Group Policy is a feature of the Microsoft Windows NT family of operating systems that control the working environment of user accounts and computer accounts.

learn more… | top users | synonyms (2)

0
votes
1answer
12 views

Windows 7 Drive permissions (alternative to group policy) block access to internal OS Drives from external OS

Windows 7 admin user (version without group policy) Hi, i want to block access (read write view etc) to the internal OS drive (boot & C:) from external OS drives pluged in. The external OS can ...
1
vote
0answers
41 views

Logon Script with net use * /delete /yes

I'm trying to get rid of all manually mapped network drives on all workstations in my domain. I want our end-user's mapped drives to be mapped solely via GPO (GPO's are already in place). I'm trying ...
-2
votes
1answer
19 views

How to prevent Windows 7 from automatically restarting set by GP? [closed]

I need my computer to stay on during the weekends but the GP (I assume) shuts it down every Friday. I have admin privelege on my machine. edit: I tried shutting down anti-virus AVG and unplugging the ...
0
votes
1answer
17 views

What happens if GPO (GPUpdate) is Interrupted

I am writing a small script but it's important to handle the excpetion. I am wondering what happens if I run GPUpdate command and it's interrupted. For example, user closes CMD, closes their laptop ...
0
votes
0answers
10 views

Port blocking on client machines

Is it possible to block specific ports, in this case 80 and 443 for specific client machines. I am using windows server 2012 as a domain controller and have a group of clients that I want to be denied ...
0
votes
1answer
26 views

What are “scriptlets” the referred to in Windows Group Policy Editor?

The Local Group Policy Editor in Windows 7 has a policy option to restrict the running of "scriptlets". This option can be found in Computer Configuration > All Settings > Allow scriptlets and ...
0
votes
1answer
64 views

Windows 10 prompts on new computers [duplicate]

Good morning. Since I started here a lot of computers are getting Windows 10 prompts. I have done everything I can think of to get rid of them but they continue to be a pest. Here is what I have ...
0
votes
0answers
22 views

export a security rules in registry or gpedit and import to other systems

I add some additional rules in software restriction policies on my windows, now want to make a batch file or any other kind of files to export this rules and import them on another system. I export ...
0
votes
0answers
56 views

Missing folders in gpedit.msc

In order to deny the automatic updating of a specific device's driver, I found out that I can get by this through the Local Group Policy Editor. I am running Windows 10 Home OEM on my laptop and, ...
-1
votes
0answers
10 views

Manage auditing and security log Remotely

I am tasked to add an account in the "Manage auditing and security log" under User Right Assignment in the Local policies of gpedit. However i have so many workstation without AD, and i need to write ...
0
votes
1answer
26 views

How to override a specific group policy setting?

I am working on testing Cached Exchange Mode for my organization and am having some trouble getting the GPOs to apply how I'd like them to. We currently have a company wide MS Office GPO. As part of ...
0
votes
0answers
64 views

Windows 10 Pro: “Cortana is disabled by company policy”

..And I think I know why. Early on, I bought into the "Windows 10 is spyware!!" meme and ran some random tool that apparently damaged various parts of my system. I'm now trying to get those damaged ...
1
vote
0answers
21 views

How do I set up a Group policy in WIndows 8.1 Basic? [duplicate]

How can I open / set a Group Policy in Windows 8.1 Basic Edition? I want to change a group policy but I cannot find the Group Policy Editor, and Windows doesn't open "gpedit.msc" in the Search bar... ...
3
votes
1answer
33 views

Change audit policy through the Registry

I'm developing an application to read audit event log entries. But I'm stuck on my home notebook with Windows 10 Home and I can't start gpedit.msc or secpol.msc. Thus I have to enable logon audit ...
0
votes
0answers
28 views

Run a batch as domain admin during logon of user using GPO

I am creating an installer command. I have it fine tuned and working well. There is one catch, needing admin privileges to do some folder copies. I'd like to run my batch file as administrator ...
0
votes
1answer
34 views

How to cancel GPO which was Set by the Administrator?

We have four computer labs. Each one has 50 computers. All of them run on Windows 10 Pro. We have decided to use Active Directory. Added all the computers into the domain. Last week a friend of mine ...
1
vote
0answers
29 views

How to Control Firefox Centrally under Windows?

