Group Policy is a feature of the Microsoft Windows NT family of operating systems that control the working environment of user accounts and computer accounts.

learn more… | top users | synonyms (2)

1
vote
1answer
608 views

Can a GPO be exported from one server and imported into another?

I have a W2008R2 server where we have a default GPO setup. I like the setup and do not want to recreate it for our new W2012 server. I did export it from 2008 but the only option I can find to import ...
1
vote
1answer
49 views

User/Group name validation in Group Security Policy

Why does GPO editor doesn't check validity of given username/groupname in 'Add User or Group' dialog box. It doesn't check if valid name was given when you apply in actual policy dialog box (For ...
0
votes
1answer
94 views

Add Printer requires UAC to admin

I have several non-admin users on my Active Directory domain that need to be able to add printers without an admin entering their credentials at a UAC prompt. How do I use group policies to allow ...
1
vote
1answer
290 views

How do I set default internet zone level with Group policy?

I have been trying for a while to get this done with no success. It looks like my group policy settings are being applied when I run the group policy results wizard. Here is what I am doing to set ...
0
votes
0answers
33 views

Prohibit Windows users from creating open shares with anonymous login/access

Is there a way (using GPO or registry key) to block a windows users when they attempts to create an open share which allow anonymous login/access ? thank you.
1
vote
0answers
150 views

How to enable program execution blocked by domain group policy

How can i enable program execution from any path in local computer using regedit when it's blocked by domain policy? I managed to remove policy restrictions from registry but this one escaped.
1
vote
0answers
665 views

DisableCAD local security policy on standalone Windows 7 machine reverts to Enable after reboot or logging out

I have been struggling for days trying to resolve this issue. We are required to have our users press ctrl+alt+delete to login to our systems. The local security policy has the "Interactive logon: Do ...
0
votes
1answer
76 views

After a restart, preventing Group Policy Update from updating the registry values

My machine is part of a corporate domain and I have local admin rights on this machine. Due to the GPs applied, I was not able to change my wallpaper. So I did a GPResult /v and figured out the ...
0
votes
0answers
97 views

Group Policy Modeling Error on Server 2012 R2

I am getting the following error when I try to run the Group Policy Modeling tool (which is a part of the GPMC.mmc) on Windows Server 2012 R2. The Domain Controller for this Forrest is the machine ...
0
votes
0answers
19 views

Deploying Sofware via GPO - Install for Machines Added to Network

Is there someway in Active Directory when deploying software via Computer Settings (Assigned) to have an application be installed to computers after they are joined to the domain? I am currently ...
0
votes
1answer
492 views

Add Computer and User to Domain - Can't login

I have set up a domain on my netowrk, as following: Domain Controller: HostName: DC001 OS: WS2008R2 Domain name: test.local Domain admin user: diego Domain admin user: password User "diego" can ...
0
votes
0answers
297 views

Outlook 2010 “Show this folder as an e-mail address book” via GPO

In Outlook2010, I need to set the checker "Show this folder as an e-mail address book" on my clients Windows 7 boxes. I need to do this over and over because I am copying a public folder to the ...
1
vote
2answers
749 views

How to remove Chrome policies?

I found some weird policies on my chrome by visiting chrome://policy/ (or about:policy), like ExtensionInstallSources or ExtensionInstallWhitelist. I though it may be from some virus because on other ...
1
vote
0answers
122 views

What will break if I move my Domain Controller machine accounts from the default OU into another OU, assuming the policy is linked?

