Quantcast
Channel: Group Policy forum
Viewing all 19997 articles
Browse latest View live

Some Windows 8.1 GPO settings have no effects

$
0
0

I´m trying to customize Windows 8.1 visual look By setting some GPO:s, and even when I see with resultant, that my settings are inherited, they has still no visual effect. These settings are:


"Force a specific default lock screen image" - still there is default lock screen, not mine.
 
"Prevent the wizard from running." - when new user logs in, the wizard is launched.

I´m just wonder, is there a known bug why these settings does not work or has no effect?


redirecting my documents to users home folder

$
0
0

I have followed all of the suggestions I have read in here and none have helped. I have gone to the gpm and then the folder redirection and under properties told it to redirect it to the users home folder which all users have one created in active directory but nothing happens when I log off and log back on.  I get the following error when I update the group policy.


User Policy update has completed successfully.

The following warnings were encountered during user policy processing:

The Group Policy Client Side Extension Folder Redirection was unable to apply on
e or more settings because the changes must be processed before system startup o
r user logon. The system will wait for Group Policy processing to finish complet
ely before the next startup or logon for this user, and this may result in slow
startup and boot performance.
Computer Policy update has completed successfully.

For more detailed information, review the event log or run GPRESULT /H GPReport.
html from the command line to access information about Group Policy results.

C:\Users\dzidan>gpresult /h
ERROR: Invalid syntax. Value expected for '/h'.
Type "GPRESULT /?" for usage.

From the event log I get this:

Failed to apply policy and redirect folder "Documents" to "\\ktsbscle\Users Shared Folder\dzidan\".

Redirection options=0x1211.

The following error occurred: "Can not create folder "\\ktsbscle\Users Shared Folder\dzidan"".

Error details: "This security ID may not be assigned as the owner of this object.

".

Folder redirection policy application has been delayed until the next logon because the group policy logon optimization is in effect.

When I reboot nothing happens.  I can redirect network folders just fine but why it is such a pain to sync my documents to a users home folder is beyond me.  Can someone help me out here please?

Steve


Steve Featherston

8.1 drive mapping

$
0
0

Before upgrading to 8.1 from 8.0pro I managed to network an external drive to my pc for backup purposes. After upgrading to 8.1 however, I'm no longer able to access or network the drive. It is a Seagate goflex 3tb network drive.

In 8.0 I ran the Seagate software and mapped the drive using windows. from that point on I didn't need the Seagate program as I just pulled it up in explorer. Now that I installed 8.1 the procedure I used to map the drive no longer works. Can someone help me. TIA

Disable Programs and Features of Windows 7 using GPO

$
0
0

Hi all,

How do i disable Programs and Features  in control panel of Windows 7 using GPO.

Gpt.ini mismach

$
0
0

Hi,

I have 3 domain controllers

1.Id-dc1 - its the main dc (server2008 R2)

2.id-dc2 (server2008 R2)

3.id-dc3 (server2003)

On Id-dc1(server2008 r2) & id-dc3(server2003) the sysvol folder its good the same folders and its the same version in gpt.ini file.

On id-dc2 (server 2008 r2) the sysvol folder not the same i have just 6 folders of 14 folders.

How i can Sync Sysvol folder on this server ?

Thanks

Group Policy applied but has no effect

$
0
0

Hi,

We upgraded our domain controllers from server 2003 to server 2008 R2. No action was made on GPs beside the /gpprep.

This week we created a group policy to disable Automatic Updates. Running GPRESULT, it shows the policy is being applied, however, Automatic Updates policy never gets disabled.

Anything must be done to the GPs?

Thank you.


Systems Engineer

upgrade Group Policy Central Store

$
0
0

 Hi everyone,

Currently I have a windows server 2008 R2 domain environment with windows 7 client computers, the policy definitions are stored in the Central Store.

I have a very simple question but I can't find the answer..

I want to test the windows 8.1 group policy definitions but can I just overwrite the current windows 7 definitions with the new windows 8.1 definitionswithout destroying the current group policy's ??

Thnx,

Pouyan

Gpresult html report creation not working for computer settings

$
0
0

When I try and run a gpresult. all I get is this at the command prompt (as administrator). 

gpresult /h c:\report.html
ERROR:

The error is particulary helpful ;-)
I can successfully create a xml file with /x report.xml . Its a pain to read though.
Also group policy results is also broken. I get the message:

An error occurred while generating report:
An unknown error occurred while the HTML report was being created.

