What is group policy

original title: group policy

What is group policy?

What is group policy?

More often than otherwise, you can find answers by going to Google search.

Here is an excerpt from http://en.wikipedia.org/wiki/Group_Policy

Group Policy is a feature of the Microsoft Windows NT family operating System. Group Policy is a set of rules that control the working environment of the user accounts and computer accounts. Group Policy provides centralized management and configuration of the operating systems, applications, and settings of the users in an Active Directory environment. In other words, group policy partly controls which users may or may not do on a computer system. Although group policy is most often used for enterprise environments, it is also common in schools, small businesses and other smaller organizations. Group Policy is often used to limit certain actions that could present potential security risks, for example: to block access to the Task Manager, to restrict access to certain folders, disable the download of executable files and so on.

.................................................................................................................................................................

There are many more articles on this topic. Just google for them.

Tags: Windows

Similar Questions

  • If I have my laptop, is why Windows Defender turned off because of group policy?... What is group policy?

    At the heart of the problem is this business of permissions.  Why solo owners of laptops not affiliated with companies or other computers must be prey to group policy and permissions at every turn.  I tried to turn off the UAC and I couldn't find even a file for group policy, and again I am forbidden to use Windows Defender because of this error message.  Only recently have I won control of most of my files and folders by disabling UAC and passing by claiming ownership of my own software and files.  I guess I really two questions: (1) how can I get rid of this feature to administer unnecessary and, as in the good old days, before Vista came, just use my computer without messages such as "you don't have permission to use this...» "and (2) my second question which dovetailed in the the first is" why the hell did I this stupid message from group policy?  There is no groups affiliated with my Compaq Presario, and in fact, it is not a group on my system folder in the first Subscriber.  I'm not very impressed with Vista or Windows Defender.  I could even ignore these problems, but there is a principle here.  I've read enough Articles to understand that I'm not the only person facing this nonsense!

    You cannot change how permissions work under Vista.  The administrator has certain rights and access; However, even for administrators, several parts of the system do not have access (because they are points of junction to towards the rear compatabiility and must not be changed or your programs do not work or because they are system files, you do not make changes.)  Despite this, some of these areas can still be accessed at your own risk - you may do something that can repair only a clean install), I provided the following information about permissions and ownership (which can help you navigate the system correctly and without causing any damage).

    To view your permissions, right-click on the file/folder, click Properties, and check the Security tab.  Check the permissions you have by clicking on your user name (or group of users).  Here are the types of permissions, you may have: http://windows.microsoft.com/en-US/windows-vista/What-are-permissions.  You must be an administrator or owner to change the permissions (and sometimes, being an administrator or even an owner is not sufficient - there are ways to block access (even if a smart administrator knows these ways and can move them - but usually should not because they did not have access, usually for a very good reason).)  Here's how to change the permissions of folder under Vista: http://www.online-tech-tips.com/windows-vista/set-file-folder-permissions-vista/.  To add take and the issuance of right of permissions and ownership in the right click menu (which will make it faster to get once it is configured), see the following article: http://www.mydigitallife.info/2009/05/21/take-and-grant-full-control-permissions-and-ownership-in-windows-7-or-vista-right-click-menu/.

    To resolve this problem with folders, appropriating the files or the drive (as an administrator) and give you all the rights.  Right-click on the folder/drive, click Properties, click the Security tab and click on advanced and then click the owner tab.  Click on edit, and then click the name of the person you want to give to the property (you may need to add if it is not there--or maybe yourself). If you want that it applies to subfolders and files in this folder/drive, then check the box to replace the owner of subcontainers and objects, and click OK.  Back and now there is a new owner for files and folders/player who can change the required permissions.  Here is more information on the ownership of a file or a folder: http://www.vistax64.com/tutorials/67717-take-ownership-file.html.  To add take ownership in the menu of the right click (which will make it faster to get once it is configured), see the following article: http://www.howtogeek.com/howto/windows-vista/add-take-ownership-to-explorer-right-click-menu-in-vista/.

