Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Join us in building a kind, collaborative learning community via our updated Code of Conduct.

Questions tagged [group-policy]

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

0
votes
0answers
10 views

Excluding user from GPO - Permission object missing

I'm trying to exclude a user from a GPO. I've done this in the past using the steps explained in the link below: https://blogs.technet.microsoft.com/canitpro/2016/10/12/step-by-step-excluding-users-...
0
votes
1answer
13 views

Group Policy Error 1202 in win server 2008/2012

We have 2 Domain controller (windows fully updated) dc01 - Windows 2008 R2 dc02 - Windows 2012 R2 > added recently in Event Viewer on both DC's, I am receiving lots of 1202 errors Event 2012 SECLI ...
1
vote
0answers
13 views

Some Windows services not visible remotely

I'm struggling to figure out what is going on, but it has a pretty widespread effect on a system I'm working with. I originally asked this on stack overflow and It was recommended I check here. OP ...
0
votes
0answers
13 views

Updated certificate in GPO not being deployed to Trusted Root Certification Authorities

I created a GPO to deploy a new trusted root CA certificate to end-user machines. This worked correctly and the certificate was deployed. Unfortunately I'd made a mistake with the certificate and I ...
1
vote
2answers
54 views

How to prohibit users from installing specific software in windows system in an AD

I've different OUs for different Departments. For Example Mechanical OU and Programmers OU. I don't want to block the users entirely from installing and Uninstalling software. For example users of ...
0
votes
0answers
12 views

wildcard in IE Trusted Sites not wild?

I use a GPO to add the following to Internet Explorer's Trusted Sites list for local intranet sites: *.mydomain.local http://*.mydomain.local https://*.mydomain.local All the end user computers are ...
-2
votes
0answers
18 views

How to extract MSI files from EXE for GPO deployment (Adobe Reader and Java JDK)? [closed]

I can find Adobe Reader and Java JDK MSI's anywhere for download and need to deploy them via GPO. Before I used MSI wrapper but extracted files don't seem to work properly any more? What is the best ...
1
vote
1answer
15 views

smb.conf csc policy parameters

I am administering a standalone user-authenticated Samba 4.3.11 server on Ubuntu 16.04, which is accessed by Windows 7 Pro and 10 Pro clients configured to cache offline files. The question is, what ...
0
votes
0answers
14 views

Windows server 2012 R2 - user's program preference not stored

I've been migrating my servers from WS2008 R2 to WS2012. Eveything seems ok right now but I still have an issue. When a user is connected to his profile, the program preferences are not stored. For ...
4
votes
1answer
385 views

Apply New Password Policy via GPO Gradually

I want to make changes to the password policy in our domain (for example, include password complexity) but I want to apply it gradually, to some OU's or users group first. As far as I know the ...
0
votes
0answers
20 views

AD CS Auto Enrollment Multiple Templates

I've recently setup AD Certificate Services and it seems to be working okay although I can't say I'm familiar with every aspect of this. I can setup auto-enrollment and this works but I think I ...
0
votes
0answers
21 views

Server 2008R2, startup/shutdown powershell scripts in gpedit.msc not working and not appearing in registry. Script works manually. No domain involved

It's a fully updated 2008 R2 box running WMF 5.1. I've got a powershell script that, under normal circumstances, e-mails me on startup or shutdown. It's working fine on a different 2008 R2 box. On ...
0
votes
0answers
23 views

Some users' workstations are going to Screen Saver sooner than specified in Group Policy

My supervisor came to me this morning asking me to look into an issue some new users are having with their machines closing out to their screen saver within 1-5 minutes, when our Group Policy has our ...
-1
votes
0answers
18 views

Software restriction policy suddenly blocks C:\Windows\

We are using Software Restriction Policy on a Citrix Windows Terminal Server Farm (running on XenApp 6.5 / Windows Server 2008R2). To prevent running users any unwanted software we use "Software ...
0
votes
0answers
49 views

GPO: allow hardware configuration (VLAN)

I have created an AD group and added it to the group of network operators so that the members of the group have permission to change IP addresses, etc. However, for some cases, there is a situation ...
0
votes
1answer
52 views

Can't change password policy on Azure VM (joined to Domain Services Domain)

We have an Azure VM (Windows Server 2012 R2) using AAD DS as the domain. I have both an O365 account in the domain (used to originally join the VM to the domain) and a local admin account on the ...
0
votes
0answers
18 views

GPO block USB write access to all users with exceptions

I would Like to block write access to removable drives for all users but allow some users to have access to write on the USB. This is what I have done. Created new security Group "Enable_USB_Access" ...
1
vote
2answers
67 views

Can I “allow logon locally” for ALL local accounts and some domain accounts?

