Creating Group Policy Windows Server 2008 R2

Hello guys,
I want to implement a group policy/policies across the network to perform the following;
1) Restart users PCs across the network on the last Friday of every month
2) Update the PCs with Microsoft patches or updates if any during the restart
3) Send a notification message on
Wednesdays preceding that Friday to the users, informing them to save their work and close all the programs and files as their PCs will be restarted on Friday.
Any help on this would be greatly appreciated.
Thanks in advance
Cheers

Hi Sudhirhk,
You can configure a GPO via a script or schedueled task of GPP to restart PCs. Please refer to the following similar case:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/3608dd77-3727-4cc6-b3c6-cfcf1a486a2a/restart-computers-via-gpo?forum=winserverGP
What's more, you can also use schedueled task to send notification messages at the appointed time, please refer to the following similar case:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/34f06393-7a8a-4c29-bd2d-726266a55130/scheduled-task-email-notification-server-2012?forum=winserver8gen
In addtion, as for the updating, please refer to the following article:
Configure Automatic Updates by Using Group Policy
Please apply the GPO according to your requirements.
Regards,
Lany Zhang

Similar Messages

Pin Programs on the Windows 7 Taskbar & Start Menu with Group Policy (Windows Server 2008 R2)

Dear ALL,
I want to Pin Programs on the Windows 7 Taskbar & Start Menu with Group Policy (Windows Server 2008 R2) as per below description. Can someone please help me how to proceed and achieve this.
Pin the following applications to the Taskbar:
Outlook
Pin the following applications to the Start Menu:
Outlook
Excel
Word
Internet Explorer
Software Center
Regards,
Amit Kumar Rao

https://www.google.de/search?q=windows+7+pin+to+taskbar+vbs
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

Group policy Preferences server 2008 and windows 7

Hi I have been struggling with an issue with group policy preferences for a while now with regard to pushing out printers to windows 7 (32/64 bit) Machines. I have two DC servers one is 2008 and the other is 2008 r2. I have setup the group policies on the
2008 server as it is the only one i am allowed to access regularly to do this.
Basically here is my problem. I have created multiple GPO's to send out printers from out print server to classrooms across the school district I work for, I have a mix of xp and windows 7 machines. I have the server setup with both 32 and 64bit drivers
for all printers on that server, we have a mix of oki and hp and ricoh. I know all the connections work and the drivers work well, however when I push them out using the group policy, the windows 7 machines don't install the printers. The xp machines do this
perfectly well when I install the client side extensions patch, but they just will not pull down on the 7 machines unless i install the printer first manually, then delete it and then run gpupdate. In that instance it will work, but obviously i don't want
to have to go round thousands of computers doing this manually.
Just as a side note, each classroom has its own user account and its own printer.
If anyone has any advice as to how i can go about resolving this issue i would greatly appreciate it, this has been a problem i have been researching and trying to fix since January.......

Hi,
>>The xp machines do this perfectly well when I install the client side extensions patch, but they just will not pull down on the 7 machines unless i install the
printer first manually, then delete it and then run gpupdate.
Before going further, we can run command
gpresult/h gpreport.html with admin privileges to collect group policy result on the troubled Windows 7 clients to check the issue. Besides, we can also check event logs in Event Viewer to see if some related error events were logged.
Besides, I want to confirm if we have disabled
Point and Print Restrictions under both User Configuration and Computer Configuration. To have a consistent experience, it’s recommended that we disable the policy setting in both locations if we are dealing with mixed-level clients.
Regarding this point, the following article can be referred to for more information.
Point and Print Restrictions policies are ignored in Windows Vista SP2, Windows Server 2008 SP2, and later Windows operating systems
http://support.microsoft.com/kb/2307161/en-us
Best regards,
Frank Shen

Windows Server 2008 Active Directory Trust

Hi ,
Can anyone help with the answer to the following questions please?
a) Whether Microsoft Windows Server 2008 SP2 Standard Edition support AD trust relationships (one-way; two-way)
b) Whether we can create trust between Windows Server 2008 R2 SP1 and Windows Server 2008 SP2 Standard Edition AD servers?
Thanks in advance.
India1947

