0
votes
1answer
23 views

How to return a GPO to Not Configured?

Recently a new piece of software started being included in our corporate Windows 7 image that, during silent install during the deployment process with Windows Deployment Workbench, sets the Windows ...
0
votes
2answers
35 views

Connect to VPN before Windows 7 starts

I am building a laptop with Windows 7 SP1 x64 which will be used by a remote user. The laptop needs to be locked down so they can only do their work and nothing else. It will have a VPN connection ...
3
votes
0answers
26 views

Difference between Local Policy and Registry Key

I would like to understand the difference between this registry key, MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\MaximumPasswordAge=4,30 and the local computer policy settings via ...
0
votes
1answer
26 views

Batch script to only run command for 1 machine

I have a Windows GPO that runs a batch file startup script to disable NetBIOS. It normally looks like this: wmic nicconfig where (TcpipNetbiosOptions!=null and TcpipNetbiosOptions!=2) call ...
0
votes
0answers
32 views

Force update to Windows 8.1 via Group Policy or similar

I have around 30 computers running Windows 8, some have been updated to 8.1 and others not depending on whether the user has decided to accept the annoying reminder or not. Is it possible to force ...
1
vote
0answers
27 views

Applying a local group policy to another user with different username and computer name

A while ago, I setup a dedicated Windows 7 Pro workstation with local group policy applied to a specific guest account. After completion, I made a backup of the applied local group policy setting at ...
0
votes
0answers
74 views

How to add a startup/shutdown script to the GPO from the command line

I need to add startup and shutdown scripts from a CLI through a Powershell/Python/CMD script. Ideally, I would like to have the same functionality as gpedit.msc, but it is important that the tasks of ...
0
votes
1answer
64 views

How to overcome Local Group Policy Editor's 1023 character limit?

I want to reorder the SSL Cipher Suite Order applied as part of KB2919355, prioritizing the forward secrecy suites above all else. Trying to do this with gpedit at Computer Configuration > ...
0
votes
1answer
73 views

Is it possible to force users to change password periodically in Windows 8.1 Pro and how?

According to the one of the security requirements enforced upon our office, we must start to control / enforce passwords are changed every now and then. Is there a way to force users to change their ...
1
vote
1answer
54 views

Stop IE from being started from a URL shortcut

This question is similar to How to disable Explorer.exe for given user?, but with a key difference: I've already blocked IE, mostly. In Group Policy I have added iexplore.exe to the list of ...
-1
votes
2answers
86 views

How to open and modify Group Policy settings in Windows 8.1?

How to open and modify Group Policy settings in Windows 8.1? In Windows 7 it's so easy. Search Group Policy in the Start menu and it's done, but in Windows 8.1 it sucks. Even gpedit.exe and gpedit.msc ...
1
vote
1answer
28 views

Pushing out LGP to many machines without AD

I have a school with 50 Windows machines that I would like to make edits to prevent the kids from changing the wallpapers ect... when they log into a student account. We don't have a Windows Server ...
1
vote
0answers
504 views

How to automatically download exe files in Internet Explorer 11?

In IE 11 and before downloading files there's the annoying bar (as seen here under Internet Explorer 9 & 10). I've been trying to disable it for a while... I tried enabling in gpedit.msc Turn off ...
2
votes
2answers
257 views

Prohibit computers from showing in 'Network' in Windows Explorer

Can someone tell me how I can prohibit certain users from seeing the whole network in Windows Explorer? We are in an AD based domain with 2003 schema. I need to restrict users from seeing all ...
0
votes
2answers
47 views

How can I keep a folder name from being changed by anyone who doesn't have administrator priviledges?

I need to make the files in a folder and the folder name itself unchangeable by users. I've tried making the folder read only in it's properties but this only makes the files in the folder read only. ...
0
votes
1answer
101 views

Run script using group policy

I want to show an alert box to all users in the domain at regular intervals (example: show a message box on every 1 hour). How can i possible this using GPO. Already i know how to show log on script ...
0
votes
0answers
44 views

Users tab missing in group policy editor

I'm trying to set up machine based on log-in user (disable some of administrative functionality from normal users). I came across with setting Group policy but I couldn't locate Users tab in select ...
1
vote
1answer
15 views

Is it possible to automatically configure GPO on multiple systems?

