I am using windows server 2008 R2 & client is windows 7. But few days ago I was update all client windows 7 to windows 10. After update or clean installation of windows 10 windows server wallpaper policy not apply. I change wallpaper on daily basis But
client unable to update this policy. How to solve this problem.
Windows 10 pro machine cant update wallpaper policy
Automate disk cleanup on domain computers
Hi there,
I need to automate disk cleanup on all the machines available on our company's domain. I have been trying to do it by using sageset and sagerun commands. I also exported the registry keys of the machine on which I ran these commands. Actually I am stuck at importing these registry values into a GPO. I am trying to automate this process via GPO so that it gets applied on all the machines. Can anyone please help me with this?
Thanks,
Akshay
GP - Drive Map - Replace | Does not replace drive
I have verified the group policy is being applied to the user / machine.
I have done GPUPDATE /FORCE; tried logging off / on / off / on; have tried creating the policy in a new GPO; etc.
I have tried adding a DELETE as the first in the order followed a few steps below by an update.
I have tried adding a DELETE as the first in the order followed a few steps below by a replace.
Please let me know what else I can try.
GPO not applying but present in modeling
Hello,
Since few weeks, we have missing GPO.
When i use gpresult /r or /h file.htm i not find somes GPO.
When i make GPO modeling, i saw my GPO (in modeling i use my account, my computer account, my site and my DC).
I did not find where is the issue. In eventvwr i saw nothing. (on my computer)
I think my GPO is not deployed by my DC. There is anything for view which gpo is deployed from my DC to my computer ?
regards
GPO for enabling the 'My Computer' icon on Win 7 desktops, and renaming it with the machine's hostname?
Is there a GPO that can allow me to enable the My Computer icon on my Windows 7 SP1 Pro clients, as well as automatically renaming it from 'My Computer' to the actual hostname of the machine?
How can I restrict Settings-Windows within Windows 10 using Group Policy.
Hey Guys,
We are looking to restrict the Settings from Windows 10 in the start menu and all other places.
I have imported the ADMX from Windows 10 into our store.
I did already configure Show only specified Control Panel items from the User Configuration - Control Panel hoping this would also restrict the settings.
This unfortunately does not work.
Any suggestions where to look?
Regards, René.
Dsktop GPO
Hello ,
I have about 15 users, where i want to unified there Desktop and use Roaming Profiles:
1- Restrict users from saving anything on Desktop
2- Create a Unified Desktop for all users containing My computer and My Documents only
Is there any GPO to do these two points?
I appreciate if you can help me
Regards
Server 2012 Windows 10 AD/Sysvol Version Mismatch
Hello,
We have upgraded our Windows 7 Pro Computers to Windows 10 Pro. Our DC runs Windows Server 2012(Not R2) operating system. After this upgrade, we have created GPO for encrypting hard drives by BITLOCKER. Unfortunately the policy could not be spread on computers. So, we ran GROUP POLICY Results Wizard, and it wrote AD / SYSVOL version mismatch. Please advice us what to do. We tried to solve this problem, but found patch only for Windows 8 and 8.1.
Best Regards
Alexandre
Windows 10 Computer Locking : What is causing this? Help Greatly Appreciated
In our domain, we have a group policy set for all our windows 10 clients that locks the screen after 2 hours of inactivity. It is set here:
User Configuration/Policies/Administrative Templates/Control Panel Personalization:
I have the following done:
Enable Screen saver : enabled
Force specific screen saver : enabled
Screen saver executable name : rundll32 user32.dll,LockWorkStation
Password protect the screen saver : enabled
Screen saver timeout : enabled
Number of Seconds to wait to enable the screen saver : 7200 Seconds
I check w/ rsop.msc and all of these policies are applying, but the problem is
The client/computer is locking after exactly 10 minutes. (not 120 minutes, or 2 hours, like my GPO sets it as)
I don't see any other GPOs that are setting anything to 10 minutes of inactivity.
Any ideas how I can make this work, and lock my computers after 2 hours of inactivity, NOT 10 minutes?
Any help is appreciated, thank you!
Event ID : 4624
Hi, We have the following Advanced Audit policies configured for our domain, but still we dont see the event logs with machine & user logon details. your help is very much appreciated.
Log Name: SecuritySource: Microsoft-Windows-Security-Auditing
Date: 9/30/2016 10:48:37 PM
Event ID: 4624
Task Category: Logon
Level: Information
Keywords: Audit Success
User: N/A
Computer: DC
Description:
An account was successfully logged on.
