Questions tagged [group-policy]
Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.
3,235
questions
0
votes
0
answers
22
views
How can I disable/prevent users from installing Windows Subsystem for Linux via GPO?
My security team is forcing us to disable WSL, and in my research I've seen methods using Powershell, Registry keys, and Intune, but none of those options are available, or they are unacceptable to ...
0
votes
0
answers
55
views
Active Directory computer group membership
I have a Group policy that is applied to a security group. The group members are computer accounts that need this policy.
When I want to remove this policy from a computer, I remove it from members of ...
- 174
1
vote
1
answer
40
views
Revert Windows state after GPO application
Couldn't find a clear and consolidated article on the "official" way to do this.
Is there a definitive way to revert all the changes that a given GPO will apply to a computer after applying ...
- 13
0
votes
0
answers
26
views
GPO doesn't Install locally located MSI on boot on all PCs
I'm using GPO cache to install software during boot on offline computers.
It's only working on 50% of the test computers.
It's a 2 step process:
GPO1 copies the MSI to a local folder on all computers ...
- 25
0
votes
1
answer
46
views
LogOff script runs with administrator privileges?
I have a script that I'm trying to bring to the desired result. it runs when the user logs off, during which the onedrive process should start, I expect it to run as the user, which ends the session, ...
1
vote
2
answers
149
views
Unusual printer deployment
Does anyone know of any method, or software, that will change what printers a user has based on what specific computer they're logged into? Or are we just stuck with manually installing sets of ...
- 13
-1
votes
1
answer
343
views
Advanced Audit Policy configuration using PowerShell
I created a GPO to enable advanced audit policies and Security settings.
Related policy settings
I need to edit and enable the settings using PowerShell.
What are the related registry keys?
How can I ...
- 1
-1
votes
1
answer
30
views
Define a specific policy in the domain controller gpo
I am defining a series of special policies in my domain controller, I wanted the user not to have admin access, but to be able to share the folder on the network for other users.
I even set the user’s ...
1
vote
0
answers
181
views
Windows Server 2022 does not reboot after automatic updates
Using
gpedit.msc > Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Windows Update > Configure Automatic Updates is enabled.
Option 4 =...
- 111
0
votes
0
answers
74
views
How to make group policy in Active Directory to allow the certain user to change their regional settings?
I want to allow a specific set of users can change their regional settings (eg, date format, number format)
1
vote
1
answer
35
views
AD GPO with user settings only applied when explicitly moving user to OU
I have the following forest:
- spatiebas.internal
- spatiebas
- linux
- windows
I created a GPO "windows logon scripts policy" (which only sets a login script in the user ...
- 145
2
votes
0
answers
85
views
Adding languages base on the computer in RDS environment
I'm assigning keyboard languages to users in an RDS environment based on the host.
For example, if a user is assigned to ts "tsA", spanish will be added to the keyboard. Uf assigned to other ...
- 21
0
votes
0
answers
64
views
Access to Group Policy is denied to Everyone at the top level of the domain
An access control entry was created that denies access to Everyone at top level of the domain.
How can this be reset?
Cannot open GPO Management, cannot open AD Users & Computers.
0
votes
0
answers
41
views
Google-Chrome GPO pin extensions
In the Google-Chrome-GPO-Settings under Extensions -> Extension management settings I put in
{“*”:{“toolbar_pin”:“force_pinned”}}
but the extenshions are still hidden and not pinned.
Where can be ...
- 101
0
votes
0
answers
164
views
Google-Chrome GPO Bookmarks directly to the Bookmarks-Toolbar
I'm looking for a group policy setting on a Windows Server to deploy bookmarks directly to the clients Chrome toolbar through GPO. I've found the way to put it into the "Managed Bookmarks" ...
- 101
-1
votes
1
answer
454
views
AD / SYSVOL Version Mismatch on Local Admin Policy (Restricted Group settings)
I am going to crazy about 1 weeks. I following many documents and solution for this but no way.
I am trying to suppress BUILTIN\Administratos Group members on domain computers with a policy which i ...
- 11
0
votes
0
answers
81
views
How to debug gpupdate?
My gpupdate can take upto 10 minutes to run instead of 40s.
How can I debug gpupdate ? :
PS C:\> ~/psh/time.ps1 gpupdate
Updating policy...
Computer Policy update has completed successfully.
User ...
