Questions tagged [group-policy]

Group Policy is a feature of the Microsoft Windows NT family of operating systems that control the working environment of user accounts and computer accounts.

Filter by
Sorted by
Tagged with
0 votes
1 answer
56 views

windows 10 prevent one admin from changing other admin password

I have 3 user accounts. Two admin user accounts and one standard user. I don't want any admin account to be able to change the password of the other admin account. In short I want all the 2 admin ...
nikhil's user avatar
  • 103
0 votes
0 answers
5 views

Group-Policy Not Applied: Access Denied [migrated]

I created a new AD-Group in our Users folder, added all users i need. Within our GPO's "FolderRedirection" in the security filter tab i've removed the authenticated users and added the new ...
lkswtf's user avatar
  • 1
-3 votes
0 answers
35 views

GPO to block computers from browsing the internet?

I've been searching for a GPO that restricts internet access via web browsers for computers, not users. We have 10 workstations that are used in production, these workstations only need intranet ...
SysAdNoob's user avatar
1 vote
0 answers
41 views

How to keep built in Windows apps up to date?

I am currently going through our On-Premise GPO's and migrating them to Intune. I am currently looking at the MS Store specifically Please see below for my current test settings in Intune that are ...
Aardwolf's user avatar
  • 129
0 votes
0 answers
30 views

Executing Powershell script automatically on domain join

I'm currently working on a customized Windows installation ISO, where local GPOs are predeployed (using LGPO.exe (Local Group Policy Object Utility) and SetupComplete.cmd). This image is targeted ...
Oliver R.'s user avatar
  • 239
0 votes
0 answers
35 views

GPO Windows Update Settings to schedule installs and reboots

I need to set GPO settings on a domain to schedule the install & reboot for windows updates. The device is public facing so don't want any pop's on screen and want it all to happen out of hours. I ...
Hhorto's user avatar
  • 1
0 votes
1 answer
180 views

No Group Policy snap-in available to be added in Microsoft Management Console (Win11 Pro)

When I go to "Edit group policy" on Win11 Pro, it gives me this error: Add or Remove Snap-ins option in Microsoft Management Console does not show any Group Policy option to snap-in This ...
Raj's user avatar
  • 332
0 votes
0 answers
53 views

Multiple staff Mouse Cursor Losing Focus / Keyboard Dropping while typing

Issue: For months, many in our staff have been dealing with a problem described as: Where, and When, we are typing- the keyboard drops / mouse cursor loses focus, and we have to actually click back ...
baha236's user avatar
0 votes
1 answer
96 views

How to Reduce Delay in Displaying Incorrect Password message on Domain PC

I've been encountering an issue with domain PCs where it takes a longer time to notify entering of incorrect password. After conducting some research, we identified that the delay is caused due to ...
forumresearcher007's user avatar
2 votes
0 answers
32 views

Disable Windows 11 data collection across an entire tenant for O365 Enterprise?

I'm at my wit's end with how much Windows 11 is sending back in terms of information used for "personalized ads". The security policy I need to adhere to is very IP protective and basically ...
Nuvious's user avatar
  • 121
0 votes
1 answer
57 views

Errors while reading policies from this GPO, not all policies are displayed

I am working on implementing an automatic Quality of Service (QoS) policy creator using the "New-NetQosPolicy" PowerShell command. I have a C++ script that executes this command to limit the ...
Powplowdevs's user avatar
0 votes
0 answers
76 views

Registry edit to disble Ctrl+D in Outlook Desktop 2019

I use Outlook Desktop 2019 on Windows 10. For me, Ctrl+D is hazardous because it deletes an item when I actually meant to type (say) Ctrl+S or Alt+D. Furthermore, the mapping of Ctrl+D to deletion ...
user2153235's user avatar
  • 1,171
0 votes
0 answers
129 views

Deploy Shortcut With GPO with PowerShell ExecutionPolicy

I am trying to deploy a shortcut to a selected couple desktops using GPO to the desktop. The target of the shortcut is powershell.exe -ExecutionPolicy Bypass "C:\Scripts` Box\script.ps1" It ...
JukEboX's user avatar
  • 395
0 votes
0 answers
88 views

Change the Policy in Windows 10 or Windows 11 that disable the PIN login option after multiple shutdowns?

I’m encountering an issue with Windows 10/11 where the PIN login option is disabled after multiple shutdowns. This situation often arises due to CPU overclocking with XTU, leading to frequent reboots ...
suiboli314's user avatar
0 votes
0 answers
187 views

Configuring MS Edge to open web page in IE mode version 8

I know you can set Edge to open up a designated page in IEmode. You can do it either through the edge browser where the site will stay for a maximum number of days, or you can do it through ...
Forward Ed's user avatar
  • 1,524
0 votes
0 answers
211 views

The config setting Basic cannot be changed because is controlled by policies

Im trying to enable basic authentication on Windows Server with command winrm set winrm/config/client/auth '@{Basic="true"}' I get an error saying The config setting Basic cannot be changed ...
eia92's user avatar
  • 63
0 votes
0 answers
226 views

