Group Policy is a feature of the Microsoft Windows NT family of operating systems that control the working environment of user accounts and computer accounts.

learn more… | top users | synonyms (2)

1
vote
1answer
31 views

Pushing out LGP to many machines without AD

I have a school with 50 Windows machines that I would like to make edits to prevent the kids from changing the wallpapers ect... when they log into a student account. We don't have a Windows Server ...
1
vote
0answers
49 views

Microsoft support document with odd instructions: applying local policies to all users except administrators

I'd like to use the group policy editor to apply restrictions to all user accounts except that of the administrator on a Windows XP computer. In Windows Vista and up, this is easy to do as you're ...
0
votes
2answers
634 views

'SELECT' is not recognized as an internal or external command

I'm trying to apply a wmi filter to a group policy using this command: Select * from Win32_Processor where AddressWidth = '64' This will only apply the GPO to 64 bit machines (all of our machines ...
0
votes
0answers
10 views

How to differentiate between drives mapped via GP and drives mapped manually?

How to differentiate between drives mapped via GP and drives mapped manually. Basically, we have some drives(~10) to be mapped for some domain users. Some users have already done this manually. Any ...
0
votes
0answers
305 views

Hide everything on desktop (taskbar, etc.) except certain icons for one Windows XP user account

I'd like to limit what appears on the desktop of a computer running Windows XP Professional for one user account. The account will be used by young children to play simple educational games in a play ...
1
vote
0answers
806 views

How to automatically download exe files in Internet Explorer 11?

In IE 11 and before downloading files there's the annoying bar (as seen here under Internet Explorer 9 & 10). I've been trying to disable it for a while... I tried enabling in gpedit.msc Turn off ...
-1
votes
1answer
37 views

Forbid files by extension in Windows 7/8

I want to forbid following actions on Windows 7/8: Zip and 7Zip archives to be unpacked/executed , especially when it's a self-extracting archives Exe files to be run dll files Any mentioned ...
2
votes
2answers
631 views

Prohibit computers from showing in 'Network' in Windows Explorer

Can someone tell me how I can prohibit certain users from seeing the whole network in Windows Explorer? We are in an AD based domain with 2003 schema. I need to restrict users from seeing all ...
0
votes
2answers
74 views

How can I keep a folder name from being changed by anyone who doesn't have administrator priviledges?

I need to make the files in a folder and the folder name itself unchangeable by users. I've tried making the folder read only in it's properties but this only makes the files in the folder read only. ...
0
votes
1answer
245 views

Run script using group policy

I want to show an alert box to all users in the domain at regular intervals (example: show a message box on every 1 hour). How can i possible this using GPO. Already i know how to show log on script ...
0
votes
0answers
59 views

Users tab missing in group policy editor

I'm trying to set up machine based on log-in user (disable some of administrative functionality from normal users). I came across with setting Group policy but I couldn't locate Users tab in select ...
1
vote
1answer
15 views

Is it possible to automatically configure GPO on multiple systems?

I'm responsible for managing incoming computers at work and I was wondering if there was a program or way to quickly change Group Policy settings without having to manually change each and every ...
0
votes
0answers
94 views

How to apply created by mmc .msc file

In widnows 7 Professional, I just have created new .msc file using mmc for specifying user (hiding drives in my computer and disabling Ctrl+alt+del as it was written here: How to hide drive for ...
5
votes
0answers
455 views

How do I enforce a unifrom company email font and signature format across Outlook 2007, 10 and 13? [closed]

Our users currently run a mixture of Outlook 2007, 2010 and 2013 to manage emails. We use active directory and our server runs Windows Server 2008 R2. Is there anyway that we can enforce through ...
2
votes
1answer
328 views

C# windows 7 run exe before computer shutdown

I want to run an executable that saves an XML file on a local drive before the computer (running on Windows 7) gets shut down. I know it is possible to run scripts before shutdown. This can be ...
0
votes
0answers
93 views

Shadows in windows 8.1

I know windows 8/8.1 is a flat OS but we still see the window shadows about 1px (very narrow) if we enable that in Advanced System settings --> performance --> Visual effects. So is there any way ...
1
vote
1answer
54 views

How to forbid IE to browse a https site if the cert is not trusted?

