Group Policy is a feature of the Microsoft Windows NT family of operating systems that control the working environment of user accounts and computer accounts.

learn more… | top users | synonyms (2)

1
vote
1answer
688 views

Windows Server 2012 Password Experation GPO Not Applying

We have a single DC and are trying to enforce Password Policies to all of our computers. We're trying to change it from the default 42 day max password age to 120 or so. The policy appears to be set ...
1
vote
0answers
1k views

No Google folder under Administrative Templates via Group Policy editor - Adding GoogleUpdate.adm does nothing

I'm unable to complete "Step 2" : Step 2. Importing Google Update ADM template. Navigate to Local Computer Policy > Computer Configuration > Administrative Templates Right-click Administrative ...
0
votes
1answer
36 views

Prevent windows computers from remembering last account with group policy

I have computers joined to an active directory domain. My users have roaming profiles because they will be using different computers in the office. Currently the computers will default the username to ...
2
votes
0answers
290 views

Enabling welcome screen Windows 7 Embedded

I want the list of available users (without the hidden admin account etc) displayed. To facilitate an easier login experience. Things I have tried: Security policy editor: secpol | Local Policies ...
0
votes
0answers
115 views

Is there a way to automatically disable the UAC each time Windows 7 boots (I'm an administrator)?

At work, we have a group policy (I think it is a group policy, correct me if I use the wrong term!) that automatically resets the UAC to "Default" every two days or so. I'm administrator on the ...
0
votes
1answer
284 views

Windows 7 Enterprise - How to remove “Maintenance Folder” and its respective shortcuts for all the users in a domain?

I am trying to remove the "Maintenance Folder" and cleanup the statr menu for my company. I seem to have hard time to remove this folder. Is there any registry value or GPO setting to deploy in order ...
0
votes
0answers
10 views

Attempting to add an existing group to a group remotely using psexec [duplicate]

Basically want to remotely configure the Administrator groups for one of our devices remotely through the command prompt. I figured psexec would be the tool for the job, however the only thing I can ...
0
votes
0answers
429 views

Group Policy Error Code 0x80070005

We have a group policy set up, it's a computer policy that moves a file from a network location to the standard Windows wallpaper location C:\Windows\Web\wallpaper. A user policy then sets the desktop ...
1
vote
0answers
153 views

windows 7 - File System missing in Local Group Policy Editor

I'm trying to manage some folder permissions in my computer, I need to use Computer Configuration/Windows Settings/Security Settings/File System, as described here or here, but I can't find File ...
0
votes
0answers
45 views

Blocking installing software on Windows 7

I've created standard user account, but still I can install software on this standard account. How can I block this using GPO? Regards
1
vote
0answers
52 views

Windows 7 and GPO - how make this rules?

First, sorry for this inaccurate post title, but I can't think of better. My "great" IT teacher gives me commands to execute (all can affect only one, selected user) Block installing software, ...
0
votes
1answer
658 views

Software wont deploy, but GPO gets applied and MSI is installable manually

DC: WinServer2012, Client: XP Hi there, i have a problem getting a GPO install to work. I created a MSI thats hosted in a network share: \\server\Deployment\xxx\xxx.msi when i log on to a computer ...
0
votes
2answers
561 views

Blocking domain group policy on a local machine in Workgroup

I have created a VM for Win XP which is running now in a Win 8 host system using Hyper-V. This Win XP VM was initially connected to the my company's domain but now disconnected and is part of the ...
1
vote
0answers
880 views

Outlook 2013 keep asking for password

We having problem where outlook is keep asking for password every time you start outlook. Things I tried I have created new outlook profile - still same problem Clear all passwords from password ...
0
votes
0answers
404 views

Is there any method in domain network that only prevent “ local users account(clients local user) ” log on?

