Over 1 million tech questions and answers.

Group policy setting blocking downloads from https even on trusted sites

Q: Group policy setting blocking downloads from https even on trusted sites

We have a lot of group policy settings enabled in this environment. We have an extremely strange issue where it is not allowing us to download content (in this case a .rdp file) over Https but will work over http. It does not say that it is not allowed but
instead of asking if we want to open the file its asking us to save the file which is not permitted. If we disable the GPO it will allow us to hit the open button.

Does anyone know which policy might be causing this?

RELEVANCY SCORE 200
Preferred Solution: Group policy setting blocking downloads from https even on trusted sites

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: Group policy setting blocking downloads from https even on trusted sites

We were able to figure it out!

the GPO was under:

User Configuration\Policies\Administrative Templates\Windows Components\ Internet Explorer\Internet Control Panel\Security Pages\Advanced Page\Do not save encrypted pages to disk.

Users are not allowed to save files to the disk (only temp files for trusted sites) So that GPO was preventing the temp directory save so everything was denied.

Read other 4 answers
RELEVANCY SCORE 109.6

hi all
I can't set Trusted Zone (Site) with GPO Preferences - Internet Settings because it is grey?Chris

A:Group Policy Preferences - Internet Settings - Trusted Sites

Hi Chris,
The Trusted Sites cannot be added using Group Policy Preferences. But you can add it by native group policy.
The group policy settings are here:
User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone
If you really want to use the GPP, please manually add the registry keys through GPP.
Regards,
MiyaThis posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer
your question. This can be beneficial to other community members reading the thread.

Read other 4 answers
RELEVANCY SCORE 104.8

My employer has a group policy to default all sites in a particular domain to IE compatibility View.  They sent me meta tag instructions on how to override that in my pages.  That meta tag works so long as the domain in question is not in trusted
sites. But they also have a Group Policy to force that domain into trusted sites. 
In compatible view I have JQuery syntax that does not run or runs with errors.  From home in an unmanaged PC my pages work great.  At work (managed pc), if I remove the domain from trusted sites the pages work great as well.
Any ideas?
Question, can the groups managing the group policy make exceptions for a particular sub domain?

Read other answers
RELEVANCY SCORE 87.2

Hi Team,
Please let me know what is the standard Setting for below Security Setting ( Audit Policy ), which are followed in most of the Company.

For Eg:- Should i set ' Success & Failure ' for ' Audit account logon events ' & for ' Audit account management' etc...




Thanks & Regards,
Param
www.paramgupta.blogspot.com

Read other answers
RELEVANCY SCORE 84.4

Hi all!

Windows 7 Pro 32 bit on a domain

I've NEVER seen this before and I cant figure it out.

I have a group policy set on an OU named LAPTOPS. The policy gets applied, however the User Config\Windows Setting\Scripts\Logon DOES NOT. When you run the GPRESULTS on the laptop, I see the policy settings being applied EXCEPT for the LOGON script. Its not there. I dont see any errors and cant figure out why Windows would ignore this one setting in the policy but apply the rest. I've tried deleting and recreating the policy but that does not work. Also made sure I did a GPUPDATE /FORCE

Thanks in advance!

A:Group Policy Applies Policy EXCEPT for 1 Setting!

Is a policy enforced on a domain or site level?

Read other 7 answers
RELEVANCY SCORE 83.6

Hello friends,

I would like to know if I can block a URL (Facebook) with Group Policy.

With Internet Employer 10, Group Policy Manager had a menu called Internet Explorer (User Configuration> Policies> Window Settings> Internet Explorer> Security). I found a set by step directions on how to add this as a domain wide policy. Now Internet Explorer is gone from this menu since IE11. Any help would be of value and Iím sorry to ask, but can you provide me with step by step directions. I and any others who may use this post will and do really appreciate it.
 

A:Blocking a URL with Group Policy

Read other 13 answers
RELEVANCY SCORE 82.8

I am using a laptop an when ever I attempt to use .exe from a CD I get a message telling me that I am blocked from using this program because of group policy. How do I disable this Group Policy? Please Help!

A:Group Policy blocking .exe from running from a CD. Help!

Hello,

Really this is something you should talk to your IT Department about. There will be a reason for why they are blocking the program. It maybe malicious.
Dave

Read other 9 answers
RELEVANCY SCORE 81.6

First, I wish to thank you guys for this very awesome board, I know I will have fun learning all the stuff I do not know already about computers, tweaks, and what not.

