Group Policy is a feature of the Microsoft Windows NT family of operating systems that control the working environment of user accounts and computer accounts.

learn more… | top users | synonyms (2)

2
votes
0answers
163 views

Active Directory - Make sure users who are never on premises receive AD policies on a regular basis [migrated]

I have a few users in the field 100% of the time. I would like to have them authenticate to AD so that policies like Password changes and even maybe group policies are applied regularly. I want to ...
-1
votes
0answers
20 views

how to copy local group policy to other PC's with registry export

I need to copy Group Policy settings to about 30 other PC's (all windows 7 but not identical in usernames etc.). I tried to copy the User and Machine folder in the %systemroot%\system32\GroupPolicy ...
1
vote
3answers
43 views

How to prevent GPO from mapping network drives on my PC?

I'm using a Windows 8.1 laptop I got from my workplace and it's a member of the workplace domain. The IT department at my workplace thinks it's a good idea to enforce mapped network drives for all ...
0
votes
1answer
15 views

How can I Compare Local Group Policies between Window Servers

I am working on installing a business application. I have it working on an "open" test server. I can't seem to get it working on a "hardened" production server. Without worrying about the details of ...
1
vote
0answers
15 views

Enabling/Disabling Group Policy On-Demand

I am currently working at a school that needs some Group Policy enforcements, which have been set up successfully. However, the teachers want to be able to enable/disable the "Run only specified ...
2
votes
0answers
39 views

Windows automatically installing updates and rebooting despite group policy

I have been trying to find any pertinent articles online regarding this problem, but haven't uncovered much that is helpful. For a couple months now I have been plagued with workstations and ...
1
vote
0answers
13 views

Restrict drive access on Windows Server 2003

I have a 2 TB Data drive. How can I deny access to it for specific users in my domain after 4 PM? Is there any group policy that can do this? Best Regards
0
votes
0answers
10 views

Active directory: what policy modify to prevent this?

I have allowed my user to shutdown and enable the shutdown button on menu as described here https://support.microsoft.com/en-us/kb/816569 I give of course gpupdate,and no errors. But my desktop is ...
0
votes
0answers
19 views

Cannot run an application as a non-admin

Ladies and Gents, Please Help >_< Scenario: Hospital setting, all PC on the same domain and have a mess of GPOs pushed to them... An application (Horizon Blood Bank) compatible only on XP needs ...
0
votes
1answer
25 views

Old group policy screen lock stuck

My old sixth form college enforced some of their own policies when you linked a personal device with their email accounts. This included (a) maximum 15 minute screensaver delay and (b) compulsory ...
0
votes
0answers
21 views

Block unwanted change in system time on windows

I don't want users to be able to change the system time. For this, I have set the Group Policy "Change the system time" to include only my Administrator account. I want to know the validity of this ...
-1
votes
0answers
21 views

CPU Node allocation

In windows server how can I force all applications used by a User to run on a specific CPU node? I know that I can set the affinity of each task so that it only uses specific cores and nodes, but I ...
0
votes
1answer
47 views

Member of Local Administrator group but can't run cmd as admin

I am part of a domain, my personal user account is not the domain admin. However, I am a member of the local Administrators group. Even so, I can't open CMD as admin! When I try, it asks for the ...
1
vote
2answers
84 views

Server2012r2: Trusted sites greyed out in IE11

I have a problem with trusted sites definition in Win Server2012r2. I am not able to manually add any site since the "add" button is greyed out. My primary objective was to add particular web pages ...
1
vote
1answer
39 views

How can I edit local Group Policy settings using command line?

I'm attempting to throw together a script for work that allows BitLocker without a compatible TPM. The setting is "Configuration \ Administrative Templates \ Windows Components \ Bit Locker Drive ...
0
votes
1answer
24 views

Error upon File->Open, every time, in TextPad

I have a Windows 7 Professional desktop that I have begun to use, logged in as a network user to a Samba4 AD domain. Whenever I go to open a file within TextPad (e.g. by choosing Open from the File ...
1
vote
0answers
17 views

How to disable content view in windows explorer

Im trying to find a way to disable content view in windows explorer on windows 7 clients. I found this: ...
0
votes
0answers
42 views

Forcing Windows Update settings through Group Policy on a Server 2003 domain

I have an existing Server 2003 domain with Windows 7 clients. I'm trying to force the Windows Update policy to download and install updates on all clients at a scheduled time. All existing client ...
2
votes
0answers
18 views

How come UAC logs are not being stored in Event Viewer?