    =======================================================================================================================

    Regarding Windows Defender the most likely reason it is disabled because you have installed an AV or security suite program that does so automatically during its installation (and it was probably necessary for the new software works correctly without causing any problem).  What AV or Security Suite program do you use?

    Regarding group policy, if you wanted to access it go to start / search box and type gpedit.msc and enter and then double-click on the program that appears in the search results.  These AV programs and security can use Group Policy to disable Windows Defender (I don't know how they do it), but it may be there somewhere).  Because re-activate NOT Windows Defender while the other this software is still installed on your system that could cause some conflixts, freezes, crrashes, corrupt and data files and all kinds other problems - it has been disabled for some reason.

    If you want to use Windows Defender, then choose a program or AV security suite which does not disable the Defender during the installation.

    =======================================================================================================================

    I hope this helps.

    Good luck!

    Lorien - MCSA/MCSE/network + / has + - if this post solves your problem, please click the 'Mark as answer' or 'Useful' button at the top of this message. Marking a post as answer, or relatively useful, you help others find the answer more quickly.

  • Best practices using vWorkspace User Management or group policy?

    What is considered to allow faster connections: setting options in the vWorksapce of management of user environment or by using Group Policy to apply settings?

    When environment vWorkspace user settings apply to what is group policy? Before or after?

    Hi John,.

    I think it depends on what you're trying to reach. It may also depend on if you have users outside of your virtual desktop environment, if you do, then group policy may be the best meet the needs of all your users.

    I've seen good results with combined required Windows and metaprofiles vWorkspace profiles.

    Regarding the second question, yet once it depends on the GPO but vWorkspace profile settings apply to log on.

    I hope this helps.

    Thanks, Sam

  • What are the differences between the services and site domain group policy and group policy?

    What are the differences between the services and site domain group policy and group policy?

    Server must wonder about the Technet site.  http://social.technet.Microsoft.com/forums/en-us/home

  • What windows sbs 2003 disc is group policy

    Installation on our Server 2003 has partitioned the drive c and not left enough room for major programs. I removed some files but not system files and now whenever I try to run the group policy, he says he's on a disc, the disc? I tried find but can not.

    Please can someone tell me what file and of the installation windows sbs 2003 discs I can find it on disc, or is there a download I can use.

    Hello

    Your question of Windows is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the IT Pro TechNet public. Please post your question in the Technet Windows Forums.
    Here is the link:
    http://social.technet.Microsoft.com/forums/en-us/winserverGP/threads

  • What is client group policy?

    It doesn't let me access my account.  I share the pc with my partner.

    Hi Calvin,

    Welcome to the Microsoft community.

    According to the description, you cannot share the computer with your partner that you are facing problems with Group Policy client. Am I wrong?

    1 did you changes to the computer before the show?

    2. do you get an error message/code?

    Group Policy in part controls what users can or not do on a computer system, for example: a policy of complexity of password which prevents users to choose a password that is too simple, to allow or prevent users not identified from remote computers to connect to a network share, to block access to the Windows Task Manager or to restrict access to certain folders.

    Please refer to the article for the Group Policy settings:

    http://windows.microsoft.com/en-US/windows7/Group-Policy-management-for-IT-pros.

    http://Windows.Microsoft.com/en-us/Windows7/what-Group-Policy-settings-are-used-with-BitLocker

    Note: sections apply to Vista

    Let us know if you have other questions about Windows in the future. We will be happy to help you. We at Microsoft, strive for excellence and provide our customers with the best support.

  • What group policy to disable hide icons and notifications on the taskbar?

    What group policy to disable hide icons and notifications on the taskbar?  I used to play with makes it inaccessible hide icons and notifications in the taskbar to group policy, which still makes them show, but now I change my mind. The problem is, I can't find this group policy more, it was all just too many of them and I changed so many policies, I don't remember that we made sure and can find no possible solution... Help, please.

    Hello

    One last thing to check.