- 409
0
votes
0
answers
36
views
Need to change default spell check from US to UK system wide via group policy
One of our sites has US spell check on by default, I want to change this so that it uses UK instead. Is there a setting in group policy that would help with this? Preferably I need it system wide, but ...
- 1
0
votes
1
answer
182
views
GPO Method to Push DNS Settings to All PCs in a Domain Environment
I am currently facing a challenging task regarding setting DNS configurations for all PCs. I aim to push DNS entries to ensure that all the machines use the correct DNS servers for domain resolution ...
2
votes
1
answer
2k
views
Problems with Windows Hello for Business in hybrid Cloud Trust scenario, but only on Windows 10
So I went through the process of deploying WHFB. I set up all the prereqs (as far as I know) following the Cloud Trust deployment guide. I added four test machines to the test OU with the appropriate ...
- 306
0
votes
0
answers
39
views
Repairing gpo-MSI-based installations after file server switches to other host and domain name
Our around 150 Windows 10 based clients in our Server 2019-based AD got their software via software install GPOs, with Install MSIs available under \\oldhost.olddomain.local\installpath\.
Some days ...
- 173
0
votes
1
answer
446
views
Active Directory GPO not applying computer configuration
I seem to be getting stuck with Computer Policies not being applied by machines in our domain.
The User specific settings are being applied (desktop background etc.), but I can't see anything in the ...
- 133
0
votes
2
answers
454
views
Group Policy not applied: access denied
I created a new AD security group, added all users i need. Within our GPO "FolderRedirection" in the security filter tab, I removed Authenticated Users and added the new AD security group ...
- 1
0
votes
0
answers
99
views
Software Restriction Policies - HASH Algorithm
I have created a specific software restriction GPO for a specific server in my AD, I want to limit access to certain applications on the server such as PowerShell.
I have used the HASH method to try ...
- 1
1
vote
0
answers
57
views
Hiding Script Host error when network path not found
I have a Group Policy logon script that is located at and runs from the NETLOGON share.
When a user is off domain and logs on, an error is displayed that the path is not found.
This frightens and ...
- 21
-2
votes
1
answer
30
views
Deploy Termius software with Active Directory Group Policy, which includes pre-login settings using a shared account
I want to deploy Termius software with Active Directory's Group Policy.
The software requires pre-login settings using a shared account.
How can we do that?
0
votes
2
answers
241
views
Do Windows domain builtin groups grant the same permissions as the equivalent machine builtin groups? (eg, Performance Monitor Users)
I am developing a Windows service that uses PDH to query some performance counter data.
It is necessary for the service to by run by another user (ie, not the all-powerful SYSTEM).
I am aware that the ...
- 105
0
votes
0
answers
393
views
Windows failed to apply the Deployed Printer Connections settings
I have created a new policy in my domain using Group Policy Management. I have successfully deployed it from Print Server Management. However, when I run the command "gpupdate /force" on my ...
- 1
0
votes
1
answer
286
views
How to enable service installation event (event id 4697) in windows 7?
In windows 10, after I use the following command to enable Security System Extension:
auditpol /set /subcategory:"Security System Extension" /success:enable /failure:disable
Whenever a new ...
- 109
0
votes
0
answers
15
views
Windows workstation unable to change password change for other accounts
When I do a CTRL-ALT-DEL, then change password, on a workstation in one of my domains, it gives me the option to put in a username.
For another domain that I manage, it does not.
I assume this is a ...
- 41
-2
votes
1
answer
117
views
Group policy works on Server not on Workstations
I have a Windows Server running Server2022. I created a group policy to copy a file to the user's C: drive on login.
When I log on to the server this works like a charm, but it doesn't work when I ...
- 1
0
votes
0
answers
114
views
How to prevent ADMX template Group Policy from removing registry values when policy is removed or disabled?
I am using an ADMX Template to set a registry values. The key for the values already exists on the machines, and it may be changed but not removed or it will impact the service which depends on it.
...
- 321
0
votes
0
answers
293
views
NRPT via GPO while using Always On VPN NRPT
I have a working Always On VPN Profile deployed using the ProfileXML implementation of automatic NRPT to the local device configuration:
<DomainNameInformation>
<DomainName>.example....
- 590
0
votes
1
answer
30
views
GPO install application and then service pack
scenario:
I have a GPO for deploying SoftwareABC.msi and every computer that fits GPO will have SoftwareABC installed.