In Event Viewer, under Applications and Services Logs, UAC logs are not being stored. How do I enable them? Could Domain/OU group policy have them disabled? If so where can I see that it is disabled ...
0
votes
1answer
20 views

Dir command not working on one UNC Share

We have a process that runs in SQL Server which executes a DIR command on the local network using a UNC path to check that the files generated by another system are all there, as part of an audit ...
0
votes
0answers
14 views

Export the local group policy editor settings

I opened mmc.exe and from File>Add/delete snap-ins I added Group policy object editor for a specific user. Now after changing the settings I want to be able to export the settings and in future I ...
0
votes
0answers
26 views

How to give permission to user groups rather than only a user?

I opened mmc.exe and from File>Add/delete snap-ins I added Group policy object editor for a specific user. From here I an give and deny access to many settings(around 100 in my case) on the ...
2
votes
3answers
86 views

What causes CTRL-ALT-DELETE to be enabled on a non-domain-joined system?

Recently, on my personal laptop running Windows 7, my login screen turned into a CTRL-ALT-DELETE secure login screen. I've looked around for reasons why this might be the case, and the only indication ...
0
votes
0answers
15 views

Userinit value is replaced by wrong string

I am dealing with a quite difficult issue. On 2 HP ProBooks there are 2 user accounts each. One admin and one standard. The admin user works fine, but the standard user isn't able to log in since it ...
0
votes
0answers
36 views

Allow standard Windows 7 users to install updates to 3rd party pre-installed software (no domain)

I have a group of Windows 7 users that are part of a Windows Workgroup (no A/D), with limited local rights (users). I have set the accounts to have the ability to run Windows updates, though, they do ...
-2
votes
1answer
21 views

How to prevent Windows from accessing a directory inside a share?

At work, domain group policy is set to display a background image located in a shared folder. The path is similar to: \\example\gpo\desktop.jpg The image is ugly and distracting. Unfortunately, ...
0
votes
1answer
24 views

Active Directory on Windows Server Standard Group Policy Custom Interface not working

I am trying to create a group policy to lock down specific computers to be used as a kiosk. I have created a user account in active directory to use on the kiosks and set up a group policy in the ...
2
votes
1answer
49 views

Block User account Control GPO on PC

I am a local administrator on my win 8 PC which is on a domain. In order for the Win 8 apps to work I need to have both UAC and the firewall enabled. They are being disabled by a domain GPO. Is it ...
3
votes
3answers
97 views

Iexplorer.exe as Custom User Interface - Restart if closed?

I'm currently configuring a Kiosk machine using "IExplore.exe -K" as a replacement shell, everything is working fine. Unfortunately you can still kill the IExplore.exe session by hitting Alt-F4. ...
0
votes
0answers
11 views

Applocker Exceptions issue with Photoshop Droplets

I have Applocker configured (GPO) to block .exe files from executing on %OSDRIVE%/* unless they live in %PROGRAMFILES%* and %WINDIR%*. This prevents users from running self-executing applications, ...
0
votes
2answers
48 views

Most files and all folders have read only permissions [duplicate]

I recently installed windows 7 64 bit on a SSD and now, it appears that all of my folders and most of my files are read only. I have tried to remove the read only aspect of them, or take ownership of ...
0
votes
2answers
64 views

Must I purchase Windows Server to set policies or enable domain login?

