Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [group-policy]

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.

Microsoft has added Group Policy Preferences Client Side Extensions, formerly a third-party tool called PolicyMaker, to its in-support Windows OSes. The CSEs greatly extend the number features which can be configured via Group Policy.

See the following links for more details.

http://gpsearch.azurewebsites.net - Searchable list of configurable group policies http://blogs.technet.com/grouppolicy - Microsoft’s official Group Policy blog http://blogs.technet.com/askds - Ask Directory Services is the official blog from Microsoft engineers supporting group policy and other related AD technologies

3186 questions
1
vote
0 answers

How to use Group Policy to control local administration access (LOCAL ONLY)

At the company I work for, we have about 75 computer users. We have a Microsoft Domain Controller in our server environment (MS Server 2012) with Active Directory. When users need to install software, they are prompted in Windows for an…
pgunston
  • 311
  • 4
  • 6
  • 16
1
vote
0 answers

Firewall rules to allow Hyper V Manager to connect to Hyper V Server 2012 R2?

I moved a Hyper V host into our Servers OU in Active Directory, which has some group policies linked. Now I am unable to connect to the Hyper V host with Hyper V manager. It was working fine before I moved the computer account in AD, so it must be…
Matt Fogleman
  • 95
  • 1
  • 8
1
vote
0 answers

Getting Group Policy identifier in PowerShell

Some of our computers have a random "local group policy" being set that forces them to check a nonexistent intranet server for Windows Updates instead of using WU over the internet as they should. This is happening only on certain random, unrelated…
vaindil
  • 107
  • 1
  • 10
1
vote
1 answer

Upgrading from 2008 to R2 didn't update Group Policy Management

I recently updated our domain controllers from Windows Server 2008 to Windows Server 2008 R2. The main reason for this was group policy. We had machines in our domain that were 2008 R2 and the non-R2 group policy referred to Remote Desktop as…
Tony
  • 457
  • 3
  • 11
  • 23
1
vote
1 answer

Single, parameterized GPO for managing group membership

We have a OU design in our domain in which each "system" (web services and similar) has it's own OU, under which is nested the servers and accounts that it uses: ... + System A + Servers - SRV-A1 - SRV-A2 + ServiceAccounts …
carlpett
  • 926
  • 8
  • 18
  • 30
1
vote
2 answers

Time Zone keeps changing after sync with PDC in different site

Background: I have a single domain, running in 2 sites that is connected using Site-to-Site VPN. Site A is running in time zone 2:00+ UTC Site B is running in time zone 4:00+ UTC DCs are correctly placed into their own corespondent subnet in the…
Noor Khaldi
  • 3,869
  • 3
  • 19
  • 28
1
vote
1 answer

Gpresult provides wrong output on vista machine regarding UAC settings

I have two workstations running Windows 7 Professional 64bit with SP1 and Windows Vista Business 32bit with SP2. Both are in the same OU and have a GPO linked named Hardening_Computers_Clients. This are the defined settings within the GPO: This is…
Matthias Güntert
  • 2,438
  • 12
  • 39
  • 59
1
vote
0 answers

Cannot enable more than 2 simultaneous Remote Desktop Connection

Windows Server 2012 is unable to allow more than 2 simultaneous Remote Desktop Connections: Instead of editing the group policy : "Limit Number of connections to 999999" Disabling "Restrict Remote Desktop Services Users to a single Remote Desktop…
dope
  • 41
  • 2
  • 7
1
vote
2 answers

GPO Policy 'Applied' but not taking effect unless gpupdate /force is run

I do not yet have a 2012 DC or a Win 8 machine to manage IE 10 / 11 settings via GPMC. So I have created a policy with a registry setting so that users in a specific OU get specific .PAC settings in IE 11. This is a user policy - that is linked and…
Sorikan
  • 11
  • 2
1
vote
1 answer

Group Policy Caching for Folder Redirection

I recently set up a new file share on a new server for Folder Redirection for a subset of our users. I robocopied the files, applied the policy last week, replacing the old policy, tested with a few users, and all seemed well. This week, I'm hearing…
SteadH
  • 666
  • 3
  • 16
  • 33
1
vote
0 answers

Microsoft Server 2012r2 GPO templates

I have a question to ask regarding Windows Server 2012 R2, but before I ask let me give you some details about our environment. We have a single forest, with a single domain, and our functional levels are both set to Server 2003. We have a DC…
Dean Carney
  • 11
  • 2
1
vote
3 answers

View GPOs applied to a specific security group

A group was created in the Active Directory Users and Computers to give local admin rights to certain users on our domain. After taking over management of this system from a previous employee I am unable to find what group policy objects are applied…
rmford91
  • 13
  • 3
1
vote
0 answers

Remote Desktop Server: Restrict drive redirection on per user basis?

For a Remote Desktop Server, drive redirection can be controlled via Group Policy. Unfortunately, this is a computer configuration, so it will either apply to all users or none. Is there a workaround, if I allow drive redirection, to be able to…
marsze
  • 467
  • 2
  • 6
  • 15
1
vote
0 answers

connections blocked to remote computer while no user logged on windows 7

A have a bunch of computers, all in the same OU, that are not contactable over the LAN (no pinging, no c$, no computer management, no SCCM connection) while the computer is not being used. The minute a user logs in, the computers are contactable…
idarryl
  • 181
  • 7
1
vote
0 answers

Windows Servers Deny Remote Creditials

Here's the layout: -Four domain controllers(2003 & 2008) -Windows Servers (2003 & 2008) -The PDC is Windows 2008 and there are some GPOs -All servers ping, no firewalls, no major or much of a minor change since this condition showed up (that I'm…
Chris
  • 11
  • 1
1 2 3
…
99
100