Now I have a Service Pack SoftwareABC_SP1.msi, deployed new GPO and it deployed ...
0
votes
0
answers
32
views
How to Reduce Delay in Displaying Incorrect Password message on Domain PC
I've been encountering an issue with domain PCs where it takes a longer time to notify entering of incorrect password. After conducting some research, we identified that the delay is caused due to ...
0
votes
0
answers
93
views
BitLocker Full Disk Encryption - WIN
I am encountering a recurring issue with BitLocker Full Disc Encryption (WIN) via Policy Management on Windows devices. The issue manifests as a failed encryption attempt due to the presence of ...
- 1
0
votes
0
answers
83
views
Issues with "Site to Zone Assignment List" working and then not working
I'm not a domain expert so I apologize if some of my lingo is off.
I'm trying to make it so that users on my domain don't need to enter a username/password when accessing a specific website. I've ...
-1
votes
1
answer
293
views
December Windows Update disable use of registry keys to set lockscreen image for Windows 11 Professional?
As the title says, to clarify, you can't normally set lockscreen image with GPO for Windows 11 Pro computers, as it only works for Enterprise and Education. However you could set three ...
0
votes
1
answer
582
views
SQL Server installation failing due to Software Restriction Policy - but no policy exists on server?
I am attempting to install SQL Server Express 2022 on Windows Server 2022.
When I setup the Windows server, I added a Software Restriction Policy for preventing the installation of executables and msi ...
- 101
0
votes
1
answer
782
views
Why would IT lock down SeIncreaseWorkingSetPrivilege?
Question:
Why would anyone lock down the SeIncreaseWorkingSetPrivilege == Increase a process working set == https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-...
- 609
0
votes
2
answers
544
views
Group Policy, applocker, Application Control Policies
Error Screenshot
As an admin how can I prevent .exe generated specifically from ASP.NET web applications from getting blocked by AppLocker.
Context:
We are currently utilizing the local Active ...
0
votes
0
answers
366
views
Running diskpart from system in windows sever 2022 - shows no disks
I've inherited a system of VMs (AWS ec2) running on an older version of windows server. Due to software upgrades we need to also upgrade to windows server 2022.
One hang up I have is that the existing ...
- 109
0
votes
1
answer
739
views
What does Windows use to determine how old a profile is when implementing the CleanupProfiles registry setting?
How does the Windows registry setting HKLM\Software\Policies\Microsoft\Windows\System!CleanupProfiles determine the age of a profile on Windows 10?
I have tried to understand the setting, which is ...
0
votes
0
answers
222
views
Printers deployed through GPO disappear on terminal server
Windows Server 2012 Print Server and Domain Controller.
Printers deployed with GPO, per user and per machine, to Windows Server 2019 Terminal Server.
Main issue:
Every time I logon to Terminal All/...
- 79
0
votes
1
answer
899
views
GPO Application Error - Cannot Access GptTmpl.inf
In my organization's Windows AD environment, I cam across an error on several machines:
"Security policy cannot be propagated. Cannot access the template. Error code = -536870656.
\.net\sysvol<...
- 1
0
votes
1
answer
1k
views
GPO - Missing "Manage updates offered from Windows Server Update Service"
in our Windows Server 2019 DC we are missing the following Administrative Template:
Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Update > ...
- 101
0
votes
1
answer
5k
views
Windows group policy settings are not replicating to other DC (windows 2019)
I have a scenario where group policy settings are not replicating from primary DC01 to backup DC02.
Please see in the picture attached below showing the same exact GPO policy being viewed from both ...
- 25
1
vote
1
answer
550
views
Change of the keyboard language and operating system language on users' computers using GPO (Windows Server)
I am responsible for managing a fleet of computers in my organization, and I would like to know how to configure the change of keyboard language and operating system language on users' computers using ...
2
votes
1
answer
862
views
How can I add a Capability SID to GPO Registry permissions?
We attempted to configure the permissions of a Registry key (HKLM\Software) via GPO. (https://www.stigviewer.com/stig/windows_server_2019/2019-12-12/finding/V-93025)
However this resulted in a ...
- 898
0
votes
0
answers
626
views
1 Domain Controller(s) with replication in progress
I have 3 DCs (DC01, DC02 and DC03).
If I create a group policy on any DC I find it replicated to the others.
But I see an error in Group policy management, in domain status if I click “Detect Now” it ...
- 1