Windows 8.1 GPO's on Windows Server 2008 R2

I have a Windows Server 2008 R2 standard as the domain controller.
and we have added several windows 8.1 computers to the domain.
there are several settings, like lock screen image, that we want to set for all the windows 8.1 computers, but that setting is not available on Windows Server 2008 R2's Group Policy Manager.
is there some way I can add those to it?
(Group Policy Management v 6.0.0.1 & Management Console v 6.1 --- in case it helps)
thanks

> is there some way I can add those to it?
Yes. Simply create a central store:
http://deployhappiness.com/creating-the-group-policy-central-store-updated-for-windows-8-12012r2/
Greetings/Grüße,
Martin
Mal ein
gutes Buch über GPOs lesen?
Good or bad GPOs? - my blog…
And if IT bothers me -
coke bottle design refreshment (-:

Similar Messages

Deploying Printer Server via GPO (Windows Server 2008 R2)

Hi guys,
I having encountered problem while deploying printer server via GPO. My operating system is Windows Server 2008 R2. See the details below:
"one or multiple errors have occurred during the execution of a deply or remove printer connection problem"
Anybody know's how to fixs this problem ASAP.
Any suggestion or clarification would be great!
Please advice me, thanks
Regards,
Bishelp

Hi Bishelp,
Firstly, please check the security tab of that printer, make sure your user account has access permission for it.
To perform these procedures of deploy printer connections, you must be a member of the local Administrators group and have write access to Group Policy objects (GPOs) in the AD DS domain or the organizational unit (OU) to which you want to deploy printer
connections. For more information please refer to following MS articles:
Deploy Printer Connections
http://technet.microsoft.com/en-us/library/cc731292.aspx
In addition, it would be helpful if you could help to collect the following information:
What is the detailed information about this error?
What are the steps of deploying printer server?
Regards,
Lany Zhang

Problem installing Windows Server 2008 R2 Service Pack 1 Multilingual User Interface Language Packs

I downloaded Windows6.1-KB2483139-x64-en-US.exe but when I ran it on my Windows Server 2008 R2 SP1 (as Administrator) it does not run properly. I noticed it created a new cabinet file named "lp" briefly, then deleted it. Nothing else
appears on the screen.
My goal is to install Chinese display fonts on my server. Please help.

Hi,
First of all, if you want Chinese display language, you need to choose chinese in the drop down list on the download page. Here's a direct link in case you need it.
http://www.microsoft.com/en-us/download/details.aspx?id=2634(chinese simplified...)
Windows6.1-KB2483139-x64-zh-CN.exe is the file name for the Chinese simplified language pack.
1. The exefile extracts the file cabinet lp.cab which is the file you need to import the language pack.
2. Start lpksetup.exe and Point out the cab-file you just extracted.
If you want to do it with cmdline, you can do it with dism in an elevated command prompt as well:
Dism /online /Add-Package /PackagePath:C:\test\lp.cab
Note that you still need to create a policy or change default language in some way for your users.
Read more on the topic on:
http://technet.microsoft.com/en-us/library/dd744278(v=ws.10).aspx (adding)
http://social.technet.microsoft.com/Forums/windowsserver/en-US/7f019a90-8e48-4bc3-a9d2-e3c531354d04/how-to-use-group-policy-to-define-terminal-users-display-language-in-2008r2-terminal-servers (creating
gpo)
Microsoft Certified Trainer
MCSE: Desktop, Server, Private Cloud, Messaging
Blog: http://365lab.net

