Group Policy is a feature of the Microsoft Windows NT family of operating systems that control the working environment of user accounts and computer accounts.

learn more… | top users | synonyms (2)

1
vote
2answers
32 views
+100

Server2012r2: Trusted sites greyed out in IE11

I have a problem with trusted sites definition in Win Server2012r2. I am not able to manually add any site since the "add" button is greyed out. My primary objective was to add particular web pages ...
1
vote
0answers
78 views

windows 7 - File System missing in Local Group Policy Editor

I'm trying to manage some folder permissions in my computer, I need to use Computer Configuration/Windows Settings/Security Settings/File System, as described here or here, but I can't find File ...
5
votes
2answers
2k views

Unable to completely disable Offline Files feature for Windows 7 in GPO

I have been trying to completely disable the offline files feature for all the W7 PCs on the domain that I manage. I have been unable to. I do not want this feature as it creates unwanted, largely ...
1
vote
1answer
27 views

How can I edit local Group Policy settings using command line?

I'm attempting to throw together a script for work that allows BitLocker without a compatible TPM. The setting is "Configuration \ Administrative Templates \ Windows Components \ Bit Locker Drive ...
0
votes
1answer
18 views

Error upon File->Open, every time

I have a Windows 7 Professional desktop that I have begun to use, logged in as a network user to a Samba4 AD domain. Whenever I go to open a file within an already-running program (e.g. by choosing ...
0
votes
1answer
30 views

Member of Local Administrator group but can't run cmd as admin

I am part of a domain, my personal user account is not the domain admin. However, I am a member of the local Administrators group. Even so, I can't open CMD as admin! When I try, it asks for the ...
1
vote
0answers
16 views

How to disable content view in windows explorer

Im trying to find a way to disable content view in windows explorer on windows 7 clients. I found this: ...
3
votes
3answers
63 views

Iexplorer.exe as Custom User Interface - Restart if closed?

I'm currently configuring a Kiosk machine using "IExplore.exe -K" as a replacement shell, everything is working fine. Unfortunately you can still kill the IExplore.exe session by hitting Alt-F4. ...
0
votes
0answers
39 views

How can I tell which hive specific registry keys belong to? [closed]

I am currently trying to make the most secure computer I can. One that is immune to both viruses and the stupid ass kids at the centre fucking it up..... again -_-. I am using the inbuild ...
1
vote
0answers
12 views

How come UAC logs are not being stored in Event Viewer?

In Event Viewer, under Applications and Services Logs, UAC logs are not being stored. How do I enable them? Could Domain/OU group policy have them disabled? If so where can I see that it is disabled ...
0
votes
0answers
17 views

Forcing Windows Update settings through Group Policy on a Server 2003 domain

I have an existing Server 2003 domain with Windows 7 clients. I'm trying to force the Windows Update policy to download and install updates on all clients at a scheduled time. All existing client ...
0
votes
1answer
11 views

Dir command not working on one UNC Share

We have a process that runs in SQL Server which executes a DIR command on the local network using a UNC path to check that the files generated by another system are all there, as part of an audit ...
2
votes
3answers
79 views

What causes CTRL-ALT-DELETE to be enabled on a non-domain-joined system?

Recently, on my personal laptop running Windows 7, my login screen turned into a CTRL-ALT-DELETE secure login screen. I've looked around for reasons why this might be the case, and the only indication ...
1
vote
1answer
4k views

Allow Microsoft accounts to be optional without Group Policy?

I am trying to use the Windows 8.1 mail client without using a Microsoft account, and I've located this page to find out how. The instructions Microsoft provides involves the use of Group Policy to ...
-1
votes
0answers
23 views

How is it possible to set password policy on user level when AD password policy is in place?

I need to check password security settings for AD users and SQL Server users. So, as AD is in place, I simply obtained the AD Password Policy: Here we see that the maximum password age is 42 days. ...
5
votes
3answers
17k views

How can I disable WiFi when computer is connected to LAN with wire, using GPO?

Is anyone of you know how to disable, thru a GPO, the Wireless connection as soon as the computer is connected to the LAN with a wire. By example, a user is at home with his laptop, connected to his ...
0
votes
0answers
7 views

Export the local group policy editor settings

I opened mmc.exe and from File>Add/delete snap-ins I added Group policy object editor for a specific user. Now after changing the settings I want to be able to export the settings and in future I ...
0
votes
0answers
24 views

How to give permission to user groups rather than only a user?

