Tag Info

Hot answers tagged

5

What you're talking about is a feature called "fine-grained password policies", and requires a domain functional level of Server 2008 or higher. There's a nice, easy step-by-step instruction guide on enabling and using fine-grained password policies on the Technet blogs, if you'd like to take a look, but it's not all that complicated. The thing that trips ...


4

If you are running an Active Directory domain, the member computers will synchronize with the domain controllers. The domain controllers will synchronize with whichever Domain Controller holds the PDC emulator role. Thus there is no need to configure each machine. They are going to synchronize automatically using NTP.


3

There is not a default Group Policy to display the hostname on the desktop. An alternative is to use a utility, such as BgInfo, in either a startup/Run registry key/logon scrip/etc to add information to the desktop wallpaper.


3

No, not unless you re-build the MSI (with third-party software). What you can do is distribute the file with Group Policy Preferences, or even with a computer startup script. I strongly suggest GPP, as it's very easy to set up.


2

No, when support ends for a product from Microsoft, it simply means that if you tried to call to get something working (like a group policy setting) the answer is going to be "upgrade then call back if it's still not working".


2

GP Preference with item level targeting http://msdn.microsoft.com/en-us/library/cc753566.aspx


2

Mounting shared drives is a user-level issue, so your best chance is to write a user login script that checks the current hostname, computer account, or other identifying feature of the host to see whether to mount //server/user$ or https://server.example.com/user.


2

It is possible with Group Policy. Those folders are Known Folders and you can disable them through Group Policy. Have a read at these links: http://msdn.microsoft.com/en-us/library/windows/desktop/bb776911(v=vs.85).aspx http://technet.microsoft.com/en-us/library/dd744697(v=ws.10).aspx#WS_DisableKnownFolders ...


1

Try that location too: %APPDATA%\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar And try with the %AllUsersProfile% variable for the location you named: %AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk %AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\Administrative ...


1

the time hierarchy in a windows forest so that all members sync time from the domain controllers. You should not set the members to sync time on their own as it could affect their ability to log on to the domain.


1

Roaming Chrome: Get the Chrome ADMX files from Google. Then you can use the set user data directory. We have it set to ${roaming_app_data}\Google\Chrome\User Data and that gets their settings into the roaming profile. Edit: Can't add comments to reply, but we've been running this for years and never had anyone lose their data when chrome updated.


1

It is possible your domain function level needs to be raised to the 2008 level(Windows 7 and 2008 are the same windows version) for that functionality to work. I have personally seen settings not work until the domain functional level was raised. You can type rsop.msc on the actual machine to see what the resultant group policy is after all the policies are ...


1

The solution was actually pretty simple. I just couldn't find where my templates were installed, for some weird reason despite the instructions from Microsoft clearly stating where these need to be installed the .msi installs them under Program Files by default. By removing them and reinstalling the .msi package I saw that was the install location and ...


1

From my understanding, I guess this is something to do with the concept titled "Loopback processing Mode " in Windows. This is clearly elaborated here. You could find a similar version here also. Let me know whether this works for you or not. It would also help me to understand this concept much better.


1

Libraries are XML documents stored in %APPDATA%\Roaming\Microsoft\Windows\Libraries. You can create a policy to delete those files, or replace with libraries configured per your requirements.


1

Run Group Policy on a 2012 R2 that should fix the problem. Says "At least Windows Server 2008 R2 or Windows 7" So should work on any higher.


1

Windows is using SID for securable objects. Buit-in objects have predefinied SID = http://support.microsoft.com/kb/243330/en-us so you can use those while checking localized versions. You may also use the following approach> https://msdn.microsoft.com/cs-cz/library/system.security.principal.windowsbuiltinrole(v=vs.110).aspx Example in PS: $currentUser = ...


1

Officially, you cannot. (On Server 2012 R2 as of the time of this writing.) Unofficially? Maybe... The "MSS" Group Policy settings are not and never have been included with a default, out-of-the-box installation of Active Directory. They were an add-on developed by a consulting group out in the field, and the settings were deemed so useful that they were ...


1

The MSS Security Settings can be restored with the Microsoft Security Compliance Manager 3. This will actually install on Server 2012, but you need MS SQL Express and the Visual C++ 2010 runtime libs installed. It will also complain about program compatibility, and you may have to re-run the setup routine a second time. Once installed, you will find a ...


1

I can confirm enabling: 'Allow delegating saved credentials' and 'Allow delegating saved credentials with NTLM-only server authentication' within Group Policy Management Editor for the domain solved the issue.


1

Late reply, but your problem is probably the default of 2012 to delay logon scripts. Try a lower setting at: Computer Configuration\Policies\Administrative Templates\System\Group Policy\Configure Logon Script Delay


1

You must set the GPO to create the folder using the variable first, then you can map drive using the same variable. In the GP it's User Configuration - Preferences - Folders set it to "update" a folder using the same path as you tried to map (\server\folder\users\%username% works for me) for attributes I unchecked all boxes, then on the common tab I checked ...



Only top voted, non community-wiki answers of a minimum length are eligible