Hi,
I am unable to install updates on my DC's. I would need to shutdown to installl them.
attached is how GPO is configured.
Any suggestions?
Wave~Chaser
↧
Unable to install updates
↧
AGPM Server Unavailability
What are the consequences of AGPM server being down or dead completely?
Will the users with approximate permissions be able to carryon with their duty with GPMC or AGPM is till required?
↧
↧
EXE to MSI convert issue
Hello All,
How do i convert exe to msi. i used 3rd party tools but nit work. Can anyone please suggest
Thanks
↧
Drive Mappings not applying via Group Policy Preferences
We have had a number of recent incidents logged where users are reporting that one of their networked drived has not mapped.
We use Group Policy Preferences to assign mapped drives. Each user Department has a dedicated GPO applying the drive-mappings for that Department. Within each GPO, some of the individual mappings are controlled by memebrship of a security Group (Item Level
Targetting), others are applied indiscrimiately.
The recent indicents are where a user has all but one of their drives mapped; the user accounts have been checked and verified as being members of any required Security Group in "Item Level Targetting", however, the "rogue" drive does not
map.
If I then create a new security group, with the user-account added as a memebr, and add this group to Item Level Targetting (using an "OR" operator"), the missing Drive is now mapped.
I don't want a proliferation of Security Groups cluttering up Active Directory, and would rather resolve why the drives are not mapping with the existing Item Level Targetting.
Any ideas where to start looking (GPRESULT does not provide any debug information, even in verbose setting), or why these "rogue" drives are not mapping?
↧
Alternative To Site To Zone Assignment GPO
We need to add one site to Local Intranet Zone in Internet Explorer, but we need to just add the site, not remove other existing sites or lock it down.
What kind of GPO or GPP can be set to add an additional site to Local Intranet Zone without wiping out other sites or locking the settings?
↧
↧
Specify Intranet zone sites in GPO without locking down Trusted Zone sites
Is there a chance we could get a new policy setting that would let admins specify Intranet sites but let users specify Trusted Sites? Is there any chance someone on the group policy team could comment on this?
Many of us are in the situation where we have to configure sites in the Intranet zone, but absolutely cannot lock down the Trusted zone sites. There would be a revolt if that happened. There's no way I can know all of the sites my 40 users need to trust beforehand. And after the fourth or fifth time someone had to call me to investigate and add a new site, I'd be forced to remove the policy.
There are a number of forum entries that discuss mapping sites to zones via GPO, such as
and this one
It's very frustrating. They get you almost there, and then the cruel reality that you can't do it slips in. (One contains a link which promises the prize, but it's dead).
You can't map sites to zones without locking down all of the site-to-zone assignments. There isn't a group policy preference for site mapping, only a policy. (given what GPPs really are, this is a Good Thing). And it covers all of the sites.
↧
Using group policy for data loss prevention
Looking at data loss provention, is this possible with using group policies combined with AD
↧
STUMP of the day: "Disable AutoComplete for forms" works opposite of the setting
I have a group policy setting in User Configuration>Administrative Templates>Windows Components>Internet Explorer; Disable AutoComplete for forms that is set to "Enabled." By definition, this would disable the ability for IE to suggest possible matches when filling forms.
When I pull a GPResult, the setting shows the opposite (Disable AutoComplete for forms = Disabled). The applied GPO is in fact the GPO that sets it to "Enabled," yet GPResult shows "Disabled."
Here is the kicker: the actual functionality for AutoComplete is NOT working, even though GPResult says it should!
Environment:
IE9, Win7, AD=2008R2.
My users have just started to complain that AutoComplete isn't working, but this should have not been working to start with. Any ideas as to what is going on?
Charlie Newman
↧
New Server 2012 R2 Getting AD / SYSVOL Mismatch
I just loaded up a fresh copy of Server 2012 R2 in VMWare and made it a Domain Controller. To get a feeling of it before I deploy it.
All the Windows updates have been done.
Ran the Group Policy Results Wizard and got these alerts.
Default Domain Controller Policy Alert: AD / SYSVOL Version Mismatch
Default Domain Policy Alert: AD / SYSVOL Version Mismatch
I found that there is a hot fix for this for Server 2012.
http://support.microsoft.com/kb/2866345
But when I run the hot fix it tells me that "The update is not applicable to your computer"
So how do i fix this issue? Dont want to deploy Server 2012 R2 to my live enviorment only to have issues.
↧
↧
GP Prefs deploying Internet Explorer (ver,9, 10 or 11) Favs
Hello,
I've got over 60 favorites (URLs) to deploy to Windows 7 Prof. machines. Several different folders contain the different Internet Explorer Favorites, ie. FOLDER1\link1, link2, etc. FOLDER2\link1, link2, etc. They deploy fine to any of the 3 versions of IE,
however, I cannot determine a few things. First I can't get my FOLDER(s) to appear at the top of the Favorites menu (used to be easy to configure this). Second, some Favorites are not sorting alphabetically and last, if I delete a Favorite, the Group Policy
Preferences will re-deploy it, but again not sorted alphabetically, it will appear at the bottom of my list. Anyone have a solution to any of these?
