Group Policy is a feature of the Microsoft Windows NT family of operating systems that control the working environment of user accounts and computer accounts.

learn more… | top users | synonyms (2)

-4
votes
0answers
27 views

Windows 7 “blocked by group policy. contact system administrator”

I am running windows 7 and somehow my administrator rights are gone. I am also getting a message of "blocked by group policy. Contact system administrator" whenever trying to run windows update or any ...
0
votes
0answers
14 views

Active Directory domain and group policies

I'm trying to make a user group that basically have the same rights as a "User" (as oppsed to an "Administrator") with some specificities and some privileges borrowed from the "Administrators" group. ...
0
votes
2answers
11 views

How to add group to local administrators throughout the domain

We have a requirement for a tool to need local administrator access to all systems in the domain (security scanning tool). Here are the steps taken so far: Created an account Added the account to a ...
0
votes
0answers
2 views

Group policy to map drobo share with generic username and password

I have a Drobo 5N that I have set up for the raw video/data for our Marketing dept. I have it set up and everything works fine as far as functionality. The problem lies my group policy mapping. The ...
0
votes
0answers
6 views

Drive Maps via Group Policy - Overlapping Policies

((NOTE: We are on Windows 8.1 with a 2008R2 domain)) We have decided to move away from mapping drives via a log in script and attempting to do it via Group Policy. I have personally been doing this ...
0
votes
1answer
13 views

identifying new GPOs pushed down from Active Directory

How do you identify the recent and Group Policy Objects that have been pushed down to a client machine? I am trying to identify if any new IE settings were pushed down recently.
0
votes
0answers
16 views

Password policy restrictions Windows server 2012 - How to override / bypass

OK, this is probably a duplicate, but I'm stumped. I have to install a utility a client demands we have to transfer data (Signiant). The installer demands that there be an account with identical ...
-1
votes
0answers
11 views

Kiosk mode for domain users

I'm just wondering if it is possible to activate kiosk mode for domain users ? If it is not what it the best way to allow domain users work with only one application ? Can group policy helps me in ...
0
votes
1answer
14 views

Show hidden icons in icon tray through group policy

Had previously hidden the icon tray through group policy and would now like to add the volume control/sound icon back to the tray. I have disabled the "hide the notification area" and forced the ...
0
votes
1answer
27 views

Group Policy Management - Mass registry change

I have a number of group policy objects that I need to change all registry keys in the preferences:\windows settings: registry\hkey_local_machine\software\Microsoft\windows NT\current ...
-1
votes
1answer
23 views

Seamlessly Refresh Group Policy

I have created an application that manipulates local Group Policy. The policies that I change require the user to log out and back in again. gpupdate.exe /force will not work because these policies ...
0
votes
0answers
25 views

Bitlocker to-go group-policy conflict

I want to activate bitlocker for my SD-card but when i try, following error message appears: "The group policy settings for bitlocker startup options are in conflict and can therfore not be applied. ...
0
votes
0answers
12 views

AD-DS: IE policy to open links either in new window or new tab

Is it possible to apply a AD-DS policy to force the opening of clicked links either in a new window or in a new tab instead of the current tab in the current window? I know the user could simply ...
0
votes
1answer
58 views

Locking and Terminating User Sessions via Group Policy settings

To conform with some new security requirements, my company is implementing Group Policy solutions to existing security vulnerabilities. My current assignment is to find and implement Group Policy ...
0
votes
0answers
21 views

Active Directory control screen saver based on user's email address

I want a particular screensaver for users on my AD, with primary email address as @abc.com and a different screen saver for users with email address as @xyz.com? How can I achieve this easily? We ...
0
votes
0answers
30 views

Users own mapped network drives disappear when I set a GPP mapped drive

All the clients use Windows 7 SP1 x64 Enterprise. The domain controllers are Windows Server 2008 R2. I have configured the GPP to map "\server\data" to first available drive letter starting with I:. ...
0
votes
0answers
60 views

Set chrome's “Ask where to save each file before downloading” setting via group policy

I am deploying chrome throughout our domain via group policy. I want to require that all file downloads ask where to save the file. There is a setting in chrome to "Ask where to save each file ...
0
votes
0answers
9 views

