i am wondering if there is a group policy to force users to save office 2013 files only on one drive and not on their machines
and how can i apply it
↧
group policy to force users to save office 2013 files only on one drive and not on therr machines
↧
Office 2013 Administrative Templates & GPO
Hey, everyone!
I’m sure someone here will know what I’m doing wrong, so hopefully it’s something simple.
This is my first attempt to utilize Office 2013 Administrative Templates in a GPO. I downloaded the templates from Microsoft (http://www.microsoft.com/en-us/download/details.aspx?id=35554) and extracted them.
I then created a new GPO so that the policy folder was created in logonserver\sysvol\%userdnsdomain%\policies\Adm. In that folder, I copy the appropriate .admx files and the en-us folder.
Then, when I go to edit that GPO, I get an error:
The following error has occurred in \\Hudsonchapel.org\SysVol\Hudsonchapel.org\Policies\<GUID>\Adm\proj15.admx on line 1: Error 51 Unexpected keyword.
Found <?xml
Expected: CLASS, CATEGORY, [strings]
The file can not be loaded.
This occurs for any .admx file I’ve tried.
I’m not sure what else to try. I’ve followed what I know to do.
Could someone help me figure out what I’m doing wrong?
Thanks!
-Eric
↧
↧
block 3rd party updates
hello,
We provide the latest company approved products via SCCM Software Center. Products like Adobe, JAVA etc are included however they send far to many updates for us to change SCCM for ever minor release, additionally our users do not have admin rights so they cannot install the updates the 3rd party is constantly prompting them for.
So I guess I'd like to find a ways to block those update prompts or find a way to allows just those approved products install by non admin users or anything you think might be better solution :-)
↧
Policy definition corrupted?
I am trying to edit a Group Policy on a server 2012R2 box.
I get a popup error which says "Resource '$(string.VerMgmtAuditModeEnable)' referenced in attribute displayName could not be found. File c:\windows\policydefinitions\inetres.admx, line 1495, column 249"
And the InternetExplorer nodes are completely missing from the policy editing Window (under User Policies, Administrative Templates\Windows Components) so I can't view or edit these settings. I have five DC's in the domain and - not surprisingly - they all show the same symptoms.
SFC doesn't find anything to object to.
Do I have a corrupted file? How can I (should I) attempt to repair this?
No sig is a good sig
↧
Deny user based policy for a specific computer
I have a user based policy that deploys software for specific users when they log in to their Windows 7 workstations.
Some of these same users also have login access to a test server. I am trying to prevent the software deployment policies from being processed when users login to this test server. I have denied the 'read' and the 'Apply group Policy' security settings
to the test computer, but since it is a user based policy I believe these computer level denies are being ignored.
I have looked into loopback processing but I cannot grasp how it would fit in to my environment. Do I enable the loopback processing in the same policy that deploys the software?
Any suggestions?
↧
↧
IE 11 Compatibility View websites not populating
Hi guys,
Having a few issues with Compatibility View websites not populating in Internet Explorer through Group Policy.
I've Enabled the "Include updated website lists from Microsoft" as well and can confirm that it applies that particular setting but the websites I've included in "Use Policy List of Internet Explorer 7 sites" don't populate.
I have also checked in the registry
HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\BrowserEmulation\PolicyList
And can confirm the websites are listed in there.
Any help would be greatly appreciated.
Cheers
↧
Homepage IE10 - 2008 R2 GPO - Not working?
Hello, i have a very strange GP issue here. Background - I have been upgrading from IE8 to IE10 (with SCCM) with no problem. Install would work, and IE10 would continue to point to the Intranet.
I am currently amending some GPOs (2008 R2) and now the homepage will not point to the Intanet (or any page i put it to). It goes to msn. It is set under:
User Config - Policies - Windows Settings - Internet Explorer Maintenance - URL Important - Intranet.
gpresult /r - shows the user picks up the gpo
rsop.msc - does not show the user pick up the setting ( or gp wizard from the DC). No event viewer log/issue.
I really am pulling my head out here. I have tried to rename/amend/check permissions
domain users/authenticated users have read-apply access ( if i use either user in security filter).
Anyone had a similar issue? The fact that it was working fine before has me going around in circles.
Windows 7 SP1 32 Bit
IE10
2008 R2 DC
Thanks
↧
I cannot access GPO to make changes error (0x80070574) occurred parsing file logon failure: the target account is incorrect
I cannot access GPO to make changes error (0x80070574) occurred parsing file logon failure: the target account is incorrect,
and i am logged in as administrator-
please advise,
↧
User GPO policy issues - 2012R2
hello all
i have a number of terminal 2012r2 terminal servers with XenApp 7.5 installed. policy setting are applied using loopback/replace as normal. machine settings apply consistently but sometimes ALL the user settings fail to apply ?.
wondered if there are any 2012 patches that might address this ?. also what is the best way to log gpo processing with 2012r2 ?
thanks
dave
dsbrown
↧
↧
Group Policy not removing 'Add Printers' option on computers
I am trying to prevent the addition of printers on domain computers in Devices and Printers. I do not want the Add Printers Option to appear. I have Windows 8.1 computers. In group policy I have set User Configuration\Administrative Templates\Control Panel\Printers\ Disable the addition of printers to enabled and set User Configuration\Administrative Templates\Control Panel\Printers \Browse the network to find printers to Disabled.
