Group Policy is a feature of the Microsoft Windows NT family of operating systems that control the working environment of user accounts and computer accounts.

learn more… | top users | synonyms (2)

1
vote
1answer
162 views

Create Local Policy for one Domain User on one PC

Basically I am trying to restrict a specific domain user's actions, such as setting the screensaver, on a windows 7 PC. I've searched round the web only to be confronted with lots of help for ...
0
votes
1answer
224 views

Windows 7: Edit group policy from command line [duplicate]

I'm writing an installer and need to change the All Users' wallpaper. I can do this from the group policy editor GUI, but need to do so from my installer. I can't just edit the registry as it gets ...
0
votes
1answer
2k views

Prevent users from installing Windows Updates

This may belong on ServerFault, but Ill start here and if it gets moved, fine Im trying to find a solution that prevents users from installing Windows/Automatic Updates on their workstations/laptops. ...
0
votes
1answer
190 views

Cannot Find A Group Policy That I'd Like To Disable

There's an Active Directory group policy specific to Google Chrome in place to enforce: startup URLs blocking auto-updating (locking to a particular version) This policy writes entries to ...
1
vote
1answer
31 views

Protecting group policy

I want to protect my group policy, but I don't have any idea about how to do that. Is there anybody who can help? I want to create a policy to disable certain groups from editing defined policies, ...
2
votes
2answers
1k views

How do I grant a user permission to add local users in Windows 7?

How do I grant a local user account the permission to add other local users in Windows 7 Professional? The important point is, that the local user who should be able to create new accounts must not ...
0
votes
0answers
1k views

Disable USB mass storage via group policy based on the time of day?

I would like to disable USB mass storage for a group of users during specific hours of the day (lets say, 9AM to 5PM). I know that with Windows Server 2008, there is a group policy that will disable ...
2
votes
1answer
324 views

Editing GPO Programmatically

I have a batch file that I'm using to update a large group of computers. This batch file works, for the most part. Where it fails is when the computer has been set up to "Disable Active Desktop" under ...
0
votes
1answer
39 views

Can I use Group Policy or another method to determine which Services startup by User or Group?

We have an application that we use that loads as a service on logon, and I'd like to disable the service from running when an Administrator logs in to their account. I've done some research and ...
0
votes
1answer
504 views

Change desktop background Windows 7

Due to group policies enforced on our systems, we can't change the background of our desktop. The IE's "Set as desktop background" is working, but the change is not permanent. If anyone can tell a ...
1
vote
0answers
42 views

Can I add ADMX files via symbolic links?

Is it possible to add Group Policy templates (ADMX files) on a local Windows 7 machine by creating a symbolic link (soft link) in the C:\Windows\PolicyDefinitions folder that points to an ADMX file ...
1
vote
2answers
773 views

How to administrate computer locked down with group policy?

I have an XP machine where I want to lock it down and prevent what users can do on it. I have disabled the control panel (along with a bunch of other stuff) using group policy. This way the user ...
2
votes
0answers
322 views

How to enable CredSSP

I am trying to use the -Authentication CredSSP switch when entering with PowerShell (2.0) in order to remotely launch a Script that can write to files or set up new PSDrives. I get an error when I ...
1
vote
0answers
401 views

Windows Network Bridge Connections Greyed Out

I can bridge the connection under administrator account. I have disabled the prohibit installation and configuration of Network Bridge on your DNS domain network Group Policy setting. The option to ...
2
votes
1answer
71 views

Shared folders and permissions (windows 7)

I am creating a few files for particular users and groups with limited permissions, basically read and execute. So, its works just fine. The problem is that when a user is trying to delete a file ...
2
votes
1answer
154 views

Why is the add user or group button not available on the group policy editor for Remote Desktop Services Properties?

