Over 1 million tech questions and answers.

Group Policy Applies Policy EXCEPT for 1 Setting!

Q: Group Policy Applies Policy EXCEPT for 1 Setting!

Hi all!

Windows 7 Pro 32 bit on a domain

I've NEVER seen this before and I cant figure it out.

I have a group policy set on an OU named LAPTOPS. The policy gets applied, however the User Config\Windows Setting\Scripts\Logon DOES NOT. When you run the GPRESULTS on the laptop, I see the policy settings being applied EXCEPT for the LOGON script. Its not there. I dont see any errors and cant figure out why Windows would ignore this one setting in the policy but apply the rest. I've tried deleting and recreating the policy but that does not work. Also made sure I did a GPUPDATE /FORCE

Thanks in advance!

RELEVANCY SCORE 200
Preferred Solution: Group Policy Applies Policy EXCEPT for 1 Setting!

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: Group Policy Applies Policy EXCEPT for 1 Setting!

Is a policy enforced on a domain or site level?

Read other 7 answers
RELEVANCY SCORE 129.6

Hi Team,
Please let me know what is the standard Setting for below Security Setting ( Audit Policy ), which are followed in most of the Company.

For Eg:- Should i set ' Success & Failure ' for ' Audit account logon events ' & for ' Audit account management' etc...




Thanks & Regards,
Param
www.paramgupta.blogspot.com

Read other answers
RELEVANCY SCORE 115.6

Hi all,
I received this message when i tried to look at the local group policy setting on one of my machines (Windows XP SP3), which is joined in my domain.
"Failed to open group policy object on this computer. You may not have appropriate rights.
Details:
Unspecified error."
note that I am local admin.
It's all started when I was troublshooting WSUS connectivity and i looked at the WinsdowsUpdate.log, the WSUS server was <Null> & WSUS status server <Null>, I tried to force the domain GP by using GPupdate /force, it went fine and asked to
log off, but nothing changed in the WindowsUpdate.log still <Null>. Then i tried to look at the local policy setting.
I searched the internet nothing related to my case.
Thanks in advance for advising.
Mohammed Adel

A:Group policy error: Failed to open group policy object on this computer.

I guess reinstall windows is the solution, I also found one log "event id 1096", related to "registry.pol" it was corrupted.
Regards,
Mohammed Adel

Read other 9 answers
RELEVANCY SCORE 112

Windows Vista Home Premium, How can I turn off group policy, If I try to run defender or change startup programs, it will not allow me. Message to contact your system administrator to turn off group policy.  Please help

Read other answers
RELEVANCY SCORE 109.2

hi im new here in windows sevenforum..

im an internet cafe owner and i want to secure my units.. i have volume license and install windows 7 in my clients.

ive heard that windows seven dont have steadystate.. im using deepfreeze but im tired of using it because of patching games thawed and unthawing.. is there a way that i can manage my icafe more likely using steadystate or deepfreeze i wonder if its possible using the group policy...

1. Disable Access To Registry or Edit Registry
2. Disable Autorun / Autoplay
3. Disable or restrict the use of Windows Installer
4. USB Cop (any suggestion freeware but effective)
5. Microsoft Security Essentials
6. Back up every 2nd week.... full patch ng games and softwares...

or any other suggstion thanks

A:Setting Up Group Policy

http://www.infoworld.com/t/malware/m...-windows-7-234

Check this out
There is actually a nice powertool that does it but this may help you as well.

Read other 4 answers
RELEVANCY SCORE 109.2

We are updating our IE settings via GPO from IEM to the newer IE templates, during testing we have encountered the following issue.

Windows 7 OS: IMDB does not play trailers, only shows as buffering. You tube plays videos.
Windows 8 and 8.1: IMDB does not play trailers, only shows as buffering. Same for you tube.

Which settings do I need to enable/ fix?
using dev tool in IE 11 for IMDB I get error SEC7111... So far the dev tool troubleshooting in this lead me to the links below any thoughts as to the GPO settings that could cause this/ provide the fix?
https://msdn.microsoft.com/query/dev12.query?appId=Dev12IDEF1&l=EN-US&k=k(VS.WebClient.Help.SCRIPT5)
https://msdn.microsoft.com/query/dev12.query?appId=Dev12IDEF1&l=EN-US&k=k(VS.WebClient.Help.HTML1500)

Read other answers
RELEVANCY SCORE 109.2

I'm an idiot when it comes to networking but was asked to setup 2 servers for a local Christian Academy. I have the two servers set up and now I need to set policy for the users but don't have a clue as where to begin.

