Over 1 million tech questions and answers.

Hardcoding NTP settings to use time.windows.com by Group Policy on all Domain Controllers

Q: Hardcoding NTP settings to use time.windows.com by Group Policy on all Domain Controllers

I want to set all my domain controllers (DC and RDC) to pull time from time.windows.com. In order to achieve this I am planing to create a gp (Computer Configuration/Policies/Administrative Templates/System/Windows Time Service/Time Providers)and
link to Domain Controller OU.
My question is, is it the best thing to do, or is there any risk or best practices with respect to this.

Read other answers
RELEVANCY SCORE 200
Preferred Solution: Hardcoding NTP settings to use time.windows.com by Group Policy on all Domain Controllers

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

RELEVANCY SCORE 123.2

I come to you again seeking help. We have a problem with our logon and startup to our Windows 7 Enterprise system. We have more than 3000 Windows Desktops situated in roughly 20+ buildings around
campus. Almost every computer on campus has the problem that I will be describing. I have spent over two months peering over etl files from Windows Performance Analyzer (A great product) and hundreds of thousands of event logs. I come to you today humbled
that I could not figure this out. The problem as simply put our logon times are extremely long. An average first time logon is roughly 2-10 minutes depending on the software installed. All computers are Windows 7, the oldest computers being 5 years old. Startup
times on various computers range from good (1-2 minutes) to very bad (5-60). Our second time logons range from 30 seconds to 4 minutes. We have a gigabit connection between each computer on the network. We have 5 domain controllers which also double as our
DNS servers.
My original posts on:
Technet: http://social.technet.microsoft.com/Forums/en/w7itproperf/thread/e8400dbe-e6b8-4b1d-8851-a03e7af32e6e
Reddit: http://www.reddit.com/r/sysadmin/comments/w5f38/network_logon_issues_with_group_policy_and/
I followed a lot of what you all told me to do from testing the domain controllers with dcdiag and also completing netlogon tests. I did group policy tests where I got rid of the group policy
and just did default policy and it only slightly fixed the prob... Read more

A:Major Network Logon Issues (8 Domain Controllers and 3.5 thousand workstations) DNS, Time Server, DHCP, and Group Policy Errors

Hi,


I would like to suggest using Network Monitor to troubleshoot the issue.


Thanks.

Jeremy Wu
TechNet Community Support

Read other 4 answers
RELEVANCY SCORE 107.6

I have an SCCM Client deployed to several test PC. The client configures LGPO directing the PC to receive Windows Update from our SCCM server.  However, it fails. WUAHANDLER.LOG shows the following errors:
Enabling WUA Managed server policy to use server:http://xxxxx.xxx.net:8530
Waiting for 2 mins for Group Policy to notify of WUA polucy chnage...
Unable to read existing WUA resultant policy. Error = 0x80070002.
Group Policy settings were overwritten by a higher authority (domain controller) to: Server and Policy NOT CONFIGURED
Failed to Add Update Source for WUAgent of type (2) and id{{.......}}. Error=0x80040692.
I checked domain GPOs and there is no GPO that would cause this conflict.  I ran RSOP to verify.  What I noticed is that gpresult did not show LGPO as being applied. But when I unlinked all the domain GPOs (linked to the PC OU), gpresult showed
LGPO as being applied.
Any ideas or suggestions welcome.
 

A:Group Policy settings were overwritten by a higher authority (domain controller) to: Server and Policy NOT CONFIGURED

Hi,
 
For this issue, please try to refer to the following article;
 
Troubleshooting Group Policy Configuration for Software Updates
 
If this issue persists, for a better support service, please kindly post at the SCCM forum for further help:
 
System Center Configuration Manager Category
 
Alex ZhaoPlease remember to click ?Mark as Answer? on the post that helps you, and to click ?Unmark as Answer? if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Read other 4 answers
RELEVANCY SCORE 88.4

I recently purchased a new Windows 8.1 computer for use in our organization.  The default logon option for the device is for a Microsoft Account (the default username field prompt is for an e-mail address, rather than for a username.)  However,
I would prefer that the default logon option be for a Windows domain account logon, so that users don't have to click the "Sign-in options" link and select "Local or domain account password" each time they need to log onto the computer.
I have learned that setting the "Interactive logon:  Do not display last user name"
policy (located under Computer Configuration / Policies / Windows Settings / Security Settings / Local Policies / Security Options) to
Disabled allows the domain logon option to be retained across sessions.  However, I would prefer to keep this option set to Enabled so that the previous user name is not displayed.
Does anyone have any suggestions on how the default logon option can be forced to a domain logon, while still suppressing the display of the last username?

A:Windows 8.1 Group Policy to Force Domain Logon as Default?

