How can I (or is it possible?) change Developer tools setting in IE8 with GPO? i.e "Clear session cache" in Developer tools.
Thanx
↧
IE8 - Developer tools
↧
Unable to edit
Hi,
What do steps do I need to take in order to enable the checkboxes in "audit logon events properties" dialog under
Group Policy Project Editor \ Local Computer Policy \ Computer Configuration \ Windows Settings \ Security Settings \ Local Policy \ Audit Policy?
I have running Server 2008 64 bit with SP2. It is my third domain controller.
↧
↧
appdata redirection
In our school we have a teacher using a third-party firefox extension to download video from the internet. We have a Windows domain, and redirection set
up for documents and desktop, but not appdata, and we use local profiles. The teacher states that the 3rd party application needs to be downloaded every time a student logs into a workstation that they have not previously used. Will redirection
of appdata via group policies solve this problem? If so, what are the implications of redirecting appdata? Thanks.
↧
Windows 8.1 Applocker Blocking Packaged App Installation During Deployment
Hi all! I have run into an issue while deploying Windows 8.1 Enterprise using MDT 2013 with applocker policies applied. During testing I have had no issues with the default provisioned Store Apps but I have recently configured an applocker policy that will prevent any apps from being installed other than those provided by Windows. When I test the policy on a running computer it appears that everything is working correctly - any of the original provisioned apps can be run or re-installed from the Store and any other apps will not install.
With this policy applied when a machine images and joins the domain none of the provisioned apps will successfully download and install but instead they get an x in the lower right-hand corner. I have verified that the Applocker policy is the culprit by disabling it and imaging a new computer which successfully installed the default apps. What is going on here? If the policy seems to work on a computer during normal operation why does it prevent the apps from initially downloading? Is this a bug in the way Applocker works?
The policy is configured as such:
Executable Rules - Enforced Audit Only - Created default rules
Packaged App Rules - Enforced - Auto-created rules based on a machine with default configured apps
One workaround I am considering is to make sure the Applocker policy doesn't apply in the staging OU so the apps will download and be in a working state. These computers could then be moved to an OU with the Applocker policy linked so that it will begin to prevent the installation of other apps. This is not a desirable method but could be a stop-gap until this bug is worked out.
Please let me know if there is any other info I can provide to make this issue clearer. Thanks!
↧
Backup & Restore GPOs From/To Distinct Domains
Hello everyone,
I've created a GPO at one customer's domain. Can I back up and restore the same GPO to another customer's domain, even though there is no trust relationship between the two domains?
I'm trying to avoid having to recreate the GPO at each customer's site.
Additional info: The sites have Server 2008, SBS 2011. All I need are the GPO settings.
Thanks in advance.
Andrew
↧
↧
Allow anonymous SID/Name translation - Setting via registry instead of the Local Security Policy (or GPO)
I have a Windows 2008 R2 server and I am building a script to set a bunch of security settings via the registry.
I am stuck on one.
I am trying to set: Network Access - Allow anonymous SID/Name translation to 'Disabled' via the registry, I know this can be done through the local security policy or via a GPO but that is not what I am interested in. I want to do it making changes to the registry.
I found some people saying this can be done at:
HKLM\System\CurrentControlSet\Control\Lsa\TurnOffAnonymousBlock
However, when I browse to the registry this TurnOffAnonymousBlock registry key does not exist. Even if I set the policy to enabled or disabled manually in the local security policy. The key doesn't exist. This leads me to believe this is not the correct registry key that controls this setting.
Can anyone shed light what the appropriate key is in the registry?
↧
The Group Policy Client Side Extension Folder Redirection Issue
Hi,
Windows Server 2008 R2 frequently generating this alert can anyone help on this? Or any hotfix for this?
"The Group Policy Client Side Extension Folder Redirection was unable to apply one or more settings because the changes must be processed before system startup or user logon. The system will wait for Group Policy processing to finish completely before the next startup or logon for this user, and this may result in slow startup and boot performance"
Regards@ Sanjay
↧
Registry Wizard not saving selections in Group Policy Preferences.
