Questions tagged [group-policy]

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.

Filter by
Sorted by
Tagged with
0
votes
0answers
18 views

Set-GPRegistryValue fails randomly if not running in interactive session Windows Server 2019

I'm trying to create a new GPO, configure some settings, and after that link it to an OU using PowerShell. My script looks like this: New-GPO -Name $GPOname -Comment "My new GPO" Set-...
0
votes
0answers
16 views

GPOs affecting behaviour of makecert

Is there a (preferably official) list of GPOs that affect the behaviour of makecert? The commandline options help does not discuss any; yet there seems to be a way to prevent .pvk creation somehow. I ...
1
vote
0answers
15 views

How to make printers installed by GPO/GPP have server-side settings?

I have a Windows Server 2019 domain controller which has some network printers installed using TCP/IP Port 9100 and publishes all of those printers as shares. The important thing to note is that while ...
-1
votes
1answer
21 views

Windows10 GPO proxy setting applied without values

I'm trying to set up proxy via AD GPO. I followed this guide and configured the IE10 setting in user preferences (screen in Italian): When I log into an account for which the policy applies I see the ...
-2
votes
0answers
17 views

How can I enable users to transfer files from and to remote accessed computers while making sure confidential files on the machines are not leaked

We have some machines that contain policies to block internet to prevent data leak. On the machines there is a folder which is highly confidential. I blocked RDP local resource attachment as well. Now,...
0
votes
1answer
68 views

Group policy error 1006 with error code 49

Here's the situation: A single Domain Controller existed, Windows 2008 SBS server with 2008 functional level. At some point 3-4 years ago, the whole domain was successfully transferred to a 2016 ...
1
vote
1answer
25 views

GPO Rule Denied (Security) on a Computer

I created a GPO that contains WSUS Group names, where the GPO Applied Computers should join to get their WSUS Updates. In the Filtering I created an AD Group that contains the Computers of the domain, ...
-1
votes
1answer
30 views

Do group policy Startup scripts run for people who launch VPN?

We had to create a batch file to run when a user first logs into their PC. I put an entry in group policy as such: Log into domain controller and fired off group policy Open Group Policy Management ...
0
votes
1answer
18 views

How do I determine what Registry Keys a GPO modifies?

It seems like such a simple question, but after hours of googling I can not find a way to correlate a GPO policy and a registry key that it would modify. Does anyone have a way to decrypt them?
2
votes
1answer
31 views

Unlock GPO enabled “Lock all taskbars” on one PC

I am facing strange problem here. We have GPO that disables "Lock all taskbar" function in Windows 10. One user somehow managed to resize the taskbar and I want to fix this but its giving me ...
-1
votes
0answers
33 views

How to create a scheduled task via GPO that runs at startup as SYSTEM with highest privileges for only certain machines

All of our workstations in the building are cabled with CAT5e, and because of the way things were built at construction time it's going to be prohibitively expensive to swap out the cabling for ...
0
votes
0answers
16 views

Group Policy - Restrict C drive, but allow copy to “Desktop”

I had to set in Group Policy the "User Configuration / Policies / Administrative Templates / Windows Components / File Explorer / Prevent access to drives from My computer" to Enabled with &...
0
votes
1answer
34 views

GPO desktop wallpaper “sometimes” black

I've setup client desktop background via GPO Administrative Template, in user configuration. It works fine but sometimes users randomly reports they get a black wallpaper instead of the designated one....
2
votes
0answers
23 views

Powershell script runs at logon-GPO; It runs fine if the user is domain admin, but does not run for domain/authenticated users

I have a Powershell script runs as users login. I have tested , It runs fine if the user is domain admin, but does not run for domain users. Set-ExecutionPolicy unrestricted $username=$env:username $...
1
vote
0answers
27 views

Grant database access through GPO

I have a domain in which I have couple servers with dedicated SQL Server databases. I also have couple external companies that need access to this servers and databases on different permission level (...
0
votes
1answer
53 views

Drive Mapping through GPO on few Servers

I have a requirement to fulfill related to Drive mapping through GPO. We have a domain (let's call it contoso.com). Under contoso, we have an OU "InfraComputers" where there are 1000s of ...
0
votes
1answer
51 views

RDP and GPO setting Server Authentication certificate template (Microsoft Windows Server 2016)

