Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [group-policy]

Group Policy is a feature of the Microsoft Windows NT family of operating systems that control the working environment of user accounts and computer accounts.

0
votes
1answer
16 views

How to add QOS to Local Computer Policy with Powershell

I have this code and it works but it makes a domain GPO policy and not a local one. How do i get it to make it local? #Create QOS for RDP Session #Create a new Group Policy Object (GPO) that will be ...
0
votes
0answers
17 views

How to copy all Local Group Policies from one Windows PC to another

I currently have two test PCs both running Windows 10, both have set different Local Group Policies, i.e. settings accessible using gpedit.msc. 1.) Is it possible to export Group Policies from one ...
0
votes
1answer
35 views

**GPO - How to block creation of folder and files in root directory in Windows 10

I would like to use a GPO setting to block users to create folders and files in the root directory in Windows 10. Searching on internet I found the setting Computer configuration -> Policies -> ...
0
votes
0answers
8 views

Deny RDP access to particular server from a particular user via GPO

I have a security issue. How I can deny RDP access to particular servers (critical server) for a particular user Active Directory using Group Policy (GPO) ? Thank YOU
0
votes
0answers
13 views

Group Policy Network Shares without refresh in windows 10

Configuration Windows Server 2016 Standard provides Active Directory Services and File Sharing (Domain Controller) Windows 10 Pro workstation, joined to the domain. Through Group Policy, User ...
0
votes
1answer
42 views

How to automate registration of a scheduled task through GPO using PowerShell?

I can manually run the following cmdlet on 10 nodes in AD to register a scheduled task: Register-ScheduledTask ` -TaskName "MyTask" ` -Action $inlinePowershellScript ` -Trigger $...
1
vote
1answer
31 views

Can't disable windows 10 PIN complexity

I recently linked my Microsoft Office account to my school to have access to Office for students. Right after linking my account, I couldn't login to my computer again with my 4-digit pin code and got ...
0
votes
1answer
31 views

Does a computer restart reset the account lockout policy counter?

Using Windows 10 and Windows Server 2016 with the Account lockout policy set to 3 attempts and 99999 (max) duration. If i locked an account or entered the password wrong 2 times and I then reboot the ...
1
vote
0answers
25 views

Whitelist specific USB keys and block others

Im looking for a solution to implement and easily manage USB white-listing in multiple countries. We have restricted USB storage usage using group policies, as 99% of users don't need to use external ...
0
votes
1answer
206 views

Windows 10 keeps changing default browser to Edge at reboot [duplicate]

In Windows 10 (Ent, 1803), default web browser keeps being reset from Internet Explorer to Edge at each reboot (settings > system > default). No matter which other browser is set there, as admin, ...
0
votes
0answers
26 views

Cant turn contrast off after turning on via shortcut keys Left-Shift+Left-Alt+Print Screen

Anytime i try to turn contrast on windows 10 on and try to turn off again using shortcut keys Left-Shift+Left-Alt+Print Screen I normally cant turn the contrast off again instead i get the error "This ...
0
votes
1answer
25 views

Is it possible for an Organizational Unit to inherit policies but not Users and Groups from the domain level?

I am trying to configure a domain policy such that the default policy is applied to most machines with a few exceptions. We use "Local Users and Groups" under Preferences > Control Panel Settings in ...
0
votes
0answers
21 views

“Always install with elevated previliges” UAC issue on window server 2012

In group policy administrative templates i enable the policy " Always install with elevated privileges" on both user and computer configuration but still the problem persist that as i try to install ...
0
votes
1answer
60 views

Disable Cached Exchange Mode in GPO for Outlook 2016 with the option to enable it (not grayed out)

There seems to be no granular policy in the Office 2016 Admin template to disable Cached Exchange Mode while also having the option to select it on the client side if needed. Once the policy is ...
0
votes
1answer
22 views

Local Security Policy Cannot Change Security Level

Today when I was testing Local group policy I set security level disallow to Set as default Now the button is disable and I am unable to run any kind of executable in my pc. and see this message ...
2
votes
0answers
38 views

Is there a builtin webserver on Windows that can serve a known-named HTTP resource? [closed]

Ultimately I want a convenient way that I can use in a web-browser to test in a local network if a Windows machine is alive. Windows, even non-“Server” versions, has many built-in services that use ...
1
vote
0answers
38 views

