Questions tagged [group-policy]
Group Policy is a feature of the Microsoft Windows NT family of operating systems that control the working environment of user accounts and computer accounts.
1,016
questions
0
votes
0
answers
3
views
How to change default lock screen and logon image in Windows 11 Pro via Group policy?
I'm trying to change the "default lock screen and logon image".
I've tried the "Force a specific default lock screen and logon image" Group Policy setting under "Computer ...
- 845
0
votes
1
answer
24
views
Powershell script GPO USER LOGON not working WINDOWS SERVER 2019
I created Powershell script to collect mac address and pc name for all my domain users ..
Script run correctly on local machine .. but not working via GP
$wmifilter = 'PhysicalAdapter=True AND ...
0
votes
1
answer
26
views
GPO - Grant installation access to executables
I'm currently working on a project where I need to grant installation access to a group of users for all the executables located in a specific folder. I believe that utilizing Group Policy Objects (...
- 1
0
votes
0
answers
39
views
Set "App & Browser Control" in Windows Security to be on by default for all Users
In the Security settings page for Windows 10/11, there's an App & Browser control option that is off by default:
This further causes the task bar icon to show a warning:
I'd like my users ...
- 28k
1
vote
1
answer
40
views
Is it possible to make the start menu appear on secondary display via win key?
Obviously, the Windows key will open the start menu on the primary display, this is somewhat inconvenient for multiple displays (dual monitors), having to travel all the way across every time.
Is it ...
- 21
0
votes
1
answer
56
views
Running Scheduled Task through GPO only once
Description: we have a software that was deployed incorrectly on user's PC and we need to remove it and reinstall it.
we have created a GPO that runs a Scheduled task that removes the app using a ...
0
votes
2
answers
24
views
Can Windows group policy in an enterprise environment change without user intervention, such as a windows update?
Greetings my fellow nerds, I have never heard of microsoft updates cause group policy changes. So I began to wonder is there a way that GPO can be altered without user intervention. From what I know ...
- 3
0
votes
0
answers
4
views
Microsoft Active Directory Admin - Discriminate usable USB Disk devices [migrated]
good morning, I have been trying for a while through policy management or other microsoft media to restrict the use of USB removable disks. I know that through Active Direcory I can enable and disable ...
- 1
0
votes
1
answer
32
views
Cannot activate bitlocker on removable disk
I've activated BitLocker on all hard drives on my PC, without any problem. I've also modified the group policy for inserting a PIN when the computer starts.
But I'm having some problems when trying to ...
- 557
0
votes
0
answers
17
views
Installer files for GPOs on SYSVOL or Dedicated Share?
Say I wanted to deploy a number of software packages using GPOs, where a GPO would reference an absolute path to an installer file (i.e. installer.msi). What are the pros/cons of hosting installers ...
1
vote
0
answers
38
views
How to stop Windows 10 from returning Bluetooth device shortcut in the SendTo folder?
I'm using windows 10 pro x64 and my problem is that the Bluetooth-device shortcut just by itself keeps showing up inside the SendTo menu, even after I remove that shortcut from the SendTo folder (at C:...
- 11
0
votes
0
answers
26
views
User receiving "Remote sign in" error on login but the user is signing in directly
Server 2022, Active Directory on a HyperV VM. 1 Windows 10 host as well. The VMs are on an internal Virtual net so theres no other traffic to worry about. I have created a test lab for GPO tests for ...
- 357
0
votes
1
answer
70
views
Use Domain GPO to run local batch file on logoff - Is it possible?
What I want to accomplish:
When a user logs off a machine and is not on the domain, the contents of the recycling bin are deleted.
How this is currently done and works on domain:
Domain GPO > User ...
0
votes
1
answer
40
views
Create Local Group Allowing Access to Removable Storage
We have several Windows 10 Pro laptops where Local Group Policy disallows read, write, and execute access for removable disks. We would like certain users to have this access. It seems like something ...
- 163
0
votes
1
answer
148
views
Which inbound/outbound rules are necessary for stable IPv6 connectivity in Windows 10/11?
I'm experiencing an issue with Windows 10 where IPv6 connectivity becomes unstable over time. Initially, IPv6 works as expected, but after a while, it stops working. Upon investigation, I've ...
- 101
0
votes
1
answer
149
views
Change Policy of Microsoft Edge with JSON
I'm used to changing Policy in Chrome by adding the .json file to /etc/opt/chrome/policies/managed in Linux
I'm trying to apply the same to Edge as I'm seeing some policies are no more available in ...
- 101
0
votes
0
answers
59
views
How to set the Edge ProxySettings in gpedit.msc?
