Group Policy is a feature of the Microsoft Windows NT family of operating systems that control the working environment of user accounts and computer accounts.

learn more… | top users | synonyms (2)

0
votes
0answers
50 views

RDP connection to admin account activates group policy

I have a stand alone win XP sp 3 machine with two users. Admin and user. The user has group policy activated and limited access but the admin has full access. For some reason connecting via remote ...
0
votes
2answers
2k views

How to disable shutdown option at the login screen? [duplicate]

I was able to disable the shutdown option in the start screen using Group Policy but how do I disable the shutdown button at the login screen? I'm using Windows 8.1 Update 1.
0
votes
1answer
572 views

“location is not accessible” “access is denied” on CD-ROM, no GPO

I am a domain admin for my work network, and I have a client (mine), that is not able to access it's CD-ROM (note that USB storage is accessible). I have attempted the following: 1) Verified with ...
1
vote
1answer
535 views

How to overcome Local Group Policy Editor's 1023 character limit?

I want to reorder the SSL Cipher Suite Order applied as part of KB2919355, prioritizing the forward secrecy suites above all else. Trying to do this with gpedit at Computer Configuration > ...
0
votes
1answer
284 views

Cache Group Policies for AD Group

I administrate number of Windows 7 machines frozen using Faronics Deep Freeze. Because these machines are kept frozen they do not cache group policies. So every time a user logs in after a reboot ...
0
votes
3answers
487 views

How do I deny local logon but allow it for UAC elevation on Windows 7?

I want to send laptops out in the field, but I do not want them knowing the admin password. So, I will make a local account with admin privelages, but I will allow them to use it only with permission ...
0
votes
1answer
155 views

Starting the Citrix Desktop Service once a specific user logs in

I am working on a package to be released into an enterprise environment which needs to have the Citrix Desktop Service in a suspended state post deployment from CM. In suspending the service post ...
1
vote
1answer
5k views

Is it possible to deploy Internet Explorer 11 (IE11) via WSUS 3.0 SP2?

Internet Explorer 11 is not listed in WSUS, nor can I find the installer on http://catalog.update.microsoft.com/v7/site/Search.aspx?q=Internet+Explorer+11. There's plenty of updates, but not the ...
0
votes
1answer
95 views

Applocker with local accounts

I'm trying to configure Applocker on Windows Server 2008 R2. The users for which I'm applying the policy are local user. I've started the AppId Service and set the enforcing mode for the AppLocker to ...
0
votes
3answers
2k views

How to display “Please Wait” while GPO startup script is running?

I have a GPO that calls a batch file as a startup script (Computer Configuration -> Policies -> Windows Settings -> Scripts -> Startup) which takes a moment to finish what it's supposed to ...
0
votes
1answer
5k views

Active Directory Allow User to Install Only

On my active directory network, I want to satisfy my boss by giving him semi-administrative permissions that will allow him to Install programs as administrator in emergency situations on all ...
0
votes
1answer
663 views

Is it possible to force users to change password periodically in Windows 8.1 Pro and how?

According to the one of the security requirements enforced upon our office, we must start to control / enforce passwords are changed every now and then. Is there a way to force users to change their ...
1
vote
3answers
103 views

Active Directory - GPO Will Not Apply to Group of Machines

I created a GPO to create a few rules for a set of computers, but no matter what I do, running "gpresult /r" yields "Filtering: Denied (Security)" as admin, or if I'm a regular user, it just doesn't ...
-2
votes
2answers
6k views

client pc install software without administrative rights [closed]

I've a PC installed Win 7 and it is on AD domain network. I can just logon as client user, cannot logon as AD admin or local admin. So i cannot install any software. I've talked to my IT department ...
-3
votes
2answers
199 views

Cannot alter system32 under Windows domain enviroment?

I'm using local admin to login to domain workstation under Windows 7. I want to delete opengl32.dll or replace it, but don't have the permission to do so. The location of file is /system32 Where are ...
0
votes
1answer
307 views

Unwanted mapped drive creation from unknown source

I'm stuck in a situation where I have a network drive being mapped when I log in that I don't want. The drive (X:) is a copy of another drive I do want (W:) which is also mapping. I have no need for ...
0
votes
1answer
14k views

Running a batch at logon with Administrator Credentials to install Office C2R network installation

I'm trying to install Office 2013 C2R using GPO. The challenge here is CR2 requires administrator credentials at the same time its need execute cmd.exe with administrator privileges. I'm able to do ...
1
vote
0answers
1k views

How can I import a security template in Windows 7 using command line?