Subject:
Security ID: NULL SID
Account Name: -
Account Domain:-
Logon ID: 0x0
Logon Type:3
Impersonation Level:Delegation
New Logon:
Security ID: S-1-5-21-3803837968-1534464277-3267097699-47311
Account Name: L-3PLHH92$
Account Domain:CORP
Logon ID: 0x15B72B10B
Logon GUID: {07261433-bae2-c8ef-34e8-4aa451c95ab9}
Process Information:
Process ID: 0x0
Process Name: -
Network Information:
Workstation Name:
Source Network Address:10.20.111.50
Source Port: 55026
Detailed Authentication Information:
Logon Process:Kerberos
Authentication Package:Kerberos
Transited Services:-
Package Name (NTLM only):-
Key Length: 0
managing GPO Restricted Groups with Powershell
Hello,
I need to control local group membership on the member servers and clients, and because I have around 1800 GPOs to do so, i'm wondering if there is any solution that can be used to automate such thing, as of now Microsoft PowerShell officially does not have any available cmdlet that can be used to add groups to the GPO restricted group
https://powershell.org/forums/topic/how-can-i-add-user-to-gpo-restricted-groups/
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
gpo locked
computer is in a domain and has some setting locked with group policy for editing in gpedit, like "Password must meet complexity requirements". How can a local administrator of a computer unlock this setting ?
Disconnect network mapdrive
Hi,
I need to disconnect network mapped drive in my client machine using gpo. .
I used "net use" command but it not use ...anybody help me my issues..
Printer Group Policy is deploying printers but printers will not print
Any ideas on this?
Printer server is an 08 R2. Client macines are running win 7. Printers are deploying via the gpo (computer config > preferences) however when the client attempts to print with a deployed printer the machine appears to queue the job locally and it simply is not hitting the print server.
this gpo was cloned from another printer gpo that is known to be good and working in a similar environment but a different location.
I'm hoping I'm just over looking something simple cause I've racked my brains on this.
Thank you!
Some feautures are controlled by your organisation, but I am my organisation
Hello,
I'm a home user of windows 10
since the installation of anti virus software (big mistake, use defender now and thats enough) the computer tells me that of the funtions regarding safety are controlled by my organisation....
I am my organisation. And i don't have a clue....
Is my computer now controlled by somebody else?
And how do i get it to turn back to the way it was? Don't understand what to do
Find local documents after redirection Policy
Hello,
Documents of TS sessions are redirected to a file server.
Since CD migration, i don't know why, but documents fodlers of workstations are redirected too to the file server.
Problem : A user had "local documents" to his workstation, and "network documents" on his TS session. Now local folders of workstation are redirected to file server, and I am unable to find local "documents" folder.
Is any way to find this local documents ?
Thank You and sorry for my bad english.
Tony
GPP Mapped Drives disappear off network
Hi All,
I've really been banging my head on the wall with this, so hopefully someone can help. We've added some Sufaces to our environment Windows 8.1 and Windows 10, and they're having some issues with GPP Drive Mappings with Server 2008r2. While on the network all drives work correctly, and everything is mapped correctly. Drive mappings are set to "Update" with "Reconnect" disabled. Additionally I use targeting, and only map the drives if X user is in X group. All drives are mapped on the same file server.
The issue is when a user is offline (working remote, traveling, ect) the drives do not show up at all. With Windows 7 all our drives still showed up, and just had a red X when they were offline. So on Windows 8 / 10 when a user hops on the VPN and tries to go to a sales drive (GPP mapped) it's missing. Now while on the VPN they can run "gpupdate /force" and it does map the drives. However that's really not a good workaround for all my users.
So here are some things I've done to try to solve it.
1. Changed the path from DNS to IP so instead of "//fileserver/sales" it would be "//192.168.10.10/sales"
2. Tried all sorts of variations of GPP mappings (update, replace, create, reconnect enabled, reconnect disabled).
3. Tried recreating the policy all together
4. Enabled the GPO "Always wait for the network at computer startup and logon".
5. Added reg key for "EnabledLinkedConnections"
6. Ensured offline files / folders were enabled in Sync Center
7. Removed the policy entirely and re-created it.
8. updated all the latest updates in Server 2008 r2.
Thanks, and hopefully I'm missing something super easy.
MCP. MCDST.
Group policy is not getting affected.
Hi,
I have screen lockout policy configured in default domain policy. It is getting applied and affected throughout my domain except one ou. For troubleshooting I logged in with multiple account on the computer of that OU but still not effect of policy. Even I logged with a test account and run the RSOP.MSC. And after that I checked that lockout policy showing applied but not getting affected on that machine.
Regards,
Jitendra Gautam
Dell server using WIndows SBS 2012 cannot add Remote access through roles
Hi all
I'm not a techy, so please bear with me.
We have a Dell server using SBS 2012, not R2 or Essentials.
I want to add Remote access so that i can gain access from an external PC.
I go through the process in Add Roles and then it asks for a re-start then I get an error and its not been added.
I have tried this through Power shell as well. I am running a Hyper V drive.
Any thoughts
Thanks
Restrict Users from Installing Software / Applications on their own
Dear all,
I have been tasked to figure out how we can restrict users from installing software & other applications on their own.
in our environment we windows 2012 R2 Std. Domain controller and user machines are joined to domain.
Domain users has admin rights on their machines.
so is there any way to restrict users from Installing App/Software on their own.
- Atul
TheAtulA