Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [group-policy]

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.

Microsoft has added Group Policy Preferences Client Side Extensions, formerly a third-party tool called PolicyMaker, to its in-support Windows OSes. The CSEs greatly extend the number features which can be configured via Group Policy.

See the following links for more details.

http://gpsearch.azurewebsites.net - Searchable list of configurable group policies http://blogs.technet.com/grouppolicy - Microsoft’s official Group Policy blog http://blogs.technet.com/askds - Ask Directory Services is the official blog from Microsoft engineers supporting group policy and other related AD technologies

3186 questions
6
votes
2 answers

Can MS Office Protected View be Disabled via GPO?

I'd like to disable the Protected View MS Office files open in when opening files from email and other non-local places. We have a mixture of Office 20007, 2010, and 2013 in place so if these are controlled via different GPOs, I would need each of…
Windows Ninja
  • 2,586
  • 19
  • 46
  • 70
6
votes
4 answers

Extremely Slow Login: Group Policy Printers

I'm having a few issues with a specific GPO that's causing 5+ minute delays on logins (not just initial logins either). The server is running Windows Server 2012 I'm adding printers under Users\Control Panel\Printers (GPP), and I have a specific…
Antix
  • 383
  • 1
  • 6
  • 19
6
votes
2 answers

Find out which Group Policies take forever to complete at boot

I am trying to analyse which group policies are inflating the bootup time. What's the best way to do so? Something like gpresult including timestamps/periods would be really helpfull!
hub
  • 342
  • 1
  • 4
  • 15
6
votes
2 answers

Deploying Office 2013 via GPO

Looking at potential ways to deploy Office 2013 via GPO. First and most obvious way is to run a startup script which calls the Office 2013 setup.exe. Problem here is what happens after it is installed, will that startup script keep re-installing…
NickC
  • 2,373
  • 13
  • 41
  • 55
6
votes
1 answer

How do I set a service startup type to be 'Automatic (delayed)' using GPO?

A Windows service has 4 different startup types that can be configured: Automatic, Automatic (delayed), Manual and Disabled. I have a service running on a combination of Windows 7 and Server 2008 R2 Desktops that I need to set as 'Automatic…
growse
  • 8,020
  • 13
  • 74
  • 115
6
votes
3 answers

How do you apply proxy settings per computer instead of per user?

So far, I've used a user group policy object utilizing Internet Explorer maintenance to set a proxy for the user in IE. We have now deployed the Enterprise Client (EC) starter group policy to our domain and this policy affects this behavior. The EC…
Oliver Salzburg
  • 4,635
  • 17
  • 55
  • 82
6
votes
1 answer

Shared printer deployed via Group Policy Preferences still trying to map printers even though the GPO is deleted. Why?

I created a GPO to map a printer via Group Policy Preferences with the Shared Printer user policy. I've since deleted the GPO, but whenever I log into any machine, it still tries to map the printer, but fails (since the queue doesn't exist on the…
MDMarra
  • 100,734
  • 32
  • 197
  • 329
6
votes
2 answers

MSI-file works fine when run locally, but not when pushed from group policy

The MSI are to install a small program and an Outlook add-in. Both are installed correctly when the MSI is run locally, but when I install it with group policys from AD the program is installed but not the Outlook add-in. The files for the add-in…
Simon Lindberg
  • 61
  • 1
6
votes
1 answer

Bypassing an Active Directory assigned IPSEC policy

I was in the process of translating some locally defined IPSEC policies on my test systems into group policies. In the process I applied an incomplete policy which was missing the line that allows direct access to my DCS which aren't yet set up for…
Tim Brigham
  • 15,545
  • 10
  • 75
  • 115
6
votes
1 answer

Group policy issues

We are having an issue on one of our clients relatively new sbs installs. The domain consists of a single SBS 2011 server with 4 Windows 7 clients and 3 XP clients. Most of the time everything is fine, however roughly every 3 days, Windows 7…
Alex Berry
  • 2,307
  • 13
  • 23
6
votes
1 answer

Keep getting the password complexity error for a OU that should have it disabled

I have a specific Organizational Unit in my Active Directory domain that needs to have weak password settings. I set up my GPO and created a new policy for the OU OU=Limited Users,OU=Production,OU=VetWeb,DC=vw,DC=local called "GPO for Limited…
Scott Chamberlain
  • 1,455
  • 2
  • 21
  • 37
6
votes
3 answers

Automatically make user local administrator on their computer through GPO?

In our AD 2003 domain each user gets local admin permissions on their computer. Everyone else can login with their domain account as normal user. Right now this means going to the desktop and manually adding the user as a local administrator. Is…
Grant
  • 17,859
  • 14
  • 72
  • 103
6
votes
3 answers

How do you override a GPO with another GPO?

If there is a GPO which is applied to all Domain Computers which disables something, is there a way to re-enable the disabled thing for some hosts in the domain, without taking those hosts out of the default Domain Computers group? In other words,…
paradroid
  • 868
  • 5
  • 15
  • 29
6
votes
3 answers

Windows Server 2008 R2 Map User Specific Drive

On our old Windows 2003 SBS, the guy that set up the network created a login script that fired to map some drives and add a network printer. I would like to do away with that script and just use the GPO. We're configuring a new Windows 2008 R2…
Sam
  • 423
  • 1
  • 7
  • 13
6
votes
1 answer

Server 2008 GPO not applying to Windows XP clients over site-to-site VPN

I have a Server 2008 R2 based Active Directory domain. Our default GPO has a few printer/network drive maps that both work fine locally for clients running Windows 7 as well as Windows XP (after applying KB943729). We are currently trying to put…
Justin
  • 303
  • 3
  • 10
1 2 3
…
99 100