I wonder whether Firefox can be controlled centrally within a Windows domain without using third party software such as PolicyPak. In particular I want to configure firefox centrally through a group ...
0
votes
1answer
28 views

Enable a Local Group Policy Via Command Line?

I'm attempting to disable OneDrive on some new machines my client has acquired. They are all (about 200 in total) running Windows 10 Pro (unfortunately not enterprise). I'm trying to figure out a way ...
0
votes
0answers
37 views

Windows 7 local User can't print from software to a printer that uses a virtual port

I am running Point-Of-Sale software called RecTrac on Windows 7. My local User is locked down because of the nature of the software. The receipt printer runs over USB with a virtual port, COM3. This ...
0
votes
1answer
53 views

IE11 force sites to run in IE9 or IE10 mode

Is there a way via GPO to have sites run in IE9 or IE10 mode? We have a few sites now that won't run in IE11, but they also won't run when added to compatibility view (IE7). We have one vendor site ...
0
votes
0answers
7 views

How to deny changes in Google Chrome Browser

Every once in a while I get a popup stating, "Confirm Changes" to indicate some extension was removed or whatever. It clearly says "Confirm Changes?" The only options to respond are 'details' and ...
1
vote
0answers
74 views

How to properly set the “Allow Remote Shell Access” setting in Group Policy so as to disable remote shell access?

Windows 7 has a Group Policy setting named Allow Remote Shell Access (located under Computer Configuration > Administrative Templates > Windows Components > Windows Remote Shell). This ...
-1
votes
1answer
84 views

Microsoft Edge Dev Tools grayed out on Windows 10 Home

as the title suggests I want to facilitate the developer tools of Microsoft Edge browser on Windows 10 Home. The thing is, that they are grayed out. Neither pressing F12 nor trying to launch them ...
1
vote
1answer
20 views

Local Admin changes for installing or changing IP

Good afternoon all. We have a user here that installed a CAD program on his computer as a trial. The user has local admin rights to the computer because he has to be able to change his IP address ...
0
votes
0answers
70 views

Virtual Switch has Internet access but Hyper-V VM does not have Internet access

I have an issue that has stumped me. Recently installed Windows Server 2012R2 on a Hyper-V VM. I setup everything correctly on the switch and VM config. The Internet worked just fine after Windows ...
0
votes
2answers
23 views

How to give permissions to a specific root folder for a group of users?

I have a folder located at /software which I want to make it read/write/exec to a group of users. The idea is that this folder will have common software installations, maintained by users from the ...
0
votes
2answers
207 views

How to fix the “Some settings are managed by your organization” message

I get constantly the annoying message: Some settings are managed by your organization I have tried everything to remove it, for example: Editing the gpedit.msc file Running sc config commands ...
1
vote
0answers
32 views

The group policy “Disable machine account password changes” - what does this mean?

I am setting up a test environment on Amazon Web Services comprising of 2 web servers, 1 database server and 1 domain controller. All of them are Windows Server 2012 and joined to the domain. ...
0
votes
1answer
39 views

How do I restrict use of a computer to one domain user only on Active Diredctory?

Today I am looking for a new trick, it's how do I How do I restrict use of a computer to one domain user only on Active Diredctory? I want an only user to Login on a machine and nobody else from the ...
0
votes
0answers
58 views

Windows 10 hide and disable Settings in Start Menu

I would like to hide the Settings-Button in the Windows 10 Start Menu with GPO's, but I cant find the Option to do this. Also I want to prevent accessing Settings (NOT the Control Panel) generally, ...
0
votes
1answer
64 views

Device manager access for non admins

Windows 7, 64bit. Is it possible to allow non admins access to edit the device manager? Currently when logged in as a non admin and I try to access the device manager I see the following; I have ...
1
vote
1answer
85 views

Local group policy for all users

Windows 7, 64bit. I have two simple .bat scripts created, one which runs at logon, the other at logoff. The .bat files are located in C:\bat. Other users have access to this folder. The contents of ...
1
vote
1answer
39 views

Setting time zones with site-based Group Policy

Setting up a Group policy to configure Time Zones based on site location.
1
vote
1answer
52 views

How can I automatically import a certificate to a Windows GPO?