Setting logon script property with Powershell

I'm trying to set the Logon script property with a Powershell script. Everything I've found only applies to the Administrative Templates folder, not the Windows Settings section. I'd like to be able ...
0
votes
1answer
45 views

Set an Exception in Linked Group Policy so particular settings are not inherited and replace with custom setting

I have a global group policy which holds several policy settings and configurations. Within this global policy I have a Folder redirect set. I have linked this global policy to one of my OUs but ...
0
votes
0answers
34 views

Program not executing in batch script at startup

I'm trying to run HDDScan-3.3 in a batch file at computer startup through "Local Group Policy Editor". I want to change some power management behaviours for an external hdd as silently as possible. I ...
0
votes
1answer
23 views

Is there a way to get a list of all Windows Group Policy changes on a standalone workstation?

Target computer is a Windows 10 Pro workstation, not on a domain. Is there a way to quickly get a list of all group policies that are not set to their default, in other words: all changes made to that ...
0
votes
0answers
58 views

GPO to Setup Offline files on Home Drive

I Have setup a gpo to enable offline files for home drive on some PC but for some reason all of the PC are showing as offline. All of the PC are in same OU and then I filter the offline files ...
0
votes
0answers
112 views

Why would a Windows 10 Machine still display “Some settings are managed by your organization” after the hard drive has been reimaged?

This should be an easy answer for most of the "Super Users" on this site. I am relatively new to the IT field. I am trying to start a home and local computer repair business and I buy old computer ...
3
votes
1answer
174 views

Automatic Wifi connection before Windows logon

Can I force an automatic connection to a specific Wifi network before the logon? I want to enable my users to connect with their domain credential using the company wifi network during the login. ...
1
vote
1answer
44 views

Create a custom password complexity rule in group policy

Is it possible to create a custom password complexity policy in group policy? I'm not asking if you can enable password complexity, more that i'm asking how to change the default complexity?
0
votes
0answers
63 views

How to force to show all notifications of MS Defender Firewall via GPO?

I am preparing a set of GPO to harden W10. I enabled the Defender firewall blocking most of the connections but I also wanted to leave the notifications for helping me with the fine tuning of the ...
0
votes
1answer
20 views

Which privileges/settings are responsible so standard user can start a service? [duplicate]

My code works fine on one computer but the same code generates error code 5 (access denied) on another computer. Essentially ::OpenService() call fails because of the flag SERVICE_START because the ...
1
vote
0answers
81 views

GPO - Default File Association from user/machine combination

I have a GPO that uses ComputerConfiguration\Policies\AdminstrativeTemplates\WindowsComponents\FileExplorer\Set a default associations configuration file to set the file associations for a particular ...
0
votes
1answer
187 views

Configure Windows 10 Explorer settings via GPO (Personal folder, Start Menu folders)

We're currently rolling out Windows 10, and trying to configure GPOs for ease of use for student accounts. As part of that, we're looking at forcing users to save to their Home Folders (H: drives). ...
0
votes
0answers
54 views

HideWirelessSetupInOOBE not working. Wireless setup option still prompts after Task Deployment upon first logon attempt

After we deployed Windows 10 1803 via SCCM TS on computers with Wifi adapter automatically enabled, there is a step in the OOBE Setup Wizard to choose or skip the Wifi network, even if the ethernet ...
0
votes
0answers
464 views

Single Sign on not working on IE 11 (windows 10 1803)

Single Sign on login on IE 11 not working on systems recently upgraded to windows 10 1803. One of our users tried to login but was denied until he deletes all stored credentials from the previous ...
0
votes
1answer
330 views

Shortcut on desktop for all users of a single computer using GPO

We have a particular machine that is joined to our domain, and no matter which user logs onto that machine, they all need to have access to a common shortcut (on the desktop). If any user logs onto a ...
0
votes
2answers
201 views

Group policy to block office macros

my organization has a windows 2016 server standard edition and i'm wondering how to go about adding a group policy to block office macros. I've seen a lot of other posts using user config > ...
0
votes
0answers
15 views

Windows Server GPO Backup User Group Names instead of SIDs

When working in an environment where a User/Group SID is not guaranteed to be the same between a GPO backup and later restore, is it possible to export the GPO using group names instead of SIDs? If I ...
1
vote
1answer
47 views

