Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [group-policy]

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an ...

1
vote
1answer
12 views

GPO block executables from running from redirected folders

I am currently using GPO (Computer>Windows>Security>Software>Additional) to lock down several file types from running in places like C:\ and %appdata% and %userprofile%. My issue is that certain ...
1
vote
1answer
19 views

Active Directory Site Level Group Policy Not Applied

In Active Directory we have multiple sites defined in AD Sites and Services and I can see the site is correctly assigned by verifying the value of HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\...
0
votes
0answers
8 views

How to set Microsoft Edge user agent in a domain environment

In Microsoft IE11 it's possible to modify the user agent via a registry key, so that we add (for example) "in-Domain" to the UA-string. How can the same be accomplished in Edge? Is there any GPO, ...
0
votes
1answer
32 views

Group policy batch script not running on startup

As a company, we have purchased new anti-virus software and want to install it to all our computers through group policy. The installer is an .exe and we have been provided with a .bat file to use on ...
0
votes
1answer
14 views

Does enabled policy in GPO take precedence over GPO that is not configured for that policy?

I have a primary GPO that is #1 in Link Order. The Audit Logon Events policy in GPO #1 is not turned on or not defined. The Audit Logon Events policy in GPO #2 is configured to allow auditing. I ...
0
votes
0answers
26 views

GPO - User group Access Denied (Security Filtering)

I'm writing this because I didn't found an answer for my problem after many hours of research in the internet. I have created a GPO to deploy an msi for users (user configuration), and to test if the ...
1
vote
1answer
17 views

GPO applying on 2k12 but not on 2k8R2

I have a 2k12 Datacenter running as DC and a 2k8R2 as RD Host. On 2k12, everything works fine as soon as I configure it. Same goes to 2k8R2, RemoteApp is running since day one and authentication is ...
-1
votes
1answer
28 views

GPO Icons' / symbols meanings - Win Server 2012

What is the difference between those two icons? "Change the time zone" and create a "page file". Is that how they are inherited? or one is enforced by the domain while the other is a local setting? ...
0
votes
0answers
27 views

UAC with install automation: SCCM or Powershell Remoting

I am trying to get my head around the best approach for managing UAC. What I WANT: Regular users are not Local Admins and have somewhat elevated UAC. Special "Install" user is Local Admin but not ...
0
votes
0answers
39 views

Firewall policies understanding

On one PC in a Windows domain there is a firewall setup that confuses me. In the registry is the following setting: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\...
2
votes
0answers
68 views

Disable auto-lock in Windows 10 (domain account)

I have just installed Windows 10 1803 and joined the computer to my domain. A short while after the display goes into power save mode, the computer also locks so that I have to type the user's ...
1
vote
0answers
30 views

How does one validate an MSI file for Group Policy Software Installation?

I am wrestling with learning Group Policy Software Installation; I'm at the point where I think I know what should be going on, but I don't have a ton of practical experience yet, and am not finding ...
0
votes
1answer
36 views

Group Policy Management Option Not Available

I'm working on setting up WSUS and I'm following this guide here I got to the point of Creating Group Policies and Linking on Client Computers OU to Point them on WSUS Server but for some reason ...
0
votes
1answer
41 views

create GPO on computers OU

I want to apply a GPO only on the computers OU (and not the domain controllers) How can I achieve it on windows 2016 ? Looks like I need to pick in the security filter each computer by name. I want ...
0
votes
1answer
69 views

How to force the notifications of Defender Firewall using GPO?

I am preparing a set of GPO to harden W10. I enabled the Defender firewall blocking most of the connections but I also wanted to leave the notifications for helping me with the fine tuning of the ...
1
vote
0answers
19 views

Google Chrome GPO/GPM (ADMX) allow themes only + whitelisted extensions installation

In Windows domain (AD -> GPM), I've been playing around with Google Chrome ADMX to achieve both the following: users can install any template (visual, look) users cannot install any extension except ...
0
votes
1answer
38 views

Windows server GPO, how to force SSID connection if in range

I have many wifi networks, but only one of these are suitable for domain computers of my windows 2016 domain. Can I setup a GPO to force a particular SSID usage if in the range? Many times I found ...
1
vote
0answers
24 views

Why is group policy for setting default printer being run as SYSTEM when 'Run in logged-on user's security context' is selected?