I have a Windows 2008 R2 Server, and I'm trying to give a domain user who is NOT domain admin the rights to login to this box via RDC. I'm logged in as a domain admin. Here's where I am: When I ...
5
votes
3answers
4k views

Windows 7 - How to run a script at shutdown but not at logoff

I was wondering if anyone knows how to configure a Windows 7 x64 Enterprise install that is on a domain to run a script if the user attempts to shutdown the computer - but I dont want the script to ...
0
votes
0answers
259 views

Restrict admin shares

My users need local admin rights but I'd like to restrict the admin shares (c$) to domain admins only. I was reading about adding nt authority\interactive to the local administrator group, but i don't ...
0
votes
1answer
76 views

When setup is removed from windows installer cache?

I observe strange behavior on several notebooks. All of them have application installed as an MSI package, through GPO deployment, from the network share. But when this network share is inaccessible, ...
0
votes
1answer
954 views

How can I create a bouncing logo screensaver?

I'm looking to create a basic screensaver, background set to a specific color, with a specific image (or images) bouncing around on the computer screen. For reference, the majority of the computers ...
2
votes
1answer
956 views

Mapped Network Drives not available in Citrix application depending on local machine

It's simpler than the title suggests. When I log into a remote application via Citrix XenApp from Box A (Windows XP) and Box B (Windows 7) I can see all local physical disks and locally mapped ...
0
votes
0answers
249 views

Remove Drive Map GPOs that are no longer being applied

I have a Windows 7 64-bit Pro laptop that had some GPOs on it (user and computer) for various things including some drive mappings that the laptop won't be able to access from its normal location. I ...
0
votes
0answers
2k views

domain gpo logon script not executing for administrators

I have a Windows 2008 DC with a logon script in the default policy. This script has been tested and works if executed manually for admins and users. However, when I login with an administrator it ...
2
votes
1answer
103 views

List modified policy options

In Windows 8, how can I find out what local policies I have modified from their default No Set values? Basically, I've tinkered with my Windows 8 laptop until i finally like it after 3 or 4 months of ...
0
votes
1answer
362 views

can not apply network map drive from “windows server 2008r2” on “windows 8” client

We recently migrated our client machines to Windows 8 but the server still runs Windows 2008r2. When we are trying to apply create network drive from the server using GPO, it does not reflect on the ...
1
vote
3answers
881 views

Can I prevent users from closing a web browser window?

I have a Windows 8 machine that will be setup in a training room. The training modules run through a web browser. I don't want the users to be able to close the browser or open any other programs, so ...
0
votes
1answer
101 views

Is it possible to set the DNS server by user?

Is it possible to change the DNS server and flush the DNS cache based on the user that is logged in via a Windows group policy or login script?
0
votes
0answers
421 views

Override Network Administration Settings

Is there a way to override settings set by a network administrator for Windows? I'm having all kinds of problems updating and sharing WiFi because it's "been disabled by the network administrator." ...
1
vote
1answer
695 views

W8 Disabling Corporate Security Policies

On my home PC I installed W8 several months ago - no problems. When I used the metro/tile interface to access my exchange mail account I was forced to accept a security policy from my employer (I ...
2
votes
1answer
1k views

How to overwrite a group policy - homepage

I'm in IT at my work but can't change the group policies. I want to know if theres a local script or registry change I can use that overwrites or changes the homepage policy. Basically I just want ...
2
votes
1answer
2k views

Assigning limited permissions for a temporary domain user to access network systems

I have set up a small Server 2008 R2 domain network at home so I can learn and practice administering it. Lets say I want to create a temporary user account to allow an auditor access to all files on ...
0
votes
0answers
290 views

Mixing Manual and GPO Mapped Drives: Manual drives not reconnecting after logoff / on or reboot

I really have spent some serious time looking for this answer before posting here. Basically, I have a GPO set up to map drives in our 2008R2 domain. It works flawlessly on our RDS server remote ...
1
vote
1answer
134 views

Find out what Windows domain policies cause certain restrictions on a workstation

I work within a team of developers in a large bank. We all have full admin rights on our win7 workstations. The Windows infrastructure in our company is getting an overhaul, so there seems to be ...
0
votes
1answer
8k views

How to copy local group policy objects from one machine to another?

