Quantcast
Channel: Group Policy forum
Viewing all 19997 articles
Browse latest View live
↧

Using GPO to manage Chrome.

June 14, 2019, 8:42 am
$
0
0
I have a GPO to lockdown Chrome.  However, I am not seeing anything related to Chrome auto-update when I go to Administrative Template\google in both Computer Configuration and User Configuration in a test GPO. 

I want to ensure autoupdate is enabled for all Chrome users.

I also download latest adml and admx file from this link https://support.google.com/chrome/a/answer/187202?hl=en.  As I already have the old version of chrome.admx, chrome.adml, google.admx and google.adml files in my policy definition, I am not sure if I should replace them with the new files as I already have a GPO to successfully doing some lock-downs. 

I am stuck here.  Please advice if you have any suggestions.  

Many thanks. 
↧
Search

App pushed through group policy not applying on user PC

June 5, 2019, 9:40 am
$
0
0

I applied a group policy for computer configuration to push an app to a user PC.I already added the .msi package to the software installation package but when i ran gpresult /scope computer /v on the user PC  i could see the app under software installation but the app can't be found on the PC.Kindly help me out.

↧
↧

Extract group Policies of multiple Servers through PowerShell

June 25, 2019, 5:27 am
$
0
0

Hello

I wrote a script which is supposed to gather group policies on more than 300 servers. The CSV file has just one Column and it is called IP.

# DO NOT FORGET To start Windows PowerShell with elevated rights

$IPList = Import-Csv -path "C:\Users\Administrator\Desktop\Test\ServerNames.csv" -Delimiter  ";"

ForEach ($IP in $IPList)

{

Get-GPResultantSetOfPolicy -Computer $IP_ -reporttype html -path "C:\Users\Administrator\Desktop\Test\$IP.GPResult.HTML"

write-host $IP

}

I know sth is wrong with the script which doesn’t connect to servers and then run the Get-GPResultantSetOfPolicy command on each server. It just gives me the result of the server which the script is running on.

It is planned to adjust the script to run once with admin right and remotely should work for other servers which the IPs are in CSV file.

That would be very helpful if someone can help me with that.

Thanks


↧

Wallpaper group policy issues

June 25, 2019, 8:28 am
$
0
0
I configured  a default wall paper for all users in the organisation.I applied the policy on user configuration on the AD and all user were able to see the wallpaper after a restart, those that couldn't get the policy i did gpupdate /force on the PC and it showed.the issue now is that some of the user whose wall paper were showing before is no more showing .If the same user log in  another domain joined computer the wallpaper shows but if he login in his own PC the wallpaper refuse to show.The second issue is that after the user logged in another domain joined computer the wall paper  policy stopped working for current user on thesame PC but works on another PC.This really look strange to me.kindly help me out
↧

migrating from sbs 2011 to Winodws server 2019 essentials

June 25, 2019, 6:19 pm
$
0
0

I am planning to migrate a sbs 2011 (10 users) standard to Windows 2019 essentials. The remote web access is used by most of the users. The email is office 365 essentials. here are my questions.  I appreciate your support.

1- what is the alternative for Remote web Access? 

2- Should i get Windows 2019 or Windows 2019 essentials for this migration? apart from the os costs do I get any other benefits now the essential is so stripped>

3- is it recommended to get the RDS licenses and the GoDaddy Certificate to have the RWA? or is it cheaper and better to get GoToMyPC or something similar?

4-  I know Microsoft is pushing Azure.  But, if I have one or two LOB of business applications and file and print sharing and average internet speed, is it worth it to try Azure?

5-  When is Azure cost effective as a solution?

6- is Admin center a good replacement for the Windows server essentials dashboard, is thehttp://server/connect works for the admin center?

i appreciate your help

Jamshid

↧
↧

desktop folder redirection change, now files disappearing

June 21, 2019, 10:31 am
$
0
0

took over from another Admin ... server 2012 R2 AD, windows 10 clients

He had a group policy that redirected favorites and desktop and documents to

\\server\D\users\%username%\favorites\

\\server\users\%username%\desktop\

\\server\D\users\%username%\documents\

but \\server\users and \\server\D\users are actually the same location, he had shared both D and Users.  I was having a few clients with problems saving to their Desktops, plus the inconsistencies of the format above was bothering me so I changed it to

\\server\D\users\%username%\favorites\

\\server\D\users\%username%\desktop\

\\server\D\users\%username%\documents\

and then the next day about 10% of the users started to loose the files on their Desktop.  Some were fine after I restored from a backup, others would go missing once or twice more and then they were fine.  Logging into a Remote App or Remote Desktop seem to increase the likelihood of this happening, but it was not a 1:1 correlation. By the EOD it seemed everything had settled in and we were all good ... until the next day when it was 15% of the users, some the same, some not, that it was happening to again

I know it's not just me because https://social.technet.microsoft.com/Forums/en-US/abeaade0-774d-4bba-94e4-b2f4deb886f8/desktop-folder-redirection-files-disappearing?forum=winserverGP

The first reply really describes my problem verbatim, but he suggests"you should redirect them to local userprofile location first, then modify the location to where you want after the policy has been applied."  but that means multiple reboots of 100+ computers and it just seems there has to be a more straight forward approach ... and is \\Server\D\Users = \\Server\Users why would it even matter?

