Group Policy is a feature of the Microsoft Windows NT family of operating systems that control the working environment of user accounts and computer accounts.

learn more… | top users | synonyms (2)

3
votes
3answers
6k views

Exclude site from Compability View policy

I have a client who enforces the policy in IE that all local intranet sites be loaded in the Compatibility View. Unfortunately our webapp doesn't support this and gives alot of issues in the comp. ...
0
votes
1answer
29 views

How to disable (signature-based) real-time scanning and leave behavior monitoring enabled in Windows Defender?

I believe that Windows Defender included in Windows 10 implements some forms of protection other than signature-based threat detection. Two Group Policy settings indicates this: "Turn on behavior ...
0
votes
1answer
21 views

How to disable the lockscreen in Windows 10 insider build 14367

I tried doing this using the Group Policy Editor by navigating to Computer Configuration\Administrative Templates\Control Panel\Personalization and setting Do not display the lock screen to enabled. ...
0
votes
0answers
14 views

How to connect clients to INTERNAL WSUS server but download the approved updates from Microsoft?

I have client-side targeting setup to handle some remote workstations on our network. They VPN in from time to time -- so they can hit the internal WSUS server when they are connected. I essentially ...
1
vote
2answers
3k views

How to remove Chrome policies?

I found some weird policies on my chrome by visiting chrome://policy/ (or about:policy), like ExtensionInstallSources or ExtensionInstallWhitelist. I though it may be from some virus because on other ...
0
votes
1answer
21 views

How do I get rid of the 'admin menu' you see when you right-click the Start button in Windows 10, via GP?

So I'm trying to lock down a set of lab computers, and you can't right-click anywhere on the Taskbar, via the Remove access to the context menus for the taskbar GP, but you can still right-click on ...
0
votes
1answer
3k views

How can I create a bouncing logo screensaver?

I'm looking to create a basic screensaver, background set to a specific color, with a specific image (or images) bouncing around on the computer screen. For reference, the majority of the computers ...
0
votes
2answers
20 views

Group Policy Editor on Windows 8 32Bit

I have "Windows 8.1 Single Language with Bing" installed on a device. I need to Enable "Do not display the lock screen" in Group Policy Editor (Computer Configuration > Administrative Templates > ...
6
votes
4answers
1k views

How do I display a message on login for Windows 8/8.1?

I've configured the following settings in my local security policy: Interactive logon: Message text for users attempting to log on Interactive logon: Message title for users attempting to log on ...
9
votes
5answers
64k views

Wallpaper in Windows 7 locked down by domain group policy?

So I am in a situation where my wallpaper is locked to a specific image on my work computer via group policy. I can't change it via the Personalization settings since it is grayed out and says it has ...
4
votes
2answers
133 views

Stop Windows 10 search from running commands

We disable the run box on our network through a GPO which for anything upto 10 stopped you browsing to UNC paths or running commands of any kind. In 10 it has the same effect UNLESS you use the search ...
1
vote
0answers
11 views

How do I specify advanced power settings for all users using group policy?

I need to set up a Microsoft Surface Pro tablet so that it never throttles the CPU. One solution I found using this guide is to set both minimum and maximum processor state to 100% in both battery and ...
-1
votes
0answers
34 views

Editing a group policy to allow someone to print on a colored printer

I work for a service desk and recently took a call about someone not being able to print from a colored printer. They are able to print on the printer, however everything comes out as black and white. ...
2
votes
2answers
4k views

Suddenly started to get a Couldn't connect to the Group Policy Client service. Why?

I was able to upgrade my new Surface 3 to Windows 10. It's been working fine for a week or so. Then a couple of days ago no one but myself or my wife (the only two in our family who I've made ...
0
votes
2answers
36 views

Win Server 2003 r2: Can you deploy files without using GPP?