I have also set Computer Configuration \ Administrative Templates \Printers\Add Printer Wizard - Network scan page (Managed networks) to disabled
and Computer Configuration \ Administrative Templates \Printers \Printer browsing to disabled.
However, on the computers even after I do a gpupdate \force, the Add a printer option is there and when I click on it I can browse all the printers in AD. I only want printers to be installed via Group Policy. I do not want users to be able to add network printers. I've rebooted, made sure all updates are applied but I'm still at a loss.
↧
AD Policy
Dear Friends,
We have following issue with domain users while installing software & changing the settings from admin account—“You do not have sufficient privileges for configuring connection properties . contact your administrator.
Please help...
↧
DEFAULT HOMEPAGE GPO
Hello,
I currently have both Server 2003r2 and 2008r2 Domain Controllers running my production environment with a mix of Windows XP and Windows 7 clients. I want to make a GPO that allows me to set a default homepage for Internet Explorer versions 8 through 10.
Side note: Does it make a difference if some of my Windows 7 machines are Virtual Desktops and others are Physical Desktops? They both have their own OU's in Active Directory.
Any help would be greatly appreciated. Thank you.
↧
Upgrade IE 8 to IE 9
Hi,
I am planing to upgrade my IE 8 to IE 9 through my domain 2012 server all client pc are mixed with win 7 32 bit& 64 bit,kindly suggest me your options.
↧
↧
Creating a DNS Record for a Host with Two or More IP???
Can we create DNS A Record for a Host with Two or More IP ... ( we like to use my website "mysite.com" pointing to two Ips )
Please help...
↧
Group Policy Backup failed
GPO Complete backup is failed, tried single GPO backup too.
The Error message is shown below,
GPO: Admin IT...FailedThe specified server cannot perform the requested operation.
↧
Replace Mapped Drives with UNC Paths via Group Policy Preferences
We are currently using Group Policy Preferences to map network drives to drive letters for our users. Given the risk of ransomware, etc. these days we want to provide users with a UNC link rather than a mapped drive letter. Can anyone tell me the best way to do this?
Thanks,
Joe
↧
Windows 8 / IE11 forget proxy settings applied by GPO on reboot
I've just about run out of ideas here on what may be causing this. I've toyed with policies quite often, but never ran into this problem before.
Windows 8 with IE11. While there are GPO's active on the system, the settings are kept free to alter by the user if need be. We use a proxy, so I'm required to provide the proxy and the exceptions in a policy to the PC's to make sure they work under normal conditions. I added a couple of settings in the GPP (Group Policy Preferences) with the correct settings, enabled these settings (green lines) and tested these on a test system. They work fine, I get my proxy settings pushed through.
Then we get to the rollout on the systems that are affected (not that many, just 10 accounts total, all in nearby rooms). I can run a gpupdate /force to reload the settings, and can confirm the proxy settings are applied properly. So the policy itself seems sound also on the workplaces it needs to be active on. Users still have the option to change the proxy settings on their own discretion, but that's exactly what we want to happen.
Now we run into the problem that when part of these PC's are rebooted, the PC somehow seems to decide the proxy isn't worth its time anymore, and kills all settings for the proxy back to default. Either that, or it just switches the proxy off. Running a gpupdate /force reapplies the policy and everything starts working again, but WHY is Windows 8 / IE11 adament about forgetting these settings?
The really maddening thing is that on a couple of PC's with Windows 8 and IE11 (and the same policies applied) it isn't a problem and the proxy remains filled in, as I would expect from GPO's. These include my test system, which makes me unable to replicate the problem and test locally.
I've tried enhancing the policy with using a forced wait for the network to become available) aswell as a forced logonscript run on boot instead the standard 'after 5 minutes'. Find these under 'Computer Configuration - Policy - Administrative Templates - System - Logon' and 'Computer Configuration - Policy - Administrative Templates - System - Group Policy'. Neither setting seems to work tho. I've also tried going with a Computer Configuration Startup script in which I just request to run 'gpupdate' with the '/force' as the switches. But this also seems not to do anything.
In short: Does anyone know why Windows 8 / IE11 falls back to something outside the scope of policies, while it accepts the forced policy update with the correct settings when 'gpupdate /force' is issued manually afterwards? And has anyone any idea what I can do to make sure the policy is applied regardless of what Windows 8 / IE11 thinks it should be?
↧
↧
GPO To Enable Memory Dump
I am looking for the location of the GPO to enable full memory dump.
We can manually enable it, but it is being overwritten.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl
"CrashDumpEnabled"=dword:00000001
Please Help
↧
GPO To Enable Memory Dump
I am looking for the location of the GPO to enable full memory dump.
We can manually enable it, but it is being overwritten.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl
"CrashDumpEnabled"=dword:00000001
Please Help
↧
Create Scheduled Task in GPOPref using System account - issue
Hi all,
I'm trying to create a scheduled task (computer configuration) in GPOPref which is executed by the system account. Creating locally and running the task manually is running without issues.
When I'm creating the task in a GPOPref using a domain account the task is installed on the targetsystem. When just changeing the account to System and run gpupdate the task is not deployed.
Any hints or workaround? Thanks for you help in advance.
Regards,
Andreas
↧