Much appreciated!
↧
Migrate Domain controller 2003r2 to...???
Guys hope someone could help.
on our Envi. we have two Physical Domain controllers 2003r2 64bit running DHCP/DNS Services, however we need to update to 2008r2 or 2012r2,
the idea is to decomisse the two 2003r2 Domains after the new Domains ( 2012r2/2008r2) are up and running.
can you please share your experience with me ?
what are the obstacles i can hit during the migration ? what about the exisiting client that are addedd to the domain ?
what are the steps to follow to get this done wihtout any issues?
Thank you so much
Julien !
↧
How user logon process, computer authentication and GPO is applied when user in domain "A.contoso.com" logs onto computer account in domain "B.contoso.com"?
How user logon process, computer authentication works and how GPO is applied when user in domain "A.contoso.com" logs onto computer account in domain "B.contoso.com"? Also, loop back is implemented in domain "B.contoso.com"
where the computer account resides.
↧
Windows 8.1 Start Screen via GPO
Hello all,
Thanks for taking the time to read this. I realise there are other posts with similar issues to myself, however having read through these posts and applied fixes provided, I am still unable to get this to work. I am having an issue when trying to apply the Start Screen Layout GPO.
I am attempting to configure this GPO on my Windows 8.1 test network at the moment, but having no joy with it.
I am using Windows Server 2012 R2 Standard, and Windows 8.1 Enterprise.
Having done gpresult /r on my test workstation I can confirm the GPO has applied, and also when I check in the registry, the value has been changed in line with the GPO.
The .xml file is located on a share, although I have also tried the with the .xml file locally on a single test machine and the start screen still does not change.
Some of the policy is applying, as when I link the policy, I cannot then customize the start screen on my pc which from what I understand is expected behaviour.
Any help with this issue would be greatly appreciated.
Kind regards,
Doug
↧
↧
Default Domain Policy Reset Problem
Hey,
I tried resetting the Default Domain Policy and Default Domain Controllers Policy because they got messed with.
I used DCGPOFIX.exe but when I went back to the policy it just said no policy found. I had backed them up previously so I just restored them.
Any thoughts on how I can reset them?
Thanks
↧
Folder Redirection / Offline Files / Network Drive / Missing Files
We are having instances where people are savign work and this work is not available when the user moves to a different computer. On occasions it is when the user have saved to my documents and this hasnt redirected which we are ok on solving. However on other occasions I am being told they are saving to their network drive H:\ and the file or changes to a file are not appearing
On digging around I did find the file in sync center / offline files. My question is how and why would a file end up there and is there group policy settings maybe that are wrong to cause this?
Thanks
Robbie
↧
Update of local administrator account is wiping the additional members of the local administrator group
Hello all, I'm trying to perform 2 tasks with Group policy preferences on the local machines
1. update the local administrator settings (set no password expiry, add another emergency account we can reset the password for.
2. add another group to the local administrators group (for per site permission control for our staff to local machines).
these tasks work well independantly of each other, however i find that modifying the local admin account, wipes the extra group from the local administrator group.
As soon as I disable the item to update the local admin account and run GPupdate, my group additions begin working again.
Does anyone know why updating the local admin account would affect any group additions to the local administrators group? In my eyes it shouldn't and a Group policy results report indicates that all were applied successfully, but a quick check after reboot shows this to not be true.
Any help appreciated.
↧
Set Security Level per Security Zone in IE
I am trying to set the Trusted Security Zone to Low in IE (all versions).
I have made the change under Computer > Administrative Templates > Windows Components > Internet Explorer > Internet Control Panel > Security Page > Trusted Sites Zone Template (and also tried under User). With User logged in I can see rsop which shows the setting, but in IE it remains at Medium.
↧
↧
Citrix Group policy management
Hello
I need to migrate my citrix and xendesktop gpo from one domain to another.
I was warned that modifying any of these outside of the Citrix environment modifies the GPO.
is this true? do I need to install the Citrix Group policy management componment on the destination DC? its already on the source DC.
↧
gpo templates what policies are using them
hello
how can I tell what templates my existing gpo are using?
I need to migrate my current policies to another domain do I need to worry about the templates?
↧
Screen lock does not apply
Hello,
I have a GPO where I want the screen to lock up after 10 minutes and I noticed that it does not work all the time. I have seen it on my own machine where I step away, go to a meeting, and at times the lock will not kick in.
I have noticed that a lot of times, there is an active RDP session when the lock does not kick in and when it does, there are no RDP sessions. I am not a 100% sure but just something that I observed. Has anyone heard of that? How can I confirm?
The domain is on a 2003 functional level and the Resultant Policies show that it should be applied with logon.scr file.
I am not above reading logs but just need a direction. This happens to other users but if I can fix it on my box, chances are that it will work on others.
Thank you in advance,
Jack
Thanks, Jack
↧