All Questions

Filter by
Sorted by
Tagged with
1 vote
1 answer
46 views

Windows Group Policy Management - Session host limit group policy doesn't work as expected

I have created a group policy to end the sessions which are disconnected automatically & the settings of RDP session timeouts are located in the following GPO section Computer Configuration -> ...
Sachith's user avatar
  • 11
0 votes
0 answers
681 views

Remote Group Policy Update failed (Access Denied) for Domain Admin

My first question in ServerFault heya :) In our domain manage all server and client machines with Microsoft Active Directory. We have 13 Vm Server. Domain\administrator user is Domain admin. I use it ...
Lacrymae's user avatar
0 votes
0 answers
24 views

why cant Login to AD OU user with GPO to the local server machine itself?

I had installed windows 2022 server eval version and windows 11 evalution version in clients. I had configured active directory . I hade created Organisational unit. Then applied Group policy in ...
Androidquery's user avatar
1 vote
1 answer
106 views

Why is Windows Restarting my Service which I've Manually Stopped?

We have three servers - Windows 2012 R2 - in Azure, running a variety of our own custom developed services. These services are configured to start automatically, so naturally, on startup or after a ...
Yossi Geretz's user avatar
0 votes
1 answer
397 views

Let user in AD set date/time by hand

Under a 2012 AD, as usual, users cannot set date/time on their computers as this is managed by organization. For specific purposes, we need to let one of the users set date to past but options are ...
kankamuso's user avatar
  • 487
0 votes
0 answers
69 views

Member servers pull Group Policy from only 1 (of 2) domain controllers?

Environment overview: AWS DC1 = Win2k12 instance in region1 - AZ1 DC2 = Win2k12 instance in region1 - AZ2 ~ 60 Member servers = all within region1 Replication set up between the two DCs for GPO, DNS, ...
celeryauthor's user avatar
0 votes
1 answer
3k views

Working on Printers GPO

Please bear with me, when it comes to printers, I'm probably about as useful as a bull in a china shop on top of the fact I Inherited a pretty chaotic setup that I am overhauling. I have a printer ...
Computer guy next door's user avatar
1 vote
1 answer
2k views

DNS suffix works only when no subdomains are added

We have a DNS suffix for our domain ourdomain.local and it works whenever we have one additional DNS component e.g. test1.ourdomain.local or graphs.ourdomain.local, so that means we only have to type ...
sdlsep's user avatar
  • 31
0 votes
1 answer
771 views

Windows 11 PC is ignoring domain GPO to allow inbound ICMP

we have joined a Windows 11 machine for the first time to our domain, however something is not working as expected. For instance, the machine cannot be pinged, although the domain GPO sets a rule in ...
Riccardo's user avatar
  • 253
0 votes
1 answer
61 views

How to add users and computers back to server 2012

I have windows 2012 server which I had to nuke due to virus issue, which has active directory setup with users and computers. Now I have installed fresh windows server and setup ad & dc with same ...
Yogesh's user avatar
  • 1
0 votes
1 answer
8k views

Printer GPO Error Code '0x80070bcb'

When trying to deploy label printers via GPO, I am receiving the error of Group Policy Object did not apply because it failed with error code '0x80070bcb The specified printer driver was not found on ...
Alcyeonnero's user avatar
2 votes
1 answer
3k views

File Explorer closes when viewing mapped drives and other SMB Shares

We've been dealing with an issue involving File Explorer closing, seemingly randomly, when viewing mapped network drives and other SMB Shares. The network connection(s) to these locations are not lost,...
Stephen S.'s user avatar
0 votes
1 answer
314 views

Adding registry key via GPO creates but not affects to the system?

I could not give a detailed title to my question. But my problem is: I'm trying to add keyboard languages from Group Policy (Windows Server 2012R2) with Registry. I added like below: Then I check (as ...
Gamer In The Game's user avatar
1 vote
1 answer
408 views

Unlock GPO enabled "Lock all taskbars" on one PC

I am facing strange problem here. We have GPO that disables "Lock all taskbar" function in Windows 10. One user somehow managed to resize the taskbar and I want to fix this but its giving me ...
TheMilkyBarKid's user avatar
-3 votes
1 answer
146 views

How to make some programs closed by only Administrator in AD GPO

In domain computers, some programs are working, and users can close that application (or kills with taskkill), is there any possibility to ask admin creditentials when they try to close that ...
Gamer In The Game's user avatar
0 votes
1 answer
11k views

How to add new keyboard language from GPO?

