Group Policy is a feature of the Microsoft Windows NT family of operating systems that control the working environment of user accounts and computer accounts.

learn more… | top users | synonyms (2)

0
votes
0answers
11 views

Customising and manipulating Local Policies in non-AD network

I'm running a small LAN mainly of clients running Windows 8.1 Pro/Enterprise. I've used GPEdit/SecPol MSC and equivalent reg keys to manipulate local policies and items listed as being able to be set ...
0
votes
0answers
17 views

gpresult group membership incorrect

I have deployed a printer for each user of one group via print server. When I add person to this group and just run the command " gpupdate /force ", I can see the printer appeared on Devices and ...
1
vote
0answers
11 views

Office 2013 First Time Run video plays every time

I have a user running Office 2013 (32-bit) on Windows 7 Professional (SP1). Every time they open an Office application, they get shown the First Run video. Office is fully updated, and I have run a ...
-1
votes
1answer
20 views

Is there a way to keep UAC enabled even when group policy is configured to disable it? [closed]

Where I work, UAC is completely disabled via the group.policy. It is disabled for the benefit of other workers but for what I do I do not need it to be disabled. With UAC disabled on Windows 10 ...
1
vote
1answer
18 views

Allow enhanced PINs for startup with Bitlocker

I use PIN to unlock a windows 10 machine with bitlocker-protected OS drive. Currently, only 0-9 characters are allowed in PIN. Following a documentation, I enabled "Allow enhanced PINs for startup" in ...
0
votes
0answers
31 views

Server 2012 R2 Group Policy targeted to a specific computer on domain not enforcing

Thanks everyone who's viewed this and gives me an input on it. I have a Server 2012 R2 and I am trying to enforce a specific group policy ( Remote Session Time Limit ) to 11 Windows 10 Professional ...
0
votes
0answers
28 views

Mapping Drive with GPO worked - but not anymore

A couple weeks ago I created a few test mapped drives. I used the item level targeting feature to target a security group. I also used the item level targeting to single myself out for future ...
0
votes
0answers
12 views

Windows Joystick Jitter

I have an Axis T8311 Joystick connected to a Windows 7 64-bit computer. I noticed that the joystick control jitters by 1px on the x-axis or 1px on the y-axis at a time every few seconds. I am ...
1
vote
1answer
37 views

Remote Desktop Services: start a program on connection within desktop environment

I have Windows Server 2008R2 with Remote Desktop Services. I need certain program started on every connection, within normal remote desktop environment. I tried this group policy: "Local Group ...
4
votes
2answers
94 views

Stop Windows 10 search from running commands

We disable the run box on our network through a GPO which for anything upto 10 stopped you browsing to UNC paths or running commands of any kind. In 10 it has the same effect UNLESS you use the search ...
2
votes
1answer
61 views

Enforced group policy object not applying on Windows 10

We have two screen lock policies in the domain controllers GPO editor. 1 applies to 'authenticated users' so it will affect all users on the domain, as intended. It is not enforced. It sets the ...
-1
votes
0answers
20 views

Disable Startup Repair on BitLocker machine on Windows 7

We pushed out a gpo startup script to disable Repair Startup on all windows 7 computers that have BitLocker enabled. Noticed that everytime the computer restart/shutdown, we must supply a Bitlocker ...
0
votes
1answer
18 views

Windows 7 Drive permissions (alternative to group policy) block access to internal OS Drives from external OS

Windows 7 admin user (version without group policy) Hi, i want to block access (read write view etc) to the internal OS drive (boot & C:) from external OS drives pluged in. The external OS can ...
1
vote
0answers
83 views

Logon Script with net use * /delete /yes

I'm trying to get rid of all manually mapped network drives on all workstations in my domain. I want our end-user's mapped drives to be mapped solely via GPO (GPO's are already in place). I'm trying ...
0
votes
1answer
18 views

What happens if GPO (GPUpdate) is Interrupted

I am writing a small script but it's important to handle the excpetion. I am wondering what happens if I run GPUpdate command and it's interrupted. For example, user closes CMD, closes their laptop ...
0
votes
0answers
10 views

Port blocking on client machines

Is it possible to block specific ports, in this case 80 and 443 for specific client machines. I am using windows server 2012 as a domain controller and have a group of clients that I want to be denied ...
0
votes
1answer
30 views

What are “scriptlets” the referred to in Windows Group Policy Editor?