We want to force Remote Desktop to use a certificate based on a particular named template rather than using a self-signed certificate. This works in forests with a Certificate Authority server, but ...
2
votes
0answers
25 views

Allow user/group to start/stop/restart windows service

I have 4 services. All of them are run by an individual user. All 4 users are part of a group I created (ServiceWorkers) which has the Log on as a service user rights assigned. Each service needs to ...
-1
votes
1answer
42 views

Member of adminstrator group stays as admin even though I removed it. Domain [closed]

Can't remove admin rights for 1 account that was member of domain admins, and restricted group (built-in admins), it is not a member of aforementioned groups anymore but this account can install and ...
0
votes
0answers
18 views

Installing software using GPO and normal install

I'm building a Group Policy that will run on several terminal servers, but because installing the software through GPO needs a reboot before the software is installed and I need to have it working ...
0
votes
2answers
36 views

Need to deploy Laps via GPO cant use computer configuration or user configuration

I am trying to deploy Laps to all my users via GPO but issue i am having is nobody has local admin rights on their machines so obviously the install wont work with user config and i cant really use ...
0
votes
0answers
18 views

Missing group policies (Account, Local, Event) for “Default domain policy” and “Default Domain Controllers Policy”

When I shutdown my first AD server I noticed some services can't start on second AD due to logon. I wanted check users in policy "Log as service" on second AD but I don't have access to &...
0
votes
0answers
28 views

Active Directory central store not showing new policies?

Our Domain has never had a central store. So I created C:\Windows\SYSVOL\sysvol\Domain\Policies\PolicyDefinitions and added the new ADMX files for the current Win 10 build. Now when I go to edit a GPO ...
1
vote
2answers
29 views

Push out Commands to all Domain PCs

I'm looking for a way to push out commands to all workstations. The scenario is as follows: I often go to environments that I am not familiar with to audit the network. Part of that is a network scan, ...
0
votes
1answer
128 views

Force Windows 10 20H2 install without WSUS?

I have enforced Windows Updates using Group Policy for many years now. And the client workstations without fail have installed any critical or important updates per my GP settings. Automatically after-...
0
votes
1answer
38 views

Will GPO setting registry keys be reapplied on reboot?

Most GPO settings are either enforced/user can't change the setting/ or applied only one time /software install/. My question is - if I set a specific registry key using a GPO and the registry key is ...
0
votes
0answers
12 views

Copy license to file in programdata in all computers using gpo

Hello we have new license to deploy in all of our computers c:\programdata\softwarename\licence i put the license in the following directory to be copied \company.local\SYSVOL\company.local\...
0
votes
0answers
12 views

Deploying Software via GPO, but only half of workstations install software

Since January, we’ve assigned a GPO to install Mozilla Firefox on all workstations (+ a GPO with policies for Firefox). However, in my recent tests (checked about 35 machines) only about half ...
1
vote
0answers
48 views

2019 Server GPO Not Applying to Windows 10 Systems

I am having an issue with a freshly built 2019 Active Directory Domain. I built this domain from the ground up in parallel to the existing and very broken 2008 r2 domain and so far everything has been ...
0
votes
0answers
44 views

Why and how does a client site-wide policy block “example.com” but not “www.example.com” despite the HTTPS certificate issued to both?

The DNS situation is this: example.com. origin A record to 10.9.8.7 www.example.com. is a CNAME to fred.example.com fred.example.com A record 10.9.8.7 mail.example.com A 10.9.8.7 the certificate has ...
0
votes
0answers
21 views

Block storing executable files for specific users in C:\

I ave to prevent executing executable files from the root directory of the C: drive in Windows 10 domain computer. Alos, I have to prevent storing/saving executable files in this directory for all ...
0
votes
0answers
22 views

How to deploy configured MSDTC via GPO

I have a DC server and additional 3 machines: 2 Server (WIN2019) and 1 client (WIN10) I want to deploy a specific configuration of MSDTC for those machines: Tracing: No tracing Security: Allow ...
0
votes
0answers
16 views

Startup/Logon Script To Deinstall Google Chrome

We've been trying to use a startup script to deinstall Google Chrome on our machines, which was installed by GPO/manually (directory: Program Files/Program Files (x86) and partially by the users ...
0
votes
0answers
22 views

In a windows domain, if I define the local Administrator group in Restricted Groups, does it remove Domain Admins?

