Questions tagged [group-policy]
Group Policy is a feature of the Microsoft Windows NT family of operating systems that control the working environment of user accounts and computer accounts.
1,060
questions
0
votes
0
answers
32
views
VirtualAlloc error 1314
On two seemingly similar Windows 10 22H2 machines, an application acts differently: on one it works and reports that it is able to use VirtualAlloc() to allocate large pages, on the other it throws ...
0
votes
0
answers
14
views
How to manage windows firewall with local admin permission from a domain member machine by overriding group policy limits?
I have here a Win10 workstation machine where I have local admin right. However, I can not create firewall exceptions, because it is not allowed by the local policy. I have permission to alter the ...
- 2,644
0
votes
0
answers
13
views
How to disable WiFi for one user using a GPO
I would like to disable WiFi for one specific user on a PC running Windows 11 Enterprise, while allowing an admin to retain WiFi usability. Preferably, this would be done with an administrative ...
- 103
1
vote
1
answer
50
views
Remove Music, Pictures and Videos from This PC in the Navigation Pane
I followed this post, remove 3d objects and was able to get rid of the folders that I don't want like Music, Pictures and Videos. But under the This PC in the Navigation Pane, I am able to see those.
...
0
votes
0
answers
3
views
Local Group Policy firewall rules not listed in GPO firewall
I have 100+ rules defined as per LGP. I can see all these rules both in Local Windows Firewall in RO mode as well as in HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\FirewallRules. I also can see ...
- 33
0
votes
1
answer
14
views
task scheduler library does not synch properly wit AD
I have Windows Server 2022 Datacenter 21H2 and a Windows 11 Pro 23H2 machine
I created 2 gpo-s with some scheduled tasks.
I deleted one of the tasks from windows server GPO manager but after many ...
- 11
0
votes
0
answers
49
views
O365 MS Access Trust Center
I have somewhat confusing issue where I haven't had any luck with solving it.
We are switching from RDS 2k16 to RDS Data Center 2022, and from Office 2016 to Office 365.
I have defined all the GPOs ...
- 1
0
votes
2
answers
280
views
Reset Windows Update settings back to default, including respective local policy, by command-line only?
I have many Windows 10 and Windows 11 machines, which are in different states of windows update settings. Unfortunately, some machines have local policies active for windows update settings.
I need to ...
- 91
0
votes
0
answers
68
views
enforce password complexity requirement for bitlocker passwords
I have new disk partition and I am trying to enforce a password complexity for bitlocker but it doesn't seem to work.
What I tried: In group policy editor
Computer Configuration -> Windows ...
- 113
0
votes
0
answers
11
views
Up to date reference material for Group Policy Object: "Audit Object Access"
I have been investigating this policy for work, and have found this MS article. Two things concern me about it:
Despite the 2021 date, the event codes appear to be out-of-date. For example, this site ...
- 101
0
votes
0
answers
53
views
How can I block these Edge and Chrome settings?
https://imgur.com/a/fVPo4DV
It says: "Your Privacy is important for Microsoft Edge... bla bla bla... " I can either click on Accept or Deny All. This always pops up when Edge is opened for ...
0
votes
0
answers
599
views
How can I remove "Get Started" from the Recommended section in Windows 11 Start?
After hours of research, it seems that in windows Pro/Enterprise there is not way to remove the Recommended section in the Windows 11 Start Menu.
With that in mind, I have computers and users managed ...
- 31
4
votes
1
answer
675
views
Sharing a printer with GPO fails
I have an Active Directory server (Windows Server 2019) with Print Server Enabled and a GPO for each section of the office to deploy the correct printer. All clients are windows 10 or 11.
The GPO is:
...
- 141
0
votes
1
answer
369
views
gpo to allow local standard users to install software on windows
I have one admin account and 2 standard user accounts on a local computer and not on a domain. For example,
User A -> (Admin Account)
User B -> (Standard Account)
User General -> (Standard ...
- 113
-2
votes
1
answer
28
views
Windows 7 - Block Wallpaper Change BUT allow Selected Slideshow Wallpapers
System: Windows 7 Pro with SP2
Please can you help me find a solution to Allow Wallpaper Slideshow using a preselected folder BUT block anyone from changing the wallpaper.
The issue I am coming up ...
0
votes
0
answers
43
views
change the default download location from c drive to R drive for all apps
We have implemented a new policy in the company to lock the C drive for all employees. We have created a new partition using a PowerShell script. However, the issue is that when the C drive is locked, ...
- 1
0
votes
1
answer
108
views
deny computer gpo to specific user account
I have a Computer GPO that I need to deny apply when a specific User logs into a machine.
