Quantcast
Channel: Group Policy forum
Viewing all 19997 articles
Browse latest View live
↧

Server NTP time problems?

September 27, 2016, 11:35 am
$
0
0

Let me start by saying I didnt really know where to post this, for I am not even 100% sure what server it is were using. I believe its 2012 r2, however I could be wrong. I apologize. Let me just explain whats going on. (Yes I am new to servers)

I had someone tell me their computer updates automatically and restarts on its own, regardless of the settings on that computer. So I went to the server and edited the group policy so that it was configured to download updates, but to notify before install. Great. Well, I went back to the problem PC and forced a sync to the server. It failed. The server time was way wrong. It was indicating about 2:30 am (when this was being done at about 4pm.) It also indicated it was the following days date. Telling me it was in the future. The person also told me that their second computers time was off as well..hmm.

I manually changed the time on the server. Clicked on the clock -> adjust date and time -> put correct time. What I didnt know, was that wasnt how you adjust a server time. I was then informed about NTP and how I need to set the flag to 5 and so on...but today, the person who I was fixing all this for, stated that the computer clocks were normal now. I didnt do anything besides change the local time on the server.

Here is where Im stuck. I dont really know what to do now. Does this give anyone any bit of info that can even remotely help me finish this through and make sure everything is set up correctly?

↧
Search

Automatically Shut down PC if idle for 1 Hour after 7.00pm

September 28, 2016, 1:23 am
$
0
0

Hi All,

How if I want to set at GPO to control all PC automatically shut down if idle for 1 hour after 7 pm?

Thanks.

↧
↧

Temporary Internet Files in IE11

September 28, 2016, 3:07 am
$
0
0

Our setup consists of Windows Server 2012 R2 and Windows 7 Pro 64-bit clients running Internet Explorer 11.

Some of our on-site reporting tools use Internet Explorer and require the setting for "Check for newer versions of stored pages" to be set to "Every visit to the page" in order for them to work correctly.

In Group Policy management on the server I have set the following: User Configuration / Preferences / Control Panel Settings / Internet Settings / Internet Explorer 10 / General / Temporary Internet Files - Check for newer versions of stored pages: Every visit to the page.   In the same GPO I have also set Location: C:\Users\%username%\Temporary Internet Files.

When users log into a machine, the "Temporary Internet Files" location is set like it is above but the "Check for newer version of stored pages" is set to Automatically.

Group Policy Results show that "Temporary Internet Files" is being applied but "Check for newer version of stored pages" is not.

↧

GP for Win10 Language/Region settings

September 28, 2016, 2:22 am
$
0
0

Hi,

I am having some trouble with setting language and region settings on new windows 10 pc's in our domain.

I want the following settings:

  • UI Language: English
  • Date/time format: Danish
  • Numbering format: Danish
  • Keyboard Layout: Danish

I have tried creating regional settings in a GPO under User Configuration/Preferences/Control Panel Settings/Regional Options, but that doesn't seem to be working for me

How do I achieve this through GPO ?

best regards,

Henrik

↧

Trusted Printer

September 12, 2016, 1:47 pm
$
0
0

In a Windows Server 2008 R2 AD Domain

single domain | single forest

Print Server Cluster

(2) Windows Server 2008 R2 Enterprise

Client Group Policy settings:

1. Computer Configuration/Policies/Windows Settings/Security Settings/Local Policies/Security Options

Devices: Prevent users from installing printer drivers [disabled]

2. Computer Configuration && User Configuration-

Policies/Administrative Templates/Printers | Point and Print Restrictions

enabled

FQDN of name space and the 2 nodes

do not show prompts for installing and updating

Not all the printers give issues. Installing new printers are fine as far as we know.

Some printers prompt if you trust the source.

a) users just agrees and update is fine

b) users get asked for admin credentials

c) users agrees and fails with error that it is not trusted

Any insight is appreciated

↧
↧

Group Policy to deploy a environment variable change but to add to front of PATH

September 28, 2016, 7:23 am
$
0
0

Im needing some help in wanting to change the PATH variable on 100+ PC's, where I add a location in front of the existing PATH variable.

this would then ensure that the file location took preference over any existing entry in the path variable

cant see in group policy how to prefix it, can append to it

but earlier file location entries will take precedence

any ideas?

↧

Group Policy Preference Registry not applying instantly

September 27, 2016, 11:05 am
$
0
0

Hi,

I created a Group Policy that adds a registry key. This GPO applies to computers.  The problem is that I noticed that some computers receives this specific GPO faster than others.  

This is what I exactly have to do to make it faster... I have to login locally to the computer and gpupdate /force it, reboot then wait more/less 15 minutes.  

But I can't do this for all machines on the network.  What should I do to force this or apply faster without logging in locally to computers? I did GPResult using GPMC and the Registry GPO I created is not listed in the "Applied Group Policy". However, if I gpupdate locally and do the above steps, it will eventually show up.

Pls. advice. Thanks!

