Questions tagged [group-policy]
Group Policy is a feature of the Microsoft Windows NT family of operating systems that control the working environment of user accounts and computer accounts.
1,063
questions
1
vote
0
answers
309
views
Windows 10 Shutdown confirmation between specific times
I want to display a confirmation dialog when I try to shutdown my PC before a specific time in the day.
I tried already adding a PowerShell script in the Local Group Policy Editor to Computer ...
- 111
0
votes
0
answers
235
views
"managed by your organization" in work account on home computer
I'm a web development teacher. My organization uses the "managed by your organization" feature in Chrome, and policy is disabling the developer tools. During lessons, I get around this by ...
- 121
1
vote
2
answers
9k
views
Bluetooth audio devices "Setup blocked by group policy"
All of a sudden, I'm having issues with Bluetooth audio devices. All my previously connected audio devices now have a note "Setup blocked by group policy."
I've tried deleting registry keys ...
- 29
2
votes
1
answer
4k
views
Create a White List of USB Mass Storage devices permited in a GPO Active Directory with Serial Numbers
I have a Web form where I put the serial numbers of all USB flash drives that are permitted in my Network. Dynamically, my Ubuntu hosts consult, by a script, this list and block or permit the USB ...
0
votes
1
answer
178
views
What is the hierarchy of login activities user startup scripts, group policies, etc. - Windows 10
Trying to understand what is the hierarchy of login/startup scripts that trigger when a user logs in to Windows 10 and if this is impacting a local user command script in the startup from taking ...
- 1
0
votes
0
answers
553
views
How to update Group Policy Templates in for Local Computer?
Are the Administrative Templates downloaded from the MS website (for example, the 21H1 templates can be found at https://www.microsoft.com/en-us/download/details.aspx?id=103124) meant to update just a ...
- 59
1
vote
0
answers
5k
views
How do i get a list of Group Policy Settings / Preferences in Powershell
I want to fetch of a GPO all settings / preferences.
There is nothing about GPPs on the internet, and I struggle with a solution.
- 113
0
votes
0
answers
408
views
How to prompt up user and password prompt for executable file or text file in window?
How to prompt up user and password prompt for executable file or text file in window?
Want to pop up user authentication before using some program files application installed by its owner.
And pop up ...
- 101
0
votes
0
answers
362
views
Windows 10 group policy letter drive map vs manually mapped drive letter
Our network is hosted on Windows Server 2008 R2. PCs with Windows 10 are hosted on this domain with
a user group policy that maps a letter drive (J:) to a mount point that is defined as a DFS with ...
- 113
3
votes
1
answer
8k
views
net user /domain <username> - System error 5 has occurred. Access is denied
I have the problem that I am getting a
System error 5 has occurred. Access is denied.
error when I am trying to run the command
net user /domain <username>
with a regular domain user account (...
- 41
-1
votes
1
answer
224
views
UWP apps locked out of changing startup options
All UWP apps do not allow me to change their startup settings.
In Startup Apps, the option is greyed out.
In the app's settings, it's supposedly enabled by policy.
This occurs with apps like Windows ...
1
vote
1
answer
13k
views
How to remove MDM policies when I don't even have any MDM listed?
Access work or school Windows is empty, I have nothing to disconnect.
Provisioning packages is also empty, nothing to do there.
And I have no Microsoft account.
I tried removing them via regedit, but ...
- 11
0
votes
0
answers
735
views
Block user changes to Windows 10 system variables
We are using a virtual desktop solution that runs Windows 10 in an un-locked-down state. For reasons, the desktops are not joined to a domain so only a local GPO can be applied.
We want non-admin ...
- 151
0
votes
0
answers
201
views
chrome extensions : how to completly disable user from installing chrome extensions, such as vpn
I have a home network, I have blocked sites such as youtube,facebook and instagram for my kids, however they are clever to install vpn addons on their chrome and brave users.
How do I completly ...
- 231
0
votes
1
answer
64
views
Win10 desktop link protection GPO does not work
We set up a GPO for RD-Users as following:
user config
- guidelines
-- administrative templates
--- desktop
---- desktop
----- don't allow changes ON
----- don't allow adding of elements ON
----- don'...
- 1
0
votes
0
answers
115
views
Allow "console logon" (from keyboard) only for specific user
Currently when I create a Windows user without a password it can't be used with runas.exe showing the following error:
Account restrictions are preventing this user from signing in. For example: ...