I have tried using the Deny Apply setting in delegation for the users account but it still applies the ...
- 33
0
votes
1
answer
294
views
windows 10 prevent one admin from changing other admin password
I have 3 user accounts. Two admin user accounts and one standard user. I don't want any admin account to be able to change the password of the other admin account. In short I want all the 2 admin ...
- 113
1
vote
0
answers
62
views
How to keep built in Windows apps up to date?
I am currently going through our On-Premise GPO's and migrating them to Intune. I am currently looking at the MS Store specifically
Please see below for my current test settings in Intune that are ...
- 127
0
votes
0
answers
206
views
Executing Powershell script automatically on domain join
I'm currently working on a customized Windows installation ISO, where local GPOs are predeployed (using LGPO.exe (Local Group Policy Object Utility) and SetupComplete.cmd). This image is targeted ...
- 249
0
votes
0
answers
139
views
GPO Windows Update Settings to schedule installs and reboots
I need to set GPO settings on a domain to schedule the install & reboot for windows updates. The device is public facing so don't want any pop's on screen and want it all to happen out of hours.
I ...
- 1
0
votes
1
answer
316
views
No Group Policy snap-in available to be added in Microsoft Management Console (Win11 Pro)
When I go to "Edit group policy" on Win11 Pro, it gives me this error:
Add or Remove Snap-ins option in Microsoft Management Console does not show any Group Policy option to snap-in
This ...
- 332
0
votes
0
answers
108
views
Multiple staff Mouse Cursor Losing Focus / Keyboard Dropping while typing
Issue: For months, many in our staff have been dealing with a problem described as:
Where, and When, we are typing- the keyboard drops / mouse cursor loses focus, and we have to actually click back ...
- 1
0
votes
1
answer
132
views
How to Reduce Delay in Displaying Incorrect Password message on Domain PC
I've been encountering an issue with domain PCs where it takes a longer time to notify entering of incorrect password. After conducting some research, we identified that the delay is caused due to ...
2
votes
0
answers
71
views
Disable Windows 11 data collection across an entire tenant for O365 Enterprise?
I'm at my wit's end with how much Windows 11 is sending back in terms of information used for "personalized ads". The security policy I need to adhere to is very IP protective and basically ...
- 121
0
votes
1
answer
91
views
Errors while reading policies from this GPO, not all policies are displayed
I am working on implementing an automatic Quality of Service (QoS) policy creator using the "New-NetQosPolicy" PowerShell command. I have a C++ script that executes this command to limit the ...
- 11
0
votes
0
answers
106
views
Registry edit to disble Ctrl+D in Outlook Desktop 2019
I use Outlook Desktop 2019 on Windows 10. For me, Ctrl+D is hazardous because it deletes an item when I actually meant to type (say) Ctrl+S or Alt+D. Furthermore, the mapping of Ctrl+D to deletion ...
- 1,201
0
votes
0
answers
194
views
Deploy Shortcut With GPO with PowerShell ExecutionPolicy
I am trying to deploy a shortcut to a selected couple desktops using GPO to the desktop. The target of the shortcut is
powershell.exe -ExecutionPolicy Bypass "C:\Scripts` Box\script.ps1"
It ...
- 395
0
votes
0
answers
126
views
Change the Policy in Windows 10 or Windows 11 that disable the PIN login option after multiple shutdowns?
I’m encountering an issue with Windows 10/11 where the PIN login option is disabled after multiple shutdowns. This situation often arises due to CPU overclocking with XTU, leading to frequent reboots ...
0
votes
0
answers
261
views
Configuring MS Edge to open web page in IE mode version 8
I know you can set Edge to open up a designated page in IEmode. You can do it either through the edge browser where the site will stay for a maximum number of days, or you can do it through ...
- 1,524
0
votes
0
answers
391
views
The config setting Basic cannot be changed because is controlled by policies
Im trying to enable basic authentication on Windows Server with command winrm set winrm/config/client/auth '@{Basic="true"}'
I get an error saying The config setting Basic cannot be changed ...
- 63
0
votes
0
answers
439
views
Disabling changing the time zone does not work in Windows 10
I have a computer which is used by several users. I would like to disable for these users the option of changing the time zone the system uses (both via the "clicking way" as well as via the ...
- 1
1
vote
1
answer
595
views
Why does a GPO not apply to a certain OU
I am having an issue, where a GPO for Power Options doesn't apply to a certain OU even though I have linked it. This GPO is an exception from the Domain-Level GPO for Power Options and should only ...