What I have are three groups I need to set up, Staff, Teachers and students.

Basically we need to set the staff and teachers so they can do things like download programs but not install them and access files for their own groups. Students we need to block access to certain sites, block downloading, installing, cookies, changing backgrounds, homepage and such.

Can anyone help with this. I have searched the web and not having very good comprehensive skills am having a really hard time understanding how to do this.

Thank you and have a great day
 

Read other answers
RELEVANCY SCORE 108.8

Hi all
For the past 6 months we have received reports of PC's taking up to an hour to get to the login prompt.
All our PC's are running Windows 7 32/64 Bit.
The message is always "Applying Group Policy Local Users and Groups policy"
Once it gets to the login prompt they will login with no problem.
I have enabled GPO logging on 1 PC and the results show as below (sorry for the wall of text) Boot time was 15:16.
I was hoping someone else had come across this issue and maybe has some insight
Network team say "its not the network"!!
Server Team say "Its not DNS or Group Policy" !! 
So its been left with me on the desktop team to diagnose the fault
Regards
Paul Griffiths - NHS Trust in Bristol

GPSVC(534.75c) 15:17:14:459 ProcessGPOs: -----------------------
GPSVC(534.75c) 15:17:14:459 ProcessGPOs: Processing extension Group Policy Local Users and Groups
GPSVC(534.75c) 15:17:14:459 ReadStatus: Read Extension's Previous status successfully.
GPSVC(534.75c) 15:17:14:459 CompareGPOLists:  The lists are the same.
GPSVC(534.75c) 15:17:14:459 GPLockPolicySection: Sid = (null), dwTimeout = 30000, dwFlags = 0
GPSVC(534.75c) 15:17:14:459 LockPolicySection called for user <Machine>
GPSVC(534.75c) 15:17:14:459 Sync Lock Called
GPSVC(534.75c) 15:17:14:459 Writer Lock got immediately.
GPSVC(534.75c) 15:17:14:459 Lock taken successfully
GPSVC(534.75c) 15:17:14:459 ProcessGPOList: Entering for extension Group Policy ... Read more

Read other answers
RELEVANCY SCORE 108.4

I have an SCCM Client deployed to several test PC. The client configures LGPO directing the PC to receive Windows Update from our SCCM server.  However, it fails. WUAHANDLER.LOG shows the following errors:
Enabling WUA Managed server policy to use server:http://xxxxx.xxx.net:8530
Waiting for 2 mins for Group Policy to notify of WUA polucy chnage...
Unable to read existing WUA resultant policy. Error = 0x80070002.
Group Policy settings were overwritten by a higher authority (domain controller) to: Server and Policy NOT CONFIGURED
Failed to Add Update Source for WUAgent of type (2) and id{{.......}}. Error=0x80040692.
I checked domain GPOs and there is no GPO that would cause this conflict.  I ran RSOP to verify.  What I noticed is that gpresult did not show LGPO as being applied. But when I unlinked all the domain GPOs (linked to the PC OU), gpresult showed
LGPO as being applied.
Any ideas or suggestions welcome.
 

A:Group Policy settings were overwritten by a higher authority (domain controller) to: Server and Policy NOT CONFIGURED

Hi,
 
For this issue, please try to refer to the following article;
 
Troubleshooting Group Policy Configuration for Software Updates
 
If this issue persists, for a better support service, please kindly post at the SCCM forum for further help:
 
System Center Configuration Manager Category
 
Alex ZhaoPlease remember to click ?Mark as Answer? on the post that helps you, and to click ?Unmark as Answer? if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Read other 4 answers
RELEVANCY SCORE 108

I am trying to set a wallpaper with a group policy but I can't seem to get it to work without enabling active desktop. When I do enable active desktop the wallpaper loads behind a webpage which sits as the desktop background. Please help how do I set a wallpaper through active directory without having to use active desktop..
Thanks
 

A:Setting a wallpaper with Group Policy

Exactly the same thing here.