I would like to remotely deploy some specific change in Security Policies to several computers via remote console (SSH). This is my just exported security template .inf file, extracted according ...
2
votes
3answers
3k views

Is it possible to permanently disable group policy updates on Windows 7?

Is it possible to disable updates to the group policy? I see an option to set an update interval to 45 days - can I disable all updates completely? I want to stop stuff from the corporate network from ...
1
vote
1answer
95 views

Stop IE from being started from a URL shortcut

This question is similar to How to disable Explorer.exe for given user?, but with a key difference: I've already blocked IE, mostly. In Group Policy I have added iexplore.exe to the list of ...
-1
votes
2answers
318 views

How to open and modify Group Policy settings in Windows 8.1?

How to open and modify Group Policy settings in Windows 8.1? In Windows 7 it's so easy. Search Group Policy in the Start menu and it's done, but in Windows 8.1 it sucks. Even gpedit.exe and gpedit.msc ...
1
vote
1answer
33 views

Pushing out LGP to many machines without AD

I have a school with 50 Windows machines that I would like to make edits to prevent the kids from changing the wallpapers ect... when they log into a student account. We don't have a Windows Server ...
1
vote
0answers
53 views

Microsoft support document with odd instructions: applying local policies to all users except administrators

I'd like to use the group policy editor to apply restrictions to all user accounts except that of the administrator on a Windows XP computer. In Windows Vista and up, this is easy to do as you're ...
1
vote
2answers
909 views

'SELECT' is not recognized as an internal or external command

I'm trying to apply a wmi filter to a group policy using this command: Select * from Win32_Processor where AddressWidth = '64' This will only apply the GPO to 64 bit machines (all of our machines ...
0
votes
0answers
531 views

Hide everything on desktop (taskbar, etc.) except certain icons for one Windows XP user account

I'd like to limit what appears on the desktop of a computer running Windows XP Professional for one user account. The account will be used by young children to play simple educational games in a play ...
1
vote
0answers
1k views

How to automatically download exe files in Internet Explorer 11?

In IE 11 and before downloading files there's the annoying bar (as seen here under Internet Explorer 9 & 10). I've been trying to disable it for a while... I tried enabling in gpedit.msc Turn off ...
-1
votes
1answer
39 views

Forbid files by extension in Windows 7/8

I want to forbid following actions on Windows 7/8: Zip and 7Zip archives to be unpacked/executed , especially when it's a self-extracting archives Exe files to be run dll files Any mentioned ...
2
votes
3answers
1k views

Prohibit computers from showing in 'Network' in Windows Explorer

Can someone tell me how I can prohibit certain users from seeing the whole network in Windows Explorer? We are in an AD based domain with 2003 schema. I need to restrict users from seeing all ...
0
votes
2answers
115 views

How can I keep a folder name from being changed by anyone who doesn't have administrator priviledges?

I need to make the files in a folder and the folder name itself unchangeable by users. I've tried making the folder read only in it's properties but this only makes the files in the folder read only. ...
0
votes
1answer
478 views

Run script using group policy

I want to show an alert box to all users in the domain at regular intervals (example: show a message box on every 1 hour). How can i possible this using GPO. Already i know how to show log on script ...
1
vote
1answer
20 views

Is it possible to automatically configure GPO on multiple systems?

I'm responsible for managing incoming computers at work and I was wondering if there was a program or way to quickly change Group Policy settings without having to manually change each and every ...
6
votes
0answers
738 views

How do I enforce a unifrom company email font and signature format across Outlook 2007, 10 and 13? [closed]

Our users currently run a mixture of Outlook 2007, 2010 and 2013 to manage emails. We use active directory and our server runs Windows Server 2008 R2. Is there anyway that we can enforce through ...
2
votes
1answer
611 views

C# windows 7 run exe before computer shutdown

I want to run an executable that saves an XML file on a local drive before the computer (running on Windows 7) gets shut down. I know it is possible to run scripts before shutdown. This can be ...
1
vote
2answers
102 views

How to forbid IE to browse a https site if the cert is not trusted?

