GPanswers.com

Blocking games on all machines in a domain via group policy

Jon@EDIT — Wed Nov 19, 2008 4:57 am

Author: Jon@EDIT

Posted: Wed Nov 19, 2008 4:57 am

Hi, I have a customer who has one windows 2003 based server with approximately 20 machines attached to its domain. One of the partners of the companys have requested that we (their IT support provider) remove all games from the machines. I relise this can be done manually from each machine however could someone provide me with a method to block or even remove these games through group policy please?

Thanks in advance.

GPO - IE7 Settings

theikkila@eikill.com — Mon Nov 17, 2008 5:03 pm

Author: theikkila@eikill.com

Posted: Mon Nov 17, 2008 5:03 pm

I have a GPO to set certain IE7 settings. The one I am most interested in is the temporary internet files disk usage.

The GPO works fine the first time after creating it. The problem is, if I change the disk usage the GPO does not reapply. I have the same issue with the privacy settings.

Am I doing something wrong or is there a better way to do what I am trying to do? Is there a way to always enforce these settings?

Hiding Extensions from Use

sidhis — Sun Nov 16, 2008 1:40 am

Author: sidhis

Posted: Sun Nov 16, 2008 1:40 am

Jerry, thanks for posting the name of the admx file. Knowing that I found my issue:

http://support.microsoft.com/kb/954372

Apparently it's not there by default on a Vista machine? Uh.

Turn off Outlook 2007 to Exchange 2007 compression

cneville — Sat Nov 15, 2008 10:06 pm

Author: cneville

Posted: Sat Nov 15, 2008 10:06 pm

I need to turn off Outlook 2007 compression. I have installed the template for Outlook 2007 but cannot find the correct setting. Any ideas?

Zero Byte Files? '0x8007000d' error? Try this simple fix!

jhalleck — Fri Nov 14, 2008 5:29 pm

Author: jhalleck

Posted: Fri Nov 14, 2008 5:29 pm

I have been developing some extensive group policies for a hospital I work at and I ran into a strange problem with a very simple fix.

This series of GPO's creates local folders and copies scripts and files to the local PC. All is well until one day all the files that are being copied down are now zero bytes. On top of that the event log is recording this error:

The client-side extension could not remove computer policy settings for 'xxx: Desktop Setup (Computer) {xxxx}' because it failed with error code '0x8007000d The data is invalid.' See trace file for more details.

The fix is to remove the local GPO cache directories from this directory: Documents and Settings\All Users\Application Data\Microsoft\Group Policy\History

Force a gpupdate /force and problem is resolved.

I am still looking into what is corrupted and will post back here if I find out why.

Create a Script to install a Domain Admin as a Local Admin

pinchgem — Fri Nov 14, 2008 11:38 am

Author: pinchgem

Posted: Fri Nov 14, 2008 11:38 am

I'm pretty new to GPO, so forgive my ignorance.

I have a SCCM 2007 server that is giving me trouble. In reading various posts, I have discovered that perhaps I need to have my Domain Admin account that does the agent installing, on each workstation as a local admin. Is there a way to do this through group policy? If so, can someone walk me through it?

Thanks

Specify DC for "CreatePermission" ?

JerryC — Tue Nov 11, 2008 12:28 pm

Author: JerryC

Posted: Tue Nov 11, 2008 12:28 pm

Instead of doing something fancy (like queryiong in the code for the existance of a group that's newly created on all DC's and then allowing the code to proceed), we usually just add a short delay into the script after creation of group objects (basically we add 10 minutes to allow replicatin to DCs in all local sites). Perhaps you wouldn't consider 10 minutes to be "short", but it does tend to work in almost all cases we've encountered

Folder redirection Issue

PingTheServer — Mon Nov 10, 2008 5:32 pm

Author: PingTheServer

Posted: Mon Nov 10, 2008 5:32 pm

Simo wrote:

Ok so, i have setup a test user and OU, applied a GPO to the test OU which has the Folder redirection settings applied. I have gone over all the settings a lot and this side of things seems fine. My issue is that GP is not creating the Folders in the Share i have created. When the test user logs off it syncronises to the old settings that arent appied to this test OU or at a domain level. Any advice on this would be awesome

Thanks Simo

That happened to me, I had to give the share permissions full admin. The default is just read.

