Questions tagged [group-policy]

Group Policy is a feature of the Microsoft Windows NT family of operating systems that control the working environment of user accounts and computer accounts.

Filter by
Sorted by
Tagged with
0 votes
1 answer
515 views

Create Local Group Allowing Access to Removable Storage

We have several Windows 10 Pro laptops where Local Group Policy disallows read, write, and execute access for removable disks. We would like certain users to have this access. It seems like something ...
SixDegrees's user avatar
0 votes
1 answer
1k views

Which inbound/outbound rules are necessary for stable IPv6 connectivity in Windows 10/11?

I'm experiencing an issue with Windows 10 where IPv6 connectivity becomes unstable over time. Initially, IPv6 works as expected, but after a while, it stops working. Upon investigation, I've ...
obeN's user avatar
  • 101
0 votes
1 answer
971 views

Change Policy of Microsoft Edge with JSON

I'm used to changing Policy in Chrome by adding the .json file to /etc/opt/chrome/policies/managed in Linux I'm trying to apply the same to Edge as I'm seeing some policies are no more available in ...
NicoCaldo's user avatar
  • 111
0 votes
0 answers
220 views

PRevent Windows 10 Shutdown as long as process is still running

I habe a Windows 10 host system that runs a VMWare Workstation virtual machine. I would like to prevent shutdown or logoff on that host system as long as the VM is still running, preferrably ...
Erik's user avatar
  • 1,399
0 votes
0 answers
1k views

Couldn't copy paste text from local computer(win 11) to AVD through Remote Desktop App

I couldn't copy paste text from local computer(windows 11) to AVD (Azure virtual Desktop) through Remote Desktop App. Copy paste works in both AVD & local computer, if i use RD web client. All ...
Nezuko's user avatar
  • 1
0 votes
0 answers
2k views

Intranet zone settings apply to Edge and Chrome, but not to Firefox

We have GPO settings active that place a certain website https://www.example.com into the trustworthy intranet zone. The setting (User Settings -> Administrative Templates -> Windows Components -...
Hagen von Eitzen's user avatar
0 votes
1 answer
268 views

What's the __vmware__ user in the group policy

VMWare workstation added a vmware user in the group policy: Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment > Allow log on ...
stackbiz's user avatar
  • 123
0 votes
0 answers
255 views

Edge passwords and saving to a homeshare for citrix

I want to save Edge passwords to a new computer. I have read a ton of articles and everyone says C:\Users\%username%\AppData\Local\Microsoft\Edge\User Data\Default\ or specifically the login data ...
David's user avatar
  • 1
0 votes
0 answers
210 views

Windows not booting after changing EnableVirtualizationBasedSecurity setting in GroupPolicy

Today I wanted to disable the Microsoft Defender Credential Guard on my Windows 11 workstation to allow my remote connections to use stored passwords again (LAN only, no domain login). I did, however, ...
Johannes H.'s user avatar
1 vote
1 answer
308 views

How to remove shutdown option in start menu but leave it on when selecting CTRL + ALT + DEL

I would like to hide/remove the shutdown option from the start menu but leave it available on CTRL + ALT + DEL.
Luis's user avatar
  • 11
0 votes
0 answers
241 views

How to allow Windows 10 standard users to run certain application as administrator?

We have windows server 2016, all clients are windows 10. We want to allow the users to run certain applications (for example OpenVPN, Chrome Browser) as admin, but other applications only as a ...
RedOne's user avatar
  • 9
1 vote
0 answers
679 views

Is this DMA protection in Group Policy different from Kernel DMA protection?

There is a Bitlocker DMA protection and then there is Kernel DMA protection. the latter is better and enabled by default on capable hardware, the former is only suggested to be used when hardware ...
user avatar
0 votes
2 answers
3k views

How to use REGEDIT to adjust 'machine inactivity limit' in Windows 11?

I'm trying to setup my laptop, so that when I don't use mouse or keyboard for some number of seconds, the lock-screen will appear. (I'm on Windows-11) I'd hoped to find a way to dig down (in the GUI) ...
David Cook's user avatar
0 votes
0 answers
130 views

Disallow standard Users from generating Resultant Set of Policy data

how to restrict users to see Rsop data such as gpresult /r /x and all data in group policy managements i mean i want users can't see any Rsop data i want if users opened group policy managements or ...
RedOne's user avatar
  • 9
0 votes
1 answer
204 views

How can I apply my group policies on top of Microsoft security baselines?

I took a clean fresh VM, applied my group policies on it, backed up the C:\Windows\System32\GroupPolicy folder. now I want to apply it to a different VM where I've already applied the Windows 11 22H2 ...
user avatar
0 votes
2 answers
7k views

How to enable DNS over HTTPS (DoH) in group policy on Windows 11?

