Quantcast
Channel: Group Policy forum
Viewing all 19997 articles
Browse latest View live
↧

Group policies hanging for 30 minutes (challenge for you super duper GPO genius) :)

October 22, 2015, 10:33 am
$
0
0

Hello Everyone

I have a limited amount of experience with group policies. I am turning to you guys to help me become a hero :) We have about 80 computers in our library running Windows 7. Every year our computers work fine and then suddenly several of them start hanging"Applying group policy environment policy." During this time it has a ton of hard drive activity. Then suddenly the computer just loads "press CAD to log in" screen. 

This year I have been assigned the library as one of my labs (hooray) so I am determined to figure out the solution.

We thought perhaps it might be the fact that we have over 500 user profiles stored locally on these machines (we used to have delprof delete them but since they no longer allow you to enter a password into group policies we cannot get delprof to work). We do have our group policies setting to try applying for 60 seconds only and then move on but that obviously doesn't seem to be working. I check eventvwr and do not see any errors.

I will be focusing all my attention on this issue so please let me know what information you need and I will provide it as quickly as possible.

What are my possible next steps? Are their programs out there that I can install that will give me a log of what is happening with my group policies etc. I am continuing to read on possible solutions as well but I appreciate any help you can provide.

↧
Search

Windows 8.1 Force Lock Screen

October 18, 2015, 1:36 pm
$
0
0

I've asked this question before but never got a satisfactory answer. There are GPO objects specifically to force a specific lock screen for Windows 8. However, these don't work for Windows 8.1. When the GPO is applied, the necessary registry keys are created etc, but the lock screen doesn't apply.

Has anyone successfully created a GPO to force a specific lock screen on Windows 8.1 Pro computers that are domain joined? 

If so, what method was used? 

Any help would be greatly appreciated

↧
↧

GPO applied but registry keys not correct

October 6, 2015, 3:42 pm
$
0
0

Hello all, I am dumbfounded on this one, so I really hope someone can help.

On Windows Server 2008, we have a GPO in place to push out the Lync serveraddressexternal and serveraddressinternal registry keys for our company.

Now, for most people, this is working. However, I have had several users who are in the same office offsite (although it is not the only satellite office and the others work fine) that for the last two days, when they boot up in the morning, their Lync regkeys have reverted to some old information that no longer works. I corrected them for them manually, but today again they were set back.

We used to have Lync 2010 but upgraded to Lync 2013.

I have had the three users run gpupdate /force, which completes successfully, but the registry keys are still wrong.

I had them give me the results of a gpresult, and I see that the GPO in question says it is being applied, however the value it lists (although in numbers) is not the same as mine. All three have the same number value, and me and other coworkers with no issue have the same, so I can reasonably assume it's that the GPO isn't actually changing the registry keys, right?

What could cause this? I do not see any other GPOs that have these settings in them to conflict, and the scope is appropriate.

I am all out of ideas.

↧

SYSVOL version mismatch in Windows Server 2008 R2 and Windows 7...

October 22, 2015, 6:47 pm
$
0
0

Hi all;

Please see the following figures:

Both computers are in same OU and so the same GPOs apply to them. But Windows Server 2008 R2 reports SYSVOL mismatch...

Any ideas?

Thanks

Please VOTE as HELPFUL if the post helps you and remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

↧

GP don't applying to Windows 10

October 23, 2015, 1:22 am
$
0
0
Hi! I have a machine on Windows, to which group policies are not applying. I want to know why. There is no any WMI filters or OS-specific policies. I suggest, that's some policies can really may don't apply, but no any policies here. Please help.
↧
↧

Issue with applied GPO and GPresult

October 23, 2015, 4:37 am
$
0
0

Hello Team,

We have recently applied a GPO that will turn the HT mode to disable state for "Intel(R) Dual Band Wireless-AC 7260". but this was to be done on few models of laptop. We have done it by changing one of the registry value.

We used WMI query available in GPO to apply it to few models only. 