I've been looking for a method in domain network to only prevent "local users account(clients local user)" log on ( but "domain users account" must still could be log on in clients) I try to do this ...
0
votes
1answer
1k views

Folder Redirection GPO setting desktop but not showing it

I've set a folder redirection group policy at one of my clients. It works for everyone except 1 user, who has the same permissions structure as everyone else (themselves and me, both full control). A ...
1
vote
1answer
149 views

Getting rid of Group Policy

I am running Windows 7 on a Dell Laptop. I am the only user/administrator. On almost all programs I try to download or run, I am getting an error of "blocked by group policy. Contact system ...
0
votes
0answers
102 views

Restricting user access to certain features via registry on Windows 8.1 Home Premium

I need to restrict user access to Control Panel for example. And because its Home Premium version of Windows it doesn't have Group Policy Manager. Im using this list to do those restrictions. First ...
1
vote
2answers
146 views

Can't get symbolic link creation permissions to work under windows

I am trying to grant my user the privileges to create symbolic links. I ran secpol.msc and navigated to Local policies -> User rights assignment -> Create symbolic links. I have added my user's ...
1
vote
0answers
85 views

Local group policy editor: Out of date version?

I've been trying to use gpedit.msc recently but I haven't been having much success. Sometimes the policy editor freezes when I press "apply" (the policy does still apply though), and I can't seem to ...
0
votes
0answers
34 views

How to turn off monitors after period of activity using Group Policy? (SBS 2003)

I am attempting to set our organization's workstation monitors to be turned off after a set period of time, via Group Policy. Could someone guide me through how this can be achieved with SBS 2003?
0
votes
0answers
93 views

Group policy WMI Logon Server

I'm trying to setup a GP to do tasks if in a certain location, I believe the best way in doing this is a WMI filter. Could someone help me out? I've never used this part of GP before. Was looking ...
0
votes
0answers
172 views

Cannot enable Notification Area in Windows 7

In 64-bit Windows 7, I cannot enable the notification area in the taskbar at all. Every time I try to customize the notification and system icon settings, it says "Some settings are managed by your ...
1
vote
1answer
2k views

Can a GPO be exported from one server and imported into another?

I have a W2008R2 server where we have a default GPO setup. I like the setup and do not want to recreate it for our new W2012 server. I did export it from 2008 but the only option I can find to import ...
1
vote
1answer
81 views

User/Group name validation in Group Security Policy

Why does GPO editor doesn't check validity of given username/groupname in 'Add User or Group' dialog box. It doesn't check if valid name was given when you apply in actual policy dialog box (For ...
0
votes
1answer
150 views

Add Printer requires UAC to admin

I have several non-admin users on my Active Directory domain that need to be able to add printers without an admin entering their credentials at a UAC prompt. How do I use group policies to allow ...
1
vote
1answer
494 views

How do I set default internet zone level with Group policy?

I have been trying for a while to get this done with no success. It looks like my group policy settings are being applied when I run the group policy results wizard. Here is what I am doing to set ...
0
votes
0answers
43 views

Prohibit Windows users from creating open shares with anonymous login/access

Is there a way (using GPO or registry key) to block a windows users when they attempts to create an open share which allow anonymous login/access ? thank you.
1
vote
0answers
198 views

How to enable program execution blocked by domain group policy

How can i enable program execution from any path in local computer using regedit when it's blocked by domain policy? I managed to remove policy restrictions from registry but this one escaped.
1
vote
0answers
1k views

DisableCAD local security policy on standalone Windows 7 machine reverts to Enable after reboot or logging out

I have been struggling for days trying to resolve this issue. We are required to have our users press ctrl+alt+delete to login to our systems. The local security policy has the "Interactive logon: Do ...
0
votes
1answer
117 views

After a restart, preventing Group Policy Update from updating the registry values

My machine is part of a corporate domain and I have local admin rights on this machine. Due to the GPs applied, I was not able to change my wallpaper. So I did a GPResult /v and figured out the ...
0
votes
1answer
693 views

Add Computer and User to Domain - Can't login

I have set up a domain on my netowrk, as following: Domain Controller: HostName: DC001 OS: WS2008R2 Domain name: test.local Domain admin user: diego Domain admin user: password User "diego" can ...
1
vote
2answers
2k views

How to remove Chrome policies?