Hello,
First of all, please confirm the firewall on the Windows Server 2008, the TCP/IP filter or any 3 party firewall is not blocking the RPC and ICMP traffic between two domain controllers.
1.    Have a test of creating and verifying trust while all firewalls are all disabled. Then re-create and verify the trust to check how it works.
Allowing Inbound Network Traffic that Uses Dynamic RPC
http://207.46.196.114/windowsserver2008/en/library/d37f96c6-c729-4b29-80a9-88db3d97b8631033.mspx
2.    If it still fails, please try to collect the following information for our further investigation:
-      Run "Netdiag /v >>netdiag.txt" on both DCs
-      Network Monitor trace when verifying the trust:
Download the NetMon3.1 from the following link:
http://www.microsoft.com/downloads/details.aspx?FamilyID=18b1d59d-f4d8-4213-8d17-2f6dde7d7aac&DisplayLang=en
1.    Install the NetMon on Windows Server 2008.
2.    In the Microsoft Network Monitor 3.1 window, click Create a new capture tab….
3.    In the new tab, select all the Network Adapter in the Select Networks window.
4.    After that, press F10 to start NetMon.
5.    In the Active Directory Domains and Trusts, try to verify the trust to reproduce the issue.
6.    After that, go back to the Netmon window and press F11 to stop the Netmon on the Windows Vista machine.
7.    Press Ctrl+S to save the Netmon files.
Please send files to [email protected]
Note:
a. Please include the following three lines for this issue in the email body:
Trust Windows Server 2008 and Windows 2000
http://forums.microsoft.com/TechNet/ShowPost.aspx?PostID=3210801&SiteID=17
Miles Li - MSFT
b. We will continue to discuss the issue here in the newsgroup and will NOT reply via emails.
c. Pease post a quick note in the current thread to inform me after sending the email.
Thanks.

How to restrict users working on Windows 7 clients from accessing Windows Explorer and other systems in the network through Group Policy with a domain controller running on Windows Server 2008 r2

Dear All,
We are having an infrastructure setup of around 500 client computers managed through group policy.
Recently the domain controllers have been migrated from Windows Server 2003 to Server 2008 R2.
Since this account requires extremely strict environment, we need to figure the solution for restricting the users from access anything locally.
It would be great if you can assist me with the following query.
How to restrict users logged on Windows 7 clients from accessing Windows Explorer and browsing other systems in the network through Group Policy with a domain controller running on Windows Server 2008 r2 ?
Can we disable Network Tab on the left hand pane ?
explorer.exe is blocked already, but users are able to enter the Windows Explorer by clicking on the name which is visible on the Start Menu.

>   * explorer.exe is blocked already, but users are able to enter the
>    Windows Explorer by clicking on the name which is visible on the
>    Start Menu.
You cannot block explorer.exe when you do not replace the shell - the
desktop you see effectively IS explorer.exe...
Your requirement sounds like you need a custom shell:
http://gpsearch.azurewebsites.net/#2812
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

Windows Server 2012 Group Policy Block USB Storage devices @ User Level Not getting applied on a Domain Client machine with Windows Server 2008 R2. Why?

Hello,
I have a Windows Server 2012 R2.
I have configured the Group Policy on it to block the usage of USB - Storage Devices @ user level on the client machines. It works properly for my Windows 7 client machines but it's not working on one of the machine having Windows Server 2008 R2 installed
on it (this machine is also a domain client in the same domain).
I will really be thankful if anyone can suggest some solution to this issue.
Please feel free to write back in-case I have missed anything obvious to be shared.
Thanks!
-Vinay Pugalia
If a post answers your question, please click "Mark As Answer" on that post or
"Vote as Helpful".
Web : Inkey Solutions
Blog : My Blog
Email : Vinay Pugalia

Hi,
Any update?
Just checking in to see if the suggestions were helpful. Please let us know if you would like further assistance.
Best Regards,
Andy Qi
TechNet
Subscriber Support
If you are TechNet
Subscription user and have any feedback on our support quality, please send your feedbackhere.
Andy Qi
TechNet Community Support

Group Policy Administrative Templates not applying on Windows XP SP3 - Windows Server 2008 R2

I have a Windows 2008 R2 domain with windows 7, and Windows XP SP3 client workstations.
I have a group policy to deny all access to removable storage in policies/administrative templates/system in user configuration (actually its in the computer configuration as well)
The problem is the policy is having no effect on the Windows XP machines. It works perfectly on Windows 7 machines.
Group policy in general is working on the Windows XP machines, as I can successfully map drives, push out scheduled tasks, and push out printers. (All preferences I know and I have GP Preferences client side extensions installed).
Its almost like the windows XP machines can't "understand" the admin templates from Windows Server 2008 R2.
Do I need to install something on the windows XP machines? What could be the problem?

