Group Policy is a feature of the Microsoft Windows NT family of operating systems that control the working environment of user accounts and computer accounts.

learn more… | top users | synonyms (2)

0
votes
1answer
13 views

How can I Compare Local Group Policies between Window Servers

I am working on installing a business application. I have it working on an "open" test server. I can't seem to get it working on a "hardened" production server. Without worrying about the details of ...
0
votes
0answers
13 views

Enabling/Disabling Group Policy On-Demand

I am currently working at a school that needs some Group Policy enforcements, which have been set up successfully. However, the teachers want to be able to enable/disable the "Run only specified ...
1
vote
0answers
34 views

Windows automatically installing updates and rebooting despite group policy

I have been trying to find any pertinent articles online regarding this problem, but haven't uncovered much that is helpful. For a couple months now I have been plagued with workstations and ...
0
votes
0answers
9 views

Drive access restriction Win2k3

I have Data drive 2TB , how can i deny specific users in my domain to access this storage just after 4 PM . Is there any group policy that can do this option ? Best Regards
0
votes
0answers
9 views

Active directory: what policy modify to prevent this?

I have allowed my user to shutdown and enable the shutdown button on menu as described here https://support.microsoft.com/en-us/kb/816569 I give of course gpupdate,and no errors. But my desktop is ...
0
votes
0answers
19 views

Cannot run an application as a non-admin

Ladies and Gents, Please Help >_< Scenario: Hospital setting, all PC on the same domain and have a mess of GPOs pushed to them... An application (Horizon Blood Bank) compatible only on XP needs ...
0
votes
1answer
24 views

Old group policy screen lock stuck

My old sixth form college enforced some of their own policies when you linked a personal device with their email accounts. This included (a) maximum 15 minute screensaver delay and (b) compulsory ...
0
votes
0answers
18 views

Block unwanted change in system time on windows

I don't want users to be able to change the system time. For this, I have set the Group Policy "Change the system time" to include only my Administrator account. I want to know the validity of this ...
-1
votes
0answers
21 views

CPU Node allocation

In windows server how can I force all applications used by a User to run on a specific CPU node? I know that I can set the affinity of each task so that it only uses specific cores and nodes, but I ...
0
votes
1answer
40 views

Member of Local Administrator group but can't run cmd as admin

I am part of a domain, my personal user account is not the domain admin. However, I am a member of the local Administrators group. Even so, I can't open CMD as admin! When I try, it asks for the ...
1
vote
2answers
74 views

Server2012r2: Trusted sites greyed out in IE11

I have a problem with trusted sites definition in Win Server2012r2. I am not able to manually add any site since the "add" button is greyed out. My primary objective was to add particular web pages ...
1
vote
1answer
38 views

How can I edit local Group Policy settings using command line?

I'm attempting to throw together a script for work that allows BitLocker without a compatible TPM. The setting is "Configuration \ Administrative Templates \ Windows Components \ Bit Locker Drive ...
0
votes
1answer
24 views

Error upon File->Open, every time, in TextPad

I have a Windows 7 Professional desktop that I have begun to use, logged in as a network user to a Samba4 AD domain. Whenever I go to open a file within TextPad (e.g. by choosing Open from the File ...
1
vote
0answers
17 views

How to disable content view in windows explorer

Im trying to find a way to disable content view in windows explorer on windows 7 clients. I found this: ...
0
votes
0answers
34 views

Forcing Windows Update settings through Group Policy on a Server 2003 domain

I have an existing Server 2003 domain with Windows 7 clients. I'm trying to force the Windows Update policy to download and install updates on all clients at a scheduled time. All existing client ...
2
votes
0answers
16 views

How come UAC logs are not being stored in Event Viewer?

In Event Viewer, under Applications and Services Logs, UAC logs are not being stored. How do I enable them? Could Domain/OU group policy have them disabled? If so where can I see that it is disabled ...
0
votes
1answer
18 views

Dir command not working on one UNC Share

We have a process that runs in SQL Server which executes a DIR command on the local network using a UNC path to check that the files generated by another system are all there, as part of an audit ...
0
votes
0answers
11 views

Export the local group policy editor settings

I opened mmc.exe and from File>Add/delete snap-ins I added Group policy object editor for a specific user. Now after changing the settings I want to be able to export the settings and in future I ...
0
votes
0answers
25 views

How to give permission to user groups rather than only a user?