Hi Arowitv,
According to your description, we can use the following policy to check the result.
Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options:
Accounts: Block Microsoft accounts
Click this option, and select" Users can't add or log on with Microsoft account"
Note: Selecting this option might make it impossible for an existing administrator on this computer to log on and manage the system.
Computer Configuration\Administrative Templates\System\Logon :Assign default domain for logon
Set the option to Enabled, and add the Default Logon domain.
Hope this helps.
Regards,


Kelvin Xu
TechNet Community Support

Read other 4 answers
RELEVANCY SCORE 88.4

Whenever I log in to windows 7 using my test AD account I only see 3 icons inside control panel.... When I log in to XP using the same AD account I see all the control panel icons that Im supposed to see according to my GP settings. So it looks like my GP is NOT working properly for windows 7 machines any ideas on what I can do to fix this issue?

A:Domain Group Policy 2003 environment & Windows 7 clients

Could it be the admin of Active Directory has set a group policy for Win 7 users that limits what is available in the Control Panel? They may not be administering XP the same way.

**EDIT** I just realized you are probably the network admin. Duh...

Read other 2 answers
RELEVANCY SCORE 85.6

Hi,
I would like to give software Installation restriction for Domain Admin users but he can have all of remain admin rights.
If he want to install any software it should be ask for password.please suggest to me is there any Group Policy for that one.
Server : windows 2012 R2
Clients : windows 10 

Read other answers
RELEVANCY SCORE 85.2

Group Policy Settings Reference for Windows (Vista & 7) and Windows Server (November 05, 2013 refresh)
These spreadsheets list the policy settings for computer and user configurations that are included in the Administrative template files delivered with the Windows operating systems specified. You can configure these policy settings when you edit Group Policy Objects.

Download XLSX files

A:Group Policy Settings Reference for Windows

In addition: Group Policy Search

Read other 2 answers
RELEVANCY SCORE 84.4

Dear all I have windows 10 pro and I have edited the group policy for windows update and has set it to notify me to download.
My problem is that after a few days windows automatically download updates and install them though I had set it to notify to download. It seems that the settings are not permanent and windows resets the group policy settings.
How can i make the settings permanent?

A:Windows 10 group policy update settings changes automatically

Rizvi,

I have done the same GP change also, one thing I ran across prior to upgrade was to be sure to manually hit the "check for updates" then look under advanced settings and it should say "Notify to download" on that screen, after changing the GP settings to # 2.

Also be sure to do a full re-boot (shut down - startup) unless you have fast startup disabled.

Note: I have just upgraded 1-15 so still waiting for an update, but I am interested if there are additional settings required.

Bill

Read other 0 answers
RELEVANCY SCORE 83.6

Hi, I cannot turn Windows firewall back on after i was infected with various viruses. The option via Control Panel to turn on/off the firewall is greyed out and a message at the top says: For your security, some settings are controlled by Group Policy. What can i do? Thx, Nelly

DDS (Ver_09-03-16.01) - NTFSx86
Run by neil at 19:51:33.21 on 10/04/2009
Internet Explorer: 6.0.2900.2180 BrowserJavaVersion: 1.5.0_14
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.2046.1371 [GMT 1:00]

AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated)
FW: ZoneAlarm Firewall *enabled*

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\System32\wltrysvc.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Creative\Shared Files\CTAudSvc.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\Common Files\Portrait Displays\Shared\dtsrvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkB... Read more

A:windows firewall disabled: settings controlled by group policy

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.comDDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the resul... Read more

Read other 2 answers
RELEVANCY SCORE 82.8

Does Windows Easy Transfer retain Group Policy Settings?

A:[SOLVED] Does Windows Easy Transfer retain Group Policy Settings?

Also, Do I have to make a new capture image for each OS? ex. One for Win 7, Server 2008 R2, ect...

I already have one but used a Win 7 boot image to create it, and now im going to capture a fresh Server 2008 R2 image, but want to know if I can use the Capture image I created using the Win 7 boot image?

Read other 2 answers
RELEVANCY SCORE 82.8

This spreadsheet lists Group Policy settings described in Administrative Template (.adm) files and Security Settings that shipped with Windows XP Professional Service Pack 2.

System Requirements
Supported Operating Systems: Windows 2000, Windows Server 2003, Windows XP

Group Policy infrastructure

http://www.microsoft.com/downloads/...c0-19b9-4acc-b5be-9b7dab13108e&DisplayLang=en

Regards

eddie
 

Read other answers
RELEVANCY SCORE 82

Hey guys, i just recently made a OU on our Domain Controller and added about 10 computers to it (computers, not users) and had a Startup script applyed to that OU through Group Policy, now this start up script works for all machines but one, which is our problem machine.. it won't apply the GPO. i did a gpupdate /force on it, restarted and still no-go.

If anyone can at least give me an idea of what the hells going on i'd greatly appreteate it.
 

A:Domain Group Policy Problem.

