Group Policy is a feature of the Microsoft Windows NT family of operating systems that control the working environment of user accounts and computer accounts.

learn more… | top users | synonyms (2)

-2
votes
2answers
6k views

client pc install software without administrative rights [closed]

I've a PC installed Win 7 and it is on AD domain network. I can just logon as client user, cannot logon as AD admin or local admin. So i cannot install any software. I've talked to my IT department ...
-3
votes
2answers
190 views

Cannot alter system32 under Windows domain enviroment?

I'm using local admin to login to domain workstation under Windows 7. I want to delete opengl32.dll or replace it, but don't have the permission to do so. The location of file is /system32 Where are ...
0
votes
1answer
295 views

Unwanted mapped drive creation from unknown source

I'm stuck in a situation where I have a network drive being mapped when I log in that I don't want. The drive (X:) is a copy of another drive I do want (W:) which is also mapping. I have no need for ...
0
votes
1answer
13k views

Running a batch at logon with Administrator Credentials to install Office C2R network installation

I'm trying to install Office 2013 C2R using GPO. The challenge here is CR2 requires administrator credentials at the same time its need execute cmd.exe with administrator privileges. I'm able to do ...
1
vote
0answers
1k views

How can I import a security template in Windows 7 using command line?

I would like to remotely deploy some specific change in Security Policies to several computers via remote console (SSH). This is my just exported security template .inf file, extracted according ...
2
votes
3answers
2k views

Is it possible to permanently disable group policy updates on Windows 7?

Is it possible to disable updates to the group policy? I see an option to set an update interval to 45 days - can I disable all updates completely? I want to stop stuff from the corporate network from ...
1
vote
1answer
85 views

Stop IE from being started from a URL shortcut

This question is similar to How to disable Explorer.exe for given user?, but with a key difference: I've already blocked IE, mostly. In Group Policy I have added iexplore.exe to the list of ...
-1
votes
2answers
308 views

How to open and modify Group Policy settings in Windows 8.1?

How to open and modify Group Policy settings in Windows 8.1? In Windows 7 it's so easy. Search Group Policy in the Start menu and it's done, but in Windows 8.1 it sucks. Even gpedit.exe and gpedit.msc ...
1
vote
1answer
33 views

Pushing out LGP to many machines without AD

I have a school with 50 Windows machines that I would like to make edits to prevent the kids from changing the wallpapers ect... when they log into a student account. We don't have a Windows Server ...
1
vote
0answers
53 views

Microsoft support document with odd instructions: applying local policies to all users except administrators

I'd like to use the group policy editor to apply restrictions to all user accounts except that of the administrator on a Windows XP computer. In Windows Vista and up, this is easy to do as you're ...
1
vote
2answers
877 views

'SELECT' is not recognized as an internal or external command

I'm trying to apply a wmi filter to a group policy using this command: Select * from Win32_Processor where AddressWidth = '64' This will only apply the GPO to 64 bit machines (all of our machines ...
0
votes
0answers
509 views

Hide everything on desktop (taskbar, etc.) except certain icons for one Windows XP user account

I'd like to limit what appears on the desktop of a computer running Windows XP Professional for one user account. The account will be used by young children to play simple educational games in a play ...
1
vote
0answers
1k views

How to automatically download exe files in Internet Explorer 11?

In IE 11 and before downloading files there's the annoying bar (as seen here under Internet Explorer 9 & 10). I've been trying to disable it for a while... I tried enabling in gpedit.msc Turn off ...
-1
votes
1answer
38 views

Forbid files by extension in Windows 7/8

I want to forbid following actions on Windows 7/8: Zip and 7Zip archives to be unpacked/executed , especially when it's a self-extracting archives Exe files to be run dll files Any mentioned ...
2
votes
3answers
1k views

Prohibit computers from showing in 'Network' in Windows Explorer

Can someone tell me how I can prohibit certain users from seeing the whole network in Windows Explorer? We are in an AD based domain with 2003 schema. I need to restrict users from seeing all ...
0
votes
2answers
109 views

How can I keep a folder name from being changed by anyone who doesn't have administrator priviledges?