I've been Googled for a while, and didn't find any easy way to do this. Basically, I want to make sure the IE users in my network cannot browse possibly phishing site, or those are compromised with a ...
1
vote
1answer
4k views

Allow Microsoft accounts to be optional without Group Policy?

I am trying to use the Windows 8.1 mail client without using a Microsoft account, and I've located this page to find out how. The instructions Microsoft provides involves the use of Group Policy to ...
4
votes
2answers
1k views

Does Windows 7 re-enable Windows Firewall after removing from domain?

We have the following GPO's configured for our default domain policies: Computer Configuration\Policies\Windows Settings\Security Settings\Windows Firewall with Advanced Security\Domain Profile ...
0
votes
0answers
353 views

Unable to change policy , its grayed out … :(

I followed this answer suggested by Cy in the post below, but when I tried to apply it I find that my settings are greyed out and I am unable to change the policy, what could be the problem? Windows ...
0
votes
1answer
1k views

Group Policy Confusion (Printers configured under users?)

I'm befuddled. Active directory usually makes a bit more sense than this. The Problem: Referencing the images below (with private info removed), it appears that Printer Connections are being defined ...
2
votes
0answers
44 views

Is there a registry key or group policy to disable the “If you change a file name extension, the file might become unusable” warning in Windows? [duplicate]

In Windows, when you change a file extension, you get a warning If you change a file name extension, the file might become unusable Are you sure you want to change it? Is there a ...
1
vote
0answers
135 views

I want to be able to have a daily task run showing the times users log on and off

GOAL: I want to be able to have a daily task run showing the times users log on and off ENVIRONMENT: Windows 2008R2 domain ACTIONS SO FAR: I have enabled Account Auditing via: start -> ...
0
votes
1answer
63 views

how to change the default open-with program to a program on the second disk

I have a 250GB HDD for my system and a 60GB SSD using a SATA port. I installed most of my applications on the SSD. There's a strange thing though. I can not change the default open-with program to a ...
0
votes
0answers
59 views

Is it possible for Outdated Infiniband Firmware to prevent Firewall Startup

My general question: Is it feasible for a NIC Firmware to prevent Windows OS Firewall services from successfully loading upon bootup? Explanation of situation: I have been experiencing the darnest ...
0
votes
1answer
409 views

Applying local GPOs to a computer disconnected from domain controller

I want to apply local group policies to a number of machines. To apply group policies on a computer one can run this command: GPUPDATE However, if a computer is setup on a domain, but is ...
0
votes
1answer
1k views

Advanced Security Audit Policy Not Applying To Win7

Issue I am trying to apply a GPO with Advanced Security Audit Policy configurations to a Windows 7 client but the setting are not applying. I double-checked my work using this article - ...
2
votes
3answers
1k views

Group Policy testing

How do I go about testing a Group Policy before applying it to an entire OU? I currently have an OU with many users within the OU. I want to test the Group Policy on one of these users before ...
1
vote
1answer
1k views

Group policy - restart specific service if it stops

If you want to restart a service if it fails on a single computer this is done by changing a setting on the service in services.msc. But the same option does not seem to exist when you want to do the ...
0
votes
1answer
283 views

Group Policy settings for the Windows Firewall are sometimes ignored on startup

We deploy our Windows Firewall settings (among other security settings) as local policies to our machines. They are not part of a domain. There is a weekly restart configured for each machine, ...
1
vote
1answer
87 views

Debian User can't overwrite, yet belongs to Group

In Debian I have a user called jesse I have a group called www-data for Apache2 I have a folder called /htdocs htdocs belongs to user:group of www-data:www-data I do not understand why the user ...
0
votes
1answer
161 views

Grant a user access to directories shared by root (mod: 770)

I want to grant a user (username: eddie) access to all directories (with mod 770) shared by root (myself). I do it this way: groups root (here comes a list of groups in which root user is) usermod ...
1
vote
1answer
4k views

Can not enable Windows SmartScreen. Says: “this setting is managed by your system administrator”

I can not enable my Windows SmartScreen on Windows 8.1 My PC is not joined to any domain. I'm not talking about SmartScreen feature available in IE but the feature that is available in File ...