2
You need to enable Loopback processing policy in either merge or replace. This changes the OUs that are considered when a user login.
So by default user policies will be pulled from the users OU (or parent OUs). In merge mode user policies would be pulled form the user OU, and computer OU. In replace mode user policies will only come from the computer OU.
...
2
I can only give you a partial answer:
The Preferences are XML files. You can find the corresponding file here:
\\YOUR_DOMAIN\SYSVOL\DOMAIN_NAME\Policies\ID_OF_THE_GPO\Machine\Preferences\Printers\Printers.xml
and you'll find something like that:
As you can see, the filters are in the <Filters> node: so, you can create them with a script/editor for ...
1
Another Group Policy overrides this value.
From one of the servers, run the following command as administrator: gpresult /h c:\temp\gpo.html (you can change the path).
This command will create a group policy report and save it as .HTML file.
Then, you'll be able to see clearly which GPO sets which settings.
1
Figured it out. Key was item-level targeting under the Common tab.
Ended up using the "RDS Servers" OU, as was suggested/tried before with loopback processing (Merge) enabled; RDSSERVER exists in the "RDS Servers" OU obviously.
I created two GPOs below that parent OU GPO:
Red Team Shortcuts (Security Filtering default "Authenticated Users"), but under ...
1
You can do this using Group Policy registry preferences.
This post should get you in the right direction for editing default applications via the registry on Windows 10.
Test first on a single computer so you know which keys to create/modify. Then duplicate that solution in a registry preference.
This post explains how to deploy a registry preference.
Only top voted, non community-wiki answers of a minimum length are eligible