The Local Group Policy Editor in Windows 7 has a policy option to restrict the running of "scriptlets". This option can be found in Computer Configuration > All Settings > Allow scriptlets and ...
0
votes
1answer
73 views

Windows 10 prompts on new computers [duplicate]

Good morning. Since I started here a lot of computers are getting Windows 10 prompts. I have done everything I can think of to get rid of them but they continue to be a pest. Here is what I have ...
0
votes
0answers
27 views

export a security rules in registry or gpedit and import to other systems

I add some additional rules in software restriction policies on my windows, now want to make a batch file or any other kind of files to export this rules and import them on another system. I export ...
0
votes
0answers
136 views

Missing folders in gpedit.msc

In order to deny the automatic updating of a specific device's driver, I found out that I can get by this through the Local Group Policy Editor. I am running Windows 10 Home OEM on my laptop and, ...
0
votes
1answer
31 views

How to override a specific group policy setting?

I am working on testing Cached Exchange Mode for my organization and am having some trouble getting the GPOs to apply how I'd like them to. We currently have a company wide MS Office GPO. As part of ...
0
votes
1answer
57 views

Find out what does change the settings for User Account Control all the time

The settings of the UAC get changed by some app/program/process. As a result I can't open Edge, calculator, Windows store or any other Metro style app. If I try to open it I get xxx can't be ...
0
votes
0answers
97 views

Windows 10 Pro: “Cortana is disabled by company policy”

..And I think I know why. Early on, I bought into the "Windows 10 is spyware!!" meme and ran some random tool that apparently damaged various parts of my system. I'm now trying to get those damaged ...
1
vote
0answers
22 views

How do I set up a Group policy in WIndows 8.1 Basic? [duplicate]

How can I open / set a Group Policy in Windows 8.1 Basic Edition? I want to change a group policy but I cannot find the Group Policy Editor, and Windows doesn't open "gpedit.msc" in the Search bar... ...
3
votes
1answer
42 views

Change audit policy through the Registry

I'm developing an application to read audit event log entries. But I'm stuck on my home notebook with Windows 10 Home and I can't start gpedit.msc or secpol.msc. Thus I have to enable logon audit ...
0
votes
0answers
36 views

Run a batch as domain admin during logon of user using GPO

I am creating an installer command. I have it fine tuned and working well. There is one catch, needing admin privileges to do some folder copies. I'd like to run my batch file as administrator ...
0
votes
1answer
38 views

How to cancel GPO which was Set by the Administrator?

We have four computer labs. Each one has 50 computers. All of them run on Windows 10 Pro. We have decided to use Active Directory. Added all the computers into the domain. Last week a friend of mine ...
1
vote
0answers
36 views

How to Control Firefox Centrally under Windows?

I wonder whether Firefox can be controlled centrally within a Windows domain without using third party software such as PolicyPak. In particular I want to configure firefox centrally through a group ...
0
votes
1answer
36 views

Enable a Local Group Policy Via Command Line?

I'm attempting to disable OneDrive on some new machines my client has acquired. They are all (about 200 in total) running Windows 10 Pro (unfortunately not enterprise). I'm trying to figure out a way ...
0
votes
0answers
44 views

Windows 7 local User can't print from software to a printer that uses a virtual port

I am running Point-Of-Sale software called RecTrac on Windows 7. My local User is locked down because of the nature of the software. The receipt printer runs over USB with a virtual port, COM3. This ...
0
votes
1answer
106 views

IE11 force sites to run in IE9 or IE10 mode

Is there a way via GPO to have sites run in IE9 or IE10 mode? We have a few sites now that won't run in IE11, but they also won't run when added to compatibility view (IE7). We have one vendor site ...
0
votes
0answers
8 views

How to deny changes in Google Chrome Browser

Every once in a while I get a popup stating, "Confirm Changes" to indicate some extension was removed or whatever. It clearly says "Confirm Changes?" The only options to respond are 'details' and ...
1
vote
0answers
110 views

How to properly set the “Allow Remote Shell Access” setting in Group Policy so as to disable remote shell access?