My Question, and forgive me for putting it here, I had no idea where else to put it, I thought about tutorials, but I know this isn't even an option in win7, I assume it will be moved if needed, by the admins, and thank you, for understanding.

"this file came from another computer and might be blocked to help protect this computer"

How in the dickens do I hack the registry or what ever I need to do, to prevent files from being blocked upon downloading them?
I do a lot of downloading and what not, and its frustrating having to manually them, every single time.

Please understand, I already have a hack "take ownership" installed in my right click menu, to preform muti-files at once.

What I desperately need, it to stop them from being blocked from the beginning, so I don't have to unblock them afterwards.

I assume this must involve a Group Policy hack of some sort?

Thanks in advanced.

A:Group Policy Settings - Blocked Downloads

See if this helps:
Open File Security Warning - Enable or Disable

or even OPTION 2 here:
Open File - Security Warning : Allow or Prevent to Unblock File

Read other 9 answers
RELEVANCY SCORE 80.8

uggghhh!
Security suite has been removed. However, I cannot get past group policy control- although I have run Mcafee, it killed the bugs, now reports all is well...but I cannot engage system restore or admin rights. helllllp!

Read other answers
RELEVANCY SCORE 80.8

I'd like to turn on Windows Firewall. When I go into security center in control panel it says to go to Firewall general tab but it informs me that "Group Policy" is controlling settings. I'm told that no such group policy is in place. This is a Dell laptop that is used on network at office & brought home every day. Running XP SP3.

See attached messages.
 

A:Solved: Group Policy Blocking Firewall Control

Read other 9 answers
RELEVANCY SCORE 80.4

Does anyone know the complimentary settings within Firefox that IE states as Trusted Sites and default intranet security settings?
 

Read other answers
RELEVANCY SCORE 80.4

I'm an idiot when it comes to networking but was asked to setup 2 servers for a local Christian Academy. I have the two servers set up and now I need to set policy for the users but don't have a clue as where to begin.

What I have are three groups I need to set up, Staff, Teachers and students.

Basically we need to set the staff and teachers so they can do things like download programs but not install them and access files for their own groups. Students we need to block access to certain sites, block downloading, installing, cookies, changing backgrounds, homepage and such.

Can anyone help with this. I have searched the web and not having very good comprehensive skills am having a really hard time understanding how to do this.

Thank you and have a great day
 

Read other answers
RELEVANCY SCORE 80.4

hi im new here in windows sevenforum..

im an internet cafe owner and i want to secure my units.. i have volume license and install windows 7 in my clients.

ive heard that windows seven dont have steadystate.. im using deepfreeze but im tired of using it because of patching games thawed and unthawing.. is there a way that i can manage my icafe more likely using steadystate or deepfreeze i wonder if its possible using the group policy...

1. Disable Access To Registry or Edit Registry
2. Disable Autorun / Autoplay
3. Disable or restrict the use of Windows Installer
4. USB Cop (any suggestion freeware but effective)
5. Microsoft Security Essentials
6. Back up every 2nd week.... full patch ng games and softwares...

or any other suggstion thanks

A:Setting Up Group Policy

http://www.infoworld.com/t/malware/m...-windows-7-234

Check this out
There is actually a nice powertool that does it but this may help you as well.

Read other 4 answers
RELEVANCY SCORE 80.4

We are updating our IE settings via GPO from IEM to the newer IE templates, during testing we have encountered the following issue.

Windows 7 OS: IMDB does not play trailers, only shows as buffering. You tube plays videos.
Windows 8 and 8.1: IMDB does not play trailers, only shows as buffering. Same for you tube.

Which settings do I need to enable/ fix?
using dev tool in IE 11 for IMDB I get error SEC7111... So far the dev tool troubleshooting in this lead me to the links below any thoughts as to the GPO settings that could cause this/ provide the fix?
https://msdn.microsoft.com/query/dev12.query?appId=Dev12IDEF1&l=EN-US&k=k(VS.WebClient.Help.SCRIPT5)
https://msdn.microsoft.com/query/dev12.query?appId=Dev12IDEF1&l=EN-US&k=k(VS.WebClient.Help.HTML1500)

Read other answers
RELEVANCY SCORE 79.6

Hello EveryOne,
I need a help to resolve an IE setting problem,

I have an application called deloitte, when i click the help button, it is opens up the following url,
http://www.abatec.deloitte.co.uk/Support/

While opening up the url, i get the following error
"Error in onReadyStateChange
Automation server can't create object"

My machine OS: Win XP - SP2
Browser: IE 6

I have searched in the web about this error, and found out the following setting needs to be enabled in IE,
"Initialize and script ActiveX control not marked as safe".

