Tag Info

Hot answers tagged

10

Nope. The "Hide extensions for known file types" is a preference that you can set via Group Policy. And if it's only a preference, then the user can undo it. Basically, as long as the user has write/modify access to the file, they can rename it to whatever they wish. It's not a Group Policy thing, but an NTFS thing. The only way to really prevent a user from ...


7

Are you sure it is not linked at site level? You should check this in the GPMC, under Sites (right click and choose "Show sites" and show all the sites).


3

Domain based Account Policies are applied from the Default Domain GPO. If you're configuring them in another GPO then that GPO must be linked at the Domain level and must have a higher precedence than the Default Domain policy. Because Account Policies are Computer Configuration settings they affect the local security account database on the machines that ...


3

As a Windows domain administrator it is up to you on how you choose to manage your environment. There are pros and cons to every choice. In a large environment manual tasks are frowned upon, as they will take up a lot of time. Group policy and automation will make your job much easier. If you prefer to install everything manually, go ahead and do that. ...


3

is my first time i try to help I had this problem also, and i solve it using dns defaul behavior Prioritizing local subnets https://technet.microsoft.com/en-us/library/cc787373(v=ws.10).aspx So in your case just need to create a A Record for your sites fs Servers with the name SRV01 And then just create one gpo to mount And add the default print with ...


2

That means the setting was Enabled at one time, then changed to Not Configured. You will need to change the setting to Disabled to revert back. You may also want to enable the setting: Administrative Templates > System > Group Policy Security Policy Processing: Process even if the group policy objects have not changed And do the same for ...


2

If the files/folders are sensitive then they should be restricted access at a filesystem level on the filserver where the files/folders/whatever is hosted, not by just controlling who has the shortcut and who has not. That being said - I'e never encountered where item level targeting have failed on group lookups or similar. I still wouldn't trust it to be ...


2

I'm not sure what you mean by applying the opposite policy, but it sounds like what you want to do is to apply a different set of User Configuration settings when this user logs onto a particular computer. If that's the case then you need to look into Group Policy loopback policy processing, which would allow you to do just that. ...


2

Check if you have custom password filter installed. Key: HKLM\System\CurrentControlSet\Control\LSA Value: Notification Packages Normally when a custom password filter is not installed, it will have: scecli rassfm Installing and Registering a Password Filter DLL https://msdn.microsoft.com/en-us/library/windows/desktop/ms721766%28v=vs.85%29.aspx


2

For troubleshooting this type of issue you should use the GPMC (Group Policy Management Console) tool which helps you locate where your Group Policies are linked and who has rights to read them.


2

If you want client-side granular control of the precise Internet Explorer version that a site is rendered in, upgrade to Internet Explorer 11 and configure the Enterprise Mode Site List. Generally speaking, it is more effective to control this from the web server (using web.config). If a web site was developed and tested against a specific version of ...


2

I think the issue is that the clients are creating the thumbs.db files, not the server. Make sure your GPO is applied to all client OUs.


1

You can't apply GPO to a non-domain computer, but you can use System Center Config Manager, Intune, or PowerShell Desired State Config to name a few first-party options.


1

By default, the data in the Outlook profile is excluded already. Roaming profiles excludes the appdata\local folder which is where most of the outlook data is stored. If there are other locations you want to exclude, you can exclude directories/folders from roaming profiles through your group policy. In your group policy object: Browse to: User/Admin ...


1

Yes, it is possible. You have two computers. We'll call them A and B. You also need two different Organization Units. We'll call them X and Y. Finally, you need two different polices. We'll call them J and K. To make this work, apply policy J to computers (not users) in OU X, and policy K to computers in OU Y. Put computer A in OU X and computer B in OU ...


1

Had the same problem, same cause (GPOs designed to block ransomware installations). I have my GPOs assigned to separate OUs so this was fairly easy to cirumvent on a temporary basis: Open Group Policy Management, Check which OUs your Ransomware blcoking GPO applies to Confirm the target machine is in one of these OUs Move the target machine to a an ...


1

This is usually due to a Group Policy or a Local Policy disabling Windows Installer. Look on your Domain Controller if you have a GPO disabling "Windows Installer": Computer Configuration > Administrative Templates > Windows Components > Windows Installer > "Turn off Windows Installer". Verify that it is set to "Not configured" or "Disabled". If if you ...


1

So I contacted Microsoft for this, they were very puzzled as well, we never figured out why the time zone change by it self or which process was causing this behavior, but they gave me a work around that fixed my problem, I'm going to post here for future referencing (copy/pasting from Microsoft communication with me) Regarding the current issue, if it is ...


1

In Outlook 2013 you will be much better off setting the OST to a minimal amount of time to cache, i.e. 1 month. This will result in a very light OST file and a full-featured client (Exchange Search kicks in more often due to the small amount of info cached). This is general advice, and certainly might not work in your situation for your org. Is there ...


1

In server 2012, IE management is done via IEAK (Internet Explorer Administration Kits) You need to download and install the kit onto every domain controller for each version of IE that you want to manage. The only exception to this is if you are running a GPCS (Group Policy Central Store) - in which case it only needs to be installed on one DC To find out ...



Only top voted, non community-wiki answers of a minimum length are eligible