Questions tagged [group-policy]
Group Policy is a feature of the Microsoft Windows NT family of operating systems that control the working environment of user accounts and computer accounts.
1,046
questions
0
votes
1
answer
515
views
Create Local Group Allowing Access to Removable Storage
We have several Windows 10 Pro laptops where Local Group Policy disallows read, write, and execute access for removable disks. We would like certain users to have this access. It seems like something ...
0
votes
1
answer
1k
views
Which inbound/outbound rules are necessary for stable IPv6 connectivity in Windows 10/11?
I'm experiencing an issue with Windows 10 where IPv6 connectivity becomes unstable over time. Initially, IPv6 works as expected, but after a while, it stops working. Upon investigation, I've ...
0
votes
1
answer
971
views
Change Policy of Microsoft Edge with JSON
I'm used to changing Policy in Chrome by adding the .json file to /etc/opt/chrome/policies/managed in Linux
I'm trying to apply the same to Edge as I'm seeing some policies are no more available in ...
0
votes
0
answers
220
views
PRevent Windows 10 Shutdown as long as process is still running
I habe a Windows 10 host system that runs a VMWare Workstation virtual machine. I would like to prevent shutdown or logoff on that host system as long as the VM is still running, preferrably ...
0
votes
0
answers
1k
views
Couldn't copy paste text from local computer(win 11) to AVD through Remote Desktop App
I couldn't copy paste text from local computer(windows 11) to AVD (Azure virtual Desktop) through Remote Desktop App. Copy paste works in both AVD & local computer, if i use RD web client.
All ...
0
votes
0
answers
2k
views
Intranet zone settings apply to Edge and Chrome, but not to Firefox
We have GPO settings active that place a certain website https://www.example.com into the trustworthy intranet zone. The setting (User Settings -> Administrative Templates -> Windows Components -...
0
votes
1
answer
268
views
What's the __vmware__ user in the group policy
VMWare workstation added a vmware user in the group policy:
Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment > Allow log on ...
0
votes
0
answers
255
views
Edge passwords and saving to a homeshare for citrix
I want to save Edge passwords to a new computer.
I have read a ton of articles and everyone says C:\Users\%username%\AppData\Local\Microsoft\Edge\User Data\Default\ or specifically the login data ...
0
votes
0
answers
210
views
Windows not booting after changing EnableVirtualizationBasedSecurity setting in GroupPolicy
Today I wanted to disable the Microsoft Defender Credential Guard on my Windows 11 workstation to allow my remote connections to use stored passwords again (LAN only, no domain login). I did, however, ...
1
vote
1
answer
308
views
How to remove shutdown option in start menu but leave it on when selecting CTRL + ALT + DEL
I would like to hide/remove the shutdown option from the start menu but leave it available on CTRL + ALT + DEL.
0
votes
0
answers
241
views
How to allow Windows 10 standard users to run certain application as administrator?
We have windows server 2016, all clients are windows 10. We want to allow the users to run certain applications (for example OpenVPN, Chrome Browser) as admin, but other applications only as a ...
1
vote
0
answers
679
views
Is this DMA protection in Group Policy different from Kernel DMA protection?
There is a Bitlocker DMA protection and then there is Kernel DMA protection. the latter is better and enabled by default on capable hardware, the former is only suggested to be used when hardware ...
0
votes
2
answers
3k
views
How to use REGEDIT to adjust 'machine inactivity limit' in Windows 11?
I'm trying to setup my laptop, so that when I don't use mouse or keyboard for some number of seconds, the lock-screen will appear. (I'm on Windows-11)
I'd hoped to find a way to dig down (in the GUI) ...
0
votes
0
answers
130
views
Disallow standard Users from generating Resultant Set of Policy data
how to restrict users to see Rsop data
such as
gpresult /r /x
and all data in group policy managements
i mean i want users can't see any Rsop data
i want if users opened group policy managements or ...
0
votes
1
answer
204
views
How can I apply my group policies on top of Microsoft security baselines?
I took a clean fresh VM, applied my group policies on it, backed up the C:\Windows\System32\GroupPolicy folder. now I want to apply it to a different VM where I've already applied the Windows 11 22H2 ...
0
votes
2
answers
7k
views
How to enable DNS over HTTPS (DoH) in group policy on Windows 11?
I am trying to enable DNS over HTTPS on my personal Windows 11 (Build 22621.1105) machine (Lenovo ThinkPad). I am the only user account on this machine (MS Account, Admin).
In the settings for the DNS ...
