Stack Overflow
Stack Overflow

Questions tagged [gpo]

A Group Policy Object (GPO) provides a way to manage settings for computers and users in an Active Directory environment.

A Group Policy Object provides a way to manage settings for both computers and users. A GPO can be stored locally on a PC, but it is designed for administration of specified sets of computers and users in the environment.

Policy settings can be used to determine security constraints, system and application behaviors, startup and shutdown procedures and much else in the Microsoft Windows network and operating system.

400 questions
20
votes
4 answers

Reading Group Policy Settings using C#

How do I go about iterating over available and/or set settings in a given GPO (using name or GUID) in an AD domain? Without having to export to XML/HTML using powershell, etc. I'm using C# (.NET 4.0).
Nasir
  • 10,935
  • 8
  • 31
  • 39
14
votes
4 answers

Active Directory user password expiration date .NET/OU Group Policy

I have searched the site for information and found this: ASP.NET C# Active Directory - See how long before a user's password expires which explains how to get the value of when the password expires as per Domain Policy. My question is this: what if…
dexter
  • 7,063
  • 9
  • 54
  • 71
12
votes
1 answer

Generate "GET PROCESSING OPTIONS" (GPO) for EMV card (APDU) by PDOL

GPO Command is defined like this as an APDU command: CLA INS P1 P2 Lc Data Le 80 A8 00 00 Lc Data 00 So the missing parts is Lc & Data which we have to compute from the PDOL (if it is given). If it is not given, we can use: 80 A8 00 00 02 8300…
Steffan
  • 704
  • 1
  • 11
  • 25
12
votes
1 answer

Automate OneDrive for Business local setup for use with Folder Redirection

after successfully enabling automatic sign in and mapping a drive to OneDrive for business, I want to take it one step further in replacing on-premise fileshares: I want to use folder redirection to make sure all user data is stored on the OneDrive,…
UniMatrix
  • 121
  • 1
  • 1
  • 5
11
votes
3 answers

The application-specific permission settings do not grant Local Activation permission

A colleague of mine suggested that I could fix this error in the GPO. It is a windows 2016 server. The application-specific permission settings do not grant Local Activation permission for the COM Server application with…
George Murphy
  • 937
  • 2
  • 10
  • 16
8
votes
1 answer

Suppress errors for the whole script

I am want to suppress all the errors that could appear in my VBS logon script. Can I surround the WHOLE 500 lines script with : On Error Resume Next '[... whole script (~500 lines of code) ...] On Error GoTo 0
Jonathan Rioux
  • 1,067
  • 2
  • 14
  • 30
7
votes
1 answer

Distribute Silverlight Out of Browser with GPO, launch from virtual SSO desktop?

We have a Silverlight 5 app, with in and out-of-browser versions. The out-of-browser version is used to provide elevated rights, where accesses to local resources are needed. Now we are facing installing the out-of-browser app in typical hospital…
Caygill
  • 73
  • 2
6
votes
4 answers

How to change default scheduled task process priority in Windows

I've been checking this for a while now. We have a script that creates a scheduled task and it seems that as described in many places across the net, the task priority this process and its descendants receive is 7:BelowNormal Now this causes many…
Ohad Benita
  • 533
  • 2
  • 8
  • 26
6
votes
1 answer

How to Programmatically Set GPO to Not Configured or Disabled

I'm looking for a programmatic solution that has the same effect as setting the "Configure Windows NTP Client" state in GPOE Administrative Templates > System > Windows Time Service > Time Providers > Configure Windows NTP Client to Not Configured…
clover10
  • 61
  • 1
  • 4
5
votes
1 answer

In ActiveDirectory, how are security audit events transmitted to the Domain Controller's event log? How does the mechanism scale?

In a multi-domain-setting, I want to collect security file access audit events at a central place. In ActiveDirectory, it is possible to enable file access auditing at the Domain Controller by creating a GPO. Additionally, at a different 'file…
mischka
  • 620
  • 5
  • 16
5
votes
1 answer

Use Reg Query whilst Registry Editing Tools Disabled in GPO? MS Office Version Lookup

Good day all, So I wrote a simple .bat file I was going to call on user startup to get the MS Office versions. Tested fine for admins but unfortuatnely not so with standard users. I suspect this is because we have: Prevent access to registry…
MartinR
  • 53
  • 5
5
votes
2 answers

Start hidden Internet Explorer

my company is using Sharepoint and ADFS. For the use of WebDav however we need the users to get some tokens which they only get by opening the Internet Explorer and navigate to two sites. However they will lose the token every ~30 Minutes, so it has…
Asharon
  • 353
  • 1
  • 9
  • 24
5
votes
0 answers

Dynamic AppLocker policies applied with powershell at startup, doesn't work until after two minutes

We have an issue with dynamic creation of applocker rules at startup. We are using local GPO on windows 7. Domain GPO is not an option in the project. In our case we use a powershellscript to import applocker rules at system startup. The problem is…
Morten Louw Nielsen
  • 51
  • 2
5
votes
2 answers

Auto generate outlook signature by GPO using multiple signatures

A while back i have searched for a flexible way to automatically generate a signature for different types of users. Our domain has multiple companies and each have different needs. The default scripts you find when googeling simply shows how to…
Tiele Declercq
  • 2,070
  • 2
  • 28
  • 39
5
votes
3 answers

Setting GPO security filter with powershell Set-GPPermissions cmdlet

According to Microsoft the cmdlet Set-GPPermissions accepts the option "-replace": "This ensures that the existing permission level is replaced by the new permission level." I import a GPO from PowerShell. After that I want to set the security…
user1458620
  • 205
  • 1
  • 4
  • 12
1
2 3
…
26 27