I've been Googled for a while, and didn't find any easy way to do this. Basically, I want to make sure the IE users in my network cannot browse possibly phishing site, or those are compromised with a ...
1
vote
1answer
3k views

Allow Microsoft accounts to be optional without Group Policy?

I am trying to use the Windows 8.1 mail client without using a Microsoft account, and I've located this page to find out how. The instructions Microsoft provides involves the use of Group Policy to ...
0
votes
0answers
41 views

How to deploy a visual studio 2010 product key over active directory?

I was able to use the installer and /createTransform to make an administrative install point, but for some reason the product key didn't transfer over when the computers installed VS. Is there a way I ...
0
votes
0answers
26 views

Set a couple of permissions for a specific user

I don't know if I worded my question right, if I haven't I apologize. What I would like to achieve is the following for a specific, non-admin user on my computer: Require admin password for ...
4
votes
2answers
668 views

Does Windows 7 re-enable Windows Firewall after removing from domain?

We have the following GPO's configured for our default domain policies: Computer Configuration\Policies\Windows Settings\Security Settings\Windows Firewall with Advanced Security\Domain Profile ...
0
votes
0answers
164 views

Unable to change policy , its grayed out … :(

I followed this answer suggested by Cy in the post below, but when I tried to apply it I find that my settings are greyed out and I am unable to change the policy, what could be the problem? Windows ...
0
votes
1answer
583 views

Group Policy Confusion (Printers configured under users?)

I'm befuddled. Active directory usually makes a bit more sense than this. The Problem: Referencing the images below (with private info removed), it appears that Printer Connections are being defined ...
2
votes
0answers
44 views

Is there a registry key or group policy to disable the “If you change a file name extension, the file might become unusable” warning in Windows? [duplicate]

In Windows, when you change a file extension, you get a warning If you change a file name extension, the file might become unusable Are you sure you want to change it? Is there a ...
1
vote
0answers
109 views

I want to be able to have a daily task run showing the times users log on and off

GOAL: I want to be able to have a daily task run showing the times users log on and off ENVIRONMENT: Windows 2008R2 domain ACTIONS SO FAR: I have enabled Account Auditing via: start -> ...
0
votes
1answer
52 views

how to change the default open-with program to a program on the second disk

I have a 250GB HDD for my system and a 60GB SSD using a SATA port. I installed most of my applications on the SSD. There's a strange thing though. I can not change the default open-with program to a ...
0
votes
0answers
49 views

Is it possible for Outdated Infiniband Firmware to prevent Firewall Startup

My general question: Is it feasible for a NIC Firmware to prevent Windows OS Firewall services from successfully loading upon bootup? Explanation of situation: I have been experiencing the darnest ...
0
votes
1answer
322 views

Applying local GPOs to a computer disconnected from domain controller

I want to apply local group policies to a number of machines. To apply group policies on a computer one can run this command: GPUPDATE However, if a computer is setup on a domain, but is ...
0
votes
1answer
990 views

Advanced Security Audit Policy Not Applying To Win7

Issue I am trying to apply a GPO with Advanced Security Audit Policy configurations to a Windows 7 client but the setting are not applying. I double-checked my work using this article - ...
2
votes
3answers
453 views

Group Policy testing

How do I go about testing a Group Policy before applying it to an entire OU? I currently have an OU with many users within the OU. I want to test the Group Policy on one of these users before ...
1
vote
1answer
701 views

Group policy - restart specific service if it stops

If you want to restart a service if it fails on a single computer this is done by changing a setting on the service in services.msc. But the same option does not seem to exist when you want to do the ...
0
votes
0answers
135 views

Software Policy Restrictions on one account affects a different account

I have Windows 7 Ultimate 32-bit installed on an SBC, on which I have created an auto-logon account (Standard user), which I am trying to lock down. I have created a Local Group Policy Object (LGPO) ...
0
votes
0answers
177 views