Hello,
I am trying to set registry keys for ODBC settings using Group Policy Preferences. All PC's in the domain are Windows 7. In testing, I was able to get this to work. Now that I am trying to create it for production, I am unable to get it to work. I am using the same PC to create for production that I used when I was testing.
The steps I am taking are as follows:
Create a new GPO. Edit the GPO and navigate to the registry node under Computer Configuration, Preferences where I create a new Collection Item. I then right click the new collection item and choose New - Registry Wizard. Using Local Computer, I navigate to [HKLM] > Software > Wow6432Node > ODBC > ODBC.ini
Under the ODBC.ini key are all of the keys and data I want to include in my policy. When I check each key and put a check mark beside each data item in the lower window, my selections in the lower window are not being saved. The check mark shows up at the time but they are gone if I go back to check my work before hitting the finish button. If I go ahead and finish the policy anyway, I only get the keys, not the data items when the GPO is applied.
I have found a work around but it is very cumbersome and isn't a good long term solution. The work around is to go ahead and create the policy, then go back into the collection and expand everything on the left and add each data value to each key one at a time using the All Tasks > Add - menu item.
Any ideas why this is happening? I should also mention when I was "testing", I was hitting the same domain controller as I am when trying to build this for my "production" policy.
Thanks in advance.
↧
Stopping printers showing up on users computers
I inherited a system running Windows Server 2008 R2. Six DC's, 250 machines, 12 printers. We reconfigured the DC's, removing some and adding others. We also renamed all printers using Print Management to add all 12 of our printers and
Drivers. We do not deploy any printers using GPO's. The issue is that I have 4 printers that continue to populate users Printers window. They are all on a DC that no longer exists. If you delete them on a machine, they show up again
in about 15 minutes which makes me think they are being deplyed by a GPO. However I have looked through GP and cannot find where or how they are being deployed. Any ideas of how to solve this?
↧
↧
How to force Internet Explorer 10 as Default browser via Group Policy on all workstation in our domain with Windows Server 2010?
How to force Internet Explorer 10 as Default browser via Group Policy on all workstation in our domain with Windows Server 2012?
↧
Group Policy based Wireless Profiles not applying to Windows 8.1 domain clients
I'm wondering if anyone else out there has run into the same issue as I am seeing. The environment is all Server 2012(not R2), with Windows 8.1 clients.
I configure a GPO that is linked to the entire domain/authenticated users and contains a Windows Vista and Later wireless network profile. Let's call it "GPO_Wireless. It is configured to automatically connect it to a specific SSID, the encryption settings are unimportant, as I've tried numerous approaches. In our case, we're trying to do EAP-TLS with the NPS role. We have the CA rolled out, NPS has a proper cert, and the clients are auto-enrolling for both Computer and User certs. This is all verified as working. We've also tried straight password authentication.
I refresh group policy on a Windows 8.1 client and see that Computer Policy "GPO_Wireless" is being applied to the client. I restart the computer, but it does not connect to the wireless network.
I run "netsh wlan show profiles" and under "Group Policy Profiles(read only)" it is blank.
I run gpresult /r /scope computer again, and it shows "GPO_Wireless" is being applied.
The last note is that Windows 7 clients can connect to the wireless just fine.
↧
Assign Computer Policy Based On User Filtering
Hi Everybody
I got one GPO which configures computer setting (system\device installation). This policy should be assigned to computers OU. But what I want is to assign this policy to a subset of users not all the computers in that OU.
For example I want to block all device driver installation for users in a group called “block-users” on all computers, but when “unblocked-users” log in everything should be ok.
I would like to know if there is any way to do that?!!!??
Thank you in advanced
**************** Sincerely Yours Ziyaei Ali *****************
↧
Provide policies to monitor status like empty, orphaned and unlinked Group Policy Objects in an AD environment
Hi,
Is there source code in VBscript and C# to get the status of the GPO?
