Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [group-policy]

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.

0
votes
0answers
4 views

Microsoft Server 2008: query multiple security-related (policy) settings

I want to query several security-related settings on multiple Microsoft Windows 2008 R2 installations. Those settings comprise (but are not limited to): Password-related settings: max. password age ...
2
votes
3answers
31 views

Turning off the “Remove access to use all Windows Update features” group policy

Windows 10 introduced a new computer group policy, "Remove access to use all Windows Update features", which blocks access to the Windows Update control panel. You can turn this on in group policy ...
0
votes
0answers
4 views

RDSH processing of RemoteApp and Desktop Connections template

I am using loopback processing to launch 2012 app connections. My GPOs work as intended on any windows 8+ workstations, but they do not work when applied to a 2016 RDSH. This behavior would make sense ...
0
votes
0answers
30 views

Windows server 2012 R2 Redeploying application group policy

I have an Active Directory environment with almost 750 client, i have deployed application xyz-v1.msi through group policy now we have xyz-v2.msi which requires previous version to be uninstalled ...
0
votes
0answers
15 views

Access Runtime 2010 Disappeared from Domain Computers - Deleted GPO

My organization runs a domain with an Access front end based upon and SQL Express Database. 99% of our users are using the 2010 Runtime version of access. The installed DB literally disappeared from ...
0
votes
1answer
23 views

Verifying that LLMNR is disabled - GPO

I am attempting to disable LLMNR on all of our endpoints. I found an article describing the process here. Essentially the process goes like - Create GPO -> Computer Configuration -> Administrative ...
-1
votes
0answers
27 views

Windows Server in the DMZ Zone with users own passwords and special [closed]

Currently we have MS-Windows servers in standalone setup in DMZ. I would like to know of having to implement a separate AD in DMZ. Can we make it so that the users access and group policies applied ...
0
votes
0answers
21 views

File Permission GPO

I am trying to use a GPO to apply permissions for a group of users to a specific folder located on their c: drive. I am running into some issues where the GPO is only partially applying the ...
1
vote
1answer
34 views

Active Directory & Group Policy - Standard User Permissions

As I'm experimenting with a vanilla Active Directory domain, I notice that a standard user can go into Active Directory Users and Computers (dsa.msc) and Group Policy Management Console (gpmc.msc) and ...
1
vote
1answer
39 views

How to use member of trusted domain in GPO?

I have two test domains and one trusts another. On trusting domain GPO I need to add a group from trusted domain to remote desktop users group which will apply to all computer objects in trusting ...
3
votes
1answer
39 views

How to hide specific drives on a server?

I would like to know what's the recommended solution for the following problem. We do not want users to see (or at least not to modify) the drives D and E of a server they have remote access to. ...
0
votes
0answers
27 views

Windows 10 GPO causing restrictions within Windows 10 UI

I'm working on an issue here at our location that is causing some massive headaches. I've opened a few tickets with MS primer level support with no results. They are still "Investigating" the issue. ...
0
votes
0answers
47 views

Windows 10 GPO causing restrictions within Windows 10 UI

I'm working on an issue here at our location that is causing some massive headaches. I've opened a few tickets with MS primer level support with no results. They are still "Investigating" the issue. ...
2
votes
0answers
20 views

How to prevent the installation of third-party AVs for a domain using GPOs?

Our organization uses a particular AV that we manage, but we currently have no way to enforce users not to install any other AVs, which has started to become an issue. I know windows can typically ...
1
vote
0answers
16 views

GPO Preferences Not Applied to IE-11

Windows Server 2016 RDS setup. Using GPO to set preferences for IE-11 for the RDS users. (User Settings > Preferences > Control Panel Settings > Internet Settings). The settings I want to apply is ...
1
vote
1answer
110 views

GPUpdate Will Not Apply Services Changes

I am getting the following error on my computers when trying to apply group policy settings. This is specific to changes to Services on the local computer: User Policy update has completed ...
1
vote
0answers
30 views

How to restrict or hide users to specific drives only (not typical drives combinations)

