Over 1 million tech questions and answers.

Set Group Policy different for each user group?

Q: Set Group Policy different for each user group?

Is it possible to set administrators to one GP and standard users to another? I want to disable Command Prompt, Task Mgr and lockout all USB and CD drives for standard users but allow administrators to access all of those.

How do i set different group polices depending on user?

Thanks in advance

RELEVANCY SCORE 200
Preferred Solution: Set Group Policy different for each user group?

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: Set Group Policy different for each user group?

Yep. As long as the policies you want to deploy to those groups are per-user (i.e. within the user configuration section of GP Editor), then you can use a tool like Microsoft's GPMC to "security filter" the effects of a GPO to a particular user group. Or, you might want to check out Desktop Policy Manager--www.sdmsoftware.com/desktop_management, which provides a simplified web interface into Group Policy and makes targeting by group much simpler (full disclosure--I work for this company).

Darren

Read other 2 answers
RELEVANCY SCORE 114.4

Hi all,
I received this message when i tried to look at the local group policy setting on one of my machines (Windows XP SP3), which is joined in my domain.
"Failed to open group policy object on this computer. You may not have appropriate rights.
Details:
Unspecified error."
note that I am local admin.
It's all started when I was troublshooting WSUS connectivity and i looked at the WinsdowsUpdate.log, the WSUS server was <Null> & WSUS status server <Null>, I tried to force the domain GP by using GPupdate /force, it went fine and asked to
log off, but nothing changed in the WindowsUpdate.log still <Null>. Then i tried to look at the local policy setting.
I searched the internet nothing related to my case.
Thanks in advance for advising.
Mohammed Adel

A:Group policy error: Failed to open group policy object on this computer.

I guess reinstall windows is the solution, I also found one log "event id 1096", related to "registry.pol" it was corrupted.
Regards,
Mohammed Adel

Read other 9 answers
RELEVANCY SCORE 111.2

Windows Vista Home Premium, How can I turn off group policy, If I try to run defender or change startup programs, it will not allow me. Message to contact your system administrator to turn off group policy.  Please help

Read other answers
RELEVANCY SCORE 105.2

anyone know where i can learn to use User, Group Policy and the registry on a network as admin?

A:User, Group Policy

What exactly do you want to do? This maybe a start for you http://safari.ibmpressbooks.com/0735617880/ch06.

Read other 1 answers
RELEVANCY SCORE 104

hi
pls help me out in this issue . i am having 20 systems i want to impletement group policies on all machines in a workgroup

how can i do that this is an windows 2000 professional environment
thanks
 

A:How to configure group policy in work group

Sneaker.Net.

Walk to each computer and set the policies on each computer. If you are not in a domain environment you are basically have to set each one manually.

My only other thought is if all the computers are exactly the same make and model and you have some type of imaging software. You could make a standard install on one computer with all the settings you want and then use that computer to image all the other computers on your network.
 

Read other 2 answers
RELEVANCY SCORE 104

Is there any way to add an user to a Group Policy without specifying the location?
If I understood it properly, It seems that when you add an user using the Group Policy Manager Editor, it searches for the name and adds the location as a prefix of the name automatically. For example:
My-Computer/MyUser or Workgroup/MyGroup
I supose that it is not the same to add an user with the location specified for one place or another. For example, If MyUser has a prefix of My-Computer, the rules won't be applied for the Workgroup.
Becuase of that, I was wondering if there is anyway to specify it for a general location. I mean, I would like to have the same as in the default setup, where there is only "Administrator" in the policies without any kind of prefix.

Read other answers
RELEVANCY SCORE 104

Ok not sure where to post this but im sure i will be told if its in the wrong place.

i have around 15 out of 36 vista biz 32bit computers that will not update group policy's for the user that works on that computer. i have done gpupdate with /force and /sync and everything else that you can add to it. but still nothing happens.

but if i log the user's account into another computer everything is updated like it should be. but when i log them back into their own computer it goes back to the old policy. I have tried everything I konw to fix this hope you guys can help.

a litte more info for you guys is the problem computers are still looking for an old server to redirect files to. even tho the new policy has it pointing to the new server. we have even removed the redirect to see if that would help but it doesn't they still look for the old server and lock up every few mins looking for those files.

A:can't get Group Policy to update for user

Hi Cliffmarcum,

Welcome to Vista Forums!

