2
votes
0answers
22 views

Server 2008 R2, restart script not running in scheduled tasks to shut down company computers

I am trying to restart my company's computers with a script (shutdown /r /f /t 00) and set it to fire off at 7pm daily by scheduled task. I have placed the script file in the sysvol\scripts folder but ...
0
votes
1answer
36 views

Group Policy for Time Sync = ARP Flood?

I have a Windows Server 2008 R2 domain controller and a bunch of workstations of various versions of Windows - XP SP3, Vista, 7, 8.1. Time sync wasn't working correctly on a few PCs so I followed the ...
4
votes
1answer
19 views

Changing password expiration policy at next password change

We have a password policy with a maximum password age of 180 days. For various reasons we need to change it to 90 days, with a minimum impact for the users. Our users are normally warned about the ...
4
votes
0answers
89 views

Applying group policy loopback to any user on specific computers

In a server 2008 R2 and Windows 7 environment, I have a GPO that specifies screen saver settings in the user settings policy for the entire domain. However, for specific computers, this is not ideal. ...
2
votes
1answer
35 views

How do I correctly install windows 8 group policy on a 2008 server?

I'm currently working on a customer server that is running Windows Server 2008 R2. They are in the process of upgrading their machines to Windows 8. The problem they have is they don't want all the ...
3
votes
2answers
47 views

Group Policy installation failed error %%1274

OK, I have a really tough one I've already spent all morning on. PC is a Win7 64 with SP1 and all MS Patches Usual error everyone is familiar with: The assignment of application Adobe Reader X MUI ...
0
votes
1answer
92 views

The sysvol permissions for one or more GPOs on this domain controller are not in sync with the permissions for the GPOs on the baseline domain

I have recently installed a second domain controller and all replication seems to be working fine except for group policy - In windows 2012r2, through the new Group Policy Management, when I click on ...
2
votes
1answer
34 views

Domain Account Does Not Receive Proper Se Privledges from Group Policies

I am attempting to install software that requires SeBackupPrivilege, SeDebugPrivilege, and SeSecurityPrivilegebut I cannot seem to get my Domain Account to retrieve these specific privileges. I ...
2
votes
1answer
58 views

Transition from GPO to GPP

I have a Windows network with a 2003 server as the PDC, and a 2008R2 server as a DC. We have used GPO sparsely when the majority of our workstations were WinXP, but now we have Windows 7 clients and ...
0
votes
1answer
134 views

How can I get SeSecurityPrivilege enabled?

I'm trying to install a hotfix for SQL Server 2008 and failing on the Rule Check with "Setup account privileges" failed. I am running SQL Server 2008 Standard on Windows Server 2008 R2. Searching on ...
1
vote
0answers
47 views

Why is GPOTool not finding all my GPOs?

I have 91 group policy objects linked to my domain. When I run GPOTool it only finds and reports on 47. Why would the results be missing the rest? I am running Windows 2008 R2 on all 6 domain ...
3
votes
2answers
177 views

How can I create a windows shutdown script from powershell/command-line?

I've read the TechNet pages that describe using computer/user startup/shutdown scripts, and that's great, but I'd like to create those scripts via the command-line (and not have to click around in ...
2
votes
2answers
180 views

Removing address bar or Hiding its content from Windows Explorer - Windows Server 2008 R2

I'm currently trying to find a GPO or a registry edit that could either remove the address bar from Windows Explorer or prevent the bar from displaying the full UNC path. The current environment has ...
0
votes
2answers
81 views

Restricting User Rights Assigning in Default Domain Controller Policy

I am currently reviewing my work's default domain controller policy GPO against the MS Security Compliance Manager, and one of the things I have found is that there are many things that have user ...
2
votes
1answer
254 views

Deleting Local Profiles when using Roaming Profiles at Log off

I'm currently building an environment that will host about 5,000 users over 20 AppServer. I have finalized my GPOs but I'm experiencing an issue with the user's local profile when roaming profiles is ...
2
votes
0answers
38 views

In the Local Security Policy, how do you avoid putting “IIS APPPOOL\” before “DefaultAppPool”?

Doesn't seem to be a whole lot on the Internet about this. I was tweaking the Local Security Policy of one of our test servers (Windows Server 2008 R2 Standard Service Pack 1), when I got this error. ...
2
votes
1answer
98 views

Access an AD attribute in a first-time logon scenario?