I opened mmc.exe and from File>Add/delete snap-ins I added Group policy object editor for a specific user. From here I an give and deny access to many settings(around 100 in my case) on the ...
0
votes
1answer
3k views

Local group policy logon startup script not executing

This is for Windows 7 I have a .bat and .vbs file in a folder. The .bat runs the .vbs script. In the Local Policy Group editor, under Windows Settings/Scripts I added a reference to the .bat file in ...
0
votes
0answers
10 views

GPO Office Installation - Script runs on PC, How could I get it to appear when a user logs in? [migrated]

I currently have a GPO created that installs Office 2010 for users during startup of the PC. This script is set to run for specific PCs. Is there any way that I can get the script to appear and run ...
0
votes
2answers
2k views

Configuring group policy to bypass proxy server for local addresses and adding a domain to trusted root certificate authorities

I am an intern who has just started in a new company. I have never used the group policy editor before. However I suggested that I believed it is possible to accomplish the two tasks we wish using the ...
0
votes
0answers
12 views

Userinit value is replaced by wrong string

I am dealing with a quite difficult issue. On 2 HP ProBooks there are 2 user accounts each. One admin and one standard. The admin user works fine, but the standard user isn't able to log in since it ...
-2
votes
1answer
20 views

How to prevent Windows from accessing a directory inside a share?

At work, domain group policy is set to display a background image located in a shared folder. The path is similar to: \\example\gpo\desktop.jpg The image is ugly and distracting. Unfortunately, ...
0
votes
0answers
20 views

Allow standard Windows 7 users to install updates to 3rd party pre-installed software (no domain)

I have a group of Windows 7 users that are part of a Windows Workgroup (no A/D), with limited local rights (users). I have set the accounts to have the ability to run Windows updates, though, they do ...
2
votes
1answer
40 views

Block User account Control GPO on PC

I am a local administrator on my win 8 PC which is on a domain. In order for the Win 8 apps to work I need to have both UAC and the firewall enabled. They are being disabled by a domain GPO. Is it ...
0
votes
1answer
23 views

Active Directory on Windows Server Standard Group Policy Custom Interface not working

I am trying to create a group policy to lock down specific computers to be used as a kiosk. I have created a user account in active directory to use on the kiosks and set up a group policy in the ...
0
votes
0answers
11 views

Applocker Exceptions issue with Photoshop Droplets

I have Applocker configured (GPO) to block .exe files from executing on %OSDRIVE%/* unless they live in %PROGRAMFILES%* and %WINDIR%*. This prevents users from running self-executing applications, ...
0
votes
2answers
44 views

Most files and all folders have read only permissions [duplicate]

I recently installed windows 7 64 bit on a SSD and now, it appears that all of my folders and most of my files are read only. I have tried to remove the read only aspect of them, or take ownership of ...
0
votes
2answers
49 views

Must I purchase Windows Server to set policies or enable domain login?

If I want to setup a few Windows 7 or 8 PCs to only permit logins using domain accounts, must I fork out the cash to purchase a Windows Server for this? Or a LDAP server such as the Apache DS or even ...
1
vote
2answers
163 views

When Windows 7 tells me 'Consider changing your password', how long have I got until password expiry?

I'm on a corporate desktop, running Windows 7. We have a password expiration policy which mandates that passwords are changed every month or so (not sure of the exact period). When password expiry ...
1
vote
1answer
19k views

Remote desktop “Launch initial program” doesn't work

Terminal Services Configuration RDP-Tcp v6.1 Environment setting: Run initial program specified by user profile and Remote Desktop Connection or client Run mstsc.exe on the client Enter the server ...
1
vote
0answers
35 views

Group Policy install software PER USER

Need to deploy an MSI file with Group Policy. No other software deployment options are available, so no SCCM, etc. Here is what I need: 1. Software must be deployed PER USER. 2. Software must ...
0
votes
0answers
43 views