I'm not certain how you are deploying the GPO's, but the following article may help with procedures, guidelines, hints, troubleshooting tips, and so forth: Deploying Group Policy Using Windows Vista.

On a computer that isn't working, go to Start / All Programs / Accessories / right click on Command prompt and click on Run as Administrator. Type gpresult /v and enter. This should provide a great deal of information about how GP is affecting that machine (and possibly why it is not affecting that machine). Now login as that user on a computer that is working and do exactly the same thing. Compare the two results. I'd be willing to bet SOMETHING is different that's causing the problem.

The Event Viewer has a wealth of information regarding Group Policy. Unfortunately, it requires you to look at all of the different log files to find entries for Group Policy. There you'll find entries related to policy application, policy replication, and policy refresh, all of which can be useful when trying to track down a problem. There is not always a lot of information on specific Group Policy errors in the event logs, but remember that you can always search TechNet if you find errors you can't identify (or post them here and we'll see if we can help). The following article may help here: Troubleshooting Group Policy Using Event Logs.

(From: http://technet.microsoft.com/en-us/m...eshooting.aspx - which may contain additional helpful informat... Read more

Read other 4 answers
RELEVANCY SCORE 102.8

Hi,

I'm trying to customise the user accounts on a standalone XP Pro PC. I want to apply different settings to the admin and non-admin accounts.

Iím using this fix here detailed in Knowledge Base article Q293655 (would post url but it's against the forum rules).

I apply the settings, log into and out of all the relevant accounts copy Registry.pol from the User folder in group policies (tried copying both and just from machine, seems to have no effect). Once I have a copy of Registry.pol I reverse the settings Iíve applied, log into and out of the user account, then copy the old version of Registry.pol back into the User folder of group policies.

Everything works fine: the restrictions are applied to all accounts accept the admin accounts. Until, that is, I reboot, at which point the changes I made in the admin account take effect and the restrictions are lifted from the non-admin accounts.

For reference, the setting Iíve been using to test this workaround was the Disable changing Advanced page settings under User Configuration > Administrative Templates > Windows Components > Internet Explorer.

Can anyone tell me why this wonít stick after a reboot and what I have to do to get it to stick?

Many Thanks

kwinsw
 

Read other answers
RELEVANCY SCORE 102.8

group policy which is related to a user does not work when we run a program as user(runas).wh have to login with user on local system(ntuser.dat get updated) and then runas user works with group policy setting.(such as hiding all hard drives).how can i update group policy in user profile without login with user? or runas a program with group policy for the first time?
 

A:how to apply group policy to a runas user?

Read other 6 answers
RELEVANCY SCORE 102.8

I am having trouble with one of my users profiles. When they log on to their machine, the group policy will not update. When the user is in the department OU in active directory there should be restrictions on what they can change in IE etc and when I put them in a temp OU it should remove all group policy restrictions so that admin can make changes. This works for all except this one user. When I move them to the temp OU it still has all the restrictions in place. I have tried forcing gpupdate to no avail. Is there anything else I need to look at. It is only happening with a single user.

Cheers
 

Read other answers
RELEVANCY SCORE 102.8

Hi,

I have a set up two Windows 10 Education Edition laptops. I would like to configure them both with the same settings/permissions.

How can a I make a "User Group" and add policies to it.

For example: Have a "User Group" called "Kids" and then be allowed to configure the windows settings, deploy them to a different printer ect.

I can load lusrmgr.msc and add a Group called "Kids" but if I go into mmc.exe and add the Group Policy Object, I have no option to pick "Kids"

Any suggestions.

Thanks

Read other answers
RELEVANCY SCORE 102.8

Hey all, I was wondering if there was any way I can bypass GP. I am on a system at an extension college campus with no designated IT. I have been asking them to fix the resolution on the PCs for over a month now and nothing has been done. It is stretched something awful and no one here likes it. I'd like to bypass the GP and change it. Is this doable?

A:Bypass Group Policy as limited user

Hi AmTheMan and welcome to the Forums.

Sorry but I cannot help you on this, and I don't think any other member will as, your I.T stop normal user's for a reason. Doing this will break the policy and you could get into trouble. I would suggest to keep at them about it

Read other 6 answers
RELEVANCY SCORE 102.8

I've tried about every method to access Group Policy Editor but it keeps saying snap in restricted by administrator. I've tried using cmd but its disabled by system administrator also regedit.exe so I don't know what to do, would like to know if theres
anything that i can do.  Thanks.