Read other 6 answers
RELEVANCY SCORE 82

I downloaded that 120 day eval copy of Windows 2003 a long time ago, but never used it. I've been wanting to check out the server-side of Active Directory, permissions, and whatnot, and plan to install it on Virtual PC later, and play with it.

My question is: Here at work they've got a few DCs, and computers with XP Pro. Permissions on the client computers are restricted based on Group Policy. I'd like to mess with the same stuff at home.

Basically, the question boils down to: I'd like to experiment with restricting groups and/or individual users with GPO, however, from what I can see, in the GP editor, it seems that there is only one Group Policy, which govens the entire computer, and all users regardless of their group.

I'd like to apply different restrictions, sort of like assigning one Group Policy to one user, and another Group Policy to an entire group, etc.

Any of you know where I can find information on this? I've definitely tried Google, and a few other search engines, but the sites that it turned up weren't really helpful at all.

Thanks in advance,

Lyc
 

Read other answers
RELEVANCY SCORE 82

Is anyone here using Win7 Pro in a 2003 Functionality level Active Directory environment?

On multiple Windows 7 boxes, my laptop, and my desktop I ALWAYS get the error attached in the screenshot "Failed to connect to a windows service" when I log onto the Domain. I have looked at the event log and it is very, very vague. Most our IT users who have 7 just don't log onto the Domain at all, but i'd like to figure out what the issue is.

The Aero service also does not work when I log on, so i have the win2k look, and then after about 2 minutes the service starts again, by itself and all is well.

Any ideas??

A:Troubles with AD Domain / Group Policy?

Not exactly a "crashes and debugging" issue, but perhaps sufficiently interesting for this section of the forum

Can you please post the text of the event(s) which relate to this error using the "copy" button (to copy details to the clipboard) in the lower left-hand corner of the event details dialog.

Read other 6 answers
RELEVANCY SCORE 81.6

I build an XP SP2 pc with all critical updates, with an anti-virus, and a remote software. I use IE to access a particular url so that an employee can clock in or out. I start IE automatically with a process that checks to see if IE is running and if not runs a shortcut to reopen IE in kiosk mode and to the appropriate url. I deny right click usage, control panel, run, etc, through the registry. I am hoping to do this through a local group policy that I can have the Active Directory administrator import into an OU so I do not have to lock down every time clock I build manually. I am not familiar with Group Policy Editor, so if you tell me to create a GPO that sets IE's proxy server setting to a non-existent server, I know what you are saying, but I don't know how to do that. I appreciate any advice anyone might have for me.

Read other answers
RELEVANCY SCORE 81.6

Windows Vista Home Premium, How can I turn off group policy, If I try to run defender or change startup programs, it will not allow me. Message to contact your system administrator to turn off group policy.  Please help

Read other answers
RELEVANCY SCORE 81.2

Hi,


Not sure if this is the right place for this sort of question, but here goes.

My organisation includes approx 100 computers. A mix of 2000, XP, Vista and 7.

I installed WSUS on one of the servers, and all of the 2000/XP/7 systems reported in gracefully. However, there were 0 windows Vista systems in the WSUS console. Diagnosing this problem I went to a couple systems with Vista, and ran gpupdate /force on them. This is what I got back


Code:
Updating Policy... User Policy update has completed successfully. Computer Policy Update Failed. To diagnose the failure, review the event log or invoke gpmc.msc to access information about Group Policy results.
Checked the event log. Here's what's in it:


Code:
The processing of Group Policy failed. Windows attempted to read the file \\<FQDN>\sysvol\<FQDN>\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
I have verified that the UNC path "\\<FQDN>\sysvol\<FQDN>\Policies\{31B2F340-016D-11D2-945F-00C04FB9... Read more

A:Vista not getting Group Policy in Domain environment

Hi,

Check the Vista PC's Windows features to see if the service is active.

Read other 1 answers
RELEVANCY SCORE 81.2

Running Server 2003 with AD. Lately I've been seeing errors in XP clients EVENT VIEWER. Errors are as follows:

Event ID: 1202 Source: SceCli
Security policies were propagated with warning. 0x4b8 : An extended error has occurred.
For best results in resolving this event, log on with a non-administrative account and search http://support.microsoft.com for "Troubleshooting Event 1202's".

Event ID: 1085 Source: Userenv
The Group Policy client-side extension Security failed to execute. Please look for any errors reported earlier by that extension.

I've tried all the MS solutions and have even gone as far as re-loading the default "compatibility" GP template on the server (making all options "Undefined"), then refreshing the policy on the clients with no success. The errors do not seem to be affecting usability at all on the network. Anyone else?
 

A:Group Policy errors on XP clients in Domain

What is your AD Config like, do you have trusts, have you tried to delete the user account and then recreate it. I found a MSKB article that describes your issue to the tee from what you described, here http://support.microsoft.com/default.aspx?scid=kb;en-us;324383

Hope this helps
 

Read other 3 answers
RELEVANCY SCORE 80.4

Hi,

I'm not sure where to post this as it's not really a network issue due to the computers not being domained.