I have been tasked with improving our current image deployment. Right now we do a fair amount of manual setup after imaging to reduce the work for users who get a newly imaged machine. I would like to ...
5
votes
2answers
104 views

Issues With Printer GPO

I have a Windows Server 2008 R2 print server. The client machines are Windows 7 Professional. I am having issues with user accounts not getting the printer added when they login. Things that I have ...
-1
votes
2answers
122 views

How does one backup / restore Group Policies on Windows Server 2008 R2? [duplicate]

We're inheriting a Windows Server 2008 R2 server on a network full of Windows 7 machines. There are already Group Polices in place, and they work. How can we back them up and restore them in case ...
6
votes
2answers
598 views

Windows 2008 R2 gpupdate locks my user account

I built a Windows 2008 R2 server last year, and ever since my elevated account locks 10-12 times a day. After much research and testing I found that the server is locking my account at each failed ...
2
votes
1answer
42 views

Pre-Configured installation of applications on domain computers

I have an application I would like to be installed for all computes that are joined to the domain. The thing about that is I would like to have the application pre-configured for all users. I have ...
10
votes
2answers
264 views

Warn user if they try to logoff

I want a certain local user to not log off. ever. It's much like this silly question, however I don't necessarily care if the buttons are there, I want to pop up a messagebox that says "Please do not ...
0
votes
1answer
31 views

Group policy access with active directory

Under Active Directory (Win2008-R2), I want all "authenticated users" be able to access the "Add/Remove windows components" menu But where do I have to go in group policy to set this grant ? In ...
0
votes
1answer
55 views

Set Country / Region field Access via Active Directory Delegation

After creating a security group for special permissions (edit User Objects fields like Street, ZIP etc.) I have a problem of not being able to delegate permission for the field "Country/Region" on a ...
0
votes
0answers
704 views

GPO Run these programs at user logon not taking effect

When on our W2k8-R2 DC I create a new GPO and configure "Computer Configuration/Policies/Windows Settings/Administrative Templates/System/Logon/run these programs at user logon" to ...
1
vote
1answer
61 views

Blocking USB through GPO in 2008 R2 & excluding certain users

I am looking for blocking USB devices in our Win 2008R2 SP1 server. I am already aware about GPO policy "\User Configuration\Policies\Administrative Templates\System\Removable Storage Access" & ...
0
votes
2answers
3k views

Domain User Account Locks: Correct password used

I have a domain (DC is running Windows Server 2008 R2) and have the Account Lockout Policy enabled. When a user attempts to log into their PC (with the correct password) they receive the following ...
1
vote
0answers
934 views

“The processing of Group Policy failed” while doing gpupdate

I'm trying to install MSI package from a Windows Server 2008 as a GPO in a computer-wide scope. When I log in to a Windows 7 client workstation and run: gpupdate /force I get the following error ...
2
votes
1answer
263 views

Remove or reverse file redirection in group policy

I am looking for a way to essentially reverse file and folder redirection after it has been set up and configured using Group Policy. Right now I have a file server that I am hanging a file share off ...
1
vote
1answer
309 views

Disable Server Manager from startup for Remote Desktop users with GPO for no MMC

I have a GPO that restricts MMC creation. When users who this GPO applies to login they are greeted with "MMC could not create the snap-in." I understand there is normally a checkbox that prevents ...
1
vote
0answers
230 views

How can I run a scheduled task on a Windows 2008 R2 Domain Controller as a non-admin user?

I'm trying to run an exe as a scheduled task on a Windows 2008 R2 Domain Controller. The exe runs fine when I try and run it manually using an account which is a Domain Administrator, but I don't ...
7
votes
1answer
7k views

Internet Explorer 9 & 10 Group Policy Preferences missing

I have a single Domain Controller network (Windows Server 2008 R2, running on the 2003 Forest/domain level), with the clients currently migrating from WinXP Pro to Win7 Pro. I Need to control the ...
6
votes
1answer
82 views

can the require user's permission be set in a gpo?