Read other answers
RELEVANCY SCORE 101.6

Hey all,

I'm in the same boat as CIS was when he posted this thread:

Help with Group Policy?

I've googled and googled and read so much my head is about to explode but still haven't found what I'm looking for.

My end-goal is to change the shell for just a single user account. I poked around the registry for quite a bit after looking at some dated information on how to do it in there but couldn't find an equivilent key in Windows 7 (I believe the information was for XP). Then I discovered it can be done in the Group Policy Editor under User Configuration -> Admin Templates -> Sytem under "Custom User Interface", but this will change it for everyone it appears. My searching eventually led me here, so I decided to stop, and post for help

If anyone could point me in the right direction it would be greatly appreciated


Rob

A:Help with Group Policy/shell change for a single user?

New ou... put that computer account in that ou and create a new GPO for that OU. done.

Read other 1 answers
RELEVANCY SCORE 101.6

On Windows Vista and 7, there is a screen, which asks for an administrators authentication whenever something needs editing on the system (such as installing stuff). I have a GPO (group policy object) for all the workstations, and I've navigated to "Computer Configuration -> Policies -> Windows Settings -> Security Settings -> Local Policies -> User Rights Assignment". Is there a setting that let's the specified users/groups authenticate on the Windows Vista/7 administrator screen (as described at the begining), without them actually being administrators?
 

Read other answers
RELEVANCY SCORE 101.6

Hi All,
I'm having trouble in an AD environment whereby group policy fails to apply if the user has saved passwords (control panel > user accounts > advanced > manage passwords) to access resources on the DC

Microsoft recommend deleting the saved passwords and running gpupdate /force, however this is far from ideal as users will simply cache their passwords and GP once again breaks. I cant be removing saved passwords from 40 pc's every time theres a change in group policy.

Event viewer logs the following:

Event ID: 1030 Source: Userenv
Windows cannot query for the list of Group Policy objects. A message that describes the reason for this was previously logged by the policy engine.

Event ID: 40961 Source: LSASRC Category: SPNEGO (Negotiator)
The Security System could not establish a secured connection with the server ldap/XXXX. No authentication protocol was available.

Does anyone know of, or can anyone think of a workaround for this problem?
 

Read other answers
RELEVANCY SCORE 100.8

I was setting up local group policies on a laptop so I could apply them to non-admin accounts. Well I goofed and accidentally applied the policies to all users including the admin. The problem is I was restricting access to all programs except a certain few like internet explorer, remote desktop, etc as users will only need to access their webmail and remote desktop to access the terminal server. Now I cannot do anything with the admin profile because the policy was applied to my account as well. What can I do??

A:Accidentally applied local group policy to all user groups

Which Administrator account did you apply this to? The default or did you enable the built-in Administrator account and apply it to that also?

If you didn't go through any steps to activate an admin account previously, you could probably enable the built-in one and change the settings for the normal Administrator account.

Built-in Administrator Account - Enable or Disable

Read other 2 answers
RELEVANCY SCORE 100.8

i cant Using group policy to copy file to windows10 user's on the domain,but everything is ok in windows 7 user's  and the folder copied in all windows7 machines, 

- iam using this script on Windows server 2008

md  c:\COMPANY 

xcopy \\WIN-5PKBDU5IFVH\testfolder   c:\COMPANY /e /i

can you help me solving this problem with all
windows 10 user's???

thank you 

Read other answers
RELEVANCY SCORE 100.8

Hi,
There are systems where users login for general activity and they pile up almost every day. Is there a group policy to delete the local profiles after the user logs off. I came across policies where the profiles are deleted after x number of days or using
delprof.exe or using scripts or remove cached roaming profiles but we do not want to use them.

