Questions tagged [group-policy]

Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.

Filter by
Sorted by
Tagged with
1
vote
0answers
25 views

Remote Desktop to W10 with NTLM Disabled

We recently disable NTLM on our DCs (Default Domain Controllers Policy - Restrict NTLM: Deny all The problem is when some (not all) Windows 10 workgroup clients (connected with VPN) try to open a ...
0
votes
1answer
31 views

Shutting down service: Group Policy Client

I'm running a VM (Windows server 2016) which i just wanted to restart it. when i ordered to restart the VM from vSphere client (6.7.0.42000), - restart guest OS, then about 60 minutes it was stucked ...
0
votes
0answers
21 views

Can I enable login prompt for user for elevation prompt request instead of CRT ALT DEL?

I am trying to enable login credential pop up screen for elevation prompt requests instead of CRTL ALT DEL pop up in Windows 10.I was able to do this actually on my test machine but it doesnt work in ...
-1
votes
0answers
19 views

Robocopy issue coping userprofile to server Share SecurityID can't be owner

So I have spent the last week or so writing a nice logon script to apply to group policy on my domain controller to have the effect of roaming profiles but to mitigate many of the issues with roaming ...
0
votes
2answers
18 views

What will happen if DCs have different ADMX templates (retrieved from local computer rather than central store)?

I have a scenario where 2x DCs have ADMX templates pointing to their local computer. However, I found out that 1 ADMX templates are really old like 2013 while the other ADMX templates are very new ...
0
votes
0answers
9 views

All Firewall Rules deployed from Group Policy show as “Extra Registry Settings”?

Every time a new Firewall rule is added via Group Policy, it shows on the client as "Extra Registry Settings". Could someone please confirm if this is how it should show? I am staring to think that it ...
9
votes
2answers
1k views

Distributing SSL Certificates to All Browsers in an Active Directory Environment

I've generated a single self-signed SSL certificate (that expires in 5000 years). The purpose of the cert is to simply encrypt the https traffic of a trusted deno application that is accessed by a ...
0
votes
0answers
42 views

Reverse group policy for folder redirection

I created a group policy that will redirect my documents folders of the users on my company to a folder I created in a Windows 10 machine. I deleted the GPO without checking the box "Redirect the ...
1
vote
1answer
103 views

Access Denied WinRM Error Code 5

We are trying to set up Windows Event Forwarding (WEF) in our environment and we are running into a few issues. We have a GPO set up (shown below) to enable the forwarding of events to a local ...
0
votes
1answer
30 views

Where is the audit policy stored on a Windows Server?

I'm trying to understand how Windows stores policies. As I understand it, local workstation policies can either be governed via Group Policy if in a domain, or local on the server if it isn't in a ...
0
votes
0answers
24 views

Folder Redirection after the GPO was delected

I removed the GPO I created for the folder redirection. Now some users can't access my documents. They need to log in to the Windows 10 computer where I redirected their folders in order to access the ...
1
vote
0answers
16 views

Which GPO-applied security settings are tattooed on the system and how to identify them?

I need to remove a couple of old Group Policies that applied security settings to our servers. (Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment). I ...
1
vote
1answer
29 views

Unexpected Folder Redirection: Why are user 'Documents' folder contents being redirected to \%username% rather than \%username%\Documents?

I have successfully implemented a Folder Redirection group policy for a specific user group in our organization; however, the folders are not being redirected as expected. My goal is to implement the ...
0
votes
0answers
48 views

How do i implement active directory on a Virtual machine with a host already running sql

I have a HPE rack Server(64 gb ram, 5TB RAID 5) in my organization that has an ERP software which uses SQL 2012 server for storing database and about 70 client computers connect to this software ...
0
votes
0answers
38 views

Windows Search Indexing Locations: GPOs don't apply when setting via registry

If I enable of the following templates via gpedit.msc, they apply correctly: Computer Configuration\Administrative Templates\Windows Components\Search Default excluded paths Default indexed paths ...
0
votes
1answer
43 views

Windows Event Forwarding, Source-Initiated By Way Of AD Security Group?

