Group Policy is a feature of the Microsoft Windows NT family of operating systems that control the working environment of user accounts and computer accounts.

learn more… | top users | synonyms (2)

1
vote
1answer
377 views

Windows 2008 Server GPO Add personal shares

Right now each employee has their own share on the file server that uses their first initial of their first name and their last name (ex. jsmith). Of course John Simth has to be logged on to access ...
0
votes
1answer
160 views

Permissions assigned to Domain Users do not propagate

We use Microsoft Windows 2008 Server as our DCs, and use group policies to distribute access to network shares, software packages etc. Distribution of software packages is done throught LANDesk ...
0
votes
0answers
113 views

Copy all GPOs (with links?) from domain to domain

I'm trying to copy the GPOs that are set up in a domain to another one - just to save a lot of configuring. The domains OUs are identical - except from domain name and machine names. While searching ...
1
vote
1answer
409 views

I mapped networked drives with GPO but users are not seeing networked drives?

I followed the instructions here: http://blogs.technet.com/b/askds/archive/2009/01/07/using-group-policy-preferences-to-map-drives-based-on-group-membership.aspx I successfuly mapped drives but when ...
-1
votes
1answer
3k views

Does disabling the 'Windows Firewall' service actually work?

When I go the 'Windows Firewall' section of the Windows Control Panel, I'm told "For your security, some settings are managed by your system administrator. If I click 'Turn Windows Firewall on or ...
0
votes
1answer
2k views

Configuring group policy to bypass proxy server for local addresses and adding a domain to trusted root certificate authorities

I am an intern who has just started in a new company. I have never used the group policy editor before. However I suggested that I believed it is possible to accomplish the two tasks we wish using the ...
1
vote
1answer
2k views

How do I find out which programs were blocked by my group policy?

I have to lock down a company computer so that it becomes reasonably difficult to perform anything but the intended tasks with it. As one of the steps, I have restricted the programs that are allowed ...
0
votes
1answer
1k views

Apply registry settings via group policy, server 2003

I Windows 7 Workstations, I need to disable a certain Outlook plugin across the entire domain. I need to change this D-WORD key in the registry: ...
1
vote
1answer
222 views

Create Local Policy for one Domain User on one PC

Basically I am trying to restrict a specific domain user's actions, such as setting the screensaver, on a windows 7 PC. I've searched round the web only to be confronted with lots of help for ...
0
votes
1answer
325 views

Windows 7: Edit group policy from command line [duplicate]

I'm writing an installer and need to change the All Users' wallpaper. I can do this from the group policy editor GUI, but need to do so from my installer. I can't just edit the registry as it gets ...
0
votes
1answer
3k views

Prevent users from installing Windows Updates

This may belong on ServerFault, but Ill start here and if it gets moved, fine Im trying to find a solution that prevents users from installing Windows/Automatic Updates on their workstations/laptops. ...
0
votes
1answer
259 views

Cannot Find A Group Policy That I'd Like To Disable

There's an Active Directory group policy specific to Google Chrome in place to enforce: startup URLs blocking auto-updating (locking to a particular version) This policy writes entries to ...
1
vote
1answer
31 views

Protecting group policy

I want to protect my group policy, but I don't have any idea about how to do that. Is there anybody who can help? I want to create a policy to disable certain groups from editing defined policies, ...
2
votes
2answers
2k views

How do I grant a user permission to add local users in Windows 7?

How do I grant a local user account the permission to add other local users in Windows 7 Professional? The important point is, that the local user who should be able to create new accounts must not ...
0
votes
0answers
2k views

Disable USB mass storage via group policy based on the time of day?

I would like to disable USB mass storage for a group of users during specific hours of the day (lets say, 9AM to 5PM). I know that with Windows Server 2008, there is a group policy that will disable ...
2
votes
1answer
384 views

Editing GPO Programmatically

I have a batch file that I'm using to update a large group of computers. This batch file works, for the most part. Where it fails is when the computer has been set up to "Disable Active Desktop" under ...
0
votes
1answer
41 views

Can I use Group Policy or another method to determine which Services startup by User or Group?

