Questions tagged [group-policy]

Group Policy is a feature of the Microsoft Windows NT family of operating systems that control the working environment of user accounts and computer accounts.

Filter by
Sorted by
Tagged with
1 vote
0 answers
10 views

Run one of two scripts based on the outcome of a check?

I have two GPO scripts that, in a nutshell: Close any existing instances of Chrome. Open a new instance of Chrome. Navigate to a webpage. The only thing is that one script checks the location of ...
  • 1,194
1 vote
1 answer
35 views

How to add a user group in the "Shut down the system" group policy in Windows Server by CMD or PowerShell

How to add a user group in the "Shut down the system" group policy in Windows Server by CMD or PowerShell I've read some documentation on Microsoft and other sites. Some of them suggest ...
0 votes
1 answer
14 views

Disabled driver installations through GP then removed a device

I have one laptop with faulty keyboard (stuck keys which occasionally write stuff on their own) and I Googled "how to turn keyboard off" ... found a way which includes Enabling ‘Prevent ...
  • 21
0 votes
1 answer
29 views

My domain user profile is not listed in Local Users and Groups - Windows 11

I applied the 22H2 Windows 11 update last week which fried my entire domain user profile on my laptop. I attempted to change my domain from my workplace domain name to the local WORKGROUP and then ...
0 votes
0 answers
2 views

Deploy Group Policy for Folder Redirects via Windows Script on Windows Server

GP via Script Is there a possible way to Deploy a group policy for folder redirects instantly working on the local active directory domain via a script? The script should create a new GP and set the ...
  • 1
1 vote
0 answers
108 views

PowerShell / Registry: Remove the "Activate Windows" watermark for Windows Sandbox

The "Activate Windows" watermark is used by Microsoft to track unlicensed copies of Windows; this is important for them and I have no issue with that. However, for Windows Sandbox, we are ...
  • 523
0 votes
1 answer
42 views

Reliable way to deploy SW via GPO Software Installation (Active Directory), including laptops on Wi-Fi

Have you ever wondered how to install software onto Windows machines in a reliable way in Active Directory via native GPO? (I mean this: Group Policy Management -> Computer Configuration -> ...
  • 682
0 votes
0 answers
14 views

Windows 11 and Windows Hello for PIN signins

I was testing something on my personal Win 11 desktop, trying to reproduce a problem a coworker was facing when trying to run some PowerShell scripts I wrote to help devs get new machines set up and ...
0 votes
0 answers
36 views

BitLocker, USB-drive and GPO

I got myself into a difficult situation: enrypted USB-drive D: using an Windows PowerShell script file *.ps1. Initialize-Tpm #Enable Bitlocker Enable-BitLocker -MountPoint "D:" -...
0 votes
1 answer
58 views

Preventing Users from signing in Microsoft Edge

Internet Explorer mode pages in Microsoft Edge will expires 30 days if there users is signed into Microsoft Edge . Can I find out is there any GPO to prevent users to sign into edge / use a local ...
  • 1
0 votes
0 answers
15 views

Windows VDI - Local Administrator Issue

I have a strange issue I have not been able to crack. I am supporting a company where they not only use standard workstations but VDI's as well. They are all part of a domain and a series of group ...
  • 142
0 votes
1 answer
30 views

Dynamically setting remote desktop users group membership via Active Directory Attribute

I've gotten a bit of a strange requirement that I have to fill, and I'm hoping to get working without user intervention down the line. In our Windows environment we have multiple departments, each ...
  • 1
0 votes
1 answer
40 views

Local security settings

is it possible to use Get-GPOReport command on a Client that is not in a Domain? I have a list of Group Policy Paths and trying to read them. Something like REG QUERY but with GPO`s "Computer ...
3 votes
1 answer
181 views

Disable Outlook "Top Results" / "show most relevant search results on top" via PowerShell / Registry / Group Policy

I am unable to find a way to disable the Microsoft Outlook search option "show most relevant search results on top" via a systematic / automated approach so that I can deploy this to all of ...
  • 1,803
0 votes
0 answers
152 views

I can't get Windows Defender Application Control policy working in Windows 11

On Windows 11, I made a WDAC policy with WDAC Wizard and added it to Group Policy, restarted the PC and still the policy isn't being enforced. Here is the test policy I made: <?xml version="1....
user avatar
0 votes
0 answers
35 views

How can I Use Group Policy to send a Message to specific OU?