I'm setting up Windows Event Forwarding (WEF) utilizing a source initiated subscription type. In that source initiated subscription - select computer groups area I've successfully tested entering an ...
0
votes
0answers
9 views

Windows GPO firewall settings not working

I have set my GPO to add two firewall exceptions (under the same one that adds my network drive which works every time and I know it is executing them), but it does not seem to work. I have even tried ...
1
vote
0answers
32 views

GPO's not applying to member servers only - Post thorough troubleshooting

The ol' GPO not applying issue that's been seen many times before..... Since the 29th April, none of my member servers are processing any GPO's. I've had a lot of experience with managing AD and GPO'...
0
votes
0answers
31 views

Default Domain Policy not applying Password Policy, red x on the policy

This is the screenshot of RSOP.msc digging into the password policies, on the client machine. Policy is being pulled but not applied? I tried going to the path but there was no winlogon.log. It ends ...
0
votes
0answers
9 views

A GPO that redirects profiles to be stored on a profile server or a repository

I want to setup remote profiles for a server so when users login to their profile is stored on another server or repository. Their files will be stored on that profile server/repository and can be ...
-1
votes
1answer
26 views

Bitlocker drive encryption after PC rename or removing from domain

I've the script and gpo for the bit-locker drive encryption and it successfully writing the encryption key to the AD object. Now what I can't find anywhere to test is what will happen in case the PC ...
1
vote
1answer
15 views

Installed GPO Administrative Template is missing from the editor

I have this template installed: However, it fails to appear in the editor: I tried downloading and running the .MSI from here, but that didn't help matters. This template appears to be installed ...
1
vote
1answer
37 views

Using environment variable for public desktop path in Windows 10 GPO

Most of my users' desktop shortcuts are managed by user GPO and they work fine, but I want to use a computer policy to create a shortcut for 'all users' on one machine. I tried making a computer GPO ...
0
votes
0answers
10 views

Multiple domain users not showing in Windows

I have a Samba4 server on Debian configured as Active Directory, which works great, except from one thing. I have one PC that multiple users are using. I want all of the users to show up in the ...
0
votes
0answers
27 views

WSUS GPO - Specific week specified, but ignored

I have configured a GPO to force updates via GPO in a scheduled maintenance window since these boxes were previously getting updates and just rebooting outside of active hours. I would prefer that ...
0
votes
0answers
19 views

Set scale settings in nvida control panel using GPO/Registry

We need to set the scale settings in nvidia control panel of all monitor to no scaling and "Perform scaling on" to GPU. Is there a way to do that with GPO or a registry key? Or any other way than to ...
-1
votes
1answer
13 views

Disable Do not display lock screen using powershell

Is there any Power shell command that changes the setting of the "Do not display lock screen" policy in Local group policy and i should perform the same on 30 machines. Can i do it with a single ...
0
votes
0answers
22 views

Direct Access - managing computer clients with Remote Desktop

I have a Direct Access configured, with IP-HTTPS , where all trafic is routing over IP-HTTPS. I have opened on the Firewall 443 port. My clients and servers doesn't have ipv6 public ip. I have ...
0
votes
2answers
27 views

How to troubleshoot IIS10 client cert security being broken by GP?

I have a weird situation. My Win 2016 servers were ruined by AD group polices. IIS 10 have started to throw 403 error after automatic AD group policy update at the moment X. Beforehand remote party ...
0
votes
0answers
48 views

Domain group policy not updating over site-to-site VPN

I have 2 sites: 192.168.10.0/24 - main site, this is where DC is. 192.168.20.0/24 - remote site, connected via site-to-site VPN. On main site everything works fine, GPO are being updated to members....
0
votes
0answers
81 views

GPO software deployment over VPN

We have a Windows server environment where we deploy software updates using GPO Software Deployment. This works fine for everyone in the office, however if a user is logged on from a remote location, ...
0
votes
0answers
36 views

Cannot copy files with Group Policy

I created a GPO and wanted to use the Group Policy Management to copy files to another computers. (Computer Configuration > Preferences > Windows setting >Files) Action: Create Source File: \\...
0
votes
1answer
25 views

Distribute Secrets via Active Directory [Group Policy]

I would like to simplify my life and distribute secrets (real secrets, like encryption private keys) to Active Directory domain member computers. Probably via Active Directory Group Policy, but will ...
0
votes
2answers
24 views

Logon script on some computers only

I have an application that is installed only on computers in one OU. The program requires some special config/permissions added to the user profile, so I wrote a Powershell script to setup the ...
0
votes
0answers
59 views

Best practices for moving Windows redirected folders to new server?

