• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 806
  • Last Modified:

Group policy (GPO) on Windows Server 2008 to set IE homepage and default action to Log Out

Hi,

I've just discovered the joys of Group Policy and the power it gives over a set of users.

However, on a new Windows Server 2008 R2, I'm trying to acheive two things and wonder if I could be directed to where the change should be.

1) How do I set the home page for the users affected by the policy?
2) How can I make is so the default option on the Shut down button on Windows 7 is actually Log out?

Thanks for any advice.
0
afflik1923
Asked:
afflik1923
  • 3
  • 3
  • 2
  • +1
5 Solutions
 
usslindstromCommented:
Group Policy is probably the best invention MS has ever come out with...  Next to AD.

Create a new policy for each.

**HomePage**
User Configuration --> Policies --> Windows Settings --> IE Maintenance --> Important URLs -->  Set it to whatever you'd like

**Change LogOff Button**
User Configuration --> Policies --> Admin Templates --> Start Menu and TaskBar
0
 
Krzysztof PytkoActive Directory EngineerCommented:
Hi,

please check this MS as reference. This setting for Win7 "Shut down" button can be changed to "log off" under "User Configuration\Administrative Templates\Start Menu and Taskbar" in policy "Change Start Menu power button"
http://technet.microsoft.com/en-us/library/ee617162%28WS.10%29.aspx

For homepage you can use

User Configuration -> Policies -> Windows Settings -> Internet Explorer Maintenance -> URLs
define there Home Page.

Remember that both policies are applied to users. So, link them to users OU (and it doesn't matter where they would be loggin, settings will always apply)

Regards,
Krzysztof
0
 
Neil RussellTechnical Development LeadCommented:
Welcome to the world of group policies.

Now get yourself over to a website called www.gpanswers.com  and start really using them! :D
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
afflik1923Author Commented:
OK. Great. I'm still new so alow me anohter question.

Do I need to make the policu
"Enforced"

I did on the first one I did, but the deftaul is for Enforced is No once I create it.
Does Enforced need to be on to make it work, or does this actually means something like, always do this policy even if X scenario  - or something like that
0
 
Krzysztof PytkoActive Directory EngineerCommented:
Enforce is used only to force GPO appliance in an OU where some other administrator enabled "block inheritance"
If you don't see blue exclamation mark on an OU within GPMC console, do not set up "Enforce". It will still be applying without that settinsg :)

Krzysztof
0
 
usslindstromCommented:
iSiek's right.  Try to avoid "Enforce" as much as possible, if you find yourself overly relying on that option, you may need to rethink your group policy / ad structure and design.

Usually "Enforce" is stuff like, where your organization uses folder redirection/roaming profiles and it's set at the Site level OU in your domain for your users.  - There may be a requirement that a few users aren't applied the folder redirection policy, and there's no real rhyme or reason on the location of those users.  In a case like that, you could create an AD group for "Local Folders Only," and assign a group policy on that group to deny that sort of stuff which would be "Enforced".

In group policy, it's backwards from what you might think.  The last policy processed is actually the most important when it comes to GP.  So, if you set something at a higher level that you need to make sure none of the lower levels overwrite, that's what "Enforce" is for.

But as I mentioned before, a good OU structure / Group Policy plan doesn't have much need for that option.  - But it's there if you need it.
0
 
afflik1923Author Commented:
All sounds very good. One more pointer that would be handy. On the Windows 7 workstation I want by default for
Outlook, Word, Excel all to be pinned on the taskbar in Windows 7 (maybe some other applications)

what would be the group policy for that?

Many many thanks.
0
 
usslindstromCommented:
You're moving from group policy, and into the realm of default profiles here...

Here are the majority of options you have at your disposal when dealing with the taskbar - as far as group policy is concerned.

http://technet.microsoft.com/en-us/library/ee617162(WS.10).aspx




For things such as that, you could develop a GPO to do that, but you're adding the requirement of having that software title on each and every PC (Most likely the case with office anyway) - but something to be aware of.

Unless it's installing software or something similar, I don't keep any software settings in Group Policy.  It's all definately possible though.
0
 
afflik1923Author Commented:
Many thanks for the GP tips.
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

  • 3
  • 3
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now