Hi everyone,
how to enable SNMP services via group policy?
any recommendation from your experience are appreciated?
Thanks
↧
enable SNMP services via group policy?
↧
How to give permissions to specific users to change Date and time settings in Server 2012 GPO.?
Hello All,
I'm looking for a solution to a problem I'm facing.
Server : Server 2012 Standard 64bit.
Client : Windows 7 pro SP1 64bit.
i want to prevent all domain users to change Date and time settings in client system.
but i want to allow some users to change Date and Time settings as they are are in Testing team.
i have tried adding those user is GPO to allow change Date and Time... but its not Affecting the client System.
any solution would bereally Helpful.
Thank you.
↧
↧
User mapping GPO is not being received by workstations.
Hello,
I have a group policy which is applied to the domain level. The policy is to map a shared drive for users in a specific domain group.
I login as a user in that specific domain group to a test computer in the domain but I do not see the mapped drive. RSOP does not show the GPO even after GPUPDATE /FORCE.
The drive mapping is set in user configuration.
Thanks..
↧
Offline Files and Slow-Link Mode Issues on Windows 10
Platform: Windows 10 Pro x64
Domain Functional Level: 2016
I am having an issue with Slow-Link Mode for Offline Files. I have set the below group policy to disabled:
- Computer Configuration\Administrative Templates\Network\Offline Files\Configure slow-link mode
Which means that a folder should never go in to Slow-Link mode while connected to a network share/resource. I only want the share/resource to go to Slow-Link mode (Work Offline / Offline Files) if the share/resource is inaccessible, not with a slow latency/connection.
However I see the following log in the Event Viewer (Applications and Services\Microsoft\Windows\ Offline Files\Operational):
Event ID= 1004
Description: Path \server\share$ transitioned to slow link with latency = 81 and bandwidth = 258888
A folder that is not synchronized for offline use has a grey X on it so when I try to open the folder, it says
- "This file is currently not available for use on this computer."
I have also tried using the registry editor to add the Key and DWORD value with no success (supposedly only confirmed to apply up to Windows 8).
HKLM:\Software\Policies\Microsoft\Windows\NetCacheSlowLinkEnabled
REG_DWORD = 0
I can manually remove the "Work Offline" flag when I'm in the folder, but I don't want to make users do this, as it should never work offline unless there is NO network connectivity.
The network latency is only for users connected to VPN working from home, so as I understand Windows default value for transitioning to Slow-Link mode is 35ms round-trip latency, and the users go up to 100ms round-trip latency on VPN.
Also, I have made nearly all the same configurations as in this article: https://social.technet.microsoft.com/Forums/windows/en-US/ca9921e5-3fb8-41dd-b46e-eb4cf3f74a2d/on-slow-connections-automatically-work-offline-uncheck?forum=win10itpronetworking
Any suggestions or has anyone configured a similar scenario for Windows 10 environment?
↧
Logon options for service are greyed out after adding Managed Service account 2012 R2
I have created a managed service account and added it to the Windows Update Service.
It says the account has been given logon as service rights and then says to take affect restart the service.
The service wont restart and gives the following error: Error 1079. the account specified for this service is different from the account specified for the other services running in the same process.
I have set this account on the time service which has no dependencies and none of the services will start.
when it comes to changed the logon details back I cant because all logon options are greyed out
Am I missing something. How do I get a service to correctly start using a managed service account.
I am currently working through the lab for the 70-411 exam
I've checked gpo settings and can see nothing obvious that would grey out the properties box
cheers Mike
↧
↧
How to disable a single group policy on the client side?
We have a software restriction group policy that runs on all of our computers. We are looking for a way, from the CLIENT side, to be able to disable this group policy, temporarily. In certain situations we will need to log on to these workstations, disable the problematic group policy, do our work, and the re-enable the policy.
I know how to disable the policy via Group Policy Management Console but we are looking for a quick command line way to disable a single group policy temporarily from the CLIENT side..
I am aware the policy will auto re-enable in 90 minutes (give or take 30 minutes) when group policy refreshes.
Any suggestions
↧
GPO with Powershell Script suddenly not working with Windows 10 Clients
Im having a GPO that hits all computers in my domain. Suddenly after update 1903, the powershell is not run anymore. It runs fine if I from the clinet opens the sysvol unc path and run the script in USer context. But the GPO running under computer context suddenly does not execure the script. The GPo runs all other aspects, just not the script.