↧

Anomaly : Meaningless REX Prefix Used

March 10, 2016, 3:26 am
$
0
0

I am getting one caution some message " Anomly : Meaningless REX Prefix used" when ever I performed any command based operations like gpupdate and others even it is being displayed when ever I opened command prompt.

I didn't find any error logs in event viewer and I googled for it but I didn't get any solution.

I am a member of Domain admins group and other person in the same group getting the same message.

We couldn't able to find out the solution. so please help me out in this regard.

Our Environment :

Windows AD 2012 , I am using Windows 7 sp1 x64 and and using Active Directory Admin tools.


getting the same message while performing gpupdate.


Please let me know if any additional information is required.

↧
Search

Login script command window not disappearing after running

September 28, 2016, 5:06 pm
$
0
0

I'm trying to run a login script and have it minimized or hidden and closed after completion.

I tried running start /min to run a second script, but after the user logs on, the script runs and the command window for the script it runs remains minimized and doesn't disappear.  The last command in the script is EXIT. 

↧
↧

Unable to provide delegation to handle DHCP to helpdesk

September 27, 2016, 3:28 am
$
0
0

Hi ,

I am planning to provide access/delegation to helpdesk team to manage dhcp. we have enable filter access list on dhcp on daily basis who are coming new in the office team has to add there mac address to work on our network. We want to delegate this task to helpdesk team the problem is we have 20+ dhcp server which is separate on that server we just go to dhcp admin group and add that person to manage dhcp server. but in our corporate office we have installed dhcp where Active directory is installed because of that reason i am not able to provide access to individual. I tried to edit the permission on adsi edit but no luck . anyone can help me how to delegate the access in this situation, on required user principal what i did i am trying to paste here if policy allow me to past the snapshot.it is not allowing me paste the snapshot. on adsi edit on user object i have choose descendant dhcp class object and provide permission according to my requirement. still no luck my purpose is not solved.

Pls suggest



Prem


↧

how to delegate Windows Activation to our Support Team ?

September 19, 2016, 1:39 am
$
0
0

i need to allow our support team to have permission to activate windows ..

i couldn't find from delegation

Osma Othman

↧

Client background jpg not always what is in Group Policy

September 26, 2016, 9:40 am
$
0
0

Hello, I've got an odd problem. I've got about 100 computers in this location. I would like all our users backgrounds to be the same, with the option of me being able to change the background every once in a while.

I started out by having a jpg in a shared location (Access: Everyone R/W). It worked, the background was displayed. However, when we changed the background file, the clients would not update to the latest version. Understandable since Windows shouldn't be constantly watching that file. Soon, some computers would receive the latest version, after a reboot. Others, would never receive the latest background.

At this point, I changed the GPO so that the File would download to %USERPROFILE%\Background.jpg (Using File preferences, action Replace). Then changed it so that the Desktop wallpaper location was %USERPROFILE%\Background.jpg. Again, I would get the same results as above, some would change, others would not. (Even after multiple reboots, the file in %UP% was the correct one, but the background was the old one.

Finally, I decided to run a 'remove_bg' powershell script

Remove-Item $env:APPDATA\Microsoft\Windows\Themes\TranscodedWallpaper -recurse

This script was run on Logoff. SAME RESULTS! I'm pulling my hair out with this one.

Usually, I can get the correct background, running gpupdate /force, and then multiple reboots (usually 2 or 3).

What's really odd, is that most of the time, if I right click desktop -> Personalize, the thumbnail is the correct image, but the actual desktop background is incorrect. All clients are Windows 10 Pro v1607, Server is 2012 R2

My latest gpo:


↧

Which is best practices for apply group Policy

September 28, 2016, 12:30 pm
$
0
0

Hi Team,

please tell me.

Create and apply New Group policy to Computers OU or Users OU

which is best practices for Organization ?


↧
↧

Do not have Permission to create / Save files & Folders

September 12, 2016, 9:25 am
$
0
0

I have created a Windows 2012 VM. If I login as Administrator initially created when I created the VM, I have no issue.

But I have created another User Account and made it Member of Administrators Group.  When I login as that User and try to create a File or Folder, I get a message that I do not have Permission to create / Save the file or Folder.

↧

Windows Can't install the kernel-mode print driver

September 14, 2016, 2:41 am
$
0
0

Hi Folks,

I have a windows 8.1 x64 laptop I'm trying to install a piece of software called pdffactory, when installing this piece of software print drivers are installed which is a kernel-mode driver, when the process gets to installing the print driver I get an error message:

I have been looking for an answer to this issue for the last few days but without joy, I've tried these steps http://www.windowstechinfo.com/2015/06/solved-windows-cant-install-the-kernel-mode-print-driver.html as these are the steps that are commonly said to work, but in my case they haven't worked.

can anyone help me out on how to resolve this issue?

many thanks

Owen

↧
Search

Problem with inetres.admx

September 26, 2016, 2:38 am
$
0
0

Suddenly when opening Group policy manager and checking group policy settings, i get this:

Resource '$(string.SUPPORTED_IE11WIN8)' referenced in attribute displayName could not be found. File C:\Windows\PolicyDefinitions\inetres.admx, line 184, column 87

I tried copying same file (dated 14.11.2015) from another server > no change. Then downloaded newer version (dated 3.8.2016) and got this:

Resource '$(string.SUPPORTED_IE9_IE11NONWIN10)' referenced in attribute displayName could not be found. File C:\Windows\PolicyDefinitions\inetres.admx, line 162, column 103

Nothing GP related has been changed in weeks and old template has not given any errors before this.  Similar errors before were fixed with replacing file with another copy or updating to newer version. Server is 2008R2 std sp1

Any ideas what to try next?

