Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [group-policy]

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.

Microsoft has added Group Policy Preferences Client Side Extensions, formerly a third-party tool called PolicyMaker, to its in-support Windows OSes. The CSEs greatly extend the number features which can be configured via Group Policy.

See the following links for more details.

http://gpsearch.azurewebsites.net - Searchable list of configurable group policies http://blogs.technet.com/grouppolicy - Microsoft’s official Group Policy blog http://blogs.technet.com/askds - Ask Directory Services is the official blog from Microsoft engineers supporting group policy and other related AD technologies

3186 questions
6
votes
1 answer

GPO startup script not being ran

I am unable to get a GPO to run a script on startup. The script creates a shared folder on each machine in a group of windows 8 machines. The script itself works great, but attaching it to a GPO is giving me a problem. Even after gpupdate /force…
Adam H.
  • 71
  • 1
  • 1
  • 5
6
votes
5 answers

Advanced Audit Policy not getting applied on 2012 R2

I have configured several avanced audit policy settings under: Computer Configuration => Policies => Windows Settings => Security Settings => Advanced Audit policy Configuration => Audit Policies => ... Also the following setting is set to…
Matthias Güntert
  • 2,438
  • 12
  • 39
  • 59
6
votes
2 answers

Determining if group policy needs to run synchronously

I have been working on speeding up network logins. As part of this process I'm disabling the 'always wait for network' option. This isn't inherently a problem, but I would really like to be able to pop up a dialog along the lines of "we see your…
Tim Brigham
  • 15,545
  • 10
  • 75
  • 115
6
votes
2 answers

Enable offline file sync for computer owner only

At the school I am interning at, all students and faculty have a mapped home folder known as the "M:" drive for storing files that they can access from all computers. For faculty who have laptops, we enable offline file sync for the "M:" drive so…
Krixvar
  • 63
  • 5
6
votes
4 answers

powershell vs GPO for installation, configuration, maintenance

My question is about using powershell scripts to install, configure, update and maintain Windows 7 Pro/Ent workstations in a 2008R2 domain, versus using GPO/ADMX/msi. Here's the situation: Because of a comedy of cumulative corporate bumpfuggery we…
user52874
  • 829
  • 2
  • 12
  • 26
6
votes
3 answers

Hide Network Icon in File Explorer on Server 2012

How can I hide the network icon within Windows Explorer in Windows Server 2012, via group policy? I can do this on 2008R2 using the Windows Explorer "Extra's" settings, but no such setting exists for Server 2012. The 2008R2 setting within group…
nairware
  • 309
  • 2
  • 10
  • 17
6
votes
2 answers

Can I use the GroupPolicy PowerShell module on non-AD standalone servers?

I am trying to use the GroupPolicy PowerShell module to manipulate and read local group policy settings on a standalone Windows 2012R2 server. When I try to execute the Get-GPOReport cmdlet: Get-GPOReport -All -ReportType Xml I get the following…
Kev
  • 7,877
  • 18
  • 81
  • 108
6
votes
2 answers

Windows - Software restriction policy to block exe files in all subdirectories

How can I block all executables in %APPDATA%? I've read for CryptoLocker this is a good policy: C:\Users\User\AppData\Roaming\*\*.exe But that apparently won't protect more than one layer deep. But what's to stop someone from going another…
test
  • 317
  • 1
  • 3
  • 7
6
votes
1 answer

Removing GPO - comprehensive list of 'tattooed and non tattooed' registry settings

Is there a comprehensive collection or perhaps even a 'quick guide' to which GPO settings (or registry keys) are protected from GPO 'tattooing'? I have a few clients who have horrendous GPO policies (not well named, some are added to default…
Mike66350216
  • 277
  • 1
  • 5
  • 12
6
votes
2 answers

Minimum Number of Port need to Open between Windows Client & Domain Controller Only

I just want to know, which port need to be open if i place firewall between Windows Client ( XP or 7 ) and Domain Controller ( Window Server 2008 R2 ) Please note it is between Client and DC and not between DC to DC I have searched on google, but in…
Param
  • 1,357
  • 14
  • 36
  • 52
6
votes
3 answers

Windows GPO Software Restrictions Policy not working with %TEMP% variable

I'm trying to put in some meagre additional malware prevention measures, by restricting the execution of *.exe in a handful of locations -- in particular, the temporary folders that various compression tools unzip to, when a user might choose to…
jimbobmcgee
  • 2,675
  • 4
  • 27
  • 43
6
votes
2 answers

Terminal Server - Group Policy prevent command line

I have a Windows 2008 Terminal Server. Terminal Server Configuration(licence server, session broker, etc) is managed by group policy. If i want to disable logon via: change logon /disable The Error Message: "Connections are currently ENABLED by…
quentin
  • 686
  • 5
  • 8
6
votes
1 answer

can the require user's permission be set in a gpo?

We are using Windows 2008R2 Server for our Domain Controller and a Windows 2008 for our Remote Desktop users. We have to support them or get them out of something on a regular basis. We have quite a few users. I checked the group policy but I…
JohnDoe
  • 183
  • 3
  • 16
6
votes
1 answer

Drive mapping maps two different folders for elevated and non-elevated programs

I have a Windows 2012 Domain with a couple of Windows 8 x64 Enterprise members. I want to use Group Policies to map a drive X: to a folder on a file server. The drive X: should be available on the Windows 8 machines for elevated and non-elevated…
JRoppert
  • 311
  • 1
  • 2
  • 6
6
votes
1 answer

Local Group Policy not updating. RSOP and GPResult show stale data

This issue exists on a Windows 7 Pro x64 machine (Dell Inspiron E6420). I am trying to adjust a setting using gpedit.msc, but the change never seems to take effect. By that, I mean the setting that is changed never shows up in rsop or gpresult. The…
tpenafiel
  • 71
  • 1
  • 2
  • 4
1 2 3
…
99 100