I have read the fixes involving editing install.ins to remove the imported zones. This doesn't fix the issue.

It only occurs when I want the results from the computer settings. User settings work fine.

The environment is Windows 7 with Server 2008 R2 DCs. We have 3 2012 servers where gpresult works when processing computer settings.


GPO Security Zones and Content Ratings "Modify Settings" buttons are disabled

$
0
0
Task: Trying to modify a GPO so that specific users who logon to Remote Desktop Servers will have a lower Internet security level for Internet Explorer.

We have two Windows Server 2008 Domain Controllers, when I access the GPO using the Group Policy Management Console and Editor on either of the two Domain Controllers, then navigate to User Configuration > Policies > Windows Settings > Internet Explorer Maintenance > Security > Security Zones and Content Ratings, the available "Modify Settings" buttons are both disabled.

I've read through several forum posts relating to this and the closest solution mentioned was to turn off IE ESC for Administrators on both Domain Controllers. I've done this and it nothing has changed as a result. Is there a way enable the "Modify Settings" buttons, or is there another way to achieve the task mentioned at the top of this post?


 

Microsoft Silverlight deployment

$
0
0
Does Microsoft have an MSI file that can be downloaded to install Microsoft Silverlight via GPO? If not how do you install MS Silverlight to a bunch of workstations using a GPO that is not an MSI file.

Why there is only "New folder" option when I right click on "Windows\System32" folder ?

$
0
0

Hi,

someone can explain me why when I right click on some specific folders, I only have the right to create new folder but not to create new document or new text file ? 

Is there a way to add more options when I right click on those folders ?

Thank you

Group policy acts unexpectedly

$
0
0

Hello,

I am trying to solve a problem in my domain environment. I am out of ideas. Company decided to force specific sceensaver and custom Power management.

I set it as showed in attached file, but there is problem. Random computers starts their sceensaver sooner, than they shoul and on other random computers taskbar in Win 7 Pro just dissapers - not hide, really dissapears. Only the Start button remains in place.

May i ask you for help? Thanks

Hello,

I am trying to solve a problem in my domain environment. I am out of ideas. Company decided to force specific sceensaver and custom Power management.

I set it as showed in attached file, but there is problem. Random computers starts their sceensaver sooner, than they shoul and on other random computers taskbar in Win 7 Pro just dissapers - not hide, really dissapears. Only the Start button remains in place.

May i ask you for help? Thanks

User Configuration (Enabled)
Policies
Administrative Templates
Policy definitions (ADMX files) retrieved from the local machine.
Control Panel/Personalization
PolicySettingComment
Enable screen saverEnabled
Force specific screen saverEnabled
Screen saver executable name \\...\SURAO.scr
PolicySettingComment
Prevent changing screen saverEnabled
Screen saver timeoutEnabled
Number of seconds to wait to enable the screen saver
Seconds:600
Preferences
Control Panel Settings
Power Options
Power Plan (Windows Vista) (Name: SURAO)
Power Plan (Windows Vista and later) (Order: 1)
Properties
ActionUpdate
Make this the active Power Plan:Enabled
NameSURAO
When computer is:Plugged inRunning on batteries
Require a password on wakeup:YesYes
Turn off hard disk after:NeverNever
Sleep after:After 60 minutesAfter 10 minutes
Allow hybrid sleep:OnOn
Hibernate after:NeverNever
Lid close action:SleepSleep
Power button action:ShutdownShutdown
Start menu power button:HibernateHibernate
Link State Power Management:Moderate power savingsMaximum power savings
Minimum processor state:After 5 minutesAfter 5 minutes
Maximum processor state:After 100 minutesAfter 100 minutes
Turn off display after:After 15 minutesAfter 7 minutes
Adaptive display:OnOn
Critical battery action:Do nothingHibernate
Low battery level:After 10 minutesAfter 10 minutes
Critical battery level:After 5 minutesAfter 5 minutes
Low battery notification:OffOff
Low battery action:Do nothingDo nothing



Is there a way to save the default or last user account on UAC prompt ?

$
0
0

Hello

I have UAC enabled and configured to prompt when I need to elevate my privileges.

I would like to know if there is a way to save a specific login (or the last one) ?

