Quantcast
Channel: Group Policy forum
Viewing all 19997 articles
Browse latest View live

Default associations configuration file

$
0
0
I am trying to set default apps for certain file types with group policy on a test computer. We have a number of windows 10 machines controlled by a DC where we are dictating Group Policy.  I've looked up how to do it online and have followed the steps to a tee so I am not sure what my issue is here. If there is anything you think that might be causing this issue please let me know. I have made sure the test computer and test user have access to the file path I am pointing to. Here are the GPO settings and the xml code.
<?xml version="1.0" encoding="UTF-8"?><DefaultAssociations><Association Identifier=".20171129011328" ProgId="Applications\notepad.exe" ApplicationName="Notepad" /><Association Identifier=".3g2" ProgId="VLC.3g2" ApplicationName="VLC media player" /><Association Identifier=".3gp" ProgId="VLC.3gp" ApplicationName="VLC media player" /><Association Identifier=".3gp2" ProgId="VLC.3gp2" ApplicationName="VLC media player" /><Association Identifier=".3gpp" ProgId="VLC.3gpp" ApplicationName="VLC media player" /><Association Identifier=".3mf" ProgId="AppXr0rz9yckydawgnrx5df1t9s57ne60yhn" ApplicationName="Print 3D" /><Association Identifier=".aac" ProgId="VLC.aac" ApplicationName="VLC media player" /><Association Identifier=".ac3" ProgId="AppXqj98qxeaynz6dv4459ayz6bnqxbyaqcs" ApplicationName="Groove Music" /><Association Identifier=".acrobatsecuritysettings" ProgId="AcroExch.acrobatsecuritysettings" ApplicationName="Adobe Acrobat Reader DC" /><Association Identifier=".adt" ProgId="AppXqj98qxeaynz6dv4459ayz6bnqxbyaqcs" ApplicationName="Groove Music" /><Association Identifier=".adts" ProgId="VLC.adts" ApplicationName="VLC media player" /><Association Identifier=".AIF" ProgId="VLC.aif" ApplicationName="VLC media player" /><Association Identifier=".AIFC" ProgId="VLC.aifc" ApplicationName="VLC media player" /><Association Identifier=".AIFF" ProgId="VLC.aiff" ApplicationName="VLC media player" /><Association Identifier=".amr" ProgId="VLC.amr" ApplicationName="VLC media player" /><Association Identifier=".arw" ProgId="AppX43hnxtbyyps62jhe9sqpdzxn1790zetc" ApplicationName="Photos" /><Association Identifier=".asf" ProgId="VLC.asf" ApplicationName="VLC media player" /><Association Identifier=".ASX" ProgId="VLC.asx" ApplicationName="VLC media player" /><Association Identifier=".AU" ProgId="VLC.au" ApplicationName="VLC media player" /><Association Identifier=".avi" ProgId="VLC.avi" ApplicationName="VLC media player" /><Association Identifier=".bmp" ProgId="AppX43hnxtbyyps62jhe9sqpdzxn1790zetc" ApplicationName="Photos" /><Association Identifier=".cda" ProgId="VLC.cda" ApplicationName="VLC media player" /><Association Identifier=".cr2" ProgId="AppX43hnxtbyyps62jhe9sqpdzxn1790zetc" ApplicationName="Photos" /><Association Identifier=".crw" ProgId="AppX43hnxtbyyps62jhe9sqpdzxn1790zetc" ApplicationName="Photos" /><Association Identifier=".csv" ProgId="Excel.CSV" ApplicationName="Excel (desktop)" /><Association Identifier=".dat" ProgId="Applications\notepad.exe" ApplicationName="Notepad" /><Association Identifier=".dib" ProgId="AppX43hnxtbyyps62jhe9sqpdzxn1790zetc" ApplicationName="Photos" /><Association Identifier=".doc" ProgId="Word.Document.8" ApplicationName="Word (desktop)" /><Association