Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [group-policy]

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.

Microsoft has added Group Policy Preferences Client Side Extensions, formerly a third-party tool called PolicyMaker, to its in-support Windows OSes. The CSEs greatly extend the number features which can be configured via Group Policy.

See the following links for more details.

http://gpsearch.azurewebsites.net - Searchable list of configurable group policies http://blogs.technet.com/grouppolicy - Microsoft’s official Group Policy blog http://blogs.technet.com/askds - Ask Directory Services is the official blog from Microsoft engineers supporting group policy and other related AD technologies

3186 questions
65
votes
5 answers

How do I grant start/stop/restart permissions on a service to an arbitrary user or group on a non-domain-member server?

We have a suite of Windows Services running on our servers which perform a bunch of automated tasks independently of one another, with the exception of one service which looks after the other services. In the event that one of the services should…
abitgone
  • 1,323
  • 1
  • 11
  • 14
49
votes
7 answers

Disable password complexity rule in Active Directory

Where do I go to disable the password complexity policy for the domain? I've logged onto the domain controller (Windows Server 2008) and found the option in local policies which is of course locked from any changes. However I can't find the same…
Daniel Revell
  • 701
  • 3
  • 7
  • 11
48
votes
13 answers

Group Policy installation failed error 1274

I'm trying to deploy an MSI via the Group Policy in Active Directory. But these are the errors I'm getting in the System event log after logging in: The assignment of application XStandard from policy install failed. The error was : %%1274 The…
David Thomas Garcia
  • 613
  • 2
  • 8
  • 10
45
votes
5 answers

Why are many admins using 'Turn off Automatic Root Certificates Update' Policy?

My company distributes a Windows Installer for a Server based product. As per best practices it is signed using a certificate. In line with Microsoft's advice we use a GlobalSign code signing certificate, which Microsoft claims is recognised by…
Jeroen Ritmeijer
  • 717
  • 1
  • 6
  • 14
37
votes
7 answers

Why is this preventing me installing an MSI: The System Administrator has set policies to prevent this installation

I am trying to install an MSI on a Windows Server 2012 machine which is part of my lab domain. I am local and domain admin, but I seem to be prevented from installing this MSI. For clarification, when attempting to install the git extension for…
Jason Hyland
  • 923
  • 1
  • 7
  • 10
34
votes
4 answers

Can I override domain group policy with local group policy as a local admin?

I am trying to provision a few special case laptops. I would like to create a local guest account. That's fine but when I try to create it I prompted that my guest password does not meet the complexity requirements. I tried editing the local…
hkkhkhhk
  • 343
  • 1
  • 3
  • 4
32
votes
3 answers

What is Group Policy and how does it work?

This is a Canonical Question about Active Directory Group Policy Basics What is Group Policy? How does it work and why should I use it? Note: This is a Question & Answer to new administrator that might not be familiar with how it functions and…
MDMarra
  • 100,734
  • 32
  • 197
  • 329
24
votes
4 answers

How to edit Local Group Policy with a script?

I have to set the local group policy settings and the the local security policy for a couple of machines which are not in a Windows domain. Until now, I've done that by manually setting the keys in gpedit. Due to the transition to Windows 10, I…
P. Egli
  • 341
  • 1
  • 3
  • 4
24
votes
8 answers

Enforcing lock screen after idle time via GPO

I run a network of computers and I would like enforce a GPO which locks the screen after a predefined idle time. I can't find this setting, I can only find a screen saver idle time setting, how can I get a log-out screen accomplished? Thanks.
Haim Bender
  • 546
  • 1
  • 3
  • 13
23
votes
4 answers

Windows 10 - Disable warning notification about disabled firewall via GPO

Is there a way to disable the warning that is displayed in the notifications area, telling you that the Windows firewall is disabled? Edit: We would specifically like to achieve this via group policy, not a manual process. We disable the Domain…
James Edmonds
  • 1,733
  • 10
  • 37
  • 59
23
votes
4 answers

How to disable Fast Startup using a Group Policy?

Windows 8 / 8.1 / 10 has this feature called "Fast Startup" (or "fast boot", "hybrid statup", "hybrid shutdown", and so on...) which doesn't actually shut down the computer when you tell it to do so, instead putting it in a sort of hybernation, in…
Massimo
  • 70,200
  • 57
  • 200
  • 323
22
votes
4 answers

Registry key / GPO to disable and block Windows 10 upgrade?

One of our remote Windows 7 Professional users just reported that he received an Upgrade Reservation Offer for Windows 10. It appears the Get Windows 10 "App" running in his system tray is legit. So far, this is only seems to be hitting devices…
poke
  • 1,079
  • 4
  • 11
  • 21
22
votes
1 answer

How to time-bomb a GPO?

I am doing a lot of work in higher education where it is a rather common requirement to reconfigure a number of Windows domain members (e.g. PCs in a classroom) for the duration of a specific course or event and have this configuration undone…
the-wabbit
  • 40,737
  • 13
  • 111
  • 174
17
votes
1 answer

GPOs fail to apply; reason: Inaccessible, Empty, or Disabled; Server 2012 R2 and Windows 10

I have a Windows Server 2012 R2 Domain. Yesterday, a computer’s (running Windows 10 Pro) network drive stopped working. After further investigation (gpresult /h) it appears ALL group policy objects are failing with the reason Inaccessible, Empty, or…
Daniel
  • 1,614
  • 9
  • 29
  • 47
17
votes
3 answers

IE11: How to check into which zone a URL falls?

I have applied several internet explorer settings via group policy. Especially a long list of URLs in the "site to zone assignment" setting. However it seems that one URL still falls into the "internet zone" even when assigned to the "trusted zone".…
Matthias Güntert
  • 2,438
  • 12
  • 39
  • 59
1
2 3
…
99 100