We want to use only group policies to delete local profiles immediately after the user logs off. Any help would be appreciated.
Thanks,
Nithu

A:Group policy to delete local profiles after user logs off

Hi,
Not Roaming profile? for Local profile, I haven't found a policy to delete it after user logoff, but if what you want to achieve is prevent user saving settings to the desktop, then you can use mandatory user profile instead,.
This profile does not save changes made by the user to the desktop settings. Users can modify the desktop settings of the computer while they are logged on, but none of these changes are saved when they log off. The mandatory profile settings are downloaded
to the local computer each time the user logs on.
http://technet.microsoft.com/en-us/library/gg241183(v=ws.10).aspxYolanda Zhu
TechNet Community Support

Read other 4 answers
RELEVANCY SCORE 99.6

I'm creating a local group policy to lock down a Win7 Pro Workstation for use in the Staff room.
It's the first time I've used it, previously I've worked a bit with AD. but I've been following on line tutorials and using google and I'm nearly there with it.
But I'm stuck on one thing. My approach has been to remove access to pretty much everything apart from IE, Firefox and Skype icons on the task bar.
I've got the start menu empty apart from the shutdown button, which is what I want but at the top of the start menu is the users icon/picture thing and if i click on it it takes me to "user accounts". I can't for the life of me work out how to get rid of the picture or just stop this happening.

Can anyone help please?

A:How to use Local Group policy to prevent access to User Account settin

Have you tried anything from this thread (especially second page)?

Read other 1 answers
RELEVANCY SCORE 99.6

I'm running a Windows Server 2008 Enterprise Edition server that is currently the domain controller, and a Windows 7 Ultimate client. I have a 'Test' user for messing around with group policy - anyway, on the client Start Menu it has 'Test User' which leads to some form of libraries folder. Is it possible to restrict the link without removing their name?
 

A:Remove Start Menu user link - Windows 7 Group Policy

You could always force a classic start menu with group policy. All the eye candy takes up system resources anyway.
 

Read other 3 answers
RELEVANCY SCORE 98.4

After creating a new organizational unit folder folder I moved a user to that folder and setup a disk quota group policy and gpupdate /force in a domain controller and also a client computer.
However if I set the same disk quota group policy to computer folder in Active Directory it works.

Read other answers
RELEVANCY SCORE 96.4

I want to check a particular windows user rights assignment local group policy applied or not through batch file in windows xp

the policy's are
1.1.1.1.1.1 Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Deny log on through Terminal Services

1.1.1.1.1.2 Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Allow log on locally

1.1.1.1.1.3 Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Debug programs

1.1.1.1.1.4 Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Log on as a service

1.1.1.1.1.5 Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Perform volume maintenance tasks

1.1.1.1.1.6 Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Bypass traverse checking

1.1.1.1.1.7 Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Log on as a batch job

1.1.1.1.1.8 Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Add workstations to domain

1.1.1.1.1.9 Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Modify firmware environment values

1.1.1.1.1.10 Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Enable c... Read more

Read other answers
RELEVANCY SCORE 92.8

I have read this post: Group Policy - Apply to a Specific User or Group on how to assign policies to certain users/groups. The first comment is exactly the problem I am having. I want to make a group, create a new policy and assign it to that group but according to the response you cannot do that with new custom groups.
I can get it to work with Administrators and non-Administrators just fine but my new group does not show up.
There was some mention of being able to assign the policy to a user and then set it for the custom group but I don't know how to so that.

Thanks,
Scott

A:Group Policy for only a certain Group

I've never messed with local group policy, but it looks like what you want is unfortunately not possible. Local GP seems incredibly limited compared to domain policy. "Administrators" and "Non-administrators" are not actually groups as far as I can tell, rather just some obscure classification applied by local policy to the "Administrators" group and anybody not in the "Administrators" group. I saw the comment you are talking about and to me it looks like the poster is just mentioning to apply it to each individual user that needs it. Hopefully somebody else has some good news for you, though.

Read other 3 answers
RELEVANCY SCORE 91.2

Hi all
For the past 6 months we have received reports of PC's taking up to an hour to get to the login prompt.
All our PC's are running Windows 7 32/64 Bit.
The message is always "Applying Group Policy Local Users and Groups policy"
Once it gets to the login prompt they will login with no problem.
I have enabled GPO logging on 1 PC and the results show as below (sorry for the wall of text) Boot time was 15:16.
I was hoping someone else had come across this issue and maybe has some insight
Network team say "its not the network"!!
Server Team say "Its not DNS or Group Policy" !! 
So its been left with me on the desktop team to diagnose the fault
Regards
Paul Griffiths - NHS Trust in Bristol