We have an application that we use that loads as a service on logon, and I'd like to disable the service from running when an Administrator logs in to their account. I've done some research and ...
0
votes
1answer
646 views

Change desktop background Windows 7

Due to group policies enforced on our systems, we can't change the background of our desktop. The IE's "Set as desktop background" is working, but the change is not permanent. If anyone can tell a ...
1
vote
0answers
44 views

Can I add ADMX files via symbolic links?

Is it possible to add Group Policy templates (ADMX files) on a local Windows 7 machine by creating a symbolic link (soft link) in the C:\Windows\PolicyDefinitions folder that points to an ADMX file ...
1
vote
2answers
926 views

How to administrate computer locked down with group policy?

I have an XP machine where I want to lock it down and prevent what users can do on it. I have disabled the control panel (along with a bunch of other stuff) using group policy. This way the user ...
2
votes
0answers
407 views

How to enable CredSSP

I am trying to use the -Authentication CredSSP switch when entering with PowerShell (2.0) in order to remotely launch a Script that can write to files or set up new PSDrives. I get an error when I ...
1
vote
0answers
586 views

Windows Network Bridge Connections Greyed Out

I can bridge the connection under administrator account. I have disabled the prohibit installation and configuration of Network Bridge on your DNS domain network Group Policy setting. The option to ...
2
votes
1answer
76 views

Shared folders and permissions (windows 7)

I am creating a few files for particular users and groups with limited permissions, basically read and execute. So, its works just fine. The problem is that when a user is trying to delete a file ...
2
votes
1answer
199 views

Why is the add user or group button not available on the group policy editor for Remote Desktop Services Properties?

I have a Windows 2008 R2 Server, and I'm trying to give a domain user who is NOT domain admin the rights to login to this box via RDC. I'm logged in as a domain admin. Here's where I am: When I ...
5
votes
3answers
6k views

Windows 7 - How to run a script at shutdown but not at logoff

I was wondering if anyone knows how to configure a Windows 7 x64 Enterprise install that is on a domain to run a script if the user attempts to shutdown the computer - but I dont want the script to ...
1
vote
0answers
325 views

Restrict admin shares

My users need local admin rights but I'd like to restrict the admin shares (c$) to domain admins only. I was reading about adding nt authority\interactive to the local administrator group, but i don't ...
0
votes
1answer
86 views

When setup is removed from windows installer cache?

I observe strange behavior on several notebooks. All of them have application installed as an MSI package, through GPO deployment, from the network share. But when this network share is inaccessible, ...
0
votes
1answer
1k views

How can I create a bouncing logo screensaver?

I'm looking to create a basic screensaver, background set to a specific color, with a specific image (or images) bouncing around on the computer screen. For reference, the majority of the computers ...
2
votes
1answer
1k views

Mapped Network Drives not available in Citrix application depending on local machine

It's simpler than the title suggests. When I log into a remote application via Citrix XenApp from Box A (Windows XP) and Box B (Windows 7) I can see all local physical disks and locally mapped ...
0
votes
0answers
462 views

Remove Drive Map GPOs that are no longer being applied

I have a Windows 7 64-bit Pro laptop that had some GPOs on it (user and computer) for various things including some drive mappings that the laptop won't be able to access from its normal location. I ...
0
votes
0answers
2k views

domain gpo logon script not executing for administrators

I have a Windows 2008 DC with a logon script in the default policy. This script has been tested and works if executed manually for admins and users. However, when I login with an administrator it ...
2
votes
1answer
130 views

List modified policy options

In Windows 8, how can I find out what local policies I have modified from their default No Set values? Basically, I've tinkered with my Windows 8 laptop until i finally like it after 3 or 4 months of ...
0
votes
1answer
433 views

can not apply network map drive from “windows server 2008r2” on “windows 8” client

We recently migrated our client machines to Windows 8 but the server still runs Windows 2008r2. When we are trying to apply create network drive from the server using GPO, it does not reflect on the ...
1
vote
3answers
1k views

Can I prevent users from closing a web browser window?

