Questions tagged [group-policy]
Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.
3,169
questions
0
votes
0
answers
15
views
OneDrive Policy for user and Teams folders in business account
My organization has acquired a lot of Microsoft Cloud services (Teams, SharePoint Online, OneDrive, Office 365). All our users have a OneDrive account, but they are not all using it yet. Additionally, ...
- 143
0
votes
0
answers
59
views
WSUS: which product should be selected to cater for Windows 10 22H2 updates?
I have a WSUS server running for some time on Windows Server, catering for the needs of my Windows 10 Professional clients. All clients were on version 21H2 up to some days ago. In WSUS under products ...
- 103
1
vote
1
answer
34
views
Azure equivalent for logon script or Group Policy to launch programs on user login
We have a tool (portable exe) that runs from an on premises server in a traditional domain that launches on user login via GP (and can also run from logon script). It references a location on the ...
- 43
-1
votes
0
answers
15
views
Group Policy directories, files remain as "opened" in Computer Management
Similar question but no response. Can someone help - Group Policy directories remain as "opened" in Computer Management
On my Windows 2016 server DC, I see number of opened directory as ...
- 1
0
votes
0
answers
17
views
What is the best way to deploy printers to clients?
What is the best practice method for deploying printers to clients using the Print Management tool on a Windows Server 2019?
There are printers based in each remote office, which I would like to ...
- 1
0
votes
0
answers
15
views
Smart Card authentication Windows 11 order
How can I configure so smartcard login is the first choice when logging in?
Our domain is using smart card login for users and LAPS for administration of our workstation which means I cannot enforce ...
0
votes
0
answers
26
views
Auto log off after 5 minutes except for one user windows server 2022
I have a single tower that has windows server 2022 on it. Everyone RDP's into that with different users to access the necessary software. After 5 minutes of inactivity the user should be logged out ...
0
votes
1
answer
45
views
When I add the "Edge Policies" to my DC, my other GPOs go missing
I followed the steps in the link below to install the Edge policy templates into Active Directory.
https://pureinfotech.com/install-microsoft-edge-group-policy-templates-windows-10/
However, after ...
- 211
0
votes
0
answers
57
views
Server 22, GPO & Bitlocker
I am having similar issues to this Bitlocker GPO automatic? However mine is not permissions based. It does not matter what user I log in as normal user to domain admin.
RSOP shows the policies applied,...
- 425
0
votes
0
answers
31
views
GPO: Startup PowerShell script on multiple OUs only running once
I have a weird issue with a PS script which should run on startup of a computer.
This script is configured identical on three levels (OUs) only different parameters.
Depending on for which hosts it's ...
0
votes
0
answers
41
views
bad password count in different sites
What happens if a user try wrong password in different DC (sites), how come the lockout occurs after meeting threshold bad pwd count?
Account lockout threshold value is 3
for eg
i have 3 sites - Site ...
0
votes
0
answers
26
views
How do I change default user settings in RDS Session Host?
Using Windows Server 2022...
When a user connects the first time to my RDS Session Host, they get this layout...
How can I by default remove "server programs", prevent all users (but admins)...
- 519
0
votes
1
answer
69
views
Event 1202 when trying to run a scheduled task GPO under NT Authority\System
I'm trying to get a barcode font installed on machines for a enterprise application. The GPO is being served from a Windows Server 2019 Standard version 1809 OS build 17763.4252 server. The GPO in ...
0
votes
0
answers
37
views
Can I use a group in a root domain to filter application of a group policy object from this root domain for a computer in a child domain?
I have a root domain (root.local) with a child domain (child.root.local).
I have a Group Policy Object in the root domain, e.g. GPO_root
In the child domain I have a computer, computer_child. Is is ...
- 1
0
votes
1
answer
176
views
Best method for enabling bitlocker via GPO/scripting
I'm working on getting bitlocker deployed across an organization and am getting hung up on how I'm expected to actually enable it. We're using on-site AD on Server2012 (will be moving to 2022 this ...
- 229
0
votes
0
answers
34
views
WMI Filter Does not Apply After Updates
I have a GPO with this WMI filter: SELECT Name From Win32_ServerFeature WHERE Name = 'Web Server (IIS)'
The GPO has a startup script meant to modify a file to instruct the load balancer that the ...
0
votes
0
answers
27
views
How to deploy a MSI that needs a per-machine parameter?
I'm developing a MSI package that installs my product. I do my best to follow all the best practice, however, there is one thing I haven't found anywhere how to do best. I need to supply one parameter ...
