Quantcast
Channel: Group Policy forum
Viewing all 19997 articles
Browse latest View live
↧

desktop wallpaper not being set

November 4, 2014, 7:37 am
$
0
0
I have setup a new GPO that will set the desktop wallpaper for USERS.  It is not working.   The .JPG file I want to use is on a public share that everyone has read access too.   Within my GPO I have go to:  User config\policies\admin templates\classic admin templates\desktop.  I have Enabled both "active desktop" & "active desktop wallpaper"   On the active desktop wallpaper I have set the wallpaper name to:  \\servername\share\OurLogo.JPG (no spaces)

I have applied this GPO to an OU that contains my test user account.  I log into a Windows 7 workstation as my test user, the GPO does get applied (gpresults tells me this) yet my wallpaper is still black.  Why?   

mqh7

↧
Search

Unable to update Trusted Sites in IE?

October 20, 2014, 12:24 am
$
0
0

I have been referred to this forum from https://social.technet.microsoft.com/Forums/ie/en-US/544527bb-2f63-4092-9953-f7bd8f756d81/unable-to-add-ie-trusted-sites-new-entries-do-not-display?forum=ieitprocurrentver.

Any thoughts?

↧
↧

VBS script via GPO

October 30, 2014, 11:47 pm
$
0
0

Hi, I have this script below. It works without any error on every my machine. But when I try to start it via GPO, there is no result, no errors. It just doesn't work.

I set this script on Computers obkect in Active Directory.

On Error Resume Next
Const strFolderName = "\\myserver\\OS\"
Set FSO = CreateObject("Scripting.FileSystemObject")
 
Const ForReading = 1, ForWriting = 2, ForAppending = 8
Const HKEY_CURRENT_USER = &H80000001
Const HKEY_LOCAL_MACHINE = &H80000002
 
strComputer = "."
 
Set oReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\" & _
strComputer & "\root\default:StdRegProv")
 
' Get information about this machine
Set WshNetwork = WScript.CreateObject("WScript.Network") ' used for Networking object control
UserName = UCase(WshNetwork.UserName)
ComputerName = UCase(WshNetwork.ComputerName)
EnvDomainName = UCase( WshNetwork.UserDomain )
Set WshNetwork = Nothing

Set objWMIService = GetObject("winmgmts:{impersonationLevel=impersonate}!\\" & strComputer & "\root\cimv2")
Set oss = objWMIService.ExecQuery ("Select * from Win32_OperatingSystem")

For Each os in oss
    OSversion = Trim(os.Caption)
Next


If NOT (FSO.FolderExists(strFolderName + OSversion)) Then
FSO.CreateFolder(strFolderName + OSversion)
End if

strFileName = strFolderName & OSversion & "\" & ComputerName & ".txt"

Set objFSO = CreateObject("Scripting.FileSystemObject") ' used for file operations
Set objTextFile = objFSO.OpenTextFile (strFileName, ForWriting, True)
objTextFile.WriteLine OSversion & vbCrLf & ComputerName & vbCrLf & UserName & vbCrLf
objTextFile.Close

↧

Impact UnCheck the Password Never Expires option in domain Users

November 5, 2014, 2:59 am
$
0
0

Hi,

What will be impact if i uncheck the password never expires option in Domain Users ? All users are having different different password age. 

Normally we will create user account with Password Never Expires checked. But we need to uncheck for password policy.

Ex: ID - 1234, 1234 Password Never Expires is checked, if i unchecked that what will be impact ?? 1234 ID will prompts to reset the password again after unchecked Password Never Expires ? 

Regards, Hari Prasad.D

↧

Access denied when creating GPO

November 5, 2014, 3:24 am
$
0
0

Hi,

The past couple of days I have been struggling finding out what the cause/issue is.

I am trying to create a new GPO (for the first time) in Windows 2008 and receive an "Access Denied" message.
We have only one server, which is the PDC.

If using the administrator's account is not the problem, what is??

Thanks in advance.

↧
↧

disable show desktop icon

November 5, 2014, 4:16 am
$
0
0

Hi

i have server runing windows server 2008

and clients is windows 7

how can i disable show desktop icon by using groub policy in Right click view show desktop icon

thanks

↧

Access Restriction in desktop and specific drives

November 5, 2014, 6:52 am
$
0
0

team,

i want to restrict users from storing files in desktop and need to save only in specific folder in an specified drive, please help to create an group policy.