It has been working for a long time, and nothing has changed.
Its allmost the same as this thread
/Forums/en-US/ebfc9c99-d94c-4ada-81ad-b2e794528324/machines-not-running-logon-scripts-after-update-to-windows-10-1903-current-updates
↧
GPO for IE internet site
Hi,
We have Windows 2012 DC and Windows 10 client. We want to add a few intranet sites to the IE intranet zone by GPO. I used the setting below in the image to add the sites. It worked, however it removed the old sites that user has put there before and replaced them by the GPO. Is it possible to merge them instead of replacing? We just want to add a few sites to the intranet site but note remove the old ones there.
Please help!
Grace
↧
Deny group policy to security group.
I have a group policy under computer configuration (System/Removable Storage Access) deny execute access for removable drives. I'm blocking executables from USBs. I don't want this policy to apply to a specific user security group. So, I added the security group. I gave it "read" and deny "apply group policy". But, it is still getting applied to users in the group. Am I missing something?
Tom
↧
↧
Installing keyboards/ languages via Group Policy
Hello, I am currently working on getting 11 languages installed via group policy.
I have successfully installed a majority of the keyboards via adding registry keys to "HKEY_CURRENT_USER\Keyboard Layout\Preload"
However, some of the Asian languages do not install via this method, and I had to create an XML file and batch to add them.
Here is where I got the information to make the XML file.
https://social.technet.microsoft.com/Forums/windowsserver/en-US/1d698961-b605-496f-80ee-23da319f16a7/gp-install-ime-japanese-across-network?forum=winserverGP
I pulled the keyboard identifiers from here:
https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/windows-language-pack-default-values
Using this, I am able to install the Japanese keyboard, the Chinese(simplified, China) . however I am also trying to install "Chinese(traditional,Macao SAR)" But I do not see a keyboard identifier code under "Input Method Editors" to install this lang/keyboard.
Here is my XML at the moment
<!--Keyboard Language Change--><gs:GlobalizationServices xmlns:gs="urn:longhornGlobalizationUnattend"><!--User List--><gs:UserList><gs:User UserID="Current" CopySettingsToDefaultUserAcct="true" CopySettingsToSystemAcct="true"/></gs:UserList><!--input preferences--><gs:InputPreferences><!--en-AU--><gs:InputLanguageID Action="add" ID="0c09:00000409" Default="true"/><!--JP-Japanese--><gs:InputLanguageID Action="add" ID="0411:{03B5835F-F03C-411B-9CE2-AA23E1171E36}{A76C93D9-5523-4E90-AAFA-4DB112F9AC76}"/><!--CN-Chinese--><gs:InputLanguageID Action="add" ID="0804:{81D4E9C9-1D3B-41BC-9E6C-4B40BF79E35E}{FA550B04-5AD7-411f-A5AC-CA038EC515D7}"/><!--CN-Chinese--><gs:InputLanguageID Action="add" ID="0404:{E429B25A-E5D3-4D1F-9BE3-0C608477E3A1}{037B2C25-480C-4D7F-B027-D6CA6B69788A}"/> </gs:InputPreferences></gs:GlobalizationServices>Does anyone know the method/identifier to install "Chinese(traditional,Macao SAR)" on my XML file, or any other method via GPO? This is the only keyboard I am missing to finish this project.
Thank you!
↧
Group Policy - Computer configuration was applied to users
Hi folks!
Unusual behavior with group policy today; am at a loss to explain what happened. My understanding is that Computer Configurations cannot apply to users.
Computer configuration settings defined: TLS 1.0 Protocol - disable in registry.
"Administrators" group was added to the security filtering (not intentionally) and 1 x machine.
However, all machines where admins were logged on processed the policy and applied the settings.
To summarise, computer in OU called "Managed Servers", policy linked to this OU.
Administrators Group object not in this OU.
Kat
↧
Domain Users machine time changes automatically
using hyper V server for domain and FTP.
All the server time changed automatically after some months.
↧
Migrate current Windows 2008 File Server to new 2016 File Server while using folder redirection GPO
I have Folder Redirection GPO pointing to user share on Windows 2008 File Server called FS01 (\\FS01\users\%username%) I want to stand up a new 2016 File Server called FS02 but then I need to shutdown
2008 Server FS01 and rename 2016 Server to FS01. What is the best way to accomplish this while keeping user files and maintaining folder redirection to the new 2016 file server?
