Questions tagged [group-policy]
Group Policy is a built-in feature of the Microsoft Windows operating systems. Group Policy allows administrators to automatically configure myriad options within the OS. These policies can be configured, and applied, either locally to the computer via Local Group Policy or remotely within an Active Directory environment.
3,198
questions
1
vote
0
answers
12
views
AGPM and Production Delegation
Advanced Group Policy Management (AGPM) and Production Delegation. The Production Delegation should set the delegation permissions on a GPO, i.e. Read, Edit, or Edit, Delete and Modify Security. In ...
- 11
0
votes
0
answers
35
views
Unable to find GPO that is installing software
I've recently inherited a network and I'm trying to find (and disable) a GPO that is installing Teams on all of my workstations. Running gpresult /Z as Administrator on one of the affected machines ...
0
votes
1
answer
18
views
How to create a GPO to audit start/stop of a service not running on the DC?
I'm trying to enable auditing of service start/stop events for a few specific services on a group of domain computers, and to make this change using Group Policy.
I've seen this answer, however when I ...
- 1
1
vote
0
answers
26
views
Domain administrator unable to connect via remote desktop after group policy deployment
The network I administer has two virtualized Windows Server DC and a handful of Windows clients. I wanted to enable remote desktop on all computers (some had it, some hadn't) via group policy and so I ...
- 11
1
vote
2
answers
37
views
Stuck with a GPO, no class or attribute on AD Object?
I may have blundered a GPO towards the end of my shift.
A fairly important (at least to me and future weeks) had its links go red and unreachable after I altered Delegation settings on a specific ...
- 13
0
votes
1
answer
228
views
Logon Message Powershell Script Runs But Does Not Launch Prompt
I'm trying to setup a login prompt according to https://aws.amazon.com/blogs/desktop-and-application-streaming/generate-logon-messages-for-security-and-compliance-in-amazon-windows-workspaces/ because ...
-2
votes
0
answers
20
views
Windows 10 GPO that allow user to enable wireless connections
I was looking for a gpo that allowed the domain user, whithout local administrator rights, to ENABLE the wireless network connection. I found under User Configuration, Administrative Templates, ...
- 149
1
vote
0
answers
96
views
PowerShell - Failure to load built-in modules due to software restrictions
Yesterday, I was working with PowerShellEditorServices to develop a tool. Internally, it uses named pipes to communicate between the client and server. They are both running locally.
At some point, ...
- 131
0
votes
0
answers
36
views
Group Policy Management Access Denied on Delegation Tab
I'm running a Windows Active Directory Domain using two 2016 DCs. Everything about the domain and my GPO policies are functioning correctly. However, when I open up Group Policy Management and then ...
- 225
0
votes
1
answer
33
views
How to create and manage a new DCOM object via batch or powershell
Win+R. dcomcnfg > I need to register a new dll using this tool as a COM. I can do this manually. But I have a lot of WS.
regsvr32 is not enough. The COM App need to exist in dcomcnfg
So, can it be ...
- 3
0
votes
0
answers
37
views
Why Windows Default Domain Policy overrides custom group policy? [duplicate]
I did notice that there's similar answer about this situation, such as this one.
But I'm still confused so need some opinions.
I'm currently creating some custom group policies in a windows server ...
- 63
0
votes
1
answer
55
views
Why isn't the GPO showing up in gpresult?
I have a GPO made for a specific OU that I have a test device in. Other test GPOs work fine and show up on the device in gpresult. The GPO I'm having issues with is set to run a PowerShell script on ...
- 1
2
votes
2
answers
283
views
How To Ask Remote Desktop Password After Connection
I would like in a windows server 2022 to edit the login behaviour of remote desktop.
I've been told that it is possible to ask for password AFTER the connection has been established.
In order to ...
- 149
0
votes
0
answers
30
views
After setting the windows 10 gpo "DenyUnspecified" and "DenyRemovableDevice", and configure AllowDeviceIDs device is visible but cannot be removed
I need to allow only specific usb media on my windows 10 Host (21h1).
The gpo configuration:
GPO_LocalMachineRegistryKeySet "Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions&...
1
vote
0
answers
39
views
Find Group Policy object to allow ms-appinstaller protocol
We're running a proof of concept of an application, the preferred deployment method is web install:
The user goes to the locally hosted app server
If the user is in the AD Group for the application a ...
- 121
0
votes
0
answers
31
views
dcgpofix "Could not open the Active Directory Object"
I am trying to run dcgpofix because my AD environment is a disaster. This organization had only one person in IT and he hired me to help, and shortly thereafter left. He left behind a corrupted domain ...