> Its almost like the windows XP machines can't "understand" the admin
> templates from Windows Server 2008 R2.
Simply read the "supported on" of these settings... Vista and above
required.
Martin
Mal ein
GUTES Buch über GPOs lesen?
NO THEY ARE NOT EVIL, if you know what you are doing:
Good or bad GPOs?
And if IT bothers me - coke bottle design refreshment :))

Windows Server 2008 Standard: Multiple Concerns: Inconsistent group policy update on client PC's, frequent disconnections of map drives and remote connection

Hi this is my first time to ask a question here in this community.
I am a system administrator here at my work and we are having some issues on some servers that we handle. Network in our office is stable and we have determined it is not a problem on the connection.
First issue - One of our domain controller consistently drops out on our Directory Server and saying it's unavailable.
Second issue - Unable to ping hostname but IP address works fine. (Sometimes hostname is ok but very intermittent)
Third issue - Since connection is unstable map drives causes to disconnect
If someone can provide any assistance on this matter it would be a great help. If screenshots needed for proper assistance would be appreciative.
Just to add that this only happen after a power failure last April of this month and a few weeks bluescreen started to show. It is a hazy version wasn't able to get any code that may lead to a hardware failure.
Now our main RDC.local is also affected so we are trying to isolate this issue and exhauted my brain since we cannot determine what causes it. Need external assistance just to give us a lead on where we can get this resolved.

Hi Ryan,
Before going further, would you please let me confirm something more? Thanks for your understanding.
1. For first issue, would you please let me know OS edition information of the problematic DC? Was it Windows Server 2008 R2 or Windows Server 2012 or any other?
à
One of our domain controller consistently drops out on our Directory Server and saying it's unavailable.
Would you please let me know the complete error message or provide a screenshot of it?
(Please hide all protected or private information.) Meanwhile, please log on the problematic DC and check if find relevant events or errors in Event Viewer.
2. For the second issue, it seems to be a DNS issue. Did you run
ipconfig /flushdns and ipconfig /registerdns command? Any find? Meanwhile, please use
ipconfig /all to display full TCP/IP configuration and check. Or you can post the
ipconfig result here. It may help us to go further analyze. By the way, would you please let me know error message that you can get when be unable to ping via hostname?
3.
àSince connection is unstable map drives causes to disconnect
May be a cause.
If any update, please feel free to let me know.
Hope this helps.
Best regards,
Justin Gu

I can not update a Windows Server 2008 R2 with Software Update Group in SCCM2012

Hi all,
I got some problems with update deployments these days.
I try to configure SCCM2012 to update 1 Windows Server 2008 R2 (with Hyper-V / This server is in a cluster)
Actually i've 4 other Hyper-V servers and i would like to add one more in the cluster called Hyper-V5. To do that i need that all Hyper-V servers use the same Windows Updates.
I created a collection for my Hyper-V servers and then a Software Update Group with all needed updates (checked the list of another HV-Server).
I did a deployment on this collection using this new Software Update Group.
I checked the Sofwtare Center's logs on the Hyper-V5 server and i saw that synchronization has a successfull state.
But there is no updates installed or displayed in Sofwtare Center.
Here is some screenshots : Oh no i can't post image because ... "Body text cannot contain images or links until we are able to verify your account." waiting to be verified since months.
Thanks for your help.

Hi,
Have you try to run Software Updates Scan Cycle and Software Updates Deployment Evaluation Cycle Actions on the client? Please check ScanAgent.log and PolicyAgent.log to see whether the client received the updates deployment policy.
Best Regards,
Joyce Li
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Administrators unable to write to a text file created by another Administrator on Windows Server 2008.

Why are Administrators unable to write to a text file created by another Administrator on Windows Server 2008?
--- The Administrators already have full control so how do I fix this? ---
Example: On a Windows Server 2008 (SP1): user A (who belongs to the Administrators group) logs in and creates a directory C:\foo and creates a file readme.txt in the foo directory. User B (also a member of the Administrators group) logs in and opens C:\foo\readme.txt in notepad. User B types something and tries to save the file. User B cannot save the file…an option to save as some other file name is presented. The security permissions of C:\foo\readme.txt show that Administrators have full control.
Work around 1: Explicitly add user B to have full control over the foo directory. The problem is that all the all other Administrators still need to be added (current and future).
Work around 2: Change the Users security permission to be full control on the foo directory. (this seems dangerous!)
It is interesting to not that this same procedure is not a problem in Windows Vista. (Any insight about the difference?)
Sincerely,
Ian

so there is no way to change this without literally shutting down the UAC?
I have files that I need to modify all the time, and it is very annoying to have to save as to my desktop modify and then copy and paste the file again.
I would also rather not give myself permissions to the entire C:\ Drive even specified Folders or documents, etc......
You can change these settings without bringing down the UAC

1.    Click Start, type gpedit.msc and press Enter.
2.    Expand Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options.