I cannot have that webpage on the desktop...

I found some information about making a registry entry for it, but I don't know how to apply a registry entry via GPO.

If it is possible I think this code will work fine.

*This defines the path and style (0-center 1-tile 2-stretch) of the Active Desktop wallpaper and prevents users from changing the image or its presentation
[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\System]
"Wallpaper"="C:\\WINDOWS\\Web\\Logo.bmp"
"WallpaperStyle"="2"

*This defines the path and style of the normal desktop wallpaper.
[HKEY_CURRENT_USER\Control Panel\Desktop]
"Wallpaper"="C:\\WINDOWS\\Web\\Logo.bmp"
"WallpaperStyle"="2"

*This turns off Active Desktop however the restrictions still apply to the normal desktop.
[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer]
"NoActiveDesktop"="1"
If I knew how to make THAT active on the local machines via GPO everything would be fine...

Chris
 

Read other 1 answers
RELEVANCY SCORE 107.6

Will either of these allow me to restrict drive access to a single user only? I've tried to restrict drive access with Group Policy Editor but it applies the restriction globally--even to me the administrator.

Could anyone let me know if this is possible and how to do it?

Much thanks.

A:Group Policy Editor or Local Security Policy

I take it that you want to restrict access to this drive to everyone but yourself. Which drive are you referring to, is it locally connected or via a network?

Read other 6 answers
RELEVANCY SCORE 106.8

Hi all

We have just installed Websense Software for Internet Filtering. We now want to point all our 250+ PCs to the Proxy Server. Rather than doing this individually on each PC, I understand this can be done via Group Policy (GP). I have identified that in the UserConfig, under Windows Settings\Internet Explorer Maintenance\connection you can select Proxy Settings. Here I enable Proxy, set the Proxy IP and to use the same proxy for all addresses.
On saving and assigning the GPO to the workstation, it fails to apply the settings. However, if you manually set the options under the Tools\Connections Tab within IE6 it works fine.

We are running Server 2003 with XP Workstaions (Sp2) with IE6. All fully patched.

Anyone got any ideas!!!!!

Dave:

A:Proxy Server setting via Group Policy

You can make that change in your default domain policy
under the user configuration.
It should work withou applying it to workstations.
Since you are making the change apply to users....no workstations
are needed to be specified.

Read other 3 answers
RELEVANCY SCORE 105.6

Hello,

we would like to have the background image on all our Windows 7 32/64Bit machines rotating. The theme has been created and copied to all computers.
Unfortunately, the GPO setting "Load a specific theme" applies for first logons to a workstation only, not to users who have an existing profile.
How can we set all users/workstations to use the new theme as default automatically? This would be for some hundreds of workstations and woud need to be seemsless for the users. 

Any help is highly appreciated!

Best regards
Matthias

Read other answers
RELEVANCY SCORE 105.6

.how can i make an batch file for especial prompt -(or change setting in registry)- in group policy !
for example : i want change a policy file in this root:/   Computer Configuration\Windows setting\security setting\advanced audit policy\system audit policies/   for example enable
success and failure in check box in IPsec Driver group policy file!
 how can i  define this setting to batch file ?

Read other answers
RELEVANCY SCORE 104.4

I am about to deploy Windows 8.1 in our environment.  I am unable to create a Group Policy Preference to manage Internet Explorer 11 however as it is missing from the Group Policy Management Console (only IE 5 thru 10 settings are available).
The server I am managing Group Policy from is Windows 2012 R2 and is therefore running IE11.  I have copied the Group Policy definitions from c:\windows\policydefinitions to our Central Policy Definitions cache which has enabled managment of Win 8.1
but has not extended the GPMC to manage IE11.


How do I add  this option to the GPMC?

