Group Policy is a feature of the Microsoft Windows NT family of operating systems that control the working environment of user accounts and computer accounts.

learn more… | top users | synonyms (2)

0
votes
0answers
25 views

GPO not applied to Windows 7 and higher

There are two domain controllers. The primary works on the Windows Server 2008 R2 and the secondary on Windows Server 2012. When I create a GPO on the primary controller, it is immediately copied to ...
1
vote
2answers
50 views

Add Local group restrictions with cmd

How I could add Additional Rules in Software Restriction Policies with cmd using a script that'll work with both Windows 7 and Windows Vista. I would like to create some path rules with security ...
2
votes
2answers
27 views

How to create a GPO registry item without automatically replacing variables?

I created a registry item in a GPO of REG_EXPAND_SZ type with value "%userprofile%\Shares". The problem is, when the GPO is aplied, the value is created with the data "C:\Users\Default\Shares". Is ...
0
votes
2answers
50 views

Filepaths longer than 260 characters in Window 10 Home Edition

According to this article Windows 10 should allow filepaths longer then 260 characters. I saved several documents with a long filepath in a previous installation (which was upgraded from Windows 7 and ...
-1
votes
1answer
34 views

Set Firefox as Standard Browser via Powershell

I'm currently creating a deployment image (Win 10 x64). Since I have to use a FOG-Server, I created an Install-user with my powershell script in autostart. The user will be deleted after the script ...
0
votes
0answers
20 views

Group Policy Setting - Internet Explorer

Internet Options/Security/Trusted Sites/Custom level/Websites in less privileged web content zone can navigate into this zone The Microsoft documentation on this says it is set to ‘disable’ by ...
0
votes
1answer
43 views

How to disable the lockscreen in Windows 10 insider build 14367

I tried doing this using the Group Policy Editor by navigating to Computer Configuration\Administrative Templates\Control Panel\Personalization and setting Do not display the lock screen to enabled. ...
0
votes
1answer
41 views

How to disable (signature-based) real-time scanning and leave behavior monitoring enabled in Windows Defender?

I believe that Windows Defender included in Windows 10 implements some forms of protection other than signature-based threat detection. Two Group Policy settings indicates this: "Turn on behavior ...
0
votes
1answer
27 views

How do I get rid of the 'admin menu' you see when you right-click the Start button in Windows 10, via GP?

So I'm trying to lock down a set of lab computers, and you can't right-click anywhere on the Taskbar, via the Remove access to the context menus for the taskbar GP, but you can still right-click on ...
0
votes
2answers
25 views

Group Policy Editor on Windows 8 32Bit

I have "Windows 8.1 Single Language with Bing" installed on a device. I need to Enable "Do not display the lock screen" in Group Policy Editor (Computer Configuration > Administrative Templates > ...
2
votes
0answers
18 views

How do I specify advanced power settings for all users using group policy?

I need to set up a Microsoft Surface Pro tablet so that it never throttles the CPU. One solution I found using this guide is to set both minimum and maximum processor state to 100% in both battery and ...
0
votes
2answers
36 views

Win Server 2003 r2: Can you deploy files without using GPP?

Im trying to deploy an email signature that needs to be placed in every C:%APPDATA%\MICROSOFT\Signatures folder on each machine in my domain. I am aware of how to deploy programs with .msi file ...
2
votes
2answers
37 views

Denying access to USB ports, but setting up an “escalation” for allowing access on-demand

For Windows 7/10, is there a way to block access to USB ports, but make it so that it could be "authorized" UAC-style by an Administrator, on a case-by-case basis? I know that I can block the USB ...
0
votes
2answers
54 views

Removed SID Key and now can't log into PC

I removed SID Keys named S-1-5-18, S-1-5-19, and S-1-5-20. Now I can't log into used Win 10 Pro that I purchased recently. When I log into my Admin account, screen goes blank after a minute.
0
votes
0answers
16 views

Limit user to one fullscreen application with GPO (Win10)

I want/have to limit a kinda public computer from access. I thought i'll do it with GPO running Windows 10 Pro. I know there is the entry Run only specific Windows applications. I also looked into ...
0
votes
1answer
1k views

GPO Denied (Security Filter) not applying

I am having an issue in my company. I have a GPO, and one group in security filter, lets name it group X. In my delegation, I set the permissions to X (Allow Read and Allow Apply Group Policy). The ...
0
votes
1answer
48 views

On a shared drive, how prevent users from changing folder structure, while allowing them to change a content of these folders?