3.    Double-click “User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode” on the right pane.
a.    Choose “Elevate without prompting” and click OK.
b.    Double-Click “User Account Control: Admin Approval Mode for the Built-in Administrator account”, Click Enable, Apply and then OK
c.     Double-Click “User Account Control: Run all users, including administrators, as standard users”,Click Enable, Apply and then OK
Then reboot the Server. You should now have the ability to modify any document, etc....

Domain group validation hangs during ECC 6.0 install on windows server 2008

Hello to the group.
We are installing ECC 6.0 R3 on a windows server 2008 system (with SQL 2008) and the install is hanging in the user/group creation steps. Specifically, the install is able to create a group at the domain level but hangs when it tries to verify that group.
What's funny is the system is able to create two local domain groups without any issues.
Have any of you run into this same issue? We've tried updating sapinst and restarting the install process using a known good domain admin account (we are also creating a ticket to SAP support).
Thanks for any help!
J. Haynes

> This is actually a Domain based install.
ok
> So far after 12 hours the install is still hung. So we are looking at both network and issues with the AD related DLLS.
You can doubleclick on the orange icon (the sapinst backend process) next to the clock on the desktop and scroll down. There you may find a hint why it's taking so long.
Maybe you have a wrong/missing DNS server entry so the server is unable to find the domain controller, maybe the firewall is enabled and blocking asynchronous answers.
Markus

Error While Creating Windows Server 2008 SP2 32-BIT Virtual Machine

I am facing an error while creating a Virtual Machine on the Cloud. The Error is below:
Error (610)
Virtual Machine Manager was unable to find a value for the required Sysprep parameter ProductKey.
Recommended Action
Add the missing Sysprep parameter either to the answer file or to the operating system configuration, and then try the operation again.
My Template does not have the Product Key defined. The OS is Windows Server 2008 SP2 32-BIT. Is defining Product Key absolutely necessary? I have other Templates for other Operating Systems and they are working fine. Only facing problem
with this.
Any help would be appreciated.

In the SCVMM world a 'template' is composed of the following: a VHD with an OS that has been generalized (sysprep), virtual hardware profile (settings), and an OS profile.
The OS profile is required to have a product key. A MAC activation key at the minimum. But the key is required.
If you deploy a VM from a VHD, the same customization assumptions are not at play. Which is why it succeeds. (there is no template in this case, there is also no requirement that the OS in the VHD be sysprep'd).
SCVMM has rules. And lots of things don't make sense until you begin to understand them and play within them. (I am not saying that the SCVMM rules are a good thing, just saying they exist)
Brian Ehlert
http://ITProctology.blogspot.com
Learn. Apply. Repeat.

Cisco LMS 4.1 Installation on Windows Server 2008 R2, Databases not created

Hi There,
As always, I am trying to install LMS 4.1 on windows server 2008 R2 and after the installation and login to the LMS I find the following:
DCRServer is down or may not be completely up. Check if the DCRServer process is running.
And after some troubleshooting I found that the LMS is not creating the CMF database and the other databases. Attached is the installation log file, if someone could help me with it would be appreciated. Please note the following:
1. I have downloaded the installation file from Cisco website twice, so I do not think it is the file that is corrupted, also it is only evaluation license.
2. I have met all the prerequisites and requirement as in the documentation guides, but maybe there is something still wrong.
Thanks,