    Open the Registry Editor and navigate to the following location.

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

    In the right side window, click on the NoAutoTrayNotify value and select Edit. If there is a '1', replace it with "0".

    Quit the registry editor and Log Off/Log.

    Test.

    Let us know.

  • What is the difference when the IP pool is placed under the group policy and SSL tunnel-group

    Hi usually ip address pool is placed under the group policy in Anyconnect VPN, but I noticed the ip address pool is also placed under the Anyconnect VPN tunnel-group in some ASA. What is the difference between both of them? Thank you

    Both are used for the same purpose, but that under group policy always takes preference.

    Kind regards

    Sandra

    If you find the answer useful, please mark it as correct while others can benefit from the discussion.

  • Windows defender and he says Defender is disabled by group policy? That is what it is?

    Remember - this is a public forum so never post private information such as numbers of mail or telephone!

    Ideas:

    • JUST a SUBSCRIPTION to McAFEE SECURITY WAS EXHAUSTED
    • CANNOT OPEN WINDOWS DEFENDER
    • SAYS WINDOWS DEFENDER IS DISABLED BY GROUP POLICY?

    First, go to your application of features & programs or add remove & uninstall your McAfee has expired.
    Then, you use McAfee Removal Tool to remove the 'remains' of McAfee from the system. Here is the link:
    http://www.pchell.com/virus/uninstallmcafee.shtml
    Scroll down until you see:
    Follow these instructions to download the McAfee removal tool and run it to remove the programs above.
    (download the removal tool, then run it)

    When this is done, here is how to restart Windows Defender:

    Start button > in the search box, typeServices> press the Enter key > scroll to find Windows Defender, click on it >...
    topic status , it must be said... Has begun
    under Startup Type, it must be said... Automatic
    If it does not say that, right click on Windows Defender > click Properties > in the new window, make the necessary changes, as above > click OK when finished.

    For the benefits of others looking for answers, please mark as answer suggestion if it solves your problem.

  • What editions of windows 7 in charge of controls of group policy?

    This question is about my assessment of session has + and the answer is no where in the course of training.

    The options are

    Starter
    Ultimate
    Professional
    Home Premium

    Please help me.

    http://Windows.Microsoft.com/en-us/Windows7/group-policy-management-for-it-pros

  • New want: set group policy not available in this edition of Windows 8?

    Just before I used my recovery on Envy 6 partition I bought less than a month ago, I tried to define group policy in order to take control of my administrator account. I received an error message: "group policy is not a feature of this edition of Windows 8.1."

    I knew My Envy 6 security problems (in my opinion, nothing to envy about it...) since I got it.

    I have known this same problem several times, with different computers, then perhaps it is not just HP.  However, I spent the time shared an office with two of its engineers, who blew me subject my security concerns.

    What happens first, did someone other than I turn my computer and started using my machine as a distributed resource.  When I look at the resource monitor, the memory usage remains at a stable level around 30%; the window of the disk (Disk 0, I presume) remains at about 100%, for several minutes after I started working.  There is evidence that copies of the countless applications are pushed through this channel to an unknown person to me.

    In other words, it's like I had to work in a large company where administrators are able to share my computers memory and storage (and also, copies of programs on my machine) with others.

    Yesterday, I took my machine at Best Buy Geek Squad for the third time since I bought it less than a month ago.  For the first time, they have me seriously on this security issue.  Yesterday, the fourth time I used my security partition, (once I had looked into the Task Manager and saw more than 50 tasks scheduled to run when the machine has been slowed and on current alternative) I decided to see what would happen if I leave the fully charged battery to work.

    What I saw, it was a machine to panic.  I saw a sequence of four first screenshots, then a flash of a task list, and then a series that looked like screen shots again - this time fourteen of them.  I watched it happen to three different times.  Then, the machine made me a 'Capital A administrator' password, which I didn't.