Identifier=".docx" ProgId="Word.Document.12" ApplicationName="Word (desktop)" /><Association Identifier=".ec3" ProgId="AppXqj98qxeaynz6dv4459ayz6bnqxbyaqcs" ApplicationName="Groove Music" /><Association Identifier=".epub" ProgId="AppXvepbp3z66accmsd0x877zbbxjctkpr6t" ApplicationName="Microsoft Edge" /><Association Identifier=".erf" ProgId="AppX43hnxtbyyps62jhe9sqpdzxn1790zetc" ApplicationName="Photos" /><Association Identifier=".fbx" ProgId="AppXmgw6pxxs62rbgfp9petmdyb4fx7rnd4k" ApplicationName="3D Viewer" /><Association Identifier=".fdf" ProgId="AcroExch.FDFDoc" ApplicationName="Adobe Acrobat Reader DC" /><Association Identifier=".flac" ProgId="VLC.flac" ApplicationName="VLC media player" /><Association Identifier=".gif" ProgId="AppX43hnxtbyyps62jhe9sqpdzxn1790zetc" ApplicationName="Photos" /><Association Identifier=".glb" ProgId="AppXmgw6pxxs62rbgfp9petmdyb4fx7rnd4k" ApplicationName="3D Viewer" /><Association Identifier=".gltf" ProgId="AppXmgw6pxxs62rbgfp9petmdyb4fx7rnd4k" ApplicationName="3D Viewer" /><Association Identifier=".htm" ProgId="htmlfile" ApplicationName="Internet Explorer" /><Association Identifier=".html" ProgId="htmlfile" ApplicationName="Internet Explorer" /><Association Identifier=".jfif" ProgId="AppX43hnxtbyyps62jhe9sqpdzxn1790zetc" ApplicationName="Photos" /><Association Identifier=".jpe" ProgId="AppX43hnxtbyyps62jhe9sqpdzxn1790zetc" ApplicationName="Photos" /><Association Identifier=".jpeg" ProgId="AppX43hnxtbyyps62jhe9sqpdzxn1790zetc" ApplicationName="Photos" /><Association Identifier=".jpg" ProgId="AppX43hnxtbyyps62jhe9sqpdzxn1790zetc" ApplicationName="Photos" /><Association Identifier=".jxr" ProgId="AppX43hnxtbyyps62jhe9sqpdzxn1790zetc" ApplicationName="Photos" /><Association Identifier=".kdc" ProgId="AppX43hnxtbyyps62jhe9sqpdzxn1790zetc" ApplicationName="Photos" /><Association Identifier=".M1V" ProgId="VLC.m1v" ApplicationName="VLC media player" /><Association Identifier=".m2t" ProgId="VLC.m2t" ApplicationName="VLC media player" /><Association Identifier=".m2ts" ProgId="VLC.m2ts" ApplicationName="VLC media player" /><Association Identifier=".m3u" ProgId="VLC.m3u" ApplicationName="VLC media player" /><Association Identifier=".m4a" ProgId="VLC.m4a" ApplicationName="VLC media player" /><Association Identifier=".m4p" ProgId="VLC.m4p" ApplicationName="VLC media player" /><Association Identifier=".m4r" ProgId="AppXqj98qxeaynz6dv4459ayz6bnqxbyaqcs" ApplicationName="Groove Music" /><Association Identifier=".m4v" ProgId="VLC.m4v" ApplicationName="VLC media player" /><Association Identifier=".MID" ProgId="VLC.mid" ApplicationName="VLC media player" /><Association Identifier=".MKA" ProgId="VLC.mka" ApplicationName="VLC media player" /><Association Identifier=".mkv" ProgId="VLC.mkv" ApplicationName="VLC media player" /><Association Identifier=".mod" ProgId="AppX6eg8h5sxqq90pv53845wmnbewywdqq5h" ApplicationName="Movies &amp; TV" /><Association Identifier=".mov" ProgId="VLC.mov" ApplicationName="VLC media player" /><Association Identifier=".MP2" ProgId="VLC.mp2" ApplicationName="VLC media player" /><Association Identifier=".MP2V" ProgId="VLC.mp2v" ApplicationName="VLC media player" /><Association Identifier=".mp3" ProgId="VLC.mp3" ApplicationName="VLC media player" /><Association Identifier=".mp4" ProgId="VLC.mp4" ApplicationName="VLC media player" /><Association Identifier=".mp4v" ProgId="VLC.mp4v" ApplicationName="VLC media