GPSVC(534.75c) 15:17:14:459 ProcessGPOs: -----------------------
GPSVC(534.75c) 15:17:14:459 ProcessGPOs: Processing extension Group Policy Local Users and Groups
GPSVC(534.75c) 15:17:14:459 ReadStatus: Read Extension's Previous status successfully.
GPSVC(534.75c) 15:17:14:459 CompareGPOLists:  The lists are the same.
GPSVC(534.75c) 15:17:14:459 GPLockPolicySection: Sid = (null), dwTimeout = 30000, dwFlags = 0
GPSVC(534.75c) 15:17:14:459 LockPolicySection called for user <Machine>
GPSVC(534.75c) 15:17:14:459 Sync Lock Called
GPSVC(534.75c) 15:17:14:459 Writer Lock got immediately.
GPSVC(534.75c) 15:17:14:459 Lock taken successfully
GPSVC(534.75c) 15:17:14:459 ProcessGPOList: Entering for extension Group Policy ... Read more

Read other answers
RELEVANCY SCORE 91.2

Hi Team,
Please let me know what is the standard Setting for below Security Setting ( Audit Policy ), which are followed in most of the Company.

For Eg:- Should i set ' Success & Failure ' for ' Audit account logon events ' & for ' Audit account management' etc...




Thanks & Regards,
Param
www.paramgupta.blogspot.com

Read other answers
RELEVANCY SCORE 90.8

I have an SCCM Client deployed to several test PC. The client configures LGPO directing the PC to receive Windows Update from our SCCM server.  However, it fails. WUAHANDLER.LOG shows the following errors:
Enabling WUA Managed server policy to use server:http://xxxxx.xxx.net:8530
Waiting for 2 mins for Group Policy to notify of WUA polucy chnage...
Unable to read existing WUA resultant policy. Error = 0x80070002.
Group Policy settings were overwritten by a higher authority (domain controller) to: Server and Policy NOT CONFIGURED
Failed to Add Update Source for WUAgent of type (2) and id{{.......}}. Error=0x80040692.
I checked domain GPOs and there is no GPO that would cause this conflict.  I ran RSOP to verify.  What I noticed is that gpresult did not show LGPO as being applied. But when I unlinked all the domain GPOs (linked to the PC OU), gpresult showed
LGPO as being applied.
Any ideas or suggestions welcome.
 

A:Group Policy settings were overwritten by a higher authority (domain controller) to: Server and Policy NOT CONFIGURED

Hi,
 
For this issue, please try to refer to the following article;
 
Troubleshooting Group Policy Configuration for Software Updates
 
If this issue persists, for a better support service, please kindly post at the SCCM forum for further help:
 
System Center Configuration Manager Category
 
Alex ZhaoPlease remember to click ?Mark as Answer? on the post that helps you, and to click ?Unmark as Answer? if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Read other 4 answers
RELEVANCY SCORE 89.6

Will either of these allow me to restrict drive access to a single user only? I've tried to restrict drive access with Group Policy Editor but it applies the restriction globally--even to me the administrator.

Could anyone let me know if this is possible and how to do it?

Much thanks.

A:Group Policy Editor or Local Security Policy

I take it that you want to restrict access to this drive to everyone but yourself. Which drive are you referring to, is it locally connected or via a network?

Read other 6 answers
RELEVANCY SCORE 88

Hi all!

Windows 7 Pro 32 bit on a domain

I've NEVER seen this before and I cant figure it out.

I have a group policy set on an OU named LAPTOPS. The policy gets applied, however the User Config\Windows Setting\Scripts\Logon DOES NOT. When you run the GPRESULTS on the laptop, I see the policy settings being applied EXCEPT for the LOGON script. Its not there. I dont see any errors and cant figure out why Windows would ignore this one setting in the policy but apply the rest. I've tried deleting and recreating the policy but that does not work. Also made sure I did a GPUPDATE /FORCE

Thanks in advance!

A:Group Policy Applies Policy EXCEPT for 1 Setting!

Is a policy enforced on a domain or site level?

Read other 7 answers
RELEVANCY SCORE 85.6

Hi there,

I hope someone here can help me as I'm sooo stuck.

I am having a problem trying to get group policy to work. The was it is setup is as follows:

Location 1
MS Server 2003 - User using Terminal Server and the group policy works fine

Location 2
This location is connected to location 1 via Draytek Lan to Lan and is talking to each other.
MS Server 2003 R2 joined domain to Location 1

On any PC in location 1 as a terminal server user, the group policy loads perfect with all the correct restrictions but when anyone logins in from location 2 (not terminal server), the policy will not apply at all but logs in ok.