I have used a "Allow logon locally" GPO on a few machines to restrict who can use them. It is annoying that I have to create/link a separate GPO for each set of machines/users (Where is item-level ...
0
votes
0answers
12 views

Restrict Bluetooth Profiles in Windows 10

I am in an environment that has, historically, disabled Bluetooth on all laptops. I would like to enable it for certain functionality...but without enabling it for all purposes. Is it possible to ...
0
votes
0answers
12 views

Use logon group policy to add a new registry key failed

I setup a group policy logon script to add a new registry key. It adds a new registry key [HKEY_CURRENT_USER\Software\ODBC\ODBC.INI\GDSRI123] "AutoTranslate"="No" The way I do this is to create two ...
0
votes
0answers
7 views

Windows Server GPO Sharepoint

Is there a way to have our organisations office365 sharepoint files automatically synced with a client PC? If not, is there any other solution for accessing a file repository for a group/team of ...
0
votes
0answers
22 views

GPO Results Wizard / WMI / Win32 errors

When I try to run the Group Policy Results Wizard on a Windows 7 workstation on my domain I receive the following error: Then when I try to restart the WMI service I get this: If I click Properties ...
0
votes
0answers
31 views

Upgrade software through group policy for software not installed originally by GP

We are upgrading to v12 of NitroPDF. We are licensed for about half of our total computers. Some of our computers have v10 and some have v11. Nitro provides a tool to create the MST file with all of ...
0
votes
1answer
70 views

GPO is applied but software is not installed

I'm trying to install Zimbra Connector for Outlook via Windows Group Policy on target computers. The problem is the policy is applied to the computers but software is not installed. I've checked the ...
4
votes
0answers
85 views

GPO StartLayout Never Applies

I have not had any success deploying a StartLayout via GPO. Regardless of all I have tried, the pinned Start Menu icons remain the same. After much research to avoid many common issues, I have ...
0
votes
2answers
11 views

Set permissions correctly for Windows Group Policy copy of files?

I set AD group policy to copy some .LNK shortcut files from a network share to users' individual desktops, with a user-level group policy setting. Errors 0x80070005 were produced by each copy, as ...
0
votes
2answers
53 views

Applying Group Policy By Subnet

Is there a way to apply a group policy by subnet? I have three sites/offices - Washington, Texas, and California. When we (IT) puts a new desktop on the network and add it to the domain, the ...
0
votes
0answers
12 views

Group Policy Management Editor Filter Options for Server 2016

In Group Policy Management Editor > Filter Options > Enable Requirements Filters... I cannot see Windows 2016, should this show or is this included in one of the other options, if so which one should ...
1
vote
0answers
62 views

How to create a single Authentication point with multiple LDAP servers?

I'm currently into a process of creating a central service system from where users can connect to VMs. My goal with this is to have a single point of authentication for all possible users. The issue ...
0
votes
0answers
11 views

'Load a specified theme' replace theme on existing users on computer

We created a Group Policy using Load a specified theme that points to the default Windows theme C:\Windows\Resources\Themes\aero.theme that we want on each computer however as we know the intended ...
0
votes
0answers
22 views

'All Removable Storage classes: Deny all access' and handheld USB barcode scanners

I have a question regarding the All Removable Storage classes: Deny all access Group Policy setting. We have been requested to enable it for data protection reasons however as a manufacturing ...
2
votes
1answer
128 views

GPO - Power Button Action - Turn off the display

I want to set the Power button action to Turn off the display on multiple computers using a Group Policy. The value is available locally via Control Panel, Power Options but not via the Group Policy ...
1
vote
0answers
57 views

Set Windows 10 Default Start Layout

How can we set the default start layout and task bar icons for each user in Windows 10, yet still let users modify them later? I know you can use an XML file to set these, but a standard XML file ...
2
votes
1answer
48 views