At the moment I am applying local group policy settings for each computer (many computers) manually on each machine (Taking about 20 minutes per machine due to the MANY settings that need checking).

Is there any way I can cut this time down by saving a set of policy options from one computer and applying that set to multiple other computers (via a usb stick etc?)

Thanks in advance,

Jack

A:Automating Local Group Policy on non-domain machines?

Hi and welcome to TSF not quite sure but you may find something here Group Policy management for IT pros

Read other 13 answers
RELEVANCY SCORE 80.4

I don't know why but some of the machines don't apply the group policy from my Windows 2000 Server Domain Controller. I have Windows XP Pro SP2 Clients joined to the domain that run the policy just fine and a certain number that all just don't apply either my policy or the default domain policy.

At first I thought it could be the user was in the deny list because of group association, but then I logged into a computer that I knew applied the policy and everything worked just fine. I tried logging in as one of the users I knew worked on a machine that didn't apply the policy and the policy was not applied.

To make things clear the problem must be with the computer configuration itself and not a problem with the user account.

I have spent some time googling my problem and some things said to make exceptions for certain ports in my firewall, but that didn't help any either (I turned the firewall off completely and still nothing).

If you have any suggestions as to things to look at that may help that would be greatly appreciated.
 

A:Some XP Clients don't accept group policy from Domain Controller

I couldn't get any PC's to "take notice" of the group policy on the Server! I tried searching the web and went through instructions websites given...still no luck months on!
 

Read other 1 answers
RELEVANCY SCORE 79.6

i cant Using group policy to copy file to windows10 user's on the domain,but everything is ok in windows 7 user's  and the folder copied in all windows7 machines, 

- iam using this script on Windows server 2008

md  c:\COMPANY 

xcopy \\WIN-5PKBDU5IFVH\testfolder   c:\COMPANY /e /i

can you help me solving this problem with all
windows 10 user's???

thank you 

Read other answers
RELEVANCY SCORE 79.6

Hi,
I have a laptop with all the latest updates installed. Legally licensed Windows 7 Home Premium 32bit ed. Running Avast anti virus.
Last thing I did was install a single windows update, I don't remember the update's number, but I remember the download size was less than 2Mb. I don't think the update has anything to do with this.. After successfully installing and rebooting, the laptop boots up normally and I get to the logon screen. After I enter my password I get the following error::
the group policy client service failed the logon access is denied
​ Most of the posts I've found online are for computers part of a domain. For independent machines, the common advice is to logon with another user, which I don't have. What I've tried so far ::
boot to repair mode and create another user and add to users group via command prompt >> user still not showing on logon screen
boot to repair mode and create another user with administrator rights via command prompt >> user still not showing on logon screen
Boot to repair mode and scanning hard drive >> clean Repair startup 3 consecutive times >> same error message boot to safe mode >> same problem
Then I narrowed down the problem ::
boot to repair mode and run regedit. The registry key

Code:
Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\gpsvc key data
has the value

Code:
%windir%\system32\svchost.exe -k netsvcs instead of GPSvcGroup

Reboot,... Read more

A:group policy client service failed non-domain laptop

Read other 7 answers
RELEVANCY SCORE 78.8

Ok, so I have been searching google for an easy walk through on how to block sites such as MySpace, Youtube, Facebook and other related sites where my father's employees like to waste company time on. **HOWEVER** After reading, blocking sites through IE's block list and adding domains with IP's seem to have easy work arounds compared to IPSEC/Group Policy.

This route allows for all of xxxxx.myspace.com's (subnets) from being accessed as apposed to finding them all out and entering the domain/subnet combos individually in the host file. So if ANYONE has seen a very easy walkthrough (cause the ones i have seen are win 2000 and/or are vague and more complicated than required, I would greatly appreciate it.

I am going to continue to search the web, and if I find something i'll post just in case this topic benefits others. I'm determined to solve this issue!!!

Take Care!
FP2
 

A:Blocking websites either by IP or Domain with Group Policy / IPSEC (not host file)

Read other 12 answers
RELEVANCY SCORE 78

I am having this problem that keeps popping up and i've never found out exactly how to fix it.
We use group policy and active directory for all our users but what's happening with this computer is that when you login with the user account everything is restricted (and it should not be). If you try to access internet explorer setting an error message pops up and says it has been restricted. Also if you go into the control panel there is only 2 icons in there. Everything else doesn't show up like Add/Remove programs, Network settings, Administrative Settings, etc.

It is a Windows XP computer, Dell Optiplex GX270

Have any of you run into this before and know of a fix?
Thanks.
 