A:Managing Internet Explorer 11 setting in Group Policy Preferences

Not a perfect answer, but here you go: http://support.microsoft.com/kb/2898604.
--Josh

Read other 4 answers
RELEVANCY SCORE 104.4

I am trying to configure Remote Desktop in Windows 7 RTM using SSL/TLS authentication and encryption, with a custom certificate (not the default self-signed certificate) and private key. I installed a specific certificate and private key into the Local Computer store under Remote Desktop > Certificates. However, I do not see any way to tell Remote Desktop/Terminal Services to use that cert and key. How do I select that specific cert and key?I tried to connect to the Windows 7 machine from Windows XP running the Remote Desktop Connection Client (mstsc.exe) 6.0. It continues to report the self-signed certificate when connecting, not the custom cert. I tried removing the self-signed certificate and restarting, but the self-signed certificate gets regenerated (new issued time, and new SHA-1 fingerprint).tsconfig.msc is missing: a post on the MS blogs suggests that it is only available in the Server editions of Windows.In gpedit.msc (Group Policy), I found Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Security, but I do not know what to put in for "Server Authentication Certificate Template", or if that is even the right setting to manipulate. I just want to specify the specific certificate and private key, such as by SHA-1 fingerprint, or by selecting from a drop-down list. Is this possible?

Read other answers
RELEVANCY SCORE 103.2

We have a lot of group policy settings enabled in this environment. We have an extremely strange issue where it is not allowing us to download content (in this case a .rdp file) over Https but will work over http. It does not say that it is not allowed but
instead of asking if we want to open the file its asking us to save the file which is not permitted. If we disable the GPO it will allow us to hit the open button.
 
Does anyone know which policy might be causing this?

A:Group policy setting blocking downloads from https even on trusted sites

We were able to figure it out!
 
the GPO was under:
 
User Configuration\Policies\Administrative Templates\Windows Components\ Internet Explorer\Internet Control Panel\Security Pages\Advanced Page\Do not save encrypted pages to disk.
 
Users are not allowed to save files to the disk (only temp files for trusted sites) So that GPO was preventing the temp directory save so everything was denied.

Read other 4 answers
RELEVANCY SCORE 102.4

Hi,
Let me set up the scenario:
We have multiple printers, lets call them Printer1, Printer2, Printer3 and Printer4.  All of these have to be deployed to our devices and Printer1 needs to be set as default.
GPP seems like it should do the trick, so I configure the above four printers, ensuring that Printer1 is set as default in the settings.
Upon logging in by a test user, i see that all four printers have correctly mapped, but a random one is set as default seemingly ignoring the tick box directing otherwise.
I know that if I run a gpupdate, the printers will sort themselves out and Printer1 will be the default.  I also know that logging off and back on will have the same effect.  But as these users will not necessarily be logging into the same device
each time, I would prefer a scenario whereby the right printer is mapped at first logon.
So my questions are as follows:

Is there a configuration of GPP Printers that would allow this to happen at first logon?Can i get gpupdate to run silently via a scheduled task?Can No.2 be done simply without need for additional script files/software installs?
Thanks
Dean

Read other answers
RELEVANCY SCORE 101.6

I'm running Windows 7 Home Edition. I ave a HP Pavillion g 7 1222 nr Notebook PC. The other night my dog knocked the power cord out of the wall when I got up and turned on my computer l got the following error

Failed to connect to a Windows service. Windows could not connect to the Group Policy Client Service. The problem prevents standard users from logging into the system. As an administrative user you can review the system event log for details about why the system didn't respond.

Had a X on the Speaker and Internet icon in my system tray. Can play movies no sound. As to Internet it said no Internet available which is not true.Then went I try to get into my computer, control panel,and most any other programs I get another error {Z6EE0668A00A-4407-9371-BEB064C98683\0\{05D7B0F4-2121-4EFF-BF68-ED3F69B894D9}The server process could not be started because the configured identity is incorrect check the user name and password.

When I try an open some of my files or programs I get a popup window that wants to know if I want the program to make changes to my hard drive I can't get one to come up at the moment to give more detail. Probably because I have click on most of them at first I clicked yes then I decided that was probably not a good idea. Either way programs still didn't open.

I also had been getting a blank screen popping up every once in a while before all this other happened and on the top it said C:\Program Files (x86)Driver Pack Notifier\bin\Too... Read more

Read other answers
RELEVANCY SCORE 94.8

Hi everyone,

I have recently been granted admin rights on my work computer.

While the computer was locked down, the Aero visual effects were set to "adjust for best performance".

I can change it to "adjust for best appearance" and the Aero effects appear - until I reboot the computer. After the reboot, the checkbox is still set to "adjust for best appearance" however, the effects are disabled. I have to change the setting, change it back to best appearance and hit OK. Then everything works again.