Group Policy setting to activate Windows Firewall when not on Business Domain

I've been trying to figure out GPO settings for a couple of days and cannot figure out how to apply a filter of some sort to Windows Firewall to turn it ON when any employee is not on the domain (10.0....
0
votes
0answers
1k views

Group Policy will not apply unless under Default Domain Policy

I have Windows Server 2012 R2. Group Policy will not apply unless the policy falls under the Default Domain Policy. I have 2 policies I want to deploy 1 for desktops and the other laptops. The ...
1
vote
1answer
62 views

Folder redirection GP and CREATOR OWNER inheritance/scope

We use the folder redirection group policy to place users' My Documents folders on a network share. We have configured the share with Microsoft's recommended NTFS permissions, as defined here: https:/...
0
votes
0answers
33 views

Is there a way to set Easy Print on Terminal server for only one user?

At first Easy Print was disabled, I set Easy Print enabled for whole server, then user was able to print from remote desktop with his local printer, but then other users couldn't print anymore with ...
1
vote
1answer
50 views

Importing GPO WMI filter .mof file

I've got a couple of exported GPO WMI filters off an AD domain as .MOF files. I see that I can import them using the Group Policy Management console but would rather like to re-import them via a ...
0
votes
0answers
45 views

Where is the policy to control DHCP access?

The client created a group policy to meet Payment Card Industry (PCI). Now, they have a problem to access the DHCP server as shown the screenshot. I have reviewed all policies' settings, but can't ...
2
votes
1answer
108 views

Windows Firewall: Apply local firewall rules

I have an environment where we have a GPO which we have set on all profiles to have the setting: Apply local firewall rules: No I've confirmed that the GP is applied successfully by using gpresult/...
1
vote
1answer
129 views

Windows 10 Hello on domain-joined computer - Credentials could not be verified

I am on a Lenovo X1 6th Gen laptop with Windows 10 Pro Build 1803 and connecting to my work domain. I have all GPO's correctly configured for Windows Hello. I am able to login to my domain account ...
0
votes
1answer
25 views

enable offline files for all the PC which are part of Security Group

I'm setting up a Home Folder to be available offline per device The Drive which this folder will be connect to will be H: This is What I have done. Create a Group Called Offline Devices, Add All ...
0
votes
0answers
26 views

AWS - custom deny message

Sometime AWS policies evaluate to an authorization deny message, however, our employees don't always understand the reason why. In that cases, displaying a custom message would help a lot. For ...
1
vote
2answers
189 views

Windows 10 Folder Redirection

I have created a group policy to set up Folder Redirection. The client computers are all Windows 10 Enterprise. I followed these instructions. https://docs.microsoft.com/en-us/windows-server/storage/...
0
votes
0answers
46 views

Blacklist an IP subnet in Chrome

How would I go about blacklisting an IP address subnet in Chrome? Is it even possible? I'm able to blacklist wildcard site names (foo.bar, internal.foo.bar, etc.), but wildcard IP addresses don't ...
0
votes
1answer
102 views

WMI Query for certain computer names but not others

I'm trying to write a GPO WMI query that will include computers with certain names and yet exclude some machines that fall within those parameters. This is what I have (and doesn't work): SELECT * ...
3
votes
3answers
468 views

How are GP Objects and AD Objects linked between ADUC and GPMC?

[Disclaimer: This question was based on flawed impressions. Take with a very small grain of salt, or no salt at all.] As a Linux admin who is unwillingly being thrust back into Windows administration ...
0
votes
1answer
63 views

Trying to create script to port GPO

[SOLVED]: When creating GPO programmatically, the gPCMachineExtensionNames property in the LDAP entry for the policy isn't set. We put some code in the script to export the key to a txt file and then ...
0
votes
0answers
40 views

Group policy fails to save - “The parameter is incorrect”

Running SBS 2011 with a single DC and I am having issues modifying certain GPO settings. I was going to simply increase the maximum password age to 60 days, and after making the change to the GPO and ...
0
votes
1answer
52 views

How to install/update an application with gpo without restarting the terminal

I have an application that requires regular updates applied through GPO. This application does not require restarting the PC to install or update. How can I create a GPO to install this application ...