Background : I am migrating from a server running Windows 2008 R2 to Windows 2019. I had made an initial attempt at migrating the redirected folders but encountered various problems so I rolled back ...
0
votes
0answers
15 views

Getting locked out of FTP account

For the past few months, I have had recurring problems being locked out of the FTP account I use. If I open the user account and look at properties, it shows that the account is locked out. If I ...
0
votes
0answers
23 views

Unable to edit 'Default Domain Policy' GPO

I'm trying to edit the 'Default Domain Policy' on my Windows Server 2012 R2 AD server but I get the following error message in Group Policy Management after I right click the gpo and select Edit: "...
0
votes
1answer
70 views

How to prevent an ESXi VM from syncing the time zone setting from a VMware Horizon client PC

I have some VMs running on ESXi, and users connecting via Horizon. I have a "Global Time Policy" GPO which is working correctly, but when users connect to their VMs via Horizon from another time zone, ...
0
votes
1answer
49 views

Cannot modify Audit Policy

I would like to setup an audit policy on my servers but in each server I want setup I am not able to modify anything also in the domain controllers server I cannot set it up. In fact each time I open ...
0
votes
1answer
20 views

Windows Server 2019 auditing removed as soon as applied

I've got a Windows Server 2019 domain controller with a GPO applying auditing on logon events. RSOP shows it is applied, however, if I look at the event logs, the moment it applies I can see that it ...
1
vote
0answers
14 views

Group policy folder redirection not applying when using advanced setting

I'm trying to set-up folder redirection using group policy with the advanced setting, i.e. only apply if the user is in a specified group. The overall policy is applying fine (as confirmed using ...
0
votes
0answers
12 views

Can only get Immediate Tasks to work, never Scheduled Tasks

I'm trying to make a GPO that runs a PowerShell script whenever event ID 10000 occurs on a machine (when a network connection is established). First I simply made an immediate task that runs the ...
0
votes
0answers
9 views

GPO firewall rules applied in random order

Does GPO precedence not apply to firewall rules? We want three firewall rules for most PCs, and different rules for some PCs in an OU. That should be easy because a GPO linked in the OU should take ...
0
votes
0answers
10 views

Is it possible to manage Windows 10 notifications settings via GPO to be appllied only on notifications of specific programs?

I will like to automate the process to manage Windows 10 notifications via GPO for two things: The notification have to remain visible all the time until the user acknowledge or close the ...
0
votes
0answers
136 views

“The System Is Entering Sleep. Sleep Reason: Application API”. Windows 10 Desktop PC in Domain Environment

I Have 1 User that her PC (Windows 10 Desktop PC in Domain Environment) going to sleep for no good reason. in event viewer you can see Event ID 42: "The System Is Entering Sleep. Sleep Reason: ...
0
votes
1answer
36 views

GPO - How to prevent popup while loading a IE plugin (for Skype for Business WebApp)?

I trying to simplify to the maximum all user alerts related to ActiveX/Plugins needed for Skype for Business Web-App to work ( it is an On-prem Skype for business installation). What I did so far is: ...
0
votes
2answers
35 views

delete unnecessary settings from GPO

I want to delete some unnecessary settings from one GPO. I use windows server 2016, and i have unnecessary registry settings which i don't want to appear in my GPO. It is possible to perform this ...
0
votes
0answers
105 views

Active Directory: how to modify GPO link order?

I have an Active Directory domain. I want to modify GPOs link order. When I use gpmc.msc I don't have the arrows shown on the picture below. The corresponding margin is non existent. I'm logged in as ...
0
votes
0answers
40 views

How can you Certificate Path Validation Settings programatically or via InTune

I am trying to configure a local group policy setting "Certificate Path Validation Settings option" in "Computer Configuration\Windows Settings\Security Settings\Public Key Policies" to "Allow User ...
1
vote
1answer
28 views

Group Policy to deploy a file to a computer (yeah, that again…)

Environment: all Windows 10 stations, AD on Windows Server 2012 R2. I am aware of File Extensions GPP. But in this particular network I am not being able to deploy a simple file to the computers (I'm ...

1
2 3 4 5
58