How can I restrict users (not admins) to access to specific drives? I know there is gp that allows to restrict typical combinations of drives, like C, A, B, D etc... But I would like to allow all ...
1
vote
3answers
64 views

Cannot disable group policy inheritance from domain

At work, my computer (Windows 10) is part of a local domain. I added a few local group policies, and after noticing they were not being applied, I ran gpresult /H gp_report.html and it returned: ...
1
vote
1answer
45 views

Give user's directory access to another user

Users are sharing their password. As you know, this is bad! The big reason why they do that is to allow a colleague to access theirs files when they are away. Yes, they can plan this in advance, but ...
3
votes
1answer
42 views

Smart Card removal behavior and card renewal

My customer is planning to introduce new Policy regarding smart card removal in their Windows Environment, most probably session break since it's a Citrix environment. Microsoft documentation on the ...
2
votes
0answers
57 views

Disable access to Windows Update for users on 2016 RDS Server

I've recently replaced Windows Server 2008 R2 RDS Servers with 2016 Servers and ran into this issue. It seems that the GPO option to "Allow Non Administrators To Receive Update Notifications" (...
2
votes
1answer
203 views

How to make the Default Domain Policy apply to the domain?

We have a domain, and it has a default domain policy that has existed for 16 years (since 2003): I just realized today that this policy, with all its policies, are not being applied to any users or ...
-1
votes
1answer
68 views

Prevent software installation for Domain Users

Please, I was wondering how may can I block normal Domain Users from installing software but I can install using Administrators accounts (it's just like needs elevation before install) using GPO's? I ...
1
vote
1answer
67 views

Apply Computer Policy changes at login / Apply Computer Policy for specific users [closed]

I have an request to apply computer policy changes to a specific set of users. For example, I want a specific windows feature (Allow Cortana) available to members of a security group (CortanaUsers). ...
-1
votes
1answer
74 views

Deny Local Logon Windows server 2012 R2

I'm trying to apply a New GPO that deny Local Logon in my client pc's but its not working even if i applied steps : Computer Configuration > Policies > Security Settings > Local Policies > User Rights ...
2
votes
1answer
74 views

Folder Redirection: What does the “Also Apply Redirection Policy…” setting do?

When implementing Folder Redirection via Group Policy, there is a checkbox on the Settings tab that says "Also apply redirection policy to Windows 2000, Windows 2000 Server, Windows XP, and Windows ...
1
vote
0answers
45 views

Windows Firewall protected network connections blocked by local group policy

I have a couple of Windows 2008R2 servers running as stand-alones (that is, not connected to a Domain). In Windows Firewall with Advanced Security, I'm trying to unprotect a local network connection ...
0
votes
0answers
41 views

0x80070005 Access is denied - Group Policy - Printers

We've been running into this error across our network: The user 'NameOfPrinter' preference item in the 'NameOfGroupPolicy' Group Policy Object did not apply because it failed with error code '...
0
votes
0answers
13 views

Grou Policy change to “Hide the notification area” not working

Needed to make changes to Group Policy settings for the first time in five years (Windows 7 Pro 32-bit). I have two test PCs. Used MMC to pull the LocalGroupPolicy for the particular user. ...
0
votes
0answers
37 views

Update Group Policy via Batch Script or Powershell Windows 7

I administer about 300 remote computers (all across the country) that are on Windows 7 Pro (32-bit) and I need to change the Group Policy. This is the first time in 5 years I've had to change the GP. ...
0
votes
1answer
33 views

Deny RDP access to specific server from a particular user via GPO

I have a security issue. How can I deny RDP access to a specific server(critical server) for a particular Active Directory user using a Group Policy Object (GPO) ?
1
vote
2answers
68 views

GPO Deploy Printer Based on User Attribute

I am trying to deploy printers based on the Office attribute in AD. If a user is assigned to the Richmond office they should get those printers. Please note this is NOT location based printing. I just ...
3
votes
1answer
43 views

Can I grant “Virtual Disk Service” to a non-local administrator?

