Questions tagged [group-policy]
Group Policy is a feature of the Microsoft Windows NT family of operating systems that control the working environment of user accounts and computer accounts.
1,063
questions
0
votes
1
answer
485
views
How to prevent BYO devices connecting to AD domain
My client has a computer lab several with Windows 10 PCs connected via ethernet to the company's active directory domain. each individual at the company has their own credentials with which to login.
...
- 2,751
1
vote
0
answers
563
views
Why doesn't my AWS Transfer down scoping policy work across users?
Continuing How to restrict user access in AWS Transfer? ...
I want a multi-user SFTP system running out of a single bucket with directory structure of:
/my-bucket/user/user - user can: list
...
- 123
0
votes
1
answer
1k
views
How to disable right click app icon and start on Taskbar in Win10
When right click app icon and start icon, the list will be shown.
Using "Remove access to the context menus for the taskbar" GPO can disable right click Taskbar Context Menu or using ...
- 21
1
vote
1
answer
1k
views
Remove OneDrive icon from Navigation Pane while keeping active use of OneDrive itself
Many users here ask how to get rid of OneDrive completely and these questions already have answers.
My situation is different. I want to remove only OneDrive icon from Navigation Pane in Windows ...
- 457
2
votes
1
answer
1k
views
Apply local group policy objects to custom user group
Background
The scenario I am struggling with is the following: I have a standalone Windows 10 Enterprise system (not connected to any network / AD) which I want to configure with local group policies. ...
- 57
0
votes
0
answers
542
views
permanently uninstall Realtek and Nvidia drivers
Because of some performance issues on my Dell XPS 15 which i'm not going to address in detail, i want to uninstall the drivers for its Realtek soundcard and for its Nvidia GeForce GTX 1050 video card.
...
- 101
0
votes
0
answers
735
views
Why are there two entries for Remote Desktop in my Windows Defender Firewall listing of allowed apps
I have just started getting an "internal error" when trying to Remote Desktop connect from my PC to a server on the LAN. It's been working fine for several years.
I cannot reach our ...
- 881
0
votes
1
answer
2k
views
Everything is running with administrator privileges-- how do I explicitly run something as a user?
This is on a domain-attached workstation on which I have local admin access. I'm not sure if our IT department set a GPO or something, but every single program I launch-- regardless of whether I ...
- 183
1
vote
0
answers
789
views
How to update Computer\HKEY_CLASSES_ROOT\CLID\{ID} Value
does anyone know how to change/ update Computer\HKEY_CLASSES_ROOT\CLID{ID} value>? I use the following PowerShell binding to Group Policy for updating certain registry key in HKCR when user login ...
- 11
7
votes
4
answers
6k
views
Microsoft Defender Antivirus is disabled, but back to normal after reboot. How to disable it permanently?
I have Windows 10 ver 2004. Since Windows Defender changed to Microsoft Defender Antivirus I'm unable to turn it off. In Local Group Policy (gpedit.msc) under Computer Configuration/Administrative ...
- 499
1
vote
0
answers
1k
views
How can I find the package family name of a desktop app?
I am trying to restrict the camera to only specific apps on my Windows 10 Surface with Group Policy. I need the package family name of the app to allow it and I would like to allow Zoom which is a ...
- 331
1
vote
2
answers
2k
views
Default associations configuration keeps getting reapplied
I've configured a GPO that configures the default associations (For IE and Adobe Reader).
I'm talking about this GPO.
In my GPO, I redirect our users to an AppAssoc.xml that is located on our sysvol ...
- 67
-1
votes
1
answer
1k
views
How can i prevent users from adding wireless connections in windows 7 PC?
How can I prevent users from adding or connecting to new wireless networks, especially their mobile hotspots?
I did many searches on the internet but I can't find any registry trick or group policy ...
- 131
3
votes
2
answers
11k
views
How to disable Tamper Protection on Windows 10 1709, 1803, or 1809?
According to the documentation:
If you are using Windows 10 OS 1709, 1803, or 1809, you won't see Tamper Protection in the Windows Security app. In this case, you can use PowerShell to determine ...
- 441
0
votes
1
answer
22
views
Gpresults html report shows setting as enabled as well as disabled?
I am little confused on why my gpresults html reports shows both enabled and disabled (or vice versa) for settings. In this example screenshot, is this policy really enabled or disabled?
- 1
0
votes
0
answers
845
views
Prevent standard user from formatting and ejecting removable NTFS drive on Windows 10
I have a removable NTFS hard drive attached to a computer by USB for backup purposes. I have the drive partition of importance blocked from non-admin accounts using security under properties. The ...