I use Clash for proxy, but when I use campus network and start Clash by System Proxy, the Clash become useless (I guess the campus network has made some restrictions on this). In other software such ...
- 13
0
votes
0
answers
50
views
PRevent Windows 10 Shutdown as long as process is still running
I habe a Windows 10 host system that runs a VMWare Workstation virtual machine. I would like to prevent shutdown or logoff on that host system as long as the VM is still running, preferrably ...
- 1,329
0
votes
0
answers
219
views
Couldn't copy paste text from local computer(win 11) to AVD through Remote Desktop App
I couldn't copy paste text from local computer(windows 11) to AVD (Azure virtual Desktop) through Remote Desktop App. Copy paste works in both AVD & local computer, if i use RD web client.
All ...
- 1
0
votes
0
answers
411
views
Intranet zone settings apply to Edge and Chrome, but not to Firefox
We have GPO settings active that place a certain website https://www.example.com into the trustworthy intranet zone. The setting (User Settings -> Administrative Templates -> Windows Components -...
- 588
0
votes
1
answer
65
views
What's the __vmware__ user in the group policy
VMWare workstation added a vmware user in the group policy:
Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment > Allow log on ...
- 113
0
votes
0
answers
96
views
Edge passwords and saving to a homeshare for citrix
I want to save Edge passwords to a new computer.
I have read a ton of articles and everyone says C:\Users\%username%\AppData\Local\Microsoft\Edge\User Data\Default\ or specifically the login data ...
- 1
0
votes
0
answers
45
views
Windows not booting after changing EnableVirtualizationBasedSecurity setting in GroupPolicy
Today I wanted to disable the Microsoft Defender Credential Guard on my Windows 11 workstation to allow my remote connections to use stored passwords again (LAN only, no domain login). I did, however, ...
- 559
0
votes
0
answers
41
views
Disable 3 strategids of the local security policy in batch file
I'm looking to make a batch script that disables 3 "policies" of the local security policy (secpol.msc), I've seen that a secedit /import is possible, but it would be like importing or ...
- 1
1
vote
1
answer
95
views
How to remove shutdown option in start menu but leave it on when selecting CTRL + ALT + DEL
I would like to hide/remove the shutdown option from the start menu but leave it available on CTRL + ALT + DEL.
- 11
0
votes
0
answers
61
views
How to allow Windows 10 standard users to run certain application as administrator?
We have windows server 2016, all clients are windows 10. We want to allow the users to run certain applications (for example OpenVPN, Chrome Browser) as admin, but other applications only as a ...
- 9
1
vote
0
answers
118
views
Is this DMA protection in Group Policy different from Kernel DMA protection?
There is a Bitlocker DMA protection and then there is Kernel DMA protection. the latter is better and enabled by default on capable hardware, the former is only suggested to be used when hardware ...
user1752038
0
votes
1
answer
335
views
How to use REGEDIT to adjust 'machine inactivity limit' in Windows 11?
I'm trying to setup my laptop, so that when I don't use mouse or keyboard for some number of seconds, the lock-screen will appear. (I'm on Windows-11)
I'd hoped to find a way to dig down (in the GUI) ...
- 101
0
votes
0
answers
77
views
Disallow standard Users from generating Resultant Set of Policy data
how to restrict users to see Rsop data
such as
gpresult /r /x
and all data in group policy managements
i mean i want users can't see any Rsop data
i want if users opened group policy managements or ...
- 9
0
votes
1
answer
69
views
How can I apply my group policies on top of Microsoft security baselines?
I took a clean fresh VM, applied my group policies on it, backed up the C:\Windows\System32\GroupPolicy folder. now I want to apply it to a different VM where I've already applied the Windows 11 22H2 ...
user1752038
0
votes
2
answers
616
views
How to enable DNS over HTTPS (DoH) in group policy on Windows 11?
I am trying to enable DNS over HTTPS on my personal Windows 11 (Build 22621.1105) machine (Lenovo ThinkPad). I am the only user account on this machine (MS Account, Admin).
In the settings for the DNS ...
- 1
0
votes
0
answers
67
views
Apply policy to non-administrative users using PowerShell
I have disable the use of removable media to non-administrator users using MMC console to apply a local policy and setting Removable Disks: Deny read access for non-administrators.
I'd like to set ...
- 121
1
vote
0
answers
145
views
Windows 10 - Export and Import Local-Group-Policy (Windows-Update) Changes
Concerning-System: Microsoft Windows 10 Enterprise LTSC | Version 10.0.17763 Build 17763
i have changed the local group policy via editor:
through research following command should export the the ...