Now I have Windows Server 2012 R2 system and it has domain controller. And domain users do not have permission add new language to their keyboard. So, how can I add new keyboard languages from group ...
Gamer In The Game's user avatar
0 votes
0 answers
1k views

Deleted Drive Map via GPO Still Showing

I have a mapped gpo drives configured on my Windows Server 2012r2 and it works great when mapping a drive. The issue is when I delete a drive b/c it is no longer needed, it still reappears even after ...
mrlljones's user avatar
0 votes
0 answers
514 views

Deploy a PowerShell Script through a GPO

I have created a PowerShell Script that creates a VPN profile and applied it to a computer through a computer based GPO using a Security filtering. Through Gpresult on the target computer I can see ...
Alain's user avatar
  • 53
1 vote
3 answers
3k views

Does Default Domain Policy always win? Different password policies in production domain

All the time I thought the Default Domain Policy overwrites other policies as it is the most important. I also known that having 2 Password GPO is not correct. The way to have different policies is to ...
suspense's user avatar
2 votes
1 answer
648 views

Adding a UPN, when I log in using that UPN it doesn't use the same profile

I added a UPN to our AD Domain and to test I logged in using the new UPN as my user. Unfortunately, this for some reason used a new profile and I lost all of the bookmarks, cookies, settings, etc that ...
stormdrain's user avatar
  • 1,449
2 votes
1 answer
735 views

Can I create a policy to disable a computer or user at a certain time?

Windows domain. We close at 5. I've been asked to disable certain computers/users at 5:15. I know how to restrict access to the file system on the hour, but a) that doesn't give enough grace time or ...
BWhite's user avatar
  • 143
1 vote
0 answers
1k views

Which GPO-applied security settings are tattooed on the system and how to identify them?

I need to remove a couple of old Group Policies that applied security settings to our servers. (Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment). I ...
Daniel's user avatar
  • 6,990
0 votes
1 answer
493 views

Cannot modify Audit Policy

I would like to setup an audit policy on my servers but in each server I want setup I am not able to modify anything also in the domain controllers server I cannot set it up. In fact each time I open ...
JayJay's user avatar
  • 101
1 vote
1 answer
894 views

Group Policy to deploy a file to a computer (yeah, that again...)

Environment: all Windows 10 stations, AD on Windows Server 2012 R2. I am aware of File Extensions GPP. But in this particular network I am not being able to deploy a simple file to the computers (I'm ...
Henrique's user avatar
  • 161
0 votes
1 answer
728 views

Deny log on specific domain user to computer

Hi there I am having a bit of a simple task problems. We have pretty simple configured MS server 2012 in our school. The thing is we want to deny access few PCs from ONE user so our students can only ...
TheMilkyBarKid's user avatar
0 votes
0 answers
240 views

How do I get the drive mapping to work via GPO after a domain rename?

I just underwent a domain rename as requested by management. So previously I had my network shares put under GPO. They were all under Update, using the reconnect option and were using the FQDN of ...
amsga's user avatar
  • 81
0 votes
0 answers
2k views

Primary Domain Controller not syncing with secondary

Firstly, this was setup by a previous tech guy, so please forgive me if im not using the correct terms or if the setup is not best practice (trying to change that!) We have 2 domain controllers, a ...
Gaza's user avatar
  • 215
1 vote
1 answer
1k views

WSUS WUServerURL not updating in registry (Group Policy)

I've just finished setting up a WSUS server to manage our Windows Updates. Sadly, our previous tech guy set up the WSUS server on our primary domain controller and set up the group policy to point to ...
Gaza's user avatar
  • 215
0 votes
1 answer
3k views

Set Adobe as default program via Group Policy?

My question is about default program via Group Policy. Basically what i need is - set Adobe as default windows PDF reader via Group Policy. I have been trying to do this for a while now, but haven't ...
user541371's user avatar
1 vote
2 answers
217 views

Driver Signing setting seen in GPReport.html file, can't see where to modify this setting

Windows Server 2012 R2 Generated report with GPRESULT /H GPReport.html I am interested in the Driver Signing Policy. My problem is that this setting is set to 1, however browsing the key from ...
ToastMan's user avatar
  • 544
1 vote
2 answers
753 views

Unable to set RDS timeouts, Server 2012/2016

Experiencing unable to set timeouts and logoff times in GPO for Windows RDS Server 2012 and 2016. Working with 2008 this works fine but the same settings do not get applied on 2012/2016. Looked at ...
AndyCVS's user avatar
  • 11
1 vote
1 answer
430 views

Centrally apply a GPO rule to Local Admins

Pardon if someone asked before - tried searching maybe I missed it out. Anyways, I have to 1a) Set a domain wide policy to Deny Access to this Computer from the Network 1b) Put each computer's local ...
silveringots's user avatar
1 vote
0 answers
275 views

Can I use NRPT table on Windows Server 2012 R2 to override default DNS server settings for specific domains?

I have domain-joined Windows Server 2012 R2 that I need to point to a non-default DNS server to resolve names under a certain internal domain not resolvable by AD. Is it possible to use NRPT (Name ...
kirill_l's user avatar
  • 237
0 votes
3 answers
1k views

how to update Group policy for the whole domain?