player" /><Association Identifier=".mpa" ProgId="VLC.mpa" ApplicationName="VLC media player" /><Association Identifier=".MPE" ProgId="VLC.mpe" ApplicationName="VLC media player" /><Association Identifier=".mpeg" ProgId="VLC.mpeg" ApplicationName="VLC media player" /><Association Identifier=".mpg" ProgId="VLC.mpg" ApplicationName="VLC media player" /><Association Identifier=".mpv2" ProgId="VLC.mpv2" ApplicationName="VLC media player" /><Association Identifier=".mrw" ProgId="AppX43hnxtbyyps62jhe9sqpdzxn1790zetc" ApplicationName="Photos" /><Association Identifier=".mts" ProgId="VLC.mts" ApplicationName="VLC media player" /><Association Identifier=".nef" ProgId="AppX43hnxtbyyps62jhe9sqpdzxn1790zetc" ApplicationName="Photos" /><Association Identifier=".nrw" ProgId="AppX43hnxtbyyps62jhe9sqpdzxn1790zetc" ApplicationName="Photos" /><Association Identifier=".obj" ProgId="AppXmgw6pxxs62rbgfp9petmdyb4fx7rnd4k" ApplicationName="3D Viewer" /><Association Identifier=".orf" ProgId="AppX43hnxtbyyps62jhe9sqpdzxn1790zetc" ApplicationName="Photos" /><Association Identifier=".oxps" ProgId="Windows.XPSReachViewer" ApplicationName="XPS Viewer" /><Association Identifier=".pdf" ProgId="AcroExch.Document.DC" ApplicationName="Adobe Acrobat Reader DC" /><Association Identifier=".pdfxml" ProgId="AcroExch.pdfxml" ApplicationName="Adobe Acrobat Reader DC" /><Association Identifier=".pdx" ProgId="PDXFileType" ApplicationName="Adobe Acrobat Reader DC" /><Association Identifier=".pef" ProgId="AppX43hnxtbyyps62jhe9sqpdzxn1790zetc" ApplicationName="Photos" /><Association Identifier=".ply" ProgId="AppXmgw6pxxs62rbgfp9petmdyb4fx7rnd4k" ApplicationName="3D Viewer" /><Association Identifier=".png" ProgId="AppX43hnxtbyyps62jhe9sqpdzxn1790zetc" ApplicationName="Photos" /><Association Identifier=".ra" ProgId="VLC.ra" ApplicationName="VLC media player" /><Association Identifier=".raf" ProgId="AppX43hnxtbyyps62jhe9sqpdzxn1790zetc" ApplicationName="Photos" /><Association Identifier=".ram" ProgId="VLC.ram" ApplicationName="VLC media player" /><Association Identifier=".raw" ProgId="AppX43hnxtbyyps62jhe9sqpdzxn1790zetc" ApplicationName="Photos" /><Association Identifier=".RMI" ProgId="VLC.rmi" ApplicationName="VLC media player" /><Association Identifier=".rw2" ProgId="AppX43hnxtbyyps62jhe9sqpdzxn1790zetc" ApplicationName="Photos" /><Association Identifier=".rwl" ProgId="AppX43hnxtbyyps62jhe9sqpdzxn1790zetc" ApplicationName="Photos" /><Association Identifier=".s3m" ProgId="VLC.s3m" ApplicationName="VLC media player" /><Association Identifier=".SND" ProgId="VLC.snd" ApplicationName="VLC media player" /><Association Identifier=".sr2" ProgId="AppX43hnxtbyyps62jhe9sqpdzxn1790zetc" ApplicationName="Photos" /><Association Identifier=".srw" ProgId="AppX43hnxtbyyps62jhe9sqpdzxn1790zetc" ApplicationName="Photos" /><Association Identifier=".stl" ProgId="AppXr0rz9yckydawgnrx5df1t9s57ne60yhn" ApplicationName="Print 3D" /><Association Identifier=".text" ProgId="Applications\Notepad.exe" ApplicationName="Notepad" /><Association Identifier=".tif" ProgId="PhotoViewer.FileAssoc.Tiff" ApplicationName="Windows Photo Viewer" /><Association Identifier=".tiff" ProgId="PhotoViewer.FileAssoc.Tiff" ApplicationName="Windows Photo Viewer" /><Association Identifier=".tod" ProgId="AppX6eg8h5sxqq90pv53845wmnbewywdqq5h" ApplicationName="Movies &amp; TV" /><Association Identifier=".TS" ProgId="VLC.ts" ApplicationName="VLC