Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [group-policy]

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

0
votes
1answer
22 views

Deny RDP access to specific server from a particular user via GPO

I have a security issue. How can I deny RDP access to a specific server(critical server) for a particular Active Directory user using a Group Policy Object (GPO) ?
-1
votes
0answers
34 views

Apply GPO immediately

I am testing a software install gpo on a windows 2016 domain controller. I have the gpo set up to only be applied to 1 specific user. I have run gpupdate /force from the domain controller and rebooted ...
1
vote
2answers
29 views

GPO Deploy Printer Based on User Attribute

I am trying to deploy printers based on the Office attribute in AD. If a user is assigned to the Richmond office they should get those printers. Please note this is NOT location based printing. I just ...
3
votes
0answers
25 views

Can I grant “Virtual Disk Service” to a non-local administrator?

Trying to find an answer to this. A vendor I work with, Red Gate, wrote in their documentation: SQL Clone Agent requirements An agent should be installed on the same machine as any SQL Server ...
2
votes
1answer
44 views

Enabled GPO for registry entries not showing up on server

Preface: I am a Linux admin. I don't really "get" (or like) Windows. I am in the process of remediating Windows 2016 servers with the CIS recommendations. It is mostly just creating a GPO set ...
1
vote
1answer
10 views

ADMX not loaded from Central Store

I've create a central policy store as shown below: Afterwards I copied all files into the new folder: However, when I want to create a new gpo, the templates are loaded not from the central store:
0
votes
1answer
37 views

Installing app through GPO

I will need your help... The last day i set up an app to be installed using GPO under computer configuration. The most of our computers are using WIFI to log in to our domain. Some of them, they ...
0
votes
0answers
33 views

group policy Software installation - siftware is not installed on all clients

I tried to push a software to all my clients but some clients receive the software and some clients not. here are the points I have done or made sure of: windows firewall disabled on all clients, ...
1
vote
0answers
28 views

Self-extracting executable not extracting other archives

** Problem We are attempting to run a self-extracting executable (SFX) to install an Oracle product, Oracle Enterprise Manager 13.2. The installation starts, works for a short while, and then quits, ...
3
votes
1answer
35 views

Active Directory shortcut failing to create

Background: I am making a GPO with desktop shortcuts for users. The GPO has a few links to websites like our help desk that it places. It also has a shortcut to a network location for a file share. ...
0
votes
1answer
37 views

Is it possible for a group policy to interfere with a Sql Server Express installation?

We have a software package that our customers install on their user's laptops. Part of the installer runs MS's Sql Server Express 2014. We're passing the command-line options to to the installer ...
1
vote
1answer
47 views

GPO - Local Administrator Group Management (Restricted Group vs Local Users and Groups)

I'm looking for current best practices and I can't seem to find a definitive answer. I'm looking to manage the membership of the local administrator group on Windows (Client) machines. In the past, ...
4
votes
1answer
52 views

Last Logon error when Logging in using GPO setting

Trying to get my domain to show the last successful login by users on their Windows 7 machines. I have enabled the following Group Policy Setting: Computer Configuration| Policies | Administrative ...
3
votes
2answers
32 views

Windows: How to tell where policies listed in auditpol are coming from?

I'll preface this with: I am a Linux admin. Windows to me is like me driving a UK car -- mostly operates the same but the steering wheel, buttons, and levers are in the wrong place and labels are ...
0
votes
1answer
29 views

How to deploy an exe with a .bat that does some checks.

I have to run a .exe that uninstall a specific software on all our clients. But i have to uninstall only a specific release of it. I will create a .bat that does this check for me. Can i deploy it ...
1
vote
0answers
18 views

How can I add multiple Search Engines to choose from in Chrome Enterprise?

In Chrome Enterprise you can specify the default search engine via GPO, and with the DefaultSearchProviderEnabled option you can prevent the users from overriding or changing that default search ...
3
votes
1answer
35 views

Importing GPO backup into a different domain fails with “No backups found!” error

I'm trying to make a backup of a GPO in one domain (just contains a couple registry key entries) and import it into another domain. The second domain is completely separate, it's at a different site ...
2
votes
1answer
31 views

Does group policy loopback apply to that policy, or all policies?