- 21
0
votes
0
answers
61
views
Import Excel Add-ins via GPO using OPENx approach
My users are running Mirosoft 365 Apps for Enterprise and I'm deploying two Excel add-ins via GPO. They're simple registry values using the OPENx approach. The files for the add-ins already exist ...
- 73
0
votes
0
answers
81
views
GPO lock screen even when video/radio is playing
We currently have an active GPO that locks users screens after 5 mins, so they have to relogin.
But unfortunately some users started playing 10+ hours youtube videos to bypass this GPO and then leave ...
1
vote
0
answers
10
views
Run one of two scripts based on the outcome of a check?
I have two GPO scripts that, in a nutshell:
Close any existing instances of Chrome.
Open a new instance of Chrome.
Navigate to a webpage.
The only thing is that one script checks the location of ...
- 1,204
2
votes
1
answer
298
views
How to add a user group in the "Shut down the system" group policy in Windows Server by CMD or PowerShell
How to add a user group in the "Shut down the system" group policy in Windows Server by CMD or PowerShell
I've read some documentation on Microsoft and other sites.
Some of them suggest ...
0
votes
1
answer
15
views
Disabled driver installations through GP then removed a device
I have one laptop with faulty keyboard (stuck keys which occasionally write stuff on their own) and I Googled "how to turn keyboard off" ... found a way which includes Enabling ‘Prevent ...
- 21
0
votes
1
answer
954
views
My domain user profile is not listed in Local Users and Groups - Windows 11
I applied the 22H2 Windows 11 update last week which fried my entire domain user profile on my laptop. I attempted to change my domain from my workplace domain name to the local WORKGROUP and then ...
- 3
0
votes
0
answers
26
views
Deploy Group Policy for Folder Redirects via Windows Script on Windows Server
GP via Script
Is there a possible way to Deploy a group policy for folder redirects instantly working on the local active directory domain via a script?
The script should create a new GP and set the ...
- 1
1
vote
0
answers
2k
views
PowerShell / Registry: Remove the "Activate Windows" watermark for Windows Sandbox
The "Activate Windows" watermark is used by Microsoft to track unlicensed copies of Windows; this is important for them and I have no issue with that. However, for Windows Sandbox, we are ...
- 599
0
votes
1
answer
459
views
Reliable way to deploy SW via GPO Software Installation (Active Directory), including laptops on Wi-Fi
Have you ever wondered how to install software onto Windows machines in a reliable way in Active Directory via native GPO? (I mean this: Group Policy Management -> Computer Configuration -> ...
- 752
0
votes
0
answers
33
views
Windows 11 and Windows Hello for PIN signins
I was testing something on my personal Win 11 desktop, trying to reproduce a problem a coworker was facing when trying to run some PowerShell scripts I wrote to help devs get new machines set up and ...
0
votes
0
answers
90
views
BitLocker, USB-drive and GPO
I got myself into a difficult situation: enrypted USB-drive D: using an Windows PowerShell script file *.ps1.
Initialize-Tpm
#Enable Bitlocker
Enable-BitLocker -MountPoint "D:" -...
0
votes
1
answer
943
views
Preventing Users from signing in Microsoft Edge
Internet Explorer mode pages in Microsoft Edge will expires 30 days if there users is signed into Microsoft Edge .
Can I find out is there any GPO to prevent users to sign into edge / use a local ...
- 1
0
votes
0
answers
26
views
Windows VDI - Local Administrator Issue
I have a strange issue I have not been able to crack. I am supporting a company where they not only use standard workstations but VDI's as well. They are all part of a domain and a series of group ...
- 142
0
votes
1
answer
133
views
Dynamically setting remote desktop users group membership via Active Directory Attribute
I've gotten a bit of a strange requirement that I have to fill, and I'm hoping to get working without user intervention down the line.
In our Windows environment we have multiple departments, each ...
- 1
0
votes
1
answer
81
views
Local security settings
is it possible to use Get-GPOReport command on a Client that is not in a Domain? I have a list of Group Policy Paths and trying to read them. Something like REG QUERY but with GPO`s "Computer ...
- 1
4
votes
1
answer
418
views
Disable Outlook "Top Results" / "show most relevant search results on top" via PowerShell / Registry / Group Policy
I am unable to find a way to disable the Microsoft Outlook search option "show most relevant search results on top" via a systematic / automated approach so that I can deploy this to all of ...
- 1,843
0
votes
1
answer
590
views
I can't get Windows Defender Application Control policy working in Windows 11
On Windows 11, I made a WDAC policy with WDAC Wizard and added it to Group Policy, restarted the PC and still the policy isn't being enforced.
Here is the test policy I made:
<?xml version="1....
user1728941