But now the issue is that we are not able to view this WMI query when we have the gpresult from the client machine. This gpo works as expected but the wmi query is not visible in gpresult is the issue.

Any suggestions please..... 

↧

Local Admin Access

October 23, 2015, 4:41 am
$
0
0

Hi,

I manage a domain and I want to grant my service desk staff access to the local admin group on all PCs and Servers in the domain, can anyone provide any instructions to do this?

↧

Assistance with Setting Folder Permissions

October 23, 2015, 5:47 am
$
0
0

Looking to set up a particular set of permissions, but not sure how to go about it.

All users in a specific OU have access to \\Server\Share and should be able to RWX anything in the folder. However, if $User1 creates a file or folder, I do not want $User2 to be able to delete it, but I do still want them to be able to perform RWX actions. Permissions would need to be recursive to existing items in the folder as well.

Any assistance is appreciated.


↧
Search

Create Local Admin User on Domain Computers through GPO

September 15, 2015, 1:16 am
$
0
0

Hello Everyone.

I want to create a local admin user account on every client computer of my domain through GPO. I mean a local user account (not a domain user account) added to the Administrators group of each and every computer of my domain. We have Windows Server 2008 R2 DC.

I am able create a local user account on every domain computer, but this local user account is not getting added to the Administrators Group.

I have tried the following methods but none is fulfilling my requirement:

http://blogs.technet.com/b/canitpro/archive/2014/12/10/group-policy-creating-a-standard-local-admin-account.aspx

http://blog.korteksolutions.com/how-to-create-local-accounts-via-group-policy/

http://www.dannyeckes.com/create-local-admin-group-policy-gpo/

http://www.dannyeckes.com/create-local-administrator-security-group-gpo/

https://community.spiceworks.com/how_to/907-gpo-to-push-out-local-administrators-across-a-domain

Please guide and help me.

Many thanks.

Regards,

Hasan Bin Hasib


↧
↧

Microsoft Edge Enterprise Mode

October 23, 2015, 12:45 pm
$
0
0

I am attempting to turn on Enterprise Mode for Edge. I have followed the instructions at the link below.

https://technet.microsoft.com/en-us/library/mt270205.aspx

The option to force all intranet traffic to IE works but the option to use a site list I never get redirected.  Has anyone successfully implemented this and if so am I just missing a step?

↧

Deploy a Scheduled Task via GPO with Environment Variables

October 23, 2015, 1:52 pm
$
0
0

I am trying to push a Scheduled Task to my Windows 7 clients that will empty the Chrome cache folder every night.  I use the following action run as the current user.

cmd.exe/c rd /s /q "%localappdata%\Google\Chrome\User Data\Default\Cache"

This works correctly when created directly on a workstation.  However, I ran into an issue trying to push using GPO preferences.

The targeted computers instead get the following created...

cmd.exe /c rd /s /q "C:\Windows\system32\config\systemprofile\AppData\Local\Google\Chrome\User Data\Default\Cache"

Clearly the GPO import process resolved the environment variable instead of passing it.  I need the Task created with the environment variable intact so it can resolve for whatever user is currently logged on at the time it runs.

As a work-around I created a .CMD script containing the desired command, but I figured I would ask if there was a cleaner way to do this.  Unless there is something I am missing, this seems like a bug, so I figured I would post it.

↧

Windows 10 Folder Redirection Policy Microsoft Edge

September 30, 2015, 9:13 pm
$
0
0

We back up and "roam" IE 11 Favorites to each PC the users log into using a folder redirection policies.

How can group policy be used to automatically back up Microsoft Edge favorites so it moves from PC to PC without resorting to roaming profiles?

↧

Loading profile takes 13 minutes Windows from Windows 2008 Server DC

October 24, 2015, 10:17 pm
$
0
0
Loading user profile takes 13 minutes windows XP from windows server 2008 DC. We need urgent support from forums.
↧
↧

"Map Network Drive" for specific IP range.

