Questions tagged [group-policy]

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.

Microsoft has added Group Policy Preferences Client Side Extensions, formerly a third-party tool called PolicyMaker, to its in-support Windows OSes. The CSEs greatly extend the number features which can be configured via Group Policy.

See the following links for more details.

http://gpsearch.azurewebsites.net - Searchable list of configurable group policies http://blogs.technet.com/grouppolicy - Microsoft’s official Group Policy blog http://blogs.technet.com/askds - Ask Directory Services is the official blog from Microsoft engineers supporting group policy and other related AD technologies

3186 questions
11
votes
3 answers

Will GPO Software Installation re-install already installed applications from a different policy?

I'm looking to install our latest AV suite through a GPO Software Installation policy. (As in the below screenclip.) Unfortunately my request to use DFS has been denied and I'll need to create a GPO for each site in our environment (each site is…
mhouston100
  • 412
  • 1
  • 5
  • 20
11
votes
1 answer

Internet Explorer 9 & 10 Group Policy Preferences missing

I have a single Domain Controller network (Windows Server 2008 R2, running on the 2003 Forest/domain level), with the clients currently migrating from WinXP Pro to Win7 Pro. I Need to control the Proxy settings of Internet Explorer: I've built a…
Dave
  • 427
  • 2
  • 8
  • 16
11
votes
2 answers

Everything says Applocker is supposed to work: Why doesn't it?

I've setup a basic group policy consisting of the default Applocker rules. Per Microsoft's technet article on the subject, any files not explicitly allowed to run by the policy are supposed to be blocked from running. After deploying this policy and…
MDMoore313
  • 5,581
  • 6
  • 36
  • 75
11
votes
1 answer

What takes precedence when multiple, conflicting GPOs apply to the same OU?

If two or more GPOs are applied to the same OU (and they have contradictory policies), which would be applied? For example, if there is a GPO with the computer policy "Enable autoplay on all drives" set to "enabled" in one GPO, and "disabled" in…
Austin ''Danger'' Powers
  • 1,180
  • 6
  • 21
  • 51
11
votes
5 answers

Applying a GPO to one user on one computer only

I have a GPO that I need to apply to the user DOMAIN\DumbGuy, but only when he logs on to DOMAIN\DumbGuysComputer$. When DOMAIN\NiceReceptionist logs on to DOMAIN\DumbGuysComputer$ it should not apply. When DOMAIN\DumbGuy logs on to…
Mark Henderson
  • 68,823
  • 31
  • 180
  • 259
11
votes
4 answers

Network Logon Issues with Group Policy and Network

I am gravely in need of your help and assistance. We have a problem with our logon and startup to our Windows 7 Enterprise system. We have more than 3000 Windows Desktops situated in roughly 20+ buildings around campus. Almost every computer on…
bobloki
11
votes
2 answers

How can I manipulate Windows 7 Libraries via Group Policy?

I'm trying to add and remove Library locations from Windows 7's "Library" locations in for each of my users. While its easy to do this from the desktop, and its easy to disable libraries appearing in explorer, how can I add or remove locations from…
Rob Moir
  • 31,884
  • 6
  • 58
  • 89
11
votes
1 answer

Two ways of deploying printers via group policy

I've noticed two options for deploying printers via group policy: Create and link Group Policy in GP Management, add printer(s) via User Configuration > Preferences > Control Panel Settings > Printers. Go to Print Management mmc, right click on…
Jagger
  • 299
  • 3
  • 6
  • 17
11
votes
13 answers

What Are Some Good Open Source Alternatives to Active Directory?

I'm looking for a good open-source alternative to active directory that can handle: Authorization/Authentication Group Policy Replication and Trust Monitoring In addition, are there any consolidated systems out there that handle these…
Laz
  • 231
  • 1
  • 2
  • 8
10
votes
2 answers

How can I get rid of the "Do you trust this printer" message box and add my printer via GPO?

Workstation: Windows 7 (x64) [Install target for printer] Server: Windows Server 2012 R2 (x64) [Active Directory, Print Server] I have been bashing my head on the desk trying to get this printer to be installed via group policy! For some reason,…
10
votes
1 answer

Best practice for defining user "HOMEDRIVE" "HOMEPATH" "HOMESHARE"

Is it considered a best practice to map domain users' "HOME" environment variables to a network path? If so, why? By "HOME" variables, I am referring to: %HOMEDRIVE% %HOMEPATH% %HOMESHARE% This question arises because some applications - such as…
10
votes
1 answer

Is there a way to disable "check online for updates from windows update" in windows update settings?

I have configured WSUS server in order to preserve bandwith in the network wile keeping essential updates turned on using that WSUS. Intranet WSUS server pointing to client pc and other settings are pushed via group policies in Domain controller…
Aravinda
  • 1,101
  • 5
  • 12
  • 30
10
votes
2 answers

How to enable BitLocker with no prompts to the end user

I have configured BitLocker and TPM settings in Group Policy such that all the options are set and the recovery keys stored in Active Directory. All our machines are running Windows 7 with a standard corporate image and have their TPM chips enabled…
Wes Sayeed
  • 1,902
  • 6
  • 28
  • 43
10
votes
2 answers

Warn user if they try to logoff

I want a certain local user to not log off. ever. It's much like this silly question, however I don't necessarily care if the buttons are there, I want to pop up a messagebox that says "Please do not log off the console" with an "OK" button that…
10
votes
3 answers

Deploying Printers via GPO/GPP - is there a programmatic option?

For reasons beyond my control, I've been tasked with setting up GPO/GPPs to deploy our 100+ printers to our 1000+ clients. The good news is that we have over a dozen sites, and for the most part, I'm allowed to push out all printers at site X to all…
HopelessN00b
  • 53,795
  • 33
  • 135
  • 209