Background: I've been helping out with a recent G.P. simplification (read overhaul) at work. I'm working from a list of things my supervisor has requested be done with Group Policy to harden our ...
0
votes
0answers
105 views

Active Directory domain and group policies

I'm trying to make a user group that basically have the same rights as a "User" (as oppsed to an "Administrator") with some specificities and some privileges borrowed from the "Administrators" group. ...
0
votes
2answers
287 views

How to add group to local administrators throughout the domain

We have a requirement for a tool to need local administrator access to all systems in the domain (security scanning tool). Here are the steps taken so far: Created an account Added the account to a ...
0
votes
0answers
65 views

Group policy to map drobo share with generic username and password

I have a Drobo 5N that I have set up for the raw video/data for our Marketing dept. I have it set up and everything works fine as far as functionality. The problem lies my group policy mapping. The ...
0
votes
1answer
24 views

identifying new GPOs pushed down from Active Directory

How do you identify the recent and Group Policy Objects that have been pushed down to a client machine? I am trying to identify if any new IE settings were pushed down recently.
0
votes
0answers
93 views

Password policy restrictions Windows server 2012 - How to override / bypass

OK, this is probably a duplicate, but I'm stumped. I have to install a utility a client demands we have to transfer data (Signiant). The installer demands that there be an account with identical ...
0
votes
1answer
69 views

Show hidden icons in icon tray through group policy

Had previously hidden the icon tray through group policy and would now like to add the volume control/sound icon back to the tray. I have disabled the "hide the notification area" and forced the ...
0
votes
1answer
121 views

Group Policy Management - Mass registry change

I have a number of group policy objects that I need to change all registry keys in the preferences:\windows settings: registry\hkey_local_machine\software\Microsoft\windows NT\current ...
-1
votes
1answer
38 views

Seamlessly Refresh Group Policy

I have created an application that manipulates local Group Policy. The policies that I change require the user to log out and back in again. gpupdate.exe /force will not work because these policies ...
0
votes
0answers
203 views

Bitlocker to-go group-policy conflict

I want to activate bitlocker for my SD-card but when i try, following error message appears: "The group policy settings for bitlocker startup options are in conflict and can therfore not be applied. ...
0
votes
0answers
25 views

AD-DS: IE policy to open links either in new window or new tab

Is it possible to apply a AD-DS policy to force the opening of clicked links either in a new window or in a new tab instead of the current tab in the current window? I know the user could simply ...
0
votes
1answer
2k views

Locking and Terminating User Sessions via Group Policy settings

To conform with some new security requirements, my company is implementing Group Policy solutions to existing security vulnerabilities. My current assignment is to find and implement Group Policy ...
0
votes
0answers
69 views

Active Directory control screen saver based on user's email address

I want a particular screensaver for users on my AD, with primary email address as @abc.com and a different screen saver for users with email address as @xyz.com? How can I achieve this easily? We ...
0
votes
0answers
255 views

Users own mapped network drives disappear when I set a GPP mapped drive

All the clients use Windows 7 SP1 x64 Enterprise. The domain controllers are Windows Server 2008 R2. I have configured the GPP to map "\server\data" to first available drive letter starting with I:. ...
0
votes
0answers
502 views

Set chrome's “Ask where to save each file before downloading” setting via group policy

I am deploying chrome throughout our domain via group policy. I want to require that all file downloads ask where to save the file. There is a setting in chrome to "Ask where to save each file ...
0
votes
0answers
17 views

Automate removal of Audit Policy settings

I have a large number of files in the System32 directory that have audit policy settings that were configured directly as well as other audit policy settings that were inherited. I need to remove all ...
4
votes
1answer
248 views

How to make computer (or user) trust signed software

I have an application, which I sign and timestamp using a code-signing certificate issued by thawte, with intermediate authority Thawte code signing CA - G2. The signature is OK (as it shows in file ...
0
votes
1answer
28 views

Computers at office acting as one [closed]

There are 4 computers in the office and 8 people working different shifts. I want all of us to be able to login into personal account from any computer at office and see personal email, document ...
0
votes
0answers
24 views

Pushing down a file to each Window user's home directory

have a question on how to push down a file into each window user's home directory. I am not a Windows expert. I believe this can be done using the GPO. Can you provide some examples on how to do this? ...
1
vote
2answers
331 views

Edit already existing Scheduled Task through GPO

I have been searching for a while but not getting much out of my trusty friend Google at the moment, so wondering if someone else out there might be able to share some wisdom. By default, Windows has ...
0
votes
1answer
235 views

gpedit Remote Desktop Session Host security option missing

i am trying to configure a secure remote connection to a pc though a guide, and when i tried to find the Administrative Templates > Windows Components > Remote Desktop Services > Remote ...
0
votes
0answers
57 views

User can still run programs that are disallowed by group policy (on one computer)

On one computer, a user can run programs that have been disallowed by group policy. I have check rsop and it shows that setting as enabled and those programs are to be blocked. The user has the same ...
1
vote
1answer
283 views

How to return a GPO to Not Configured?

