Questions tagged [group-policy]
Group Policy is a feature of the Microsoft Windows NT family of operating systems that control the working environment of user accounts and computer accounts.
1,050
questions
0
votes
0
answers
246
views
How can BitLocker be configured to not require additional authentication if Secure Boot is disabled
I have a laptop with Windows 10 1703 installed, that I am trying to determine how BitLocker has been configured on.
In the BIOS the laptop has Discrete TPM selected but also has the option of Intel ...
- 1
1
vote
1
answer
257
views
Is there a way to change gpo via a .reg file or batch file?
I share my laptop with my son and I dont want him using the mobile hotspot (Because I cant track it). So I disable it via gpo. See link: https://www.theexperienceblog.com/2016/08/04/how-to-disable-the-...
- 326
2
votes
1
answer
100
views
How to completely remove a keyboard layout from windows
I have a software that, when run, automatically adds a specific keyboard layout
Is there any way to prevent this?
some sort of lock on windows' keyboard layout list?
or some sort of permission ...
2
votes
2
answers
20k
views
Why is an unremovable Policy for "QuicAllowed" making Google Chrome tell me it's managed by my organisation?
Why is a registry key appearing in HKLM:\Software\Policies\Google\Chrome!QuicAllowed? It reappears on reboot if I delete it. Its presence is causing Google Chrome to tell me that the browser is ...
CommunityBot
- 1
1
vote
0
answers
74
views
What is the mechanism that sets network control policy for users and groups locally and remotely?
tl;dr I think polkit is the answer but don't understand where the local setting is stored vs. the remote setting. Am I right? If not, what is the correct response. For the record, I'm working with ...
- 182
0
votes
1
answer
509
views
enable “Turn off Windows+X hotkeys” GPO using powershell
Need to enable Turn off Windows+X hotkeys GPO. I have used the below query but is not enabling the GPO.
If (-not (Get-Module GroupPolicy)){Import-Module GroupPolicy}
Set-GPRegistryValue -Name "...
- 101
9
votes
3
answers
59k
views
How Do I Allow A Standard User to Install Programs?
Yes, I realize that defeats the purpose of standard user. But here is the situation. A friend of mine wants to set up time limits for his home schooled son, and his son needs to be a standard user in ...
0
votes
1
answer
7k
views
How to set Password must meet minimum requirements policy using command prompt
I need to set local password policy. I don't want to use gpedit.msc .I able to set all other policies using net accounts command but complexity requirements is not listing in net accounts. How can I ...
CommunityBot
- 1
1
vote
0
answers
154
views
Group policy does not work on Windows 10 home edition?
I'm using Windows 10 home edition, try to solve update Windows Defender Antivirus antimalware platform - KB4052623 (Version 4.18.2001.10) error code 0x80070643
According to this Microsoft web page, I ...
- 18.7k
2
votes
1
answer
5k
views
In Powershell, How to set execution policy for another non-admin user (as admin)?
the command Set-ExecutionPolicy has a parameter -Scope which only has 5 categories:
MachinePolicy
UserPolicy
Process
CurrentUser
LocalMachine
It appears to have no ...
- 4,876
1
vote
1
answer
2k
views
How to not apply a GPO to only one user?
I have a group policy applied at the domain level for complex passwords. I have one user that I want to have a simple password. From my research, I went to the delegation tab of the specific GPO, and ...
- 324
2
votes
2
answers
11k
views
Allow enhanced PINs for startup with Bitlocker
I use PIN to unlock a windows 10 machine with bitlocker-protected OS drive. Currently, only 0-9 characters are allowed in PIN. Following a documentation, I enabled "Allow enhanced PINs for startup" in ...
- 31
58
votes
2
answers
212k
views
How to disable Windows 10 memory compression?
my former wrong assumption:
it drains my notebook battery and I've no shortage of RAM.
In Task manager you see ntoskrnl.exe is eating more CPU time than any other process.
this feature does not appear ...
- 2,642
1
vote
1
answer
724
views
How to set mouse scrolling speed for all users?
I am searching for a way to increase the mouse scrolling speed on Windows Server 2016 from the default value (3) up to 20 for all users (HKLM). I am searching for this option since several hours ...
- 41.8k
10
votes
4
answers
49k
views
How to remove Chrome policies?
I found some weird policies on my chrome by visiting chrome://policy/ (or about:policy), like ExtensionInstallSources or ExtensionInstallWhitelist. I though it may be from some virus because on other ...