↧

Group Policy refresh dropping manually mounted map drives in Windows 10

February 15, 2016, 9:14 am
$
0
0

I recently upgraded to Windows 10, but I starting noticing a problem with my manually mounted network shares dropping.   My network shares that are mounted via Group Policy or my network share listed in AD "Home Folder" don't seem to be affected.

I noticed that when it happened, there was a Group Policy Refresh occurring around the same time and I started reading on the web, other people having a similar problem, but none seem to mention manually mounted shares only shares within GP.   If I run a manual 'gpupdate' the shares get disconnected. 

The manually mounted shares' drive letters are not in use within GP, so there is not conflict and I've even tried to enable 'Persistent' to see if it would stick, but it didn't.

This happens regardless of if the share is active or idle.   I was running an application within the drive and it about 10m into the job, it failed because the share was no longer mounted.

Any Ideas?

↧
↧

KB3163912 breaks Point and Print Restrictions GPO settings

July 13, 2016, 1:10 pm
$
0
0

Our labs install our printers through a simple Start Menu\Programs\Startup VBS script that points to a printer depending on the machine name.  This saves anywhere from 1-5 minutes from our login times.

This morning after the new cumulative update KB3163912 all our lab machines are now prompting for admin credentials to install these print drivers.

I have changed the Point and Print Restrictions section of our GPO to both "disabled" and "enabled" but without server restrictions, and disabling elevation prompts.  Neither take any effect.

After removing KB3163912 the printers install fine without any prompts.

We can add our printers back to the typical GPO location for now, but no doubt we will receive complaints on our login times increasing.

GPResults show our group polices are processing fine on machines that are both pre and post KB3163912.

↧

Auditing a Directory on a Windows 7 or 10 Client using Group Policy Settings

September 20, 2016, 12:44 pm
$
0
0

Hi folks - I'm trying to attempt to monitor a directory on client PCs using Group Policy.  I want to trigger a scheduled task from the event created by the files being modified.  In addition to the files in the directory I want to monitor triggering an event, I get an event triggered whenever any file in c:\Windows\System32 is accessed as well, usually by system processes. I only want to know about anything in the directory I want to monitor that is modified, created, or deleted.  Can anyone help me with what I need to change in my setup to make this happen, and ignore anything BUT what is changed in the monitored Directory?


My Setup Through GPO is as follows:

Computer Configuration

Poilicies

Windows Settings

Security Settings

File System

C:\path\Directory_Being_Monitored

Security Policy Settings -> Security-> Advanced -> Auditing Tabs  

Audit Success for Domain users Create Files/Write Data and Delete

Also 

Advanced Audit Configuration

Object Access

Policy

Audit File SystemSucess

Thanks in Advance.

Steve

↧

Create a user home directory using Group Policy (Server 2008)

March 9, 2010, 4:45 pm
$
0
0
I swore I had this working at one time or another-- I had changed the test gp to do something else and can't get it to work again.

The Goal:  To use group policy on a certain set of users where the H: drive is used to map and create a home drive with a subfolder.  In this case, \\shared resource\%username%\My Documents." 

I want John Henry to log onto the network for the first time and have the policy create a JOHN HENRY directory and MY DOCUMENTS subfolder, mapping his H: drive into\\SHARED RESOURCE\JOHN HENRY\MY DOCUMENTS

What I've done so far is use Group Policy Preferences to map a drive to a shared network resource.  That works just great.  For testing, both sharing and NTFS permissions are wide open on this share (I'll lock it down correctly later.)

"\\netapp02.denbury.com\vol3\" mapping works great using a preference policy.  (Vol3 is the shared resource.)

"\\plano-dc1a.denbury.com\test\%username%\My Documents" does not. (test is the wide-open shared resource.)  The %username% and "My Documents" folders aren't created, and the application log says something along the lines of "cannot find path specified."

I know this can be completed by going into each and every user account and setting the home folder under the profile tab, but I want this process automated:  I can't go in and modify 300+ accounts manually.  No, I'm not looking for scripts either, I'm looking for a way to use a policy to accomplish this.

Currently, I can not use any folder redirection policies because of some already-establish mapping issues (along with a mixed laptop and workstation environment in this OU.)

It's frustrating, since I have a policy in place that redirects Terminal Server Profiles to another shared resource, where a folder with the user account domain name is created and several subfolders auto-created as well.  I just can't seem to emulate that function in this instance.

Any tips or pointers are welcome!
↧
Viewing all 19997 articles
Browse latest View live
Search
<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>