Group Policy is a feature of the Microsoft Windows NT family of operating systems that control the working environment of user accounts and computer accounts.

learn more… | top users | synonyms (2)

0
votes
1answer
23 views

How to return a GPO to Not Configured?

Recently a new piece of software started being included in our corporate Windows 7 image that, during silent install during the deployment process with Windows Deployment Workbench, sets the Windows ...
-1
votes
0answers
10 views

Windows AD user policy query [closed]

can we able export report from Active Directory of all users which they don’t have user-policy group ? Tried with Manage engine ADAduit software, but there are no related object found in the software ...
0
votes
2answers
35 views

Connect to VPN before Windows 7 starts

I am building a laptop with Windows 7 SP1 x64 which will be used by a remote user. The laptop needs to be locked down so they can only do their work and nothing else. It will have a VPN connection ...
0
votes
2answers
39 views

Active Directory and Mac OS 10.5 - how can I get the GPO's network drive on the Mac, and get the home directory of the user to map correctly?

I have a PowerMac G5 computer that I have joined to the Windows domain network successfully. I am able to login successfully with domain credentials. However, it does not include any of the network ...
0
votes
1answer
23 views

Windows 8, 8.1, 2012 R2: Search does not work correctly after joining local AD domain

Scenario: I do a fresh install of e.g. Windows 8.1 on a workstation. Then I create a temporary local user on this system -> searching in the start menu for e.g. "programs and features" (German: ...
3
votes
0answers
24 views

Difference between Local Policy and Registry Key

I would like to understand the difference between this registry key, MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\MaximumPasswordAge=4,30 and the local computer policy settings via ...
0
votes
1answer
26 views

Batch script to only run command for 1 machine

I have a Windows GPO that runs a batch file startup script to disable NetBIOS. It normally looks like this: wmic nicconfig where (TcpipNetbiosOptions!=null and TcpipNetbiosOptions!=2) call ...
0
votes
0answers
16 views

Cannot add a local user to GPO

I'm trying to update the members of the Administrators (built-in) group under User Configuration > Preferences > Control Panel Settings > Local Users and Groups I'm able to successfully add domain ...
0
votes
1answer
25 views

Create shortcut on Desktop via Group Policy, but replace present shortcut

We are running 2008R2 on our PDC. We had a group policy to add the Help Desk Portal shortcut to everyone's desktop via the User config. Do to a split in coverage, we now need 2 different versions. ...
0
votes
0answers
31 views

Force update to Windows 8.1 via Group Policy or similar

I have around 30 computers running Windows 8, some have been updated to 8.1 and others not depending on whether the user has decided to accept the annoying reminder or not. Is it possible to force ...
1
vote
1answer
26 views

Disable “Reply to All” button in Outlook 2013 via Group Policy without disabling the shortcut keys

At my organization, we've used Group Policy to disable the Reply to All button in Outlook 2007 and Outlook 2010. When you use the setting in the ADM files for the respective versions of Office to ...
0
votes
0answers
25 views

How to prevent everyone from adding local admins using GPO

I want to prevent everyone, including local administrators, from adding users to the Administrators group. How can I do this using GPO?
0
votes
0answers
37 views

Windows Login Script ignore UAC

I have a GPO that will launch a Startup Script for a .exe(Install Shield) silent unattended setup. However the user is currently being prompted to allow program due to UAC. I want a true unattended ...
1
vote
0answers
27 views

Applying a local group policy to another user with different username and computer name

A while ago, I setup a dedicated Windows 7 Pro workstation with local group policy applied to a specific guest account. After completion, I made a backup of the applied local group policy setting at ...
0
votes
2answers
47 views

Is it possible to automatically install software when a user logs in through Group Policy?

