Browsing articles tagged with "grouppolicy - Admins Goodies"
Jun 5, 2013
tom

AD reset user passwords for a security group

I’m not quite sure if this is possible or not, but I need to force a certain security group’s users to have their passwords expire so they’ll be forced to change them on next login. The reason for this is because I applied a FGPP (password policy) to this particular group in order to enforce strong passwords. Well, many users have really weak passwords and they won’t be changed unless they’re forced. Is there a […]

Continue Reading »
Mar 17, 2013
tom

Will User GPO settings apply to a Computer OU

If I have a GPO that contains a handful of user settings – if i apply this to a OU container which contains computer objects – will those User Policies then apply to any user who logs onto that Computer? Asked by TheD By default, no this will not happen. Fortunately, Group Policy Loopback Processing can be enabled, which will do exactly what you’re looking for. Answered by MDMarra Check more discussion of this question. […]

Continue Reading »
Dec 16, 2012
tom

GPO to disable browsing network resources

In a Win2008 Domain with Win7 clients, I need to block certain users/groups from browsing the internal network resources. Is there a GPO for that ? Asked by Jannis Alexakis Before Vista, there was a single GPO setting to remove the “My Network Places” icon. Surprisingly, there’s no equivalent in Win7. Here’s a technet blog article about how to do it with a combination of firewall settings and registry keys: http://blogs.technet.com/b/networking/archive/2010/12/06/disabling-network-discovery-network-resources.aspx Answered by 1.618 Check […]

Continue Reading »
Dec 15, 2012
tom

How do I add items to ‘Favorites’ via GPO?

How do I add items to all users ‘Favorites’, preferably via GPO? the screenshot is just an example from W7 but I’m actually working with 2008R2 Server and RDS Asked by Jack Douglas This turned out to be straightforward enough. The ‘Favorites’ are in %userprofile%\Links (and not in %userprofile%Favorites as you might think). Knowing that, shortcuts can then be defined under Preferences\Window Settings\Shortcuts: Answered by Jack Douglas Check more discussion of this question. Bookmark on […]

Continue Reading »
Nov 29, 2012
tom

GPO best practices : Security-Group Filtering Versus OU

Good afternoon everyone, I’m quite new to Active Directory stuff. After upgraded Functional level of our AD from 2003 to 2008 R2 (I need it to put fine-grained password policy), I then start to reorganized my OUs. I keep in mind that a good OU organization facilitate application of GPO (and maybe GPP).But in the end, it feels more natural for me to use Security-group filtering (from Scope tab) to apply my policies, instead of […]

Continue Reading »
Nov 28, 2012
tom

How do I set a service startup type to be ‘Automatic (delayed)’ using GPO?

A Windows service has 4 different startup types that can be configured: Automatic, Automatic (delayed), Manual and Disabled. I have a service running on a combination of Windows 7 and Server 2008 R2 Desktops that I need to set as ‘Automatic (delayed)’ using a GPO setting, but from what I can see in the GPO editor, the delayed option is missing: Have I missed something obvious, or is this a rather basic omission from Microsoft? […]

Continue Reading »
Nov 25, 2012
tom

How to deploy .exe using Software installation GPO

Is there some way I can use the Software Installation GPO in Server 2012 to deploy things like Java and Adobe Reader? Problem is these are .exe setup files and it seems that Software Installation GPO requires a .msi file. I have read about .zap files but Server 2012 does not seem to support these, .msi files only. Asked by NickC You’ll need an .MSI to deploy through GPO. There are ways to convert your […]

Continue Reading »
Nov 15, 2012
tom

Buffalo NAS Active Directory Integration Group Policy Changes

as a part of effort to integrate buffalo NAS terrastation pro with our AD, we found out that following changes need to be made in the Group policy; The following need to be altered in Domain-> Windows Setttings->Security Settings->Local Policies-> Security Options. Microsoft Network Server: Digitally Sign Communications(always) (Needs to be Disabled, currently its Not Defined) Network Security: Lan Manager Authentication Level(needs to be altered from Not Defined to Ntlm2 negotiate if needed) My questions […]

Continue Reading »
Nov 14, 2012
tom

Can a GPO Startup Script starts a background process and exit immediately?

I have Googled, and not yet found an answer. Scenario: One of my GPOs have a Startup Script that takes a long time to finish. For some reasons, we have to run the scripts synchronously. Naturally, this causes slow startup time (sometimes as long as 15 minutes!) before the Logon screen appears. After profiling and analyzing the perpetrator script, I conclusively determined that the step where it’s taking a long time to finish will not […]

Continue Reading »
Nov 2, 2012
tom

Can I disable sticky keys through a Group Policy for all users?

Our users are constantly managing to turn sticky keys on and then call tech support because their keys are bring up windows instead of typing letters. Is there a way to disable StickyKeys in Group Policy? I tried disabling it on the server itself, but the problem still occurs so I think it must be something set at the user-profile level. Asked by Rachel You can configure the following registry key: HKEY_CURRENT_USER\Control Panel\Accessibility\StickyKeys\Flags=”506″ There is […]

Continue Reading »
Pages:1234567...47»