I am soooo confused and I need help so plllleeeaassse, can you try and help me find why this is the case.

Many Thanks in advance.
 

Read other answers
RELEVANCY SCORE 85.6

Can anyone help or advise please.

I have a situation where I'm about to deploy 20 desktops and a few laptops along with an Exchange 2007 Server along with an ISA Server. At this time I want to take the opportunity to make sure that our Group Policy is all active and correct and restrict items like software installation.

The only problem I have, is that one of our main software applications, currently requires the users to have local admin access, which I'm afraid will over-ride any restrictions I enforce in the GPO.

Is there anyway of resolving this?

Thanks
 

A:Group Policy

I always recommend making users non-local admins. Unless you use software restrictions in Group Policy, you really can't completely prevent users from installing all pieces of software. But standard users typically have issues installing software.

As far as your one application, I would recommend taking a look at FileMon and RegMon at http://www.sysinternals.com. You can use those two utilities to monitor file and registry activity in real time. When a standard user encounters a problem, you'll know where and can make permission changes on your client to allow them to do what they need to without making them an admin. This has worked for me time and time again.

Good luck.
 

Read other 2 answers
RELEVANCY SCORE 85.6

First let me apologize if this is the stupidest question of all time.

Next let me introduce myself, my name is Craig and I teach in a school in Resolute Bay, Nunavut, Canada... 600 miles above the Arctic Circle. There are no techs up here to help me with my problem! I have the task of setting up our new server running windows 2003. I have NEVER setup nor worked on a server before! I have to learn everything as I go.

That being said my problem may be something that I don't see, maybe I created my users, groups or OU wrong. But the problem that I am having now is group policies.

I have installed the Group Policy Management Console snap-on (or is that snap-in). And here is what I have done.

I created an OU called school this was created right under my domain. Then I created another OU called students and another on grade 9-12.

domain
- school
- students
- grade 9-12

Then in the "active directory users and computers" I created a user in the grade 9-12 OU called test_t. This user use a profile set to \\server\profiles$\%USERNAME% this roaming profile work fine.

SO, I want to create a group policy that controls my users, so I can set proxy, home pages... you know group policy stuff!

So in the GPMC I right click "Group Policy Objects" and go to "new". Give my new policy a name "test".

Next I right click my OU students and "Link an existing GPO", and select "test" from the list.

Then I right click the GPO &qu... Read more

A:Group Policy HELP

Read other 6 answers
RELEVANCY SCORE 85.6

trying to set a group within A.D to have fixed proxy settings. I have made user that it's not being picked up on the machine as i have disabled "Make to proxy to the machine and not the user. Within the user domain i have set the proxy within the proxy field. Enforced gp on the server but it doesn't seem to be coming accross any ideas?
 

Read other answers
RELEVANCY SCORE 85.6

is there away of copying a Group policy from one machine to another without imaging and with the use of AD

Please help

Bigc
 

Read other answers
RELEVANCY SCORE 85.6

Hello,

I hope I am in the right thread, well anyways, my supervisor wants to disable all the games in the company, so I go to my main DM, put everyone in one group, (domain/security group or should I put it in domain/distribution?) and go to the OU group policy, then I look under all the settings and try and see if I can disable the games folder, or just the games themselves, i could not find it, can anyone point or give me the path (folder) that i can disable it in the group policy? Also, can group policy work in a domain administrator or just an administrator? the reason is i tried to test out by disabling me from getting into control panel, but i can still see it, i am a domain admin. Also do I put the users or do I put the computers in the group?

thank you
 

A:Group Policy in the OU

Siten0308 said:

Hello,

I hope I am in the right thread, well anyways, my supervisor wants to disable all the games in the company, so I go to my main DM, put everyone in one group, (domain/security group or should I put it in domain/distribution?) and go to the OU group policy, then I look under all the settings and try and see if I can disable the games folder, or just the games themselves, i could not find it, can anyone point or give me the path (folder) that i can disable it in the group policy? Also, can group policy work in a domain administrator or just an administrator? the reason is i tried to test out by disabling me from getting into control panel, but i can still see it, i am a domain admin. Also do I put the users or do I put the computers in the group?

thank youClick to expand...
If I remember correctly, in the policy OU, you have to block access to the .exes for the games, but I can't remember exactly where it is. But I know it can be done because I've done it before.
 