A:Group policy settings ignored

Read other 6 answers
RELEVANCY SCORE 77.6

I need to set block inheritance on a local user's machine for the screen saver from the domain level. Here's what we have: On the domain controller, we have a Group Policy Object set to automatically set the user's Desktop to Screen saver after 10 minutes
(600 seconds) of inactivity. My boss has tasked me with being able to override this Group Policy on a local user's machine and set the screen saver to turn on after 20 minutes or more, since the user continually has to log back in and get's whatever session
he had going cut off and has to log back into that site as well.
 
My question is this:

Where in the local machine's Local User Policy would I create this policy?
Desired outcome: Override Group Policy from the domain. set local user policy for screen saver timeout to 1200 seconds. Please provide me as detailed a response as possible as where to go in Local User Policy and how to create this.

Thank you,

Chris

A:Override domain group policy for screensaver timeout and set it on local machine to 20 minutes or more

Hi,
We cannot override domain policy via local policy, processing of multiple domain-linked GPOs is in the order specified by the administrator, on the Linked Group Policy Objects tab for the domain in GPMC. The GPO with the lowest link order is processed last,
and therefore has the highest precedence.Alex Zhao
TechNet Community Support

Read other 3 answers
RELEVANCY SCORE 77.2

Hi,

We have recently installed Webmarshal on our network and set internet explorer to pick up the proxy settings via group policy. The problem is, when laptop users log off the network and go home, the cannot connect to the network from their home broadband connections because of their internet explorer proxy settings.

How could I unset the proxy settings when they log off the network?

Regards

Eggyh

A:Group Policy Proxy Settings

Hi Eggyh, I think you would be better served if you would post your problem at the link provided below. We have really great techs there that deal with your specific problem. I'm sorry for any inconvenience.

http://www.techsupportforum.com/f31/

Reguards
Patmark

Read other 1 answers
RELEVANCY SCORE 77.2

I have a laptop running Windows XP Home SP2 with all current updates. The Windows firewall is turned off with a banner that reads "For your security, some settings are controlled by Group Policy".

I did not turn off the firewall nor turn on group policy. Everything that I have found so far only addresses Group Policy settings in XP pro.

How do I get rid of the group policy in XP Home?

Thanks,

A:Group Policy settings in XP Home?

What account type is this under??? Is it Administrator or Limited User?

Read other 2 answers
RELEVANCY SCORE 76.8

Hi all,
I received this message when i tried to look at the local group policy setting on one of my machines (Windows XP SP3), which is joined in my domain.
"Failed to open group policy object on this computer. You may not have appropriate rights.
Details:
Unspecified error."
note that I am local admin.
It's all started when I was troublshooting WSUS connectivity and i looked at the WinsdowsUpdate.log, the WSUS server was <Null> & WSUS status server <Null>, I tried to force the domain GP by using GPupdate /force, it went fine and asked to
log off, but nothing changed in the WindowsUpdate.log still <Null>. Then i tried to look at the local policy setting.
I searched the internet nothing related to my case.
Thanks in advance for advising.
Mohammed Adel

A:Group policy error: Failed to open group policy object on this computer.

I guess reinstall windows is the solution, I also found one log "event id 1096", related to "registry.pol" it was corrupted.
Regards,
Mohammed Adel

Read other 9 answers
RELEVANCY SCORE 76.4

Hello everyone,


I am slowly working my way through Scott Muellers Comptia A+ Cert guide and currently learning about security fundmentals. I have a test rig running XP Pro service pack three.

However when I wanted to go into local group policy to hide specified drives on that computer (as an experiment) I couldn't see anything listed under windows components except media player.

I followed the same route as you would on windows 7, User config-administrative templates-windows components, but there is nothing there. By the way my test rig is not connected to any networks at all.

What did I miss?!

Thanks

A:Query about local group policy settings in XP Pro

We are not here to help you with your homework. How would you learn if we told you? This thread is now closed.

Read other 1 answers
RELEVANCY SCORE 76.4

Hello,
I have created a Group Policy that is supposed to add specific web sites to IE11's compatibility view but the web sites do not appear in the compatibility settings list of sites.
I have configured the GPO settings under:
User Settings > Policies > Administrative Templates > Windows Components > Internet Explorer
The specific settings are:
Turn off Compatibility View - Disabled
Use Policy List of Internet Explorer 7 sites - Enabled
List of Sites
https://webe1v1.rsiavlweb.com

I have read that even though the settings don't appear that they are still applying. Is this true? If it is true then my issue is not with Compatibility View.
Thank you for any assistance provided.

Read other answers
RELEVANCY SCORE 76.4

First, I wish to thank you guys for this very awesome board, I know I will have fun learning all the stuff I do not know already about computers, tweaks, and what not.

My Question, and forgive me for putting it here, I had no idea where else to put it, I thought about tutorials, but I know this isn't even an option in win7, I assume it will be moved if needed, by the admins, and thank you, for understanding.

"this file came from another computer and might be blocked to help protect this computer"

How in the dickens do I hack the registry or what ever I need to do, to prevent files from being blocked upon downloading them?
I do a lot of downloading and what not, and its frustrating having to manually them, every single time.