I have taken over administration of a 2008 r2 domain where there were two group policies for creating network printer shares on domain user logon: GPO1 to map network printers: GPO > User ...
1
vote
0answers
67 views

Group Policy Management - The network name cannot be found

I have this problem for over 2 years with my server and I basically cannot use windows server group policy due to this problem. I have a windows server 2008 R2 that when I try to add a new GPO to my ...
0
votes
0answers
34 views

RDP default domain

I have a problem with default domain while connecting to Windows Server 2012 while connecting via RDP using username without domain name. I'm trying to connect using PC that's is not a member of ...
0
votes
2answers
48 views

Group policy on Open LDAP [closed]

Active directory on windows can give us many possibilities to manage out network such as Group policy. In my company, we have Linux systems. My question is: Is there any Linux based application or ...
2
votes
0answers
40 views

Windows Domain Password Policy Issue

I just discovered something odd happening with a password policy in one of the Windows Server 2012 R2 environments we manage, and we have had no luck finding any information to explain the behavior. ...
0
votes
0answers
35 views

Single RDP session and automatic disconnect of pending session group policy not working in Windows Server 2012

Good morning, I'm working on a client's environment. The servers are all Windows Server 2012. There's a pool of virtual desktops which is used by users to connect to their virtual machines and ...
0
votes
0answers
20 views

Backup and deployment of GPO from one server to another

Hi I am using LGPO to backup the policy and deploy it to another computer with the same administrator name. So I tried using LGPO /b pathname. Successfully backedup. Then I went to the other computer ...
1
vote
1answer
20 views

Turning off automatic updates on domain

I am trying to disable Windows Updates from an entire domain using Windows 2016 GPO's, what's the best way to go about this?
1
vote
1answer
36 views

Can I disable a certain speaker in the group policy, registry key or a script?

I have a number of users with a microphone called that has also a loudspeaker built in. The microphone is called "Sonic Mic 3". The users don't want to use the loud speakers for the most part. Is ...
3
votes
1answer
58 views

Do group policy shutdown scripts run before Windows Services shut down?

You can have a [shutdown] section in group policy which specifies some scripts to run during system shutdown. Do all these scripts run before Windows services start receiving 'Preshutdown' ...
0
votes
0answers
35 views

Windows Firewall: 2 Sets of remote inbound rules deployed by 2 different GPO's

I'm looking to create 1 gpo with f/w inbound access rules for just our management server ip's at a high level in the group policy tree. As you drill down under our sites I'm looking to create a 2nd ...
0
votes
1answer
44 views

Domain PowerShell Policy

I have created a GPO to enable powershell on our domain PC's. I'm trying to make it more secure and I'm running into an issue with the following settings: *Browse to Policies > Administrative ...
0
votes
1answer
18 views

How to move existing shortcut icons to folder via GPO?

Currently, we have a set of shortcut icons that every single person has on their desktop (these icons are put on their desktop via GPO to begin wi/). What I want to do is instead, create a folder on ...
0
votes
0answers
18 views

Excluding user from GPO - Permission object missing

I'm trying to exclude a user from a GPO. I've done this in the past using the steps explained in the link below: https://blogs.technet.microsoft.com/canitpro/2016/10/12/step-by-step-excluding-users-...
0
votes
1answer
100 views

Group Policy Error 1202 in win server 2008/2012

We have 2 Domain controller (windows fully updated) dc01 - Windows 2008 R2 dc02 - Windows 2012 R2 > added recently in Event Viewer on both DC's, I am receiving lots of 1202 errors Event 2012 SECLI ...
1
vote
0answers
37 views

Some Windows services not visible remotely

I'm struggling to figure out what is going on, but it has a pretty widespread effect on a system I'm working with. I originally asked this on stack overflow and It was recommended I check here. OP ...
0
votes
0answers
45 views

Updated certificate in GPO not being deployed to Trusted Root Certification Authorities

I created a GPO to deploy a new trusted root CA certificate to end-user machines. This worked correctly and the certificate was deployed. Unfortunately I'd made a mistake with the certificate and I ...
1
vote
2answers
85 views

How to prohibit users from installing specific software in windows system in an AD

I've different OUs for different Departments. For Example Mechanical OU and Programmers OU. I don't want to block the users entirely from installing and Uninstalling software. For example users of ...
0
votes
0answers
105 views

wildcard in IE Trusted Sites not wild?