media player" /><Association Identifier=".TTS" ProgId="VLC.tts" ApplicationName="VLC media player" /><Association Identifier=".txt" ProgId="txtfile" ApplicationName="Notepad" /><Association Identifier=".url" ProgId="IE.AssocFile.URL" ApplicationName="Internet Browser" /><Association Identifier=".voc" ProgId="VLC.voc" ApplicationName="VLC media player" /><Association Identifier=".vsdx" ProgId="Visio.Drawing.15" ApplicationName="Visio (desktop)" /><Association Identifier=".wav" ProgId="WMP11.AssocFile.WAV" ApplicationName="Windows Media Player" /><Association Identifier=".wdp" ProgId="AppX43hnxtbyyps62jhe9sqpdzxn1790zetc" ApplicationName="Photos" /><Association Identifier=".webm" ProgId="AppX6eg8h5sxqq90pv53845wmnbewywdqq5h" ApplicationName="Movies &amp; TV" /><Association Identifier=".website" ProgId="IE.AssocFile.WEBSITE" ApplicationName="Internet Explorer" /><Association Identifier=".wm" ProgId="AppX6eg8h5sxqq90pv53845wmnbewywdqq5h" ApplicationName="Movies &amp; TV" /><Association Identifier=".wma" ProgId="VLC.wma" ApplicationName="VLC media player" /><Association Identifier=".wmv" ProgId="VLC.wmv" ApplicationName="VLC media player" /><Association Identifier=".WPL" ProgId="AppXqj98qxeaynz6dv4459ayz6bnqxbyaqcs" ApplicationName="Groove Music" /><Association Identifier=".WVX" ProgId="VLC.wvx" ApplicationName="VLC media player" /><Association Identifier=".xdp" ProgId="AcroExch.XDPDoc" ApplicationName="Adobe Acrobat Reader DC" /><Association Identifier=".xfdf" ProgId="AcroExch.XFDFDoc" ApplicationName="Adobe Acrobat Reader DC" /><Association Identifier=".xlb" ProgId="Applications\notepad.exe" ApplicationName="Notepad" /><Association Identifier=".xls" ProgId="Excel.Sheet.8" ApplicationName="Excel (desktop)" /><Association Identifier=".xlsm" ProgId="Excel.SheetMacroEnabled.12" ApplicationName="Excel (desktop)" /><Association Identifier=".xm" ProgId="VLC.xm" ApplicationName="VLC media player" /><Association Identifier=".xps" ProgId="Windows.XPSReachViewer" ApplicationName="XPS Viewer" /><Association Identifier=".xvid" ProgId="AppX6eg8h5sxqq90pv53845wmnbewywdqq5h" ApplicationName="Movies &amp; TV" /><Association Identifier=".zpl" ProgId="AppXqj98qxeaynz6dv4459ayz6bnqxbyaqcs" ApplicationName="Groove Music" /><Association Identifier="acrobat" ProgId="acrobat" ApplicationName="Adobe Acrobat Reader DC" /><Association Identifier="bingmaps" ProgId="AppXp9gkwccvk6fa6yyfq3tmsk8ws2nprk1p" ApplicationName="Maps" /><Association Identifier="http" ProgId="IE.HTTP" ApplicationName="Internet Explorer" /><Association Identifier="https" ProgId="IE.HTTPS" ApplicationName="Internet Explorer" /><Association Identifier="mailto" ProgId="Outlook.URL.mailto.15" ApplicationName="Outlook (desktop)" /><Association Identifier="ms-excel" ProgId="Excel.UriLink.15" ApplicationName="Office (desktop)" /><Association Identifier="ms-powerpoint" ProgId="PowerPoint.UriLink.15" ApplicationName="Office (desktop)" /><Association Identifier="ms-visio" ProgId="Visio.UriLink.15" ApplicationName="Office (desktop)" /><Association Identifier="ms-word" ProgId="Word.UriLink.15" ApplicationName="Office (desktop)" /><Association Identifier="mswindowsmusic" ProgId="AppXtggqqtcfspt6ks3fjzyfppwc05yxwtwy" ApplicationName="Groove Music" /><Association Identifier="mswindowsvideo" ProgId="AppX6w6n4f8xch1s3vzwf3af6bfe88qhxbza" ApplicationName="Movies &amp; TV" /></DefaultAssociations>