I asked my office network team to enable the setting (i don't have the permission to do). They told me this setting can't be done for internet zone.
Then i asked them to add this site as "Trusted Site" then enable the setting for "Trusted Sites" zone.

After that i'm not getting the error message, but the page looks same as previous (not loading properly).

So i just asked them to enable the setting for internet zone, just to check wheather enabling the setting in internet zone is working or not.
It is working fine, if they do it for internet zone.
But not working fine if they move to "Trusted sites", then enble the setting for "Trusted zone".

Is there any other way to resolve this error (apart form enabling that settings) (OR)
How to make it work by enabling the setting in "Trusted site" zone

Looking for your help....
Rajkumar

A:IE setting problem in Trusted sites zone

Hello and welcome to TSF

If your system admin has made these settings there isnt anything we can do to get arouund it. Only thing I can think of is trying another browser.

Firefox
http://www.mozilla.com/en-US/firefox/
Opera
http://www.opera.com/

Read other 2 answers
RELEVANCY SCORE 79.6

I am trying to set a wallpaper with a group policy but I can't seem to get it to work without enabling active desktop. When I do enable active desktop the wallpaper loads behind a webpage which sits as the desktop background. Please help how do I set a wallpaper through active directory without having to use active desktop..
Thanks
 

A:Setting a wallpaper with Group Policy

Exactly the same thing here.

I cannot have that webpage on the desktop...

I found some information about making a registry entry for it, but I don't know how to apply a registry entry via GPO.

If it is possible I think this code will work fine.

*This defines the path and style (0-center 1-tile 2-stretch) of the Active Desktop wallpaper and prevents users from changing the image or its presentation
[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\System]
"Wallpaper"="C:\\WINDOWS\\Web\\Logo.bmp"
"WallpaperStyle"="2"

*This defines the path and style of the normal desktop wallpaper.
[HKEY_CURRENT_USER\Control Panel\Desktop]
"Wallpaper"="C:\\WINDOWS\\Web\\Logo.bmp"
"WallpaperStyle"="2"

*This turns off Active Desktop however the restrictions still apply to the normal desktop.
[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer]
"NoActiveDesktop"="1"
If I knew how to make THAT active on the local machines via GPO everything would be fine...

Chris
 

Read other 1 answers
RELEVANCY SCORE 79.2

Ok, so I have been searching google for an easy walk through on how to block sites such as MySpace, Youtube, Facebook and other related sites where my father's employees like to waste company time on. **HOWEVER** After reading, blocking sites through IE's block list and adding domains with IP's seem to have easy work arounds compared to IPSEC/Group Policy.

This route allows for all of xxxxx.myspace.com's (subnets) from being accessed as apposed to finding them all out and entering the domain/subnet combos individually in the host file. So if ANYONE has seen a very easy walkthrough (cause the ones i have seen are win 2000 and/or are vague and more complicated than required, I would greatly appreciate it.

I am going to continue to search the web, and if I find something i'll post just in case this topic benefits others. I'm determined to solve this issue!!!

Take Care!
FP2
 

A:Blocking websites either by IP or Domain with Group Policy / IPSEC (not host file)

Read other 12 answers
RELEVANCY SCORE 78.8

I've been having some serious problems getting my IE trusted sites list configured properly via InTune.  I've gone over it a ton and still cannot figure out why it keeps failing to deploy. 
Not really sure what i'm doing wrong so any assistance would be great.
Configuration profile info is as follows:

UMA-URI: ./Device/Vendor/MSFT/Policy/Config/InternetExplorer/AllowSiteToZoneAssignmentList