- 121
0
votes
1
answer
97
views
Prevent / Hide drives from My Computer won't effect
I am planning to have a small internet cafe and want to prevent/hide them from opening Drive D which is for games. I enabled Prevent access to drives from My Computer and Hide these specified drives ...
- 1
0
votes
0
answers
3k
views
Push config for OpenVPN Connect with GPO
I'm trying to push OpenVPN Connect msi with a config to some domain connected computers
But i can figure out how to make the client pick up the config
I copied it to the profile directory of the ...
- 103
2
votes
1
answer
1k
views
Modifying Index Location is Disabled by a Policy
I have indexing setup on Windows 10 (build 18363.693) to include 4 different drives, and the index itself is stored on a separate drive.
I am attempting to set up the index to no longer be on this ...
- 481k
0
votes
2
answers
1k
views
Deny log on specific user to computer
Hi there I am having a bit of a simple task problems.
We have pretty simple configured MS server 2012 in our school.
The thing is we want to deny access few PCs from ONE user so our students can only ...
- 481k
1
vote
0
answers
3k
views
Changing Windows 10 Accent Color via GPO
I'd like to set a default accent color by using a group policy and have found that it is not affecting all aspects of Windows. I entered in my hex values (with the #) through Computer Configuration > ...
- 11
1
vote
1
answer
473
views
Map Printers based on physical location
I work at a company where we have 2 locations which are close fairly to each other, and some users often travel between buildings with laptops. We're just setting up our AD environment, and I'm ...
- 1
0
votes
0
answers
116
views
Windows 10, automatically updates installation after a certain period of time
We want to give our users the opportunity to choose when to install updates. But we need to control the installation process.
If the user does not start installing updates within a week, the updates ...
0
votes
0
answers
352
views
Group policy fails to disable Windows Defender on Windows 10
I have Windows 10 enterprise x64 1903 18362.592 which has been installed for at least 6 months.
I had windows defender disabled via group policy. Since a recent update defender real time scanning ...
- 329
0
votes
1
answer
823
views
Exporting Windows 7 Group Policy into Windows 10
I have multiple computers in Windows 7 that have same configuration and settings with the same hardware. I want to migrate Windows 7 to Windows 10. Is there any proper way to export Group Policy ...
- 13.9k
0
votes
1
answer
542
views
Windows GPO - Mount network share for a group of computers
I want to mount a drive at logon of every users on a group of computers of my domain, there are from different OU, and they are member of a same group.
I tried to use loopback processing but the gpo ...
- 11.8k
2
votes
0
answers
2k
views
Windows 10 Lock Screen controls grayed out
My lock screen controls are grayed out, and there is a banner at the
top saying "Some of these settings are hidden or locked by your
organization".
As per the instructions at
https://techdows.com/...
- 1,171
0
votes
1
answer
1k
views
Windows RDP Black Screen after changing setting in Local Group Policy Editor
I often bring my work laptop (Windows 10 Pro) from home and RDP into it from my home desktop (Windows 10 Pro) to use more monitors. However at work the other day I was working on a task and I changed ...
- 1
0
votes
1
answer
1k
views
Prevent installation of Viber in Domain Computer
We have standard domain where running executables require administrative privileges but when I get Viber and run it installs without prompting admin password, I do not know what type of installation ...
- 481k
0
votes
0
answers
396
views
Group Policy Client failed the sign-in. Access is denied. Personal PC
I got this message upon reboot “The Group Policy Client failed the sign-in. Access is denied.” on my personal PC. It is not managed by a domain, it has never touched any network other than my own. It ...
- 111
0
votes
0
answers
272
views
Password policy not applying to DCs
I have created a Group Policy object (GPO) at the domain level w/password settings. It's security is such that it applies to all domain computers and domain controllers.
The problem is that when I ...
- 55.6k
1
vote
1
answer
2k
views
GPO: Defining sites to local intranet zone - Does it overwrite existing sites defined?
If I want to add a domain to local intranet sites in my entire network of +2000 computers and clients, does using GPO to do it potentially overwrite any existing defined sites on the clients?
We have ...
- 11
-1
votes
1
answer
170
views
How do I stop my school from configuring policies? [closed]
My school stops my computer from getting windows updates and prevents the use of lots of other tasks. I have an admin account on my computer so that isn’t a problem. Every time I make a local change ...
- 8,981
0
votes
0
answers
6k
views
Group policy to grey out macros security setting
I am after GPO to prevent Microsoft Office macro security settings to be changed by users i.e. restricting my users from being able to mock around with Macro Settings in:
Options > Trust Center > ...