GPO for multiple branches

$
0
0

Hi guys ,,,

I have a PDC and RODC in multiple branches , in my case i have to create a policy for each branch , that policy should add a specific IP's in Internet Explorer Trusted sites such as :
Branch 01 => 10.10.10.1 - 10.10.10.2

Branch 02 => 11.11.11.1 - 11.11.11.2

etc ,,,

so should i make a policy for each branch with theses specific IP's ? which i see it not logical at all to create 30 policy or 100 policy just for adding a specific IP for each branch .

or is there another way to do that without manual interruption from the IT Guys ?

Thank you

User Profiles not reading start layout xml file correctly

$
0
0

So it would seem that I have a somewhat unique problem because I cannot find anything about it online. 

I have an xml file that is dictating users start layout on Windows 10 machines.  Upon log in only 1 application in 1 group shows up.  All the gpupdate /force and restarts in the world will not get it to read the xml file correctly.  But if I go in and just slightly change the xml file on our DC server, and log out and log back in on the Windows 10 machine, it loads the xml file correctly from there on out.  I figured this out by deleting the user profile and logging back in to mimic this user logging into this machine for the first time, and that's when I noticed this problem.

I will need to find some way to fix this because I don't want to have to do this every time we get a new user or have users switch machines for some reason.

I was wondering if there is maybe a logon script I could use that would force it to read the xml file anew on every log in, or if maybe there is some other issue here. I've attached