We are using Windows 2008R2 Server for our Domain Controller and a Windows 2008 for our Remote Desktop users. We have to support them or get them out of something on a regular basis. We have quite a ...
2
votes
1answer
80 views

User Configuration GPO doesn't apply to local users

I've modified the Default Domain Policy GPO in a Server 2008 R2 installation and modified some User Configuration policies. On the client machines, I've run gpupdate /force and logged in as a domain ...
0
votes
1answer
446 views

group policy exception to disallowed

I'm trying to setup a group policy on a domain to block cryptolocker (among others). I'm mostly following the Cryptolocker Prevention Kit ...
2
votes
0answers
330 views

getting message open file security warning on remoteapp

I have an app published on Windows 2008R2 remoteapp. I am getting this message: This is how I have the setup of the drive: Local rdp machine is called rdpvm. //rdpvm/shared/company1 = i: ...
5
votes
2answers
207 views

Group policies not applying to specific server

I have one server - 2008 R2 Enterprise, running WSUS and our KMS server - which is failing to apply any group policies from the domain. I'm out of ideas of how to get this to process. Any ideas? My ...
0
votes
0answers
150 views

Windows Server 2008 Standard R2 GroupPolicy error

Windows Server 2008 Standard R2 GroupPolicy error I am receiving an error in System log Event ID with the description "Windows failed to apply the Group Policy Local Users and Groups settings. Group ...
1
vote
1answer
473 views

Trying to create a GPO shortcut to local app data directory

We have a lockdown browser application that was installed on all of our students' laptops, but it was installed to the local app data of the user that performed the install. Therefore, none of our ...
1
vote
1answer
725 views

Accessing the Computer Configuration node in Group Policy settings

I am trying to configure Terminal Services printing related group policy settings and the technet doc says I need to go here: Computer Configuration\Policies\Administrative Templates\Windows ...
4
votes
1answer
1k views

What is the relationship between User Rights Assignment Policies vs. Membership of Local Groups

I just spent the better part of this morning on a support call with a vendor where we eventually resolved our issue by manually adding the service account their application was using to the following ...
2
votes
1answer
1k views

How Can I Apply Local Group Policy to multiple computers

Exactly like the title said, How can I apply local group policy to multiple computers? Around 500 PCs (I think) I understand the domain group policy can push down the policy but for my scenario here, ...
-3
votes
1answer
897 views

Windows Server 2008 GPO Not Mapping Drives?

I have 2 servers. Server 1: Linux server running Samba, that has a share called "Common". Server 2: Windows Server 2008. I created a GPO that maps drive R: to \\LINUXSERVER\Common. I set it to ...
1
vote
2answers
83 views

Adding second Windows Server to domain

I have a Windows Server 2008 R2 Server (Server A) running as a domain controller with Active Directory, Group Policy, and DNS services. I set up a second Windows Server 2008 R2 server (Server B), ...
1
vote
1answer
675 views

Unable to create logon script - Access denied?

I'm currently trying to create a logon script that will map a few network drives for all users. I've created the script, but when I try placing the .bat file in the proper folder, I get an "Access ...
0
votes
3answers
10k views

How do I configure IE10 Group Policy Settings on Server 2008 R2?

Where do I find the proxy server setting while creating a group policy? I know that IE 10 removed the IE Maintenance Policy. I read that you need to go through the Preference route. However, even ...
2
votes
1answer
132 views

Windows AD: Is loopback processing absolutely necessary in order to apply a user policy to users logging into computers in the OU?

I've had our AD setup running on server 2008r2 and now 2012, and I swear, a user policy applied to an OU containing only computers actually does apply to users logging into those computers, without ...
1
vote
1answer
57 views

Entering the user's name in a URL for Chrome through Group Policy

I am managing a Windows Server 2008 R2 server, with several Windows 7 machines, and we have recently deployed Google Chrome using Group Policy. We also have a locally hosted intranet for storing ...
8
votes
1answer
155 views

What's the sense in having RemoteDesktopUsers without “log on through Remote Desktop Services” privilege? [closed]

Recently Microsoft changed the default policies in Windows Azure Guest OSs (Windows 2008, Windows 2008 R2 and Windows 2012). One of the changes is that now only members of Administrators group have ...
0
votes
1answer
102 views

Applying user group policies to a single machine

I'm trying to apply user policies to lock down the changing of the windows theme. However I only want this policy applied to one computer (it is a terminal server running Server 2012), let's call it ...