Disabling changing the time zone does not work in Windows 10

I have a computer which is used by several users. I would like to disable for these users the option of changing the time zone the system uses (both via the "clicking way" as well as via the ...
Teebo's user avatar
  • 1
1 vote
1 answer
417 views

Why does a GPO not apply to a certain OU

I am having an issue, where a GPO for Power Options doesn't apply to a certain OU even though I have linked it. This GPO is an exception from the Domain-Level GPO for Power Options and should only ...
theundercoverartist's user avatar
0 votes
0 answers
74 views

Configure Windows Hello to allow Login only with PIN not fingerprint

In light of the recently discovered flaws with fingerprint readers, I want to configure Windows Hello to allow Login/Unlock of Locked Computer only with PIN and not using fingerprint. When logged in/...
cachius's user avatar
  • 387
0 votes
0 answers
464 views

Windows Sign-in options disabled - GPO enabled

So with the new update on Windows 11 23H2 there comes an issue regarding the Sign-in options in the settings, specific the "PIN" and "Fingerprint" or "Facial" options. In ...
Only_a_Shadow's user avatar
0 votes
0 answers
37 views

Share with netbiosDomain in Name from GPO "Set user home folder"

I have configured the group policy "Set user home folder" which is located under "Computer Configuration > Policies > Administrative Templates > System > User Profiles"....
CookieKiller's user avatar
0 votes
0 answers
92 views

How to disable Ctrl+T taskbar hide hotkey?

On Windows 11 I want to disable the Ctrl+T hotkey that hides/shows the taskbar so that it can be used to open new browser tabs instead. It seems to be a problem with PowerPoint; I am currently running ...
Christopher Camitta's user avatar
0 votes
1 answer
145 views

How to enable/disable a LAN connetion as normal user in Windows 10

I have a Win10 workstation and I use a non-admin account for all normal operations. I want my account to have the right to disable my VMnet1 and VMnet8 adapters because when up, my Wi-Fi becomes ...
SebMa's user avatar
  • 1,803
0 votes
1 answer
1k views

Is there a command that will turn local Group policy off and on?

I would like to turn the local group policy on and off via command prompt. Basically, is there a command that will be the equivalent of right clicking on "Local Computer Policy", choosing ...
Lucky4Me's user avatar
0 votes
0 answers
173 views

"Do not allow drive redirection" not available for non-administrative user policy

I'm trying to define a local group policy to prevent non-administrator users from moving data off of a cloud VM. I added the Local Computer\Non-Administrators Policy snap-in via MMC, but when I drill ...
Paul's user avatar
  • 101
6 votes
1 answer
15k views

Force Internet Explorer 11 to open instead of Edge on Windows 10

I know IE11 is retired and not advisable to use BUT I need it. We have a test lab (closed off to the internet) for some Windows 10 PCs (for legacy applications), running Windows 10 Enterprise version ...
S.Mahmood's user avatar
5 votes
4 answers
15k views

Windows blocks downloads from server "Blocked by your organization"

I recently started having an issue on Windows 11 where when I try downloading a file, all of my browsers refuse to do so displaying this: (images are from Chrome) As you can see, files that I try to ...
user9102437's user avatar
0 votes
1 answer
114 views

How can I use integrated authentication in Chrome without disabling DoH?

There doesn't seem to be any UI within Chrome to enable integrated authentication on certain domains, so I created a recommended policy that set the AuthServerAllowlist setting appropriately. This ...
Joseph Sible-Reinstate Monica's user avatar
3 votes
3 answers
552 views

Remove/hide One Drive folder in file explorer

I have a mapped drive which redirects user's local folders to the mapped drive. I wish to hide the One Drive so users utilize the mapped drive instead of the OneDrive. I've attempted to uninstall One ...
tehais's user avatar
  • 33
0 votes
0 answers
503 views

How can I install / upgrade WSL2 in my Windows 11 system?

I do not have access to BIOS in my system as it is a offical laptop. I would like to install WSL2 in my system. Somehow WSL Update didn't work for me. PS C:\Users\anand.sathasivam> wsl.exe --update ...
Dev Anand Sadasivam's user avatar
1 vote
1 answer
482 views

How to prevent regular users (non admin) from pinning/unpinning shortcuts to the taskbar in Windows 11?

I would like to prevent regular users from pinning/unpinning shortcuts to the taskbar by enforcing a selective GPO that would be bypassed for administrators. Is it possible?
Sebastien's user avatar
5 votes
1 answer
8k views

Enable long paths on Win 11 Home

I need to enable long paths but my Win 11 Home edition does not have the group policy editor. Is there a way to enable this from the command line or install group policy editor on my machine?
A__'s user avatar
  • 317
0 votes
0 answers
397 views

Some questions regarding how to disable auto restarting after Windows 11 installed an update?