<LayoutModificationTemplate
	Version="1"
	xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification"
	xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout"
	xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout"
	xmlns:taskbar="http://schemas.microsoft.com/Start/2014/TaskbarLayout"><LayoutOptions StartTileGroupCellWidth="6" /><DefaultLayoutOverride><StartLayoutCollection><defaultlayout:StartLayout GroupCellWidth="6" xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout"><start:Group Name="Applications" xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout"><start:DesktopApplicationTile Size="2x2" Column="0" Row="0" DesktopApplicationLinkPath="C:\Collect2000\Latitude.exe" /> <start:DesktopApplicationTile Size="2x2" Column="2" Row="0" DesktopApplicationLinkPath="%APPDATA%\Microsoft\Windows\Start Menu\Programs\Accessories\Internet Explorer.lnk" /></start:Group><start:Group Name="Microsoft Office" xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout"><start:DesktopApplicationTile Size="2x2" Column="0" Row="0" DesktopApplicationLinkPath="C:\Program Files (x86)\Microsoft Office\Office15\OUTLOOK.EXE" /><start:DesktopApplicationTile Size="2x2" Column="2" Row="0" DesktopApplicationLinkPath="C:\Program Files (x86)\Microsoft Office\Office15\lync.exe" /><start:DesktopApplicationTile Size="2x2" Column="0" Row="2" DesktopApplicationLinkPath="C:\Program Files (x86)\Microsoft Office\Office15\EXCEL.EXE" />		  <start:DesktopApplicationTile Size="2x2" Column="2" Row="2" DesktopApplicationLinkPath="C:\Program Files (x86)\Microsoft Office\Office15\WINWORD.EXE" /></start:Group><start:Group Name="Tools" xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout"><start:DesktopApplicationTile Size="2x2" Column="0" Row="0" DesktopApplicationLinkPath="C:\Windows\System32\notepad.exe" /><start:DesktopApplicationTile Size="2x2" Column="2" Row="0" DesktopApplicationLinkPath="C:\Windows\System32\calc.exe" /><start:DesktopApplicationTile Size="2x2" Column="0" Row="2" DesktopApplicationLinkPath="C:\Windows\System32\SnippingTool.exe" /></start:Group></defaultlayout:StartLayout></StartLayoutCollection></DefaultLayoutOverride><CustomTaskbarLayoutCollection PinListPlacement="Replace"><defaultlayout:TaskbarLayout><taskbar:TaskbarPinList><taskbar:DesktopApp DesktopApplicationLinkPath="%APPDATA%\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk" /><taskbar:DesktopApp DesktopApplicationLinkPath="%APPDATA%\Microsoft\Windows\Start Menu\Programs\Accessories\Internet Explorer.lnk" /><taskbar:DesktopApp DesktopApplicationLinkPath="\\apr-dev-dc1\startmenus$\StartMenu\CRM.website" /><taskbar:DesktopApp DesktopApplicationLinkPath="\\apr-dev-dc1\startmenus$\StartMenu\Sharepoint.website" /><taskbar:DesktopApp DesktopApplicationLinkPath="\\apr-dev-dc1\startmenus$\StartMenu\Report Manager.website" /></taskbar:TaskbarPinList></defaultlayout:TaskbarLayout></CustomTaskbarLayoutCollection></LayoutModificationTemplate>

the xml file as well so you can take a look.

Any help would be greatly appreciated.

Drive Mapping/Network Location Design and Performance Impacts

$
0
0

Hello,

My company is currently mapping drives using a logon script that was created 15 years ago with very little maintenance and thought as to how to properly maintain it. It is at a point where we don't have anymore drive letters to use, more security groups then actual employees to manage NTFS permissions, an enormous amount of custom drive mappings to various locations, and it is getting out of control.

My end goal is to get rid of using the logon script and use group policy to map drives. The thing is I need to keep everyone happy at the same time which I know is most likely going to be impossible.

My first idea is to restructure file servers at the root level and maybe one to two levels by organizing it my location and maybe department. Then create a standard of mapping at a much higher level in the file tree. This of course would break some users ability to find their files and open stuff from recent files in word, excel, etc.

My second idea is to get rid of mapped drives completely. Just map them as network network location using a GPO and then use item level targeting to map the network location using the security groups already in use for NTFS permissions.

The thing is, there are at least 500 security groups currently in use for NTFS permissions and the logon script also uses them to map drives.

If I stuck everything into one GPO and use item level targeting to map 500 different network locations by specifying a security group, will this negatively impact the users login time?

Are there any other ways to tackle this issue? I was thinking about using DFS as well but there are just so many shares I'm not quite sure what is the best way to do this. Are there any 3rd party utilities that I could use?

It seems like the work to move away from the logon script would make users to angry to benefit from moving away from logon scripts.

Any suggestions and ideas are greatly appreciated.

Thanks!

Problem in file management

$
0
0

Good morning sirs,

i ("Andrea", as you can see in the attachment) have some trouble with deleting and, in general, handling some shared files.

i created some documents and i'm able to edit but, if another user try to access them, he's not allowed to write on them or delete.

How can i fix this?

Both the user account has the "full control", "change" and "read" permissions on the folder

Users wit local admin access is able to access drives of all machines in domain

$
0
0

Hi ,

I am giving local admin access to some users in domain through group policy, which is making them members of built in Administrators.Now the users who all have local admin access are able to access drives of all machines in the domain.