- 1
0
votes
0
answers
48
views
Turn off Focus assist via GPO not working as expected
Is there a standardized way to turn off focus assist centrally since i am trying to display balloon tips and toast notifications for applications and windows updates being deployed from sccm software ...
- 51
0
votes
0
answers
98
views
GPO "Administratively assigned offline files" is applied but files are not available offline
I've configured a GPO that uses the "Administratively assigned offline files" to make a path \\server\share\%username% available offline. It works perfectly fine on my old Windows XP laptop, ...
- 51
0
votes
2
answers
50
views
applying a GPO to all users for a specific server
first time writer here.
My situation is as follows:
we have an active directory, that is more or less organized. All users are in a single OU, and working on a Terminalserver (WINS 2012R2), lets call ...
- 11
4
votes
2
answers
202
views
Best practice on deploying MSIs via group policies: from dedicated share or from the AD itself?
For years I have been using GPOs to install MSIs to our Windows clients. All MSIs resided under a single \\fileserver\share, with a GPO assigned to each MSI for installation. Currently, out AD servers ...
- 153
0
votes
0
answers
60
views
UAC elevation via Local Admin "pin auth" not present for Azure AD Joined Windows 11
Is there any way to elevate via local admin pin in UAC prompt for non-admin Azure AD user on Windows joined to Azure Active Directory by making a change in group policy or registry to achieve desired ...
- 101
0
votes
1
answer
49
views
How do I tell what changes did the group policy made?
I have a situation where someone within a client's SecOps team made a GPO change but is not fessing up to it because it caused a pretty big outage.
From the Windows Event Logs on the affected server, ...
- 219
1
vote
0
answers
35
views
Migrating to another AD domain/forest: advice needed on handling of GPO-based software installations and existing file shares
We have been administering 3 AD 2019 servers serving around 150 Windows 10 clients, in a single AD domain. As part of an organization merging, a single AD domain will be created and a task to migrate ...
- 153
2
votes
0
answers
88
views
Windows Server 2016 - Folder Redirection for Start menu -> right-click Windows PowerShell: "Windows cannot access ...Windows PowerShell.lnk"
When I run this, PowerShell opens as expected:
"\\Win-FileServer\Folder Redirection\myUsername\AppData\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk"
...
- 294
0
votes
0
answers
24
views
Trying to import a specific portion of the local security policy template for account lockout
I am trying to implement a solution to modify the local security policy on client machines using SECEDIT and a provided inf file, however /IMPORT requires the /db parameter to be listed but I cannot ...
0
votes
1
answer
42
views
Cannot limit file access auditing on Windows Server 2019
I'm trying to implement file access auditing on a Windows Server 2019 machine with mixed success.
The server in question is a member server, but not a domain controller.
I have enabled success ...
- 183
0
votes
0
answers
29
views
what windows policy settings are minimally required to get true/false response from isUserVerifyingPlatformAuthenticatorAvailable()
In a corporate setting there are Windows Group Policies restricting the use of FIDO Platform authenticators (e.g. Windows Hello (for Business) on Microsoft Windows devices)
Using the ...
- 1,471
0
votes
0
answers
407
views
Remote Group Policy Update failed (Access Denied) for Domain Admin
My first question in ServerFault heya :)
In our domain manage all server and client machines with Microsoft Active Directory. We have 13 Vm Server. Domain\administrator user is Domain admin. I use it ...
- 1
-1
votes
1
answer
102
views
assign AD GPO to a specific set of computers: what mechanism?
(In exploratory mode: not sure what is the right question to ask, and how to ask it. Also, new to AD GPOs: please forgive lack of clarity in the question.)
Question: how do I assign an Active ...
- 304
0
votes
0
answers
23
views
why cant Login to AD OU user with GPO to the local server machine itself?
I had installed windows 2022 server eval version and windows 11 evalution version in clients. I had configured active directory . I hade created Organisational unit. Then applied Group policy in ...
- 113
0
votes
2
answers
67
views
Group Policy can't be overruled
I have 2 different GPOs in this example, one is directly under the Domain - Global GPO - and one is burried down in an User OU - Custom GPO.
In my Global GPO I have set the Setting "Local Area ...
0
votes
0
answers
30
views
How to set Windows server active driectory group policy Slideshow (live wallpapers)?
I had installed windows 2019 server and windows 11 in clients. I had configured active directory . I hade created Organisational unit. Then applied Group policy in organisation units.
i have ...