The friend in IT who granted the admin rights told me that this is due to the group policy our company has set up - and that there is nothing he can do about it.

I have checked gpedit and regedit but could not find any relevant entries.

Do you have any idea how I could automagically adjust the settings back to best appearance after every reboot? I was thinking that if I cannot turn of the group policy myself, then maybe I could write some sort of script that changes to appearance settings for me (instead of me having to do it manually every time).

Looking forward to your thoughts
g333

A:Group policy disables "optimize for best appearance" setting

I have a great idea. We can't help you over ride company policy.
Please go to the bottom of this page and tick on Forum Rules.

Read other 1 answers
RELEVANCY SCORE 88.4

hi
pls help me out in this issue . i am having 20 systems i want to impletement group policies on all machines in a workgroup

how can i do that this is an windows 2000 professional environment
thanks
 

A:How to configure group policy in work group

Sneaker.Net.

Walk to each computer and set the policies on each computer. If you are not in a domain environment you are basically have to set each one manually.

My only other thought is if all the computers are exactly the same make and model and you have some type of imaging software. You could make a standard install on one computer with all the settings you want and then use that computer to image all the other computers on your network.
 

Read other 2 answers
RELEVANCY SCORE 86.4

Running XP home on a Dell inspiron 8600 notebook. Some time back Dell had me do a complete format and reload because I had a display problem. Since then I have been unable to send anthing from this computer over my network or change firewall settings because it tells me it is not allowed because of group policy. This is a home system and I never used group policy and it is my understanding this is not part of XP home. How can this be? What must I do to resolve this problem?
Spiders
 

A:Group Policy

Posted to move to Windows XP area.

Zee
 

Read other 3 answers
RELEVANCY SCORE 86.4

I've been attempting to change the group policy on my new laptop so it no longer forces a classic start menu. I've added the group policy from the MMC and altered it there, however I still do not have the option for the XP start menu. I've altered it on the admin account with success but I seem to be missing something here. . . Possibly in the system.adm file however I haven't been able to discern the gobbledegook to find what I'm really looking for. I'm also too chicken to go poking around in the registry without knowing exactly what I'm looking for. I appreciate your thoughts.
 

A:group policy

Read other 8 answers
RELEVANCY SCORE 86.4

Hello.

I have a stand alone XP pro computer that is not (as far as I know) part of a Domain.

I have found many indicators that my machine is being fed Group Policy from a Domain controller.

I would like to know how this could be when I have not attempted to join a Domain.

Perhaps someone could give me a reasonable explanation why all my OS settings, security, software firewall, registry and even spoofed MAC addresses appear to be set by Group Policy dispite the fact my computer is not (as far as I know) a member of a Domain.

Thanks.

-DJ

A:Group Policy

So I assume you are in a LAN with domain controllers?

Did you check Computer Properties / Computer Name?
Does it say you are in a domain or in a workgroup?
And if you click the Change button, is the domain or workgroup radio button checked?

Read other 3 answers
RELEVANCY SCORE 86.4

I have got background set on group policy for all computers on my domain to have the same background and it works on all the computers with sp1 installed but it dosnt seem to show up with computers on sp3. Does anyone know how i can get it to work?
 

Read other answers
RELEVANCY SCORE 86.4

How can I set a group policy to a particular OU in server 2003, so that none of the users in that OU can use flash disks or CD ROMs.
 

Read other answers
RELEVANCY SCORE 86.4

Hello there,
I have a question about group policy.
I have to set up a computer in our company that will only be allowed to access one website, the company does not want the employee to surf the internet. So how would I set it up to be able to only go to the one website or domain.
The machine I am setting up is running Windows 2K and the Server version is Server 2000.
Thank you.
Richard F.
 