I do not want them to access drives of other users.How to restrict them ?

Kindly help .

Regards

Ankit

GPO icon with replace create new icon

$
0
0

Hi,

I have on desktop icons created by GPO, some icons are configured as Replace some as Update and they are as system object to run C:\Program Files\Internet Explorer\iexplorer.exe specifis www sites.
Now I would to edit these shortcuts to open it in default browser instead of Internet explorer, so I changed its as URL and saved.
Now the problem is these new icons are appear as new instead replace previous. So I have doubled every icons.

Updating Default Apps / Protocol via PowerShell

$
0
0

Greetings,

Has anyone had experience in setting default apps or setting default apps by protocol using PowerShell?

We have some challenges in our environment where users are changing their default apps, specifically mailto protocol, to use browsers, as oppose to Outlook.

I searched for ways to do it through registry, but came across inconsistencies to which keys should be set. Was hoping for a way to do it programmatically that we can then push.

Thanks in advance.


GPO icon with replace create new icon

$
0
0

Hi,

I have on desktop icons created by GPO, some icons are configured as Replace some as Update and they are as system object to run C:\Program Files\Internet Explorer\iexplorer.exe specific www sites.
Now I would to edit these shortcuts to open it in default browser instead of Internet explorer, so I changed its as URL and saved.
Now the problem is these new icons are appear as new instead replace previous. So I have doubled every icons.
How to configure existing icons to edit its properties, but not to create new ones?

Policy Stop Working

$
0
0

I had GPO working nicely, but now they don't seem to apply.  The Group Policy Modelling Wizard gives the right results, but GPRESULT run from the users' account on the TS does not mention my policy objects in either the Applied or Denied sections.

As I said this was working perfectly - now suddenly stopped.  I've got nothing appearing in the event logs.  Running RSoP.MSC on the user's account does say

"The RSoP snap-in was unable to generate the computer's data due to insufficient permissions" 

But when I tried to run "GPRESULT /Z " it work normally and I can Run RSoP.MSC on the user's account and I have the report again.

GPRESULT /Z : Displays all available information about Group Policy. This includes detailed settings that were applied with a precedence of 1 and higher.

My question is :  how can Policy back to normal using "Gpresult /Z" 



Start Menu with group policy

$
0
0

After putting a test computer onto our domain and using group policy to determine it's start menu, I don't get the start menu that I would like.  When I do a gpupdate /force I get this message

"The Group Policy Client Side Extension Folder Redirection was unable to apply one or more settings because the changes must be processed before system startup or user logon. The system will wait for Group Policy processing to finish completely before the next startup or logon for this user, and this may result in slow startup and boot performance" 

When I log off and log back on I get the same message when I do a gpupdate /force.  When I look at the event logs for the computer I get this error,

"Event ID 1112: The Group Policy Client Side Extension Software Installation was unable to apply one or more settings because the changes must be processed before system startup or user logon. The system will wait for Group Policy processing to finish completely before the next startup or logon for this user, and this may result in slow startup and boot performance."

I suspect that the reason I don't get the start menu I would like is the same reason I'm getting this error, after scouring the internet I still don't understand what the issue is. The file paths for the folder redirection are correct, the xml file for the start layout is correct. 

These are the settings for the start menu on the server, and the test computer is in this OU. Any help would be greatly appreciated.

GPO for multiple branches

$
0
0

Hi guys ,,,

I have a PDC and RODC in multiple branches , in my case i have to create a policy for each branch , that policy should add a specific IP's in Internet Explorer Trusted sites such as :
Branch 01 => 10.10.10.1 - 10.10.10.2

Branch 02 => 11.11.11.1 - 11.11.11.2

etc ,,,

so should i make a policy for each branch with theses specific IP's ? which i see it not logical at all to create 30 policy or 100 policy just for adding a specific IP for each branch .

or is there another way to do that without manual interruption from the IT Guys ?