- 1
1
vote
0
answers
2k
views
Which registry keys are used by office365 Business Premium?
after migration from Office2016 to O365 Business Standard we realized, that our GPOs partly stopped working. Some googleFU gave the hint, that we´d need at least E3 Plan for those we used the admx ...
- 21
0
votes
1
answer
308
views
How can I change my HOMEPATH on a Windows server only when using RDP?
(Windows 2012r2 Server)
I am currently in a domain environment and our Homepaths are controlled via Active Directory.
For a special app when a user logs into RDP the app only runs if the users ...
- 1
0
votes
0
answers
170
views
Configure Windows Update group policy in the registry in Windows 10.2004
In previous versions of Windows 10 Pro, I could configure the Windows Update through group policies and also their corresponding registry values. Here's the entry description.
With Windows 10.2004, ...
- 2,338
0
votes
1
answer
254
views
Is there a possible way to script which apps are the specified ones to run using "Run only specified applications" in a Group Policy?
I wanna be able to script which applications I want my group to be able to run via the cmd :
Is there a way to script this to execute via powershell or CMD on boot? Has anyone ever done it?
Thanks in ...
- 113
0
votes
0
answers
7k
views
GPO to turn off the screen/display but NOT lock the computer at the same time in Windows 10
I've recently set-up this GPO policy in AD:
Computer Configuration > Policies > Administrative Templates > System > Power Management > Video and Display Settings > Turn Off the ...
- 822
0
votes
0
answers
680
views
USB ports only works with mouse and keyboard
So i joined this company and they had a specialist before that disabled all the usb ports to prevent people from using external devices such as external hard drives, phones CDs... Only 2 ports work ...
0
votes
1
answer
51
views
Windows 10: Cannot activate driver update in Windows update
In Windows Update's settings, driver update has been excluded from Windows Update by a group policy.
But the respective policy was not configured. I deactivated it and now the respective entry is ...
- 1
0
votes
2
answers
969
views
Create an installer for domain users
I’ve been struggling with something for quite some time now.
The boss wants a directory in our fileserver, that he will put program installation files in, all can read and only he can modify.
He wants ...
- 55
3
votes
1
answer
3k
views
How do I instantiate policies in Chrome on mac?
This is the set of policies that I want for my installation of Chrome (converted to json):
{
"chromePolicies": {
"BrowserAddPersonEnabled": {
"level": &...
- 764
4
votes
2
answers
11k
views
Can't find windows defender in gpedit.msc
I need to change some settings in Windows Defender but I can't find Defender in gpedit.msc.
Can anyone help me?
0
votes
1
answer
1k
views
GPOs and files from a network share
I want to use some files in my GPOs (on Windows 10), mostly some scripts or other files which I simply want to copy. The problem is that they are on a network share and the GPOs are in the Computer ...
1
vote
2
answers
679
views
Delete all new files and folders besides user default folders
Summary : I would need to delete all files and folders created/copied/moved into user's root profile. If someone creates a file it should automatically be deleted.
What I need :
User's are not to ...
- 145
1
vote
0
answers
202
views
Restricting user group to specific folder in Win2016 server (SFTP)
First off, I am new to this things so my technical vocabulary may not be on par with everyone.
I have created a Windows 2016 server and installed OpenSSH SFTP server successfully. Unfortunately when I ...
- 111
1
vote
1
answer
4k
views
How to undo group policy change to Windows Automatic Updates
I am running Windows 10 Pro x64 v. 1903. I edited my Group Policy for "Configure Automatic Updates" in the group policy editor, and now I want to set it back to "Not Configured". ...
- 11
3
votes
0
answers
2k
views
What Group Policy settings can block Command Prompt from executing scripts
I've been struggling with a problem on my computer that apparently has no solution I could find online. I'd very much prefer not to format my hard drive and start over with a new Windows installation. ...
- 31
0
votes
0
answers
322
views
How can BitLocker be configured to not require additional authentication if Secure Boot is disabled
I have a laptop with Windows 10 1703 installed, that I am trying to determine how BitLocker has been configured on.
In the BIOS the laptop has Discrete TPM selected but also has the option of Intel ...
- 1
2
votes
1
answer
120
views
How to completely remove a keyboard layout from windows
I have a software that, when run, automatically adds a specific keyboard layout
Is there any way to prevent this?
some sort of lock on windows' keyboard layout list?
or some sort of permission ...