Value: 
<Enabled/>
<Data id="IZ_ZonemapPrompt" value="
*.adp.com&#xF000;2&#xF000;
*.adpremotesupport.com&#xF000;2&#xF000;
*.connectcdk.com&#xF000;2&#xF000;
*.lync.com&#xF000;2&#xF000;
*.microsoftonline.com&#xF000;2&#xF000;
*.outlook.com&#xF000;2&#xF000;
*.sharepoint.com&#xF000;2&#xF000;
192.133.214.*&#xF000;2&#xF000;
207.109.69.*&#xF000;2&#xF000;
207.187.38.1&#xF000;2&#xF000;
207.187.52.180&#xF000;2&#xF000;
207.187.64.93&#xF000;2&#xF000;
bmoedrive.com&#xF000;2&#xF000;
dsra1he.ds.adp.com&#xF000;2&#xF000;
dsrac1he.ds.adp.com&#xF000;2&#xF000;
dssda1he.ds.adp.com&#xF000;2&#xF000;
dssda2he.ds.adp.com&#xF000;2&#xF000;
http://207.187.38.1&#xF000;2&#xF000;
http://analytics.vinsolutions.com&#xF000;2&#xF000;
http://C149990&#xF000;2&#xF000;
https://analytics.vinsolutions.com&#xF000;2&#xF000;
https://apps.vinmanager.com&#xF000;2&#xF000;
https://mail.mot... Read more

Read other answers
RELEVANCY SCORE 78.8

Hi all

We have just installed Websense Software for Internet Filtering. We now want to point all our 250+ PCs to the Proxy Server. Rather than doing this individually on each PC, I understand this can be done via Group Policy (GP). I have identified that in the UserConfig, under Windows Settings\Internet Explorer Maintenance\connection you can select Proxy Settings. Here I enable Proxy, set the Proxy IP and to use the same proxy for all addresses.
On saving and assigning the GPO to the workstation, it fails to apply the settings. However, if you manually set the options under the Tools\Connections Tab within IE6 it works fine.

We are running Server 2003 with XP Workstaions (Sp2) with IE6. All fully patched.

Anyone got any ideas!!!!!

Dave:

A:Proxy Server setting via Group Policy

You can make that change in your default domain policy
under the user configuration.
It should work withou applying it to workstations.
Since you are making the change apply to users....no workstations
are needed to be specified.

Read other 3 answers
RELEVANCY SCORE 77.6

Hello,

we would like to have the background image on all our Windows 7 32/64Bit machines rotating. The theme has been created and copied to all computers.
Unfortunately, the GPO setting "Load a specific theme" applies for first logons to a workstation only, not to users who have an existing profile.
How can we set all users/workstations to use the new theme as default automatically? This would be for some hundreds of workstations and woud need to be seemsless for the users. 

Any help is highly appreciated!

Best regards
Matthias

Read other answers
RELEVANCY SCORE 77.6

.how can i make an batch file for especial prompt -(or change setting in registry)- in group policy !
for example : i want change a policy file in this root:/   Computer Configuration\Windows setting\security setting\advanced audit policy\system audit policies/   for example enable
success and failure in check box in IPsec Driver group policy file!
 how can i  define this setting to batch file ?

Read other answers
RELEVANCY SCORE 76.8

I am trying to configure Remote Desktop in Windows 7 RTM†using SSL/TLS authentication and encryption, with a custom certificate (not the default self-signed certificate) and private key. I installed a specific certificate and private key into the Local Computer store under Remote Desktop > Certificates. However, I do not see any way to tell Remote Desktop/Terminal Services to use that cert and key. How do I select that specific cert and key?I tried to connect to the Windows 7 machine from Windows XP running the Remote Desktop Connection Client (mstsc.exe) 6.0. It continues to report the self-signed certificate when connecting, not the custom cert. I tried removing the self-signed certificate and restarting, but†the self-signed certificate gets regenerated (new issued time, and new SHA-1 fingerprint).tsconfig.msc is missing: a post on the MS blogs suggests that it is only available in the Server editions of Windows.In gpedit.msc (Group Policy), I found Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Security, but I do not know what to put in for "Server Authentication Certificate Template", or if that is even the right setting to manipulate. I just want to specify the specific certificate and private key, such as by SHA-1 fingerprint, or by selecting from a drop-down list. Is this possible?

Read other answers
RELEVANCY SCORE 76.8

I am about to deploy Windows 8.1 in our environment.  I am unable to create a Group Policy Preference to manage Internet Explorer 11 however as it is missing from the Group Policy Management Console (only IE 5 thru 10 settings are available).
The server I am managing Group Policy from is Windows 2012 R2 and is therefore running IE11.  I have copied the Group Policy definitions from c:\windows\policydefinitions to our Central Policy Definitions cache which has enabled managment of Win 8.1
but has not extended the GPMC to manage IE11.


How do I add  this option to the GPMC?

