Questions tagged [group-policy]

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.

Microsoft has added Group Policy Preferences Client Side Extensions, formerly a third-party tool called PolicyMaker, to its in-support Windows OSes. The CSEs greatly extend the number features which can be configured via Group Policy.

See the following links for more details.

http://gpsearch.azurewebsites.net - Searchable list of configurable group policies http://blogs.technet.com/grouppolicy - Microsoft’s official Group Policy blog http://blogs.technet.com/askds - Ask Directory Services is the official blog from Microsoft engineers supporting group policy and other related AD technologies

3186 questions
7
votes
3 answers

GPO: Run PowerShell logon script after explorer.exe has been loaded

I know there is the GPO setting "Computer Configuration => Admin. Templates => System => Scripts => Run logon scripts synchronously". This, however, ensures that logon scripts run before Windows Explorer starts loading (when enabled). I need the…
Matthias Güntert
  • 2,438
  • 12
  • 39
  • 59
7
votes
2 answers

GPO - Set Desktop Background But allow users to change

We have a policy setup to use an image for our desktop background, this works, however we have decided that by default this should be the setting but if the user wants to change it then they can, everything else under the Admin Templates > Control…
D-W
  • 321
  • 1
  • 5
  • 11
7
votes
1 answer

GPO software deployment without WMI?

I put together a GPO to deploy a MSI file to a security group comprised of computer objects. After rebooting a test workstation so that it picks up its group membership and running gpupdate, I then ran gpresult /r and I see that it is picking up the…
Bill Sambrone
  • 335
  • 2
  • 11
7
votes
1 answer

Revert GPO Settings to Undefined

Revert All GPO settings to Undefined (Not reverse what they are now) I inadvertently applied GPOs to an entire OU which was not ready to be deployed yet. I have unlinked the GPOs but of course they have already been applied. Is there a way to undo…
Ben-Jamin
  • 163
  • 1
  • 11
7
votes
2 answers

Is there a performance impact of direct AD universal groups assignment?

I'm implementing a tool which secures certain shared resources within AD forest (mostly file shares). By some criteria a list of users from different domains is generated, those users are added to a universal group (because I need to gather users…
Aides
  • 171
  • 1
  • 4
7
votes
2 answers

Correct way to update Google Chrome MSI through Group Policy

I am deploying Chrome through group policy. This is working fine. Obviously Chrome has a pretty regular update cycle. I am not allowing Domain Users to install Chrome updates. Having subscribed to the release blog, and downloaded/tested a new…
7
votes
3 answers

How do I add items to 'Favorites' via GPO?

How do I add items to all users 'Favorites', preferably via GPO? the screenshot is just an example from W7 but I'm actually working with 2008R2 Server and RDS
user83664
7
votes
2 answers

GPO best practices : Security-Group Filtering Versus OU

Good afternoon everyone, I'm quite new to Active Directory stuff. After upgraded Functional level of our AD from 2003 to 2008 R2 (I need it to put fine-grained password policy), I then start to reorganized my OUs. I keep in mind that a good OU…
7
votes
1 answer

Password Authentication Fails - NTLMv2

Environment: Windows 2000 sp4 EDIT: Domain Controller with no trust setup with the Win2008 Server Windows XP machines Windows 2008 Server Netapp NAS Problem: We have a shared folder that resides on a NAS using a Windows 2008 AD for the…
JMeterX
  • 3,387
  • 16
  • 31
7
votes
6 answers

Windows firewall logging. Log file is always blank

I have read many similar articles and posts on how to enable windows firewall logging. I have Win2k8r2 server without any Active Directory, DC, domains and other complicated stuff. Almost all of this article references to GPO and enabling it. The…
kseen
  • 181
  • 1
  • 1
  • 4
7
votes
1 answer

Users can stop a GPO being applied

We have found some of our users when they log on they see the little black box where the GPO is being applied, they quickly close it, which stops the GPO from being applied. Is there a way to stop that from being closed? Any alternatives?
7
votes
2 answers

How can I prevent Terminal Server Users from restarting the server after an Automatic Update?

We have a Windows Server 2003 terminal server, and our IT department does not want to disable Automatic Updates. The problem is, when an update gets applied that requires a reboot, users get a popup about it and can hit Restart Now to reboot the…
7
votes
3 answers

Where do ADMX files go in a mixed environment?

When I download ADMX files to use on our Windows Server 2008 machine, do I store them under Sysvol on our domain controller which is a Windows Server 2003 machine or do I put them in the policydefinitions folder on the Windows 2008 Server? I.e., do…
Sally
  • 345
  • 2
  • 3
  • 12
7
votes
2 answers

Vista Power Management GPO

I've created a loopback GPO that has several settings (both computer and user) including a Custom User Interface (Access 2007 Application) and Power Management (has the computer sleep after being idle for 2 min). I'm also filtering so that this…
user9573
7
votes
1 answer

Installing MSI via Group Policy in a Fully Unattended Way

I have some MSI files I would like to install via Group Policy. Does anyone know how to do this or know a document that explains how to do this that meets the following criteria: When installed by hand, these MSI files ask a few questions. I want…
Kyle Brandt
  • 83,619
  • 74
  • 305
  • 448