Windows Server 2008 R2 Windows 7 folder redirection not working

Hi,
I've got a Windows Server 2008 R2 environment and I'm trying to get folder redirection working on Windows 7 clients. I've configured the group policy on the DC and it's suppose to redirect the user desktop to a folder sitting on another server.
What I've discovered is that any files in that folder aren't being copied down and they aren't visible to the user. I can connect to the folder via its UNC path and when I run a gpresult the GPO is showing that it's applying.
Am I missing something? Shouldn't the files be copied down since I've redirected the desktop? Here are the settings I've used:
Share Permissions
Local Administrators: Owner
Domain Admins: Read/write
Everyone: Read
NTFS
Local Administrators: Full Control on This Folder, subfolders and files.
SYSTEM: Same as above.
Domain admin: Same as above.
Everyone: Traverse folder, execute file, list folder, read data, read attributes and read extended attributes to This Folder only.
GPO Settings:
Under User Configuration -> Policies -> Windows Settings -> Folder Redirection -> Desktop
Setting is Basic - Redirect everyone's folder to the same location.
Target folder location - Redirect to the following location
Root path: FQDN\Shared folder name
GPO is linked to the OU I want to test with and there is a user account in it.
Any tips would be appreciated.
Thanks.

A.
Share Permissions
Local Administrators: Owner
Domain Admins: Read/write
Everyone: Read
Perhaps here is too strong limit.
B. Try to use audit.
Rgds
Milos

Printing problem with Konica Minolta BizHub282 using RDP on Windows Server 2008 R2

Hello,
I have an office setup as follows: Local office IP adress scheme 192.168.201.x. There is a Konica Minolta BizHub 282 printer connected to the 192.168.201.x network as well as around 10 workstations running Windows 7. There are also about
10 additional teleworkers WHO DO NOT NEED print access to the Minolta 282. All of their data is on a cloud server. I have them setup to first connect to the cloud server using a RRAS PPTP VPN and then to start an RDP session to the separate
RDP server. The Konica Minolta works ??okay?? with the easy print services and until now, we have just dealt with the lack of features and the occasional print job that goes crazy and prints out 400 blank pages (btw, this is usually on Excel) or a job
that cuts off the margins even when you have it set to "fit to page" (this usually happens in Adobe.) When I originally set this up, I tried loading the native Konica drivers on the server, but there was no joy because I couldn't get it to
work using the native drivers. The problem at hand is a feature called "account track." This feature authenticates your print job by using an account code. If there is no code, the job just disappears. When I load the native
Konica driver, the ability to turn on this feature is greyed out (see below):
When I use easy print, the codes seem to go through, but as I mentioned earlier, sometimes the print job just goes insane. After researching this, it seems to me that there are two ways to overcome this if we can't turn off the account track feature:
1) Overcome the driver problem. I've tried both of their current drivers without success: VXL and Visual Postscript. When I login to RDP, the (redirected) Konica 282 printer is listed, but when I try to print, it fails due to the missing account track code.
I'm hoping that there is a registry hack to turn this feature on by default with the code or a driver version that works with RDP. They have a WHQL driver available, but it didn't work any better. Is there a way to report this issue to the WHQL labs? Maybe
I can light a fire under Konica's rear end and motivate them to fix the driver.
2) I saw one discussion where the guy installed the printer out in the clouds as a local printer. He seemed to have a site-to-site VPN, not a client-to-site VPN, so this worked. Is there a way to do something similar when the customer connects to the
VPN through standard "connect to workplace" setup? I tried pinging the Konica 282 from the server while logged into the VPN, but the printer could not be found.
3) I considered setting it up as a google cloud print prnter, but that would require everyone to setup a google account and add a layer of complexity.
Anyone else run into this and have a solution? If not, does anyone have any ideas on a solution or workaround?
Thanks,
Jeffery Smith

Hi Jeffery,
Thank you for your comment.
Yeah, you can use universal print driver by configuring Remote Desktop Easy print on RDS Server. Install the driver on RDS server. Now to configure Easy print you need to have minimum client RDP 6.1(But suggest you to install RDP 8.1), .Net Framework 3.5 or
above and RDSH role.
Also under GPO setting need to check below settings.
Do not allow client print redirection: Disable
Use Terminal Service Easy print printer driver first: Enable
Computer Configuration > Administrative templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Printer redirection
For more information, you can refer below articles.
How to configure Microsoft RDS Universal Printing
http://www.virtualizationadmin.com/articles-tutorials/vdi-articles/microsoft-hyper-v/how-configure-microsoft-rds-universal-printing.html
Using Remote Desktop Easy Print in Windows 7 and Windows Server 2008 R2
http://blogs.msdn.com/b/rds/archive/2009/09/28/using-remote-desktop-easy-print-in-windows-7-and-windows-server-2008-r2.aspx?Redirected=true
Hope it helps!
Thanks.
Dharmesh Solanki