I have a shared network drive which is shared by means of GPO. This drive has some folder structure with many nested subfolders each of which could contain files. I want: I want to prevent users ...
0
votes
0answers
15 views

Customising and manipulating Local Policies in non-AD network

I'm running a small LAN mainly of clients running Windows 8.1 Pro/Enterprise. I've used GPEdit/SecPol MSC and equivalent reg keys to manipulate local policies and items listed as being able to be set ...
0
votes
0answers
34 views

gpresult group membership incorrect

I have deployed a printer for each user of one group via print server. When I add person to this group and just run the command " gpupdate /force ", I can see the printer appeared on Devices and ...
1
vote
0answers
17 views

Office 2013 First Time Run video plays every time

I have a user running Office 2013 (32-bit) on Windows 7 Professional (SP1). Every time they open an Office application, they get shown the First Run video. Office is fully updated, and I have run a "...
1
vote
1answer
112 views

Allow enhanced PINs for startup with Bitlocker

I use PIN to unlock a windows 10 machine with bitlocker-protected OS drive. Currently, only 0-9 characters are allowed in PIN. Following a documentation, I enabled "Allow enhanced PINs for startup" in ...
0
votes
0answers
53 views

Server 2012 R2 Group Policy targeted to a specific computer on domain not enforcing

Thanks everyone who's viewed this and gives me an input on it. I have a Server 2012 R2 and I am trying to enforce a specific group policy ( Remote Session Time Limit ) to 11 Windows 10 Professional ...
0
votes
0answers
119 views

Mapping Drive with GPO worked - but not anymore

A couple weeks ago I created a few test mapped drives. I used the item level targeting feature to target a security group. I also used the item level targeting to single myself out for future ...
0
votes
0answers
17 views

Windows Joystick Jitter

I have an Axis T8311 Joystick connected to a Windows 7 64-bit computer. I noticed that the joystick control jitters by 1px on the x-axis or 1px on the y-axis at a time every few seconds. I am ...
1
vote
1answer
58 views

Remote Desktop Services: start a program on connection within desktop environment

I have Windows Server 2008R2 with Remote Desktop Services. I need certain program started on every connection, within normal remote desktop environment. I tried this group policy: "Local Group Policy"...
4
votes
2answers
152 views

Stop Windows 10 search from running commands

We disable the run box on our network through a GPO which for anything upto 10 stopped you browsing to UNC paths or running commands of any kind. In 10 it has the same effect UNLESS you use the search ...
2
votes
1answer
226 views

Enforced group policy object not applying on Windows 10

We have two screen lock policies in the domain controllers GPO editor. 1 applies to 'authenticated users' so it will affect all users on the domain, as intended. It is not enforced. It sets the ...
0
votes
1answer
22 views

Windows 7 Drive permissions (alternative to group policy) block access to internal OS Drives from external OS

Windows 7 admin user (version without group policy) Hi, i want to block access (read write view etc) to the internal OS drive (boot & C:) from external OS drives pluged in. The external OS can ...
1
vote
0answers
217 views

Logon Script with net use * /delete /yes

I'm trying to get rid of all manually mapped network drives on all workstations in my domain. I want our end-user's mapped drives to be mapped solely via GPO (GPO's are already in place). I'm trying ...
0
votes
1answer
29 views

What happens if GPO (GPUpdate) is Interrupted

I am writing a small script but it's important to handle the excpetion. I am wondering what happens if I run GPUpdate command and it's interrupted. For example, user closes CMD, closes their laptop ...
0
votes
0answers
10 views

Port blocking on client machines

Is it possible to block specific ports, in this case 80 and 443 for specific client machines. I am using windows server 2012 as a domain controller and have a group of clients that I want to be denied ...
0
votes
1answer
51 views

What are “scriptlets” the referred to in Windows Group Policy Editor?