- 1
1
vote
0
answers
24
views
Microsoft Active Directory Admin - Discriminate usable USB Disk devices
good morning, I have been trying for a while through policy management or other microsoft media to restrict the use of USB removable disks. I know that through Active Direcory I can enable and disable ...
- 11
1
vote
1
answer
155
views
Deploy Printers GPO not working after PrintNightmare restrictions
I am trying to use a GPO to deploy printers to Windows 10 workstaions in our domain. On a Windows Server 2016 DC, the policy that I am using is under Computer Configuration->Policies->Windows ...
1
vote
0
answers
159
views
Wsus gpo applied but not used
On my server, I have a GPO dedicated to enabling wsus in the environment but is some time that on the server the gpo are processed correctly and in gpresult and rsop are all ok, here is a screen:
.
...
- 36
0
votes
1
answer
41
views
Show an external internet calendar (ICS) in everybody's Outlook on 365
we're using M365 with more platforms - Outlook on Mac, iOS, Windows and web, as well as Calendar.app on iOS and macOS.
And we have an external HR web app which has an internet calendar such as webcal:/...
- 101
0
votes
0
answers
12
views
W.A.C. feature enabling prevented by "MultiPoint Repair Service"
Win 10 Pro(Activated)
Device Owner: Myself(as Administrator Account)
Version:22H2
HP EliteBook
Toshiba Satellite
-I run 2 copies of Win 10 Pro both are activated and legitimate.
-I have not attempted ...
0
votes
0
answers
59
views
Windows GPO Youtube restricted mode not applied in the browser on some machines
I have created a group policy to set youtube restricted mode in Edge and Chrome on a Windows server 2022 domain controller. On my test machine (W10 Pro ENG) the policies are applied and seem to work ...
- 1
0
votes
0
answers
13
views
I was wondering how other people within a business organization lock down installing from Microsoft store, but allows preinstalled apps to update
Our company uses Windows 11 Pro, We currently have it so that nothing can be downloaded from Microsoft store via the GPO
Computer Configuration > Policies > Administrative Templates > ...
- 1
0
votes
0
answers
33
views
Active directory failing to deploy a converted MSI file to clients via GPO
I have been struggling with deploying a Kaspersky network agent to my clients that are part of the work Domain.
I have performed the below steps;
Joined the client to the domain
Ping the name of the ...
- 3
0
votes
0
answers
142
views
Struggling to deploy files to %appdata% subfolders with GPO
I have a few minor MSOffice projects which require files to exist in various subfolders of %appdata%, and I'm trying to deploy these to a test OU but have been unable to push the files to their ...
0
votes
0
answers
41
views
I want to create active directory groups for all domain joined servers via group policy.Is that possible?
I want to create active directory groups via group policy for every server I join to the domain so that I don't need to create groups manually. Is that possible ?
0
votes
0
answers
142
views
GPO VBS Script does not run at startup
I need to setup a GPO that execute a VBS script at Startup.
I already create a script and test it without GPO and works perfectly, but when I do gpupdate /force and restart computer, nothing changes.
...
0
votes
1
answer
16
views
If I've already created a registry entry on 2 servers, when I roll it out to the rest of the estate via Group Policy , is it "Update" or "Create"?
If I've already created a registry entry on 2 test servers, when I roll it out to the rest of the estate via Group Policy , do I choose "Update" or "Create"?
- 103
0
votes
0
answers
46
views
Windows 2019: Audit policy being overwritten by "something"
I have similar problem as it was described in thread below:
Audit policy being overwritten by "something"
unfortunately deletion of audit.csv did not help
let me summarize problem:
we are ...
0
votes
0
answers
95
views
Scheduled Task not being deployed via GPO
I have created a FailedLogon task in GPO similar to this https://woshub.com/scheduled-task-gpo/
The task gets deployed if I run it as SYSTEM. But when trying to run it under a service account ...
- 1
0
votes
0
answers
23
views
Password Policy Changes On Non-PDC Domain Controllers
I have a DC I just added to my domain as a backup so it does not have a PDC role. I have the password policy set on the Default Domain policy. There are no Fine Password Policies setup. When I check ...
- 811
0
votes
0
answers
19
views
How do troubleshoot an AD Drive Mapping policy?
I have some users in the shipping department that aren't getting automatic updates to their Drive mappings upon reboot or fresh login. H for example is supposed to be mapped to \server\boxes
but the ...