Please understand, I already have a hack "take ownership" installed in my right click menu, to preform muti-files at once.

What I desperately need, it to stop them from being blocked from the beginning, so I don't have to unblock them afterwards.

I assume this must involve a Group Policy hack of some sort?

Thanks in advanced.

A:Group Policy Settings - Blocked Downloads

See if this helps:
Open File Security Warning - Enable or Disable

or even OPTION 2 here:
Open File - Security Warning : Allow or Prevent to Unblock File

Read other 9 answers
RELEVANCY SCORE 76.4

Our GP settings for our Power Options are set to 'Never" sleep on all our Windows 7 machines. All our GP settings apply perfectly on our Dell desktops and have never had any issues until now. We've ordered newer Dell desktops but still running Win 7.

Once I place them on the domain and move them into the correct OU, the power options settings will get applied. However, some of the new desktops are not applying the settings.

I've tried re-adding it to our domain and no luck.

Anybody know how I can fix it locally?

A:How to fix Group Policy not applying for Sleep Settings?

I don't have ability to create the power plan manually because that gets locked down once on the domain. Just need a way to apply the sleep setting from the Domain Controller.

Read other 1 answers
RELEVANCY SCORE 76.4

Help Please,
I have XP SP2. I decided to stop my XP firewall in trouble shooting a network problem. I am having trouble seeing my shared folders on this PC from my other PC's. I get a message like "may not have permission, ck with admin" or something close to that.

So I noticed the firewall settings for ON or OFF were grayed out and a blue box at the top notifies me that "GROUP POLICY is set and may keep me from making any changes".

I have never had this computer on a network before and bought it (eMachines) from Best Buy. From what I have read so far "GROUP POLICY" is used to deploy SP2 to PC's with.

I need to get it off my machine so I can network and stop the firewall. Step by step would be greatly appreciated as I am not the "whiz" that most of you are.
Thanks,

A:Group Policy settings in XP Home - how to stop it!

To my knowledge, XP home does not use GPO typically...There are registry hacks to get around it apparently, but will take some reading.

http://fhctech.org/fhc/systems/policyeditor.htm
http://technet.microsoft.com/en-us/l.../bb457072.aspx

Read other 11 answers
RELEVANCY SCORE 76.4

Not long ago Soul Invictus loaded winXPpro on the PC and confronted an issue. Thats really not surprising. Issues exist using this, the latest & greatest OS in wide distribution world-wide. It was developed upon previous versions, so it really shouldn't come as a big surprise what it does & to some extent, how it does it. Yet, it still exists with functionality barely defined to the novice user, IMHO.I have XP Professional and I'm getting my bearings on the differences between this version and another XP version. I notice this one has a Windows Firewall. My problem is that I used to be able to access my employer's company intranet from home. When I go to the site and enter my login info I get the message: Access Denied (policy_denied). Your system policy has denied access to the requested URL. For assistance, contact your network support team. I'm thinking I have to modify a setting in gpedit.msc, however I can't be sure. Any thoughts of what security setting that needs to be modified? My thoughts are:Policy information in winXPpro is kinda confusing.Like many, I am the network support team in my household.My thoughts are: "What should I do when contemplating changing a setting".Any changes might best be done knowing first what the default settings are.and where to find them.and how to interpret the information available on the OS about these settings. So, I navigated to the "group policies" that typing gpedit.msc in the &q... Read more

Read other answers
RELEVANCY SCORE 76.4

Hi All,

I am currently testing Google chrome and the group policies in work and there are a few bits that i have not been able to set / lock down which i need to and m not sure if it can be done or not.

The bits left that i need are

Omnibox search needs to be fixed to Google and not able to be changed

Privacy settings need to be set and not able to be changed

The "Users" settings ideally need to be disabled so they can not create other users.

This is for use in a school so everything has to be restricted and secure. all the other policies are working great. I have downloaded the templates that Google provide so have probably missed the options i need for the above settings.

Any pointers will be much appreciated.

Many thanks

JPL
 

A:Google Chrome Group Policy Settings

JPLamb said:


Hi All,

I am currently testing Google chrome and the group policies in work and there are a few bits that i have not been able to set / lock down which i need to and m not sure if it can be done or not.

The bits left that i need are

Omnibox search needs to be fixed to Google and not able to be changed

Privacy settings need to be set and not able to be changed

The "Users" settings ideally need to be disabled so they can not create other users.

This is for use in a school so everything has to be restricted and secure. all the other policies are working great. I have downloaded the templates that Google provide so have probably missed the options i need for the above settings.

Any pointers will be much appreciated.

Many thanks

JPLClick to expand...

HI. I don't know if this will help, but have you tried calling Google? When I bought my Google chromecast device I had a few questions on it and called them. I spoke with someone very nice and helpful.
 

