Questions tagged [group-policy]
Group Policy is a feature of the Microsoft Windows NT family of operating systems that control the working environment of user accounts and computer accounts.
1,063
questions
0
votes
0
answers
78
views
MacOS: Chrome- Can't edit UserDataDir policy on local home computer
I am trying to edit some Chrome policies on my own Mac (non organization) which I have admin access to. For example, the 'UserDataDir' policy (https://chromeenterprise.google/policies/?policy=...
- 1
1
vote
1
answer
1k
views
Windows 10 resisting configuration to delete pagefile on shutdown
Why would Windows 10 resist its configuration to delete its pagefile on shutdown?
The configuration is:
Windows 10 guest on an Ubuntu 22.04 host running VMware Workstation Player 16.2.4.
The Windows ...
- 157
0
votes
0
answers
2k
views
Change Group Policy Configuration from PowerShell
I would like to disable automatic updates in group policy using PowerShell (this needs to run on several machines so it needs to be automated). Specifically, I want to set Administrative Templates -&...
- 1,630
0
votes
0
answers
2k
views
How to make persistent changes (survive after reboot) in the Windows registry?
I have a Windows 7 VM and I'm trying to modify the keys in
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SystemInformation since I want to change the data in both SystemProductName and BIOSVersion ...
- 21
0
votes
0
answers
779
views
Are Group Policy entries always written to Registry?
I have some setting
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkIsolation DWORD DSubnetsAuthoritive
which seems to be set but in the Registry nothing is enabled. But when I look ...
- 157
1
vote
2
answers
116
views
Is it possible to log events of every user in one Event Log?
Right now if AppLocker blocks a program it is only logged in the local EventLog of the user.
Is it possible to set up one Event Log where the events of any user are logged that can be accessed by an ...
- 13
0
votes
0
answers
428
views
Don´t allow domain users to access shared folders on PCs outside the domain in the same LAN
I have the following problem.
Is there a way to block domain users from accessing folders shared by computers that are not in the domain? By this means there is information leakage
For example:
...
3
votes
1
answer
4k
views
Forcing lock screen image not working
I want to force the same lock screen image on every user. I selected the image I want with group policy Local Computer Policy > Computer Configuration > Administrative Templates > Control ...
- 129
0
votes
1
answer
4k
views
How to disable Lock screen when pressing Ctrl - Alt - Del in Windows 10?
I would like to disable the lock screen in Windows 10 when the user presses Ctrl - Alt - Delete. The default behaviour is that when this keyboard combination is pressed, a user is presented a lock-...
- 1,397
0
votes
1
answer
2k
views
Deny access to C: to Edge
Hello I post here cause i know adminsitrator will be happy to know it too! im looking for prevent C: drive access with edge. Do you have any idea , GPO ? ive ever blocked c: drive, hide c: drive, but ...
- 76
0
votes
1
answer
336
views
Some clients take the hour from DC that is not PDC
We have two DCs, DC1 and DC2, DC1 have all roles. I configured a GPO for clients to sync with DC1:
I notice that some domain clients have as time source DC2.
Somebody knows Why ?
DC2 have this option ...
- 53
0
votes
1
answer
724
views
Proper path for client's "Local Group Policy" in PS' NetSecurity module
So, by default default, Windows client OSes (and servers too, to a degree) have 2 default Windows Firewall policies: weird local firewall and local group policy. In netsh you can easily switch between ...
- 21
0
votes
0
answers
331
views
Why group policy can't prevent Windows Update from installing drivers?
After I have uninstalled the device (remove driver software selected) and edited the entries in group policies to prevent driver installation. Windows Update still installed drivers for that device.
...
- 450
0
votes
0
answers
63
views
How to create a script that loads a desktop link and changes the icon?
Long story short, Windows Server 2022: While this SHOULD be done via GPO, we're having a few issues with GPO and our server right at the moment.
But the location where the proper GPO options are, is ...
0
votes
1
answer
1k
views
How to remove group and others permission in Windows 10
How to remove group and others permissions in Windows 10, such that end result will be similar to chmod go= -R ~? I can execute the Linux command even though I am not a superuser/admin and I am not ...
- 119
0
votes
1
answer
3k
views
How do you block Copy/paste between Linux XRDP server and Windows RDP client?
We're allowing users to open xrdp sessions with Windows as client, and Linux as the xrdp server.
My requirement is to eliminate the copy pasting going on through this to comply with policies.
If it ...