I opened mmc.exe and from File>Add/delete snap-ins I added Group policy object editor for a specific user. From here I an give and deny access to many settings(around 100 in my case) on the ...
2
votes
3answers
82 views

What causes CTRL-ALT-DELETE to be enabled on a non-domain-joined system?

Recently, on my personal laptop running Windows 7, my login screen turned into a CTRL-ALT-DELETE secure login screen. I've looked around for reasons why this might be the case, and the only indication ...
0
votes
0answers
15 views

Userinit value is replaced by wrong string

I am dealing with a quite difficult issue. On 2 HP ProBooks there are 2 user accounts each. One admin and one standard. The admin user works fine, but the standard user isn't able to log in since it ...
0
votes
0answers
34 views

Allow standard Windows 7 users to install updates to 3rd party pre-installed software (no domain)

I have a group of Windows 7 users that are part of a Windows Workgroup (no A/D), with limited local rights (users). I have set the accounts to have the ability to run Windows updates, though, they do ...
-2
votes
1answer
21 views

How to prevent Windows from accessing a directory inside a share?

At work, domain group policy is set to display a background image located in a shared folder. The path is similar to: \\example\gpo\desktop.jpg The image is ugly and distracting. Unfortunately, ...
0
votes
1answer
24 views

Active Directory on Windows Server Standard Group Policy Custom Interface not working

I am trying to create a group policy to lock down specific computers to be used as a kiosk. I have created a user account in active directory to use on the kiosks and set up a group policy in the ...
2
votes
1answer
48 views

Block User account Control GPO on PC

I am a local administrator on my win 8 PC which is on a domain. In order for the Win 8 apps to work I need to have both UAC and the firewall enabled. They are being disabled by a domain GPO. Is it ...
3
votes
3answers
88 views

Iexplorer.exe as Custom User Interface - Restart if closed?

I'm currently configuring a Kiosk machine using "IExplore.exe -K" as a replacement shell, everything is working fine. Unfortunately you can still kill the IExplore.exe session by hitting Alt-F4. ...
0
votes
0answers
11 views

Applocker Exceptions issue with Photoshop Droplets

I have Applocker configured (GPO) to block .exe files from executing on %OSDRIVE%/* unless they live in %PROGRAMFILES%* and %WINDIR%*. This prevents users from running self-executing applications, ...
0
votes
2answers
48 views

Most files and all folders have read only permissions [duplicate]

I recently installed windows 7 64 bit on a SSD and now, it appears that all of my folders and most of my files are read only. I have tried to remove the read only aspect of them, or take ownership of ...
0
votes
2answers
58 views

Must I purchase Windows Server to set policies or enable domain login?

If I want to setup a few Windows 7 or 8 PCs to only permit logins using domain accounts, must I fork out the cash to purchase a Windows Server for this? Or a LDAP server such as the Apache DS or even ...
1
vote
0answers
40 views

Group Policy install software PER USER

Need to deploy an MSI file with Group Policy. No other software deployment options are available, so no SCCM, etc. Here is what I need: 1. Software must be deployed PER USER. 2. Software must ...
0
votes
0answers
50 views

Reflect HKLM/SOFTWARE/Policies registry changes to HKCU/Software/MS/Win/CV/GPOs

Ok so I have a Local Group Policy (under Computer Config, not User Config) to force install extensions in Chrome. This policy needs to run for every user of the computer. The value is going to change ...
0
votes
0answers
50 views

Deploying webcams with Lync via RDP

I am currently working on an IT project for my internship regarding the implementation of webcams and Lync via RDP on thin-clients. The goal is to let users, who are logged in on a thin-client via ...
0
votes
0answers
36 views

Dollar sign '$' in the output of whoami in Windows

It is a domain environment. There are several machines, connection to whom must be performed under user joined specific groups ("Super Manager Users" and "Super Admin Users"). But there is some issues ...
1
vote
2answers
224 views

When Windows 7 tells me 'Consider changing your password', how long have I got until password expiry?

