Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [group-policy]

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.

Microsoft has added Group Policy Preferences Client Side Extensions, formerly a third-party tool called PolicyMaker, to its in-support Windows OSes. The CSEs greatly extend the number features which can be configured via Group Policy.

See the following links for more details.

http://gpsearch.azurewebsites.net - Searchable list of configurable group policies http://blogs.technet.com/grouppolicy - Microsoft’s official Group Policy blog http://blogs.technet.com/askds - Ask Directory Services is the official blog from Microsoft engineers supporting group policy and other related AD technologies

3186 questions
6
votes
1 answer

Kill inactive user sessions on a Windows Server 2012 R2 Terminal server

I've been trying to configure a GPO to kill inactive sessions on a Windows Server 2012 R2 terminal server, but I can't seem to be able to get it done. I went to Computer Settings → Policies → Admin templates → Windows Components → Remote Desktop…
DSKyo
  • 153
  • 3
  • 6
  • 15
6
votes
2 answers

how to prevent access to \\127.0.0.1\c$ or \\localhost\c$

For security purposes, we want to prevent our users from accessing the C drive on their computers and on the terminal servers. These users are not local admins on either their workstations or the servers. We have implemented the following Group…
curwin
  • 111
  • 1
  • 6
6
votes
1 answer

"Touching" software deployment group policy programmatically or via script

I have an internal application that uses the Windows Installer. Each update to this application is a "major upgrade" (different product code, same upgrade code) and it calls RemoveExistingProducts. (In effect, this means that any time a new build is…
Nicholas Piasecki
  • 282
  • 3
  • 10
6
votes
2 answers

GPUpdate failing due to LDAP Bind Issue

When I run gpupdate on my workstations I get the following error. Computer policy could not be updated successfully. The following errors were encountered: The processing of Group Policy failed. Windows could not resolve the computer name. This…
TheGentleman
  • 291
  • 1
  • 2
  • 8
6
votes
1 answer

Installing Powershell modules through GPO

I've found one module really instresting, and want to use it on whole AD domain. Is there any way, to automatize this process? In normal Powershell, I have to simply call this command, with admin privileges: Install-Module -Name $moduleName And if…
PatrykMilewski
  • 163
  • 1
  • 6
6
votes
3 answers

Store GPO Scripts in Netlogon or Policy Folder?

Is it best practice to store logon scripts centrally in \\DOMAIN\Netlogon or in the policy folder they get put in by default, eg. \\DOMAIN\SysVol\DOMAIN\Policies\{DE22B6FB-315E-4C55-BF06-A7709913CD9E}\User\Scripts\Logon? What are the implications…
BlueCompute
  • 2,954
  • 2
  • 19
  • 28
6
votes
3 answers

Deploying software updates to remote workers

We have a number of laptop users for which deploying software updates reliably and promptly is an issue. The circumstances are: The users rarely come into the office. As a result, their computers are rarely connected to the domain/corporate LAN…
dbr
  • 1,852
  • 3
  • 23
  • 38
6
votes
2 answers

GPO to create subfolder and copy file

I am wanting to create a GPO (other methods are open for discussion as well) for the issue below. Any and all help would be appreciated, thanks! Users logs in, GPO creates a sub folder in C:\Users\%userprofile%\, then it copies a file from the DC…
Jonas Lear
  • 460
  • 1
  • 3
  • 5
6
votes
1 answer

GPO with SAMBA as DC

I am working on a network of 500 Windows workstations with Linux servers. SAMBA 4 is in use as the domain controller. Users can move between workstations, and as a results the contents of their profiles (including MyDocuments) appear to replicate…
TSG
  • 1,674
  • 7
  • 32
  • 51
6
votes
4 answers

Force windows 2003 session to log off (RDP)

We have a number of Windows 2003 machines that we RDP on to. Naturally, a lot of people forget to log off, and simply close their rdp window - which causes the max number of sessions exceeded error. I was just wondering if there was a setting I can…
alex
  • 1,720
  • 15
  • 43
  • 63
6
votes
2 answers

GPMC missing Hide/Show links

We currently have a single 2012 R2 server in our domain. As we're rolling out Windows 8+ machines I like using it for Group Policy Management. For some reason the Group Policy Management Console on this server doesn't show the "Show/Hide" links in…
techie007
  • 1,894
  • 17
  • 25
6
votes
2 answers

How can I disable the "Do you want to allow this website to open a program on your computer?" warning for a specific program/moniker?

I've been playing with new URL monikers in Windows for a utility I'm working on. When I run the new URL from Start > Run, it just runs. If I send the URL to myself via Notes or enter it into the IE address bar, I get a window which says: "Do you…
serialhobbyist
  • 451
  • 3
  • 7
  • 16
6
votes
3 answers

Set Windows default sound scheme using GPO

We have 50 Windows 7 client computers in an AD OU for which we need to change the Windows Default Sound Scheme to None. How can this be accomplished using Group Policy?
farzanakhan1234
  • 61
  • 1
  • 1
  • 3
6
votes
4 answers

Disabling the prompt to "Click Continue to permanently get access to this folder" (e.g. via GPO)

http://support.microsoft.com/en-us/kb/950934 describes the manner in which, when a member of the Administrators group uses Explorer to navigate to a folder to which the Administrators group has permission, the user will be prompted to "Click…
jimbobmcgee
  • 2,675
  • 4
  • 27
  • 43
6
votes
1 answer

How to filter settings within a GPO that only applies to Windows XP?

We have several GPOs containing many settings that have accumluated over time. I have spot-checked some of them and stumbled over settings that only apply to Windows XP (we exclusively run Vista and Win7 clients). As we are having serious…
Matthias Güntert
  • 2,438
  • 12
  • 39
  • 59
1 2 3
…
99 100