How to restrict users working on Windows 7 clients from accessing Windows Explorer and other systems in the network through Group Policy with a domain controller running on Windows Server 2008 r2

Dear All,
We are having an infrastructure setup of around 500 client computers managed through group policy.
Recently the domain controllers have been migrated from Windows Server 2003 to Server 2008 R2.
Since this account requires extremely strict environment, we need to figure the solution for restricting the users from access anything locally.
It would be great if you can assist me with the following query.
How to restrict users logged on Windows 7 clients from accessing Windows Explorer and browsing other systems in the network through Group Policy with a domain controller running on Windows Server 2008 r2 ?
Can we disable Network Tab on the left hand pane ?
explorer.exe is blocked already, but users are able to enter the Windows Explorer by clicking on the name which is visible on the Start Menu.

>   * explorer.exe is blocked already, but users are able to enter the
>    Windows Explorer by clicking on the name which is visible on the
>    Start Menu.
You cannot block explorer.exe when you do not replace the shell - the
desktop you see effectively IS explorer.exe...
Your requirement sounds like you need a custom shell:
http://gpsearch.azurewebsites.net/#2812
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

Macs will not show up on DNS Windows Server 2008 R2

In our office, we have a Windows Server Infrastructure with several Macs (Imacs, mac pros, macbook airs etc).
Active Directory and DNS is running off a Windows Server 2008 R2 Server, with DHCP on a Cisco Router.
DHCP is configured to direct all DNS entries to the Windows DNS Server.
The problem that I'm having is that, while all windows machines show up on the Windows DNS Server, None of the Macs are registered. Macs are able to utilize the DNS Server correctly, but will not register on the DNS Listings.
Because I cannot access or ping Macs via their hostname, I cannot tell our third party backup software to point to a particular machine. Our workstations are all DHCP enabled, and since assigning a static ip to all the Macs here is not an option, I need to get this working, so that I can get our macs backing up.
I've followed a few similar articles, but they appear to be for older 2003 servers, which the 2008 R2 servers do not have those options. I do not want to join the Macs onto the windows domain, I merely want to get them registered on our DNS server.
The mac operating systems vary between Snow Leopard to Mountain Lion
https://discussions.apple.com/thread/1421684?start=0&tstart=0 <--- Article I was following
Thanks,
Rboelens

I'm pretty sure that the DNS registration stuff is part of the Active Directory plug-in on OS X. I'd recommend you give it a try.
GPOs are not enforced on the Macs if they're bound to Active Directory, _unless_ you've extended the Active Directory schema (which is a lot of work). The main benefits to joining Macs to AD ar:
* Centralized password management and policies (as you've defined in AD).
* Single sign-on to various kerberized resources (i.e. Windows share points and internal web pages if you're using IIS and you use Kerberos to secure them, rather than NTLM).
Here's an Apple white paper which may help. I would recommend you read this carefully and then decide whether or not you want to bind the Macs to AD. I'd also recommend you test with a bound Mac to see if resolves this "host name in DNS" issue... I suspect it will.
http://training.apple.com/pdf/wp_integrating_active_directory_ml.pdf

Windows Server 2008 Ent to Windows server 2012 R2 std Migration

Dear All,
We have windows server 2008 x64 Ent with SP2 it's working fine and perfectly . Presently we implemented new data center also we installed windows server 2012R2 Std . we would like to migrate windows form old data center to new data center .
I would like to tell you my current setup :
we have Windows 2008 Ent SP2 server 3 number all are GC domain controller it's working perfectly .
IP Address : 192.168.33.121 , 192.168.33.122 , 192.168.33.123
we have more than 2000 domain users and PC's all clients PC's are using static IP with domain DNS
My new data center Server windows 2012R2 STD
Static IP : 192.168.200.115
Here my doubt :
1. How can we migrate
2. how can we assign new DNS address to all clients more than 2000 PC's
Please could you tell me best way to solve this issue ..
Best Regards
Subash