Allow non-admin user to format internal drive in Windows 10

We have some notebooks (Lenovo T430 running Windows 10), that all have multiple HDDs. One is the normal System SSD and another SSD is in the Ultrabay. Both of these drives are seen as internal from ...
0
votes
1answer
225 views

Miracast connection error after joining ad domain

I have a situation where a laptop always ends up have a connection error when trying to establish a screen share using Miracast. Shockingly this phenomenon began right after joining the lenovo laptop ...
1
vote
0answers
26 views

changes to the LGPO thru gpedit.msc on domain connected machines do not apply after restarts and gpupdate /force

FYI I am very new to the world of system administration. However I have been able to find answers to nearly every question that has come across my desk - till now. We have LGPO policy's set manually ...
2
votes
1answer
205 views

Bitlocker GPO on Tablet/Surface/Slate - Require additional authentication at startup - Enabled, but not offering option to set PIN

I'm setting up a Surface Pro 5 - m3, Windows 10. I have enabled several options for Bitlocker via GPO, one of which is Require additional authentication at startup, so that the user must enter a PIN ...
0
votes
1answer
638 views

Windows 10 - Changing the “Show the most used apps” to “On” through Registry/GPO

Enviroment: Windows 10 Enterprise 1803 I am aware that the "Show the most used apps" can be controlled through the "Start Settings" however i am interested in setting this through registry/GPO. My ...
0
votes
1answer
124 views

Powershell launching in Constrained Mode after applying then removing AppLocker/SRP GPOs

Here is the technet post related to this. I will transfer what I've asked and tried to this post, but I am including it for reference. Environment is: 2012 Domain Controller, Win 10 Endpoints, ...
0
votes
0answers
20 views

Internet Explorer not storing/accepting cookies for all website. Only happens when logged in as a domain user

I'm dealing with an issue that I haven't seen before. We're using Windows 10 1803 Enterprise and machine's are joined to a domain. Recently we noticed that IE doesn't accept/store cookies any longer, ...
0
votes
0answers
33 views

editing local group policies with windows registry [duplicate]

I am trying to edit the local group policy by using windows registry. I noticed something odd : changing the register value does not affect the local group policy editor. Example : when I navigate in ...
2
votes
1answer
2k views

Windows update - some settings are managed by your organization

I have a Windows 10 laptop that just finished installing 1803. I go into windows update to check for new updates and it shows me this line of text: "Some settings are managed by your organization". I ...
2
votes
1answer
272 views

GPO Policies are not being applied

I'm an inexperienced AD/GPO admin trying to setup AD and use GPO to manage my kids laptop. I can get some user policies to apply but not computer policies. I've been spinning my wheels on this for ...
0
votes
1answer
300 views

Preventing users from disabling Office addins

I would like to prevent non-admin users from disabling an addin we will be deploying company-wide. Is there a way to accomplish this? Currently the best I can do is to track registry changes and re-...
2
votes
0answers
65 views

How to create a shortcut to an entry of group policy editor in Windows 10?

How can I create a shortcut on my desktop to open group policy editor in a specific entry? Details: I want to open Gpedit and drill down to a setting automatically.
0
votes
0answers
28 views

PhotoScreensaver using GPO is blank

Why is 'PhotoScreensaver.scr' in other workstations (domain) opening as blank (black)? I've set picture screensaver (containing one picture) on one workstation and copied 'PhotoScreensaver.scr' to a ...
3
votes
1answer
2k views

UAC keeps resetting on Windows10

I have a Windows10 Enterprise machine on which I want to disable UAC completely in order to execute all applications as Administrator per default. However, my UAC settings keep resetting every time ...
0
votes
0answers
150 views

Why do group policies block scheduled task script?

I created a scheduled task that launches a powershell script using the local administrator account. I need this task to be executed even when no one is connected to a session, hence I chose the option ...
0
votes
1answer
2k views

Windows 10 Hello on domain-joined computer - Credentials could not be verified

I am on a Lenovo X1 6th Gen laptop with Windows 10 Pro Build 1803 and connecting to my work domain. I have all GPO's correctly configured for Windows Hello. I am able to login to my domain account ...
0
votes
1answer
28 views

How to find and disable precedence policy that grays out “Log on as a batch job” policy

After a lot of digging, using rsop.msc, I have come to the conclusion, that the precedence policy PC - Windows 10 - OS - Global - (release v3.14) - CU prevents Log on as a batch job policy from being ...