Quantcast
Channel: Group Policy forum
Viewing all 19997 articles
Browse latest View live

Windows 10 IE 11 not accepting Proxy Settings via Group Policy from windows server 2008r2 standard

$
0
0

Windows 10 IE 11 not accepting Proxy Settings via Group Policy from windows server 2008r2 standard. Is there any solution please help     .....Thanks in advance..


Regards Kailash Kant Jangid


How to Uncheck "Hide fonts based on language settings" for all users.

$
0
0
I am looking for a way to uncheck the box for "Hide fonts based on language settings" for all users. The check box is located at Control Panel\All Control Panel Items\Fonts\Font settings. This setting needs to be turned off to allow a font being pushed down through Group Policy to be used by a non admin user. Is there a registry setting or Group Policy setting that will uncheck this box?

create Scheduled Task on Server 2012/R2 with GPO

$
0
0

Hi there,

I have a GPO which creates a scheduled Task on all of my servers. The policy works fine on 2003/2008/2008R2. But it is NOT working on 2012/R2. The policy is applied but the Task is not created.

Any ideas?

Regards
Miranda

Group Policy To Run specified EXEs in XP SP3 compatability mode?

$
0
0

We have an old application that will not run on Windows 7 or Windows 10 unless you run it in XP SP3 compatibility mode.

So, I created a shortcut to launch the application with XP SP3 compatibility mode set.  It works on the local machine.

I then created a GPP to copy this customized shortcut to all user's  desktops.  They get the .lnk file copied to their desktops, but it doesn't contain the XP compatibility setting.  The user still has to manually open the shortcut and set compatibility.

Is there a better way to deploy computability settings to all users?

active directory password authentication

$
0
0

i created link a client to the server.After it restarted and i pressed Ctrl+ALt+Del.Its requested for password and i type the password of the account i created in AD but prompted wrong password. So i left the text field empty and i pressed enter to my surprise, it log-in with out  typing any password. what can i do to include user in typing their password before they gain access to their computers.

Please and please, thanks for the support.

Security event log, Want overwrite but reverts to archive

$
0
0
I set the Security Event log to "Overwrite events as needed" but it reverts to "Archive the log when full." When I run the RSOP command it shows that this setting is controlled by the Default Domain Group Policy, and it is set to "Overwrite." I need to find out what is changing the setting back to "Archive" as it is filling up the C: drive on our servers. We have Windows Server 2012 domain controllers and Windows Server 2008 R2 servers.

Wireless global profiles

$
0
0

Hi Guys,

Is there any global wireless policy which can be implemented in AD. Currently we create a wireless profile manually on a new laptop and user's password is saved in that profile. But when a user changes his password he/she has to manually go in the profile and update the password. Is there a way to avoid that. There should be a way that the AD password should sync with the wireless profile. 

Thanks,

DN

Gp UPdate Error

$
0
0

Dear Experts,

In my environment there are 3 domain servers.  First two Windows server 2012 is installed & in the other Windows server 2008 . The problem is when ever I apply group policy after that when I run the command gpupdate /force I get the error i.e. Name resolution issue , File replication & DFS.

a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.

When i do the nslookup its pointing to the correct domain. Even i restarted the service for DFS. But same issue. I have attached the file.

Regards,

JCT


"An error has occurred while collecting data for Scheduled Task." error message while looking at a GPO details in GPMC...

$
0
0

Hi all;

While looking at a GPO details in GPMC, the following error message appears inScheduled Tasks section of the Preferences section: 

An error has occurred while collecting data for Scheduled Tasks.

Look at the following figure, please:

The actioned I have taken so far:

  • Checked the replication between the two DCs and everything works as expected.
  • checked the mentioned path and find no folder with the name of Scheduled Task.
  • The domain is based on Windows Server 2008 R2 and all domain controllers are fully patched.

Any ideas?

Thanks


Please VOTE as HELPFUL if the post helps you and remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.


GPO to back up and then replace file?

$
0
0

We would like to replace file on all domain computers, but also save a copy of the original file being replaced in the same folder on the workstation so it can be used for reference in the future. 

For instance.  Make a copy of any existing file.txt on the workstation and rename it as file.bak, then copy a replacement file.txt into the same folder.

Is there any way to do this via GPO and only do it once per workstation?


Windows Notification Dialog Box - Windows 7 & 8 - Group Policy

$
0
0

Dear Experts,

We are looking to bring the Notification Dialog box to stay more than 5 Seconds in my Environment. As of now we identified that we can do the changes from:

After doing the Changes can see the Display Notification as Expected:

I Was searching to Make the Changes without using registry (GPO - For 17K Users). Any help about the steps for using this GPO is required. Please guide me.

Thank you


Veera

Upgrading Central Store - Error Message Namespace

$
0
0

Hi,

I just upgraded the Central Store with the latest Windows 10 1511 template and got an error message.

The error message appeared when I edited a GPO and went into Computer Configuration > Policies.

Namespace 'Microsoft.Policies.WindowsStore' is already defined as the target namespace for another file in the store.

File \\domain.local\SysVol\domain.local\Policies\PolicyDefinitions\WinStoreUI.admx, line 4, column 80

Do anyone know how to solve this?


Permission issues with Sysvol when editing a GPO from a DC?

$
0
0

This is a weird one on a 2008R2 domain.  I login to the domain with a normal user account. I can elevate to launch gpmc.msc as a domain admin, but I get permission issues when trying to add a something to sysvol.  For these reasons, it is usually just easier to remote into a DC and run gpmc.msc as a domain admin.