Read other 1 answers
RELEVANCY SCORE 76.4

My employer has a group policy to default all sites in a particular domain to IE compatibility View.  They sent me meta tag instructions on how to override that in my pages.  That meta tag works so long as the domain in question is not in trusted
sites. But they also have a Group Policy to force that domain into trusted sites. 
In compatible view I have JQuery syntax that does not run or runs with errors.  From home in an unmanaged PC my pages work great.  At work (managed pc), if I remove the domain from trusted sites the pages work great as well.
Any ideas?
Question, can the groups managing the group policy make exceptions for a particular sub domain?

Read other answers
RELEVANCY SCORE 75.6

Hello Seven Forums,

So I was trying to disable the 'Network Access: Do not allow storage of passwords and credentials for network authentication' since it was enabled which meant I couldn't save passwords. When I right clicked it and opened properties, the options of enabled and disabled were grayed out. Also, there is a padlock on the icon of the Security Settings tab and so does its subtabs. I am on an administrator account but it still doesn't allow me to change the settings. It would be awesome if someone can provide me all the possible solutions; done on Registry Editor would be preferable.

Thanks!

A:Cannot change settings of the Group Policy - Security Options

Well I was going to but looking at your specs I don't have the security clearance needed.
Do you still have the domain problem you had here.
Registry Values Resetting After Connecting To A Domain

Read other 3 answers
RELEVANCY SCORE 75.6

Windows Help & Support Error log gives the following message:

"The launch and activation security descriptor for the COM Server application with CLSID {A9E69610-B80D-11D0-B9B9-00A 0C922E750} is invalid. It contains Access Control Entries with permissions that are invalid. The requested action was therefore not performed. This security permission can be corrected using the Component Services administrative tool."

When I try to view Group Policy settings (Tools, Advanced System Info) I get an Invalid namespace error.

How can I fix this? THanks in advance
 

Read other answers
RELEVANCY SCORE 75.6

Hello, I've just installed KB3176929. Now I am running Windows 10 Education v1607, b14393.10.

Almost everything it's fine despite "Windows Update Settings" .

In the past I've used Local Group Policy Editor​ to tweak the settings and make Windows notify me when I need some update, without downloading or installing anything.

Now, in gpedit the relevant policy is still correct:
The problem is that in the Update section, under Settings it shows the following:
So it's clearly stated that download and installation will be executed without user intervention.
Also Active hours button is also displayed, but I have never had this before Anniversary update.
Before this update my Update Settings screen was similar to this one:
What I have already tried to get back the previous behavior:
set the policy Configure auto updates to not configuredshut down and power upset the policy Configure auto updates to enabled & 2 = Notify before...manually checked for updatereboot

I did not succeed.

Is this policy still applicable to Win 10 Edu?
Have you any suggestions?

Many thanks

P.S.: I am wondering if disabling active hours from registry can help or not.

A:Win 10 Anniversary, automatic updates & Group Policy Settings

I also posted the same issue for Win 10 Pro here:

http://www.tenforums.com/installatio...pressions.html

However, it may actually be working because I received a pop up notification that updates were available; however, I didn't capture that but I did get this screenshot:

In summary, I did get notified and they didn't download automatically.

Read other 11 answers
RELEVANCY SCORE 75.6

Hi,
I have a problem which is giving me a headache. Hopefully someone out there knows a way round.
Basically we are looking to roll out Win 7 64 bit in my company and are currently working on some test models. (At present we use all XP and Server 2003)
I am building a few test machines and want to find a way to standarize the power settings without having the power settings GPO as (as far as I can tell) that is only available on Server 2008.
So far I have created a new settings scheme called powertest.pow and exported it to a central network location.
I can then have other machines import it easily anough by script.
Then I get stuck. I can only find a way to activate .pow by GUID rather than friendly name and each time the powertest.pow is imported on a new PC it generates a new and unique GUID.
If I could activate the .pow by friendly name this would be easy, but this doesn't seem to be possible (?). So - what next? Do I need to somehow query the registry, extract the GUID, and then use that to activate my scheme? If so, how? And is it scriptable?
Thanks in advance for any help or advice that might be out there.
Neil.

A:Importing and activating power settings without Group Policy

I can't give you a definitive answer, but I do know that somewhere in the registry the name must be mapped to the GUID. If you search the registry for the power settings name you should be able to find where that is stored. From there it shouldn't be a hard thing to grab the GUID and use it.

The only other possibility is that all of the power settings are stored in one place in the registry and you could just iterate over all of the settings until you found the one with the right name and apply that one.

Hope these ideas give you a push in the right direction.

Read other 6 answers
RELEVANCY SCORE 75.6

Dear Microsoft MVP people,

I hope you like my communication:-) I try to be as clear as possible to outline where I am after.
I learned myself a bit about windows deployment with the WAIK tool. I was able to inject a few drivers into the boot.wim and install.wim files. And launched this customized windows setup from a bootable harddisk partition. I would like to further customize
windows setup with a few group policy settings. Regarding windows 7 I know gpedit.msc can be used to make those edits. And these edits end up in the registry.pol files the machine and user folders located at %windir%\system32\grouppolicy.