I'm responsible for managing incoming computers at work and I was wondering if there was a program or way to quickly change Group Policy settings without having to manually change each and every ...
1
vote
1answer
1k views

Allow Microsoft accounts to be optional without Group Policy?

I am trying to use the Windows 8.1 mail client without using a Microsoft account, and I've located this page to find out how. The instructions Microsoft provides involves the use of Group Policy to ...
0
votes
0answers
161 views

Group Policy Confusion (Printers configured under users?)

I'm befuddled. Active directory usually makes a bit more sense than this. The Problem: Referencing the images below (with private info removed), it appears that Printer Connections are being defined ...
2
votes
0answers
43 views

Is there a registry key or group policy to disable the “If you change a file name extension, the file might become unusable” warning in Windows? [duplicate]

In Windows, when you change a file extension, you get a warning If you change a file name extension, the file might become unusable Are you sure you want to change it? Is there a ...
1
vote
0answers
98 views

I want to be able to have a daily task run showing the times users log on and off

GOAL: I want to be able to have a daily task run showing the times users log on and off ENVIRONMENT: Windows 2008R2 domain ACTIONS SO FAR: I have enabled Account Auditing via: start -> ...
1
vote
1answer
278 views

Group policy - restart specific service if it stops

If you want to restart a service if it fails on a single computer this is done by changing a setting on the service in services.msc. But the same option does not seem to exist when you want to do the ...
0
votes
0answers
142 views

Group Policy settings for the Windows Firewall are sometimes ignored on startup

We deploy our Windows Firewall settings (among other security settings) as local policies to our machines. They are not part of a domain. There is a weekly restart configured for each machine, ...
0
votes
1answer
2k views

Can not enable Windows SmartScreen. Says: “this setting is managed by your system administrator”

I can not enable my Windows SmartScreen on Windows 8.1 My PC is not joined to any domain. I'm not talking about SmartScreen feature available in IE but the feature that is available in File ...
2
votes
1answer
1k views

Disable “Remember my credentials” on Windows 7 Home Premium

I would like to disable the ability to save network passwords (when connecting to \computer\share) on Windows 7 Home Premium. On Windows XP there was a registry setting to disable the checkbox ...
0
votes
2answers
330 views

How can I add some websites link to browser's favorite(bookmark) for users in domain using batch script?

I wanna add some website's link into all users bookmark(favorite in IE) automatically when user log in to windows using batch script or something like that? Is there any policy in windows server 2003 ...
0
votes
0answers
233 views

What Windows specific permissions does the Performance Log Users built-in group bestow?

I am trying to find out what specifically the Windows built-in Performance Log Users group gives permission wise. Group policy settings? Registry access? Some sort of local file system access? I am ...
-1
votes
1answer
2k views

Does disabling the 'Windows Firewall' service actually work?

When I go the 'Windows Firewall' section of the Windows Control Panel, I'm told "For your security, some settings are managed by your system administrator. If I click 'Turn Windows Firewall on or ...
0
votes
1answer
1k views

Configuring group policy to bypass proxy server for local addresses and adding a domain to trusted root certificate authorities

I am an intern who has just started in a new company. I have never used the group policy editor before. However I suggested that I believed it is possible to accomplish the two tasks we wish using the ...
0
votes
1answer
192 views

Cannot Find A Group Policy That I'd Like To Disable

There's an Active Directory group policy specific to Google Chrome in place to enforce: startup URLs blocking auto-updating (locking to a particular version) This policy writes entries to ...
2
votes
1answer
324 views

Editing GPO Programmatically

I have a batch file that I'm using to update a large group of computers. This batch file works, for the most part. Where it fails is when the computer has been set up to "Disable Active Desktop" under ...
2
votes
0answers
323 views

How to enable CredSSP

I am trying to use the -Authentication CredSSP switch when entering with PowerShell (2.0) in order to remotely launch a Script that can write to files or set up new PSDrives. I get an error when I ...
0
votes
0answers
2k views

domain gpo logon script not executing for administrators

I have a Windows 2008 DC with a logon script in the default policy. This script has been tested and works if executed manually for admins and users. However, when I login with an administrator it ...
1
vote
3answers
887 views

Can I prevent users from closing a web browser window?

