Group Policy is a feature of the Microsoft Windows NT family of operating systems that control the working environment of user accounts and computer accounts.

learn more… | top users | synonyms (2)

0
votes
1answer
102 views

Starting the Citrix Desktop Service once a specific user logs in

I am working on a package to be released into an enterprise environment which needs to have the Citrix Desktop Service in a suspended state post deployment from CM. In suspending the service post ...
1
vote
1answer
3k views

Is it possible to deploy Internet Explorer 11 (IE11) via WSUS 3.0 SP2?

Internet Explorer 11 is not listed in WSUS, nor can I find the installer on http://catalog.update.microsoft.com/v7/site/Search.aspx?q=Internet+Explorer+11. There's plenty of updates, but not the ...
0
votes
1answer
64 views

Applocker with local accounts

I'm trying to configure Applocker on Windows Server 2008 R2. The users for which I'm applying the policy are local user. I've started the AppId Service and set the enforcing mode for the AppLocker to ...
0
votes
3answers
1k views

How to display “Please Wait” while GPO startup script is running?

I have a GPO that calls a batch file as a startup script (Computer Configuration -> Policies -> Windows Settings -> Scripts -> Startup) which takes a moment to finish what it's supposed to ...
0
votes
1answer
3k views

Active Directory Allow User to Install Only

On my active directory network, I want to satisfy my boss by giving him semi-administrative permissions that will allow him to Install programs as administrator in emergency situations on all ...
0
votes
1answer
439 views

Is it possible to force users to change password periodically in Windows 8.1 Pro and how?

According to the one of the security requirements enforced upon our office, we must start to control / enforce passwords are changed every now and then. Is there a way to force users to change their ...
1
vote
3answers
75 views

Active Directory - GPO Will Not Apply to Group of Machines

I created a GPO to create a few rules for a set of computers, but no matter what I do, running "gpresult /r" yields "Filtering: Denied (Security)" as admin, or if I'm a regular user, it just doesn't ...
-2
votes
2answers
5k views

client pc install software without administrative rights [closed]

I've a PC installed Win 7 and it is on AD domain network. I can just logon as client user, cannot logon as AD admin or local admin. So i cannot install any software. I've talked to my IT department ...
-3
votes
2answers
141 views

Cannot alter system32 under Windows domain enviroment?

I'm using local admin to login to domain workstation under Windows 7. I want to delete opengl32.dll or replace it, but don't have the permission to do so. The location of file is /system32 Where are ...
0
votes
1answer
220 views

Unwanted mapped drive creation from unknown source

I'm stuck in a situation where I have a network drive being mapped when I log in that I don't want. The drive (X:) is a copy of another drive I do want (W:) which is also mapping. I have no need for ...
0
votes
1answer
10k views

Running a batch at logon with Administrator Credentials to install Office C2R network installation

I'm trying to install Office 2013 C2R using GPO. The challenge here is CR2 requires administrator credentials at the same time its need execute cmd.exe with administrator privileges. I'm able to do ...
1
vote
0answers
924 views

How can I import a security template in Windows 7 using command line?

I would like to remotely deploy some specific change in Security Policies to several computers via remote console (SSH). This is my just exported security template .inf file, extracted according ...
2
votes
3answers
1k views

Is it possible to permanently disable group policy updates on Windows 7?

Is it possible to disable updates to the group policy? I see an option to set an update interval to 45 days - can I disable all updates completely? I want to stop stuff from the corporate network from ...
1
vote
1answer
74 views

Stop IE from being started from a URL shortcut

This question is similar to How to disable Explorer.exe for given user?, but with a key difference: I've already blocked IE, mostly. In Group Policy I have added iexplore.exe to the list of ...
-1
votes
2answers
239 views

How to open and modify Group Policy settings in Windows 8.1?