I am trying to enable DNS over HTTPS on my personal Windows 11 (Build 22621.1105) machine (Lenovo ThinkPad). I am the only user account on this machine (MS Account, Admin). In the settings for the DNS ...
andiluk's user avatar
  • 31
0 votes
0 answers
181 views

Apply policy to non-administrative users using PowerShell

I have disable the use of removable media to non-administrator users using MMC console to apply a local policy and setting Removable Disks: Deny read access for non-administrators. I'd like to set ...
anderZubi's user avatar
  • 121
2 votes
0 answers
477 views

Windows 10 - Export and Import Local-Group-Policy (Windows-Update) Changes

Concerning-System: Microsoft Windows 10 Enterprise LTSC | Version 10.0.17763 Build 17763 i have changed the local group policy via editor: through research following command should export the the ...
NoErrorNoCry's user avatar
1 vote
0 answers
11 views

Run one of two scripts based on the outcome of a check?

I have two GPO scripts that, in a nutshell: Close any existing instances of Chrome. Open a new instance of Chrome. Navigate to a webpage. The only thing is that one script checks the location of ...
Ben's user avatar
  • 1,226
2 votes
1 answer
810 views

How to add a user group in the "Shut down the system" group policy in Windows Server by CMD or PowerShell

How to add a user group in the "Shut down the system" group policy in Windows Server by CMD or PowerShell I've read some documentation on Microsoft and other sites. Some of them suggest ...
Daniel Teodoro's user avatar
0 votes
1 answer
17 views

Disabled driver installations through GP then removed a device

I have one laptop with faulty keyboard (stuck keys which occasionally write stuff on their own) and I Googled "how to turn keyboard off" ... found a way which includes Enabling ‘Prevent ...
dakky21's user avatar
  • 21
0 votes
1 answer
5k views

My domain user profile is not listed in Local Users and Groups - Windows 11

I applied the 22H2 Windows 11 update last week which fried my entire domain user profile on my laptop. I attempted to change my domain from my workplace domain name to the local WORKGROUP and then ...
jabroni's user avatar
  • 103
3 votes
0 answers
7k views

PowerShell / Registry: Remove the "Activate Windows" watermark for Windows Sandbox

The "Activate Windows" watermark is used by Microsoft to track unlicensed copies of Windows; this is important for them and I have no issue with that. However, for Windows Sandbox, we are ...
YorSubs's user avatar
  • 843
1 vote
1 answer
1k views

Reliable way to deploy SW via GPO Software Installation (Active Directory), including laptops on Wi-Fi

Have you ever wondered how to install software onto Windows machines in a reliable way in Active Directory via native GPO? (I mean this: Group Policy Management -> Computer Configuration -> ...
crysman's user avatar
  • 802
0 votes
1 answer
83 views

Windows 11 and Windows Hello for PIN signins

I was testing something on my personal Win 11 desktop, trying to reproduce a problem a coworker was facing when trying to run some PowerShell scripts I wrote to help devs get new machines set up and ...
Morgan Blackthorne's user avatar
0 votes
0 answers
158 views

BitLocker, USB-drive and GPO

I got myself into a difficult situation: enrypted USB-drive D: using an Windows PowerShell script file *.ps1. Initialize-Tpm #Enable Bitlocker Enable-BitLocker -MountPoint "D:" -...
Oleg Kovalenko's user avatar
1 vote
1 answer
4k views

Preventing Users from signing in Microsoft Edge

Internet Explorer mode pages in Microsoft Edge will expires 30 days if there users is signed into Microsoft Edge . Can I find out is there any GPO to prevent users to sign into edge / use a local ...
EC2022's user avatar
  • 11
1 vote
1 answer
574 views

Dynamically setting remote desktop users group membership via Active Directory Attribute

I've gotten a bit of a strange requirement that I have to fill, and I'm hoping to get working without user intervention down the line. In our Windows environment we have multiple departments, each ...
dev's user avatar
  • 21
0 votes
1 answer
163 views

Local security settings

is it possible to use Get-GPOReport command on a Client that is not in a Domain? I have a list of Group Policy Paths and trying to read them. Something like REG QUERY but with GPO`s "Computer ...
DdRrKk1's user avatar
  • 23
5 votes
1 answer
778 views

Disable Outlook "Top Results" / "show most relevant search results on top" via PowerShell / Registry / Group Policy

I am unable to find a way to disable the Microsoft Outlook search option "show most relevant search results on top" via a systematic / automated approach so that I can deploy this to all of ...
CraftyB's user avatar
  • 1,913
0 votes
1 answer
2k views

I can't get Windows Defender Application Control policy working in Windows 11

On Windows 11, I made a WDAC policy with WDAC Wizard and added it to Group Policy, restarted the PC and still the policy isn't being enforced. Here is the test policy I made: <?xml version="1....
user avatar
0 votes
0 answers
204 views

How can I Use Group Policy to send a Message to specific OU?