A:Managing Internet Explorer 11 setting in Group Policy Preferences

Not a perfect answer, but here you go: http://support.microsoft.com/kb/2898604.
--Josh

Read other 4 answers
RELEVANCY SCORE 76.8

Hi all,
I received this message when i tried to look at the local group policy setting on one of my machines (Windows XP SP3), which is joined in my domain.
"Failed to open group policy object on this computer. You may not have appropriate rights.
Details:
Unspecified error."
note that I am local admin.
It's all started when I was troublshooting WSUS connectivity and i looked at the WinsdowsUpdate.log, the WSUS server was <Null> & WSUS status server <Null>, I tried to force the domain GP by using GPupdate /force, it went fine and asked to
log off, but nothing changed in the WindowsUpdate.log still <Null>. Then i tried to look at the local policy setting.
I searched the internet nothing related to my case.
Thanks in advance for advising.
Mohammed Adel

A:Group policy error: Failed to open group policy object on this computer.

I guess reinstall windows is the solution, I also found one log "event id 1096", related to "registry.pol" it was corrupted.
Regards,
Mohammed Adel

Read other 9 answers
RELEVANCY SCORE 75.2

Hi,
Let me set up the scenario:
We have multiple printers, lets call them Printer1, Printer2, Printer3 and Printer4.  All of these have to be deployed to our devices and Printer1 needs to be set as default.
GPP seems like it should do the trick, so I configure the above four printers, ensuring that Printer1 is set as default in the settings.
Upon logging in by a test user, i see that all four printers have correctly mapped, but a random one is set as default seemingly ignoring the tick box directing otherwise.
I know that if I run a gpupdate, the printers will sort themselves out and Printer1 will be the default.  I also know that logging off and back on will have the same effect.  But as these users will not necessarily be logging into the same device
each time, I would prefer a scenario whereby the right printer is mapped at first logon.
So my questions are as follows:

Is there a configuration of GPP Printers that would allow this to happen at first logon?Can i get gpupdate to run silently via a scheduled task?Can No.2 be done simply without need for additional script files/software installs?
Thanks
Dean

Read other answers
RELEVANCY SCORE 74.4

Windows Vista Home Premium, How can I turn off group policy, If I try to run defender or change startup programs, it will not allow me. Message to contact your system administrator to turn off group policy.  Please help

Read other answers
RELEVANCY SCORE 74

Okay,Here is the SitREP:browsing on Saturday night, my brother apparently downloaded some type of badness disguised as a shockwave update. For the life of me, I could not find any remnants of the trojan, only an empty start up menu file of something called "Digital HQ".Metastasis:Next day it comes to my attention that something called CRAWLER has added itself to my browser, as well as all engine searches being redirected and bounced around to various adscense sites as well as mevio and some others. Manual browsing from navbar is fine. I says to myself okay, "Gibraltar, time to cough up some cold cash and renew" so bang, upgrade my webroot spysweeper to the new antivirus and spysweeper cause I have had it with norton. However interestingly enough i cannot renew my subscription through the program, nor can i update my definitions, nor can i upgrade to the new antiviral features. So it comes to my attention after 3 hrs on the tele with webroot that something is rotten in the state of denmark. So alas, i dive in, though i was trying to avoid this on my day off, to cpu troubleshoot hell. 5 hours later here i reside, i have tried to download the following and been outright blocked by a hidden system on my cpu:Spybot search and destroyMbam(downloads and sweeps but will not update)webroot spysweeper with antivirus 39.95(downloads but will not activate, quarantine, or update definitions)I have successfully been able to download and run these programs:Mbam(will not update, finds nothin... Read more

A:Redirection and Blocking Antiviral and spyware sites/updates and new downloads

pwuzzeee help =(

Read other 3 answers
RELEVANCY SCORE 72.8

Hello, yesterday I just got Just Cause 2 and downloaded it, It worked fine then when I clicked on it to start it said "This program is blocked by group policy. For more information, please contact your system administrator"
My hard drive is pretty empty I would say and I've never encountered this problem before. I searched it up on google and it turns out a lot of people have the same problem, I really want help because I don't want to waste my money.
In other words, I Reaaaaaaally want some help!

Best Regards,

Read other answers
RELEVANCY SCORE 70

Hi everyone,

I have recently been granted admin rights on my work computer.

While the computer was locked down, the Aero visual effects were set to "adjust for best performance".

I can change it to "adjust for best appearance" and the Aero effects appear - until I reboot the computer. After the reboot, the checkbox is still set to "adjust for best appearance" however, the effects are disabled. I have to change the setting, change it back to best appearance and hit OK. Then everything works again.

The friend in IT who granted the admin rights told me that this is due to the group policy our company has set up - and that there is nothing he can do about it.