Windows 7 has a Group Policy setting named Allow Remote Shell Access (located under Computer Configuration > Administrative Templates > Windows Components > Windows Remote Shell). This ...
-1
votes
1answer
118 views

Microsoft Edge Dev Tools grayed out on Windows 10 Home

as the title suggests I want to facilitate the developer tools of Microsoft Edge browser on Windows 10 Home. The thing is, that they are grayed out. Neither pressing F12 nor trying to launch them ...
1
vote
1answer
20 views

Local Admin changes for installing or changing IP

Good afternoon all. We have a user here that installed a CAD program on his computer as a trial. The user has local admin rights to the computer because he has to be able to change his IP address ...
0
votes
0answers
100 views

Virtual Switch has Internet access but Hyper-V VM does not have Internet access

I have an issue that has stumped me. Recently installed Windows Server 2012R2 on a Hyper-V VM. I setup everything correctly on the switch and VM config. The Internet worked just fine after Windows ...
0
votes
2answers
23 views

How to give permissions to a specific root folder for a group of users?

I have a folder located at /software which I want to make it read/write/exec to a group of users. The idea is that this folder will have common software installations, maintained by users from the ...
0
votes
2answers
226 views

How to fix the “Some settings are managed by your organization” message

I get constantly the annoying message: Some settings are managed by your organization I have tried everything to remove it, for example: Editing the gpedit.msc file Running sc config commands ...
1
vote
0answers
35 views

The group policy “Disable machine account password changes” - what does this mean?

I am setting up a test environment on Amazon Web Services comprising of 2 web servers, 1 database server and 1 domain controller. All of them are Windows Server 2012 and joined to the domain. ...
0
votes
1answer
51 views

How do I restrict use of a computer to one domain user only on Active Diredctory?

Today I am looking for a new trick, it's how do I How do I restrict use of a computer to one domain user only on Active Diredctory? I want an only user to Login on a machine and nobody else from the ...
0
votes
0answers
85 views

Windows 10 hide and disable Settings in Start Menu

I would like to hide the Settings-Button in the Windows 10 Start Menu with GPO's, but I cant find the Option to do this. Also I want to prevent accessing Settings (NOT the Control Panel) generally, ...
0
votes
1answer
90 views

Device manager access for non admins

Windows 7, 64bit. Is it possible to allow non admins access to edit the device manager? Currently when logged in as a non admin and I try to access the device manager I see the following; I have ...
1
vote
1answer
98 views

Local group policy for all users

Windows 7, 64bit. I have two simple .bat scripts created, one which runs at logon, the other at logoff. The .bat files are located in C:\bat. Other users have access to this folder. The contents of ...
1
vote
1answer
49 views

Setting time zones with site-based Group Policy

Setting up a Group policy to configure Time Zones based on site location.
1
vote
1answer
72 views

How can I automatically import a certificate to a Windows GPO?

I'm looking for a way to import a root certificate into a specific active directory group policy object. I've tried certutil -dspublish but that would only publish it to a global AD store. How can I ...
0
votes
1answer
28 views

Which user execute a GPO which is granted to unpriviledged user?

When a unprivileged user (or a machine account) of a AD DS domain is granted to execute a GPO. Which user actually execute it for him? Is it possible to choose the user which execute the GPO, ...
0
votes
2answers
226 views

Shutdown still available on Ctrl+Alt+Del screen despite being disabled from group policy on Windows 10

We're experiencing an issue on Windows 10. When disabling the Shutdown option for users via Group Policy, the option disappears from the Start Menu, but doesn't disappear on the Ctrl+Alt+Del screen. ...
0
votes
0answers
63 views

Windows 10 group policy update settings changes automatically

I have Windows 10 pro and I have edited the group policy for Windows Update and have set it to notify me to download. My problem is that after a few days Windows automatically download updates and ...
0
votes
0answers
19 views

Local admin security group doesn't work on remote users

I am facing issue while providing admin rights, by adding user ids to the Local Admin security group, to the VPN users (remote users). I can see the security group's name in the list of applied ...
1
vote
1answer
60 views

About Group Policy: 'Do not allow pinning Store app to the Taskbar'

Using Windows 10 (TH2 Update), I need to enable this policy: User Configuration\Administrative Templates\Start Menu and Taskbar\Do not allow pinning Store app to the Taskbar The problem is that I ...