Hello
tip:
1 check all old application, server /like old Linux samba, exch2003/ to support 2012 dc
2 all firewall add same rule as old DC /if have domain trust open firewall./
3 prompt to dc and gc the new server
4 check DNS server /DNS forwarder if have/ and AD logs
5 run BPA for AD and DNS
6 create gpo or startup script to add/change dns settings on client.
sorry my english

Windows Server 2008 R2 Domain Controller NOT logging EventID 4740

EventID 4740 (account lockout) is not being logged to the event viewer. When searching through the security log there are none to be found. Having accounts locked out and no logging is driving me nuts. Hope someone has run into this before. This is what
i have checked thus far.
>Windows Server 2008 R2 Domain Controller
>Verified the following GPO settings are set and correct:
>Computer Configuration\Windows Settings\Security Settings\Local Policies\Audit Policy\ all are set for Success & Failure
>Computer Configuration\Windows Settings\Security Settings\Advanced Audit Configuration\Logon/Logoff) is set for Success and Failure
>Powershell command Get-Eventlog -log Security -InstanceId 4740 returns no results which makes sense since there are no entries in the security log file.
>No 4740 entries in the netlogon.log debug file
AD and the LockoutStatus tool show the account is locked out but i still have nothing in the logs.
Anyone have any ideas? From everything i can find online , it appears i have everything set properly.
Thanks, Chico

Hi Chico,
I suggest you try to enable this group policy below:
Computer Configuration\Windows Settings\Security Settings\Local Policies\Audit Policy\Audit account management
More information for you:
Missing 4740 EventID's
http://social.technet.microsoft.com/Forums/windowsserver/en-US/c9871d72-7439-46b5-98e6-a7fadfa6ff28/missing-4740-eventids?forum=winserversecurity
If you have multiple Domain Controllers, check this event on other DCs, too.
Please feel free to let us know if there are any further requirements.
Best Regards,
Amy Wang

Group Policy Administrative Templates not applying on Windows XP SP3 - Windows Server 2008 R2

I have a Windows 2008 R2 domain with windows 7, and Windows XP SP3 client workstations.
I have a group policy to deny all access to removable storage in policies/administrative templates/system in user configuration (actually its in the computer configuration as well)
The problem is the policy is having no effect on the Windows XP machines. It works perfectly on Windows 7 machines.
Group policy in general is working on the Windows XP machines, as I can successfully map drives, push out scheduled tasks, and push out printers. (All preferences I know and I have GP Preferences client side extensions installed).
Its almost like the windows XP machines can't "understand" the admin templates from Windows Server 2008 R2.
Do I need to install something on the windows XP machines? What could be the problem?

> Its almost like the windows XP machines can't "understand" the admin
> templates from Windows Server 2008 R2.
Simply read the "supported on" of these settings... Vista and above
required.
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

Printing on kyocera's printers wiht acrobat pro XI on windows server 2008 R2

hello there,
Most of our users work
from a TSE server with windows server 2008 R2.
Since we installed acrobat pro XI, it is impossible to print on all our Kyocera printers.
We also use HP, Konica Lexmarlk printers without problems.
Do you have a solution?
Thank for your advices.