In order to utilize these group policy settings after a clean install of windows 7 I though about the following:

1. Make the edits with gpedit.msc according to my preferences.
2. When I have mounted install.wim, I copy the two registry.pol files to the system32\grouppolicy folders in the image.

What I would like to know from a Microsoft MVP is if this is an appropriate way to have windows 7 fully taken these settings? Will my settings be fully applied by windows 7?

If not, I would appreciate an suggestion to reach my goal to have my group policy settings ?injected? into the windows image in a way that it works.

I was also able to get my hands on the little LGPO tool: (Local Group Policy Object Utility v1.0). So, if your alternate suggestion involves this tool I think I can easily make it work.

Best regards,
Zeyneb

Read other answers
RELEVANCY SCORE 75.6

I have a Windows XP Pro computer connecting to a Win2000 Domain with Active Directory. The domain controller is pushing down a domain policy that I need to override on just this XP machine. Is there a registry setting that I can put on my local XP machine to override the domain policy settings?
 

A:Overriding Domain Policy settings

NOPE!

Sorry but Domain Policy takes precidence and loads from the Server when you login to the network. the only way to bypass that would be to login to the "Local Machine", but you wouldn't have access to ANY of the network resources.
Good Luck!

ST
 

Read other 1 answers
RELEVANCY SCORE 74.8

I was fixing up a friend's computer a while ago and when I tried to make a restore point I found that it was disabled. Upon doing some research, I found that the culprits were some registry values at HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore. Upon editing them to the desired values, I could continue my work.

While searching, I ended up on this forum thread and on the 3rd post, someone mentioned that Microsoft has an Excel Spreadsheet with group policy settings with their registry keys. I thought something like this would be useful when troubleshooting problems like this.

Unfortunately the link to the spreadsheet is broken, so does anyone know where I can find this file, or does anyone have it?

A:Excel Spreadsheet with Group Policy Registry Keys+Settings

Just wondering, why was this moved to the Microsoft Office subforum?

I'm just looking for an Excel file containing information about group policy registry keys. I'm just saying, because I doubt someone more knowledgeable with system configuration will come to the Office forum to help with general system problems.

I don't even know if the file is still presented as an Excel file, I'm just looking for a file which has the same contents as that mentioned and linked to in that forum post.

Read other 1 answers
RELEVANCY SCORE 74.8

Can anyone tell me how can i change the internet zone settings to Medium in Internet Option>>Privacy tab via group policy object.
This is in windows 7
Thanks

Read other answers
RELEVANCY SCORE 74.8

Greetings,
   We have implemented around 180 mainly Computer based security "hardening" setting via group policy to all Windows 7 machines running IE11. For the most part this has not affected the user's functionality. I have two isolated issues
and I'm trying to work out which setting might be the culprit:
One - A user goes to the website http://www.mssanz.org.au/modsim2015/index.html and enters their login details in the top right. IE just goes blank screen and nothing happens. When I exclude the group policy
from her computer account, she can login fine. Which setting(s) might affect external website logins? (Many other external website logins are just fine).
Two - A user goes to http://auth.athensams.net and then the login screen. The login screen gives a warning "Cookies not enabled - please change your browsers security settings to enable cookies". When
his computer is removed from the group policy, he does not get this message. You would think this would be an easy setting to find - trouble is, we have NOT disabled cookies as part of our security regime. So what other setting would make an authentication
script think that cookies are disabled?
Thanks
David Z

Read other answers
RELEVANCY SCORE 74.8

I work in a primary school and our new Windows 8.1 machines have an issue where users (everyone has roaming profiles) that are logging onto the machine for the first time won't end up with the correct 'group policy applied' proxy settings.

The (group policy / registry preferences) proxy settings I want the different groups of users to have *are* being applied (verified using process monitor) but I can then see something else (still in the same svchost process) is then taking the ones configured
for the local system account (in HKEY_USERS\.Default) and overwriting them. Different user groups use different proxy ports for filtering reasons, so it's crucial the right groups of users get the right settings.

Whatever is overwriting them, when the user has no cached roaming profile on the machine, does not do it again if they log off and then on again. The problem being, users don't have a set machine and the cached roaming profiles are removed when the machine
shuts down using an updated version of delprof... so when the machine boots up again, it's like the users are all logging on for the first time - except they have roaming profiles so they aren't really!

Having spent far too long looking into the issue, I'm as positive as I can be that it's nothing I'm doing and we do not have any issue with the same settings / policies being applied on our Windows 7 or old XP machines. Group policy configures the user's
proxy settings and nothing else touches them.

So what ... Read more

Read other answers