I found some weird policies on my chrome by visiting chrome://policy/ (or about:policy), like ExtensionInstallSources or ExtensionInstallWhitelist. I though it may be from some virus because on other ...
1
vote
1answer
191 views

What will break if I move my Domain Controller machine accounts from the default OU into another OU, assuming the policy is linked?

Background: I've been helping out with a recent G.P. simplification (read overhaul) at work. I'm working from a list of things my supervisor has requested be done with Group Policy to harden our ...
0
votes
2answers
487 views

How to add group to local administrators throughout the domain

We have a requirement for a tool to need local administrator access to all systems in the domain (security scanning tool). Here are the steps taken so far: Created an account Added the account to a ...
0
votes
1answer
28 views

identifying new GPOs pushed down from Active Directory

How do you identify the recent and Group Policy Objects that have been pushed down to a client machine? I am trying to identify if any new IE settings were pushed down recently.
0
votes
1answer
96 views

Show hidden icons in icon tray through group policy

Had previously hidden the icon tray through group policy and would now like to add the volume control/sound icon back to the tray. I have disabled the "hide the notification area" and forced the ...
0
votes
1answer
169 views

Group Policy Management - Mass registry change

I have a number of group policy objects that I need to change all registry keys in the preferences:\windows settings: registry\hkey_local_machine\software\Microsoft\windows NT\current ...
-1
votes
1answer
53 views

Seamlessly Refresh Group Policy

I have created an application that manipulates local Group Policy. The policies that I change require the user to log out and back in again. gpupdate.exe /force will not work because these policies ...
0
votes
1answer
3k views

Locking and Terminating User Sessions via Group Policy settings

To conform with some new security requirements, my company is implementing Group Policy solutions to existing security vulnerabilities. My current assignment is to find and implement Group Policy ...
0
votes
0answers
91 views

Active Directory control screen saver based on user's email address

I want a particular screensaver for users on my AD, with primary email address as @abc.com and a different screen saver for users with email address as @xyz.com? How can I achieve this easily? We ...
0
votes
0answers
723 views

Set chrome's “Ask where to save each file before downloading” setting via group policy

I am deploying chrome throughout our domain via group policy. I want to require that all file downloads ask where to save the file. There is a setting in chrome to "Ask where to save each file ...
4
votes
1answer
347 views

How to make computer (or user) trust signed software

I have an application, which I sign and timestamp using a code-signing certificate issued by thawte, with intermediate authority Thawte code signing CA - G2. The signature is OK (as it shows in file ...
0
votes
1answer
29 views

Computers at office acting as one [closed]

There are 4 computers in the office and 8 people working different shifts. I want all of us to be able to login into personal account from any computer at office and see personal email, document ...
1
vote
2answers
886 views

Edit already existing Scheduled Task through GPO

I have been searching for a while but not getting much out of my trusty friend Google at the moment, so wondering if someone else out there might be able to share some wisdom. By default, Windows has ...
0
votes
1answer
332 views

gpedit Remote Desktop Session Host security option missing

i am trying to configure a secure remote connection to a pc though a guide, and when i tried to find the Administrative Templates > Windows Components > Remote Desktop Services > Remote ...
0
votes
0answers
69 views

User can still run programs that are disallowed by group policy (on one computer)

On one computer, a user can run programs that have been disallowed by group policy. I have check rsop and it shows that setting as enabled and those programs are to be blocked. The user has the same ...
1
vote
1answer
613 views

How to return a GPO to Not Configured?

Recently a new piece of software started being included in our corporate Windows 7 image that, during silent install during the deployment process with Windows Deployment Workbench, sets the Windows ...
0
votes
2answers
5k views

Connect to VPN before Windows 7 starts

I am building a laptop with Windows 7 SP1 x64 which will be used by a remote user. The laptop needs to be locked down so they can only do their work and nothing else. It will have a VPN connection ...
0
votes
2answers
1k views

Active Directory and Mac OS 10.5 - how can I get the GPO's network drive on the Mac, and get the home directory of the user to map correctly?

I have a PowerMac G5 computer that I have joined to the Windows domain network successfully. I am able to login successfully with domain credentials. However, it does not include any of the network ...