If I want to setup a few Windows 7 or 8 PCs to only permit logins using domain accounts, must I fork out the cash to purchase a Windows Server for this? Or a LDAP server such as the Apache DS or even ...
1
vote
0answers
42 views

Group Policy install software PER USER

Need to deploy an MSI file with Group Policy. No other software deployment options are available, so no SCCM, etc. Here is what I need: 1. Software must be deployed PER USER. 2. Software must ...
0
votes
0answers
54 views

Reflect HKLM/SOFTWARE/Policies registry changes to HKCU/Software/MS/Win/CV/GPOs

Ok so I have a Local Group Policy (under Computer Config, not User Config) to force install extensions in Chrome. This policy needs to run for every user of the computer. The value is going to change ...
0
votes
0answers
52 views

Deploying webcams with Lync via RDP

I am currently working on an IT project for my internship regarding the implementation of webcams and Lync via RDP on thin-clients. The goal is to let users, who are logged in on a thin-client via ...
0
votes
0answers
37 views

Dollar sign '$' in the output of whoami in Windows

It is a domain environment. There are several machines, connection to whom must be performed under user joined specific groups ("Super Manager Users" and "Super Admin Users"). But there is some issues ...
1
vote
2answers
248 views

When Windows 7 tells me 'Consider changing your password', how long have I got until password expiry?

I'm on a corporate desktop, running Windows 7. We have a password expiration policy which mandates that passwords are changed every month or so (not sure of the exact period). When password expiry ...
0
votes
0answers
22 views

Is it possible to script Windows GPO configuration tasks?

I have a login script on my domain that is configured through Group Policy Management (Start -> Administrative Tools -> Group Policy Management), as per this screenshot, logged on to a Windows 7 ...
0
votes
0answers
10 views

GPO issue with Print Management

After adding all of our printers to their proper security in print management, the deployed printer only shows one of the security groups they have been assigned. Most other printers in this network ...
0
votes
1answer
99 views

Enable Local Users and Groups in Basic Edition? Or Registry Table for it?

I have a Basic version of Windows 8.1 (home version; premium; whatever). I do not have a corporate or business version. I know that Group Policy Editor is just a fancy interface for this Group Policy ...
0
votes
3answers
483 views

How Do I Allow A Standard User to Install Programs?

Yes, I realize that defeats the purpose of standard user. But here is the situation. A friend of mine wants to set up time limits for his home schooled son, and his son needs to be a standard user in ...
1
vote
0answers
90 views

Suspicious Group Policy Behaviour

I am running Windows 8.1 x64. I should start by stating that I am not part of a domain and that computer is only used by myself. I have two accounts on the machine. My standard user account which is ...
1
vote
1answer
73 views

Recent Windows Update causing Admin issues in Windows 7

After a recent Windows Update in December 2014 or January 2015, I now have to run a lot of programs as Administrator in order to avoid access/security errors. I'm not sure why, as I'm a local ...
1
vote
1answer
35 views

Trouble with certificate checking on a closed network

I'm managing a Active Directory domain with about a hundred Windows 7 clients running IE9. The network does not have access to the Internet, but do have the ability to access a vendor web application. ...
0
votes
0answers
70 views

Installing software from user account as admin without having to log off log in

Is there a way with a GPO to allow an administrator to install a software from a standard user account? Let say I want to install Itunes from a standard account. I would like Windows 7 to pop an ...
0
votes
1answer
31 views

OSX / Accessing Chrome Local Policies

A few years ago, I set a policy for Chrome on my Mac. I can see this policy and its value via chrome://policy. It says that it applies to "Current user". But for the life of me I can't remember where ...
0
votes
0answers
135 views

How GPRESULT Calculates Security Group Membership

Before I ask my question, I'll provide some background on how I arrived here. So, I was searching for a quick way to display the security groups an AD user is a member of. Ultimately, I'm trying to ...
1
vote
0answers
45 views

Windows Auto-Login not sticking

I have a series of public PCs that are supposed to automatically log in to a specific user. I have set the required registry values (detailed here) via a GPO from the library's main server. This is ...
0
votes
0answers
43 views

How to add Windows explorer favorites on user logon

I have some Favorites links in Windows explorer (not IE). I am looking for a way to apply those favorites to administrator@mycompany.com account each time I log on to any PC in our company. I have a ...
0
votes
0answers
172 views

Windows Server 2012 Password Experation GPO Not Applying

We have a single DC and are trying to enforce Password Policies to all of our computers. We're trying to change it from the default 42 day max password age to 120 or so. The policy appears to be set ...