52
votes
7
answers
99k
views
How to permanently disable Windows Defender Real Time Protection with GPO?
I like to disable Windows Defender Real Time Protection via GPO on Windows 10 Pro. When I configure GPO, Real-Time Protection is shown as off. However after a reboot the Protection is magically ...
joe-jeff
0
votes
1
answer
551
views
enable “Turn off Windows+X hotkeys” GPO using powershell
Need to enable Turn off Windows+X hotkeys GPO. I have used the below query but is not enabling the GPO.
If (-not (Get-Module GroupPolicy)){Import-Module GroupPolicy}
Set-GPRegistryValue -Name "...
- 101
1
vote
1
answer
280
views
Is there a way to change gpo via a .reg file or batch file?
I share my laptop with my son and I dont want him using the mobile hotspot (Because I cant track it). So I disable it via gpo. See link: https://www.theexperienceblog.com/2016/08/04/how-to-disable-the-...
- 11
1
vote
1
answer
660
views
Can a Windows 10 user be prevented from opening executables on a whole partition?
Is there a way to prevent a Windows 10 user (or the whole system) from opening any executable files on a whole partition? (E.g. just on the D:\ drive including all sub-folders.)
It would ...
- 111
0
votes
1
answer
8k
views
How to set Password must meet minimum requirements policy using command prompt
I need to set local password policy. I don't want to use gpedit.msc .I able to set all other policies using net accounts command but complexity requirements is not listing in net accounts. How can I ...
- 103
1
vote
0
answers
166
views
Group policy does not work on Windows 10 home edition?
I'm using Windows 10 home edition, try to solve update Windows Defender Antivirus antimalware platform - KB4052623 (Version 4.18.2001.10) error code 0x80070643
According to this Microsoft web page, I ...
- 11
1
vote
1
answer
2k
views
How to not apply a GPO to only one user?
I have a group policy applied at the domain level for complex passwords. I have one user that I want to have a simple password. From my research, I went to the delegation tab of the specific GPO, and ...
- 11
2
votes
1
answer
5k
views
In Powershell, How to set execution policy for another non-admin user (as admin)?
the command Set-ExecutionPolicy has a parameter -Scope which only has 5 categories:
MachinePolicy
UserPolicy
Process
CurrentUser
LocalMachine
It appears to have no ...
- 481
1
vote
1
answer
782
views
How to set mouse scrolling speed for all users?
I am searching for a way to increase the mouse scrolling speed on Windows Server 2016 from the default value (3) up to 20 for all users (HKLM). I am searching for this option since several hours ...
- 113
20
votes
3
answers
59k
views
Windows 10 power options missing on new laptop
I have two Dell Latitude laptops with Windows 10.
An old one and a new one I just got.
On the new laptop when I open Power Options --> Advanced settings, I only see the following groups: "Desktop ...
- 331
0
votes
1
answer
98
views
Prevent / Hide drives from My Computer won't effect
I am planning to have a small internet cafe and want to prevent/hide them from opening Drive D which is for games. I enabled Prevent access to drives from My Computer and Hide these specified drives ...
- 1
0
votes
1
answer
11k
views
Removing Windows wireless policy GPO settings
I've configured a group policy to push out wireless settings and set a whitelist for networks - I now need to remove this, however I can't for life of me figure out how.
Current state of the GPO:
...
0
votes
0
answers
3k
views
Push config for OpenVPN Connect with GPO
I'm trying to push OpenVPN Connect msi with a config to some domain connected computers
But i can figure out how to make the client pick up the config
I copied it to the profile directory of the ...
- 103
0
votes
2
answers
2k
views
Deny log on specific user to computer
Hi there I am having a bit of a simple task problems.
We have pretty simple configured MS server 2012 in our school.
The thing is we want to deny access few PCs from ONE user so our students can only ...
1
vote
0
answers
3k
views
Changing Windows 10 Accent Color via GPO
I'd like to set a default accent color by using a group policy and have found that it is not affecting all aspects of Windows. I entered in my hex values (with the #) through Computer Configuration > ...
- 11
2
votes
1
answer
1k
views
Modifying Index Location is Disabled by a Policy
I have indexing setup on Windows 10 (build 18363.693) to include 4 different drives, and the index itself is stored on a separate drive.
I am attempting to set up the index to no longer be on this ...
- 425
1
vote
1
answer
506
views
Map Printers based on physical location
I work at a company where we have 2 locations which are close fairly to each other, and some users often travel between buildings with laptops. We're just setting up our AD environment, and I'm ...
- 121