I want Windows 11 to automatically download and install updates in the background, just let me choose when to restart my laptop, even outside of active hours. So, I looked up some solutions and they ...
Seanmamasde's user avatar
0 votes
0 answers
1k views

Safe removal of NT SERVICE\All services from GPO log on as a service

I've searched for many weeks now if it's safe to remove NTSERVICE\ALL SERVICES right from 'Log on as a service' User right assigment. Goal here is to increase my GPO's security. I do want to limit to ...
mtlllll's user avatar
0 votes
3 answers
351 views

how to exclude specific file from onedirve syncing

I know how to exclude files with specific extensions, but files that doesn't have them how to exclude them by exact filename?
bafly's user avatar
  • 11
-1 votes
1 answer
167 views

Windows 7 - block websites for specific users using BAT to amend HOSTS file or Local GPO

I have a small home setup with one machine running Windows 7 SP2 still. This computer as 2 user accounts. I need to block one user account from specific websites whilst allowing through the same ...
johnsonjack78's user avatar
3 votes
1 answer
617 views

How to disable automatic resolution of shortcuts (.lnk files) in Windows 10? Group policies not working

When a target source file/path is changed, any shortcuts (.lnk files) pointed back to them should no longer work. This helps alert me that something is wrong. This is what I want to see when running a ...
Jeff's user avatar
  • 564
0 votes
0 answers
91 views

How can I block a user's default home folder from mapping using group policy?

I'm delegated control over an OU, not an entire domain. On domain-level, each AD-User has a home folder mapped to Z: which I want to disable in my specific OU. I cannot modify the users' profiles ...
Monika's user avatar
  • 105
6 votes
2 answers
5k views

Disable volume control Win 10

I work at a hospital and one of the nurse managers over a department is wanting the volume set to a specific level and to prevent users from adjusting it. It's a Windows 10 computer. Is there a way to ...
draythdk's user avatar
0 votes
0 answers
306 views

How to change default lock screen and logon image in Windows 11 Pro via Group policy?

I'm trying to change the "default lock screen and logon image". I've tried the "Force a specific default lock screen and logon image" Group Policy setting under "Computer ...
Matty Brown's user avatar
0 votes
1 answer
147 views

Powershell script GPO USER LOGON not working WINDOWS SERVER 2019

I created Powershell script to collect mac address and pc name for all my domain users .. Script run correctly on local machine .. but not working via GP $wmifilter = 'PhysicalAdapter=True AND ...
Mohammed atrash's user avatar
0 votes
1 answer
156 views

GPO - Grant installation access to executables

I'm currently working on a project where I need to grant installation access to a group of users for all the executables located in a specific folder. I believe that utilizing Group Policy Objects (...
Jaumes's user avatar
  • 1
1 vote
0 answers
3k views

Set "App & Browser Control" in Windows Security to be on by default for all Users

In the Security settings page for Windows 10/11, there's an App & Browser control option that is off by default: This further causes the task bar icon to show a warning: I'd like my users ...
Joel Coehoorn's user avatar
2 votes
1 answer
169 views

Is it possible to make the start menu appear on secondary display via win key?

Obviously, the Windows key will open the start menu on the primary display, this is somewhat inconvenient for multiple displays (dual monitors), having to travel all the way across every time. Is it ...
Dillon's user avatar
  • 41
0 votes
1 answer
2k views

Running Scheduled Task through GPO only once

Description: we have a software that was deployed incorrectly on user's PC and we need to remove it and reinstall it. we have created a GPO that runs a Scheduled task that removes the app using a ...
Yazan Annab's user avatar
0 votes
2 answers
38 views

Can Windows group policy in an enterprise environment change without user intervention, such as a windows update?

Greetings my fellow nerds, I have never heard of microsoft updates cause group policy changes. So I began to wonder is there a way that GPO can be altered without user intervention. From what I know ...
Ocelot's user avatar
  • 3
0 votes
1 answer
286 views

Cannot activate bitlocker on removable disk

I've activated BitLocker on all hard drives on my PC, without any problem. I've also modified the group policy for inserting a PIN when the computer starts. But I'm having some problems when trying to ...
Jepessen's user avatar
  • 619
1 vote
0 answers
285 views

Installer files for GPOs on SYSVOL or Dedicated Share?

Say I wanted to deploy a number of software packages using GPOs, where a GPO would reference an absolute path to an installer file (i.e. installer.msi). What are the pros/cons of hosting installers ...
fogmirant's user avatar
1 vote
0 answers
75 views

How to stop Windows 10 from returning Bluetooth device shortcut in the SendTo folder?

I'm using windows 10 pro x64 and my problem is that the Bluetooth-device shortcut just by itself keeps showing up inside the SendTo menu, even after I remove that shortcut from the SendTo folder (at C:...
JJV's user avatar
  • 11
0 votes
0 answers
55 views

User receiving "Remote sign in" error on login but the user is signing in directly

Server 2022, Active Directory on a HyperV VM. 1 Windows 10 host as well. The VMs are on an internal Virtual net so theres no other traffic to worry about. I have created a test lab for GPO tests for ...
bluesquare's user avatar

1
2 3 4 5
21