Does group policy loopback processing apply to that policy that it is defined in, or all policies applied to that container? For example, assume there are 2 group policy objects: one has loopback ...
0
votes
1answer
36 views

Deploy MSI via GPO to specific users “Admin right issue”

I'm trying to deploy an MSI via GPO to specific users (120 users) from different departments and sites, the problem is that they don't have admin rights so the application cannot be installed due to ...
0
votes
0answers
30 views

Can a custom formula column be added to Outlook for all users using group policy?

I am trying to achieve what is in the linke here: https://www.extendoffice.com/documents/outlook/1942-outlook-save-copy-view-settings.html But in bulk across the domain. I used procmon to attempt to ...
-1
votes
2answers
30 views

Possible for domain policy to prevent local Administrator from modifying file permissions?

I have been handed a new Server 2012 that is a member of the company domain. I am in the local server Administrators group. I do not have a domain account. When I opened up the permissions properties ...
0
votes
0answers
68 views

SMB access from a service on windows 10 - access denied

I have a windows service that performs access to SMB shares via UNC paths, after dropping privilege (essentially doing LogonUser() internally, then CreateProcessAsUser()). This is done to various ...
1
vote
2answers
24 views

GPO block executables from running from redirected folders

I am currently using GPO (Computer>Windows>Security>Software>Additional) to lock down several file types from running in places like C:\ and %appdata% and %userprofile%. My issue is that certain ...
1
vote
1answer
40 views

Active Directory Site Level Group Policy Not Applied

In Active Directory we have multiple sites defined in AD Sites and Services and I can see the site is correctly assigned by verifying the value of HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\...
0
votes
1answer
42 views

How to set Microsoft Edge user agent in a domain environment

In Microsoft IE11 it's possible to modify the user agent via a registry key, so that we add (for example) "in-Domain" to the UA-string. How can the same be accomplished in Edge? Is there any GPO, ...
0
votes
1answer
125 views

Group policy batch script not running on startup

As a company, we have purchased new anti-virus software and want to install it to all our computers through group policy. The installer is an .exe and we have been provided with a .bat file to use on ...
0
votes
1answer
15 views

Does enabled policy in GPO take precedence over GPO that is not configured for that policy?

I have a primary GPO that is #1 in Link Order. The Audit Logon Events policy in GPO #1 is not turned on or not defined. The Audit Logon Events policy in GPO #2 is configured to allow auditing. I ...
1
vote
1answer
18 views

GPO applying on 2k12 but not on 2k8R2

I have a 2k12 Datacenter running as DC and a 2k8R2 as RD Host. On 2k12, everything works fine as soon as I configure it. Same goes to 2k8R2, RemoteApp is running since day one and authentication is ...
0
votes
1answer
37 views

GPO Icons' / symbols meanings - Win Server 2012

What is the difference between those two icons? "Change the time zone" and create a "page file". Is that how they are inherited? or one is enforced by the domain while the other is a local setting? ...
0
votes
0answers
37 views

UAC with install automation: SCCM or Powershell Remoting

I am trying to get my head around the best approach for managing UAC. What I WANT: Regular users are not Local Admins and have somewhat elevated UAC. Special "Install" user is Local Admin but not ...
0
votes
0answers
42 views

Firewall policies understanding

On one PC in a Windows domain there is a firewall setup that confuses me. In the registry is the following setting: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\...
2
votes
0answers
223 views

Disable auto-lock in Windows 10 (domain account)

I have just installed Windows 10 1803 and joined the computer to my domain. A short while after the display goes into power save mode, the computer also locks so that I have to type the user's ...
1
vote
0answers
75 views

How does one validate an MSI file for Group Policy Software Installation?