I have two Windows 7 Professional desktops. One has a set of local (no Domain Controller) group policy objects imposing restrictions on what programs can be run from that system. I need to copy all ...
0
votes
1answer
2k views

Local group policy logon startup script not executing

This is for Windows 7 I have a .bat and .vbs file in a folder. The .bat runs the .vbs script. In the Local Policy Group editor, under Windows Settings/Scripts I added a reference to the .bat file in ...
0
votes
1answer
6k views

How to block USB port and CD-ROM in Windows 7 through Group Policy?

I want to block USB port and CD-ROM access in my organization through domain (GPM). I have Windows 7 on all the computers in the organization and also have Windows Server 2008. How can I do this? I've ...
3
votes
1answer
428 views

Customize the WinXP/7 logon screen behaviors

How customizable is the Windows XP/7 logon screen via group policy? For example, can I do any of the following: Display a custom error message on logon failure? Popup a custom app that launches ...
0
votes
0answers
371 views

LocalPolicy doesn't enable switch user in Windows 7 Pro

I don't have Switch User item in my start menu. Checking group policy as in Can no longer "switch user" in Windows 7 didn't help as all policied are not defined. Resulting policy is not ...
3
votes
1answer
406 views

How can I install a Windows 8 application for another user and pin it on their Start screen? [duplicate]

Possible Duplicate: Can a Network Administrator rearrange tiles on a user’s Start Menu? I am trying to create a locked down Windows 8 account using Group Policies with no tiles on the start ...
1
vote
0answers
561 views

Windows 7 Group Policy blocking Adobe Reader

A few weeks ago, my company blocked Adobe Reader due to an unpatched security issue. However, we recently moved one of our computers to a project that didn't require access to the corporate network, ...
5
votes
4answers
9k views

Group Policy: Block access to \\localhost\C$

We have a restricted Windows 7 computer that hides and prevents non-admin users from accessing the C Drive using the following policies: Prevent access to drives from My Computer Hide these ...
1
vote
0answers
42 views

Force shutdown from a remote system [duplicate]

Possible Duplicate: Shutdown whole network computers What I want to do is to allow EVERYONE Force shutdown from a remote system control. But, I don't want to do this manually because ...
1
vote
0answers
12 views

Domain Admin permissions/rights [duplicate]

Possible Duplicate: Why do I need to run commands as administrator if my account is member of administrator group? I have a test domain environment set up consisting of one DC, and 2 ...
1
vote
1answer
85 views

How can the specific Group Policy setting which triggers an error in an application be discovered?

When running a new application in an environment with myriad Group Policy restrictions set, the Group Policy (generic) error message appears: "This operation has been cancelled due to restrictions in ...
0
votes
0answers
151 views

Files are permanently deleted in domain client (2008 R2)

We have a domain with 2008 R2, I've changed the address of "My Documents" to D:\Documents with Folder Redirection in "Group Policy". When a user deletes a file from their desktop or D:\ that file is ...
5
votes
2answers
597 views

Launch application after boot and prior to shutdown in win8

we are currently evaluating Win8 for our company and we are trying to get our heads around the centralized administration of it. We are currently working with Win7 and Server2k8 in a company domain ...
1
vote
0answers
198 views

Group Policy no longer applying desktop wallpaper

I used to have my wallpapers updated monthly by Group Policy. Several months ago I was prompted (I think just after logon) to grant GPO (I think) access to a wallpaper setting in the registry. It was ...
1
vote
1answer
296 views

System icons disabled due to group policy

I'm unable to change some of my system tray icons for some reason. It tells me the following: I'm the only user on this computer and it is not a member of any domain. And it has never been a ...
0
votes
1answer
45 views

Is there any way to connect to my WinXP computer remotely using RDC when its disabled in settings?

I forgot to enable the checkbox "Allow Users to connect remotely to this computer" in "My computer" properties of my work computer. (WinXP SP3). Now I need to RDC (mstsc) to this computer from a ...
2
votes
1answer
2k views

Error reporting is “disabled by Group Policy” but the relevant Group Policy seems to be not configured

The Windows Action Center nagged me to send custom error reports. However, it can't do so because "Never check for solutions" is checked and "Some settings are controlled by Group Policy." Digging ...