0
votes
0
answers
123
views
Configure Windows Hello to allow Login only with PIN not fingerprint
In light of the recently discovered flaws with fingerprint readers, I want to configure Windows Hello to allow Login/Unlock of Locked Computer only with PIN and not using fingerprint. When logged in/...
- 396
0
votes
0
answers
896
views
Windows Sign-in options disabled - GPO enabled
So with the new update on Windows 11 23H2 there comes an issue regarding the Sign-in options in the settings, specific the "PIN" and "Fingerprint" or "Facial" options.
In ...
0
votes
0
answers
49
views
Share with netbiosDomain in Name from GPO "Set user home folder"
I have configured the group policy "Set user home folder" which is located under "Computer Configuration > Policies > Administrative Templates > System > User Profiles"....
0
votes
0
answers
134
views
How to disable Ctrl+T taskbar hide hotkey?
On Windows 11 I want to disable the Ctrl+T hotkey that hides/shows the taskbar so that it can be used to open new browser tabs instead. It seems to be a problem with PowerPoint; I am currently running ...
0
votes
1
answer
323
views
How to enable/disable a LAN connetion as normal user in Windows 10
I have a Win10 workstation and I use a non-admin account for all normal operations.
I want my account to have the right to disable my VMnet1 and VMnet8 adapters because when up, my Wi-Fi becomes ...
- 1,883
0
votes
1
answer
3k
views
Is there a command that will turn local Group policy off and on?
I would like to turn the local group policy on and off via command prompt. Basically, is there a command that will be the equivalent of right clicking on "Local Computer Policy", choosing ...
- 1
0
votes
0
answers
284
views
"Do not allow drive redirection" not available for non-administrative user policy
I'm trying to define a local group policy to prevent non-administrator users from moving data off of a cloud VM.
I added the Local Computer\Non-Administrators Policy snap-in via MMC, but when I drill ...
- 101
8
votes
1
answer
22k
views
Force Internet Explorer 11 to open instead of Edge on Windows 10
I know IE11 is retired and not advisable to use BUT I need it.
We have a test lab (closed off to the internet) for some Windows 10 PCs (for legacy applications), running Windows 10 Enterprise version ...
- 103
6
votes
6
answers
23k
views
Windows blocks downloads from server "Blocked by your organization"
I recently started having an issue on Windows 11 where when I try downloading a file, all of my browsers refuse to do so displaying this: (images are from Chrome)
As you can see, files that I try to ...
- 163
0
votes
1
answer
176
views
How can I use integrated authentication in Chrome without disabling DoH?
There doesn't seem to be any UI within Chrome to enable integrated authentication on certain domains, so I created a recommended policy that set the AuthServerAllowlist setting appropriately. This ...
3
votes
3
answers
819
views
Remove/hide One Drive folder in file explorer
I have a mapped drive which redirects user's local folders to the mapped drive. I wish to hide the One Drive so users utilize the mapped drive instead of the OneDrive.
I've attempted to uninstall One ...
- 33
0
votes
0
answers
1k
views
How can I install / upgrade WSL2 in my Windows 11 system?
I do not have access to BIOS in my system as it is a offical laptop.
I would like to install WSL2 in my system. Somehow WSL Update didn't work for me.
PS C:\Users\anand.sathasivam> wsl.exe --update
...
1
vote
1
answer
854
views
How to prevent regular users (non admin) from pinning/unpinning shortcuts to the taskbar in Windows 11?
I would like to prevent regular users from pinning/unpinning shortcuts to the taskbar by enforcing a selective GPO that would be bypassed for administrators. Is it possible?
- 35
6
votes
1
answer
17k
views
Enable long paths on Win 11 Home
I need to enable long paths but my Win 11 Home edition does not have the group policy editor. Is there a way to enable this from the command line or install group policy editor on my machine?
- 327
0
votes
0
answers
560
views
Some questions regarding how to disable auto restarting after Windows 11 installed an update?
I want Windows 11 to automatically download and install updates in the background, just let me choose when to restart my laptop, even outside of active hours. So, I looked up some solutions and they ...
0
votes
0
answers
2k
views
Safe removal of NT SERVICE\All services from GPO log on as a service
I've searched for many weeks now if it's safe to remove NTSERVICE\ALL SERVICES right from 'Log on as a service' User right assigment.
Goal here is to increase my GPO's security. I do want to limit to ...
- 1
0
votes
3
answers
518
views
how to exclude specific file from onedirve syncing
I know how to exclude files with specific extensions, but files that doesn't have them how to exclude them by exact filename?
- 21