- 1
1
vote
0
answers
65
views
GPO applies as user but not when using a security group
I have this GPO that works fine. I have Authenticated Users in the Delegation Tab with Read permission. Then I have user1 also in the Delegation Tab with Read & Apply permission. GPO (mapping of a ...
1
vote
1
answer
49
views
Why is Windows Restarting my Service which I've Manually Stopped?
We have three servers - Windows 2012 R2 - in Azure, running a variety of our own custom developed services. These services are configured to start automatically, so naturally, on startup or after a ...
- 131
0
votes
1
answer
490
views
Registry option "do not use proxy server for local addresses"
I just create a gpo to configure proxy with this registry options:
https://theitbros.com/config-internet-explorer-11-proxy-settings-gpo/
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet ...
- 1
0
votes
1
answer
105
views
Kerberos settings in GPO never seem to apply in spite of the GPO otherwise working
Server 2019 Domain Environment. Issue is related to the DCs themselves.
I've a self-created GPO on my DC OU that sets a bunch of things, several of which are Kerberos settings:
Curiously, while ...
- 153
0
votes
2
answers
66
views
Preventing software installation without AppLocker
In the light of recent news we are seeking wisdom on how to block Oracle Java from installing on all domain-joined Windows computers. The major headache is that the organisation doesn't use AppLocker.
...
0
votes
1
answer
190
views
Handling GPO Policies between different domains
I have a handful of changes in a policy that I'd like to apply to other domains. I am wanting to copy this policy to these other domains so I do not have to create them for every dc.
Most of what I've ...
- 226
3
votes
3
answers
321
views
Enable the Settings icon on Windows 11 Start Menu with GPO
I want to enable the Settings button on the Start Menu (next to the Power button). This would normally be done in Personalization -> Start -> Folders, but I cannot find the respective GPO or ...
- 131
-2
votes
1
answer
136
views
cant apply GPO to groups only to main domain Windows Server 2022
In the computers and users I add a new OU then add users to it(see left side of pic). Then I add a GPO to group(see right side of pic). However they don't apply. The only way I can get them to work is ...
1
vote
1
answer
171
views
Stumped on why my Startup GPO Script isn't executing BCDEdit correctly
Environment: MS Server 2019 DC, Windows 10 Workstations joined to the Domain.
The goal here is to set the Data Execution Prevention on a bunch of machines to OptOut. The way to do this via a command ...
- 153
0
votes
0
answers
220
views
How to import a PFX certificate to LocalMachine/Personal via GPO
I would like to deploy P12 certificate (for OpenVPN) to Windws Certificate Store, to be more precise to LocalMachine\Personal. The reason is the certificate will be protected at least by local admin ...
- 1
0
votes
0
answers
41
views
GPO Registry and Startup Scripts failing to apply
I've been working on a relatively simple GPO to lock down some machines that will act as "kiosks". All the policies/preferences etc that I've set have worked fine except for registry changes ...
- 1
0
votes
2
answers
461
views
Activate and specify logon script without user interaction
I would like to remotely activate a logon script to computers (Win10 and 11) not connected to a domain.
I can already remotely deploy software/script/files as admin, for example: I can deploy a logon....
- 3
-1
votes
1
answer
60
views
Is it possible to get the ADMX files for Office without manually running the exe?
I am currently trying to provision a Virtualized AD Domain, but encountered a bit of a weirdness
The clients for that domain will have Office 2021 installed, so I am trying to automate pull of the ...
0
votes
1
answer
99
views
Let user in AD set date/time by hand
Under a 2012 AD, as usual, users cannot set date/time on their computers as this is managed by organization. For specific purposes, we need to let one of the users set date to past but options are ...
- 487
0
votes
0
answers
63
views
Complex Password GPO Security Filtering Access Denied
We are just trying to apply a password policy to a set of users of a security group, we've added the security group to the Security Filtering, but when running the Group Policy Modeling with a user ...
-3
votes
1
answer
53
views
Active Directory, allow USB access using computer name [closed]
I created a Group Policy Object (GPO) which contains configuration settings related to using USB devices. How do I apply the configuration settings contained in the GPO to a computer?
- 3
0
votes
0
answers
32
views
Member servers pull Group Policy from only 1 (of 2) domain controllers?
Environment overview: AWS
DC1 = Win2k12 instance in region1 - AZ1
DC2 = Win2k12 instance in region1 - AZ2
~ 60 Member servers = all within region1
Replication set up between the two DCs for GPO, DNS, ...