Group Policy settings for the Windows Firewall are sometimes ignored on startup

We deploy our Windows Firewall settings (among other security settings) as local policies to our machines. They are not part of a domain. There is a weekly restart configured for each machine, ...
1
vote
1answer
69 views

Debian User can't overwrite, yet belongs to Group

In Debian I have a user called jesse I have a group called www-data for Apache2 I have a folder called /htdocs htdocs belongs to user:group of www-data:www-data I do not understand why the user ...
0
votes
1answer
113 views

Grant a user access to directories shared by root (mod: 770)

I want to grant a user (username: eddie) access to all directories (with mod 770) shared by root (myself). I do it this way: groups root (here comes a list of groups in which root user is) usermod ...
0
votes
1answer
3k views

Can not enable Windows SmartScreen. Says: “this setting is managed by your system administrator”

I can not enable my Windows SmartScreen on Windows 8.1 My PC is not joined to any domain. I'm not talking about SmartScreen feature available in IE but the feature that is available in File ...
2
votes
1answer
2k views

Disable “Remember my credentials” on Windows 7 Home Premium

I would like to disable the ability to save network passwords (when connecting to \computer\share) on Windows 7 Home Premium. On Windows XP there was a registry setting to disable the checkbox ...
1
vote
0answers
2k views

Windows 7 Gpupdate failed

I tried to run gpupdate on a local machine but I keep getting the failed error message I have tried following Remove from domain and re-add it again Check the dns setting all correct (Even release ...
0
votes
2answers
558 views

How can I add some websites link to browser's favorite(bookmark) for users in domain using batch script?

I wanna add some website's link into all users bookmark(favorite in IE) automatically when user log in to windows using batch script or something like that? Is there any policy in windows server 2003 ...
0
votes
2answers
2k views

Group Policy does not open in windows 8

gpedit.msc in run or search does not opens group policy editor. Instead it shows an error message that it cannot find 'gpedit.msc'
5
votes
1answer
2k views

Unable to completely disable Offline Files feature for Windows 7 in GPO

I have been trying to completely disable the offline files feature for all the W7 PCs on the domain that I manage. I have been unable to. I do not want this feature as it creates unwanted, largely ...
1
vote
0answers
116 views

Is auditing possible on Windows XP Home Edition?

Although Windows XP Professional has (a lot more) control over Security issues, Windows XP Home Edition does allow the regular user to probe around and allows to set Security settings on folders and ...
0
votes
2answers
2k views

Allow one Windows user to only execute 2 applications

I'm using Windows 8 Pro. I'm trying to create a very limited Windows account. The account will only have: Remote Desktop Access Shell replaced by our own in-house application Access to the one FTP ...
1
vote
1answer
235 views

Power scheme not applying in Group Policy

I've created a new GPO and created a power scheme under computer configuration. I've disabled the User configuration part of this GPO. In this power scheme I have the action selected to create a new ...
0
votes
1answer
484 views

Mapping Network Drive To Computer OU With GPO

I have a computer that I want to map a network drive to no matter who logs into it. I have crated a security group linking the member to the computer. I created a GPO and added the security group to ...
2
votes
1answer
1k views

How do I remove or disable the search box in windows explorer on Windows 2008 R2?

I need a way to disable the search box from Windows Explorer. I've found a way to do this with the Start menu, but not in Windows Explorer.
1
vote
1answer
921 views

Deny running batch files

How can I deny users of my network to run any batch files in their user level? I want it to return them an access denied message OR delete the script entirely. Any ideas?
0
votes
1answer
345 views

Using Win Server 2008 Group Policy to create printer and default colour

I have created a GPO to create a printer & default it from a shared printer on the server when logged in to domain. The shared printer on the server is configured to default colour: Black & ...
0
votes
1answer
100 views

Windows 2008 R2 App Locker define times program is opened

I am testing AppLock currently. I have create a GroupPolicyObject and added a Executable rule. The .exe I am referencing for this test is Calc.exe . How would I define that I only want want two ...
1
vote
1answer
369 views

Windows 2008 Server GPO Add personal shares

Right now each employee has their own share on the file server that uses their first initial of their first name and their last name (ex. jsmith). Of course John Simth has to be logged on to access ...