I have a Windows 8 machine that will be setup in a training room. The training modules run through a web browser. I don't want the users to be able to close the browser or open any other programs, so ...
0
votes
1answer
102 views

Is it possible to set the DNS server by user?

Is it possible to change the DNS server and flush the DNS cache based on the user that is logged in via a Windows group policy or login script?
0
votes
0answers
290 views

Mixing Manual and GPO Mapped Drives: Manual drives not reconnecting after logoff / on or reboot

I really have spent some serious time looking for this answer before posting here. Basically, I have a GPO set up to map drives in our 2008R2 domain. It works flawlessly on our RDS server remote ...
1
vote
1answer
134 views

Find out what Windows domain policies cause certain restrictions on a workstation

I work within a team of developers in a large bank. We all have full admin rights on our win7 workstations. The Windows infrastructure in our company is getting an overhaul, so there seems to be ...
1
vote
0answers
42 views

Force shutdown from a remote system [duplicate]

Possible Duplicate: Shutdown whole network computers What I want to do is to allow EVERYONE Force shutdown from a remote system control. But, I don't want to do this manually because ...
4
votes
1answer
167 views

Require user to accept terms on login

You know when you log on to a work or public computer, and they have a user terms agreement that you need to accept in order to use the system? How do I set this up on windows XP and windows 7?
2
votes
1answer
8k views

ScreenSaver Group Policy Not Working

UPDATE: In the meantime, I've set Password protect the screen saver to Not configured and Prevent changing screen saver to Enabled. I'm still unable to determine why setting Password protect the ...
1
vote
1answer
646 views

Group policy install on a per user basis

This is a group policy question for Windows. I have developed an Outlook add-in using VSTO 4.0 in VS 2010. I currently have the issue whereby the add-in can only be installed on a per user basis as ...
1
vote
1answer
511 views

Where can I find information on group policy compatibility between Windows OS versions?

I am having trouble trying to find information on group policies compatibility between different versions of Windows. I have to find this information for a school assignment I need to complete. Does ...
1
vote
6answers
30k views

Windows 7: Disable Lock Workstation After 10 Minutes Using Group Policy

On my Windows 7 PC the system becomes locked after 10 minutes of inactivity. Usually I would find this setting next to the screen-saver configuration. The setting is grayed out, however. I think this ...
1
vote
1answer
324 views

Run Windows Server 2011 in kiosk mode and hide windows all together

I want to configure windows on boxes that I can ship to customers that needs to be deprived of any "windows" brand. In fact, I created a web server running on this windows box to configure the parts ...
0
votes
0answers
45 views

Unable to change Windows file permissions [duplicate]

Possible Duplicate: All folders are Read-Only (Windows) My work computer runs Windows Vista, on a typical Windows network (not sure which version of Windows server). I am the owner of my ...
2
votes
2answers
4k views

Disable Access to Drives for Limited Users in Windows

How can I restrict users from accessing certain drives or partitions for Limited User Account in Windows XP/Vista/7. Kinldy guide me, there was something about Group User policy but guide me in steps ...
2
votes
2answers
2k views

Office 2007/2010 My Places Bar

I'm in the process of rolling out Outlook 2010 to all the users in our organization in our Citrix farm environment. Its going pretty smoothly except for one snagging problem. When users try to ...
1
vote
1answer
904 views

Running Elevated Logon Script

I have to run a powershell script every time a user logs on. This script needs to be run elevated. Is there a way to do this with out prompting the user. I am currently running the script using on ...
2
votes
1answer
2k views

Is there anyway to remove denied permissions from a group for a folder if I dont have access?

I'm hoping the answer is yes. Due to my ignorance, I denied the 'Everyone' group all read access from one of my folders containing needed information because I did not want people on my network being ...