Setup is simple: windows server 2022 The issue is we need to reach some people when they login (but not the entire company) I can put those users into a security group, but what I need to happen is to ...
0 votes
1 answer
237 views

Blocking Powershell with GPO

My manager has told me that they want Powershell to be executed only in servers with the admin account, so I created a GPO that blocks Powershell.exe and Powershell_ise.exe with "Don't run ...
  • 1
0 votes
0 answers
14 views

MacOS: Chrome- Can't edit UserDataDir policy on local home computer

I am trying to edit some Chrome policies on my own Mac (non organization) which I have admin access to. For example, the 'UserDataDir' policy (https://chromeenterprise.google/policies/?policy=...
0 votes
1 answer
102 views

Windows 10 resisting configuration to delete pagefile on shutdown

Why would Windows 10 resist its configuration to delete its pagefile on shutdown? The configuration is: Windows 10 guest on an Ubuntu 22.04 host running VMware Workstation Player 16.2.4. The Windows ...
  • 121
0 votes
0 answers
78 views

Change Group Policy Configuration from PowerShell

I would like to disable automatic updates in group policy using PowerShell (this needs to run on several machines so it needs to be automated). Specifically, I want to set Administrative Templates -&...
  • 988
0 votes
0 answers
136 views

How to make persistent changes (survive after reboot) in the Windows registry?

I have a Windows 7 VM and I'm trying to modify the keys in HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SystemInformation since I want to change the data in both SystemProductName and BIOSVersion ...
0 votes
0 answers
98 views

Are Group Policy entries always written to Registry?

I have some setting HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkIsolation DWORD DSubnetsAuthoritive which seems to be set but in the Registry nothing is enabled. But when I look ...
1 vote
2 answers
27 views

Is it possible to log events of every user in one Event Log?

Right now if AppLocker blocks a program it is only logged in the local EventLog of the user. Is it possible to set up one Event Log where the events of any user are logged that can be accessed by an ...
  • 13
0 votes
0 answers
34 views

Don´t allow domain users to access shared folders on PCs outside the domain in the same LAN

I have the following problem. Is there a way to block domain users from accessing folders shared by computers that are not in the domain? By this means there is information leakage For example: ...
3 votes
1 answer
1k views

Forcing lock screen image not working

I want to force the same lock screen image on every user. I selected the image I want with group policy Local Computer Policy > Computer Configuration > Administrative Templates > Control ...
  • 139
0 votes
1 answer
548 views

How to disable Lock screen when pressing Ctrl - Alt - Del in Windows 10?

I would like to disable the lock screen in Windows 10 when the user presses Ctrl - Alt - Delete. The default behaviour is that when this keyboard combination is pressed, a user is presented a lock-...
  • 1,279
0 votes
1 answer
296 views

Deny access to C: to Edge

Hello I post here cause i know adminsitrator will be happy to know it too! im looking for prevent C: drive access with edge. Do you have any idea , GPO ? ive ever blocked c: drive, hide c: drive, but ...
  • 48
0 votes
0 answers
81 views

How do you allow standard users to change the system clock from Settings?

In Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment there is a policy called Change the system time. If ...
  • 11
0 votes
1 answer
106 views

Some clients take the hour from DC that is not PDC

We have two DCs, DC1 and DC2, DC1 have all roles. I configured a GPO for clients to sync with DC1: I notice that some domain clients have as time source DC2. Somebody knows Why ? DC2 have this option ...
  • 3
0 votes
0 answers
102 views

How to fix wrong printer names when pushed by AD to clients?

I have a Windows Server 2019 configured to be AD, some Windows 10 clients and the server pushes multiple printers using GPO/GPP to the clients. This in itself seems to work, but there's a problem with ...
0 votes
0 answers
79 views

How to make printers installed by GPO/GPP have server-side settings?

I have a Windows Server 2019 domain controller which has some network printers installed using TCP/IP Port 9100 and publishes all of those printers as shares. The important thing to note is that while ...
0 votes
1 answer
113 views

Proper path for client's "Local Group Policy" in PS' NetSecurity module

So, by default default, Windows client OSes (and servers too, to a degree) have 2 default Windows Firewall policies: weird local firewall and local group policy. In netsh you can easily switch between ...
  • 1
0 votes
0 answers
97 views

Why group policy can't prevent Windows Update from installing drivers?