A:Group Policy help

This may be a local security policy not sure
 

Read other 2 answers
RELEVANCY SCORE 86.4

Hello,

I hope I am in the right thread, well anyways, my supervisor wants to disable all the games in the company, so I go to my main DM, put everyone in one group, (domain/security group or should I put it in domain/distribution?) and go to the OU group policy, then I look under all the settings and try and see if I can disable the games folder, or just the games themselves, i could not find it, can anyone point or give me the path (folder) that i can disable it in the group policy? Also, can group policy work in a domain administrator or just an administrator? the reason is i tried to test out by disabling me from getting into control panel, but i can still see it, i am a domain admin. Also do I put the users or do I put the computers in the group?

thank you
 

A:Group Policy in the OU

Siten0308 said:

Hello,

I hope I am in the right thread, well anyways, my supervisor wants to disable all the games in the company, so I go to my main DM, put everyone in one group, (domain/security group or should I put it in domain/distribution?) and go to the OU group policy, then I look under all the settings and try and see if I can disable the games folder, or just the games themselves, i could not find it, can anyone point or give me the path (folder) that i can disable it in the group policy? Also, can group policy work in a domain administrator or just an administrator? the reason is i tried to test out by disabling me from getting into control panel, but i can still see it, i am a domain admin. Also do I put the users or do I put the computers in the group?

thank youClick to expand...
If I remember correctly, in the policy OU, you have to block access to the .exes for the games, but I can't remember exactly where it is. But I know it can be done because I've done it before.
 

Read other 1 answers
RELEVANCY SCORE 86.4

Hi there,

I have a network scenario which used to be solved with Go-Back, which would restore our 40 pc's in our school computer suite perfectly.

We would now like to build a clone and set some group policy lockdown and remove go-back, as its giving us problems. I have gone through and made most changes to the "adminstrative template" that would suit our scenario. When logging on as a test user this works perfectly. However these policys also affect administrators. Is this the way group policy works or is there a way to set the policys just for certain groups e.g 'domain users'.

Sorry no previous experience with group policy what so ever. I have mass reading for this evening but any tips in the mean time would be much appreciated.

Thanks

Cal
 

A:Group Policy help?

Please do not double post.
http://forums.techguy.org/windows-nt-2000-xp/553273-new-group-policy.html
 

Read other 1 answers
RELEVANCY SCORE 86.4

My network is made of windows 2000 server and XP clients. I have created a group policy (IE) in active directory by going to User Config->Internet Explorer Maintenance ->Security->Security zone and Content Rate->content rating modify setting , and added my trusted sites and block the rest. This group policy was assign to an Test OU. It worked fine during test. I reboot the clinet pc sitll worked out fine. But after a day I checked again, policy is there but it would not take effect. Unless it is enabled locally at each machine thru IE content advisor. I have updated group policy on local machine, there is no other policy on that OU, the group policy is marked with no override, block policy inheritance is marked. How can I make the content advisory to stay in enable? Why the policy is not forced thru the domain?
Thanks for your help.
 

Read other answers
RELEVANCY SCORE 86.4

Group Policy has been set on a laptop, that is not in a network. How can you turn this off so the single computer can control it's firewall again? I tried looking in the MMC but have been unable to locate group policy. I think that my dad let someone at his wifi company do a remote desktop on his computer, and they left the group policy turned on. Also, when you open IE it goes only to one web page theirs. I tried deleting the cookies, temp internet files, etc. All the computer repair company wants to do is dump the hard drive, leaving a 73 yr old to install all the software and hardware again.

Thank you
Lorna

A:Group Policy

In order to access the Group Policy Editor, use "gpedit.msc" (without the quotes of course) from the "Run" window.

I'm not certain where in a Policy you will find what you are seeking, it's been a while since I've tinkered around in here. Just be careful as the system could get really locked down depending on what is changed.

Read other 1 answers
RELEVANCY SCORE 86.4

At work, the domain I am in creates an icon on my desktop every time I log in.

It's REALLY ANNOYING, especially as it's for the can't-help-with-that desk, who I never use.

Turns out this is created by group policy.

I have asked for them to modify my user so it does not get created, but as I don't have admin rights on this particular domain server, as a fallback, I'm looking to see if I can't mess with the policy on my desktop - or at least block it from creating the damn icon... any clues form anyone as to how, would be most welcome!!!!

A:Group Policy....

Sorry but it would not be proper to assist you in removing something that your employers are fully entitled to add to the system you use - however insignificant this item would be

Read other 6 answers
RELEVANCY SCORE 86.4

does anybody know how to restrict only limited users is group policy ie if i do it now say restrict task manager i restricts it on all admin accounts to i only want that to happen on limited ones

someone please reply need to know

Read other answers
RELEVANCY SCORE 86.4

Can anyone help or advise please.