Im trying to deploy an email signature that needs to be placed in every C:%APPDATA%\MICROSOFT\Signatures folder on each machine in my domain. I am aware of how to deploy programs with .msi file ...
2
votes
2answers
31 views

Denying access to USB ports, but setting up an “escalation” for allowing access on-demand

For Windows 7/10, is there a way to block access to USB ports, but make it so that it could be "authorized" UAC-style by an Administrator, on a case-by-case basis? I know that I can block the USB ...
0
votes
0answers
9 views

How to deploy files using Group Policy [migrated]

I wish to share a couple files to every computer on my domain. I know I need to use Group Policy, but I'm not really sure where to go from there. I am using Windows Server 2003 R2.
0
votes
2answers
4k views

Local group policy logon startup script not executing

This is for Windows 7 I have a .bat and .vbs file in a folder. The .bat runs the .vbs script. In the Local Policy Group editor, under Windows Settings/Scripts I added a reference to the .bat file in ...
0
votes
2answers
52 views

Removed SID Key and now can't log into PC

I removed SID Keys named S-1-5-18, S-1-5-19, and S-1-5-20. Now I can't log into used Win 10 Pro that I purchased recently. When I log into my Admin account, screen goes blank after a minute.
0
votes
0answers
16 views

Limit user to one fullscreen application with GPO (Win10)

I want/have to limit a kinda public computer from access. I thought i'll do it with GPO running Windows 10 Pro. I know there is the entry Run only specific Windows applications. I also looked into ...
1
vote
2answers
235 views

How do you disable Pocket on Firefox 38 and up with GPO?

Firefox announced that their new version would be integrated with Pocket. I would like to disable this for my users in my domain. What is the best way to do this?
0
votes
1answer
662 views

GPO Denied (Security Filter) not applying

I am having an issue in my company. I have a GPO, and one group in security filter, lets name it group X. In my delegation, I set the permissions to X (Allow Read and Allow Apply Group Policy). The ...
0
votes
1answer
37 views

On a shared drive, how prevent users from changing folder structure, while allowing them to change a content of these folders?

I have a shared network drive which is shared by means of GPO. This drive has some folder structure with many nested subfolders each of which could contain files. I want: I want to prevent users ...
1
vote
2answers
3k views

Configuring group policy to bypass proxy server for local addresses and adding a domain to trusted root certificate authorities

I am an intern who has just started in a new company. I have never used the group policy editor before. However I suggested that I believed it is possible to accomplish the two tasks we wish using the ...
0
votes
0answers
15 views

Customising and manipulating Local Policies in non-AD network

I'm running a small LAN mainly of clients running Windows 8.1 Pro/Enterprise. I've used GPEdit/SecPol MSC and equivalent reg keys to manipulate local policies and items listed as being able to be set ...
0
votes
0answers
23 views

gpresult group membership incorrect

I have deployed a printer for each user of one group via print server. When I add person to this group and just run the command " gpupdate /force ", I can see the printer appeared on Devices and ...
1
vote
0answers
14 views

Office 2013 First Time Run video plays every time

I have a user running Office 2013 (32-bit) on Windows 7 Professional (SP1). Every time they open an Office application, they get shown the First Run video. Office is fully updated, and I have run a "...
4
votes
3answers
394 views

Restrict Access to the Microsoft Store

I am trying to disable the windows store locally our Windows 10 machines. In group policy I set Turn off the Store application to Enabled: I then rebooted the machine. When I tried to access the ...
17
votes
5answers
124k views

How to hide drive for specific users in Windows 7?

I need to hide the D: drive for specified users on Windows 7. How can I do that?
1
vote
1answer
54 views

Allow enhanced PINs for startup with Bitlocker

I use PIN to unlock a windows 10 machine with bitlocker-protected OS drive. Currently, only 0-9 characters are allowed in PIN. Following a documentation, I enabled "Allow enhanced PINs for startup" in ...
0
votes
0answers
41 views

Server 2012 R2 Group Policy targeted to a specific computer on domain not enforcing

Thanks everyone who's viewed this and gives me an input on it. I have a Server 2012 R2 and I am trying to enforce a specific group policy ( Remote Session Time Limit ) to 11 Windows 10 Professional ...
0
votes
0answers
63 views

Mapping Drive with GPO worked - but not anymore

A couple weeks ago I created a few test mapped drives. I used the item level targeting feature to target a security group. I also used the item level targeting to single myself out for future ...
0
votes
0answers
13 views

Windows Joystick Jitter

I have an Axis T8311 Joystick connected to a Windows 7 64-bit computer. I noticed that the joystick control jitters by 1px on the x-axis or 1px on the y-axis at a time every few seconds. I am ...
0
votes
1answer
3k views

Group Policy Confusion (Printers configured under users?)

