Group Policy
25 TopicsGroup Policy via vpn connection
Hello, I created on Windows Server 2016 a group policy to distribute a root CA to my employee notebooks; I tried it in a test lab and it does work, but the test is with a dc vm and a workstation vm inside the same network. All the notebooks now are in the employees house so I tried to test distribute the gpo via the vpn connection to my office network, but it seems that the computer policy is not updated; if I do a simple gpupdate /force I obtain this: Computer policy could not be updated successfully. The following errors were encountered: The processing of Group Policy failed because of lack of network connectivity to a domain controller. This may be a transient condition. A success message would be generated once the machine gets connected to the domain controller and Group Policy has successfully processed. If you do not see a success message for several hours, then contact your administrator. User Policy could not be updated successfully. The following errors were encountered: The processing of Group Policy failed because of lack of network connectivity to a domain controller. This may be a transient condition. A success message would be generated once the machine gets connected to the domain controller and Group Policy has successfully processed. If you do not see a success message for several hours, then contact your administrator. To diagnose the failure, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results. Where to start the troubleshooting? First of all: is it possible to distribute computer gpo via vpn? Marco64KViews0likes4CommentsGetting an error when trying a Group Policy Update
Hi everyone, I'm getting the following error when I'm trying a Group Policy update ( gpupdate /force) in a newly domain joined Windows 10 computer -- This doesn't happen with all the Windows 10 PCs of the domain. Only like 2-3 computers so far. -- The Windows build in the affected PC is 21H2. Can Ping and reach the domain controller. The SYSVOL folder can be reached when browsed via Explorer. I have tried -- ipconfig /flushdns , reboot, trying the gpupdate -- Removing the computer account from the AD, rejoining the PC to the domain and running a gpupdate Can anyone please help me with this ? Thank in advance! Any help is really appreciated. Let me know if you need more details.31KViews0likes1CommentStart Menu Layout Group Policy
I have setup a Group Policy under User Configuration - Administrative Templates - Start Menu and Taskbar and I have Enabled Start Layout to point to my XML file which is in a shared folder. However, the start menu layout is not changing for all users. Any ideas what I can look at to fix it? Thank you.30KViews0likes20CommentsSingle GPO vs. Multiple GPOs
I am pretty new to setting up Group Policies. Is it better practice to have mulitple GPOs rather than one GPO. For example, should I have seperate GPOs for mapped drives, windows updates, mapped printers, etc. or is it okay to make one "big" GPO with all these paramaters? Thank you very much!6.2KViews1like1CommentNew GPOs not creating in SYSVOL Policies folder after move to DFS Replication
I moved to DFS replication from FRS last week to allow installation of Server 2022 DCs. All OK appeared. DCDiag and such after showed all OK and DFS event logs not showing any issues except when one of the DCs that is on a ship goes outside reception, I don't think this issue is DFS though. New GPOs that are created show in Group Policy Management but a folder is not being created in the SYSVOL \ Policies folder with corresponding Unique ID as normal. Viewing on the same DC where GP Management confirms it is connected to and can see the GPO drilling even down C:\Windows\SYSVOL_DFSR\... the GPO folder is not there. On PCs applying GPO scoped it gives back "the processing of group policy failed. Windows attempted to read the file \\domain\sysvol\domain.local\policies\*unique ID*" What am I missing here? I have checked all event logs I can figure related, dcdiag showing OK still, no DFS issues noted nothing like event 2213 or DFSR stopped..? Stopping me being able to continue with work just about now. Is there any bug or something the process when GPO is made the account can't create in that folder or something after moving to DFS from FRS?Solved5.1KViews1like4Commentsgroup policy setting to restrict which users are allowed to sign in to google chrome
I am trying to setup a group policy for chrome to "restrict which users are allowed to sign in to google chrome". Any ideas what the correct formatting of the string should be for this setting if I need to include multiple domains as in restricting to domains in this list? wc.k12.mo.us maryviller2.com moval.edu sps.org Is this the correct format? *@wc.k12.mo.us|*@sps.org|*@moval.edu|*@maryviller2.com5KViews0likes2CommentsGPO and Authenticated Users
I have a domain user which I am going to use as a "test user" for a new project we are doing. However, I have Group Policies already setup for our domain. How do I exclude this one user from all the domain GPOs that are already in place. I put this one user in their own Security Group but I still believe somehow they are linked to NT AUTHORITY\Authenticated Users. Is there a simple way to exclude this user fro the GPOs?Solved3.9KViews0likes1CommentWindows Components missing from Administrative Templates in GPO
I am in the process of configuring Windows Hello for Business and have hit a bit of a road block. When editing a GPO, the folder for Windows Components is missing from the Administrative Templates directory for both Computer Configuration and User Configuration. I have read several articles on importing .ADMX files and that didn't make a difference. What am I missing here? Domain Controller is on Server 2019.3.1KViews0likes0CommentsPrinter GPO installing printers by IP instead of hostname
We need to install our printers by hostname as opposed to IP address. However, the GP once applied to the remote clients is installing the printer by the IP Address instead of the hostname. Here is a screen shot of the printer settings from the group policy. And here is a screenshot of the printer settings as applied to a target machine from that policy. All of our clients are running Windows 10 1909.2.3KViews0likes1Comment