I am trying to distribute software through group policy, I am able to get this working so that the users can go into Add/Remove Programs and select Install from network and then install the software. ...
1
vote
2answers
48 views

Exclude site from Compability View policy

I have a client who enforces the policy in IE that all local intranet sites be loaded in the Compatibility View. Unfortunately our webapp doesn't support this and gives alot of issues in the comp. ...
0
votes
0answers
23 views

RDP connection to admin account activates group policy

I have a stand alone win XP sp 3 machine with two users. Admin and user. The user has group policy activated and limited access but the admin has full access. For some reason connecting via remote ...
0
votes
0answers
74 views

How to add a startup/shutdown script to the GPO from the command line

I need to add startup and shutdown scripts from a CLI through a Powershell/Python/CMD script. Ideally, I would like to have the same functionality as gpedit.msc, but it is important that the tasks of ...
0
votes
2answers
50 views

How to disable shutdown option at the login screen? [duplicate]

I was able to disable the shutdown option in the start screen using Group Policy but how do I disable the shutdown button at the login screen? I'm using Windows 8.1 Update 1.
0
votes
0answers
74 views

GPO to configure “Ignore other applications that use Dynamic Data Exchange (DDE)”

Using excel 2013 (office 2013 32-bit per MS recommendation) on Win7Pro 64bit in a 2008R2 64bit AD domain. When trying to open an excel 2013 document getting the errorbox "There was a problem sending ...
0
votes
1answer
88 views

“location is not accessible” “access is denied” on CD-ROM, no GPO

I am a domain admin for my work network, and I have a client (mine), that is not able to access it's CD-ROM (note that USB storage is accessible). I have attempted the following: 1) Verified with ...
0
votes
1answer
64 views

How to overcome Local Group Policy Editor's 1023 character limit?

I want to reorder the SSL Cipher Suite Order applied as part of KB2919355, prioritizing the forward secrecy suites above all else. Trying to do this with gpedit at Computer Configuration > ...
0
votes
1answer
41 views

Cache Group Policies for AD Group

I administrate number of Windows 7 machines frozen using Faronics Deep Freeze. Because these machines are kept frozen they do not cache group policies. So every time a user logs in after a reboot ...
0
votes
3answers
59 views

How do I deny local logon but allow it for UAC elevation on Windows 7?

I want to send laptops out in the field, but I do not want them knowing the admin password. So, I will make a local account with admin privelages, but I will allow them to use it only with permission ...
0
votes
1answer
28 views

Starting the Citrix Desktop Service once a specific user logs in

I am working on a package to be released into an enterprise environment which needs to have the Citrix Desktop Service in a suspended state post deployment from CM. In suspending the service post ...
1
vote
1answer
341 views

Is it possible to deploy Internet Explorer 11 (IE11) via WSUS 3.0 SP2?

Internet Explorer 11 is not listed in WSUS, nor can I find the installer on http://catalog.update.microsoft.com/v7/site/Search.aspx?q=Internet+Explorer+11. There's plenty of updates, but not the ...
0
votes
1answer
29 views

Applocker with local accounts

I'm trying to configure Applocker on Windows Server 2008 R2. The users for which I'm applying the policy are local user. I've started the AppId Service and set the enforcing mode for the AppLocker to ...
0
votes
2answers
70 views

How to display “Please Wait” while GPO startup script is running?

I have a GPO that calls a batch file as a startup script (Computer Configuration -> Policies -> Windows Settings -> Scripts -> Startup) which takes a moment to finish what it's supposed to ...
0
votes
1answer
136 views

Active Directory Allow User to Install Only

On my active directory network, I want to satisfy my boss by giving him semi-administrative permissions that will allow him to Install programs as administrator in emergency situations on all ...
0
votes
1answer
73 views

Is it possible to force users to change password periodically in Windows 8.1 Pro and how?

According to the one of the security requirements enforced upon our office, we must start to control / enforce passwords are changed every now and then. Is there a way to force users to change their ...
1
vote
3answers
50 views

Active Directory - GPO Will Not Apply to Group of Machines

I created a GPO to create a few rules for a set of computers, but no matter what I do, running "gpresult /r" yields "Filtering: Denied (Security)" as admin, or if I'm a regular user, it just doesn't ...
-2
votes
2answers
959 views

client pc install software without administrative rights [closed]

I've a PC installed Win 7 and it is on AD domain network. I can just logon as client user, cannot logon as AD admin or local admin. So i cannot install any software. I've talked to my IT department ...
-3
votes
2answers
59 views

Cannot alter system32 under Windows domain enviroment?

