
0answers
403 views

In the Local Security Policy, how do you avoid putting “IIS APPPOOL\” before “DefaultAppPool”?

Doesn't seem to be a whole lot on the Internet about this. I was tweaking the Local Security Policy of one of our test servers (Windows Server 2008 R2 Standard Service Pack 1), when I got this error. ...
2
votes
0answers
522 views

Group Policy Internet Explorer, Add-on list not working

We have group policy setup at our company something similar to the setup below Domain Policy OU Policy The domain policy is set to enabled for "Do not allow users to enable or disable add-ons" ...
2
votes
0answers
768 views

getting message open file security warning on remoteapp

I have an app published on Windows 2008R2 remoteapp. I am getting this message: This is how I have the setup of the drive: Local rdp machine is called rdpvm. //rdpvm/shared/company1 = i: ...
2
votes
0answers
514 views

Can I create a WMI filter that will evaluate to True for both Client computers and Terminal Servers?

I have a GPO that is currently being run only on client computers (XP, Vista, 7, etc.), by using a WMI filter with the following query: select * from Win32_OperatingSystem where ProductType='1' I ...
2
votes
0answers
1k views

Windows Firewall deployed by GPO detecting Public NL

Am struggling with Server 2008 R2 NLA and the Windows Firewall. Currently we are testing rolling out Windows Firewall via GP and have a test server that enables the firewall for Domain, Private and ...
2
votes
0answers
173 views

Strange Folder Redirection

I've recently inherited a client who has a folder redirection policy GPO and home paths specified through user attributes in AD. Now the strange thing is, I have literally no idea how it is working. ...
2
votes
0answers
2k views

Single Sign On 802.1x Wireless - saying “Connecting to <SSID>”, hangs for 10 seconds, fails with “Unable to connect to <SSID>, Logging on…”.

We are implementing WiFi on Windows 7 machines in our corporate environment. Machines should be able to log into the domain by WiFi as the Machine (Pre-Logon), and as the User (Post-Logon). We have ...
2
votes
0answers
423 views

Processing of group policy failed - Only on 32bit machines

When forcing a group policy update I get the following messgae, but only on 32bit windows machines. 64bit works fine. Running windows 7. The processing of Group Policy failed. Windows could not ...
2
votes
0answers
537 views

Logon script does not run for all users

We have a standalone common-use workstation running Windows XP Pro SP3 and have created a script using Javascript (scriptname.js) that is to be run for each user. The file was added as a user logon ...
2
votes
0answers
804 views

Windows XP not mapping drives after logging into a windows 7 PC

Bit of background. We map out network drives via GPO. This works fine for both XP and windows 7 clients. The GPO’s are served by a Win2008R2 DC. I have a user that has to works in 2 departments. The ...
2
votes
0answers
946 views

Is GPP Item Level Targeting any faster or slower than WMI filtering?

I need to filter a GPO so that it only applies if an application is installed. From what I can see, I should be able to do this either with WMI or with GPP item level targeting. Is there a performance ...
2
votes
0answers
933 views

Network Topology Discovery – Windows 7 Via GPO

I wish to enable Network Discovery on my network (For various reasons) I need to apply this via GPO due to the nature of our setup. This is on a Windows 2008 R2 Domain with Windows 7/XP Clients. I ...
1
vote
0answers
36 views

How to disable “do not allow drive redirection” local policy not using GUI?

I need to do it preferably using powershell/batch but after searching there is only some instructions for creatig adm/admx files. Is there an easier way to do this? I've also found a registry key ...
1
vote
0answers
22 views

Win Server 2012 R2. Apply security GPO to local users on a specific machine

We have a "demo" machine which we use for providing remote access to demo software as a local user. Is there a way to hide and deny access to everything except the user folder using a GPO?
1
vote
0answers
71 views

Change or delete local windows firewall rule using group policy firewall rules

When I install a particular program on a computer it creates an overly lenient local firewall rule that allows inbound connections to port 1234 from any subnet. I want to create a more restrictive ...
1
vote
0answers
33 views

Bypassing group policy

I'm trying to prevent users from pressing CTRL + ALT + DEL while their accounts are logging in to our domain (ie. while the system is creating the user profile, applying group policies, etc.). Due to ...
1
vote
0answers
62 views

Windows Firewall Blocks GPMC

Found out that my Server 2008 R2 machine is not running firewall as it should. When I enable the firewall and try to open GPMC it states that it is unable to access the GPMC or the Primary Domain ...
1
vote
0answers
24 views

Server 2008 R2 & Auditing

Having an issue with auditing a network for logins. I am looking for Event 4740 but the logs are not showing them. Neither on the local machines either. I have verified that Account Management ...
1
vote
0answers
67 views

Windows Management Framework 4.0 via GPO

I'm planning to set up a PowerShell-Masterserver. In order to do that I want to make sure that every Computer and Server running Windows 7 or Windows Server 2008 R2 has PowerShell 4.0 installed. To ...
1
vote
0answers
125 views

Applying Group policy - “The Specified server Cannot perform the requested operation”

Setting up a new domain for a SME, Win server 2012R2. I've set the server up, configured AD DNS etc, Applied a couple of group policies to test that AD is working, and none of the test machines (Win 7 ...
1
vote
0answers
23 views

Allow log on locally custom message

I recently moved into a new position and we have a few computer labs that are currently restricting access by running a script on logon that checks the user's group membership and if not in the ...
1
vote
0answers
32 views

Group Policy: delegate definition of local group memberships

In a heavily branched organization with Active Directory, I am working with the head IT department and we are delegating control to parts of the branch OU to the respective branch admins. Our ...
1
vote
0answers
46 views

Windows Server 2008 R2 - allow more time to reset password

Good morning everyone! I apologize if this has been asked - I have tried searching every where I can think of, to include the search bar here on serverfault. I work as an IT technician at a high ...