- 427
1
vote
0
answers
48
views
Is there a way in the Windows 10 registry (or otherwise) to suppress the "This function has been disabled by your administrator" message?
On a Windows 10 machine located on a closed network which has been locked down in various ways through local GPO settings, there is a certain web application used with this machine that prompts a user ...
- 1,456
0
votes
0
answers
274
views
Where to set Intune policy to Mandatory
I created two Microsoft Intune policies to set the homepages for end-users' Edge browser: RestoreOnStartup and RestoreOnStartupURLs. This works for computers that join Intune after I deployed the ...
- 455
2
votes
1
answer
979
views
Identifying what group policy applies which printer
So at work there are thousands of printers and hundreds of printer group policy groups.
How can I identify which group will deploy which printer?
Please disregard naming conventions etc.
I would like ...
- 45
0
votes
1
answer
2k
views
Win 10 - Task scheduler not running when specifying a domain account as local admin
I have a gpo that adds a domain account to be a member of the local administrator group on a domain joined pc. I can see the user is part of that group, and have the task scheduler set to run whether ...
- 1
0
votes
0
answers
284
views
Windows task scheduler website opener
Yes I know this has been handled in various threads dating back to 2012 and such, but hear me out please.
I've seen multiple methodologies for opening a web page in task scheduler varying from
using a ...
2
votes
0
answers
1k
views
Invoke-Command - Get-WindowsCapability - Access is denied
is there some new GPO that for Win 10 pro N for workstations 21H2
limits who can install WindowsCapability over Enter-PSSession and Invoke-Command ?
If I try Enter-PSSession and then Get-...
- 141
0
votes
2
answers
42
views
trigger to congratulate people
I have a task that I've been working on for 2 weeks now and I can't complete it. I need to find a way to congratulate people who are celebrating their birthday today on behalf of the company, and do ...
1
vote
1
answer
10k
views
Network Sharing still blocked, even after changing group policy in windows 11
I am trying to share my network via Ethernet from my laptop to my old PC which doesn't have a wifi card. (+ I don't have a long enough ethernet cable to route to my old PC right now.)
I am currently ...
- 13
0
votes
1
answer
832
views
Spouse was given a laptop system after organization was bought out. Is there a way to restore the default local policies on the Windows 10 system?
As the title suggests. We were able to restore admin and the normal users logins. Thing I have complete:
Restore secpol using secedit
Restore services.msc
Removed Registry entries relevant to ...
- 3
0
votes
1
answer
1k
views
group-policy shutdown script runs only on "Shutdown", not on "Reboot"
I’ve configured GPEDIT to run a script at shutdown. But the script only works when I shutdown the system and does nothing when I restart the system.
- 13
0
votes
0
answers
4k
views
GPO: Run batch script as local administrator (NOT system) during system startup
This might have been answered before, but I was unable to find a clear answer to my specific issue.
I'm trying to run a batch-script that will trigger installation of a custom written Windows Service ...
2
votes
1
answer
8k
views
WinRM service fails to listen when configured via group policy
From Powershell, running
Get-WSManInstance winrm/config/listener -Enumerate
Produces standard output, including;
source: GPO
Transport: HTTP
Port: 5985
ListeningOn: null
The service is running.
...
- 221
1
vote
0
answers
2k
views
Disable the right-click mouse button function in Windows 10 (via registry keys/ GPO?)
I'm hoping someone can help me with how to disable the right mouse / right click button in Windows 10 for a specified group of machines/ users (all using Windows 10).
My objective is to disallow all ...
- 11
0
votes
1
answer
1k
views
How do I restrict User Config GPO Software Installation on certain computers?
I have a custom piece of software at my business that I'm trying to install using a GPO. I have it currently set under Computer Configuration > Software Installation. And this works well, but the ...
- 31
0
votes
0
answers
5k
views
How to set group policy via script?
I am trying to create a script that deploys https://www.cyber.gov.au/acsc/view-all-content/publications/hardening-microsoft-windows-10-version-21h1-workstations guidelines. Both on a workstation and ...
- 101
0
votes
1
answer
6k
views
Disable PowerShell v2 via GPO
I'm trying to disable the old v2 version of PowerShell via GPO but have not been successful.
I have tried everything, to run a Scheduled Task (running a PowerShell script which command inside DOES ...
0
votes
1
answer
272
views
Windows Restricted Group policy: how to bind users to specific computers
I've configured a Restricted Groups policy in AD to allow some users to perform administration tasks on domain computers, following this guide.