I'm using local admin to login to domain workstation under Windows 7. I want to delete opengl32.dll or replace it, but don't have the permission to do so. The location of file is /system32 Where are ...
0
votes
1answer
80 views

Unwanted mapped drive creation from unknown source

I'm stuck in a situation where I have a network drive being mapped when I log in that I don't want. The drive (X:) is a copy of another drive I do want (W:) which is also mapping. I have no need for ...
0
votes
1answer
1k views

Running a batch at logon with Administrator Credentials to install Office C2R network installation

I'm trying to install Office 2013 C2R using GPO. The challenge here is CR2 requires administrator credentials at the same time its need execute cmd.exe with administrator privileges. I'm able to do ...
0
votes
0answers
281 views

How can I import a security template in Windows 7 using command line?

I would like to remotely deploy some specific change in Security Policies to several computers via remote console (SSH). This is my just exported security template .inf file, extracted according ...
0
votes
2answers
96 views

Is it possible to permanently disable group policy updates on Windows 7?

Is it possible to disable updates to the group policy? I see an option to set an update interval to 45 days - can I disable all updates completely? I want to stop stuff from the corporate network from ...
1
vote
1answer
54 views

Stop IE from being started from a URL shortcut

This question is similar to How to disable Explorer.exe for given user?, but with a key difference: I've already blocked IE, mostly. In Group Policy I have added iexplore.exe to the list of ...
-1
votes
2answers
86 views

How to open and modify Group Policy settings in Windows 8.1?

How to open and modify Group Policy settings in Windows 8.1? In Windows 7 it's so easy. Search Group Policy in the Start menu and it's done, but in Windows 8.1 it sucks. Even gpedit.exe and gpedit.msc ...
1
vote
1answer
28 views

Pushing out LGP to many machines without AD

I have a school with 50 Windows machines that I would like to make edits to prevent the kids from changing the wallpapers ect... when they log into a student account. We don't have a Windows Server ...
1
vote
0answers
45 views

Microsoft support document with odd instructions: applying local policies to all users except administrators

I'd like to use the group policy editor to apply restrictions to all user accounts except that of the administrator on a Windows XP computer. In Windows Vista and up, this is easy to do as you're ...
0
votes
2answers
323 views

'SELECT' is not recognized as an internal or external command

I'm trying to apply a wmi filter to a group policy using this command: Select * from Win32_Processor where AddressWidth = '64' This will only apply the GPO to 64 bit machines (all of our machines ...
0
votes
0answers
8 views

How to differentiate between drives mapped via GP and drives mapped manually?

How to differentiate between drives mapped via GP and drives mapped manually. Basically, we have some drives(~10) to be mapped for some domain users. Some users have already done this manually. Any ...
0
votes
0answers
159 views

Hide everything on desktop (taskbar, etc.) except certain icons for one Windows XP user account

I'd like to limit what appears on the desktop of a computer running Windows XP Professional for one user account. The account will be used by young children to play simple educational games in a play ...
1
vote
0answers
504 views

How to automatically download exe files in Internet Explorer 11?

In IE 11 and before downloading files there's the annoying bar (as seen here under Internet Explorer 9 & 10). I've been trying to disable it for a while... I tried enabling in gpedit.msc Turn off ...
-1
votes
1answer
33 views

Forbid files by extension in Windows 7/8

I want to forbid following actions on Windows 7/8: Zip and 7Zip archives to be unpacked/executed , especially when it's a self-extracting archives Exe files to be run dll files Any mentioned ...
2
votes
2answers
255 views

Prohibit computers from showing in 'Network' in Windows Explorer

Can someone tell me how I can prohibit certain users from seeing the whole network in Windows Explorer? We are in an AD based domain with 2003 schema. I need to restrict users from seeing all ...
0
votes
2answers
47 views

How can I keep a folder name from being changed by anyone who doesn't have administrator priviledges?

I need to make the files in a folder and the folder name itself unchangeable by users. I've tried making the folder read only in it's properties but this only makes the files in the folder read only. ...
0
votes
1answer
101 views

Run script using group policy

I want to show an alert box to all users in the domain at regular intervals (example: show a message box on every 1 hour). How can i possible this using GPO. Already i know how to show log on script ...
0
votes
0answers
44 views

Users tab missing in group policy editor

I'm trying to set up machine based on log-in user (disable some of administrative functionality from normal users). I came across with setting Group policy but I couldn't locate Users tab in select ...