In testing GPO to redirect folders to 2016 Server FS02 before the switch over, files are redirected as expected. The users desktop and documents folder points to\\FS02\Users\%username% when I change the GPO to point back to\\FS01\Users\%username% (as will be the end result) the workstation still shows folders are pointing to\\FS02\users\%username% even after gpupdate /force and multiple workstation restarts etc., My concern is that if I just stand up and rename Server 2016 FS02 to FS01 is that ~50 users will be unable to access
their files during and after the Server upgrade and folder redirection issues.
Your help is much appreciated.
↧
↧
Block Windows Update and Feature Updates
Hi,
We have SCCM setup which push the updates to user PC but when user are click on windows update button its download and install feature updates.
I would like to create two policy.
1. To block of windows updates for every user in domain but allow some user (Through security group) to run Windows Update online.
2. Block Feature updates for every user within the domain.
How can i setup these two policy to achive this.
↧
Change Subnet via group policy
Hey,
I am in the process of getting ready to re-subnet my DHCP server to expand my usable IP Addresses. What would be the best way to handle my static assigned servers/ client machines. Is there a way to set them all via group policy or will I have to walk around a change them all manually. I have very little experience with Group Policy so please explain this to me like I am five.
Thanks in advance
↧
Share folder access changing automatically
Hi,
I have a DATA server which is configured as a VM. I am giving the R/W access to the domain users to the shared folders by the folder properties.
But after some days the permission will be canceled automatically.
What cause the issue?
↧
GPO User settings and specific servers
Hi,
I cannot figure this out. I have a user in OU named A, where alot of User gpo settings is applied. It works, when the user login to our RDS farm placed in OU B.
Now this user must not have these User gpo settings applied, when he logins to specific servers in OU C.
In OU C i have a GPO withpout any settings configured except loopback policy set to Replacewhich i though would ignore the User gpo settings from OU A.
A gpresult run against the user shows the User settings from OU A is still being set.
What i am doing wrong?
Regards
Robert
↧
↧
Redirected Folders
Hello, Having a strange issue in Regards to redirected folders. Server 2012 and Windows 10 clients.
I setup Redirected folders about 4 months ago for about 30 Windows 10 clients. Redirecting the Desktop, Documents and Favorites. Everything has been working great. well we bought 6 new computers for some users and when they login they are not getting redirect to the correct location. They are getting Redirected to the Root of their user folders or not at all. So the Favorite folders it seeing the Documents, Desktop and Favorite folder. Same with the Desktop. Another strange thing is their user Folder isn't shown when I browse the users folder on the Share or local on the server. Though if I try and map it from the client it is. I have Show Hidden folders select on the server but still not shown. If I look at the group policy it looks fine. Shows the path.. \\Primaryserver\users$\%username% for all three folders.
Anyone seen this before or what is going on?
Thanks
Brian
↧
Audit Windows Services
Hello. My environment consists of Windows 7 & 10 along with Windows Server 2012 and up:
In the Event Viewer System Logs I noticed that no logging occurs when a windows services is started, stopped, paused, resumed, or restarted. I only see logs if the windows service Startup Type has been changed. How can I get logging enabled for when a windows service is started, stopped, paused, resumed, or restarted?
My goal is audit across ALL endpoints when a particular Windows service is stopped. With that, I can setup alerting for when this service is stopped on any endpoint in my environment. Has anyone accomplished this?
In the Event Viewer System Logs I noticed that no logging occurs when a windows services is started, stopped, paused, resumed, or restarted. I only see logs if the windows service Startup Type has been changed. How can I get logging enabled for when a windows service is started, stopped, paused, resumed, or restarted?
My goal is audit across ALL endpoints when a particular Windows service is stopped. With that, I can setup alerting for when this service is stopped on any endpoint in my environment. Has anyone accomplished this?
↧
Conflicting display of Windows Firewall setting from GUI and netsh advfirewall
I have checked a number of machines on our network and all do the same thing. They show the windows firewall is off in the gui, but show it as on in netsh advfirewall. Why would this be and how can I fix it? Our group policy has it set to off for both the windows firewall, and the windows advanced firewall so we can use a third party one.
Cheers
Mark
↧