How to open and modify Group Policy settings in Windows 8.1? In Windows 7 it's so easy. Search Group Policy in the Start menu and it's done, but in Windows 8.1 it sucks. Even gpedit.exe and gpedit.msc ...
1
vote
1answer
31 views

Pushing out LGP to many machines without AD

I have a school with 50 Windows machines that I would like to make edits to prevent the kids from changing the wallpapers ect... when they log into a student account. We don't have a Windows Server ...
1
vote
0answers
51 views

Microsoft support document with odd instructions: applying local policies to all users except administrators

I'd like to use the group policy editor to apply restrictions to all user accounts except that of the administrator on a Windows XP computer. In Windows Vista and up, this is easy to do as you're ...
1
vote
2answers
744 views

'SELECT' is not recognized as an internal or external command

I'm trying to apply a wmi filter to a group policy using this command: Select * from Win32_Processor where AddressWidth = '64' This will only apply the GPO to 64 bit machines (all of our machines ...
0
votes
0answers
429 views

Hide everything on desktop (taskbar, etc.) except certain icons for one Windows XP user account

I'd like to limit what appears on the desktop of a computer running Windows XP Professional for one user account. The account will be used by young children to play simple educational games in a play ...
1
vote
0answers
954 views

How to automatically download exe files in Internet Explorer 11?

In IE 11 and before downloading files there's the annoying bar (as seen here under Internet Explorer 9 & 10). I've been trying to disable it for a while... I tried enabling in gpedit.msc Turn off ...
-1
votes
1answer
37 views

Forbid files by extension in Windows 7/8

I want to forbid following actions on Windows 7/8: Zip and 7Zip archives to be unpacked/executed , especially when it's a self-extracting archives Exe files to be run dll files Any mentioned ...
2
votes
3answers
879 views

Prohibit computers from showing in 'Network' in Windows Explorer

Can someone tell me how I can prohibit certain users from seeing the whole network in Windows Explorer? We are in an AD based domain with 2003 schema. I need to restrict users from seeing all ...
0
votes
2answers
87 views

How can I keep a folder name from being changed by anyone who doesn't have administrator priviledges?

I need to make the files in a folder and the folder name itself unchangeable by users. I've tried making the folder read only in it's properties but this only makes the files in the folder read only. ...
0
votes
1answer
335 views

Run script using group policy

I want to show an alert box to all users in the domain at regular intervals (example: show a message box on every 1 hour). How can i possible this using GPO. Already i know how to show log on script ...
1
vote
1answer
16 views

Is it possible to automatically configure GPO on multiple systems?

I'm responsible for managing incoming computers at work and I was wondering if there was a program or way to quickly change Group Policy settings without having to manually change each and every ...
0
votes
0answers
114 views

How to apply created by mmc .msc file

In widnows 7 Professional, I just have created new .msc file using mmc for specifying user (hiding drives in my computer and disabling Ctrl+alt+del as it was written here: How to hide drive for ...
5
votes
0answers
555 views

How do I enforce a unifrom company email font and signature format across Outlook 2007, 10 and 13? [closed]

Our users currently run a mixture of Outlook 2007, 2010 and 2013 to manage emails. We use active directory and our server runs Windows Server 2008 R2. Is there anyway that we can enforce through ...
2
votes
1answer
441 views

C# windows 7 run exe before computer shutdown

I want to run an executable that saves an XML file on a local drive before the computer (running on Windows 7) gets shut down. I know it is possible to run scripts before shutdown. This can be ...
1
vote
2answers
68 views

How to forbid IE to browse a https site if the cert is not trusted?

I've been Googled for a while, and didn't find any easy way to do this. Basically, I want to make sure the IE users in my network cannot browse possibly phishing site, or those are compromised with a ...
1
vote
1answer
3k views

Allow Microsoft accounts to be optional without Group Policy?

I am trying to use the Windows 8.1 mail client without using a Microsoft account, and I've located this page to find out how. The instructions Microsoft provides involves the use of Group Policy to ...
4
votes
2answers
881 views

Does Windows 7 re-enable Windows Firewall after removing from domain?

We have the following GPO's configured for our default domain policies: Computer Configuration\Policies\Windows Settings\Security Settings\Windows Firewall with Advanced Security\Domain Profile ...
0
votes
0answers
194 views

Unable to change policy , its grayed out … :(

I followed this answer suggested by Cy in the post below, but when I tried to apply it I find that my settings are greyed out and I am unable to change the policy, what could be the problem? Windows ...
0
votes
1answer
822 views

Group Policy Confusion (Printers configured under users?)