0
votes
0
answers
181
views
Apply policy to non-administrative users using PowerShell
I have disable the use of removable media to non-administrator users using MMC console to apply a local policy and setting Removable Disks: Deny read access for non-administrators.
I'd like to set ...
2
votes
0
answers
477
views
Windows 10 - Export and Import Local-Group-Policy (Windows-Update) Changes
Concerning-System: Microsoft Windows 10 Enterprise LTSC | Version 10.0.17763 Build 17763
i have changed the local group policy via editor:
through research following command should export the the ...
1
vote
0
answers
11
views
Run one of two scripts based on the outcome of a check?
I have two GPO scripts that, in a nutshell:
Close any existing instances of Chrome.
Open a new instance of Chrome.
Navigate to a webpage.
The only thing is that one script checks the location of ...
2
votes
1
answer
810
views
How to add a user group in the "Shut down the system" group policy in Windows Server by CMD or PowerShell
How to add a user group in the "Shut down the system" group policy in Windows Server by CMD or PowerShell
I've read some documentation on Microsoft and other sites.
Some of them suggest ...
0
votes
1
answer
17
views
Disabled driver installations through GP then removed a device
I have one laptop with faulty keyboard (stuck keys which occasionally write stuff on their own) and I Googled "how to turn keyboard off" ... found a way which includes Enabling ‘Prevent ...
0
votes
1
answer
5k
views
My domain user profile is not listed in Local Users and Groups - Windows 11
I applied the 22H2 Windows 11 update last week which fried my entire domain user profile on my laptop. I attempted to change my domain from my workplace domain name to the local WORKGROUP and then ...
3
votes
0
answers
7k
views
PowerShell / Registry: Remove the "Activate Windows" watermark for Windows Sandbox
The "Activate Windows" watermark is used by Microsoft to track unlicensed copies of Windows; this is important for them and I have no issue with that. However, for Windows Sandbox, we are ...
1
vote
1
answer
1k
views
Reliable way to deploy SW via GPO Software Installation (Active Directory), including laptops on Wi-Fi
Have you ever wondered how to install software onto Windows machines in a reliable way in Active Directory via native GPO? (I mean this: Group Policy Management -> Computer Configuration -> ...
0
votes
1
answer
83
views
Windows 11 and Windows Hello for PIN signins
I was testing something on my personal Win 11 desktop, trying to reproduce a problem a coworker was facing when trying to run some PowerShell scripts I wrote to help devs get new machines set up and ...
0
votes
0
answers
158
views
BitLocker, USB-drive and GPO
I got myself into a difficult situation: enrypted USB-drive D: using an Windows PowerShell script file *.ps1.
Initialize-Tpm
#Enable Bitlocker
Enable-BitLocker -MountPoint "D:" -...
1
vote
1
answer
4k
views
Preventing Users from signing in Microsoft Edge
Internet Explorer mode pages in Microsoft Edge will expires 30 days if there users is signed into Microsoft Edge .
Can I find out is there any GPO to prevent users to sign into edge / use a local ...
1
vote
1
answer
574
views
Dynamically setting remote desktop users group membership via Active Directory Attribute
I've gotten a bit of a strange requirement that I have to fill, and I'm hoping to get working without user intervention down the line.
In our Windows environment we have multiple departments, each ...
0
votes
1
answer
163
views
Local security settings
is it possible to use Get-GPOReport command on a Client that is not in a Domain? I have a list of Group Policy Paths and trying to read them. Something like REG QUERY but with GPO`s "Computer ...
5
votes
1
answer
778
views
Disable Outlook "Top Results" / "show most relevant search results on top" via PowerShell / Registry / Group Policy
I am unable to find a way to disable the Microsoft Outlook search option "show most relevant search results on top" via a systematic / automated approach so that I can deploy this to all of ...
0
votes
1
answer
2k
views
I can't get Windows Defender Application Control policy working in Windows 11
On Windows 11, I made a WDAC policy with WDAC Wizard and added it to Group Policy, restarted the PC and still the policy isn't being enforced.
Here is the test policy I made:
<?xml version="1....
0
votes
0
answers
204
views
How can I Use Group Policy to send a Message to specific OU?
Setup is simple: windows server 2022
The issue is we need to reach some people when they login (but not the entire company) I can put those users into a security group, but what I need to happen is to ...
0
votes
1
answer
3k
views
Blocking Powershell with GPO
My manager has told me that they want Powershell to be executed only in servers with the admin account, so I created a GPO that blocks Powershell.exe and Powershell_ise.exe with "Don't run ...