Thanks in Advance,

Vinoth kumar.S

↧

Applying local user policy

October 29, 2014, 12:11 pm
$
0
0
I have created a kiosk computer, which is also a domain member, by applying a very restrictive local user policy and auto logging on with a local account.  When I deploy a new kiosk, I configure the software, copy the registry.pol file to it and run gpupdate /target:user /force while logged in as the local user that the kiosk will use. The local user policy does not get applied to the local user, even after multiple gpupdate commands and reboots. The only way I can get the policy applied to the local user is to edit one of the policy settings, say active desktop.  I can set active desktop enabled and click apply and presto, the local user policy is immediately applied. Am I doing something incorrectly or is this truly the only way to get the local user policy to apply to the local user account I'm using?
↧
Search

How to remove IE Mainenance GPO settings after upgrading to IE10+

November 5, 2014, 10:37 am
$
0
0

We have several GPO settings that were configured using Internet Explorer Maintenance.  We have recently upgraded to IE10 and now those settings are inaccessible for edit/delete since installing IE10 on the server removes the IE Maintenance option in GP Management.  However, if you look at the GPO settings tab, you can still see the settings defined.  How do I remove these settings now?  Do I have to build a machine that is < IE10 just to remove these settings?

Thanks,

Eric

↧
↧

Problems with deployed printers

November 5, 2014, 2:27 pm
$
0
0

We have printers deployed to our buildings via Group Policy. We're having intermittent problems with the printers getting mapped for the users. We have a mixed Windows 7 and 8.1 environment. From what I can tell the Windows 7 almost always work. However for the Windows 8.1 ones its intermittent. The error in the Application log for the machines that do not get the printers is this: 

The user 'Hard-IMC-1nb-test' preference item in the 'Student Mandatory {0FA26CC5-C001-4A02-AACE-930581B7A1CF}' Group Policy Object did not apply because it failed with error code '0x80070057 The parameter is incorrect.' This error was suppressed.

Hard-IMC etc is the printer share name. Student Mandatory is the name of the policy.

The strange thing is some students login and get all printers, some it gets this. I tried adding another printer share to the same printers with say a PCL5 driver vs a PCL 6. And it'll work fine for a few days then that one falls into the mix of not getting mapped. This is happening in all of our buildings each has its own local 2008 R2 print server. If I create a test account and login to the same PC as a student that doesn't get the printers it works fine for about 9-10 logins and then it starts happening to the test account. Its like the problem takes a few logins to occur. I've looked at some of our printers and they use the same manufacturer driver for both Win 7 and 8.1 so its not a driver issue especially since a lot of the times they do map. 

The only thing I've been able to find out is that on Win7 its not happening. Nothing else makes sense. There is no pattern to time of day or account. The machines all have the same image and updates etc. Can anyone give me a direction to look at. We have too many PC's to do printers individually.

Thanks

Jason

↧

How to Restrict listed Software installation on user computer using GPO

October 24, 2014, 6:48 am
$
0
0

Hi Experts,

In our environment, Domain users are installing number of software from internet without our IT department approvals. There are some company Licenses software which may cost us later.

1. We have a list of Software which domain user should not be allowed to install on their computer but domain users can install other software's.

2. To install these Listed software only IT department should have the rights. So that the IT team can install these listed software's on user machine with there ID.

Queries -

1. Which one is better to configure in GPO -- Software restriction policy setting or Applocker Setting

2. Also suggest the steps to configure

Thanks for the Help

↧

event ID 1053 source GroupPolicy error code 1722

November 5, 2014, 7:56 pm
$
0
0

Hi, I have one DC in my domain. It comes some errors every day

The event ID is 1053. source: GroupPolicy

The processing of Group Policy failed. Windows could not resolve the user name. This could be caused by one of more of the following:

a) Name Resolution failure on the current domain controller.

b) Active Directory Replication Latency (an account created on another domain controller has not replicated to the current domain controller).

And I see the details

SupportInfo1

1

SupportInfo2

1575

ProcessingMode

0

ProcessingTimeInMilliseconds

1607

ErrorCode

1722

ErrorDescription

The RPC server is unavailable.

 

The system of my DC is Windows server 2008 SP1.

How can I solve this problem?

 

Thanks.

↧

block websites on Internet Explorer 11 using group policy

November 5, 2014, 7:44 pm
$
0
0

hi everyone,

i have been trying to block website for domain users using group policy windows server r2 for IE the problem is in internet properties content adviser option is not active.

thanks in advance

↧
↧

Unable to delete gpo link to an OU using C#

October 22, 2014, 2:42 am
$
0
0

Hi,

I have c# .net windows application (vs2010). I am working on Active Directory GPO link and Unlink to an OU.