When I go to Event Viewer and look at System and Application logs, there is nothing there that indicates why this is happening ... called MS for support, but our 100+ Office 365 accounts don't count for anything when you need Server help

TIA,

Jordie


N.B. - we are using Offline Sync for these folders as well
↧

Multiple *.adml, *.opal files, why??

June 26, 2019, 9:37 am
$
0
0

I downloaded and extracted the latest Office 2016/2019 admx files and corresponding adml files and opax/opal files.

I observed that now instead of one adml file, there's multiple numbered adml files. Same for the Office opal files.

Why is this?? What does this mean?? I assume all the adml files, numbered or not, should be put into the central store.

Also, where are opax/opal files installed??

Thank you, Tom

↧

GPP based on computername starts with..

March 25, 2011, 12:23 pm
$
0
0

Is it possible to use item level targeting and choosing computername starts with PC?

So like: choosing computername item and then fill in: pc*

Or PC*.*

 

I have tried it but it seems that this doesn't work.

Ik know that can choose if battery is present but thats not what i want i would like to use variable like ? or *

 

freddie
↧
Search

User group policy prevent addition of printers for one account and not all of them

June 26, 2019, 6:51 pm
$
0
0
I want into User group policy as administrator and turned on prevent addition of printers. The thing is though it blocks the administrator as well as the guest account to add printers. I want it to just block guest account. I dunno how to do this with user group policy. Any ideas thanks
↧
↧

Restrict access to certain file types

June 7, 2019, 1:53 am
$
0
0

We have a remote desktop server which I need to allow a subset of users access to.  This needs to be extremely restricted to allow access only to certain key programs.  I can sort this fine.  However, I have been also requested to deny access to certain file types, eg .txt, .xml etc

I assumed I could do this using Software Restriction.

So have created a group with a test user, used this as the scope for the group policy and applied a path rule of *.txt.

Restarted the server, yet when I logon with my test user, they can still open txt files etc.

Any ideas where the issue may lie or is there a better way?

Regards

Ian

↧

User Folders not Deleted with GPO "Delete user profiles older than a specified number of days on a system restart"

June 6, 2019, 7:11 am
$
0
0

Hi,

We've configured the GPO setting "Delete user profiles older than a specified number of days on a system restart" which is applied to Windows 10 Enterprise computers.

This setting successfully deletes local user profiles after the specified number of days, but leaves the user profile folders at C:\Users\

You can check under 'Advanced System Settings --> User Profiles'  and the profiles are not listed, however the users profile folder is not removed from C:\Users\  All the user data and files are still present taking up disk space, freeing up space is one main reason for wanting this setting.

The next time the same user logs in, they get a user profile folder under C:\Users\  in this format 'username.domainname'.  If they login again they get 'username.domainname.001', then 'username.domainname.002' and so on. 

Similar to this: https://community.spiceworks.com/topic/2115362-gpo-delete-user-profiles-older-than-a-specified-number-of-days

This cant be expected?

↧

OneDrive KFM- silently move folders to OneDrive GPO is not working

June 6, 2019, 6:59 am
$
0
0

Hello Everyone,

I was trying to implement ODFB "silently move Known folders to onedrive" GPO for all the test computers. 

steps: Created one GPO for computers and applied for the OU which has test computers

2. created another GPO for users only and implemented "prevent users from changing the location of their Onedrive folder" and some other policies. This one was applied to a security group. ---- this part is working fine. 

However, the KFM GPO for the computer is not working. I ran GPresult CMD and the log shows that my policies are applied successfully. However when I verify "registry key" HKey_current_user\SOFTWARE\Policies\Microsoft\OneDrive , there are no registries registered for KFM GPO. 

I ran Gpupdate /force, however nothing seems to be working. I also tried to logout and login back 4-5 times and still there is no luck.

current OneDrive version: 19.070.0410.0005

enabled: 

  • Enable the policy “Prevent users from moving their Windows known folder to Onedrive” 
  • Enable the policy “Prevent users from redirecting their Windows known folder to their PC”
  • Enable the policy “Silent redirect Windows known folder to OneDrive”

Note: There is no existing GPO policy to redirect folders other than KFM. 

