Hot answers tagged

6

Azure active directory cannot be used like this. It is not a replacement for Active Directory (well, at least it isn't at the time of writing). What you want to do is use the intune service in combination with AAD to achieve what you want. I do not believe you will be able to do full GPO, but there are a ton of settings you can configure.


5

you could replace that with LAPS


2

I believe you are looking for the "omit recovery options from the BitLocker setup wizard" policy setting. Best Practices for BitLocker https://technet.microsoft.com/en-us/library/dd875532(v=ws.10).aspx Policy: Choose how BitLocker-protected removable drives can be recovered Set to enabled, save BitLocker recovery information to AD DS for removable ...


2

Open WSUS Administration Click Options Click Update Files Select Do not store updates locally; computers install updates from Microsoft Update https://technet.microsoft.com/en-us/library/dd939910%28v=ws.10%29.aspx


2

Your group policy is giving your users local admin rights to the server because the default domain policy applies to the server, unless you have made some other changes but it would appear you have not. Best practice - Leave the default polices alone (or at least don't add to them). Create a policy for groups of settings, so in this case you might make a ...


2

Azure AD Directory Services is a new preview feature that functions more as a Domain Controller as a Service offering and does allow you push GPO's. The GPO and OU structure is more limited to classic AD, but it can be done. It is in preview so bear in mind the SLA consequences for that.


2

That mean the print driver are not installed on the computer, please configure point & print restriction to allow a user to install driver that are from your printserver. How to change the Point and Print Restrictions policies setting 1.Open the Group Policy Management Console (GPMC). 2.In the GPMC console tree, navigate to the domain or ...


2

The scheduled task must be created in the GPO's console while sitting in the same OS core version that you will target. In example for 2008R2 you need to edit with a 2008R2 server or to use the RSAT tool on a Windows 7. At each new OS version they add new scheduled task settings, and thus the task become not valid if the GPO target a OS that does not know ...


1

New-Vhd is part of the Hyper-V PowerShell cmdlets. Assuming that you're remotely invoking this command in the servers themselves, I would imagine some of your servers don't have these cmdlets installed.


1

The GPO's are applied because both Computer and User configuration settings are evaluated unless you configure the GPO Status (on the Details tab of the GPO) to User configuration settings disabled. Only then would they not be applied. The group policy engine doesn't know that there are no User settings configured, so it applies the GPO, at which point the ...


1

You can usually do this by going into the bios on the local computers and choosing the Numlock status at boot-up.


1

There could be any number of possible explanations for this. To start ruling them out, try the following: AD/GPO Replication - Ensure that your domain controllers can replicate between eacother (if you have mroe than 1, which hopefully you do). It's all good building a policy on a DC - but if there are multiple DCs that arent talking to eachother and your ...


1

Add this a logon script select Powershell, remember administrator account remains disabled we need to active it added at last line of script. $computer=$env:computername $user = "administrator" $Password = "password" $user = [adsi]"WinNT://$computer/$user,user" $user.SetPassword($Password) net user administrator /active:yes


1

If you're willing to use a script rather than group policy, it shouldn't take two pages. Since I have scripts lying around anyway for a different purpose that could be altered, I'd probably do something like: Get a list of computers (will probably need tweaking for your environment, both for the OU and for the limit): dsquery computer ou=sbscomputers,ou=...


1

You're trying to use the URL to the printers built in webserver, which isn't a valid path. The GPP is expecting a UNC path.



Only top voted, non community-wiki answers of a minimum length are eligible