- 186
0
votes
0
answers
1k
views
Windows 10 PC locks after Screensaver wait time, even though it is disabled in settings and gpo
Problem solved by Ramhound
All PCs in my domain lock after the wait time in the screensaver settings.
If I set the wait time to 1 minute the PC locks after 1 minute.
The PC locks after 1 minute. The ...
0
votes
1
answer
1k
views
Can't use "Computers" container in active directory as object for security filtering in GPO
I want to create software deployment GPO for active directory users. Every new computer added to the active directory appear in container called "Computers" (in Active directory users and ...
- 35
1
vote
1
answer
1k
views
Need restrictions to fully prevent connecting both LAN and WIFI
I there a way to fully prevent bypassing WIFI and Ethernet to be connected on the same time
This will be a way for professional user to connect to internet in restricted area
I found a solution in ...
- 111
4
votes
1
answer
5k
views
How to disable Windows Defender Application Control once and for all?
(Please read before marking this as a duplicate, thanks.)
Description
I am developing my own Win32 x86_64 application which interferes heavily with the system, is able to communicate with drivers ...
- 75
0
votes
1
answer
125
views
How to make shortcut to automatically open specific option from group policy (gpedit.msc)
I want to be able to single click on shortcut and automatically set Enabled/Disabled policy I want. So how can I do that without malinkg *.lnk file to point to c:\Windows\system32\gpedit.msc and ...
1
vote
2
answers
595
views
User Logon Script - Display additional network information
I have a GPO which runs a PowerShell script on user logon for a particular user.
GPO Location:
This script sends an email whenever the user logs onto the domain, this email contains the computer name ...
- 33
1
vote
0
answers
383
views
How to customize Taskbar and Start Layout
In my organization we have a conference room computer that everyone will have access to use.
I am looking to see if I can adjust some layout options on the taskbar and the start menu.
I have already ...
- 31
0
votes
1
answer
3k
views
RDP saved credantials doesn't work
I'm trying to connect to a domain computer there is a message:
"the server's authentication policy does not allow requests using saved credentials"
I tried to search for the solution on the ...
- 105
0
votes
0
answers
153
views
Is it possible to create a Windows group policy in reverse?
Is it possible to create a group policy in "reverse" based upon the current registry state?
I do a lot of Windows 10 customizing via registry, preferring this to fishing around in group ...
- 5,994
0
votes
0
answers
25
views
Is there a way to determine which applications are covered by a company's security policy?
I've connected my personal laptop to my work account and they have a security policy in place. Under "Applications" it's a list of guids that I want to link to an actual application name. ...
- 113
0
votes
1
answer
171
views
Hiding installed software via GPO
I'm wondering if it's possible to restrict certain groups from being able to see if software is installed. We distribute Microsoft Office licenses via AD group, and would like users that are only ...
- 1
0
votes
0
answers
133
views
Login options blocked - how to enable
I bought a computer (Win10) that I previously used myself from my company.
When I took it home I removed the computer from the domain using a local administrator account.
However some settings from ...
- 101
1
vote
1
answer
574
views
How to Automatically Run a Batch File on a Self-Cleaning Virtual Machine?
I am trying to learn a little bit of test automation. I know some batch files, I am brushing up my "PowerShell" skills and - who knows - I might even end up using some bash, in the long run.
...
- 135
0
votes
1
answer
332
views
How do you control what's under the "User's Files" folder on the Desktop?
On a Windows 10 user's Desktop, there is a folder that can be displayed which is a representation of the user's special/known folders. It looks similar to %userprofile%, but I don't think it's the ...
- 103
-1
votes
2
answers
253
views
How to troubleshoot Group Policy with a disabled cmd
On a large domain with many terminal servers, I'm implementing software installation for a handful of users. They can login to all terminal servers through a connection broker server so the software ...
- 62.4k
0
votes
1
answer
34
views
Temporarily enable GCP Administrator Privileges on a dated computer mostly locked behind a group policy?
So I have an older computer (Its running windows 10 but its using the same system, settings, and group policy it had like 4 years ago) and I want to gain temporary full administrator access (I want to ...
- 288
2
votes
2
answers
4k
views
Powershell script via GPO on Logon not working correctly
I made a Powershell script to remove the Windows Store and Cortana on Windows 10. I made and tested the Script successfully. Now i added the script to the LogonScripts on a GPO and tested the Script ...