Also Here is more info output:
C:\Program Files (x86)\CSCOpx>pdshow -brief
Process               State                                     Pid
Tomcat                Program started - No mgt msgs received    1572
TomcatMonitor         Running normally                          2236
Apache                Program started - No mgt msgs received    2436
DataPurge             Administrator has shut down this server   0
DCRServer             Failed to run                             0
CMFOGSServer          Administrator has shut down this server   0
EssentialsDM          Administrator has shut down this server   0
ConfigMgmtServer      Never started                             0
ConfigUtilityService Never started                             0
CTMJrmServer          Administrator has shut down this server   0
ChangeAudit           Never started                             0
SyslogAnalyzer        Program started - No mgt msgs received    2976
ICServer              Running normally                          5096
EnergyWise            Never started                             0
PMCOGSServer          Administrator has shut down this server   0
IPMOGSServer          Administrator has shut down this server   0
IPMProcess            Never started                             0
TISServer             Program started - No mgt msgs received    2544
DFMOGSServer          Program started - No mgt msgs received    876
InventoryCollector    Running normally                          3052
Interactor            Program started - No mgt msgs received    5136
InventoryCollector1   Program started - No mgt msgs received    5144
Interactor1           Program started - No mgt msgs received    5308
PTMServer             Program started - No mgt msgs received    5320
UPMProcess            Never started                             0
TISDiscoveryJobCreate Administrator has shut down this server   0
SyslogCollector       Running normally                          5340
Proxy                 Program started - No mgt msgs received    5348
PMServer              Running normally                          5360
NameServer            Program started - No mgt msgs received    5680
NameServiceMonitor    Running normally                          5876
LicenseServer         Program started - No mgt msgs received    5884
FHPurgeTask           Never started                             0
EventFramework        Program started - No mgt msgs received    5892
EPMServer             Program started - No mgt msgs received    5904
FHServer              Administrator has shut down this server   0
NOSServer             Program started - No mgt msgs received    5580
diskWatcher           Running normally                          5640
DFMMultiProcLogger    Program started - No mgt msgs received    5864
DFMLogServer          Program started - No mgt msgs received    4896
DFMCTMStartup         Administrator has shut down this server   0
DfmBroker             Running normally                          6104
DfmServer             Running normally                          6416
DfmServer1            Running normally                          6424
DCRDevicePoll         Never started                             0
CSRegistryServer      Running normally                          6432
CSDiscovery           Never started                             0
AdapterServer1        Program started - No mgt msgs received    6440
AdapterServer         Program started - No mgt msgs received    6448
C:\Program Files (x86)\CSCOpx>pdshow DCRServer
        Process= DCRServer
        State = Failed to run
        Pid    = 0
        RC     = -3
        Signo = 1073741821
        Start = N/A
        Stop   = 07/02/2012 17:39:06
        Core   = Not applicable
        Info   = Application failed or was registered incorrectly.
C:\Program Files (x86)\CSCOpx>net stop crmdmgtd
The Cisco Prime Daemon Manager service is stopping..........................................
The Cisco Prime Daemon Manager service was stopped successfully.
C:\Program Files (x86)\CSCOpx>bin\perl.exe objects\db\conf\configureDb.pl action=validate dsn=cmf
INFO: C:\PROGRA~2\CSCOpx/objects/db/conf/ConfigureDB.LOCK locked for the operation...
ERROR: [StandardDbUpgrade] : Database cmf is not installed.
INFO: C:\PROGRA~2\CSCOpx/objects/db/conf/ConfigureDB.LOCK released for the future operations...
C:\Program Files (x86)\CSCOpx>bin\perl.exe bin\dbpasswd.pl all
ERROR: There is no database available to change password.
C:\Program Files (x86)\CSCOpx>bin\perl.exe bin\dbRestoreOrig.pl dsn=cmf dmprefix=Cmf npwd=pwd
'cmf' is not a valid data source for the product.

Creating a COM object with CF9 32-bit on Windows Server 2008 R2 64-bit machine

I'm using a 32-bit version of CF9 and it's installed on a Windows Server 2008 R2 machine (64-bit). The problem I'm running into is that it won't allow me to create a COM object - it gives me the error, "no ntvinv in java.library.path null" when I try to run,
<cftry>
<cfobject type="COM" action="CONNECT" name="Engine" class="JRO.JetEngine">
<cfcatch type="Any">
<cfobject type="COM" action="CREATE" name="Engine" class="JRO.JetEngine">
</cfcatch>
</cftry>
Then when I run it a 2nd time, I get "An exception occurred when instantiating a COM object. The cause of this exception was that: java.lang.RuntimeException: Can not use native code: Initialisation failed."
Can you help me?

Replying for your patchset installation pre-req error:
Use below command:
./runInstaller -ignoreSysPrereqs
Review MOS note 763143.1 for more info.

How to up Windows Server 2008 R2 SP1 created VM with Windows 8.1 hyper-v manager

Hi
I have VM that created with Windows Server
2008 R2 SP1. This was up without a problem with the windows 8 hyper-v manager. I have recently upgraded my OS with 8.1. Now I have tried to import this VM but it
throwme following message.
This is a real pain when there is no way of doing this. Any help greatly appreciated.
Regards
Radika

Hi,
Brian is right, for mange the Server 2008r2 sp1 we recommend use the Windows 7 or 7.1 platform.
More information:
Remote Server Administration Tools for Windows 7 with Service Pack 1 (SP1)
http://www.microsoft.com/en-us/download/details.aspx?id=7887
Hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Creating Group Policy Windows Server 2008 R2

Similar Messages

Maybe you are looking for