- 113
0
votes
0
answers
32
views
How to get Active Directory to Prohibit User Installations using Group policy
I have installed Windows Server 2019, Active Directory, and Windows 11 clients. I have created an Organizational Unit (OU). I then applied Group Policy in OU. Some of the restriction are working but ...
- 113
0
votes
0
answers
82
views
Network drives not shown on some users. Explorer need to be restarted
we have windows domain, with a gpo where the drives are mapped, one of the users just one, has the problem the drives are not shown or disappears after a time. Strangely if you use any other programms ...
1
vote
0
answers
232
views
"Managed by your organization" in Google Chrome browser
My Chrome browser (Windows 10) shows "Managed by your organization" at the end of the menu. I went into the chrome://policy/ and saw some policies that seem to be set exclusively by active ...
- 13
0
votes
0
answers
155
views
User profiles are getting corrupted, and the GPO to delete User Profiles is not working as intended
I am working in a school were laptops are shared between students, and up to 60 kids can use the same laptop in a week's time. The first time we encountered any problems with this was when one class ...
- 111
-1
votes
1
answer
216
views
Always on VPN profile with Group policy
I am trying to deploy the always on VPN profile via GPO, with a powershell script from Richard hicks. the script works when i run local, but i can't figure out how to run it with a startup script in ...
0
votes
0
answers
27
views
GPO error opening
I encountered an issue while attempting to create a duplicate of an existing mapped drive Group Policy Object (GPO) and modifying it for a different path in my environment. Unfortunately, I made a ...
- 1
0
votes
0
answers
23
views
OneDrive Policy for user and Teams folders in business account
My organization has acquired a lot of Microsoft Cloud services (Teams, SharePoint Online, OneDrive, Office 365). All our users have a OneDrive account, but they are not all using it yet. Additionally, ...
- 175
0
votes
0
answers
1k
views
WSUS: which product should be selected to cater for Windows 10 22H2 updates?
I have a WSUS server running for some time on Windows Server, catering for the needs of my Windows 10 Professional clients. All clients were on version 21H2 up to some days ago. In WSUS under products ...
- 153
1
vote
1
answer
345
views
Azure equivalent for logon script or Group Policy to launch programs on user login
We have a tool (portable exe) that runs from an on premises server in a traditional domain that launches on user login via GP (and can also run from logon script). It references a location on the ...
- 45
0
votes
0
answers
79
views
What is the best way to deploy printers to clients?
What is the best practice method for deploying printers to clients using the Print Management tool on a Windows Server 2019?
There are printers based in each remote office, which I would like to ...
- 1
0
votes
0
answers
103
views
Smart Card authentication Windows 11 order
How can I configure so smartcard login is the first choice when logging in?
Our domain is using smart card login for users and LAPS for administration of our workstation which means I cannot enforce ...
0
votes
0
answers
224
views
Auto log off after 5 minutes except for one user windows server 2022
I have a single tower that has windows server 2022 on it. Everyone RDP's into that with different users to access the necessary software. After 5 minutes of inactivity the user should be logged out ...
0
votes
1
answer
202
views
When I add the "Edge Policies" to my DC, my other GPOs go missing
I followed the steps in the link below to install the Edge policy templates into Active Directory.
https://pureinfotech.com/install-microsoft-edge-group-policy-templates-windows-10/
However, after ...
- 219
0
votes
0
answers
101
views
Server 22, GPO & Bitlocker
I am having similar issues to this Bitlocker GPO automatic? However mine is not permissions based. It does not matter what user I log in as normal user to domain admin.
RSOP shows the policies applied,...
- 425
0
votes
0
answers
102
views
GPO: Startup PowerShell script on multiple OUs only running once
I have a weird issue with a PS script which should run on startup of a computer.
This script is configured identical on three levels (OUs) only different parameters.
Depending on for which hosts it's ...
0
votes
1
answer
286
views
bad password count in different sites
What happens if a user try wrong password in different DC (sites), how come the lockout occurs after meeting threshold bad pwd count?
Account lockout threshold value is 3
for eg
i have 3 sites - Site ...
0
votes
0
answers
136
views
How do I change default user settings in RDS Session Host?
Using Windows Server 2022...
When a user connects the first time to my RDS Session Host, they get this layout...
How can I by default remove "server programs", prevent all users (but admins)...
- 519
0
votes
1
answer
191
views
Event 1202 when trying to run a scheduled task GPO under NT Authority\System
I'm trying to get a barcode font installed on machines for a enterprise application. The GPO is being served from a Windows Server 2019 Standard version 1809 OS build 17763.4252 server. The GPO in ...
