-3
votes
1answer
56 views

Windows Server 2012: use GPO in multiple OU's but only for specific servers

sample: OU: A User1 User2 GPO1 OU: B User 3 User 4 GPO1 OU: C Server1 Server2 Server3 Now i want to restrict GPO1 to Server1 and Server2 -> how can i do this in a easy/smart way? thx
1
vote
0answers
26 views

Is there a group policy or permission to create local shares?

I have some custom windows services which need the ability to create and remove local shares. In trying to lock down security, I also don't want to run the services as administrators. Is there a ...
2
votes
3answers
179 views

Windows AD, how to thoroughly invalidate existed simple passwords after enforcing strong password domain policy?

I followed this Microsoft article to enforce strong domain user passwords. Before I took this action, some domain users used simple passwords (like 123456). After I enforced strong password policy ...
0
votes
1answer
116 views

Group policy central store replication

Should i care about replication traffic, generated by group policy templates central store? Do templates, stored there, replicate with client machines?
0
votes
1answer
117 views

Windows Server 2012 File Security Warning

I've mapped my domain users to a remote share, and I'm trying to get rid of the security warning that appears whenever a file is run from the remote share. I've tried adding the FQDN to the intranet ...
1
vote
2answers
132 views

Debugging group policies

Begginer with windows servers here How can i find which group policy is applied when i click on something and get blocked? I currently can't check for windows updates unless i deactivate the GPOs ...
1
vote
1answer
1k views

How do I use Group Policy on a domain to delete Temporary Internet Files?

I have a domain controller running on Windows 2008 Server R2 and users login to application servers on which Windows 2003 Server SP2 is installed. I have applied a Group Policy to clean temporary ...
4
votes
1answer
4k views

How to apply an Group Policy only to Clients in a specific IP range? (using WMI Filter)

I need to apply a GPO only to some computers in a specific network range. I'm aware that there many other solutions for this issue. I could group them into an OU or use Sites. But the current ...
0
votes
2answers
102 views

Restricted Groups changes vanish when Group Policy no longer applies

I need to remove users from the Local Administrators group - it's built up a lot of them over time. So I have created a temporary Organizational Unity with a temporary GPO attached to it, and I've ...
2
votes
1answer
521 views

Restict access to control panel for one user

Is there a way to restrict control panel access to specific users on Windows 2008 R2? I have only found a way to prohibit access to all limited users in group policy, but not a way to do it for ...
2
votes
2answers
152 views

Local Admin and Policies

I have company/domain setup with about 150 + users. I don't want to grant the users a local admin account to prevent them from installing programs that may used to attack - harm the network or other ...
1
vote
1answer
162 views

Migrate Active Directory Groups to Local Windows Server Groups

This may seem like an odd scenario, but for reasons that I have no control over I need to migrate a large list of user groups from an Active Directory server, to the local group policy of a server ...
0
votes
2answers
2k views

Local Security Policy applied through Group Policy does it append or replace?

Do Local Security Policy settings, specifically those under User Rights Assignment, replace or append the existing settings when applied through a Group Policy Object? What about the settings applied ...
1
vote
2answers
65 views

Disallow running a program as the wrong user

Using Windows 2008 Server, how can I allow a particular application to be run by one specific user, and prevent it from being run by any other user? The scope is the local machine (the server) - I'm ...
2
votes
2answers
4k views

WMI Filter in GPO by UserName/UseGroup

We have a need to lock certain users down to a very restrictive desktop on our terminal servers as well as only serve them a single application which will auto launch. I have a GPO setup for each need ...
7
votes
4answers
11k views

How do I disable remote printers using group policy

When I configure a new remote desktop connection to connect to servers I often forget to uncheck the option inside of local devices and resources for remote printers. This creates exceptions in the ...