Automate removal of Audit Policy settings

I have a large number of files in the System32 directory that have audit policy settings that were configured directly as well as other audit policy settings that were inherited. I need to remove all ...
3
votes
0answers
114 views

How to make computer (or user) trust signed software

I have an application, which I sign and timestamp using a code-signing certificate issued by thawte, with intermediate authority Thawte code signing CA - G2. The signature is OK (as it shows in file ...
0
votes
1answer
23 views

Computers at office acting as one [on hold]

There are 4 computers in the office and 8 people working different shifts. I want all of us to be able to login into personal account from any computer at office and see personal email, document ...
0
votes
0answers
18 views

Pushing down a file to each Window user's home directory

have a question on how to push down a file into each window user's home directory. I am not a Windows expert. I believe this can be done using the GPO. Can you provide some examples on how to do this? ...
1
vote
2answers
36 views

Edit already existing Scheduled Task through GPO

I have been searching for a while but not getting much out of my trusty friend Google at the moment, so wondering if someone else out there might be able to share some wisdom. By default, Windows has ...
0
votes
1answer
43 views

gpedit Remote Desktop Session Host security option missing

i am trying to configure a secure remote connection to a pc though a guide, and when i tried to find the Administrative Templates > Windows Components > Remote Desktop Services > Remote ...
0
votes
0answers
33 views

User can still run programs that are disallowed by group policy (on one computer)

On one computer, a user can run programs that have been disallowed by group policy. I have check rsop and it shows that setting as enabled and those programs are to be blocked. The user has the same ...
1
vote
1answer
43 views

How to return a GPO to Not Configured?

Recently a new piece of software started being included in our corporate Windows 7 image that, during silent install during the deployment process with Windows Deployment Workbench, sets the Windows ...
0
votes
2answers
76 views

Connect to VPN before Windows 7 starts

I am building a laptop with Windows 7 SP1 x64 which will be used by a remote user. The laptop needs to be locked down so they can only do their work and nothing else. It will have a VPN connection ...
0
votes
2answers
108 views

Active Directory and Mac OS 10.5 - how can I get the GPO's network drive on the Mac, and get the home directory of the user to map correctly?

I have a PowerMac G5 computer that I have joined to the Windows domain network successfully. I am able to login successfully with domain credentials. However, it does not include any of the network ...
0
votes
1answer
38 views

Windows 8, 8.1, 2012 R2: Search does not work correctly after joining local AD domain

Scenario: I do a fresh install of e.g. Windows 8.1 on a workstation. Then I create a temporary local user on this system -> searching in the start menu for e.g. "programs and features" (German: ...
3
votes
1answer
53 views

Difference between Local Policy and Registry Key

I would like to understand the difference between this registry key, MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\MaximumPasswordAge=4,30 and the local computer policy settings via ...
0
votes
1answer
44 views

Batch script to only run command for 1 machine

I have a Windows GPO that runs a batch file startup script to disable NetBIOS. It normally looks like this: wmic nicconfig where (TcpipNetbiosOptions!=null and TcpipNetbiosOptions!=2) call ...
0
votes
0answers
21 views

Cannot add a local user to GPO

I'm trying to update the members of the Administrators (built-in) group under User Configuration > Preferences > Control Panel Settings > Local Users and Groups I'm able to successfully add domain ...
0
votes
1answer
97 views

Create shortcut on Desktop via Group Policy, but replace present shortcut

We are running 2008R2 on our PDC. We had a group policy to add the Help Desk Portal shortcut to everyone's desktop via the User config. Do to a split in coverage, we now need 2 different versions. ...
0
votes
0answers
81 views

Force update to Windows 8.1 via Group Policy or similar

I have around 30 computers running Windows 8, some have been updated to 8.1 and others not depending on whether the user has decided to accept the annoying reminder or not. Is it possible to force ...
1
vote
1answer
124 views

Disable “Reply to All” button in Outlook 2013 via Group Policy without disabling the shortcut keys