Any link and article which help me to write the source code both in vbscript and C#
Thanks & Regards,
Gopi
Thakur
↧
↧
Group Policy for configuring SNMP service
HI,
I want to configure SNMP service on HP Physical server for communicating with HP SIM server through GPO as need to congifure it on 100 servers.
Though I have configure a policy but its not working.
When I configured manually on HP Physical server its working fine but when I tried to implement through GPO, SNMP stops responding to SNMP requests.
I need a working GPO.
-- Sandeep Gupta
↧
Turn off Auto Detect Settings in IE using GPO
As a follow-up on some kind of bug in sharepoint ( http://social.technet.microsoft.com/Forums/en/sharepointgeneral/thread/f3dbe651-be99-491b-8c6c-fc4792ae0b22 ) I need to turn off Auto detect settings in IE on all my clients, as this speeds up sharepoint on many clients.
"The Internet Explorer Maintenance settings can be set in two modes: policy mode (to enable by Computer Configuration\Administrative Templates\System\Group Policy\Internet Explorer Maintenance policy processing) or preference mode(to enable by right-clicking
Internet Explorer Maintenance)." (snipped from http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/57d81da5-de30-4930-8649-197d204b2a6c )
Well, I have problem configuring Automatically detect settings. I have no trouble changing other parts of the same policy (changes are applied to all my computers), e.g. trusted sites and such. However I cannot turn off Auto Detect settings. I wonder if unchecking
Auto Detect Settings really means "no change"/unconfigured?
Is the only option then to use a hardcoded reg change?
HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Internet Explorer\ControlPanel\Autoconfig ?
↧
Automatic Timeout GP not working
Hi All,
I have an issue with a wkst where a GP is not applying even though it is showing when you run the gpresult.
The gpupdate is not showing any error message, the workstation is in the right OU and the GP applies to all the other computers successfully.
Tried to log in with domain admin, local admin and regular user but still not working.
Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft
Corporation. All rights reserved.
C:\Users\****>gpupdate
/target:user
Updating Policy...
User Policy update has
completed successfully.
C:\Users\****>gpupdate
/target:computer
Updating Policy...
Computer Policy update
has completed successfully.
Result of the gpresult
C:\Users\****>gpresult/r /scope:computer
Applied Group Policy Objects
-----------------------------
Windows SBS Client - Windows Vista Policy
Windows SBS Client
Policy
DCentral Agent Install
Workstation Auto
Lock
Default Domain Policy
Update Services Client
Computers Policy
Update Services Common Settings Policy
Workstation Auto Lock
Any idea ?
↧
Group Policy Printer Error (0x80070005 Access Denied)
I am trying the deploy two network printers via group policy using Server 2008 R2 SP1. I created the GPO and added the printers from our print server under computer configuration so that it will apply to the computers, not just the users. After a computer in the correct OU Gpupdates I recieve the following error in it's application event log:
WARNING: GROUP POLICY PRINTERS
Group Policy object did not apply because it failed with error code 0x80070005 Access is Denied. This error was suppresed.
Any suggestions or thoughts are appreciated. I have been dealing with this error and trying the figure it out for awhile now.
↧
↧
Roaming profile and folder
Roaming profile and folder redirection is not supported with Windows 7 Chinese Simplified language version?
↧
OUTLOOK PST FILE LIMIT IS 1.93GB
Dear,
I am working as a Network administrator and i need to the Point answer of my question...
I have extract emails from Microsoft email server through Ex-Merge tool provided by Microsoft and the file size limitation is 1.93GB if i exceed this limit i am assuming that if i Extract Emails just like 5GB .pst extension so why outlook not support after limitation file size is 1.93GB ..
Q-1 Why Microsoft limited 1.93GB
Q-2 How i can Increase this Limit
Thanks
Noor uz Zaman
↧
How to prevent a user from accessing a shard folder through group policy
Hi Gents,
kindly help me out, i need to know How to prevent a user from " accessing " a shard folder through group policy ?
i've an OU filled with users, i need to apply this polcy on them urgently .
Thanks & Regards ,,
↧