Allow Domain admins to install MS patches/updates
We have a server 2012R2 Domain with SCCM 2012R2 for updates. However I need to allow my domain admins to install updates and patches. As it stands we either HAVE to push or log in to the system(s) as...
View ArticleAppLocker GPO
Currently, there is a AppLocker GPO in place that has a rule to 'Allow' a security group to run %system32%\WindowsPowerShell\v1.0\powershell.exe.This rule is working - as users who are not in the...
View ArticleInstalling 32 bit and 64 bit jvm on windows 2012 server ?
I have a software that runs its server components with 64 bit jvm , and client components runs 32 bit jvm, I have once done it nice and was working well. This time i am getting erorr message that "JVM...
View ArticleHow to force default emulation settings \ document mode in IE?
We have this with some users who have certain websites rendering incorrectly because their browser is defaulting to IE7 document mode. The new media department believe this is set to default this way -...
View Articlelock computers after say 30 minutes of inactivity
I am new to GPO's and I need to know if there is a GPO that will lock computers (desktops) after 30 minutes of inactivity. Thank you in advance for your help.Greg
View ArticleDomain level GPOs only being applied to a windows 10 OU
This is a fun one. I have an OU in my AD that has windows 10 pro machines. It's only pulling GPOs that are applied at the domain level, even if inheritance is blocked. I have machines on which I've...
View ArticleClik here to view.
Windows 10 - Log Off GP
Hi All...I have a domain level Group Policy to force computers to log off at 7pm each night. I'm noticing on my Windows 10 Enterprise LTSB computers that I'm getting an error message in the Event...
View ArticleHow to set a very large REG_DWORD (> 999999999) using GPO templates
Hi,We want to create a custom GPO template (ADM or ADMX/ADML) to allow our customers to configure the WebDav download file size limit. This is 47MB by default but has a maximum of 4GB if you set it...
View ArticleLong delays in Windows Explorer operations and logins when one domain...
HelloWe have a site with two domain controllers and I've noticed that when one of the two DCs is down for maintenance, any file operations involving Windows Explorer on any domain members, including...
View ArticleClik here to view.
Deploying a Scheduled task in Group Policy Manager for Windows 10
We have recently begun deploying Windows 10 in our domain and we ran into an issue with a scheduled task we had previously created in Group Policy not getting applied to our Windows 10 machines. Our...
View ArticleReboot domain controller changes audit policy on Default Domain Controller...
This has been happening for a long time no matter whether my DCs were running Windows Server 2003 or, as they are now, are running Windows Server 2012 R2. It happens on DCs in one particular site, but...
View ArticleAppLocker GPO: Create Executable Rules
To ALLOW a group of users and DENY everyone else from PowerShell & PowerShell ISE, both x64 & x86.> There is an existing Executable Rule thatALLOW 'NT Authority/Authenticated users' to Path:...
View ArticleGroup Policy Wizard
Hi,is there any way how you can use Group Policy Wizard not being domain administrator or local administrator on target machine?MS says:The settings are reported in HTML and are displayed in a GPMC...
View ArticleAppLocker GPO: Allow only Auhorized user for PowerShell
In AppLocker GPO, how can I create a DENY rule to deny 'everyone' from PowerShell & PowerShell ISE (both x64 & x86) & ALLOW it to only authorized users?My thought is: Create two DENY rules...
View ArticleRegGetValue returned data type differs from the data type mentioned in admx...
For the gpo setting: "Network directories to sync at Logon/Logoff time only", in the corresponding UserProfiles.admx file, datatype is mentioned as REG_EXPAND_SZ:<text...
View ArticleChanging Local GPO via Group Policy / Local Users on Domain Computers
Hey there,I've been trying to solve this problem for a couple days now, but I'm so desperate now, that I'm going to ask you guys for help.This is my setting:We have a domain with about 1000 computers...
View ArticleLocal Domain Controller Group Policy Replication Behavior
HelloIn our environment, we created a password complexity policy and applied that policy to certain OUs only (specific users in fact). We also had OUs that were for 'generic' users that this policy did...
View ArticleGroup Policy Error in GPMC
While working on trying to figure out why GPs aren't pushing out to all PCs, I noticed the error below. I am not sure where to start looking to resolve this. I have done some research on the internet...
View ArticleForum FAQ: How to restrict mass storage drive and CD-ROM access?
Question How to restrict mass storage drive and CD-ROM access? AnswerFor Windows 2000, Windows XP and Windows Server 2003 computer, there is no build-in group policy to disable access to mass storage...
View ArticleGroup Policy Preferences: Windows Environment Variables Not Honoured
Hello,I'm trying to create some shortcuts to some executables with Group Policy Preferences (GPP) for my users. As I understand, you can use two types of variables when specifying the target path for a...
View Article