October 10, 2015, 5:50 am
$
0
0

Hello.

I use Windows 2008 R2 and DHCP server with VLANs as below :

I want to write a policy that map "//172.30.9.1/vlan01" as a Map Network Drive just for "172.30.10.1/24" Range.

How can I do it?

Thank you.

↧

Event ID 1003 Source SceSrv

September 30, 2015, 5:28 am
$
0
0

Hi guys,

I have a really strange Event ID in the logs - Event ID 1003 Source SceSrv Task Category None.

Notification of policy change from LSA/SAM has been retried and failed. Error 4312 to save policy change for account S-1-5-21-1330502445-2314489556-838424494-13001 in the default GPOs. For more debugging information, please look security\logs\scepol.log under Windows root.

I checked C:\Windows\security\logs\ but there is no scepol.log presented. Also I've checked ProfileList in the registry and there is no such ID there. We have RWDC and RODC and on some RODC is presented on some not. The next different thing is that this event also appeared but with a different account on different RODC:

Notification of policy change from LSA/SAM has been retried and failed. Error 5 to save policy change for account S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415 in the default GPOs. For more debugging information, please look security\logs\scepol.log under Windows root.

Is there any way to solve this problem or should I be worried about?

Thanks in advance

↧
Search

How to copy long path files

October 17, 2015, 11:14 pm
$
0
0

Hi,

How to copy long path files ? I tried with tera copy software still its error.

Os ; Win2008rr std  & win 2003 Server & win 2012r2

↧

Startup scripts not running and gpt.ini inaccessible on only Windows 10 clients

October 26, 2015, 5:16 am
$
0
0

I have a peculiar problem. My brand new Windows 10 clean installs does not run our domain startup scripts.

Everything runs fine in Windows 7 with no errors in the event viewer.

I've turned of the 5 min execution delay for startup/logon scripts and tuned everything I can find regarding slow network connections etc. I've also health checked AD and weeded out any bugs there. The 2 domain controllers have the active network card listed first in bindings.

Everything works fine on all Windows 7 clients, but my Win 10 clients fail. The strange part is that it is only the GPO containing the startup scripts that fail.

Both my scripts fail with error: unable to find file

The gpt.ini is listed as inaccesible which is strange as all the Win 7 clients read it just fine.
I've tried making a fresh GPO with just the 2 scripts, which also fails with the same errors.
This could be related to Windows 10 acting differently than Win 7 when reading GPOs etc, but I a at an impasse here.

Anyone have some input?

Our domain is Windows 2008 R2 Replicating with DFS. The domain has been migrated since Windows NT 4.0

↧
↧

LONG PATH FILE

October 26, 2015, 6:23 am
$
0
0

hi,

I have 500 gb DATA and some of the files tooo long path.my question is how to identity too long path files in win2008r2std.

Thanks you 

↧

User Profiles on Server 2012 R2 RDSH setup

October 26, 2015, 7:24 am
$
0
0

With User Profiles, I have noticed that there are 3 components:-


With a users profile I can see the following

AppData\LocalLow

AppData\Local

AppData\Roaming

Using Group Policy I can see the option to Roam the AppData\Roaming folder and subfolders.

Do I need to worry about the other 2 folders?

For example, I notice the Google Chrome places its user config info under the AppData\Local folder but I did find a GPO for Chrome which allows me to redirected.


↧

Computer Shutdown

October 26, 2015, 7:38 am
$
0
0

Hi All,

Currently on work placement at a school.

They have given me the challenge of perfecting the shutdown scripts to run each day at 4pm to shutdown all the computers.

I understand that I can use Task Scheduler in Active Directory. The part I'm struggling with is the script part. The websites I have found don't make 100% sense to me - I am new to all this stuff!

If anyone would be able to let me in on some of their ideas, that would me much appreciated! 

Thanks,

Jack.

↧
Viewing all 19997 articles
Browse latest View live
Search
<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>