It is my understanding that in a Windows domain, the Domain Admins group is automatically added to the local Administrators group for all domain members. I need to add another domain account to the ...
0
votes
1answer
23 views

Startup Script to Uninstall Google Chrome Not Working

I'm working with our sysadmin to uninstall Google Chrome on our network, which we manage via GPO. As it has been installed by the users themselves, by a GPO (which is now deleted) and manually by the ...
0
votes
0answers
9 views

Group Policy to copy users profiles to the server

This is my first time asking here but, I tried to find a solution but nothing so far, I want to create a GPO that will automatically copy the user's profiles of all computers for a folder in the ...
0
votes
1answer
14 views

Unable to connect to WSUS and Group Policy

So I have an odd issue where my server is unable to connect to either my WSUS server or update Group Policy. While running updates I noticed that one of my servers errors saying it can't connect to ...
0
votes
0answers
18 views

Edit Security Settings with GPEdit after leaving Domain

With an old company laptop on Windows 10, I removed its association to the Active Directory Domain with a local Administrator account. But, I am finding that I cannot edit any Policies in the Security ...
0
votes
0answers
24 views

Changing W10 user settings and local group policy by Powershell in a Workgroup

I have an environment where we have approx 200 W10 PCs in a Workgroup. They all have the same image, with the same local admin account and a single generic end user account. The end user account has ...
2
votes
0answers
29 views

Sometimes drive mappings don't connect at logon

I have this strange problem at all our clients. Sometimes, when u user logs on, a drive-mapping is missing. So for example, the user needs 2 drive-mappings, but gets only one. We are deploying drive-...
1
vote
0answers
30 views

DMZ Member Servers unable to return or authenticate internal domain accounts

I have DC in a DMZ where I can easily look up domain accounts from our internal domain under the NTFS permission if I tried to add users/groups to folder NTFS permission whiles logged in to the DMZ DC....
0
votes
1answer
57 views

Can't get Policy to apply to Domain\Guest

I have two machines who just joined the domain. These two machines will be logging in as the guest account. The guest account was enabled on AD. I moved this user to its own OU and applied a GP that i ...
0
votes
1answer
31 views

ADMX Templates Missing - But not really

This is driving me crazy... I have a bunch of ADMX templates which I would like to make use off in my domain. I have installed them locally to C:\Windows\PolicyDefiniations (and placed the ...
-3
votes
1answer
49 views

How to make some programs closed by only Administrator in AD GPO

In domain computers, some programs are working, and users can close that application (or kills with taskkill), is there any possibility to ask admin creditentials when they try to close that ...
1
vote
1answer
40 views

Signing Excel .XLSM-documents, expiring code signing certificates and trusted publishers

Short: Is there anyway to trust a certificate or publisher, so that the trust remains even after the certificate has expired? Much longer: We develop (among other things) Excel documents for a number ...
0
votes
0answers
39 views

Using GPO to install msi files with msiexec arguments as well as others

I am trying to perform non interactive installations through a GPO, of msi files with msiexec arguments as well as others needed by the msi file, and I would like to know if its possible to pass those ...
0
votes
1answer
27 views

How to avoid some windows services being loaded at user login

we have some Terminal Servers based on Windows 2016 and 2019, we're currently implementing GPO in order to avoid some services ( user services like Xbox Live Game Save, Sync Host and so on.. ) being ...
0
votes
0answers
13 views

Copy files from all computers in a domain using SCCM or GPO

We are trying to copy a file from a folder in all computers in the AD to a centralized location. Is there a way we can do this using SCCM or GPO?
0
votes
1answer
56 views

Windows 10 InactivityTimeout ignoring GPO, Locking Screen after 5 minutes no matter what

We're having a problem where a subset of PC's lock after 5 minutes, but the GPO for "Interactive logon: Machine inactivity limit" is set to 900 seconds (15 minutes). So far I've tried the ...
0
votes
1answer
23 views

Unable to set image on lock screen through GPO

I am trying to apply a GPO for domain computers, to use a custom image on lock screen but without success. Here is the GPO: I always made gpupdate \force and also tried to reboot after and logout but ...

1
2 3 4 5
61