Indeed, I am logged with a no admin account and so I am prompted quite often to enter my admin and password account; so it should be nice if the login will already be filled.

Thank you

Deleting and Restoring GPO in ADC

$
0
0

Hi All,

I have a Windows server 2008R2 DC and ADC. I have configured GPO's in DC. I am in a fix about a scenario,

If I delete a GPO from ADC, whether it is completely deleted from the domain or will it get replicated from the MAIN DC?

It might sound silly but am struck up on this!

Thanks in advance.

Regards,

Charles Vincent

MCSA - Windows Server 2012,MCTS-Active directory and Virtualization and CCNA

Newer GPO Import from Windows 2012 to Windows 2008 R2 DC

$
0
0

We have a large Windows 2008 R2 forest and a few isolated forests with Windows 2012 DCs. W2012 environment is using some latest/newer GPOs. 
We are looking to consolidate the forests and bringing all users in Windows 2008 R2 forest.  Can we import newer GPOs from Windows 2012 environment into Windows 2008 R2 environment?  Is there a technet article supporting the process?

thanks


Navgup


Registristy path for checking " Service accounts must be blocked from interactive login"

$
0
0
Can anyone please help me to get the registristy path for checking " Service accounts must be blocked from interactive login"

Granular Password Settings

$
0
0

Hi,

I have following questions on the deployment:

1) Do the deployment impact existing user if the settings apply to new global security group?

2) Do I get the standard windows pop out message about password expiry and etc.?


New Domain policy not working

$
0
0

I have duplicate existing <Default Domain Policy> to <Win7 - EC-Domain> with some modification on password complexity, minimum number of password character and password age settings. However, the test OU computer object not working with the new policy.

Is there anything that I have missed out in this? Appreciate for any help.

I can see the computer configuration settings at RSOP with the new policy, but the user stil can change the password with 1 or 2 password character.



2008R2 IE 11 Group Policy Preference Proxy Configuration Issues

$
0
0

I've been mulling this problem over for a while and I finally have to accept I can't use IE Maintenance anymore for managing proxy settings.  I've been reading up on how to make Server 2008 R2 work with GPP settings for IE 9 - 11.  Everything I've read says I need to install the .admx files (link below) or install IE 10+ to get the IE Preferences to show up for 9, 10, and 11.  But when I look at my .admx files in %systemroot%/PolicyDefinitions it has the same exact .admx file that I download from the Admin Templates.  I can not see the policy preferences for IE 9, 10, or 11 and need these options so I can configure a Proxy server.  How do I go about getting these preferences to become available in Server 2008 R2 SP 1? 

#admx link

http://www.microsoft.com/en-us/download/details.aspx?id=36991

Note that I also tried the following to manually add support while testing but it didn't help me:

Open up the policy, and create an IE8 Preference: User Configuration --> Preferences --> Control Panel Settings --> Internet Settings --> New --> Internet Explorer 8 -> Set your proxy settings


Navigate to C:\Windows\SYSVOL\domain\Policies was an easier route, then sort by date for the recently created IE entry.

Navigate to User\Preferences\InternetSettings

Open up the "InternetSettings.xml file, and change the MAX value to something above 10.0.0.0 (I usually put 10.5.0.0). This way, the policy won't trip up later on if IE 11 comes out and doesn't support any of these policies, but at least you'll be safe until 10.5.0, or until a hotfix is available. "

max="10.5.0.0"



GPO on local PC not working

$
0
0

Hello, guys.

I've been running into a problem lately. We are currently trying to automate the printer-installation in our company by using VBScripts.

Right now I have a OU set up with several computers that are in the same room and will therefore get the same printers. First we are placing a vbs.-file on these PCs by using a Group Policy on this OU. This script runs on Startup and works perfectly well. It places the file into the folder C:\Scripts (if the folder doesn't exist, it creates it).

The problem is the other GPO, which is being applied to all users in our company and runs on logon. It's supposed to look in the folder C:\Scripts and run our .vbs-file in there (If the computer isn't in the OU it obviously won't find anything and will not run any script). The problem is, it doesn't do that. If I run the script manually, it installs the printers. So the problem has to be with the GPO, right?

This is the path I have given for the script in the GPO: C:\Scripts\printer.vbs

I highly suspect this path doesn't work, though I don't know how to make it work.

I'd appreciate any help, thank you.

Greetings, TheRobidog





Viewing all 19997 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>