Group Policy via vpn connection
Hello, I created on Windows Server 2016 a group policy to distribute a root CA to my employee notebooks; I tried it in a test lab and it does work, but the test is with a dc vm and a workstation vm inside the same network. All the notebooks now are in the employees house so I tried to test distribute the gpo via the vpn connection to my office network, but it seems that the computer policy is not updated; if I do a simple gpupdate /force I obtain this: Computer policy could not be updated successfully. The following errors were encountered: The processing of Group Policy failed because of lack of network connectivity to a domain controller. This may be a transient condition. A success message would be generated once the machine gets connected to the domain controller and Group Policy has successfully processed. If you do not see a success message for several hours, then contact your administrator. User Policy could not be updated successfully. The following errors were encountered: The processing of Group Policy failed because of lack of network connectivity to a domain controller. This may be a transient condition. A success message would be generated once the machine gets connected to the domain controller and Group Policy has successfully processed. If you do not see a success message for several hours, then contact your administrator. To diagnose the failure, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results. Where to start the troubleshooting? First of all: is it possible to distribute computer gpo via vpn? Marco
Getting an error when trying a Group Policy Update
Hi everyone, I'm getting the following error when I'm trying a Group Policy update ( gpupdate /force) in a newly domain joined Windows 10 computer -- This doesn't happen with all the Windows 10 PCs of the domain. Only like 2-3 computers so far. -- The Windows build in the affected PC is 21H2. Can Ping and reach the domain controller. The SYSVOL folder can be reached when browsed via Explorer. I have tried -- ipconfig /flushdns , reboot, trying the gpupdate -- Removing the computer account from the AD, rejoining the PC to the domain and running a gpupdate Can anyone please help me with this ? Thank in advance! Any help is really appreciated. Let me know if you need more details.
Group Policy to allow specific users to install specific software without admin privileges
I am a newly system administrator for an organization and I am trying to create a Group Policy that will allow specific users to download and use certain software like LogMeIn123 without having to use admin privileges. We don't want to give full admin rights, but only for this specific instance. I have done some research, but I am not sure the best way to set this up. The problem is our IT team consists of 3 members total and cannot be everywhere at once and this would be beneficial in key times. I have seen some people recommend using a login script, but I am not sure how to do that. I have also seen some people recommend using a third-party tool which is out of the questions for our organization. I am also open to other ways and ideas of having preforming this. Can anyone please provide me with some instructions on how to set this up? Thanks in advance for your help! Additional information: I am using Windows Server 2012R2. I have a list of the specific users that I want to allow to install LogMeIn123. I have the LogMeIn123 installation file located on a network server.Start Menu Layout Group Policy
I have setup a Group Policy under User Configuration - Administrative Templates - Start Menu and Taskbar and I have Enabled Start Layout to point to my XML file which is in a shared folder. However, the start menu layout is not changing for all users. Any ideas what I can look at to fix it? Thank you.
