Tag Info

Hot answers tagged

4

Disable Internet Explorer Enhanced Security Configuration (ESC) in Server Manager.


3

RSOP support has been deprecated. According to http://deployhappiness.com/gpresult-or-rsop/ "Beginning with Windows Vista SP1, Microsoft made the GPResult command the primary tool for troubleshooting Group Policy on a client." Basically, to ensure that you are getting the full result of policies on the machine, you need to use GPResult instead of ...


3

This actually is fairly common in larger environments where there may be a separate domain or forest for administrative accounts. In that case, you definitely cannot add them to Domain Admins and you probably don't want everyone in Enterprise Admins. Paul Williams had a good article documenting the various objects and the permissions required. ...


2

I had this exact same problem. After I deleted a Group Policy printers kept coming back all over the place. The only solution for me was: Downloading PSTools Running CMD as administrator Run the command psexec -i -s c:\windows\regedit.exe (make sure you don't have regedit open already, otherwise it gives an error) Delete all keys under ...


2

To create a new Registry preference item Open the Group Policy Management Console . Right-click the Group Policy object (GPO) that should contain the new preference item, and then click Edit In the console tree under Computer Configuration or User Configuration , expand the Preferences folder, and then expand the Windows Settings folder Right-click the ...


2

Easy thing. Just say http://*.DOMAIN.COM 1 *.domain.com isnt enough


2

The generally accepted practices are: Use a login banner. This would have to be somewhat concise, but the user cannot login until they click "OK". The legal enforceability of this (or any popup) may vary by jurisdiction. Make them sign the Acceptable Use Policy before they're given their username/password. This is highly enforceable, since it's basically ...


2

This is not at all what Group Policy is designed to do. I think the closest thing to what you are asking for is Network Access Control / Network Admission Control / 802.1x. These solutions are vendor-specific. Microsoft has one, Cisco has one... other vendors do too. You can do neat things like put the user in a "quarantine network" unless that user has a ...


2

Your WMI query has invalid quote characters. Select AddressWidth from Win32_Processor where (AddressWidth=”64″) Should be: Select AddressWidth from Win32_Processor where (AddressWidth="64") Or: Select AddressWidth from Win32_Processor where (AddressWidth='64')


2

For Group Policy "Not Defined" is NOT the same thing as "NOT SET", FALSE or any other meaning. Not Defined means the group policy at the level you are analyzing makes no change to the Windows default. You may also need to looks at - is there a lower security scope (local on a non-domain member) that IS defined. What is the Windows Default action when ...


2

The msi source share/folder needs to be accessible when the GPO is applied to the client machine and it attempts to install the software. I would let your client machines do their installs before you reboot the server.


2

You can use the following procedure to reset the permissions on the sysvol share. This is for server 2008(R2) if you have a different OS, please add it to comments and I'll edit this if applicable 1.Open Notepad, and then enter the following information: [Unicode] Unicode=yes [Version] signature="$CHICAGO$" Revision=1 [Profile Description] ...


1

Follow the below steps Press Alt+X or Tools in internet explorer Press Security tab and Change the Security level for the zone(internet) as low Also do same for 'Trusted site' zone as low Press 'Sites' button to add the 'www.chartinsurance.com' to the zone Press Apply and OK Restart the browser. If the issue still persist then follow the below steps ...


1

This has been asked here for member servers being added only. If you want to make the 2008 box a DC you will need to use ADPREP link here. We have a 2003 domain functional level with 2008 members and DC's. All have GPO's applied created from 2008 and 2003 DC's, hope that helps.


1

For bulk edits to the UNC's of printer shares: In GPMC backup the GPO. In the backup directory there will be a file named "printers.xml". Use notepad to Search/Replace "\\serverX\printer1" with "\\serverY\printer1". Back in GPMC, restore that GPO. It will read the modified XML and your changes will be made. Printer connections based on login location: Do ...



Only top voted, non community-wiki answers of a minimum length are eligible