All Questions
Tagged with windows-server-2012-r2 group-policy
229
questions
1
vote
1
answer
46
views
Windows Group Policy Management - Session host limit group policy doesn't work as expected
I have created a group policy to end the sessions which are disconnected automatically & the settings of RDP session timeouts are located in the following GPO section Computer Configuration -> ...
0
votes
0
answers
681
views
Remote Group Policy Update failed (Access Denied) for Domain Admin
My first question in ServerFault heya :)
In our domain manage all server and client machines with Microsoft Active Directory. We have 13 Vm Server. Domain\administrator user is Domain admin. I use it ...
0
votes
0
answers
24
views
why cant Login to AD OU user with GPO to the local server machine itself?
I had installed windows 2022 server eval version and windows 11 evalution version in clients. I had configured active directory . I hade created Organisational unit. Then applied Group policy in ...
1
vote
1
answer
106
views
Why is Windows Restarting my Service which I've Manually Stopped?
We have three servers - Windows 2012 R2 - in Azure, running a variety of our own custom developed services. These services are configured to start automatically, so naturally, on startup or after a ...
0
votes
1
answer
397
views
Let user in AD set date/time by hand
Under a 2012 AD, as usual, users cannot set date/time on their computers as this is managed by organization. For specific purposes, we need to let one of the users set date to past but options are ...
0
votes
0
answers
69
views
Member servers pull Group Policy from only 1 (of 2) domain controllers?
Environment overview: AWS
DC1 = Win2k12 instance in region1 - AZ1
DC2 = Win2k12 instance in region1 - AZ2
~ 60 Member servers = all within region1
Replication set up between the two DCs for GPO, DNS, ...
0
votes
1
answer
3k
views
Working on Printers GPO
Please bear with me, when it comes to printers, I'm probably about as useful as a bull in a china shop on top of the fact I Inherited a pretty chaotic setup that I am overhauling.
I have a printer ...
1
vote
1
answer
2k
views
DNS suffix works only when no subdomains are added
We have a DNS suffix for our domain ourdomain.local and it works whenever we have one additional DNS component e.g. test1.ourdomain.local or graphs.ourdomain.local, so that means we only have to type ...
0
votes
1
answer
771
views
Windows 11 PC is ignoring domain GPO to allow inbound ICMP
we have joined a Windows 11 machine for the first time to our domain, however something is not working as expected. For instance, the machine cannot be pinged, although the domain GPO sets a rule in ...
0
votes
1
answer
61
views
How to add users and computers back to server 2012
I have windows 2012 server which I had to nuke due to virus issue, which has active directory setup with users and computers. Now I have installed fresh windows server and setup ad & dc with same ...
0
votes
1
answer
8k
views
Printer GPO Error Code '0x80070bcb'
When trying to deploy label printers via GPO, I am receiving the error of
Group Policy Object did not apply because it failed with error code '0x80070bcb The specified printer driver was not found on ...
2
votes
1
answer
3k
views
File Explorer closes when viewing mapped drives and other SMB Shares
We've been dealing with an issue involving File Explorer closing, seemingly randomly, when viewing mapped network drives and other SMB Shares. The network connection(s) to these locations are not lost,...
0
votes
1
answer
314
views
Adding registry key via GPO creates but not affects to the system?
I could not give a detailed title to my question. But my problem is: I'm trying to add keyboard languages from Group Policy (Windows Server 2012R2) with Registry. I added like below:
Then I check (as ...
1
vote
1
answer
408
views
Unlock GPO enabled "Lock all taskbars" on one PC
I am facing strange problem here. We have GPO that disables "Lock all taskbar" function in Windows 10. One user somehow managed to resize the taskbar and I want to fix this but its giving me ...
-3
votes
1
answer
146
views
How to make some programs closed by only Administrator in AD GPO
In domain computers, some programs are working, and users can close that application (or kills with taskkill), is there any possibility to ask admin creditentials when they try to close that ...
0
votes
1
answer
11k
views
How to add new keyboard language from GPO?
Now I have Windows Server 2012 R2 system and it has domain controller. And domain users do not have permission add new language to their keyboard. So, how can I add new keyboard languages from group ...