After I have uninstalled the device (remove driver software selected) and edited the entries in group policies to prevent driver installation. Windows Update still installed drivers for that device. ...
  • 401
0 votes
0 answers
248 views

Windows 11 is not storing network credentials when accessing azure files or RDP server

My Windows 11 machine (part of a domain) does not store network passwords/credentials. This happens when i try to connect to an azure file share (using windows explorer) or when i connect to a server ...
0 votes
0 answers
37 views

How to create a script that loads a desktop link and changes the icon?

Long story short, Windows Server 2022: While this SHOULD be done via GPO, we're having a few issues with GPO and our server right at the moment. But the location where the proper GPO options are, is ...
0 votes
1 answer
450 views

How to remove group and others permission in Windows 10

How to remove group and others permissions in Windows 10, such that end result will be similar to chmod go= -R ~? I can execute the Linux command even though I am not a superuser/admin and I am not ...
  • 119
0 votes
1 answer
366 views

How do you block Copy/paste between Linux XRDP server and Windows RDP client?

We're allowing users to open xrdp sessions with Windows as client, and Linux as the xrdp server. My requirement is to eliminate the copy pasting going on through this to comply with policies. If it ...
1 vote
0 answers
37 views

Is there a way in the Windows 10 registry (or otherwise) to suppress the "This function has been disabled by your administrator" message?

On a Windows 10 machine located on a closed network which has been locked down in various ways through local GPO settings, there is a certain web application used with this machine that prompts a user ...
  • 1,328
0 votes
0 answers
171 views

how to give a permission to only specific OU to access shared drive? - windows server

0 There is an instruction to set up a Z drive as a shared drive, and give access authority only to A department. Department A is made by OU.The problem with this is that settings that give read/write ...
0 votes
0 answers
17 views

Windows Professional, How to disable Active Directory/group policy software installations by organization/domain

Is it possible to block unwanted software to be automatically installed by domain that windows professional is connected to? We have computers that are filled with spam and other junk because it's ...
  • 1
0 votes
0 answers
106 views

Where to set Intune policy to Mandatory

I created two Microsoft Intune policies to set the homepages for end-users' Edge browser: RestoreOnStartup and RestoreOnStartupURLs. This works for computers that join Intune after I deployed the ...
0 votes
0 answers
127 views

How to add all devices to an AD group?

I have a group which requires all devices to be added. There is no group for this I can see in AD. Is there another way to add all devices?
  • 1
1 vote
1 answer
115 views

Identifying what group policy applies which printer

So at work there are thousands of printers and hundreds of printer group policy groups. How can I identify which group will deploy which printer? Please disregard naming conventions etc. I would like ...
0 votes
0 answers
186 views

How can Windows Update be prevented from waking Windows 11 Pro PC without disabling wake events (NB: these are required) or automatic updates?

I am looking or some advice and guidance to resolve an frustrating issue arisen with Windows 11 Pro The scenario: I have set 'Wake on LAN' up on an X299 Desktop Build that was previously running ...
0 votes
1 answer
975 views

Win 10 - Task scheduler not running when specifying a domain account as local admin

I have a gpo that adds a domain account to be a member of the local administrator group on a domain joined pc. I can see the user is part of that group, and have the task scheduler set to run whether ...
0 votes
0 answers
72 views

Windows task scheduler website opener

Yes I know this has been handled in various threads dating back to 2012 and such, but hear me out please. I've seen multiple methodologies for opening a web page in task scheduler varying from using a ...
2 votes
0 answers
471 views

Invoke-Command - Get-WindowsCapability - Access is denied

is there some new GPO that for Win 10 pro N for workstations 21H2 limits who can install WindowsCapability over Enter-PSSession and Invoke-Command ? If I try Enter-PSSession and then Get-...
  • 133
0 votes
2 answers
40 views

trigger to congratulate people

I have a task that I've been working on for 2 weeks now and I can't complete it. I need to find a way to congratulate people who are celebrating their birthday today on behalf of the company, and do ...
1 vote
1 answer
1k views

Network Sharing still blocked, even after changing group policy in windows 11

I am trying to share my network via Ethernet from my laptop to my old PC which doesn't have a wifi card. (+ I don't have a long enough ethernet cable to route to my old PC right now.) I am currently ...
  • 13
0 votes
1 answer
95 views

Spouse was given a laptop system after organization was bought out. Is there a way to restore the default local policies on the Windows 10 system?

As the title suggests. We were able to restore admin and the normal users logins. Thing I have complete: Restore secpol using secedit Restore services.msc Removed Registry entries relevant to ...

1
2 3 4 5
20