I need to make the files in a folder and the folder name itself unchangeable by users. I've tried making the folder read only in it's properties but this only makes the files in the folder read only. ...
0
votes
1answer
441 views

Run script using group policy

I want to show an alert box to all users in the domain at regular intervals (example: show a message box on every 1 hour). How can i possible this using GPO. Already i know how to show log on script ...
1
vote
1answer
17 views

Is it possible to automatically configure GPO on multiple systems?

I'm responsible for managing incoming computers at work and I was wondering if there was a program or way to quickly change Group Policy settings without having to manually change each and every ...
6
votes
0answers
689 views

How do I enforce a unifrom company email font and signature format across Outlook 2007, 10 and 13? [closed]

Our users currently run a mixture of Outlook 2007, 2010 and 2013 to manage emails. We use active directory and our server runs Windows Server 2008 R2. Is there anyway that we can enforce through ...
2
votes
1answer
585 views

C# windows 7 run exe before computer shutdown

I want to run an executable that saves an XML file on a local drive before the computer (running on Windows 7) gets shut down. I know it is possible to run scripts before shutdown. This can be ...
1
vote
2answers
94 views

How to forbid IE to browse a https site if the cert is not trusted?

I've been Googled for a while, and didn't find any easy way to do this. Basically, I want to make sure the IE users in my network cannot browse possibly phishing site, or those are compromised with a ...
1
vote
1answer
4k views

Allow Microsoft accounts to be optional without Group Policy?

I am trying to use the Windows 8.1 mail client without using a Microsoft account, and I've located this page to find out how. The instructions Microsoft provides involves the use of Group Policy to ...
4
votes
2answers
1k views

Does Windows 7 re-enable Windows Firewall after removing from domain?

We have the following GPO's configured for our default domain policies: Computer Configuration\Policies\Windows Settings\Security Settings\Windows Firewall with Advanced Security\Domain Profile ...
0
votes
0answers
328 views

Unable to change policy , its grayed out … :(

I followed this answer suggested by Cy in the post below, but when I tried to apply it I find that my settings are greyed out and I am unable to change the policy, what could be the problem? Windows ...
0
votes
1answer
1k views

Group Policy Confusion (Printers configured under users?)

I'm befuddled. Active directory usually makes a bit more sense than this. The Problem: Referencing the images below (with private info removed), it appears that Printer Connections are being defined ...
2
votes
0answers
44 views

Is there a registry key or group policy to disable the “If you change a file name extension, the file might become unusable” warning in Windows? [duplicate]

In Windows, when you change a file extension, you get a warning If you change a file name extension, the file might become unusable Are you sure you want to change it? Is there a ...
1
vote
0answers
133 views

I want to be able to have a daily task run showing the times users log on and off

GOAL: I want to be able to have a daily task run showing the times users log on and off ENVIRONMENT: Windows 2008R2 domain ACTIONS SO FAR: I have enabled Account Auditing via: start -> ...
0
votes
1answer
62 views

how to change the default open-with program to a program on the second disk

I have a 250GB HDD for my system and a 60GB SSD using a SATA port. I installed most of my applications on the SSD. There's a strange thing though. I can not change the default open-with program to a ...
0
votes
0answers
59 views

Is it possible for Outdated Infiniband Firmware to prevent Firewall Startup

My general question: Is it feasible for a NIC Firmware to prevent Windows OS Firewall services from successfully loading upon bootup? Explanation of situation: I have been experiencing the darnest ...
0
votes
1answer
407 views

Applying local GPOs to a computer disconnected from domain controller

I want to apply local group policies to a number of machines. To apply group policies on a computer one can run this command: GPUPDATE However, if a computer is setup on a domain, but is ...
0
votes
1answer
1k views

Advanced Security Audit Policy Not Applying To Win7

Issue I am trying to apply a GPO with Advanced Security Audit Policy configurations to a Windows 7 client but the setting are not applying. I double-checked my work using this article - ...
2
votes
3answers
1k views

Group Policy testing

How do I go about testing a Group Policy before applying it to an entire OU? I currently have an OU with many users within the OU. I want to test the Group Policy on one of these users before ...
1
vote
1answer
1k views