I have a Windows 8 machine that will be setup in a training room. The training modules run through a web browser. I don't want the users to be able to close the browser or open any other programs, so ...
0
votes
1answer
116 views

Is it possible to set the DNS server by user?

Is it possible to change the DNS server and flush the DNS cache based on the user that is logged in via a Windows group policy or login script?
0
votes
0answers
603 views

Override Network Administration Settings

Is there a way to override settings set by a network administrator for Windows? I'm having all kinds of problems updating and sharing WiFi because it's "been disabled by the network administrator." ...
1
vote
1answer
847 views

W8 Disabling Corporate Security Policies

On my home PC I installed W8 several months ago - no problems. When I used the metro/tile interface to access my exchange mail account I was forced to accept a security policy from my employer (I ...
2
votes
1answer
2k views

How to overwrite a group policy - homepage

I'm in IT at my work but can't change the group policies. I want to know if theres a local script or registry change I can use that overwrites or changes the homepage policy. Basically I just want ...
2
votes
1answer
2k views

Assigning limited permissions for a temporary domain user to access network systems

I have set up a small Server 2008 R2 domain network at home so I can learn and practice administering it. Lets say I want to create a temporary user account to allow an auditor access to all files on ...
0
votes
0answers
413 views

Mixing Manual and GPO Mapped Drives: Manual drives not reconnecting after logoff / on or reboot

I really have spent some serious time looking for this answer before posting here. Basically, I have a GPO set up to map drives in our 2008R2 domain. It works flawlessly on our RDS server remote ...
1
vote
1answer
159 views

Find out what Windows domain policies cause certain restrictions on a workstation

I work within a team of developers in a large bank. We all have full admin rights on our win7 workstations. The Windows infrastructure in our company is getting an overhaul, so there seems to be ...
1
vote
1answer
12k views

How to copy local group policy objects from one machine to another?

I have two Windows 7 Professional desktops. One has a set of local (no Domain Controller) group policy objects imposing restrictions on what programs can be run from that system. I need to copy all ...
0
votes
1answer
3k views

Local group policy logon startup script not executing

This is for Windows 7 I have a .bat and .vbs file in a folder. The .bat runs the .vbs script. In the Local Policy Group editor, under Windows Settings/Scripts I added a reference to the .bat file in ...
0
votes
1answer
8k views

How to block USB port and CD-ROM in Windows 7 through Group Policy?

I want to block USB port and CD-ROM access in my organization through domain (GPM). I have Windows 7 on all the computers in the organization and also have Windows Server 2008. How can I do this? I've ...
4
votes
1answer
491 views

Customize the WinXP/7 logon screen behaviors

How customizable is the Windows XP/7 logon screen via group policy? For example, can I do any of the following: Display a custom error message on logon failure? Popup a custom app that launches ...
0
votes
0answers
456 views

LocalPolicy doesn't enable switch user in Windows 7 Pro

I don't have Switch User item in my start menu. Checking group policy as in Can no longer "switch user" in Windows 7 didn't help as all policied are not defined. Resulting policy is not ...
3
votes
1answer
427 views

How can I install a Windows 8 application for another user and pin it on their Start screen? [duplicate]

Possible Duplicate: Can a Network Administrator rearrange tiles on a user’s Start Menu? I am trying to create a locked down Windows 8 account using Group Policies with no tiles on the start ...
1
vote
0answers
635 views

Windows 7 Group Policy blocking Adobe Reader

A few weeks ago, my company blocked Adobe Reader due to an unpatched security issue. However, we recently moved one of our computers to a project that didn't require access to the corporate network, ...
5
votes
4answers
12k views

Group Policy: Block access to \\localhost\C$

We have a restricted Windows 7 computer that hides and prevents non-admin users from accessing the C Drive using the following policies: Prevent access to drives from My Computer Hide these ...
1
vote
0answers
43 views

Force shutdown from a remote system [duplicate]

Possible Duplicate: Shutdown whole network computers What I want to do is to allow EVERYONE Force shutdown from a remote system control. But, I don't want to do this manually because ...