Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [group-policy]

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.

Microsoft has added Group Policy Preferences Client Side Extensions, formerly a third-party tool called PolicyMaker, to its in-support Windows OSes. The CSEs greatly extend the number features which can be configured via Group Policy.

See the following links for more details.

http://gpsearch.azurewebsites.net - Searchable list of configurable group policies http://blogs.technet.com/grouppolicy - Microsoft’s official Group Policy blog http://blogs.technet.com/askds - Ask Directory Services is the official blog from Microsoft engineers supporting group policy and other related AD technologies

3186 questions
13
votes
4 answers

How can I make WSUS less invasive for our users?

We have WSUS pushing updates out to our user's workstations, and things are going relatively well with one annoying caveat: there seems to be an issue with a pop-up being displayed in front of some users informing them that their machine will be…
Cypher
  • 1,077
  • 2
  • 17
  • 24
12
votes
6 answers

Group Policy: Administrator Rights for Specific Users on Specific Computers

I'm a programmer stuck trying to administer an Active Directory setup for a small company. The Domain Controller is running Windows Small Business Server 2008. We have a staff of field workers using tablet PC's; configuration problems with the…
Ibby
  • 223
  • 1
  • 2
  • 7
12
votes
1 answer

Cannot set DSCP on Windows 10 Pro via group policy

Setting 'policy based QoS' on Windows 10 does not apply the DSCP value to outgoing traffic. I want to be able to set the value of DSCP traffic for certain processes. Using gpedit.msc group policy editor, I created a policy under Computer…
Paul George
  • 231
  • 1
  • 2
  • 6
12
votes
8 answers

Can't send to compressed (zipped) folder

I'm IT Technician at a Secondary School and our Network Manager is away on long term leave. Currently our student's aren't able to send to - compressed folder. When trying the error 'File not found or no read permission' appears. It works for…
Scott Gunn
  • 121
  • 1
  • 1
  • 5
12
votes
4 answers

Group Policy: Mapped Drives failing to load, Windows Server 2012 Active Directory and Windows Pro 10

Network: Multi-site domain. Each site has 2 local (on-site, same subnet) Windows Server 2012 R2 Domain controllers. Sites are correctly defined in Windows Sites and Services. DNS records for each site ONLY have the two local DNS servers…
Daniel
  • 1,614
  • 9
  • 29
  • 47
12
votes
1 answer

GPO to configure open file explorer to in windows 10

We are currently running windows server 2012 R2. We have upgraded computer to windows 10 and we wish to configure the setting Open file explorer to from GPO. We would like the file explorer open to This PC insted of Quick access. You can see wich…
Yanick Lafontaine
  • 157
  • 1
  • 1
  • 7
12
votes
4 answers

Enable Certificate Enrollment Policy and Request a Cert using PowerShell

Right now, I'm doing the following to request a cert from a CEP server: Open gpedit.msc Under Computer Configuration > Windows Settings > Security Settings > Public Key Policies, double click "Certificate Services Client - Certificate Enrollment…
EGr
  • 609
  • 4
  • 14
  • 29
12
votes
2 answers

GPO Enforced Precedence

What is the precedence for Enforeced GPOs, I can't really find any MS articles which give a refined answer. My current understanding is as follows: Lets say we have 5 GPO's - GPO1 through GP05. I will use an exam question to put into context. GPO …
PnP
  • 1,684
  • 8
  • 39
  • 65
12
votes
8 answers

ActiveSync devices causing accounts to lockout

When a user changes his account password for whatever reason (read: expired), and the old password is stored in his mobile device connected through EAS. This will cause his account to lockout almost immediately - as it should according to the…
Abdullah
  • 121
  • 1
  • 3
  • 6
12
votes
2 answers

Upgrade software package installed with GPO

Since recently I have been using AD policies to deploy software packages through GPO on a small domain. This had been working well, but I am not sure what is the correct procedure for upgrading a package. Assuming that I have initially deployed X,…
Unreason
  • 1,146
  • 1
  • 8
  • 22
12
votes
9 answers

Disabling IE add-ons and toolbars with Group Policy?

I'd love to have the peace of mind of knowing that none of my desktops have toolbars, "browser helpers" or any other crap like that running. Has anybody done this successfully with Group Policy? I found this article, but it's not all that…
John Hoge
  • 619
  • 3
  • 7
  • 14
12
votes
6 answers

How to lock down Windows XP for use as an internet kiosk?

One of our clients, whose website we built, is a manufacturer of ultra-high-end bicycles. They would like to distribute kiosks -- basically, locked-down Windows XP boxes from Dell -- at some of their higher-profile dealers. The kiosks would be…
Daniel Wright
  • 223
  • 1
  • 2
  • 7
12
votes
3 answers

Distributing SSL Certificates to All Browsers in an Active Directory Environment

I've generated a single self-signed SSL certificate (that expires in 5000 years). The purpose of the cert is to simply encrypt the https traffic of a trusted deno application that is accessed by a variety of web browsers on multiple corporate…
LonnieBest
  • 1,510
  • 4
  • 22
  • 39
11
votes
2 answers

disable maximum password length on Windows Server

When trying to create a password longer than 16 chars on my Windows 2012 server, it is refused due to the password being to long. I have tried looking for a GPO called "Maximum Password Length" - which i cannot find. The problem might be in: PwdFilt…
Frederik Krogh
  • 121
  • 1
  • 4
11
votes
3 answers

Changing Windows Network Profile from "DomainAuthenticated" to Public

I have a domain joined Windows Server 2012 R2 box that has the OpenVPN 2.3.13 client software installed on it. When the VPN connection is active the "Ethernet 2" (TAP interface) connection is placed into the Domain Network category alongside the…
James White
  • 674
  • 3
  • 18
  • 32
1 2
3
…
99 100