I'm looking for a way to import a root certificate into a specific active directory group policy object. I've tried certutil -dspublish but that would only publish it to a global AD store. How can I ...
0
votes
1answer
26 views

Which user execute a GPO which is granted to unpriviledged user?

When a unprivileged user (or a machine account) of a AD DS domain is granted to execute a GPO. Which user actually execute it for him? Is it possible to choose the user which execute the GPO, ...
0
votes
2answers
151 views

Shutdown still available on Ctrl+Alt+Del screen despite being disabled from group policy on Windows 10

We're experiencing an issue on Windows 10. When disabling the Shutdown option for users via Group Policy, the option disappears from the Start Menu, but doesn't disappear on the Ctrl+Alt+Del screen. ...
0
votes
0answers
60 views

Windows 10 group policy update settings changes automatically

I have Windows 10 pro and I have edited the group policy for Windows Update and have set it to notify me to download. My problem is that after a few days Windows automatically download updates and ...
0
votes
0answers
19 views

Local admin security group doesn't work on remote users

I am facing issue while providing admin rights, by adding user ids to the Local Admin security group, to the VPN users (remote users). I can see the security group's name in the list of applied ...
1
vote
1answer
53 views

About Group Policy: 'Do not allow pinning Store app to the Taskbar'

Using Windows 10 (TH2 Update), I need to enable this policy: User Configuration\Administrative Templates\Start Menu and Taskbar\Do not allow pinning Store app to the Taskbar The problem is that I ...
4
votes
2answers
274 views

Restrict Access to the Microsoft Store

I am trying to disable the windows store locally our Windows 10 machines. In group policy I set Turn off the Store application to Enabled: I then rebooted the machine. When I tried to access the ...
3
votes
1answer
29 views

Is there a non-invasive way of preventing the computer from locking out after “x” seconds?

By non-invasive, I mean not having to install softwares/apps. Due to a group policy, my work computer locks out after 60 seconds of inactivity. Though I understand why such a rule has been put into ...
2
votes
0answers
119 views

How do I make Quick Access in Windows 10 update to the Folder Redirections path?

We have a Domain Network configured with Group Policy to enable folder redirection on all client machines for Desktop, Documents etc. This group policy is applied and works perfectly, however, the ...
0
votes
0answers
11 views

Chrome web notifications

I am trying to use this API: https://developer.mozilla.org/en/docs/Web/API/notification When I go onto that page, Chrome prompts me to accept notifications which I do, but when I click on the Notify ...
0
votes
0answers
71 views

How can I uninstall TeamViewer (multiple versions) from all computers on a domain?

We have switched our remote support software away from TeamViewer. We have around 100 computers (multiple Windows versions) that have TeamViewer (multiple versions) installed that need to be ...
0
votes
0answers
22 views

Windows network interface dns registration enable via GPO(Automate).

I have the need to set the "enable dns registration" flag on the forticlient PPPoP wan adapter. Doing this manually can consume very much time in a large deployment. I would need a way to automate ...
0
votes
2answers
26 views

Is group policy management available only on Windows server 2003,2008 or 2012 only?

Hi i want to know that is Is group policy management available only on Windows server 2003,2008 or 2012 only or we can do that on windows 7 or 8 also. i want to manage software deployment on 10 ...
-1
votes
2answers
110 views

Which registry key is modified by Security Policy SeDebugPrivilege?

I'm trying to find the registry key(s) that are modified by the Security Policy "Debug Programs" - aka SeDebugPrivilege in Windows 8. I remember once seeing a web page that would identify each ...
3
votes
1answer
64 views

Deny Execute Access on Removable drives (Windows XP)

I have my old computer with "Windows XP" on it. I was thinking if I could prevent the execution of .EXE .BAT .VBS and .LNK on Removable Devices. I can't find "Deny Execute Access" on Group Policy. Is ...
0
votes
0answers
229 views

Is it possible to block specific Windows Updates (e.g. 3035583) using local group policy or other means?

This is on a 64-bit Windows 7 Professional. I had this problem that I used to have my Windows Update setting set to Check for updates but let me choose whether to download and install them but ...
0
votes
0answers
33 views

Manage USB Bitlocker Keys through Windows Domain

I have read though many articles including this to figure out how to manage recovery keys for USB drives in a Domain. However this article is mainly detailing how to recover domain attached PC drives ...