I am wrestling with learning Group Policy Software Installation; I'm at the point where I think I know what should be going on, but I don't have a ton of practical experience yet, and am not finding ...
0
votes
1answer
49 views

Group Policy Management Option Not Available

I'm working on setting up WSUS and I'm following this guide here I got to the point of Creating Group Policies and Linking on Client Computers OU to Point them on WSUS Server but for some reason ...
0
votes
1answer
45 views

create GPO on computers OU

I want to apply a GPO only on the computers OU (and not the domain controllers) How can I achieve it on windows 2016 ? Looks like I need to pick in the security filter each computer by name. I want ...
0
votes
1answer
209 views

How to force the notifications of Defender Firewall using GPO?

I am preparing a set of GPO to harden W10. I enabled the Defender firewall blocking most of the connections but I also wanted to leave the notifications for helping me with the fine tuning of the ...
1
vote
0answers
47 views

Google Chrome GPO/GPM (ADMX) allow themes only + whitelisted extensions installation

In Windows domain (AD -> GPM), I've been playing around with Google Chrome ADMX to achieve both the following: users can install any template (visual, look) users cannot install any extension except ...
0
votes
1answer
89 views

Windows server GPO, how to force SSID connection if in range

I have many wifi networks, but only one of these are suitable for domain computers of my windows 2016 domain. Can I setup a GPO to force a particular SSID usage if in the range? Many times I found ...
1
vote
0answers
27 views

Why is group policy for setting default printer being run as SYSTEM when 'Run in logged-on user's security context' is selected?

I have taken over administration of a 2008 r2 domain where there were two group policies for creating network printer shares on domain user logon: GPO1 to map network printers: GPO > User ...
1
vote
0answers
193 views

Group Policy Management - The network name cannot be found

I have this problem for over 2 years with my server and I basically cannot use windows server group policy due to this problem. I have a windows server 2008 R2 that when I try to add a new GPO to my ...
0
votes
0answers
53 views

RDP default domain

I have a problem with default domain while connecting to Windows Server 2012 while connecting via RDP using username without domain name. I'm trying to connect using PC that's is not a member of ...
0
votes
2answers
148 views

Group policy on Open LDAP [closed]

Active directory on windows can give us many possibilities to manage out network such as Group policy. In my company, we have Linux systems. My question is: Is there any Linux based application or ...
2
votes
0answers
67 views

Windows Domain Password Policy Issue

I just discovered something odd happening with a password policy in one of the Windows Server 2012 R2 environments we manage, and we have had no luck finding any information to explain the behavior. ...
1
vote
1answer
59 views

Single RDP session and automatic disconnect of pending session group policy not working in Windows Server 2012

Good morning, I'm working on a client's environment. The servers are all Windows Server 2012. There's a pool of virtual desktops which is used by users to connect to their virtual machines and ...
0
votes
0answers
21 views

Backup and deployment of GPO from one server to another

Hi I am using LGPO to backup the policy and deploy it to another computer with the same administrator name. So I tried using LGPO /b pathname. Successfully backedup. Then I went to the other computer ...
1
vote
1answer
24 views

Turning off automatic updates on domain

I am trying to disable Windows Updates from an entire domain using Windows 2016 GPO's, what's the best way to go about this?
1
vote
1answer
39 views

Can I disable a certain speaker in the group policy, registry key or a script?

I have a number of users with a microphone called that has also a loudspeaker built in. The microphone is called "Sonic Mic 3". The users don't want to use the loud speakers for the most part. Is ...
3
votes
1answer
95 views

Do group policy shutdown scripts run before Windows Services shut down?

You can have a [shutdown] section in group policy which specifies some scripts to run during system shutdown. Do all these scripts run before Windows services start receiving 'Preshutdown' ...
0
votes
0answers
36 views

Windows Firewall: 2 Sets of remote inbound rules deployed by 2 different GPO's

I'm looking to create 1 gpo with f/w inbound access rules for just our management server ip's at a high level in the group policy tree. As you drill down under our sites I'm looking to create a 2nd ...
0
votes
1answer
51 views

Domain PowerShell Policy

I have created a GPO to enable powershell on our domain PC's. I'm trying to make it more secure and I'm running into an issue with the following settings: *Browse to Policies > Administrative ...