I'm on a corporate desktop, running Windows 7. We have a password expiration policy which mandates that passwords are changed every month or so (not sure of the exact period). When password expiry ...
0
votes
0answers
22 views

Is it possible to script Windows GPO configuration tasks?

I have a login script on my domain that is configured through Group Policy Management (Start -> Administrative Tools -> Group Policy Management), as per this screenshot, logged on to a Windows 7 ...
0
votes
0answers
10 views

GPO issue with Print Management

After adding all of our printers to their proper security in print management, the deployed printer only shows one of the security groups they have been assigned. Most other printers in this network ...
0
votes
1answer
92 views

Enable Local Users and Groups in Basic Edition? Or Registry Table for it?

I have a Basic version of Windows 8.1 (home version; premium; whatever). I do not have a corporate or business version. I know that Group Policy Editor is just a fancy interface for this Group Policy ...
0
votes
3answers
408 views

How Do I Allow A Standard User to Install Programs?

Yes, I realize that defeats the purpose of standard user. But here is the situation. A friend of mine wants to set up time limits for his home schooled son, and his son needs to be a standard user in ...
1
vote
0answers
88 views

Suspicious Group Policy Behaviour

I am running Windows 8.1 x64. I should start by stating that I am not part of a domain and that computer is only used by myself. I have two accounts on the machine. My standard user account which is ...
1
vote
1answer
72 views

Recent Windows Update causing Admin issues in Windows 7

After a recent Windows Update in December 2014 or January 2015, I now have to run a lot of programs as Administrator in order to avoid access/security errors. I'm not sure why, as I'm a local ...
1
vote
1answer
34 views

Trouble with certificate checking on a closed network

I'm managing a Active Directory domain with about a hundred Windows 7 clients running IE9. The network does not have access to the Internet, but do have the ability to access a vendor web application. ...
0
votes
0answers
69 views

Installing software from user account as admin without having to log off log in

Is there a way with a GPO to allow an administrator to install a software from a standard user account? Let say I want to install Itunes from a standard account. I would like Windows 7 to pop an ...
0
votes
1answer
30 views

OSX / Accessing Chrome Local Policies

A few years ago, I set a policy for Chrome on my Mac. I can see this policy and its value via chrome://policy. It says that it applies to "Current user". But for the life of me I can't remember where ...
0
votes
0answers
131 views

How GPRESULT Calculates Security Group Membership

Before I ask my question, I'll provide some background on how I arrived here. So, I was searching for a quick way to display the security groups an AD user is a member of. Ultimately, I'm trying to ...
1
vote
0answers
45 views

Windows Auto-Login not sticking

I have a series of public PCs that are supposed to automatically log in to a specific user. I have set the required registry values (detailed here) via a GPO from the library's main server. This is ...
0
votes
0answers
42 views

How to add Windows explorer favorites on user logon

I have some Favorites links in Windows explorer (not IE). I am looking for a way to apply those favorites to administrator@mycompany.com account each time I log on to any PC in our company. I have a ...
0
votes
0answers
159 views

Windows Server 2012 Password Experation GPO Not Applying

We have a single DC and are trying to enforce Password Policies to all of our computers. We're trying to change it from the default 42 day max password age to 120 or so. The policy appears to be set ...
1
vote
0answers
824 views

No Google folder under Administrative Templates via Group Policy editor - Adding GoogleUpdate.adm does nothing

I'm unable to complete "Step 2" : Step 2. Importing Google Update ADM template. Navigate to Local Computer Policy > Computer Configuration > Administrative Templates Right-click Administrative ...
0
votes
1answer
23 views

Prevent windows computers from remembering last account with group policy

I have computers joined to an active directory domain. My users have roaming profiles because they will be using different computers in the office. Currently the computers will default the username to ...
2
votes
0answers
147 views

Enabling welcome screen Windows 7 Embedded

I want the list of available users (without the hidden admin account etc) displayed. To facilitate an easier login experience. Things I have tried: Security policy editor: secpol | Local Policies ...