- 21
1
vote
1
answer
688
views
Windows 10 hide the user name on the start menu using gpo
Trying to use GPO to hide/remove the username in the start menu in Windows 10. I can't seem to find the entry in GPO has anyone done this already? Version of Windows 10 Pro 20H2
- 11
0
votes
1
answer
877
views
Get Policies from GPO Object in Powershell
How can i get these policies as shown here for example in powershell?
With Get-GPO i can get the Group Policies, but not the Policies inside the group.
- 113
2
votes
1
answer
4k
views
MS Edge to disallow "Apps" option from the Settings menu
I'm trying to figure out a way to disable the Apps option from the Microsoft Edge Settings and more (Alt+F4) drop down menu as can be done with Collections and Share options where it shows Managed by ...
0
votes
0
answers
2k
views
Prevent Non-Admin User Account from Installing Programs -Windows 10
This simple thing is driving me nuts. I need to block my employees who have a local/non administrator account on their windows 10 laptop, from being able to install any application or program. I tried ...
0
votes
1
answer
1k
views
GPO to enable Windows Hello Face Recog. and Fingerprint but no PIN
How can I configure GPO to enable Windows Hello Face recog. and fingerprint but without PIN?
- 11
2
votes
1
answer
895
views
Power button missing from Windows 10 Control-Alt-Delete and login screens
I am configuring a Windows 10 LTSC v1809 Enterprise image for commercial use and have a requirement to allow Shutdown via the Ctrl+Alt+Delete screen.
The power button is accessible from the Start ...
- 21
1
vote
1
answer
7k
views
How to add 'Window Manager\Window Manager Group' to 'increase scheduling priority'
As I was having issues with black flashes when writing on my Windows 10 convertible, I found that adding 'Window Manager\Window Manager Group' to 'increase scheduling priority' in the local policies ...
- 133
1
vote
0
answers
1k
views
MapDrive via GPP with credentials
At work, one users from a specific domain (and forest) used to map netword drive via script (specified in ScriptPath attributes). All network drives are mapped via GPP, except one. Actually this ...
- 11
0
votes
1
answer
745
views
Can't disable Windows Defender by using group policies [duplicate]
I have recently installed Win 10 Pro.
No matter how many times i try to disable Defender Antivirus with Group Policy Editor (Computer Configuration > Administrative Templates > Windows ...
5
votes
3
answers
7k
views
How to use registry to disable $Recycle.Bin for all users on all drives and display delete confirmation box by default in Windows 10 20H2?
Quick summary: I am a tinkerer and I hate to click through the GUI, I don't need $Recycle.Bin so I want to disable it by using Set-ItemProperty to modify registry.
As in title, I want to use regedit....
- 3,309
0
votes
1
answer
834
views
Can Not Change Settings Once Configured MS Edge Using Group Policy
Configured MS Edge to use IE Mode following these steps:
Install msedge.admx administrative template for Microsoft Edge.
See docs.
Navigate to Computer Configuration > Administrative Templates >...
- 153
-1
votes
1
answer
11k
views
ADMX - An appropriate resource file could not be found for
I had uninstalled some updates, and after that whenever I open gpedit.msc I will be greeted by this error message twice, the second time its font is black & bold.
I misundertood this first, ...
- 3,309
0
votes
0
answers
1k
views
Do not log event id 4688 – A new process has been created
Using Group Policy Editor (gpedit.msc) or Local Security Policy (secpol.msc) Security Settings -> Audit Policy -> Audit Process Tracking or Advanced Audit Policy Configuration -> System Audit ...
- 203
0
votes
2
answers
3k
views
Allow all users to change computer name
I have to enable the normal users on Windows 10 devices to change the computer name (host name) using command prompt or powershell. But seems like the normal users are not allowed to change the name. ...
- 85
0
votes
0
answers
760
views
Group policy file access via wildcards
We have a scanning folder for every user on our NAS, this scan folder is used by our copy machine which "connects as the user" to the NAS and uploads the file there. We have started to ...
0
votes
1
answer
11k
views
Active Directory - Restrict User to login only one PC at a time
I want to implement a policy which is related to specific users on domain. What I want to achieve is:
If a user login, let's say, to PC1 he should not be able to use any other PC using his credentials ...
- 1
1
vote
0
answers
2k
views
Windows LGPO not importing security template GPOs?
I have configured local Group Policy Objects on a Windows 10 Enterprise machine. After that, I exported these GPOs with the Microsoft tool LGPO with:
LGPO.exe /b [path]
This all works fine.
Now I ...
- 57