Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [group-policy]

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.

Microsoft has added Group Policy Preferences Client Side Extensions, formerly a third-party tool called PolicyMaker, to its in-support Windows OSes. The CSEs greatly extend the number features which can be configured via Group Policy.

See the following links for more details.

http://gpsearch.azurewebsites.net - Searchable list of configurable group policies http://blogs.technet.com/grouppolicy - Microsoft’s official Group Policy blog http://blogs.technet.com/askds - Ask Directory Services is the official blog from Microsoft engineers supporting group policy and other related AD technologies

3186 questions
8
votes
2 answers

Why should you disable network login for local accounts?

This question is in reference to @SwiftOnSecurity's Twitter thread: https://twitter.com/SwiftOnSecurity/status/655208224572882944 After reading through the thread, I still don't quite get why you would want to disable network login for local…
The Man
  • 191
  • 1
  • 1
  • 4
8
votes
4 answers

Windows 10: Group Policy fails to apply directly after boot, succeeds later

My problem is that Group Policy is not applied when a client is freshly booted. Directly after boot, the client posts an error message in the event log with source "GroupPolicy (Microsoft-Windows-GroupPolicy)" and Event ID 1058: "The processing of…
Jurjen
  • 373
  • 1
  • 3
  • 10
8
votes
4 answers

Force IE 11 compatibility mode for certain sites within domain

When setting compatibility mode in IE 11 it wants to add our whole domain (somedomain.co.uk) but we don't want every site (*.somedomain.co.uk) to be covered by this. We want just sharepoint.somedomain.co.uk and not www.somedomain.co.uk to be…
tonyyeb
  • 217
  • 1
  • 2
  • 11
8
votes
4 answers

How do I disable remote printers using group policy

When I configure a new remote desktop connection to connect to servers I often forget to uncheck the option inside of local devices and resources for remote printers. This creates exceptions in the event log for the server I connect of source:…
Geoff Dalgas
  • 2,476
  • 5
  • 31
  • 32
8
votes
3 answers

Is it possible to use Group Policy to grant the permission to manage Windows services?

Is it possible to use Group Policy to grant the permission to manage Windows services? I would really like to know if this is even possible, and if so, where do you recommend I look for more information? I'm particularly interested in Server…
Damian Powell
  • 325
  • 2
  • 5
  • 10
8
votes
4 answers

GPO not applying to an OU

We have a batch file (logon.bat) that maps drives whenever a user logs on. This script is applied by Group Policy to the entire domain. Initially, this worked perfectly, as we always wanted this script to be applied. However, now we have PCs at a…
Austin ''Danger'' Powers
  • 1,180
  • 6
  • 21
  • 51
8
votes
1 answer

What's the sense in having RemoteDesktopUsers without "log on through Remote Desktop Services" privilege?

Recently Microsoft changed the default policies in Windows Azure Guest OSs (Windows 2008, Windows 2008 R2 and Windows 2012). One of the changes is that now only members of Administrators group have "Allow log on through Remote Desktop Services" and…
sharptooth
  • 2,739
  • 4
  • 32
  • 40
8
votes
2 answers

how to disable a user to install program being domain user?

My client (XP) can install Chrome in his system being a domain user account. how can i stop him/them from installation of Chrome through Windows Server 2003.
user158615
  • 81
  • 1
  • 1
  • 2
8
votes
3 answers

How do I disable "Restart your computer to finish installing updates" popup with GPO?

I've got some kiosk computers that are on a domain and permanently logged in, and receive updates for FEP through WSUS. This works great, except that occasionally, I get this dialog appearing in the bottom right hand corner: I thought that by…
growse
  • 8,020
  • 13
  • 74
  • 115
8
votes
4 answers

I deployed Flash Player via a Software Installation policy. How to upgrade?

I have a Windows Server 2008 machine as my DC. Earlier this year I created a Software Installation GPO to deploy Adobe Flash Player plugin MSI. I assigned the policy to the computers, about half run Windows XP x86 and the other half Windows 7 x64.…
eleven81
  • 417
  • 6
  • 13
  • 29
8
votes
1 answer

How to apply an Group Policy only to Clients in a specific IP range? (using WMI Filter)

I need to apply a GPO only to some computers in a specific network range. I'm aware that there many other solutions for this issue. I could group them into an OU or use Sites. But the current situation doesn't allow me to act in any other way except…
CHfish
  • 353
  • 1
  • 3
  • 9
8
votes
3 answers

Restrict user from saving on their Desktop, My Documents, My Music, My Videos, My Pictures etc. via GPO

I want to accomplish the following task: A user must not have rights to save on their Desktop, My Documents, My Music, My Videos, My Pictures, etc. I have already prevented and hidden all drives via GPO. However, user are still able to store files…
Param
  • 1,357
  • 14
  • 36
  • 52
8
votes
4 answers

Speeding up Group Policy, and how will implementing Group Policy Preferences impact logon time?

I'm looking for some advice on speeding up and upgrading our logon system to make it more robust and faster. I inherited an older logon system, which was migrated over from Novell Netware originally. We are currently running Windows Server 2008 R2,…
Quinten
  • 1,076
  • 1
  • 11
  • 25
8
votes
2 answers

Is there a way of consolidating multiple GPOs into one GPO

I have about 100 GPOs that I would like to merge down to 15-20. Is there a way of merging them together. I found this article: http://blogs.technet.com/b/ashleymcglone/archive/2011/01/19/finally-copy-and-merge-gpos-powershell-saves-the-day.aspx but…
BlindingDawn
  • 81
  • 1
  • 3
8
votes
3 answers

Local Admin user via GPO

I have a Windows 2008R2 DC (Just setup), we already had around 25 Windows 7 professional / ultimate clients, which we are now going to join to our new domain / dc. Users were already using the machines and were Local Administrators on that…
Mutahir
  • 2,357
  • 2
  • 32
  • 42
1 2 3
…
99 100