I have a situation where I'm about to deploy 20 desktops and a few laptops along with an Exchange 2007 Server along with an ISA Server. At this time I want to take the opportunity to make sure that our Group Policy is all active and correct and restrict items like software installation.

The only problem I have, is that one of our main software applications, currently requires the users to have local admin access, which I'm afraid will over-ride any restrictions I enforce in the GPO.

Is there anyway of resolving this?

Thanks
 

A:Group Policy

I always recommend making users non-local admins. Unless you use software restrictions in Group Policy, you really can't completely prevent users from installing all pieces of software. But standard users typically have issues installing software.

As far as your one application, I would recommend taking a look at FileMon and RegMon at http://www.sysinternals.com. You can use those two utilities to monitor file and registry activity in real time. When a standard user encounters a problem, you'll know where and can make permission changes on your client to allow them to do what they need to without making them an admin. This has worked for me time and time again.

Good luck.
 

Read other 2 answers
RELEVANCY SCORE 86.4

Can comeone tell me how to enable a Group Policy on the server so that no one can use their USB Flash Disks. I'm using a Win Server 2003
 

Read other answers
RELEVANCY SCORE 86.4

Hi, I have got a server an xp machine, I have setup the option so that it can connect to the servers domain via system properties. I have tried create a Group policy for the domain however the computer doesn't apply the policy, obviously im doing something wrong but I don't no what. I login to the XP Pro machine with the domain and a username and password I have setup on the machine, but no polices work. Does it need to do it before logon? If so how do i set this up?

If someone could help and tell me what I need to do to get this setup, that would be great.

Below is a screenshot of what I have
 

Read other answers
RELEVANCY SCORE 86.4

How do I get rid of group policy?

It's doing my head in now -
domain users can't access the following;

outlook/express
windows media player
internet explorer
msn messenger

Please Help in getting rid of it - or fixing it - I've disabled them supposedly but computers still pick them up, and I've done gpupdate on various computers to no avail.

JoneeJay
 

Read other answers
RELEVANCY SCORE 86.4

First let me apologize if this is the stupidest question of all time.

Next let me introduce myself, my name is Craig and I teach in a school in Resolute Bay, Nunavut, Canada... 600 miles above the Arctic Circle. There are no techs up here to help me with my problem! I have the task of setting up our new server running windows 2003. I have NEVER setup nor worked on a server before! I have to learn everything as I go.

That being said my problem may be something that I don't see, maybe I created my users, groups or OU wrong. But the problem that I am having now is group policies.

I have installed the Group Policy Management Console snap-on (or is that snap-in). And here is what I have done.

I created an OU called school this was created right under my domain. Then I created another OU called students and another on grade 9-12.

domain
- school
- students
- grade 9-12

Then in the "active directory users and computers" I created a user in the grade 9-12 OU called test_t. This user use a profile set to \\server\profiles$\%USERNAME% this roaming profile work fine.

SO, I want to create a group policy that controls my users, so I can set proxy, home pages... you know group policy stuff!

So in the GPMC I right click "Group Policy Objects" and go to "new". Give my new policy a name "test".

Next I right click my OU students and "Link an existing GPO", and select "test" from the list.

Then I right click the GPO &qu... Read more

A:Group Policy HELP

Read other 6 answers
RELEVANCY SCORE 86.4

Hello on windows server i have set up the group policy as a test with it so you cant get into control panel. I logged in with the user on my client pc with the user but it still lets me into control panel the group policy isnt working on the client pc's. I tried logging into the windows server computer and it didnt let me in control panel.

Does anyone know how to fix it?
 

A:Group Policy

anyone?
 

Read other 2 answers
RELEVANCY SCORE 86.4

hi
i have a laptop with a limited account.
currently it has group policy on it which blocks me from running EXE's.
i have uploaded a pic showing what happens when i open one.



i have noticed that when i run the update file from Adobe to update flash it works straight off the desktop. i want to know if there is a way to digitally sign another exe the same as the adobe flash file.
there was a way to run EXE's by putting them in this folder:
C:\Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\New Folder
or
C:/Program Files/adobe/Photoshop elements 8/Presets/Games

they all worked till they updated the group policy to block them.

is there anyone who can help?