I recently found the Group policy of our domain (windows server 2012) is not updated enough to support our Win10 end-user machine. which are the correct ways to update the Group policy definition ...
thomasnli's user avatar
0 votes
1 answer
107 views

Office 16 ADMX Policy Won't Pull on GPO

The title might not do my issue any justice, so here goes; Anytime a new user opens an Excel instance, a small dialog pops up asking them to accept the licensing and update terms: The user's first ...
nightsurfer's user avatar
3 votes
1 answer
1k views

Applying a GPO to local users except local administrators on Workgroup computers

I have a set of configurations which I need to replicate from my domain joined computers to non-domain (Workgroup) joined computers. I created a GPO, enabled Loopback processing and imported them via ...
Rajiv Iyer's user avatar
2 votes
2 answers
201 views

Acronis Will Not Install (GPO Concerns)

We have a group policy object that denies installation from user AppData folders. However, we are trying to install Acronis Backup software onto the environment. We are trying to deploy this ...
confoundr's user avatar
  • 377
1 vote
0 answers
46 views

GPO policies not applying across domain. Some workstations some not

I've been trying to figure this one out for awhile now. I inherited a 200 user network running Win2k12 R2 DC. I noticed some domain firewalls are off on workstations and some are on. When sitting in ...
Badfrogcz's user avatar
0 votes
1 answer
1k views

Code signing certificate not working when deployed by GPO

Our codesigning certificat from Symantec has been converted to a password protected pfx with complete certificate chain, public- and private-key Signing with signtool (version 10.0.17763.0, x64) ...
Terje Rosenlund's user avatar
1 vote
0 answers
2k views

set password local admin account from gpo grey out

I'm trying to enable and password set to local administrator account to all my domain computers from domain controller's gpo. But I can't set the password for local admin. It is grey out.
Mg Nyi Naing's user avatar
0 votes
0 answers
104 views

Windows server 2012 R2 Redeploying application group policy

I have an Active Directory environment with almost 750 client, i have deployed application xyz-v1.msi through group policy now we have xyz-v2.msi which requires previous version to be uninstalled ...
mdx90's user avatar
  • 1
1 vote
0 answers
45 views

Access Runtime 2010 Disappeared from Domain Computers - Deleted GPO

My organization runs a domain with an Access front end based upon and SQL Express Database. 99% of our users are using the 2010 Runtime version of access. The installed DB literally disappeared from ...
awwhhh_rubbish's user avatar
0 votes
0 answers
78 views

File Permission GPO

I am trying to use a GPO to apply permissions for a group of users to a specific folder located on their c: drive. I am running into some issues where the GPO is only partially applying the ...
user310142's user avatar
1 vote
0 answers
135 views

How to restrict or hide users to specific drives only (not typical drives combinations)

How can I restrict users (not admins) to access to specific drives? I know there is gp that allows to restrict typical combinations of drives, like C, A, B, D etc... But I would like to allow all ...
Raul Taboraz's user avatar
2 votes
1 answer
3k views

How to make the Default Domain Policy apply to the domain?

We have a domain, and it has a default domain policy that has existed for 16 years (since 2003): I just realized today that this policy, with all its policies, are not being applied to any users or ...
Ian Boyd's user avatar
  • 5,343
0 votes
1 answer
742 views

Prevent software installation for Domain Users

Please, I was wondering how may can I block normal Domain Users from installing software but I can install using Administrators accounts (it's just like needs elevation before install) using GPO's? I ...
Youssef Mdaghri Alaoui's user avatar
-1 votes
1 answer
308 views

Deny Local Logon Windows server 2012 R2

I'm trying to apply a New GPO that deny Local Logon in my client pc's but its not working even if i applied steps : Computer Configuration > Policies > Security Settings > Local Policies > User Rights ...
Youssef Mdaghri Alaoui's user avatar
1 vote
1 answer
97 views

ADMX not loaded from Central Store

I've create a central policy store as shown below: Afterwards I copied all files into the new folder: However, when I want to create a new gpo, the templates are loaded not from the central store:
Mister 832's user avatar
4 votes
1 answer
4k views

Importing GPO backup into a different domain fails with "No backups found!" error

I'm trying to make a backup of a GPO in one domain (just contains a couple registry key entries) and import it into another domain. The second domain is completely separate, it's at a different site ...
LostWander's user avatar
-1 votes
2 answers
179 views

Possible for domain policy to prevent local Administrator from modifying file permissions?

I have been handed a new Server 2012 that is a member of the company domain. I am in the local server Administrators group. I do not have a domain account. When I opened up the permissions properties ...
Old Geezer's user avatar

1
2 3 4 5