- 1
0
votes
1
answer
1k
views
Outlook 2010 / 2016 - Disable Reply All Button via GPO
I used Group Policy to disable the Reply to All button in Outlook 2010 and Outlook 2016. I did this by using the setting in the ADM/ADMX templates for the respective versions of Office to disable a ...
1
vote
2
answers
957
views
Filepaths longer than 260 characters in Window 10 Home Edition
According to this article Windows 10 should allow filepaths longer then 260 characters. I saved several documents with a long filepath in a previous installation (which was upgraded from Windows 7 and ...
- 101
0
votes
0
answers
2k
views
Win 10 locations services locked to off -- how can I unlock them?
I have a personal Thinkpad P1 running Windows 10 Pro (version 1909, build 18363.535). I would like to turn on Location Services so that I can turn on Find My Device.
However, when I go to Settings>...
- 213
0
votes
0
answers
4k
views
Reset printing to default on Windows 10
Due to an issue we are experiencing with Windows 10 and printing, whereby a computer GPO does not apply group policy deployed printers every time, I would like to investigate resetting the printing ...
- 226
0
votes
1
answer
119
views
"Minimal security" with Active Directory Group Policy
I have setup a Raspberry Pi with Samba 4 as a Active Directory Domain Controller on my home network.
But I have a simple question:
Whenever a computer joins my domain it is assign a rather strict ...
1
vote
0
answers
325
views
Group Policy: Block Word and Excel Macros
I've activated a GPO for blocking Word and Excel Macros for all our users.
We have some internal created Excel files that require macros, but they are not used in a specific location, so at the moment ...
- 11
3
votes
2
answers
2k
views
Run a script at logoff on XP Home?
Is this possible without having a process running continuously, listening for WM_QUERYENDSESSION or similar? (or worse still, loading a DLL into the Winlogon process)
(Also unacceptable: write a ...
CommunityBot
- 1
1
vote
0
answers
2k
views
Win10 issue with RDP and domain users
We are having a strange issue with RDP on Win10 machines. We are trying to allow a specific domain group access to RDP to certain machines but the users in the group are unable to.
Here is all the ...
- 11
0
votes
2
answers
689
views
Can i pass parameters to a windows service through GPO
We have a custom windows service written in C++. This windows service runs in all the VMs in a particular domain. I have a requirement to pass certain parameters to that windows service which the ...
- 2,418
0
votes
1
answer
438
views
Set Ecosia as default Search (Engine) Provider in Chrome / Firefox
Our organisation is in the process of setting Ecosia as the default Search provider for all browsers and we will like achieve this by using the GPO template via your link here https://ecosia.zendesk....
- 9
2
votes
1
answer
1k
views
Disabling option to find printers by IP
On windows 10, we are looking for a way to remove/disable the "Add a printer using a TCP/IP address or hostname" from the Add printer screen.
Any clue if there's a GPO or registry entry that could do ...
- 481k
0
votes
1
answer
281
views
Managing Printers, preferably not GPO
I work for a company that has approximately 3,000 PC's and approximately 1,500 printers. Currently the method to install a printer is rather manual, and we're looking at automating the process. There ...
- 13
2
votes
1
answer
2k
views
How to disable the Windows Consumer Experience in Windows 10 (1909)
In previous Windows-10-Versions it was possible to disable the Windows-Consumer-Experience via GPO.
Computer Configuration > Administrative Templates > Windows Components > Cloud Content --> "Turn ...
- 29.7k
0
votes
0
answers
1k
views
How to include subfolders in a Windows path?
I would like to follow this guide to lockdown a machine by blocking the execution of binary files for a specific user via a group policy in the MMC like so: https://blog.brankovucinec.com/2014/10/24/...
- 142
0
votes
1
answer
81
views
RDP connecting thought local network and outside network
Is it possible to have a rule that allows Account1 to be connected to my VM using RDP only through the local network and Account2 to have access from outside the network and through the local network ...
Ivan_D
0
votes
1
answer
35
views
Task Manager not opening from Control+Alt+Delete (GPO set to disallowed)
I'm in the process of trying to lock down a computer and was having an issue with task manager not opening from the Windows Security screen. I had the Task Manager executable white-listed in the GPO ...
- 15
0
votes
1
answer
430
views
What part of Windows Security does Control+Alt+Delete invoke?
This is with the computer logged in.
I'm wondering what process is activated to display the GUI that has lock, switch user, task manager, etc. / what the location of it is
And if it is more than ...
- 2,496