Forum FAQ: How to restrict mass storage drive and CD-ROM access?
Question How to restrict mass storage drive and CD-ROM access? AnswerFor Windows 2000, Windows XP and Windows Server 2003 computer, there is no build-in group policy to disable access to mass storage...
View ArticleClik here to view.
Change Size Temporary internet Files IE 10
helloi am looking to change the default settings for IE 10 for temp. internet files :With which GPO can this be done (server 2012 GPO)Thx
View ArticleExpiration Password by OU
Needs to set expired password AD for partial OU, not in forest AD.what I need is script in Shell, not in VB, better set expired password date by selected users.Regards, Noval
View ArticleForbid launching *.scr files except running one
Hello everyone. Recently we get a task from our security group: They want to block executing all *.src files (screensaver). The problem is - we have our company screensaver, and we want it to work on...
View ArticleGroup Policy - Power Settings -
Hi Everyone,The company I work for is currently in the process of completing a merger of 3 separate businesses from their respective AD Domains into our business domain/forest.Currently we do not...
View ArticleHow much can a typo on a GPO screw up things?
I found a GPO called "Enable cliebt failback for Netlogon and SYSVOL"That is "clieBt" not client. I did not mistype this. This is a Windows policy, not a custom GPO. It is on both servers.Windows...
View ArticleLog on script
Hi my name is Farid I am system administrator I have server 2008r2 domain controller installed on the server and I have 50 client joined to domain, I need to run on the client computer reg file, I was...
View ArticleClik here to view.
Missing folders in Local Security Policy Editor
One of our servers has an issues with some security settings specifically "log on as batch job". When I try and update this policy using the Local Security Policy editor I notice I am missing quite a...
View ArticleAGPM and security security filtering: gpos not showing up in uncontrolled tab
Why Does a gpo not show up in uncontrolled tab? The only thing that is removed is "authenticated users" from security filtering of said gpo. Once I add authenticated users back, bang! its back visible...
View ArticleAGPM and security security filtering: gpos not showing up in uncontrolled tab
Why Does a gpo not show up in uncontrolled tab? The only thing that is removed is "authenticated users" from security filtering of said gpo. Once I add authenticated users back, bang! its back visible...
View ArticleSecurity policies were propagated with warning. 0x534 : No mapping between...
When I try this:From the command prompt, type: FIND /I "Cannot find" %SYSTEMROOT%\Security\Logs\winlogon.logIt comes back with file not found, I do not have a winlogon.log file, I tried to change a...
View ArticleSoftware Restriction Policy not allowing Program Files directory on 64-bit...
I've created a new software restriction policy, my default security level is set to "Disallowed", I have the standard built-in allowed locations:%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows...
View ArticleFolder Preferences Won't Let me Uncheck Delete This Folder (if emptied)
When using Preferences, Windows Settings, Folders: When using the 'Delete' action, I can't uncheck 'Delete the Folder (if emptied).'I'm trying to simply delete the contents of a folder on a regular...
View ArticleDear Microsoft: AppLocker, Application rules, UAC, local administrators
I want to employ AppLocker + UAC as a defensive layer over locally administrative accounts. My desired behavior: local administrators must elevate (UAC) to run an application; the default rule for...
View Articlewindows could not connect to the group policy client service
I know this forum has similar questions, but none of them have answered my problem so far.Case:My parents have moved to a new place, so they received a new modem with build-in wi-fi.I had an old...
View ArticleClik here to view.
Group Policy For 2008 Terminal Server Users Default Open With Not Working
I'm trying to change the default open with behavior for jpg files on my terminal server. I created a Group Policy that changed it to MS Paint to Office 2010 Picture Manager. The policy appears to apply...
View ArticleCan't get gpo changes to implement
I have made changes via gpo to a specific user on a laptop. But for some reason they will not take. I setup a specific mmc file set to the specific user gpo snap in. Some examples of ones that won't...
View ArticlePolicies not replicating between DCs
I have two DCs...Server 2012. I see that one DC has some different folders under Policies than the other. The key names are different and the folder dates are different. How do I fix this?
View ArticleGroup Policy For Disable Shift+Delete
HiI have Windows Server 2012 R2 and I have GPO that Deny Full Control for user1 for specify Shortcut on the desktop.When user1 trying rename shortcut or press key "Delete" is receive message "You not...
View ArticleUser Profile Scripting
Good afternoon.Is there are other ways to check if there is any script being cached somewhere for a particular user.//descriptionI moved and old user to my new OU, I also created some users in that...
View Article