Thank you

GPO status and Group Policy Loopback processing mode

$
0
0

HI

What is the difference between GPO status and Group Policy Loopback processing mode?

Group Policy preferences not applying to some admins

$
0
0
Ok so recently, a group policy preference that takes a file shortcut from my file server (Add a printer.lnk) and places it on %desktopdir% has stopped applying to only some Domain admins but is working for all other users and also working for a test account I created for a domain admin. I cant seem to find where the policy is being applied at the registry level, but it was working then just stopped applying to my own desktop (I am a domain admin).  I have created a new policy and it still doesn't seem to be appying. I am currently using the preference modification from the user preferences tree in GPP, but have also made a preference to apply using the computer GPP tree and that is not working either. It is applying to all staff and student computers, and is applying to both win10 and win7 but for whatever reason just stopped applying itself to any of the domain admins except 1 that i have just tested which is working fine on one of my win10 test machines. Anyone run into this issue? 

File backup possibility

$
0
0

Hello, 

i wanted to know is it possible to make a GPO for richcopy software to automatically backup everyone's computer in the office? The way i have it set up right now is over the past weekend i set a task on each machine individually to run the richcopy file to backup all files on the machine everyday when the user is logged in at a specific time. Now my boss gave a challenge to figure out if what i did for each machine could have been achieved by making a GPO to do this. By the way I am using MW S2012-R2 as the DC and W10 for all machines in the building.

Thanks


.xml association file for two versions of office

$
0
0

Hi.

We have a bunch of PCs with Office 2019 and an other bunch with 2016. 

I was wondering whether there's a way to specify both in a file association .xml file through the File Exporer set default associations GPO template so that depending on which of the two is present it will assign that version to the mailto protocol.

Does anyone know if this would work if I add two lines to the .xml mentioning both versions? Will it just assign it to whichever of the two is present?

Thanks.

Missing policies

$
0
0

Hi all

I have recently upgraded the computers in our domain to Windows 10, but before I did this I installed the latest admx policy files for Windows 10.  However, when I go into my group policy settings I no longer see Google Chrome policies.  The policies are still applying correctly to the computers, but I cannot access to policies to make any changes.

I have checked to make sure the filter is turned off.

Any idea where I have gone wrong and how I can get these policies to show up again?  I am using server 2016.

Thanks

Andrew


Group Policy User Drive Mapping is set to UPDATE. How to disconnect while keeping Update setting

$
0
0

Hi,

We have an issue more prominent to Windows 10 wherein File Explorer closes randomly when a folder from a network drive map is open.  The solution is to change the Group Policy Drive Map from REPLACE to UPDATE.  However it  presents a new issue. 

If a user moves to another division, for example same drive letter but different folder destination, it does not update the new mapping.  Obviously because UPDATE does not disconnect existing drive mapping and REPLACE with new mapping.  The result is that user has a disconnected G drive showing the old associated drive.

What is the best way to handle it so it resolves both issue (File Explorer and moving of users from one drive map to another drive map but same letter) while using GPP?

Thanks!


Group Policy not automatically applying

$
0
0
Hello, I am testing out Windows 10 1903 in my environment and am having issues with some GPO's not automatically applying that have up until now.  When I log onto the computer and run gpresult it shows all the policies as it should, and when I manually run gpupdate /force the policies apply properly, but not automatically as in the past.  I have checked the wmi and security filtering on the policy and that is set correctly.  Domain controller is Server 2016.  Sorry for the kind of generic info but any info would be appreciated.  Thanks!

GP credentials to a shared folder

$
0
0
I am trying to use a Computer policy to "Force a specific default lock screen and logon image" on our domain controller. I placed the desired JPG image in a shared folder, on the network, open to Everybody read-only. However, the test computer that received this policy is not downloading the image I put on the share. It removed the default lock screen wallpaper from Windows 10 and now all it has is a blue plain background when users are at the logon screen. Since this is a computer policy, what credentials is Windows using to access the share? I was reading that machine accounts do not have access to network shares.
Viewing all 19997 articles
Browse latest View live