I use a GPO to add the following to Internet Explorer's Trusted Sites list for local intranet sites: *.mydomain.local http://*.mydomain.local https://*.mydomain.local All the end user computers are ...
1
vote
1answer
58 views

smb.conf csc policy parameters

I am administering a standalone user-authenticated Samba 4.3.11 server on Ubuntu 16.04, which is accessed by Windows 7 Pro and 10 Pro clients configured to cache offline files. The question is, what ...
0
votes
0answers
14 views

Windows server 2012 R2 - user's program preference not stored

I've been migrating my servers from WS2008 R2 to WS2012. Eveything seems ok right now but I still have an issue. When a user is connected to his profile, the program preferences are not stored. For ...
4
votes
1answer
397 views

Apply New Password Policy via GPO Gradually

I want to make changes to the password policy in our domain (for example, include password complexity) but I want to apply it gradually, to some OU's or users group first. As far as I know the ...
0
votes
0answers
39 views

AD CS Auto Enrollment Multiple Templates

I've recently setup AD Certificate Services and it seems to be working okay although I can't say I'm familiar with every aspect of this. I can setup auto-enrollment and this works but I think I ...
0
votes
0answers
24 views

Server 2008R2, startup/shutdown powershell scripts in gpedit.msc not working and not appearing in registry. Script works manually. No domain involved

It's a fully updated 2008 R2 box running WMF 5.1. I've got a powershell script that, under normal circumstances, e-mails me on startup or shutdown. It's working fine on a different 2008 R2 box. On ...
0
votes
0answers
25 views

Some users' workstations are going to Screen Saver sooner than specified in Group Policy

My supervisor came to me this morning asking me to look into an issue some new users are having with their machines closing out to their screen saver within 1-5 minutes, when our Group Policy has our ...
0
votes
0answers
55 views

GPO: allow hardware configuration (VLAN)

I have created an AD group and added it to the group of network operators so that the members of the group have permission to change IP addresses, etc. However, for some cases, there is a situation ...
0
votes
1answer
116 views

Can't change password policy on Azure VM (joined to Domain Services Domain)

We have an Azure VM (Windows Server 2012 R2) using AAD DS as the domain. I have both an O365 account in the domain (used to originally join the VM to the domain) and a local admin account on the ...
0
votes
0answers
30 views

GPO block USB write access to all users with exceptions

I would Like to block write access to removable drives for all users but allow some users to have access to write on the USB. This is what I have done. Created new security Group "Enable_USB_Access" ...
1
vote
2answers
205 views

Can I “allow logon locally” for ALL local accounts and some domain accounts?

I have used a "Allow logon locally" GPO on a few machines to restrict who can use them. It is annoying that I have to create/link a separate GPO for each set of machines/users (Where is item-level ...
0
votes
0answers
99 views

Restrict Bluetooth Profiles in Windows 10

I am in an environment that has, historically, disabled Bluetooth on all laptops. I would like to enable it for certain functionality...but without enabling it for all purposes. Is it possible to ...
0
votes
0answers
17 views

Use logon group policy to add a new registry key failed

I setup a group policy logon script to add a new registry key. It adds a new registry key [HKEY_CURRENT_USER\Software\ODBC\ODBC.INI\GDSRI123] "AutoTranslate"="No" The way I do this is to create two ...
0
votes
0answers
11 views

Windows Server GPO Sharepoint

Is there a way to have our organisations office365 sharepoint files automatically synced with a client PC? If not, is there any other solution for accessing a file repository for a group/team of ...
0
votes
0answers
24 views

GPO Results Wizard / WMI / Win32 errors

When I try to run the Group Policy Results Wizard on a Windows 7 workstation on my domain I receive the following error: Then when I try to restart the WMI service I get this: If I click Properties ...