Trying to find an answer to this. A vendor I work with, Red Gate, wrote in their documentation: SQL Clone Agent requirements An agent should be installed on the same machine as any SQL Server ...
2
votes
1answer
70 views

Enabled GPO for registry entries not showing up on server

Preface: I am a Linux admin. I don't really "get" (or like) Windows. I am in the process of remediating Windows 2016 servers with the CIS recommendations. It is mostly just creating a GPO set ...
1
vote
1answer
12 views

ADMX not loaded from Central Store

I've create a central policy store as shown below: Afterwards I copied all files into the new folder: However, when I want to create a new gpo, the templates are loaded not from the central store:
0
votes
1answer
49 views

Installing app through GPO

I will need your help... The last day i set up an app to be installed using GPO under computer configuration. The most of our computers are using WIFI to log in to our domain. Some of them, they ...
2
votes
0answers
31 views

Self-extracting executable not extracting other archives

** Problem We are attempting to run a self-extracting executable (SFX) to install an Oracle product, Oracle Enterprise Manager 13.2. The installation starts, works for a short while, and then quits, ...
3
votes
1answer
93 views

Active Directory shortcut failing to create

Background: I am making a GPO with desktop shortcuts for users. The GPO has a few links to websites like our help desk that it places. It also has a shortcut to a network location for a file share. ...
0
votes
1answer
40 views

Is it possible for a group policy to interfere with a Sql Server Express installation?

We have a software package that our customers install on their user's laptops. Part of the installer runs MS's Sql Server Express 2014. We're passing the command-line options to to the installer ...
1
vote
1answer
176 views

GPO - Local Administrator Group Management (Restricted Group vs Local Users and Groups)

I'm looking for current best practices and I can't seem to find a definitive answer. I'm looking to manage the membership of the local administrator group on Windows (Client) machines. In the past, ...
4
votes
1answer
70 views

Last Logon error when Logging in using GPO setting

Trying to get my domain to show the last successful login by users on their Windows 7 machines. I have enabled the following Group Policy Setting: Computer Configuration| Policies | Administrative ...
3
votes
2answers
42 views

Windows: How to tell where policies listed in auditpol are coming from?

I'll preface this with: I am a Linux admin. Windows to me is like me driving a UK car -- mostly operates the same but the steering wheel, buttons, and levers are in the wrong place and labels are ...
0
votes
1answer
33 views

How to deploy an exe with a .bat that does some checks.

I have to run a .exe that uninstall a specific software on all our clients. But i have to uninstall only a specific release of it. I will create a .bat that does this check for me. Can i deploy it ...
1
vote
0answers
19 views

How can I add multiple Search Engines to choose from in Chrome Enterprise?

In Chrome Enterprise you can specify the default search engine via GPO, and with the DefaultSearchProviderEnabled option you can prevent the users from overriding or changing that default search ...
3
votes
1answer
49 views

Importing GPO backup into a different domain fails with “No backups found!” error

I'm trying to make a backup of a GPO in one domain (just contains a couple registry key entries) and import it into another domain. The second domain is completely separate, it's at a different site ...
2
votes
1answer
49 views

Does group policy loopback apply to that policy, or all policies?

Does group policy loopback processing apply to that policy that it is defined in, or all policies applied to that container? For example, assume there are 2 group policy objects: one has loopback ...
0
votes
1answer
79 views

Deploy MSI via GPO to specific users “Admin right issue”

I'm trying to deploy an MSI via GPO to specific users (120 users) from different departments and sites, the problem is that they don't have admin rights so the application cannot be installed due to ...
-1
votes
2answers
34 views

Possible for domain policy to prevent local Administrator from modifying file permissions?

I have been handed a new Server 2012 that is a member of the company domain. I am in the local server Administrators group. I do not have a domain account. When I opened up the permissions properties ...
1
vote
2answers
26 views

GPO block executables from running from redirected folders

I am currently using GPO (Computer>Windows>Security>Software>Additional) to lock down several file types from running in places like C:\ and %appdata% and %userprofile%. My issue is that certain ...
1
vote
1answer
107 views

Active Directory Site Level Group Policy Not Applied

In Active Directory we have multiple sites defined in AD Sites and Services and I can see the site is correctly assigned by verifying the value of HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\...