To link a GPO with an OU I used GPMGMT.lib and it is working below is the code

GPMGMTLib.GPM gpm =null;
          
                 gpm = new GPMGMTLib.GPM();

                GPMGMTLib.GPMConstants gpc = (GPMConstants)gpm.GetConstants();

                GPMGMTLib.GPMDomain gpd = (GPMDomain)gpm.GetDomain(strdomain, "", gpc.UseAnyDC);

                GPMGMTLib.GPMSearchCriteria searchOBJ = gpm.CreateSearchCriteria();

                searchOBJ.Add(gpc.SearchPropertyGPODisplayName, gpc.SearchOpEquals, strGPO);

                GPMGMTLib.GPMGPOCollection objGPOlist = gpd.SearchGPOs(searchOBJ);

                GPMGMTLib.GPMSOM gpSom = gpd.GetSOM(strOU);

                gpSom.CreateGPOLink(-1, objGPOlist[1]);

     But I am unable to delete link between GPO from an OU.

     After searched in google got information saying add gpedit.dll which contains DeleteGPOLink method.

       When I am trying to add reference it is giving me an error message saying

     "A reference to C:\windows\system32\gpedit.dll could not be added. Please make sure that the file is accessible, and that it is a valid assembly or COM component".

   Could anyone suggest me how to unlink a GPO from an OU with an example.

    Many Thanks in Advance.

Govind

↧

Group Policy Capacity

November 6, 2014, 12:22 am
$
0
0

Hi everyone,

I would like to ask about using group policy to deploy software.

As my Windows Server version is 2003, is there any problem if I use Windows Server 2003 to deploy software to Windows 7,8 or others Client version?

Thank you.

Regards,

Jimmy

↧
Search

I have removed some ADM templates from group policy but are still showing in RSOP

November 6, 2014, 9:48 am
$
0
0

I removed some old custom ADM templates from group policy but they are still showing up when I run RSOP.MSC.

How do I get RSOP.msc not to show these old custom ADM templates?  I'm not able to find what I'm looking for in my searches. 

↧

Group policy not applying in client machines.

November 6, 2014, 11:13 am
$
0
0

Hi,

I have windows server 2012 domain controller with one additional 2008 ADC.

Everything works perfectly, all of us sudden group policies are not applying in user machines.

In Client machine it showing group policy applied but settings not came. In gpmc i ran group policy resulting wizard, in that it showing denied group policy due toblocked som.

I enabled blocked inheritance for some OUs, but the policy is not applying for all the ous.

I checked the permission of group policies, in that authenticated users with apply group policy enabled with read permissions.

Everything looks good but gpp not working...


Anybody please help me to fix this issue.....


↧
↧

Is there a way to have Group policy override users active directory remote desktop services profile path?

November 6, 2014, 12:22 pm
$
0
0

Hello, I have done some testing and I cannot seem to get this working. We have some users in our organization (from acquisitions) that have Remote Desktop Services Profile paths setup in their Active Directory account. What we are trying to accomplish is setup a new Citrix/Terminal Server environment and using loopback Group Policy to set the users roaming profiles to be different then what they have set under their AD account. From my testing an account in AD that has no RDS Profile path set gets the new roaming profile setup fine via the loopback GP when logging in. Users who have RDS Profiles set to a path under their AD account are not getting a new roaming profile. I would assume that the AD setting under the user account trumps the Group Policy but I don't know this for a fact. Can anyone please verify if this is the case or if there is another way to accomplish this. Thank you for your assistance!!


↧

Group Policy Readers not getting correct read delegations on new GPOs

November 6, 2014, 12:51 pm
$
0
0

Running a 2008R2 domain.  I just added a few IT users to the Group Policy Readers group.  They told me that there was at least 50 GPOs they are seeing as "inaccessible" with the red X. I then went and looked and see no "Read" delegations on any of my GPOs(over 200) to the Group Policy Readers Group, even when looking under "Advanced".  Did not know if there was something I could change on the default domain controller GPO, etc. to add the Group Policy Readers AD group to have read permissions on all GPOs.

Thanks,

Dan Heim

↧

No SSTP VPN type in GPO

April 4, 2010, 6:06 am
$
0
0

Hello!

I'm trying to define a VPN connection with GPO. I go to User Configuration->Preferences->Control Panel Settings->Network Options. I create a new "VPN Connection". I successfully define all parameters, but under "Networking" tab I can choose from these 3 types of VPN:

  • Automatic
  • PPTP VPN
  • L2TP IPSec VPN

I do not get any SSTP option. I tried googling it, but couldn't find anything. Could you help me on this one?

 

Thank you for your time.

↧
Viewing all 19997 articles
Browse latest View live
Search
<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>