At my organization, we've used Group Policy to disable the Reply to All button in Outlook 2007 and Outlook 2010. When you use the setting in the ADM files for the respective versions of Office to ...
0
votes
0answers
50 views

How to prevent everyone from adding local admins using GPO

I want to prevent everyone, including local administrators, from adding users to the Administrators group. How can I do this using GPO?
0
votes
0answers
87 views

Windows Login Script ignore UAC

I have a GPO that will launch a Startup Script for a .exe(Install Shield) silent unattended setup. However the user is currently being prompted to allow program due to UAC. I want a true unattended ...
1
vote
0answers
47 views

Applying a local group policy to another user with different username and computer name

A while ago, I setup a dedicated Windows 7 Pro workstation with local group policy applied to a specific guest account. After completion, I made a backup of the applied local group policy setting at ...
0
votes
2answers
61 views

Is it possible to automatically install software when a user logs in through Group Policy?

I am trying to distribute software through group policy, I am able to get this working so that the users can go into Add/Remove Programs and select Install from network and then install the software. ...
1
vote
2answers
301 views

Exclude site from Compability View policy

I have a client who enforces the policy in IE that all local intranet sites be loaded in the Compatibility View. Unfortunately our webapp doesn't support this and gives alot of issues in the comp. ...
0
votes
0answers
36 views

RDP connection to admin account activates group policy

I have a stand alone win XP sp 3 machine with two users. Admin and user. The user has group policy activated and limited access but the admin has full access. For some reason connecting via remote ...
0
votes
0answers
174 views

How to add a startup/shutdown script to the GPO from the command line

I need to add startup and shutdown scripts from a CLI through a Powershell/Python/CMD script. Ideally, I would like to have the same functionality as gpedit.msc, but it is important that the tasks of ...
0
votes
2answers
146 views

How to disable shutdown option at the login screen? [duplicate]

I was able to disable the shutdown option in the start screen using Group Policy but how do I disable the shutdown button at the login screen? I'm using Windows 8.1 Update 1.
0
votes
0answers
266 views

GPO to configure “Ignore other applications that use Dynamic Data Exchange (DDE)”

Using excel 2013 (office 2013 32-bit per MS recommendation) on Win7Pro 64bit in a 2008R2 64bit AD domain. When trying to open an excel 2013 document getting the errorbox "There was a problem sending ...
0
votes
1answer
205 views

“location is not accessible” “access is denied” on CD-ROM, no GPO

I am a domain admin for my work network, and I have a client (mine), that is not able to access it's CD-ROM (note that USB storage is accessible). I have attempted the following: 1) Verified with ...
0
votes
1answer
87 views

How to overcome Local Group Policy Editor's 1023 character limit?

I want to reorder the SSL Cipher Suite Order applied as part of KB2919355, prioritizing the forward secrecy suites above all else. Trying to do this with gpedit at Computer Configuration > ...
0
votes
1answer
74 views

Cache Group Policies for AD Group

I administrate number of Windows 7 machines frozen using Faronics Deep Freeze. Because these machines are kept frozen they do not cache group policies. So every time a user logs in after a reboot ...
0
votes
3answers
85 views

How do I deny local logon but allow it for UAC elevation on Windows 7?

I want to send laptops out in the field, but I do not want them knowing the admin password. So, I will make a local account with admin privelages, but I will allow them to use it only with permission ...
0
votes
1answer
52 views

Starting the Citrix Desktop Service once a specific user logs in

I am working on a package to be released into an enterprise environment which needs to have the Citrix Desktop Service in a suspended state post deployment from CM. In suspending the service post ...
1
vote
1answer
892 views

Is it possible to deploy Internet Explorer 11 (IE11) via WSUS 3.0 SP2?

Internet Explorer 11 is not listed in WSUS, nor can I find the installer on http://catalog.update.microsoft.com/v7/site/Search.aspx?q=Internet+Explorer+11. There's plenty of updates, but not the ...
0
votes
1answer
42 views

Applocker with local accounts

I'm trying to configure Applocker on Windows Server 2008 R2. The users for which I'm applying the policy are local user. I've started the AppId Service and set the enforcing mode for the AppLocker to ...