0
votes
0
answers
1k
views
Deleted Drive Map via GPO Still Showing
I have a mapped gpo drives configured on my Windows Server 2012r2 and it works great when mapping a drive. The issue is when I delete a drive b/c it is no longer needed, it still reappears even after ...
0
votes
0
answers
514
views
Deploy a PowerShell Script through a GPO
I have created a PowerShell Script that creates a VPN profile and applied it to a computer through a computer based GPO using a Security filtering.
Through Gpresult on the target computer I can see ...
1
vote
3
answers
3k
views
Does Default Domain Policy always win? Different password policies in production domain
All the time I thought the Default Domain Policy overwrites other policies as it is the most important. I also known that having 2 Password GPO is not correct. The way to have different policies is to ...
2
votes
1
answer
648
views
Adding a UPN, when I log in using that UPN it doesn't use the same profile
I added a UPN to our AD Domain and to test I logged in using the new UPN as my user. Unfortunately, this for some reason used a new profile and I lost all of the bookmarks, cookies, settings, etc that ...
2
votes
1
answer
735
views
Can I create a policy to disable a computer or user at a certain time?
Windows domain.
We close at 5.
I've been asked to disable certain computers/users at 5:15.
I know how to restrict access to the file system on the hour, but
a) that doesn't give enough grace time or ...
1
vote
0
answers
1k
views
Which GPO-applied security settings are tattooed on the system and how to identify them?
I need to remove a couple of old Group Policies that applied security settings to our servers.
(Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment).
I ...
0
votes
1
answer
493
views
Cannot modify Audit Policy
I would like to setup an audit policy on my servers but in each server I want setup I am not able to modify anything also in the domain controllers server I cannot set it up. In fact each time I open ...
1
vote
1
answer
894
views
Group Policy to deploy a file to a computer (yeah, that again...)
Environment: all Windows 10 stations, AD on Windows Server 2012 R2.
I am aware of File Extensions GPP. But in this particular network I am not being able to deploy a simple file to the computers (I'm ...
0
votes
1
answer
728
views
Deny log on specific domain user to computer
Hi there I am having a bit of a simple task problems. We have pretty simple configured MS server 2012 in our school. The thing is we want to deny access few PCs from ONE user so our students can only ...
0
votes
0
answers
240
views
How do I get the drive mapping to work via GPO after a domain rename?
I just underwent a domain rename as requested by management.
So previously I had my network shares put under GPO.
They were all under Update, using the reconnect option and were using the FQDN of ...
0
votes
0
answers
2k
views
Primary Domain Controller not syncing with secondary
Firstly, this was setup by a previous tech guy, so please forgive me if im not using the correct terms or if the setup is not best practice (trying to change that!)
We have 2 domain controllers, a ...
1
vote
1
answer
1k
views
WSUS WUServerURL not updating in registry (Group Policy)
I've just finished setting up a WSUS server to manage our Windows Updates.
Sadly, our previous tech guy set up the WSUS server on our primary domain controller and set up the group policy to point to ...
0
votes
1
answer
3k
views
Set Adobe as default program via Group Policy?
My question is about default program via Group Policy. Basically what i need is - set Adobe as default windows PDF reader via Group Policy. I have been trying to do this for a while now, but haven't ...
1
vote
2
answers
217
views
Driver Signing setting seen in GPReport.html file, can't see where to modify this setting
Windows Server 2012 R2
Generated report with GPRESULT /H GPReport.html
I am interested in the Driver Signing Policy. My problem is that this setting is set to 1, however browsing the key from ...
1
vote
2
answers
753
views
Unable to set RDS timeouts, Server 2012/2016
Experiencing unable to set timeouts and logoff times in GPO for Windows RDS Server 2012 and 2016.
Working with 2008 this works fine but the same settings do not get applied on 2012/2016.
Looked at ...
1
vote
1
answer
430
views
Centrally apply a GPO rule to Local Admins
Pardon if someone asked before - tried searching maybe I missed it out.
Anyways, I have to
1a) Set a domain wide policy to Deny Access to this Computer from the Network
1b) Put each computer's local ...
1
vote
0
answers
275
views
Can I use NRPT table on Windows Server 2012 R2 to override default DNS server settings for specific domains?