I'm befuddled. Active directory usually makes a bit more sense than this. The Problem: Referencing the images below (with private info removed), it appears that Printer Connections are being defined ...
1
vote
1answer
47 views

Remote Desktop Services: start a program on connection within desktop environment

I have Windows Server 2008R2 with Remote Desktop Services. I need certain program started on every connection, within normal remote desktop environment. I tried this group policy: "Local Group Policy"...
2
votes
1answer
135 views

Enforced group policy object not applying on Windows 10

We have two screen lock policies in the domain controllers GPO editor. 1 applies to 'authenticated users' so it will affect all users on the domain, as intended. It is not enforced. It sets the ...
0
votes
1answer
77 views

Find out what does change the settings for User Account Control all the time

The settings of the UAC get changed by some app/program/process. As a result I can't open Edge, calculator, Windows store or any other Metro style app. If I try to open it I get xxx can't be ...
1
vote
0answers
130 views

Logon Script with net use * /delete /yes

I'm trying to get rid of all manually mapped network drives on all workstations in my domain. I want our end-user's mapped drives to be mapped solely via GPO (GPO's are already in place). I'm trying ...
0
votes
1answer
20 views

Windows 7 Drive permissions (alternative to group policy) block access to internal OS Drives from external OS

Windows 7 admin user (version without group policy) Hi, i want to block access (read write view etc) to the internal OS drive (boot & C:) from external OS drives pluged in. The external OS can ...
14
votes
1answer
43k views

How to disable Windows 10 memory compression?

my former wrong assumption: it drains my notebook battery and I've no shortage of RAM. In Task manager you see ntoskrnl.exe is eating more CPU time than any other process. this feature does not appear ...
0
votes
1answer
22 views

What happens if GPO (GPUpdate) is Interrupted

I am writing a small script but it's important to handle the excpetion. I am wondering what happens if I run GPUpdate command and it's interrupted. For example, user closes CMD, closes their laptop ...
0
votes
1answer
37 views

What are “scriptlets” the referred to in Windows Group Policy Editor?

The Local Group Policy Editor in Windows 7 has a policy option to restrict the running of "scriptlets". This option can be found in Computer Configuration > All Settings > Allow scriptlets and ...
0
votes
0answers
10 views

Port blocking on client machines

Is it possible to block specific ports, in this case 80 and 443 for specific client machines. I am using windows server 2012 as a domain controller and have a group of clients that I want to be denied ...
1
vote
3answers
4k views

Windows Server 2012 R2 does not automatically reboot after installing Windows Updates

Our Windows Updates are installed automatically during the maintenance window, which is configured manually on each of our 2012 R2 servers, so that we can specify different times for each server, or ...
0
votes
1answer
75 views

Windows 10 prompts on new computers [duplicate]

Good morning. Since I started here a lot of computers are getting Windows 10 prompts. I have done everything I can think of to get rid of them but they continue to be a pest. Here is what I have ...
0
votes
0answers
27 views

export a security rules in registry or gpedit and import to other systems

I add some additional rules in software restriction policies on my windows, now want to make a batch file or any other kind of files to export this rules and import them on another system. I export ...
0
votes
0answers
225 views

Missing folders in gpedit.msc

In order to deny the automatic updating of a specific device's driver, I found out that I can get by this through the Local Group Policy Editor. I am running Windows 10 Home OEM on my laptop and, ...
0
votes
1answer
35 views

How to override a specific group policy setting?

I am working on testing Cached Exchange Mode for my organization and am having some trouble getting the GPOs to apply how I'd like them to. We currently have a company wide MS Office GPO. As part of ...
0
votes
2answers
764 views

Windows 10 - Disable Reset My PC

So a member of staff just thought it would be a good idea to use the "Reset My PC" function in Windows 10 as they were having trouble uninstalling some software. Does anyone know of a way to disable "...
6
votes
3answers
17k views

Can I turn off or disable Store App from Windows 10?

I need to turn off or disable the Store App from Windows 10 as I used to in Windows 8.1 using GPO (gpedit.msc) in local computers but Win10 doesn't have that option anymore Computer Configuration => ...