I have checked gpedit and regedit but could not find any relevant entries.

Do you have any idea how I could automagically adjust the settings back to best appearance after every reboot? I was thinking that if I cannot turn of the group policy myself, then maybe I could write some sort of script that changes to appearance settings for me (instead of me having to do it manually every time).

Looking forward to your thoughts
g333

A:Group policy disables "optimize for best appearance" setting

I have a great idea. We can't help you over ride company policy.
Please go to the bottom of this page and tick on Forum Rules.

Read other 1 answers
RELEVANCY SCORE 66.8

Hi all
For the past 6 months we have received reports of PC's taking up to an hour to get to the login prompt.
All our PC's are running Windows 7 32/64 Bit.
The message is always "Applying Group Policy Local Users and Groups policy"
Once it gets to the login prompt they will login with no problem.
I have enabled GPO logging on 1 PC and the results show as below (sorry for the wall of text) Boot time was 15:16.
I was hoping someone else had come across this issue and maybe has some insight
Network team say "its not the network"!!
Server Team say "Its not DNS or Group Policy" !! 
So its been left with me on the desktop team to diagnose the fault
Regards
Paul Griffiths - NHS Trust in Bristol

GPSVC(534.75c) 15:17:14:459 ProcessGPOs: -----------------------
GPSVC(534.75c) 15:17:14:459 ProcessGPOs: Processing extension Group Policy Local Users and Groups
GPSVC(534.75c) 15:17:14:459 ReadStatus: Read Extension's Previous status successfully.
GPSVC(534.75c) 15:17:14:459 CompareGPOLists:  The lists are the same.
GPSVC(534.75c) 15:17:14:459 GPLockPolicySection: Sid = (null), dwTimeout = 30000, dwFlags = 0
GPSVC(534.75c) 15:17:14:459 LockPolicySection called for user <Machine>
GPSVC(534.75c) 15:17:14:459 Sync Lock Called
GPSVC(534.75c) 15:17:14:459 Writer Lock got immediately.
GPSVC(534.75c) 15:17:14:459 Lock taken successfully
GPSVC(534.75c) 15:17:14:459 ProcessGPOList: Entering for extension Group Policy ... Read more

Read other answers
RELEVANCY SCORE 66.4

I have an SCCM Client deployed to several test PC. The client configures LGPO directing the PC to receive Windows Update from our SCCM server.  However, it fails. WUAHANDLER.LOG shows the following errors:
Enabling WUA Managed server policy to use server:http://xxxxx.xxx.net:8530
Waiting for 2 mins for Group Policy to notify of WUA polucy chnage...
Unable to read existing WUA resultant policy. Error = 0x80070002.
Group Policy settings were overwritten by a higher authority (domain controller) to: Server and Policy NOT CONFIGURED
Failed to Add Update Source for WUAgent of type (2) and id{{.......}}. Error=0x80040692.
I checked domain GPOs and there is no GPO that would cause this conflict.  I ran RSOP to verify.  What I noticed is that gpresult did not show LGPO as being applied. But when I unlinked all the domain GPOs (linked to the PC OU), gpresult showed
LGPO as being applied.
Any ideas or suggestions welcome.
 

A:Group Policy settings were overwritten by a higher authority (domain controller) to: Server and Policy NOT CONFIGURED

Hi,
 
For this issue, please try to refer to the following article;
 
Troubleshooting Group Policy Configuration for Software Updates
 
If this issue persists, for a better support service, please kindly post at the SCCM forum for further help:
 
System Center Configuration Manager Category
 
Alex ZhaoPlease remember to click ?Mark as Answer? on the post that helps you, and to click ?Unmark as Answer? if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Read other 4 answers
RELEVANCY SCORE 65.6

Will either of these allow me to restrict drive access to a single user only? I've tried to restrict drive access with Group Policy Editor but it applies the restriction globally--even to me the administrator.

Could anyone let me know if this is possible and how to do it?

Much thanks.

A:Group Policy Editor or Local Security Policy

I take it that you want to restrict access to this drive to everyone but yourself. Which drive are you referring to, is it locally connected or via a network?

Read other 6 answers
RELEVANCY SCORE 64

I have the newest Internet Explorer and im using Vista. I play a game called Travian and I want to use a 'graffic pack' which loads from my PC.

I had to add the site to my 'trusted sites' for it to work, and it does now.

The only thing is that when I open the site it opens a new IE and loads it in there. As it is the only site in my trusted sites I cant load any other sites with that IE, so I need to go to a different one if that makes sence.