I'm befuddled. Active directory usually makes a bit more sense than this. The Problem: Referencing the images below (with private info removed), it appears that Printer Connections are being defined ...
2
votes
0answers
44 views

Is there a registry key or group policy to disable the “If you change a file name extension, the file might become unusable” warning in Windows? [duplicate]

In Windows, when you change a file extension, you get a warning If you change a file name extension, the file might become unusable Are you sure you want to change it? Is there a ...
1
vote
0answers
115 views

I want to be able to have a daily task run showing the times users log on and off

GOAL: I want to be able to have a daily task run showing the times users log on and off ENVIRONMENT: Windows 2008R2 domain ACTIONS SO FAR: I have enabled Account Auditing via: start -> ...
0
votes
1answer
58 views

how to change the default open-with program to a program on the second disk

I have a 250GB HDD for my system and a 60GB SSD using a SATA port. I installed most of my applications on the SSD. There's a strange thing though. I can not change the default open-with program to a ...
0
votes
0answers
55 views

Is it possible for Outdated Infiniband Firmware to prevent Firewall Startup

My general question: Is it feasible for a NIC Firmware to prevent Windows OS Firewall services from successfully loading upon bootup? Explanation of situation: I have been experiencing the darnest ...
0
votes
1answer
360 views

Applying local GPOs to a computer disconnected from domain controller

I want to apply local group policies to a number of machines. To apply group policies on a computer one can run this command: GPUPDATE However, if a computer is setup on a domain, but is ...
0
votes
1answer
1k views

Advanced Security Audit Policy Not Applying To Win7

Issue I am trying to apply a GPO with Advanced Security Audit Policy configurations to a Windows 7 client but the setting are not applying. I double-checked my work using this article - ...
2
votes
3answers
753 views

Group Policy testing

How do I go about testing a Group Policy before applying it to an entire OU? I currently have an OU with many users within the OU. I want to test the Group Policy on one of these users before ...
1
vote
1answer
960 views

Group policy - restart specific service if it stops

If you want to restart a service if it fails on a single computer this is done by changing a setting on the service in services.msc. But the same option does not seem to exist when you want to do the ...
0
votes
1answer
215 views

Group Policy settings for the Windows Firewall are sometimes ignored on startup

We deploy our Windows Firewall settings (among other security settings) as local policies to our machines. They are not part of a domain. There is a weekly restart configured for each machine, ...
1
vote
1answer
75 views

Debian User can't overwrite, yet belongs to Group

In Debian I have a user called jesse I have a group called www-data for Apache2 I have a folder called /htdocs htdocs belongs to user:group of www-data:www-data I do not understand why the user ...
0
votes
1answer
139 views

Grant a user access to directories shared by root (mod: 770)

I want to grant a user (username: eddie) access to all directories (with mod 770) shared by root (myself). I do it this way: groups root (here comes a list of groups in which root user is) usermod ...
1
vote
1answer
4k views

Can not enable Windows SmartScreen. Says: “this setting is managed by your system administrator”

I can not enable my Windows SmartScreen on Windows 8.1 My PC is not joined to any domain. I'm not talking about SmartScreen feature available in IE but the feature that is available in File ...
2
votes
1answer
2k views

Disable “Remember my credentials” on Windows 7 Home Premium

I would like to disable the ability to save network passwords (when connecting to \computer\share) on Windows 7 Home Premium. On Windows XP there was a registry setting to disable the checkbox ...
1
vote
0answers
2k views

Windows 7 Gpupdate failed

I tried to run gpupdate on a local machine but I keep getting the failed error message I have tried following Remove from domain and re-add it again Check the dns setting all correct (Even release ...
0
votes
2answers
688 views

How can I add some websites link to browser's favorite(bookmark) for users in domain using batch script?

I wanna add some website's link into all users bookmark(favorite in IE) automatically when user log in to windows using batch script or something like that? Is there any policy in windows server 2003 ...
0
votes
2answers
2k views

Group Policy does not open in windows 8

gpedit.msc in run or search does not opens group policy editor. Instead it shows an error message that it cannot find 'gpedit.msc'
5
votes
1answer
2k views

Unable to completely disable Offline Files feature for Windows 7 in GPO

I have been trying to completely disable the offline files feature for all the W7 PCs on the domain that I manage. I have been unable to. I do not want this feature as it creates unwanted, largely ...