Setup is simple: windows server 2022 The issue is we need to reach some people when they login (but not the entire company) I can put those users into a security group, but what I need to happen is to ...
Christopher J. Joubert's user avatar
0 votes
1 answer
3k views

Blocking Powershell with GPO

My manager has told me that they want Powershell to be executed only in servers with the admin account, so I created a GPO that blocks Powershell.exe and Powershell_ise.exe with "Don't run ...
Alex's user avatar
  • 1
0 votes
0 answers
58 views

MacOS: Chrome- Can't edit UserDataDir policy on local home computer

I am trying to edit some Chrome policies on my own Mac (non organization) which I have admin access to. For example, the 'UserDataDir' policy (https://chromeenterprise.google/policies/?policy=...
GodzFire's user avatar
1 vote
1 answer
944 views

Windows 10 resisting configuration to delete pagefile on shutdown

Why would Windows 10 resist its configuration to delete its pagefile on shutdown? The configuration is: Windows 10 guest on an Ubuntu 22.04 host running VMware Workstation Player 16.2.4. The Windows ...
ebsf's user avatar
  • 155
0 votes
0 answers
2k views

Change Group Policy Configuration from PowerShell

I would like to disable automatic updates in group policy using PowerShell (this needs to run on several machines so it needs to be automated). Specifically, I want to set Administrative Templates -&...
EllipticalInitial's user avatar
0 votes
0 answers
1k views

How to make persistent changes (survive after reboot) in the Windows registry?

I have a Windows 7 VM and I'm trying to modify the keys in HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SystemInformation since I want to change the data in both SystemProductName and BIOSVersion ...
jefazo92's user avatar
0 votes
0 answers
557 views

Are Group Policy entries always written to Registry?

I have some setting HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkIsolation DWORD DSubnetsAuthoritive which seems to be set but in the Registry nothing is enabled. But when I look ...
Alois Kraus's user avatar
1 vote
2 answers
83 views

Is it possible to log events of every user in one Event Log?

Right now if AppLocker blocks a program it is only logged in the local EventLog of the user. Is it possible to set up one Event Log where the events of any user are logged that can be accessed by an ...
ylr's user avatar
  • 13
0 votes
0 answers
394 views

Don´t allow domain users to access shared folders on PCs outside the domain in the same LAN

I have the following problem. Is there a way to block domain users from accessing folders shared by computers that are not in the domain? By this means there is information leakage For example: ...
Adriasgard's user avatar
3 votes
1 answer
4k views

Forcing lock screen image not working

I want to force the same lock screen image on every user. I selected the image I want with group policy Local Computer Policy > Computer Configuration > Administrative Templates > Control ...
VidathD's user avatar
  • 139
0 votes
1 answer
3k views

How to disable Lock screen when pressing Ctrl - Alt - Del in Windows 10?

I would like to disable the lock screen in Windows 10 when the user presses Ctrl - Alt - Delete. The default behaviour is that when this keyboard combination is pressed, a user is presented a lock-...
Erik's user avatar
  • 1,399
0 votes
1 answer
2k views

Deny access to C: to Edge

Hello I post here cause i know adminsitrator will be happy to know it too! im looking for prevent C: drive access with edge. Do you have any idea , GPO ? ive ever blocked c: drive, hide c: drive, but ...
FuxT's user avatar
  • 74
0 votes
1 answer
301 views

Some clients take the hour from DC that is not PDC

We have two DCs, DC1 and DC2, DC1 have all roles. I configured a GPO for clients to sync with DC1: I notice that some domain clients have as time source DC2. Somebody knows Why ? DC2 have this option ...
RAN55's user avatar
  • 53
0 votes
1 answer
664 views

Proper path for client's "Local Group Policy" in PS' NetSecurity module

So, by default default, Windows client OSes (and servers too, to a degree) have 2 default Windows Firewall policies: weird local firewall and local group policy. In netsh you can easily switch between ...
Digika's user avatar
  • 21
0 votes
0 answers
292 views

Why group policy can't prevent Windows Update from installing drivers?

After I have uninstalled the device (remove driver software selected) and edited the entries in group policies to prevent driver installation. Windows Update still installed drivers for that device. ...
dspjm's user avatar
  • 440
0 votes
0 answers
58 views

How to create a script that loads a desktop link and changes the icon?

Long story short, Windows Server 2022: While this SHOULD be done via GPO, we're having a few issues with GPO and our server right at the moment. But the location where the proper GPO options are, is ...
Christopher J. Joubert's user avatar
0 votes
1 answer
1k views

How to remove group and others permission in Windows 10

How to remove group and others permissions in Windows 10, such that end result will be similar to chmod go= -R ~? I can execute the Linux command even though I am not a superuser/admin and I am not ...
vcx34178's user avatar
  • 119
0 votes
1 answer
2k views

How do you block Copy/paste between Linux XRDP server and Windows RDP client?

We're allowing users to open xrdp sessions with Windows as client, and Linux as the xrdp server. My requirement is to eliminate the copy pasting going on through this to comply with policies. If it ...
bluesquare's user avatar
1 vote
0 answers
41 views

Is there a way in the Windows 10 registry (or otherwise) to suppress the "This function has been disabled by your administrator" message?

On a Windows 10 machine located on a closed network which has been locked down in various ways through local GPO settings, there is a certain web application used with this machine that prompts a user ...
Kefka's user avatar
  • 1,426

1
2
3 4 5
21