If that doesnt do it, maybe make sure that Domain\Users have full NTFS rights

DNS Setting Issue

PingTheServer — Mon Nov 10, 2008 5:04 pm

Author: PingTheServer

Posted: Mon Nov 10, 2008 5:04 pm

As part of our default Domain Policy, which is enforced, I have a setting under
Computer Confi >> Admin Templates >> Network/DNS Client
We have
-DNS Servers Enabled, with two IP's, space delimited as it calls for
-Dynamic Update enabled
-Primary DNS Suffix enabled

However, some of our PC's, which are part of the domain, are not getting this particular part of this policy, while the rest of the policy's options work fine.

Single Domain. 2 DC's running W2k3 R2. Workstations are all XP.

Anyone have any ideas where I could start with this one?

Changing Extra Registry Settings

jim_pinto — Mon Nov 10, 2008 3:41 pm

Author: jim_pinto

Posted: Mon Nov 10, 2008 3:41 pm

Jimmy - Thanks for the information.

There were defined administrative templates so removing the filtering did not help.

I created the MyOwnSetting.adm file and tried that although I could not get that to work either.

Along the way I identified the exact location of the default domain policy .adm files and .pol file on the server and discovered the registry key setting in the Registry.pol file. I tried to manually update the Registry.pol file but that didn't work so I just deleted the Registry.pol file and went back into the Group Policy Manager and set the registry items I needed to have. This seems to have fixed the issue.

Thanks so much for taking the time to post your response.
Jim

User GPO loopback processing mode

JHGBaouns — Mon Nov 10, 2008 10:14 am

Author: JHGBaouns

Posted: Mon Nov 10, 2008 10:14 am

Hi

If you verify what jdobiash just asked is true, then also check the GPOs permissions. As I recall the computers must have access to the "user settings" policy.

/JHGBaouns
Jimmy Lind

Order of Multiple GPSI packages in a single GPO

mnpg — Sun Nov 09, 2008 4:29 pm

Author: mnpg

Posted: Sun Nov 09, 2008 4:29 pm

jdobiash wrote:

I was wondering if there was a way to determine or set the order which multiple packages would run in a single GPO. I have one which requires .NET 2.0 as a pre-req so I added it into the same GPO with the package, but there doesn' t appear to be anyway to order the packages so one runs before another.

I guess I can just break it into it's own GPO if nothing else. Thanks for any suggestions!

check this..
http://www.gpanswers.com/community/viewtopic.php?t=1156

NB: the download from rapidshare works

Proxy Server

dguilloryjr — Thu Nov 06, 2008 9:47 am

Author: dguilloryjr

Posted: Thu Nov 06, 2008 9:47 am

i have a TS enviroment. we use roaming profiles. all of my users profiles are saved (UPLOADED) to the files server upon logging out.

Question is: Are there GPO settings being uploaded also?

Situation: My users are using a software proxy i have installed on one of my servers. So i have a GPO Policy that points the users of the INTERNET ACCESS group to that proxy server. Today i took about 19 people out of that group. But as they logon they are still receiving that proxy setting...

Anyone have any ideas?

New Server - Moving Roaming Profiles

pbaker — Wed Nov 05, 2008 9:49 am

Author: pbaker

Posted: Wed Nov 05, 2008 9:49 am

we are going to be setting up a new server for a company they only have six users setup with roaming profiles in active directory.

which is the best way to move there roaming profiles folders across to the server.

Proximity Printing GPO and removal of same.

KWalkner — Tue Nov 04, 2008 3:37 pm

Author: KWalkner

Posted: Tue Nov 04, 2008 3:37 pm

I have created proximity printing gpo's for specific pcs. This is working great!! using the pushprinter script and deploy printers is working perfect. My problem is, once this has been done, if the pc gets moved and no proximity printer is now required, how to I reset so the printer is now removed?? There has to be a fairly easy way to do this, but I am not finding it anywhere.

Thanks in advance!!