DO anyone know how to investigate this issue? I verified registry key and there are no keys for KFM, however if I ran gpresult /h I am getting the log which shows that GPO's are applied successfully. 

↧

I need to be exported data from edb to pst for Exchange Server 2007 SP2

April 18, 2012, 5:41 am
$
0
0

Hi

Kindly share some idea about freeware converter edb to pst file

I need to be exported data from edb to pst for Exchange Server 2007 SP2

Regards

Md Ehteshamddin Khan

↧
↧

clean up deleted GPO residue

June 27, 2019, 4:57 am
$
0
0

Dear Expert,

GPO （user configuration - all removable access denied users) was  removed from DC. but it still effective to object.

In my experience, I exit the PCs from DC and rejoin the DC and get fixed.

can you give better method how to clean up the residue in DC?

tks n brgds

Liu Wei

↧

Problems with Wallpaper GPO

June 27, 2019, 6:20 am
$
0
0

Hello.

I'm having some issues with the Wallpaper GPO in some terminals.

Scenario:

Server: Windows server 2012, completely updated.

Terminals: Windows 10 18362.

I make a copy of the wallpaper to a folder in the C of the machine, users have full permission to this folder.

I apply the GPO directed to this folder in C, so far everything is ok.

Some Windows 10 terminals are black, and do not apply to the GPO.

On these machines, I have already checked the permissions of the file, which are ok.

I also checked the HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ System \ Wallpaper registry path that is directed to the correct folder and file, so that when I copy the path text and type in the run it normally opens.

I also checked the HKCU / Control Panel / Desktop \ Wallpaper registry, some machines were pointing to the path of the wallpaper in c, some were pointing to C: \ Windows \ web \ wallpaper \ Windows \ img0.jpg which is the image Windows 7 default, and in another it was pointing to C: \ Users \ gabriel.amaral \ AppData \ Roaming \ Microsoft \ Windows \ Themes \ TranscodedWallpaper that when I was running the file ia to the image file in the C folder.

I've tried manually putting the paths in the logs, but it did not work.

Would anyone have any tips?

Thank you!!

↧
Search

Where to get ADMX templates - 1903?

May 22, 2019, 12:37 am
$
0
0

Hi All,

Successfully downloaded the brand new Windows 10 (1903) and want to deploy and poke around in the GPO options in my LAB.

But...

I can't find a download link to the ADMX templates?

Where do we get the ADMX templates for 1903 from to load into PolicyDefinitions?

Thanks in advance,

durrie.

↧

Save user and password for specific site

June 27, 2019, 10:39 am
$
0
0
Is it possible to create a group policy that would allow to have a computer save a user and password for a specific site on Internet Explorer? I tried looking into the group policy editor, but could not find anything. Would be a specific ADMX for a specific version of Internet Explorer, if at all possible?
↧
↧

GPP Shortcuts using Mapped Drive Paths

September 13, 2009, 10:53 pm
$
0
0
I have been using Group Policy Preferences to map drives to a network share.  I then have a number of shorcuts created to items on that network share using the fixed drive letter.

So for example Shortcut1 points to L:\program\program.exe.  Mapped drives were used rather than unc paths for a number of reasons.

This works correctly with XP SP3.

On a Win7 client the shorcuts are not created and event log shows:-

'0x80070002 The system cannot find the file specified.'

I'm guessing the order in which the preferences are applied may of changed in Win7?

↧

Set "always show all icons and notifications on the taskbar" via Group policy

July 29, 2010, 2:14 pm
$
0
0

Any ideas on how to set "always show all icons and notifications on the taskbar" on a set of users?

 I thought it would be under User Configuration\Administrative Templates\Start Menu and Taskbar, but I cannot find it.

Anyone know if this can be enforced via policy?

 

↧

SYSVOL corrupted! Please Help?

June 28, 2019, 3:27 am
$
0
0

Hi Everyone!

1st line highlighted that no group policy was being applied on a client machine.  So I looked a bit deeper and eliminated the machine and user.  I then realised no group policy was being applied at all.  Ouch....

So after delving in deep, I have come to the conclusion that a failing dell DC (rebooting due to voltage regulator) has probably corrupted its files and replicated a corrupted SYSVOL across all DC's as every single policy folder has the same date and time of 27/06/2019 08:08

If I browse in Group Policy Editor, there are policies with the following error: \Machine\registry.pol" is not in a valid format.

I am doing a gpresult /r and seeing which policies are corrupt and then disabling them.  However it looks like every single one is going to be an issue!

What are my options please?  And do you think anything else will be corrupted?

SYSVOL is on DFSR not FRS

Thanks in advance!!!

↧
Viewing all 19997 articles
Browse latest View live
Search
<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>