This allows all the users in the group to be ...
- 190
0
votes
0
answers
46
views
How can I see which "Date & time" settings are "hidden or managed by your organization" (and where) [duplicate]
I am on a domain-joined Laptop which cannot connect to the domain controller except once a month or less, so the system time is off by 10 seconds. I can set it manually, but I'd like it to sync to ...
- 1,728
0
votes
0
answers
674
views
Sensible debugging of WMI Provider/Service?
So I'm trying to make sense of the issue with WMI I have. Every time a new object change is made via Group Policy Client (be it new firewall rule or any other property state change) I see about 50 WMI ...
- 21
1
vote
2
answers
152
views
How do some special programs enforce policy-like settings upon Chrome?
There's this parental control app called Qustodio. Upon installation, it manages to enforce a setting upon Chrome, namely that Safesearch is permanently enabled.
How does it manage to do this? And ...
4
votes
1
answer
3k
views
Completely disable running WerFault.exe upon application crash
I have a simple test scenario, where the application crashes, but I am not interested in obtaining/analyzing the crash dump, but also speed is a concern.
For this reason I have tried various ways to ...
- 91
0
votes
1
answer
293
views
After joining computer to Active Directory domain, network connection keeps dropping
I'm working to build out an active directory deployment for my network, but when I join one of my test computers to the domain it seems that the computer gains some sort of idle timeout for the ...
- 3
1
vote
0
answers
61
views
Unable to Install Applications or Drivers
Attempts to install Windows updates, applications or drivers are failing. I suspected it might be a broken Group Policy. But when I tried to open gpedit, I got Failed to open the Group Policy Object ...
- 11
1
vote
0
answers
2k
views
"Some settings are managed by your organization" - No solution works
I'm running Windows 10 Pro and trying to update to Windows 11, but I can't get rid of this pesky message:
"Some settings are managed by your organization".
I've tried essentially all the ...
- 11
0
votes
0
answers
57
views
Can't enter the Group Policy Management
enter image description hereI wanted to edit some settings in group policy management but when I type "gpmc.msc" in run, it tells me than I have to log on with a domain user account, so how ...
- 13
0
votes
2
answers
4k
views
Change adapter from static IP to DHCP
I want to change the interfaces of all computers of two AD OUs. Currently all interfaces have static IPs and DNS servers. I wrote this Powershell Script:
$getIP = get-netipaddress | Where-Object ...
- 1
0
votes
0
answers
182
views
Disable Storing of VPN Credentials
I am looking for a way to disable storing the VPN credentials for our clients. I have been looking through to find a GPO setting that will disable it but I have not been able to find one. Is there ...
- 1
0
votes
0
answers
1k
views
Logon script in windows 11 with "run only specified windows applications"
I'm a begginer/student trying to manually setup a kiosk mode on windows 11 for educational purposes. I have set the group policy "run only specified windows applications" alongside a logon ...
- 1
0
votes
2
answers
988
views
Prevent standard user from installing "current-user" software in a normal way?
I have a specific problem, as you know standard user do have the ability to install "current-user" software, e.g "Viber" and many others.
I want to restrict standard users from ...
- 302
0
votes
1
answer
29
views
Windows Store not disabled after Policy Editor change
I've attempted to disable the Windows Store using the Policy Editor. After restarting several times, it starts up and runs constantly anyway - proof of Policy Editor:
Does anyone know of a reason ...
- 115
1
vote
0
answers
900
views
Apply "Shares that can be accessed anonymously" without reboot
A true anonymous share on modern windows requires listing its name in
Computer Configuration\Windows Settings\
Security Settings\
Local Policies\
Security Options\
Network access: ...
- 524
1
vote
0
answers
444
views
Change Default Browser on Reboot without GPO
in my company we have now decided to use MS Edge as default browser for everyone.
I am allowed to use my own browser, but our client administrator has rolled out a GPO to set the default browser to ...
- 11
0
votes
0
answers
336
views
File System group policy option has disappeared for our default domain policy
We have a separate policy for Windows 10 Only accounts and that one shows the File System as it should (2nd picture). Any idea how this happens?
I tried "regsvr32 wsecedit.dll" in CMD but it ...
- 53
2
votes
3
answers
30k
views
Why can't I change my date/time?
On the computers within my organization we can't adjust the date/time from the settings.
(The black mark covers "Time server: [server name]")
I have been looking at various websites and ...
- 31