A:Help with group policy

Hi Josh,

I speak under correction, but I don't think we can't really help you with that since we would be subverting your employers attempts at administrating their IT systems. The forum administrators and moderators will correct me if I am wrong.

Your best bet is to contact your IT adminstrator about this.

Regards,
Golden

Read other 3 answers
RELEVANCY SCORE 86.4

Hi there,

I hope someone here can help me as I'm sooo stuck.

I am having a problem trying to get group policy to work. The was it is setup is as follows:

Location 1
MS Server 2003 - User using Terminal Server and the group policy works fine

Location 2
This location is connected to location 1 via Draytek Lan to Lan and is talking to each other.
MS Server 2003 R2 joined domain to Location 1

On any PC in location 1 as a terminal server user, the group policy loads perfect with all the correct restrictions but when anyone logins in from location 2 (not terminal server), the policy will not apply at all but logs in ok.

I am soooo confused and I need help so plllleeeaassse, can you try and help me find why this is the case.

Many Thanks in advance.
 

Read other answers
RELEVANCY SCORE 86.4

Hey guys, I got my domain to work after a month, all users can sign in etc.
But I want to edit the group policy a bit

In a list can you tell me if this is possible. (It must be, my school has done it)
1. Automatically map a network drive to a specific drive letter
2. Enable the windows sidebar and choose what gadgets they are on.
3. Choose whats on the desktop
4. Lastly, A protected folder for one person each (e.g If another user clicks on it says access is denied)

Thank you in advance

A:Group Policy

1) A logon script would be best in this regards.
4) In AD you can specify a home folder which is specific to a user. The folder is just a share where you only allow the specific user to has access (permission).

Read other 2 answers
RELEVANCY SCORE 86.4

Okay, I've done some research on XP Professional Group Policy, and have browsed the interface via the gpedit.msc

Now I'm ready to make a huge step (for me anyway) and that is disabling some features on my kid's "limited" XP accounts. Before I make any changes, however, I need to know I'm going about this in the right way.

I have 3 accounts set up on my laptop: 1 admin account, 2 limited accounts for my kids.

My Goal: to remove ready access to IE, Windows Updates, Add/Remove Programs, My Computer (so they can't delete any files from any directories), or anything else that a 4 year old and 7 year old might do to wreak havoc or go places they shouldn't be when I'm turning my back for a moment. Note that I say "ready" access to these things. I do understand that there are many ways to go about invoking/navigating to these applications/areas, but I figure I've got a while yet before my 7 year old figures out how to circumvent things. Removing the IE icon from the desktop, for example, should be enough for now.

I have been told using Group Policy will enable me to do this. I'm game to try this, but I've also read where I could render my entire machine useless even to the admin account. Soooo, I'm a little hesitant to do so.

Q: From my research, I'm assuming that as long as I'm logged into my kid's "User Configuration" in GP and I DON'T touch anything in "Computer Con... Read more

Read other answers
RELEVANCY SCORE 86.4

Simple question really for someone who knows the answer that is. What do i type to get gpol up again please? start/run .....? Cheers, really appreciate it. Max.
XP Pro sp2.
 

A:Group Policy

Hi and Welcome!
In the run box you type gpedit.msc
Hope this helps
Kind Regards
Anthony
 

Read other 3 answers
RELEVANCY SCORE 86.4

Hi,

I am unable to turn my Firewall on. I cannot click on anything, and a message at the top of the screen says 'for your security some settings are controlled by group policy'.

Surely, if security is involved, why is firewall turned off, maiking my PC less secure.

If anyone knows how I can turn on firewall I would appreciate it very much.

Thanks!
 

A:Group Policy?

We will need some more info on the problem like name of the firewall, and some system specs and any error messages you get?
 

Read other 3 answers
RELEVANCY SCORE 86.4

I cannot open windows defender. when I try, to up comes "windows defener is turned off by group policy". I didnt do anything to get this but would like to know what to do to get windows defender to open, because I want to turn it on. I am the administrator and have tried opening it through that but nothing happened. I am a silver surfer so please give me instructions in detail so I can follow them, and I much appreciate the help.
 

A:group policy

Read other 8 answers