Questions tagged [group-policy]

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.

Microsoft has added Group Policy Preferences Client Side Extensions, formerly a third-party tool called PolicyMaker, to its in-support Windows OSes. The CSEs greatly extend the number features which can be configured via Group Policy.

See the following links for more details.

http://gpsearch.azurewebsites.net - Searchable list of configurable group policies http://blogs.technet.com/grouppolicy - Microsoft’s official Group Policy blog http://blogs.technet.com/askds - Ask Directory Services is the official blog from Microsoft engineers supporting group policy and other related AD technologies

3186 questions
8
votes
4 answers

Is there a group policy that would push a new user name and password to all local machines on a network?

I work on a small network that runs on windows server 2003, and with machines running xp. Is there a group policy that could push a new user name and password to replace our old local administrator user accounts?
killamjr
  • 191
  • 1
  • 2
  • 8
8
votes
4 answers

Deploy .net 4 via Active Directory group policy or WSUS

Is there a way to automatically deploy .net 4 using Active Directory group policy or WSUS? I want to push it out to lots of machines without having to go around to each one. Background: I have a VSTO ClickOnce application I want to deploy to…
Terence Johnson
  • 111
  • 1
  • 1
  • 6
8
votes
7 answers

Is there a way to audit AD for a particular password?

Is there a way I can audit AD to check for a particular password? We used to use a "standard" password for all new users (e.g. MyPa55word). I want to make sure this is no longer in use anywhere on our estate. The only way I could think how to do…
Ben
7
votes
2 answers

Unable to disable Microsoft Store in domain environment

In AD, I create a new OU and moved my username into that OU so I can do testing with my own domain user account. I then created a new GPO and enabled the following: Computer Configuration > Policies > Administrative Templates > Windows Components >…
oshirowanen
  • 292
  • 4
  • 13
7
votes
2 answers

GPO StartLayout Never Applies

I have not had any success deploying a StartLayout via GPO. Regardless of all I have tried, the pinned Start Menu icons remain the same. After much research to avoid many common issues, I have simplified the creation and deployment of a Start Layout…
Steven
  • 175
  • 2
  • 10
7
votes
2 answers

Driver installation not working when deploying printers via GPP

I'm trying to deploy printers via Group Policy. Posts around the internet suggest using the Group Policy Preferences approach (User/Preferences/Control Panel Settings/Printers) is the preferred method. However, the printer is failing to deploy, and…
Cameron
  • 277
  • 2
  • 4
  • 10
7
votes
1 answer

How to configure Windows to trust a network share using a GPO?

I keep getting the following warning whenever I try to open a share from my DFS. How can I configure Windows (10 in this case) to trust anything under the root of my DFS via GP? It seems odd that it wouldn't do so automatically.
Corey
  • 2,031
  • 12
  • 39
  • 54
7
votes
2 answers

Mapping printers using Group Policy Preferences; works on Windows XP, not on Windows 7 x64

I'm trying to use Group Policy Preferences to manage user connections to shared printers. The print server is Windows Server 2003 R2 Std edition. Several printers are installed, and I've added x64 editions of all the drivers to the print server as…
7
votes
1 answer

Is there any way to restrict user from changing file extensions in Windows XP, Vista, Windows 7?

For example, not allow users to rename abc.doc to abc.jpg? Is there any windows group policy for that? I am not asking file association restriction. If it really can't, is there any group policy to enforce "Hide file extensions for known file types"…
Frankie Yip
  • 81
  • 1
  • 5
7
votes
1 answer

How can I eliminate the "Several add-ons are ready for use" prompt in Internet Explorer?

The issue I describe here is the same as that in Group Policy Internet Explorer, Add-on list not working, but I provide more detail and troubleshooting steps, so I thought it was worth re-asking. I manage a number of computers running Windows 8.1.…
Jay Michaud
  • 3,973
  • 4
  • 23
  • 36
7
votes
3 answers

What group-policies have you applied?

I have set about 10 group-policies, and it works OK. Although, it would be interesting to see what kind of things IT-administrators enforce. If you have a ton of policies, just show some, that you feel really changes something. I guess you could…
caspert
  • 683
  • 2
  • 11
  • 19
7
votes
1 answer

Where does a Domain Controller's Local Security Policy come from?

In Group Policy we have the Deny logon through Remote Desktop setting enabled for the Domain Computers group . I promoted a computer that was a member of this group to be a Domain Controller. After the promotion and computer was of course no longer…
billc.cn
  • 454
  • 1
  • 5
  • 12
7
votes
4 answers

Applying group policy loopback to any user on specific computers

In a server 2008 R2 and Windows 7 environment, I have a GPO that specifies screen saver settings in the user settings policy for the entire domain. However, for specific computers, this is not ideal. I created a separate GPO with higher precedence,…
Force Flow
  • 1,165
  • 5
  • 23
  • 45
7
votes
1 answer

Consistently slow domain logins / folder redirection

I've been trying to diagnose slow logins to my domain. One of my first stops was Domain login very slow 10+ minutes. So far I've been able to tell it has to do with my policy that applies folder redirection and administratively assigns offline…
Tim Brigham
  • 15,545
  • 10
  • 75
  • 115
7
votes
2 answers

Group policy to check/uncheck "require HTTPS" in Internet Explorer 11 trusted sites list?

When adding a list of trusted sites to Internet Explorer 11 in Windows 7 Professional SP1, there is a checkbox called "Require server verification (https:) for all sites in this zone". Is there a way to modify the system's group policy to check or…
hpy
  • 845
  • 3
  • 18
  • 28