Hi Jeffery,
Thank you for your comment.
Yeah, you can use universal print driver by configuring Remote Desktop Easy print on RDS Server. Install the driver on RDS server. Now to configure Easy print you need to have minimum client RDP 6.1(But suggest you to install RDP 8.1), .Net Framework 3.5 or
above and RDSH role.
Also under GPO setting need to check below settings.
Do not allow client print redirection: Disable
Use Terminal Service Easy print printer driver first: Enable
Computer Configuration > Administrative templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Printer redirection
For more information, you can refer below articles.
How to configure Microsoft RDS Universal Printing
http://www.virtualizationadmin.com/articles-tutorials/vdi-articles/microsoft-hyper-v/how-configure-microsoft-rds-universal-printing.html
Using Remote Desktop Easy Print in Windows 7 and Windows Server 2008 R2
http://blogs.msdn.com/b/rds/archive/2009/09/28/using-remote-desktop-easy-print-in-windows-7-and-windows-server-2008-r2.aspx?Redirected=true
Hope it helps!
Thanks.
Dharmesh Solanki

Windows Server 2008: Add Links to Desktop

Hello,
Does anyone know if it is possible to add hyperlinks to videos or documents to client's desktops on Windows Server 2008? I am trying to use a similar functionality to Active Desktop which allows desktop wallpaper to be .html files.
Thanks

Yes, create an IE shortcut for the hyperlink and simple shortcut for the documents, with GPP it's easy with GPO. (Adding
shortcuts on desktop using Group Policy Preferences in Windows 8 and Windows 8.1) (wrote for windows 8, but the same gpo can be applyed to 2008R2)
Regards, Philippe
Don't forget to mark as answer or vote as
helpful to help identify good information. ( linkedin endorsement never hurt too :o) )
Answer an interesting question ? Create a
wiki article about it!

Pin Programs on the Windows 7 Taskbar & Start Menu with Group Policy (Windows Server 2008 R2)

Dear ALL,
I want to Pin Programs on the Windows 7 Taskbar & Start Menu with Group Policy (Windows Server 2008 R2) as per below description. Can someone please help me how to proceed and achieve this.
Pin the following applications to the Taskbar:
Outlook
Pin the following applications to the Start Menu:
Outlook
Excel
Word
Internet Explorer
Software Center
Regards,
Amit Kumar Rao

https://www.google.de/search?q=windows+7+pin+to+taskbar+vbs
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

Where is the forum for Windows Server 2008 R2?

Where is the forum for Windows Server 2008 R2?
Thanks

Hi Robert,
Just to add, you can ask questions related to windows Server 2008 R2 in the forums which don't contain Windows server 2012/R2. In general, we suggest asking questions based on this main parts, such as GPO or network, you just post the
questions to the related forum in the link above. If you don't know which is the best forum for your question, you can ask in Windows server general forum.
Best regards,
Susie

Windows Server 2008 R2: Using PowerShell to send a MSI file to all workstations

Hello!
We are currently using Windows Server 2008 R2. In the upcoming months, we are releasing new software. Instead of touching all the machines with gpupdate /force, we would like to know if we could somehow use Windows PowerShell and send that
command to all the computers in our organization? We are currently in the process of using Group Policy Management to set up the new GPO. After we create them, we would like to send the MSI file to all workstations. I know it is SUPER easy to do within Windows
Server 2012... as I have read articles and seen screenshots. I am just having a hard time figuring out how to make it work with Windows Server 2008 R2.
Thanks!
Megan

New-PSSession -computername Computer
where Computer is one of your remote computers. If that succeeds, great! But I'm guessing it won't and enabling that on all of your computers would require more effort than what you're trying to accomplish in the first place.
Psexec is free to download and you don't have to deploy it:
http://technet.microsoft.com/en-us/sysinternals/bb897553.aspx
As far as identifying your target computers, it really depends on your environment. Get-ADComputer is effective, but the example I provided above would get literally every computer in your active directory - is this something you want to deploy to
any and all servers, workstations, etc? How big and complex is your AD? Is this something you need to coordinate with all your systems around about the same time, or can it be staggered? Do you expect your target computers not to reboot between
now and then? I know that's a lot of questions, but your question is loaded and not easy to answer without knowing more about your environment.
What about this?
http://technet.microsoft.com/en-us/library/jj134201.aspx
There is a requirement to have certain firewall exceptions on your target systems, but hopefully they are because that is the best approach.
I hope this post has helped!

Windows 8.1 GPO's on Windows Server 2008 R2

Similar Messages

Maybe you are looking for