Computer Policy is not executing batch script in startup with system account
I have a Win2008r2 domain with Win7 clients. I use batch files all the time in Group Policy Startup Scripts and never have any issues. I have a batch file that is trying to run setup with some...
View ArticlePush GPO setup SSID to Wireless Tablets
We have a few labs using the Sam Sung Tablets with Windows 8.1 Enterprise. The units attach okay to the Domain and we have touched each unit setting the WiFi SSID and Pass codes to the preferred...
View ArticleSoftware Restriction Policy unrestricted rule
Hi Experts,I have made a rule that block all executables in the App Data folder for example%AppData%\*\* ----- Disallowed%AppData%\*\*.exe ----- DisallowedNow I want to enable running all the files in...
View ArticleOnly allow specific USB device GPO - Existing drivers question
My employer is introducing a policy that only a specific model of USB drive will be allowed on our IT infrastructure in the future, and I need to restrict the estate so they cannot use any others.I...
View ArticleRemove network drives automatically
Hello,if the client is not in the company network (without VPN), the network drives should be removed automatically from the explorer. Is there a setting in the group policy which I will need to set to...
View ArticleAnalyze and optimization
Hello everyone,I'm on this subject for now 3 weeks and i need help.I'm trainee in a company where i have to analyze and optimize their GPO as simple as that, I so learn in detail how does this tool...
View ArticleUser Configuration and Computer Configuration
Hi All, I am not sure how to achieve this. Basically I have a Server OU and a User OU and what I am trying to do is set session timeouts for remote desktop sessions. I applied a policy at a parent...
View ArticleGroup Policy Drive Mapping
Hello,We are having a couple of issues with Drive Mapping in Windows 2012 R21. With a direct drive map in gpp under User Configuration/Preferences/Windows Settings/Drive Maps we get a network error...
View ArticleClik here to view.
Missing folders in Local Security Policy Editor
One of our servers has an issues with some security settings specifically "log on as batch job". When I try and update this policy using the Local Security Policy editor I notice I am missing quite a...
View ArticleAdministrative template GPO setting refresh reapply interval.
I have deplyed a gpo with an administrative template to block USB Pen Drives by changing the following registry value to ( 4 ).HKEY_Local_machine\System\CurrentControlSet\Services\USBSTORIf someone who...
View ArticleWhen does it reapply?
Is it true that group policy only reapplies when the version number is changed as it is when you make some change to the policy? Except for security policies which are reapplied every 16 hours. Other...
View ArticleComputer Policy is not executing batch script in startup(Unknown Reason)
I have a Win2008r2 domain with Win7 clients. I use batch files all the time in Group Policy Startup Scripts and never have any issues. I have a batch file that is trying to run setup with some...
View ArticleHow do I configure roaming profiles to not apply to Domain Admins?
Hi,I have a setup (Windows 2012 R2 on all servers) where roaming profiles and re-directed folders are applied through GPO to our RDS servers.We decied to change this so only users, and not Domain...
View ArticleAllow WinZip file in Software Restriction Policy
Hi Experts,I have a path rule that denies executing WinZip files for eg.%LocalAppData%\Temp\wz*\*.exeNow I need to allow a specific WinZip file to execute.What could be the possible rule for that.Thank...
View ArticleSchedule Script through GPO is not running
Hi expertI have scheduled a powershell script through GPO in computer preference mode. The script is pushed on machines but it does not run and gives a error as below.ERROR MSG : -Task Scheduler failed...
View ArticleAccount Lockout Policies
I recently came across a problem in our environment where the account lockout policy was not applying to Domain accounts. After reading up on the some of the questions posted here on TechNet I found...
View ArticleHardened UNC Path GPO Question
I'm looking to implement the recommended group policy settings to harden UNC access to SYSVOL and NETLOGON. But, I'm must be missing some .adm/.adml files. When I edit a new group policy and try to...
View ArticleGPP assigned to Users OU but use Item-Levewl targeting with Computers?
I have a group of machines that I would like to have Lync 2013 NOT autostart. I can delete the registry key from the reference section below and Lync 2013 will not start (as expected). These machines...
View ArticleMS15-011 (KB3000483) GPO application (and installation) questions
I’ve been doing quite a bit of reading on the KB3000483 update and subsequent GPO deployment. What isn’t clear to me (and I can’t find an answer online) is if the update must first be deployed to both...
View ArticleGPRESULT Access Denied from Elevated CMD Prompt
Hi,trying to run GPRESULT on a server 2012 box. Am logged on as a Domain Admin, right click CMD and Run as Administrator, so its definitely an elevated command prompt but its stick at gathering OS...
View Article