The Local Group Policy Editor in Windows 7 has a policy option to restrict the running of "scriptlets". This option can be found in Computer Configuration > All Settings > Allow scriptlets and ...
0
votes
1answer
81 views

Windows 10 prompts on new computers [duplicate]

Good morning. Since I started here a lot of computers are getting Windows 10 prompts. I have done everything I can think of to get rid of them but they continue to be a pest. Here is what I have ...
0
votes
0answers
33 views

export a security rules in registry or gpedit and import to other systems

I add some additional rules in software restriction policies on my windows, now want to make a batch file or any other kind of files to export this rules and import them on another system. I export ...
0
votes
0answers
348 views

Missing folders in gpedit.msc

In order to deny the automatic updating of a specific device's driver, I found out that I can get by this through the Local Group Policy Editor. I am running Windows 10 Home OEM on my laptop and, ...
0
votes
1answer
48 views

How to override a specific group policy setting?

I am working on testing Cached Exchange Mode for my organization and am having some trouble getting the GPOs to apply how I'd like them to. We currently have a company wide MS Office GPO. As part of ...
0
votes
1answer
92 views

Find out what does change the settings for User Account Control all the time

The settings of the UAC get changed by some app/program/process. As a result I can't open Edge, calculator, Windows store or any other Metro style app. If I try to open it I get xxx can't be ...
0
votes
0answers
278 views

Windows 10 Pro: “Cortana is disabled by company policy”

..And I think I know why. Early on, I bought into the "Windows 10 is spyware!!" meme and ran some random tool that apparently damaged various parts of my system. I'm now trying to get those damaged ...
1
vote
0answers
23 views

How do I set up a Group policy in WIndows 8.1 Basic? [duplicate]

How can I open / set a Group Policy in Windows 8.1 Basic Edition? I want to change a group policy but I cannot find the Group Policy Editor, and Windows doesn't open "gpedit.msc" in the Search bar... ...
3
votes
1answer
106 views

Change audit policy through the Registry

I'm developing an application to read audit event log entries. But I'm stuck on my home notebook with Windows 10 Home and I can't start gpedit.msc or secpol.msc. Thus I have to enable logon audit ...
0
votes
0answers
59 views

Run a batch as domain admin during logon of user using GPO

I am creating an installer command. I have it fine tuned and working well. There is one catch, needing admin privileges to do some folder copies. I'd like to run my batch file as administrator (...
0
votes
1answer
41 views

How to cancel GPO which was Set by the Administrator?

We have four computer labs. Each one has 50 computers. All of them run on Windows 10 Pro. We have decided to use Active Directory. Added all the computers into the domain. Last week a friend of mine (...
1
vote
0answers
41 views

How to Control Firefox Centrally under Windows?

I wonder whether Firefox can be controlled centrally within a Windows domain without using third party software such as PolicyPak. In particular I want to configure firefox centrally through a group ...
0
votes
1answer
67 views

Enable a Local Group Policy Via Command Line?

I'm attempting to disable OneDrive on some new machines my client has acquired. They are all (about 200 in total) running Windows 10 Pro (unfortunately not enterprise). I'm trying to figure out a way ...
0
votes
0answers
72 views

Windows 7 local User can't print from software to a printer that uses a virtual port

I am running Point-Of-Sale software called RecTrac on Windows 7. My local User is locked down because of the nature of the software. The receipt printer runs over USB with a virtual port, COM3. This ...
0
votes
1answer
231 views

IE11 force sites to run in IE9 or IE10 mode

Is there a way via GPO to have sites run in IE9 or IE10 mode? We have a few sites now that won't run in IE11, but they also won't run when added to compatibility view (IE7). We have one vendor site ...
0
votes
0answers
8 views

How to deny changes in Google Chrome Browser

Every once in a while I get a popup stating, "Confirm Changes" to indicate some extension was removed or whatever. It clearly says "Confirm Changes?" The only options to respond are 'details' and '...
1
vote
0answers
191 views

How to properly set the “Allow Remote Shell Access” setting in Group Policy so as to disable remote shell access?

Windows 7 has a Group Policy setting named Allow Remote Shell Access (located under Computer Configuration > Administrative Templates > Windows Components > Windows Remote Shell). This ...
-1
votes
1answer
226 views

Microsoft Edge Dev Tools grayed out on Windows 10 Home

as the title suggests I want to facilitate the developer tools of Microsoft Edge browser on Windows 10 Home. The thing is, that they are grayed out. Neither pressing F12 nor trying to launch them ...
1
vote
1answer
20 views

Local Admin changes for installing or changing IP

Good afternoon all. We have a user here that installed a CAD program on his computer as a trial. The user has local admin rights to the computer because he has to be able to change his IP address ...