Tag Info

Hot answers tagged

3

It is possible that there are secondary GPOs in more specific deployments (for example, applying only to a specific group of computers) which have more strict password reset requirements. I would recommend running gpresult from a shell run with administrative privileges on the affected machine(s), to ascertain which GPOs were processed. From a command ...


2

This is almost certainly a file permission problem on the wallpaper image file, or the wallpaper image file not being on the workstations or accessible to them via a network share.


2

You can deploy batch script over GPO to DHCP servers that will change DNS settings in DHCP scope using netsh utility. A command to set DNS servers in scope with netsh is: netsh dhcp server DHCP_server_IP_or_Hostname scope Scope_Network set optionvalue 006 IPADDRESS DNS1_IP DNS2_IP If 10.10.10.1 is primary DNS, and 10.10.10.2 is secondary DNS, and ...


2

You can use a script that Microsoft developed over on Technet: Check a setting in all GPO's (Security, ADMX, and more) You can export an existing GPO like the Default Domain Policy as XML (right click the GPO in GPMC and "Save Report" as XML) to look in and see the various "choices" based on how the script functions. For example, here's some output from a ...


2

Since you want to do it by GPO, the answer is the same for Server 2012 as for older Windows Server OSes. The Group Policy settings you're interested in are located at: Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Session Time Limits User ...


2

You need to configure your User Configuration settings in the GPO linked to the TS OU and use Group Policy loopback processing so that those user settings apply to the users when they log onto the TS servers. http://blogs.technet.com/b/askds/archive/2013/02/08/circle-back-to-loopback.aspx


2

I realize this is an older question, and that you resolved the issue a different way, however, the reason it wasn't working originally was due to "Audit: Force audit policy subcategory settings" being enabled. As explained in this article on Technet: The lack of Object Access auditing is expected: as soon as you start applying Advanced Audit ...


2

First off, I hope your terminal server is a virtual machine. Before you continue, make sure you have a clean snapshot of the VM. One of your students will take advantage of the ability to run arbitrary applications and screw up your server. You should revert to the snapshot periodically, and always revert immediately before applying patches or installing or ...


2

It's possible your computer's network connection isn't initialized before Group Policy attempts to run your script. The MSKB article Windows 7 Clients intermittently fail to apply group policy at startup explains behavior where Startup Scripts fail because the network link isn't ready when GP executes the script. Two solutions are offered: Via Group ...


1

It's a client-side setting, but as with most things, there's a group of GPOs you can configure to control client offline files as well. To simply check its status on a client, probably the easiest way is to open up the Sync Center in the Control Panel and go to the 'Manage offline files` link (which you can also get to by typing "offline files") into the ...


1

I'm pretty sure Microsoft removed the functionality to allow you to store credentials in GPOs because it's insecure... Yup: http://support.microsoft.com/kb/2962486 So you need to write a script, or connect as the logged in user I believe.


1

The advantages are: Organizing your Active Directory objects. Delegating administration of Active Directory


1

I know this question is old, but there doesn't seem to be a resolution so on the HBSS possibility. You can navigate to the HBSS HIPS GUI: Click Start, Run, type explorer and click OK. Navigate to: C:\Program Files\McAfee\Host Intrusion Prevention. Double-click McAfeeFire.exe. You can click on the tabs on the top of the GUI to see what the policies are ...


1

What you're seeing is perfectly normal. The Local Group Policy editor is for viewing and configuring the Local group policy object and its settings, not for viewing domain based Group Policy settings. Domain based Group Policies override Local Group Policy settings, they do not overwrite Local Group Policy settings. RSOP is the tool for viewing settings ...


1

In your RSOP screnclip, take a look at the GPO State column. Not configured means it's not configured. You have to set the state to either enable or disable for the GPO to actually do anything. If you enable the Remote Assistance GPO, Remote Assistance will be enabled on computers this GPO applies to, and users will be allowed to create Remote Assistance ...


1

Well if you must do it this way you can change the SRV record priority for the failing Domain Controller. This article explains how to do it: https://technet.microsoft.com/en-us/library/cc781155(v=ws.10).aspx


1

Only one GPO can set password policies for the domain and it must be linked to the domain. If you have multiple GPO's that set the password policy linked to the domain then the GPO with the highest precedence (lowest link order) is the winning GPO and is the one that is setting the password policy for the domain. Password policies in GPO's linked to OU's ...



Only top voted, non community-wiki answers of a minimum length are eligible