Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [group-policy]

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.

Microsoft has added Group Policy Preferences Client Side Extensions, formerly a third-party tool called PolicyMaker, to its in-support Windows OSes. The CSEs greatly extend the number features which can be configured via Group Policy.

See the following links for more details.

http://gpsearch.azurewebsites.net - Searchable list of configurable group policies http://blogs.technet.com/grouppolicy - Microsoft’s official Group Policy blog http://blogs.technet.com/askds - Ask Directory Services is the official blog from Microsoft engineers supporting group policy and other related AD technologies

3186 questions
1
vote
2 answers

Prevent local admins from shutting down RDS server

One of the clients I manage runs an RDS environment on Windows Server 2008 R2 servers which users log onto to work. I need to prevent users allowing applications to restart these servers, the kicker is that they are all Local Admins (due to the…
Mickycampbell
  • 101
  • 1
  • 7
1
vote
2 answers

gpo implementation windows server 2012r2

I am looking to Configuring Windows 7 Libraries using Group Policy Preferences "Disable Known Folders". gpupdate /force is completed successfully, therefore policy is not applied to client computer?? Any idea why?
C. Lav
  • 11
  • 2
1
vote
0 answers

Which policy hides all desktop items?

New accounts on my Windows Server 2012 look like this when logging in for the first time: As you can see, the desktop is empty. It is not, there are in fact files on the desktop, but they are not shown here. Somebody enabled a policy that hides…
William
  • 266
  • 1
  • 4
  • 18
1
vote
0 answers

Group Policy on Win8.1 in WAN Environment won't fully apply

Client computer is Win 8.1 with local DHCP server/subnet and network based VPN (WAN) to the main server. DNS is set to the main server, on which client is registering itself correctly. Client can correctly access all network resources including…
Dom
  • 741
  • 1
  • 8
  • 19
1
vote
2 answers

Why is there no 'powershell' tab in the group policy scripts dialog?

I would like to run a powershell script at startup but there is no 'powershell' tab on the dialog box. I am running Windows Server 2008 64-bit. Thanks!
divided
  • 367
  • 1
  • 4
  • 11
1
vote
1 answer

Group policy removes certificate from personal store

We have a Code Signing certificate that is issued by our enterprise CA. We are using a group policy to deploy this certificate to the Trusted Publishers store on our domain computers. This works as it should: The Root cert is added to Trusted Root…
powerzone3000
  • 81
  • 2
  • 8
1
vote
2 answers

Is it possible to create a GPO which excludes servers?

Is it possible to create a Group Police Object which only applies to workstations. (Excludes Servers). If this is possible, can you please point me in the right direction to learning how to do it?
pgunston
  • 311
  • 4
  • 6
  • 16
1
vote
0 answers

Allow Execution, Deny Interactive login by GPO

Problem: Accounts to log into work stations are locked down tightly and unable to run nessesary applications on windows 7 stations. Saving an admin accounts credentials to elevate access is currently used, however due to security policies the…
Piskie
  • 111
  • 4
1
vote
1 answer

Windows Server 2012 Missing Internet Explorer Maintenance in Group Policy

I'm trying to set Internet Explorer as the default browser for all users on a clients terminal server. I was trying to do it following this guide however I couldn't get passed step 4 Right-click on the entry labelled "Internet Explorer…
user3399457
  • 11
  • 1
  • 4
1
vote
1 answer

How to exclude Outlook 2010 from Win7 roaming profiles

We have a user with sensitive emails that shouldn't be available when they login to a borrowed computer that is not their primary computer. We want to keep their Win7 roaming profile but exclude the Outlook profile leaving it up to the user to…
antwan
  • 11
  • 2
1
vote
0 answers

Group policy for Windows Update Server

I'm trying to setup a WSUS, having everything on the server installed, updates downloaded and accepted, etc... ready to go Problem is, when I go into group policy and try to change the 2 relevant settings: Computer Config > Policy > admin template >…
Makari
  • 11
  • 2
1
vote
2 answers

Windows Server 2008 Disabling Password Complexity Requirements

I'm using a Server 2008 R2 domain controller, trying to troubleshoot a bug where password complexity requirements seem to be enabled, even though they are disabled in group policy. Some notes: I am changing the Password Policy at the domain…
prelic
  • 319
  • 1
  • 4
  • 17
1
vote
2 answers

Is is possible to apply a Group Policy for the same user logged-on to different computers?

I have a user (say, domain.local\admin) in my domain. When he logons to vpn.domain.local in group Servers I want to apply a policy. When he logons to laptop.domain.local in group Destop Computers I want either do not apply this policy or apply the…
abatishchev
  • 541
  • 1
  • 9
  • 31
1
vote
2 answers

Blocking password policy (expiry) for a particular OU in AD

Situation is this: I need to have a particular container in my AD environment which blocks password expiry policy, but accepts all other policies. Is this something that would work by simply adding in a GPO at the sub-ou level (the ou in question is…
Kip
  • 897
  • 1
  • 12
  • 22
1
vote
2 answers

Is it possible to enforce local GPO over the domain?

I want to enforce local GPO settings on specific servers so that the domain GPO does not overwrite them. These systems were hardened specifically, but due to way too many issues to list, we cannot change the OU they are in, and cannot change the…
appsecguy
  • 209
  • 2
  • 5
1 2 3
…
99 100