I have domain-joined Windows Server 2012 R2 that I need to point to a non-default DNS server to resolve names under a certain internal domain not resolvable by AD. Is it possible to use NRPT (Name ...
0
votes
3
answers
1k
views
how to update Group policy for the whole domain?
I recently found the Group policy of our domain (windows server 2012) is not updated enough to support our Win10 end-user machine. which are the correct ways to update the Group policy definition ...
0
votes
1
answer
107
views
Office 16 ADMX Policy Won't Pull on GPO
The title might not do my issue any justice, so here goes;
Anytime a new user opens an Excel instance, a small dialog pops up asking them to accept the licensing and update terms:
The user's first ...
3
votes
1
answer
1k
views
Applying a GPO to local users except local administrators on Workgroup computers
I have a set of configurations which I need to replicate from my domain joined computers to non-domain (Workgroup) joined computers. I created a GPO, enabled Loopback processing and imported them via ...
2
votes
2
answers
201
views
Acronis Will Not Install (GPO Concerns)
We have a group policy object that denies installation from user AppData folders. However, we are trying to install Acronis Backup software onto the environment. We are trying to deploy this ...
1
vote
0
answers
46
views
GPO policies not applying across domain. Some workstations some not
I've been trying to figure this one out for awhile now. I inherited a 200 user network running Win2k12 R2 DC. I noticed some domain firewalls are off on workstations and some are on. When sitting in ...
0
votes
1
answer
1k
views
Code signing certificate not working when deployed by GPO
Our codesigning certificat from Symantec has been converted to a password protected pfx with complete certificate chain, public- and private-key
Signing with signtool (version 10.0.17763.0, x64) ...
1
vote
0
answers
2k
views
set password local admin account from gpo grey out
I'm trying to enable and password set to local administrator account to all my domain computers from domain controller's gpo. But I can't set the password for local admin. It is grey out.
0
votes
0
answers
104
views
Windows server 2012 R2 Redeploying application group policy
I have an Active Directory environment with almost 750 client,
i have deployed application xyz-v1.msi through group policy
now we have xyz-v2.msi which requires previous version to be uninstalled ...
1
vote
0
answers
45
views
Access Runtime 2010 Disappeared from Domain Computers - Deleted GPO
My organization runs a domain with an Access front end based upon and SQL Express Database.
99% of our users are using the 2010 Runtime version of access.
The installed DB literally disappeared from ...
0
votes
0
answers
78
views
File Permission GPO
I am trying to use a GPO to apply permissions for a group of users to a specific folder located on their c: drive. I am running into some issues where the GPO is only partially applying the ...
1
vote
0
answers
135
views
How to restrict or hide users to specific drives only (not typical drives combinations)
How can I restrict users (not admins) to access to specific drives?
I know there is gp that allows to restrict typical combinations of drives, like C, A, B, D etc... But I would like to allow all ...
2
votes
1
answer
3k
views
How to make the Default Domain Policy apply to the domain?
We have a domain, and it has a default domain policy that has existed for 16 years (since 2003):
I just realized today that this policy, with all its policies, are not being applied to any users or ...
0
votes
1
answer
742
views
Prevent software installation for Domain Users
Please, I was wondering how may can I block normal Domain Users from installing software but I can install using Administrators accounts (it's just like needs elevation before install) using GPO's?
I ...
-1
votes
1
answer
308
views
Deny Local Logon Windows server 2012 R2
I'm trying to apply a New GPO that deny Local Logon in my client pc's but its not working even if i applied steps :
Computer Configuration > Policies > Security Settings > Local Policies > User Rights ...
1
vote
1
answer
97
views
ADMX not loaded from Central Store
I've create a central policy store as shown below:
Afterwards I copied all files into the new folder:
However, when I want to create a new gpo, the templates are loaded not from the central store:
4
votes
1
answer
4k
views
Importing GPO backup into a different domain fails with "No backups found!" error
I'm trying to make a backup of a GPO in one domain (just contains a couple registry key entries) and import it into another domain. The second domain is completely separate, it's at a different site ...
-1
votes
2
answers
179
views
Possible for domain policy to prevent local Administrator from modifying file permissions?
I have been handed a new Server 2012 that is a member of the company domain. I am in the local server Administrators group. I do not have a domain account.
When I opened up the permissions properties ...