    I looked around resources here and on Windows and discovered that I could access boot options by turning on the machine and pressing the ESC key.  I ran through the list of options there and finally chose EFI, where I finally has two ways to start at an unknown address.  So that's another trick of Geek Squad was in order (I bought their contact service when I bought the machine, what the devil).  This time there was pretty much irrefutable evidence that something was wrong at the level of Internet security.

    I realized that it is way to much information.  I'll ask just once more the question: is it possible that my brand new machine doesn't really have a 8.1 Windows edition that does not include the ability to group policy management?

    Thanks to all who responded here.

    Hi @ElizaDoolittle8

    Thank you for your request, I am happy to help you!

    I understand that you have some security issues. You have taken your computer to the Best Buy Geek squad, 3 times and have used the 4 times recovery partition.

    Only Windows 8 Ultimate and professional have the Group Policy Manager.

    I suggest you do a full restore in the factory.  This will remove all the threats that may be installed.

    If you don't have virus protection, I would say that you install one because it would help.

    Performing a recovery of HP (Windows 8) system

    During the recovery process, you will have an option to backup your personal files to avoid loss.  If you do not have a recent backup I suggest you only do one now.

    Restore files that have been supported to the top using HP Recovery Manager (Windows 8)

    Here is a link to a YouTube video.  Desktop version of Windows 8 open the Group Policy Management Console

    Here is a third-party link to How to activate 'Group Policy Editor' (gpedit.msc) in Windows 7 Home Premium, Home Basic and Starter Editions? who, according to some readers have worked for them.  You can try it, but I don't know if it works or

    not. (of A? KVG)

    I hope this helps.

  • How to set up a personalized message for the prevention of the installation of the software via group policy in windows server 2012

    Hello

    I would like to know how to set up a personalized message for the prevention of the installation of the software via group policy in windows server 2012 R2.

    I released some software in my field to a distribution point and I of installation for few of them software restriction policies. But I don't want the default next message below:

    "The system administrator has set policies to prevent this installation." This installation is forbidden by system policy. Contact your system administrator. »

    Instead, I would like to set up a custom message. Please tell us how can I do same by using Group Policy, if not available, what are the alternatives that I can use.

    This issue is beyond the scope of this site (for consumers) and to be sure, you get the best (and fastest) reply, we have to ask either on Technet (for IT Pro) or MSDN (for developers)
    *
  • Unable to set the password in Active Directory 2008 R2 group policy

    We are trying to create a group policy that renames the built-in to our servers administrator account and change the password.  The strange thing is that when we create this Group Policy Computer Configuration > preferences > Control Panel Settings > local users and groups, the password section is grayed out.  We have a test domain, and this isn't a problem here.

    We tried to set the password with different accounts (domain administrator and other members of the Domain Admins group) and different machines (directly on my workstation and domain controller).  Here is a screenshot of what we see.  Any help would be greatly appreciated!

    I found the cause in MS14-025.

  • How to set group policy to display the computer name or the IP address for "send to."

    original title: I need a group political templete windows 2003 get the ip address or computer name when you use the "send to" in a shared folder on a server

    I need a group policy windows 2003 templete to get the name of computer or ip address when you use the "send to" in a shared folder on a server

    Hello
     
    Your question of Windows is more complex than what is generally answered in the Microsoft Answers forums. Appropriate in the TechNet forums. Please post your question in the TechNet forums.
     
    You can follow the link below to ask your question:

    http://social.technet.Microsoft.com/forums/en-us/winserverGP/threads

    I hope this helps!

  • How to associate keys to activate product with installation group policy assignments?

    Hi people,

    I have a small number of desktop and laptop computers and I want to install Microsoft Office on each with group policy, but each assignment will eventually require the 25-character product activation code.  How this association?
    Thanks for the help,
    Chris.

    Hello

    The question you have posted is related to professional level support. Please visit the below mentioned link to find a community that will support what ask you:

    http://social.technet.Microsoft.com/forums/en-us/category/officeitpro, visio2010, grooveserveritpro

Maybe you are looking for