Recently a new piece of software started being included in our corporate Windows 7 image that, during silent install during the deployment process with Windows Deployment Workbench, sets the Windows ...
0
votes
2answers
3k views

Connect to VPN before Windows 7 starts

I am building a laptop with Windows 7 SP1 x64 which will be used by a remote user. The laptop needs to be locked down so they can only do their work and nothing else. It will have a VPN connection ...
0
votes
2answers
840 views

Active Directory and Mac OS 10.5 - how can I get the GPO's network drive on the Mac, and get the home directory of the user to map correctly?

I have a PowerMac G5 computer that I have joined to the Windows domain network successfully. I am able to login successfully with domain credentials. However, it does not include any of the network ...
0
votes
1answer
172 views

Windows 8, 8.1, 2012 R2: Search does not work correctly after joining local AD domain

Scenario: I do a fresh install of e.g. Windows 8.1 on a workstation. Then I create a temporary local user on this system -> searching in the start menu for e.g. "programs and features" (German: ...
5
votes
1answer
147 views

Difference between Local Policy and Registry Key

I would like to understand the difference between this registry key, MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\MaximumPasswordAge=4,30 and the local computer policy settings via ...
0
votes
1answer
163 views

Batch script to only run command for 1 machine

I have a Windows GPO that runs a batch file startup script to disable NetBIOS. It normally looks like this: wmic nicconfig where (TcpipNetbiosOptions!=null and TcpipNetbiosOptions!=2) call ...
0
votes
1answer
1k views

Create shortcut on Desktop via Group Policy, but replace present shortcut

We are running 2008R2 on our PDC. We had a group policy to add the Help Desk Portal shortcut to everyone's desktop via the User config. Do to a split in coverage, we now need 2 different versions. ...
1
vote
1answer
530 views

Disable “Reply to All” button in Outlook 2013 via Group Policy without disabling the shortcut keys

At my organization, we've used Group Policy to disable the Reply to All button in Outlook 2007 and Outlook 2010. When you use the setting in the ADM files for the respective versions of Office to ...
0
votes
0answers
238 views

How to prevent everyone from adding local admins using GPO

I want to prevent everyone, including local administrators, from adding users to the Administrators group. How can I do this using GPO?
0
votes
0answers
675 views

Windows Login Script ignore UAC

I have a GPO that will launch a Startup Script for a .exe(Install Shield) silent unattended setup. However the user is currently being prompted to allow program due to UAC. I want a true unattended ...
1
vote
0answers
101 views

Applying a local group policy to another user with different username and computer name

A while ago, I setup a dedicated Windows 7 Pro workstation with local group policy applied to a specific guest account. After completion, I made a backup of the applied local group policy setting at ...
0
votes
2answers
132 views

Is it possible to automatically install software when a user logs in through Group Policy?

I am trying to distribute software through group policy, I am able to get this working so that the users can go into Add/Remove Programs and select Install from network and then install the software. ...
3
votes
2answers
3k views

Exclude site from Compability View policy

I have a client who enforces the policy in IE that all local intranet sites be loaded in the Compatibility View. Unfortunately our webapp doesn't support this and gives alot of issues in the comp. ...
0
votes
0answers
50 views

RDP connection to admin account activates group policy

I have a stand alone win XP sp 3 machine with two users. Admin and user. The user has group policy activated and limited access but the admin has full access. For some reason connecting via remote ...
0
votes
2answers
2k views

How to disable shutdown option at the login screen? [duplicate]

I was able to disable the shutdown option in the start screen using Group Policy but how do I disable the shutdown button at the login screen? I'm using Windows 8.1 Update 1.