0
votes
0
answers
58
views
MacOS: Chrome- Can't edit UserDataDir policy on local home computer
I am trying to edit some Chrome policies on my own Mac (non organization) which I have admin access to. For example, the 'UserDataDir' policy (https://chromeenterprise.google/policies/?policy=...
1
vote
1
answer
944
views
Windows 10 resisting configuration to delete pagefile on shutdown
Why would Windows 10 resist its configuration to delete its pagefile on shutdown?
The configuration is:
Windows 10 guest on an Ubuntu 22.04 host running VMware Workstation Player 16.2.4.
The Windows ...
0
votes
0
answers
2k
views
Change Group Policy Configuration from PowerShell
I would like to disable automatic updates in group policy using PowerShell (this needs to run on several machines so it needs to be automated). Specifically, I want to set Administrative Templates -&...
0
votes
0
answers
1k
views
How to make persistent changes (survive after reboot) in the Windows registry?
I have a Windows 7 VM and I'm trying to modify the keys in
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SystemInformation since I want to change the data in both SystemProductName and BIOSVersion ...
0
votes
0
answers
557
views
Are Group Policy entries always written to Registry?
I have some setting
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkIsolation DWORD DSubnetsAuthoritive
which seems to be set but in the Registry nothing is enabled. But when I look ...
1
vote
2
answers
83
views
Is it possible to log events of every user in one Event Log?
Right now if AppLocker blocks a program it is only logged in the local EventLog of the user.
Is it possible to set up one Event Log where the events of any user are logged that can be accessed by an ...
0
votes
0
answers
394
views
Don´t allow domain users to access shared folders on PCs outside the domain in the same LAN
I have the following problem.
Is there a way to block domain users from accessing folders shared by computers that are not in the domain? By this means there is information leakage
For example:
...
3
votes
1
answer
4k
views
Forcing lock screen image not working
I want to force the same lock screen image on every user. I selected the image I want with group policy Local Computer Policy > Computer Configuration > Administrative Templates > Control ...
0
votes
1
answer
3k
views
How to disable Lock screen when pressing Ctrl - Alt - Del in Windows 10?
I would like to disable the lock screen in Windows 10 when the user presses Ctrl - Alt - Delete. The default behaviour is that when this keyboard combination is pressed, a user is presented a lock-...
0
votes
1
answer
2k
views
Deny access to C: to Edge
Hello I post here cause i know adminsitrator will be happy to know it too! im looking for prevent C: drive access with edge. Do you have any idea , GPO ? ive ever blocked c: drive, hide c: drive, but ...
0
votes
1
answer
301
views
Some clients take the hour from DC that is not PDC
We have two DCs, DC1 and DC2, DC1 have all roles. I configured a GPO for clients to sync with DC1:
I notice that some domain clients have as time source DC2.
Somebody knows Why ?
DC2 have this option ...
0
votes
1
answer
664
views
Proper path for client's "Local Group Policy" in PS' NetSecurity module
So, by default default, Windows client OSes (and servers too, to a degree) have 2 default Windows Firewall policies: weird local firewall and local group policy. In netsh you can easily switch between ...
0
votes
0
answers
292
views
Why group policy can't prevent Windows Update from installing drivers?
After I have uninstalled the device (remove driver software selected) and edited the entries in group policies to prevent driver installation. Windows Update still installed drivers for that device.
...
0
votes
0
answers
58
views
How to create a script that loads a desktop link and changes the icon?
Long story short, Windows Server 2022: While this SHOULD be done via GPO, we're having a few issues with GPO and our server right at the moment.
But the location where the proper GPO options are, is ...
0
votes
1
answer
1k
views
How to remove group and others permission in Windows 10
How to remove group and others permissions in Windows 10, such that end result will be similar to chmod go= -R ~? I can execute the Linux command even though I am not a superuser/admin and I am not ...
0
votes
1
answer
2k
views
How do you block Copy/paste between Linux XRDP server and Windows RDP client?
We're allowing users to open xrdp sessions with Windows as client, and Linux as the xrdp server.
My requirement is to eliminate the copy pasting going on through this to comply with policies.
If it ...
1
vote
0
answers
41
views
Is there a way in the Windows 10 registry (or otherwise) to suppress the "This function has been disabled by your administrator" message?
On a Windows 10 machine located on a closed network which has been locked down in various ways through local GPO settings, there is a certain web application used with this machine that prompts a user ...