Reflect HKLM/SOFTWARE/Policies registry changes to HKCU/Software/MS/Win/CV/GPOs

Ok so I have a Local Group Policy (under Computer Config, not User Config) to force install extensions in Chrome. This policy needs to run for every user of the computer. The value is going to change ...
0
votes
0answers
43 views

Deploying webcams with Lync via RDP

I am currently working on an IT project for my internship regarding the implementation of webcams and Lync via RDP on thin-clients. The goal is to let users, who are logged in on a thin-client via ...
0
votes
0answers
32 views

Dollar sign '$' in the output of whoami in Windows

It is a domain environment. There are several machines, connection to whom must be performed under user joined specific groups ("Super Manager Users" and "Super Admin Users"). But there is some issues ...
0
votes
0answers
22 views

Is it possible to script Windows GPO configuration tasks?

I have a login script on my domain that is configured through Group Policy Management (Start -> Administrative Tools -> Group Policy Management), as per this screenshot, logged on to a Windows 7 ...
0
votes
0answers
10 views

GPO issue with Print Management

After adding all of our printers to their proper security in print management, the deployed printer only shows one of the security groups they have been assigned. Most other printers in this network ...
0
votes
1answer
71 views

Enable Local Users and Groups in Basic Edition? Or Registry Table for it?

I have a Basic version of Windows 8.1 (home version; premium; whatever). I do not have a corporate or business version. I know that Group Policy Editor is just a fancy interface for this Group Policy ...
0
votes
3answers
250 views

How Do I Allow A Standard User to Install Programs?

Yes, I realize that defeats the purpose of standard user. But here is the situation. A friend of mine wants to set up time limits for his home schooled son, and his son needs to be a standard user in ...
2
votes
1answer
472 views

How to enable CredSSP

I am trying to use the -Authentication CredSSP switch when entering with PowerShell (2.0) in order to remotely launch a Script that can write to files or set up new PSDrives. I get an error when I ...
1
vote
0answers
79 views

Suspicious Group Policy Behaviour

I am running Windows 8.1 x64. I should start by stating that I am not part of a domain and that computer is only used by myself. I have two accounts on the machine. My standard user account which is ...
1
vote
1answer
72 views

Recent Windows Update causing Admin issues in Windows 7

After a recent Windows Update in December 2014 or January 2015, I now have to run a lot of programs as Administrator in order to avoid access/security errors. I'm not sure why, as I'm a local ...
2
votes
3answers
1k views

Prohibit computers from showing in 'Network' in Windows Explorer

Can someone tell me how I can prohibit certain users from seeing the whole network in Windows Explorer? We are in an AD based domain with 2003 schema. I need to restrict users from seeing all ...
1
vote
1answer
32 views

Trouble with certificate checking on a closed network

I'm managing a Active Directory domain with about a hundred Windows 7 clients running IE9. The network does not have access to the Internet, but do have the ability to access a vendor web application. ...
0
votes
0answers
62 views

Installing software from user account as admin without having to log off log in

Is there a way with a GPO to allow an administrator to install a software from a standard user account? Let say I want to install Itunes from a standard account. I would like Windows 7 to pop an ...
1
vote
2answers
83 views

Can't get symbolic link creation permissions to work under windows

I am trying to grant my user the privileges to create symbolic links. I ran secpol.msc and navigated to Local policies -> User rights assignment -> Create symbolic links. I have added my user's ...
1
vote
2answers
71 views

How to forbid IE to browse a https site if the cert is not trusted?

I've been Googled for a while, and didn't find any easy way to do this. Basically, I want to make sure the IE users in my network cannot browse possibly phishing site, or those are compromised with a ...
0
votes
1answer
235 views

Group Policy settings for the Windows Firewall are sometimes ignored on startup

We deploy our Windows Firewall settings (among other security settings) as local policies to our machines. They are not part of a domain. There is a weekly restart configured for each machine, ...
0
votes
1answer
29 views

OSX / Accessing Chrome Local Policies

A few years ago, I set a policy for Chrome on my Mac. I can see this policy and its value via chrome://policy. It says that it applies to "Current user". But for the life of me I can't remember where ...
0
votes
0answers
99 views

How GPRESULT Calculates Security Group Membership

Before I ask my question, I'll provide some background on how I arrived here. So, I was searching for a quick way to display the security groups an AD user is a member of. Ultimately, I'm trying to ...