Group policy - restart specific service if it stops

If you want to restart a service if it fails on a single computer this is done by changing a setting on the service in services.msc. But the same option does not seem to exist when you want to do the ...
0
votes
1answer
271 views

Group Policy settings for the Windows Firewall are sometimes ignored on startup

We deploy our Windows Firewall settings (among other security settings) as local policies to our machines. They are not part of a domain. There is a weekly restart configured for each machine, ...
1
vote
1answer
85 views

Debian User can't overwrite, yet belongs to Group

In Debian I have a user called jesse I have a group called www-data for Apache2 I have a folder called /htdocs htdocs belongs to user:group of www-data:www-data I do not understand why the user ...
0
votes
1answer
158 views

Grant a user access to directories shared by root (mod: 770)

I want to grant a user (username: eddie) access to all directories (with mod 770) shared by root (myself). I do it this way: groups root (here comes a list of groups in which root user is) usermod ...
1
vote
1answer
4k views

Can not enable Windows SmartScreen. Says: “this setting is managed by your system administrator”

I can not enable my Windows SmartScreen on Windows 8.1 My PC is not joined to any domain. I'm not talking about SmartScreen feature available in IE but the feature that is available in File ...
2
votes
1answer
3k views

Disable “Remember my credentials” on Windows 7 Home Premium

I would like to disable the ability to save network passwords (when connecting to \computer\share) on Windows 7 Home Premium. On Windows XP there was a registry setting to disable the checkbox ...
1
vote
0answers
3k views

Windows 7 Gpupdate failed

I tried to run gpupdate on a local machine but I keep getting the failed error message I have tried following Remove from domain and re-add it again Check the dns setting all correct (Even release ...
0
votes
2answers
816 views

How can I add some websites link to browser's favorite(bookmark) for users in domain using batch script?

I wanna add some website's link into all users bookmark(favorite in IE) automatically when user log in to windows using batch script or something like that? Is there any policy in windows server 2003 ...
0
votes
2answers
2k views

Group Policy does not open in windows 8

gpedit.msc in run or search does not opens group policy editor. Instead it shows an error message that it cannot find 'gpedit.msc'
5
votes
2answers
3k views

Unable to completely disable Offline Files feature for Windows 7 in GPO

I have been trying to completely disable the offline files feature for all the W7 PCs on the domain that I manage. I have been unable to. I do not want this feature as it creates unwanted, largely ...
1
vote
0answers
144 views

Is auditing possible on Windows XP Home Edition?

Although Windows XP Professional has (a lot more) control over Security issues, Windows XP Home Edition does allow the regular user to probe around and allows to set Security settings on folders and ...
0
votes
2answers
4k views

Allow one Windows user to only execute 2 applications

I'm using Windows 8 Pro. I'm trying to create a very limited Windows account. The account will only have: Remote Desktop Access Shell replaced by our own in-house application Access to the one FTP ...
1
vote
1answer
329 views

Power scheme not applying in Group Policy

I've created a new GPO and created a power scheme under computer configuration. I've disabled the User configuration part of this GPO. In this power scheme I have the action selected to create a new ...
0
votes
1answer
796 views

Mapping Network Drive To Computer OU With GPO

I have a computer that I want to map a network drive to no matter who logs into it. I have crated a security group linking the member to the computer. I created a GPO and added the security group to ...
2
votes
1answer
2k views

How do I remove or disable the search box in windows explorer on Windows 2008 R2?

I need a way to disable the search box from Windows Explorer. I've found a way to do this with the Start menu, but not in Windows Explorer.
1
vote
1answer
2k views

Deny running batch files

How can I deny users of my network to run any batch files in their user level? I want it to return them an access denied message OR delete the script entirely. Any ideas?
0
votes
1answer
555 views

Using Win Server 2008 Group Policy to create printer and default colour

I have created a GPO to create a printer & default it from a shared printer on the server when logged in to domain. The shared printer on the server is configured to default colour: Black & ...
0
votes
1answer
125 views

Windows 2008 R2 App Locker define times program is opened

I am testing AppLock currently. I have create a GroupPolicyObject and added a Executable rule. The .exe I am referencing for this test is Calc.exe . How would I define that I only want want two ...