Read other 1 answers
RELEVANCY SCORE 85.6

I cannot open windows defender. when I try, to up comes "windows defener is turned off by group policy". I didnt do anything to get this but would like to know what to do to get windows defender to open, because I want to turn it on. I am the administrator and have tried opening it through that but nothing happened. I am a silver surfer so please give me instructions in detail so I can follow them, and I much appreciate the help.
 

A:group policy

Read other 8 answers
RELEVANCY SCORE 85.6

How can I set a group policy to a particular OU in server 2003, so that none of the users in that OU can use flash disks or CD ROMs.
 

Read other answers
RELEVANCY SCORE 85.6

Can comeone tell me how to enable a Group Policy on the server so that no one can use their USB Flash Disks. I'm using a Win Server 2003
 

Read other answers
RELEVANCY SCORE 85.6

I've been attempting to change the group policy on my new laptop so it no longer forces a classic start menu. I've added the group policy from the MMC and altered it there, however I still do not have the option for the XP start menu. I've altered it on the admin account with success but I seem to be missing something here. . . Possibly in the system.adm file however I haven't been able to discern the gobbledegook to find what I'm really looking for. I'm also too chicken to go poking around in the registry without knowing exactly what I'm looking for. I appreciate your thoughts.
 

A:group policy

Read other 8 answers
RELEVANCY SCORE 85.6

We want to create a user profile template and all new users who log into a computer inherit these settings, one setting we need is a persistent cookie file located in the users personal directory. How do we get that cookie to work amongst multiple profiles?

Read other answers
RELEVANCY SCORE 85.6

Help, I'm running XP Home SP2 and I can't turn off Windows Firewall. It tells me that for my security it's controlled by Group Policy. I'd like to run zone alarm, but I know you can't havE 2 firewalls running at once. Any suggestions?
Thanks, mark

 

A:Group Policy???

Read other 7 answers
RELEVANCY SCORE 85.6

I have been using win 7 pro 64 (oem) and win 7 ultimate 64 RC. whenever I wanted to edit some windows 7 apps I just typed gpedit.msc in the search pane and I got the group policy editor?. and modified win 7 from there
I just purchased win 7 home premium 64 bit OEM and when I type gpedit.msc in search pane It will not locate it.
Is there another way to get this open

A:Group policy

Hi, i am afraid Gpedit is only available in Enterprise, Business and Ultimate versions. There have been attempts to copy however to my knowledge not successfully.

Read other 2 answers
RELEVANCY SCORE 85.6

Hello.

I have a stand alone XP pro computer that is not (as far as I know) part of a Domain.

I have found many indicators that my machine is being fed Group Policy from a Domain controller.

I would like to know how this could be when I have not attempted to join a Domain.

Perhaps someone could give me a reasonable explanation why all my OS settings, security, software firewall, registry and even spoofed MAC addresses appear to be set by Group Policy dispite the fact my computer is not (as far as I know) a member of a Domain.

Thanks.

-DJ

A:Group Policy

So I assume you are in a LAN with domain controllers?

Did you check Computer Properties / Computer Name?
Does it say you are in a domain or in a workgroup?
And if you click the Change button, is the domain or workgroup radio button checked?

Read other 3 answers
RELEVANCY SCORE 85.6

I was wondering if someone can help me.

When I try to access the Group Policy via the run command gpedit.msc while being logged on as user I receive the following error message:

Group Policy Error

You cannot perform this operation. Please contact your system administrator.

I then logged in as Administrator and opened the Group Policy>Computer Configuration>windows settings>security settings>security options

What policy do I need to reconfigure so that the GO is accessible when the user is logged on?

Thanks
 

Read other answers
RELEVANCY SCORE 85.6

How do I get rid of group policy?

It's doing my head in now -
domain users can't access the following;

outlook/express
windows media player
internet explorer
msn messenger

Please Help in getting rid of it - or fixing it - I've disabled them supposedly but computers still pick them up, and I've done gpupdate on various computers to no avail.

JoneeJay
 

Read other answers
RELEVANCY SCORE 85.6

i got on after work and my usb keyboard doesn?t work I went to settings and it tells me setup blocked by group policy can I please get help on what to do?
 

Read other answers