Archive for the ‘Group Policy’ Category

Group Policy Settings Reference for Windows and Windows Server

May 30, 2012

These spreadsheets list the policy settings for computer and user configurations included in the Administrative template files delivered with the Windows operating systems specified. You can configure these policy settings when you edit Group Policy objects (GPOs).


Windows 7 Clients intermittently fail to apply group policy at startup

April 3, 2011

The behavior is caused by a race condition between network initialization, locating a Domain Controller and processing Group Policy. If the network is not available, a Domain Controller will not be located, and Group Policy processing will fail. Once the operating system has loaded and a network link is negotiated and established, background refresh of Group Policy will succeed.

Group Policy Search

October 23, 2010

Go to (Group Policy Search)

Default processing behavior for Group Policy scripts

October 23, 2010

Microsoft changed the default behavior of Group Policy startup and logon scripts processing from synchronous to asynchronous starting with Windows Vista and Windows Server 2008. It’s still the same in Windows 7 and Windows Server 2008 R2.

Asynchronous scripts processing is when computer startup scripts no longer wait for the previous script to complete before starting the next startup script. Versions of Windows prior to Windows Vista defaulted to synchronous processing.

You need to configure the Run startup scripts asynchronously policy setting to disabled to force computer startup scripts to process synchronously, which is the default behavior prior to Windows 7 and Windows Vista. 

User Logoff and Computer Shutdown Group Policy Scripts always process synchronously.

Office 2010 Administrative Template files / Office Customization Tool

May 1, 2010

This download includes Group Policy Administrative Template (ADM, ADMX/ADML) and Office Customization Tool (OPAX/OPAL) files for Microsoft Office 2010.

Group Policy for Microsoft Office 2010

Google Update for Enterprise Administrative Template

August 23, 2009

This document contains information about applying policies to Google Update/Google Installer within the enterprise. Google Update is an end-user application that installs and updates many of Google’s applications for Microsoft Windows.

The document is written for Microsoft Windows domain administrators as well as power users who want to control updates on their individual computers. By defining enterprise-wide policies for Google Update, you can specify which Google applications users may install and how they are updated. For example, you can choose to only allow users to install specific applications, have Google Update check for updates once a week, or disable updates of an application until after you’ve tested them in your environment. You can configure update policies before installing applications that use Google Update or at any subsequent time.

Admin Guide

2007 Office system (SP2) Administrative Template files (ADM, ADMX, ADML) and Office Customization Tool

April 30, 2009

This download includes updated Group Policy Administrative Template files and Office Customization Tool OPA files for use with the 2007 Microsoft Office system applications.

It also includes an \Admin folder with an updated Office Customization Tool, and ADMX, ADML, and ADM versions of the 2007 Microsoft Office system Administrative Template files for Windows Vista and Windows Server 2008.

For Administrative Template files, you may use the ADM files for any Windows operating system, or the combination of ADMX and language-specific ADML files on computers running at least Windows Vista or Windows Server 2008.

This download also includes a workbook (Office2007GroupPolicyAndOCTSettings.xls) that provides information about the 2007 Office system Group Policy settings and OPA settings. This update assumes that you have updated your 2007 Office System applications with the 2007 Office System Service Pack 2 (SP2).

Group policy templates

September 29, 2008

Group Policy ADM Files

Administrative Templates (ADMX) for Windows Server 2008

Starter Group Policy Objects (GPOs)

Group Policy Management Console Scripting Samples

Locally, these files should be located in the following locations:

    * .admx files are stored in:
    * .adml files are stored in this location:
      Here, language would be replaced with the language identifier, such as %systemroot%\PolicyDefinitions\en-us.
    * .adm files are stored in:

When storing these files in a central location, you’ll place the files in the following locations:

    * .admx files are stored in a root-level folder. For example, on your domain controller in:
      %systemroot% \sysvol\domain\policies\PolicyDefinitions
    * .adml files are stored in subfolders, like so:
      Here, language would be replaced with the language identifier, such as %systemroot%\PolicyDefinitions\en-us. You should create a subdirectory for each language that you will use.

Note that Group Policy Object Editor automatically reads all .admx files stored in the central store of the domain in which the GPO was created. When there is no central store, Group Policy Object Editor reads the local versions of the .admx files used by the local GPO.

SDM Software provides products for better managing Windows Group Policy

September 14, 2008

SDM Software Freeware

SDM AD Tombstone Reanimation Cmdlets 1.0

SDM Group Policy Refresh Cmdlet 1.0

SDM GPMC PowerShell Cmdlets 1.2 NEW VERSION!

Clean Registry Policy Utility 1.0

How to reset user rights in the Default DC GPO

September 13, 2008


The Default Domain Controllers Group Policy object (GPO) contains many default user-rights settings. In some cases, changing the default settings may produce undesirable effects. This may result in a condition where unexpected restrictions exist on the user rights. If the changes are unexpected, or if the changes were not recorded so that it is unknown which changes were made, it may be necessary to reset these user-rights settings to their defaults.

It may be also necessary to reset the SeInteractiveLogonRight and SeDenyInteractiveLogonRight user-rights settings to their defaults if you receive the following error message when you try to log on to the console of the domain controller: “The local policy of this system does not permit you to logon interactively