I have noticed that if I remote into a DC and launch gpmc.msc(while pointing gpmc to the local DC that I am also logged into) that I get permission denied when trying to copy scripts into the startup folder, etc.  The weird thing is if I point gpmc.msc to any other DC(does not have to be the PDC emulator) and do the exact same thing, it will allow me to copy the file in.  I have seen this on multiple DCs and have disabled AV, etc.  Anyone have any ideas on why gpmc.msc must be pointed to a different DC to give me the permissions to copy some files into the sysvol location of a GPO?  At first I thought I had some sysvol permission issues, but now it seems to be something else.

Thanks,


Dave





Registry GPO not creating all values

$
0
0

Hi all,

I am having trouble getting a GPO to create a new registry key that has 3 values on a Windows 7 x64 client.  It's under Computer Configuration>Preferences>Windows Settings>Registry.  I've tried using registry items and the registry wizard.  Both end up creating only the first value and not the other two values.

What I want to do is under HKLM\SOFTWARE\Microsoft\Rpc, create a key named “Internet”, and then give the Internet key 3 values, for example: “One” REG_MULTI_SZ 100-200, “Two” REG_SZ Y, “Three” REG_SZ Y.

Whether I use Create or Update, or I’ve even tried using the registry wizard to import the existing key structure on a computer, when I try it on a test computer and do a gpupdate /force to get the new policy, it only creates the “Internet” key and the first value “One” REG_MULTI_SZ 100-200; but not the other two values of “Two” and “Three”.

How can I get a GPO to create a registry key with multiple values?

Thanks,

Tom.

 Here's the GPO and below is the result of what the client gets.  Notice it created only "One" but did not create "Two" or "Three".




Group Policy Preferences - Control Panel Settings - Internet Settings

$
0
0

Hi,

I've created some IE settings in a GPO under: User Configuration>Preferences>Control Panel Settings>Internet Settings>IE8 and created a couple of home page settings there.

However once i've made changes and closed GPME when i go to the Settingstab of the GPO under User Config it doesn't show any settings - as if it's a blank GPO, if i then edit the GPO then the settings are indeed there.

If however create a policy setting under User Configuration>Policies>Windows Settings then lo and behold they show up under theSettings tab, also anything under User Configuration>Preferences>Control Panel Settings>seems to show up ok - for example Scheduled Tasks

It just appears to be the Internet Settings under Preferencesthat aren't showing.

Anyone any ideas whats going on?

Thanks.




Junk E-Mail Policy not working !!

$
0
0
Hope someone can help with an issue we are having with a junk e-mail GPO. I have setup the GPO using the info from this link  https://support.microsoft.com/en-us/kb/2252421 ... Everything works for about 30 mins and then the address that was added to the safe senders list automatically dissapears and the e-mails go back in to junk. I have verified and there are no other policies that would override this setting. If I do a gpupdate /force , close Outlook and re-open the address is showing again in the safe senders list and then will automatically get removed again. Makes no sense. Does anyone have any suggestions?

Error in RSOP - Security has requested to process its policy settings again

$
0
0

Hi, 

I'm getting an error which is preventing me from changing the User Rights Assignment settings to configure ADFS correctly. 

My Windows 2012 R2 domain controller is showing an error in RSOP for the Security Component:

Security has requested to process its policy settings again.  This can be due to non-critical errors occurring during the previous processing of policy.

I have setup the diagnostic logging by setting the ExtensionDebugLevel value to 2 in the following key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}

The result of that logging is that the Winlogon file shows 

Error 1252 to send control flag 1 over to server.

each time I do a gpupdate /force

I have blocked inheritance of all other GPO's, other than the default domain controllers policy with the User Rights Assignment settings, but the error persists. 

Can anyone help? 

Thanks, 

David


Internet Explorer settings not applying

$
0
0

Hi, this is my situation. Our DC is Win2008 SP2 x86 both Primary and Secondary. We have a requirement for all of our users. 

First is to add some list of websites to be excluded from pop-up, second is to add some sites in compatibility list.

So I added this sites in the following:

Computer Config>Admin Templates>Windows Comp>Internet Explorer>Pop-up allow list

User Config>Preferences>Control Panel Settings>Internet Settings>Internet Explorer 7

Not sure if I lack something but both of these policies are not applying in my network. 

Our IE version is 11.

Thanks

Jeff

Deploy certificate

$
0
0

Dear all,

I have purchased a UCC certificate but the public CA provider no longer allows internal domain names to be used as one of the SANs. This means that if anyone trys to access the exchange 2010 server with its internal host name (ex01.local) the certificate the browser presents an error to say there hostname does not match the certificate, we know is safe to continue but this is also a nuisance for anyone using OWA. 

I know each user can install the certificate to their PCs local certificate store to stop this message popping up each time, however I was wondering if anyone has deployed the certificate via group policy to resolve this?

Multiple 1202 event id

$
0
0

Hi,

I'm trying to troubleshoot an issue in VMWare View preventing me from copy/pasting from the host to the VM and the other way around.

During my investigations, I stumbled upon multiple errors in Application Event Logs, with event id = 1202

I tried to follow the steps described in the following KB : https://support.microsoft.com/en-us/kb/974639

I launched find /i "cannot find" %SYSTEMROOT%\security\logs\winlogon.log but it returned nothing.

I tried to edit GptTmpl.inf but I did not fin anything suspicious

And I tried to download the fix and install it to my VM and it told me that it did not apply to my system.

Then I tried to launch RSOP and saw that one of my rules that added domain admins to the local administrators had a red cross:

This Restricted Group assignment is part of the "Default Domain Policy" GPO, so it's applied to everything in the domain.

I'm wondering if the error come from the fact that it tries to apply to the domain controllers itself, and as they don't have a local "Administrators" group, they return an error.

Am I right ? If so, should I just put my user rights assignment at a lower level ?

Thanks.


R.

Viewing all 19997 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>