How can I make it so that my trusted sites open with my non-tusted sites (using tabs)?
 

A:Solved: How can I make trusted sites and normal sites open together?

Set your tab preferences in IE, otherwise, try Firefox and set those tab preferences.

I have my Firefox preferences for Tabs set to never open in a new window, and always open at least one tab:
New pages should be opened in: a new tab rather than a new window
Always show the tab bar
When I open a link in a new tab, switch to it immediately
Warn me when closing multiple tabs
Warn me when opening multiple tabs might slow down Firefox

-- Tom
 

Read other 3 answers
RELEVANCY SCORE 64

IE11 tel: Link does not work in trusted sites or intranet sites
If the site is in internet zone the link does work.

Any hints for a fix?

Read other answers
RELEVANCY SCORE 64

hi
pls help me out in this issue . i am having 20 systems i want to impletement group policies on all machines in a workgroup

how can i do that this is an windows 2000 professional environment
thanks
 

A:How to configure group policy in work group

Sneaker.Net.

Walk to each computer and set the policies on each computer. If you are not in a domain environment you are basically have to set each one manually.

My only other thought is if all the computers are exactly the same make and model and you have some type of imaging software. You could make a standard install on one computer with all the settings you want and then use that computer to image all the other computers on your network.
 

Read other 2 answers
RELEVANCY SCORE 63.6

I'm trying to add an internal https FQDN to the trusted zone in group policy.
My question is does it matter if I add https://myserver.mydomain.com/server or will it still work if i leave off the last part and just put in the fqdn https://myserver.mydomain.com
thanks in advance

PS it has to be https even though it's internal

Read other answers
RELEVANCY SCORE 62

I'm running Windows 7 Home Edition. I ave a HP Pavillion g 7 1222 nr Notebook PC. The other night my dog knocked the power cord out of the wall when I got up and turned on my computer l got the following error

Failed to connect to a Windows service. Windows could not connect to the Group Policy Client Service. The problem prevents standard users from logging into the system. As an administrative user you can review the system event log for details about why the system didn't respond.

Had a X on the Speaker and Internet icon in my system tray. Can play movies no sound. As to Internet it said no Internet available which is not true.Then went I try to get into my computer, control panel,and most any other programs I get another error {Z6EE0668A00A-4407-9371-BEB064C98683\0\{05D7B0F4-2121-4EFF-BF68-ED3F69B894D9}The server process could not be started because the configured identity is incorrect check the user name and password.

When I try an open some of my files or programs I get a popup window that wants to know if I want the program to make changes to my hard drive I can't get one to come up at the moment to give more detail. Probably because I have click on most of them at first I clicked yes then I decided that was probably not a good idea. Either way programs still didn't open.

I also had been getting a blank screen popping up every once in a while before all this other happened and on the top it said C:\Program Files (x86)Driver Pack Notifier\bin\Too... Read more

Read other answers
RELEVANCY SCORE 61.6

Is it possible to set administrators to one GP and standard users to another? I want to disable Command Prompt, Task Mgr and lockout all USB and CD drives for standard users but allow administrators to access all of those.

How do i set different group polices depending on user?

Thanks in advance

A:Set Group Policy different for each user group?

Yep. As long as the policies you want to deploy to those groups are per-user (i.e. within the user configuration section of GP Editor), then you can use a tool like Microsoft's GPMC to "security filter" the effects of a GPO to a particular user group. Or, you might want to check out Desktop Policy Manager--www.sdmsoftware.com/desktop_management, which provides a simplified web interface into Group Policy and makes targeting by group much simpler (full disclosure--I work for this company).

Darren

Read other 2 answers
RELEVANCY SCORE 61.2

I use Mozilla firefox and IE8 and with windows 7 I have had difficulty getting the system to recoginze the trusted sites that I enter, for example, when using AOL mail, I have entered the web address for AOL mail in the "trusted site" category multiple times but when I go back to the site it still tells me that it cant verify the security certificate and that I need to manually exempt the security, it also wont let me check the box that says "permanently exempt this site" (the box is gray and not activated) any thoughts?

A:Trusted site blocking

Can be a virus
Run an antivirus scan
Download and run malwarebytes

This is a common sign of a virus

Read other 4 answers
RELEVANCY SCORE 60.8

Comodo Defense+ keeps blocking asghost.exe, a part of Asus Security Protect Manager (definately a trusted program).

Every 20 seconds.
I have added it to "My own Safe Files"

Nothing Changes.

What I want is Comodo to stop blocking asghost from doing its job.

any ideas?

A:Comodo keeps blocking a trusted program

Hi, I was just in Comodo forums yesterday reading for hours. They may be able to help you out. They have tutorials for everything pertaining to CPF. You may want to take a look.http://forums.comodo.com/

Read other 5 answers
RELEVANCY SCORE 60

On Windows 7 with Internet Explorer 9 in a domain environment I have been trying to figure out why users can't add to trusted sites. Spending hours on this. I changed the setting in "Site to Zone assignment list" to disabled and was able to add a site, or so I thought. I add a site, close the dialog and go back in and then ALL the entries in the list have disappeared.

Yes we use Group Policy.

I hate troubleshooting this, I hope someone can expalin this (without telling me to "Search"). I have come across MANY issues similar but have yet to find a solution.

A:Can't add to TRUSTED SITES! SItes disappear

Have you seen this? Internet Explorer – add domains to security zones using script | gfisk.com

Read other 1 answers
RELEVANCY SCORE 60

When I bring up IE, no matter what site I go to IE says it's a Trusted site. I have reset everything to Default settings in IE but it still says every site is a Trusted site.
 

A:All sites showing up as Trusted Sites

Hi, go here and download HJT, copy to its own folder and run the programme. DO NOT FIX anything yet.

Save the log file and copy and paste it here, someone will take a look at it for you.

regards
keith
 

Read other 3 answers
RELEVANCY SCORE 59.6

Greetings!,

I have a machine with the following specs:




HP Compaq Pro 6305 MT
Windows 7 Professional (x64) Service Pack 1 (build 7601)
3.80 gigahertz AMD A10-5800B APU with Radeon HD Graphics




192 kilobyte primary memory cache




4,096 kilobyte secondary memory cache




64-bit ready




Multi-core (2 total)




Hyper-threaded (4 total)




Board: HP 1850




Serial Number: 2UA3470MW8




Bus Clock: 100 megahertz




BIOS: HP K06 v02.57 8/16/2013





As of 04/25/2017 it refuses to go to http sites, but it will go to https sites.  I have used Explorer, Chrome, and Firefox with the same results.  The Websites are saved as favorites in each browser, and we have gone to them for years, now they
all say that the webpage cannot be displayed, check that I have entered the url correctly and try again.  However, if I go into the address bar and just add "s" behind the http it goes to the site with no problem.  Why is this happening
now after all this time going to these sites?  What has changed and how can I fix it?  I have reset explorer, cleared history, cache, etc, reset Winsock, and IPV4, reset the following:  
regsvr32 softpub.dll
regsvr32 wintrust.dll
regsvr32 initpki.dll
regsvr32 dssenh.dll
regsvr32 rsaenh.dll
regsvr32 gpkcsp.dll
regsvr32 sccbase.dll
regsvr32 slbcsp.dll
regsvr32 cryptdlg.dll

not using a proxy, not using Windows Firewall, We have Sym... Read more

Read other answers
RELEVANCY SCORE 59.6

I have windows 7 and have updated to sp1 and once re-booted all working but explorer will only allow me to get access to https sites but not http sites. Can anyone help

A:Can access https sites but not http sites

What Antivius product are you using?
Do you have Zonealarm installed?
Lastly did this occur immediately upon reboot from the SP1 update or sometime since then?

Read other 6 answers
RELEVANCY SCORE 58.4

Not everyone will be interested, but:
I've found a reference to a MSDN site which provides useful info.

Did you ever want to know or need to know the correspondence between a registry setting and a group policy setting?
I just wish this had existed earlier.

I'm giving the link to John Savill's blog on this. Therein he has the link to the msdn page.

This MSDN url i bookmark.

Here's the link to John's article:
Q: Is there a web site that allows an easy search of all the Group Policy settings that exist?

A:Registry Setting, Group Pollicy Setting, Explanation

looks great.. I'm going to forward this to my network admin. He'll love it. Thanks.

Read other 2 answers
RELEVANCY SCORE 58.4

Its wierd i just recovered from a serious spyware attack and all of a sudden all the sites i go to there all trusted sites , after i took out everything i defaulted everything but it still says Trusted Sites :\
 

A:Trusted Sites??

From your broswer go to - Tools, Internet Options, Security,Trusted Sites, Sites and delete all the ones you don't wont. If its clear might be some left over spyware.
 

Read other 1 answers