gpo
15 TopicsUnusual Behavior using GPO PowerShell Scripts During Restart/Shutdown in Hyper-V – Need Help
I have noticed strange behavior in Hyper-V. Group Policy is configured to execute PowerShell scripts for logon, logout, startup, and shutdown. The typical sequence of script execution is: startup → logon → logout → shutdown. However, an issue arises when a restart is initiated while logged in (i.e., after startup and logon scripts have already been executed). Upon clicking the restart button from the GUI, the following occurs: after the logout and shutdown scripts run as expected, the startup script is executed and the logon script (!) is triggered. This happens despite the fact that the lock screen is displayed after the restart, and no user has logged in yet. This phenomenon consistently occurs when restarting or shutting down from the GUI while logged in. It does not occur when restarting via the command line using shutdown /r /t 0 or shutting down with shutdown /s /t 0. Why does Hyper-V behave in this inexplicable manner, executing the logon script in such cases? Is it possible to configure something within the virtual machine to address this issue? Or are there specific Group Policies for script execution that could control this behavior? Could there be certain Registry entries that influence the shutdown or restart process to prevent this issue in Hyper-V? Alternatively, could the problem be resolved by modifying the startup or logon scripts, for instance, by adding conditions to verify if an actual login has occurred? Any ideas or suggestions to explain or resolve this behavior would be greatly appreciated.7Views0likes0CommentsAutomatic installation of definition updates
Hi, we use a Windows 2022 environment with a WSUS server. I want to configure WSUS/GPOs in that way that defintion updates, which do not require a reboot will be installed automatically. The normal updates, even if they are permited by wsus, should only be installed when i start the installation at the specific computer/server. Is this/How is this possible? Greetings Jens835Views0likes1CommentUnexpected Automatic Windows Server Updates Despite GPO and WSUS Configurations
Hello everyone, I am experiencing a disruptive issue across a number of our Windows servers (ranging from Server 2012 to Server 2022). Despite a carefully managed WSUS implementation and GPO enforcement for Windows Updates, we have been facing an issue where several updates are getting automatically installed on these servers. The problem is, these updates are not ones we have explicitly approved, nor are they manually triggered for download/installation. The automatic reboots following these installations are causing significant service disruptions. Furthermore, the behavior seems to be somewhat random, which makes it even more challenging to root cause. Here is a summary of the GPO and WSUS configurations, and what I have verified so far: The GPO for Windows Updates is configured to '4 - Auto download and schedule the install'. The RSOP confirmed that there are no conflicting GPOs. WSUS is functioning correctly and the automatic approval of updates has been disabled. Dual Scan is not a factor as it's not relevant to the Windows Server versions we're using. It has been confirmed that the updates in question are indeed WSUS updates, but they haven’t been approved by us. The issue does not pertain to pre-downloaded update files or Service Stack Updates (SSUs). Given the above points, I am having a hard time figuring out why these updates are being installed and causing unplanned reboots. I would really appreciate it if anyone who has encountered a similar issue or anyone with insights could shed some light on this. Thank you in advance for your assistance! Best3.3KViews1like3CommentsWindows 11 ADMX and mixed enviorement (win 10 and win 11)
Dear, I hope you are well, I still have the doubt if the windows 11 ADMX are already compatible with windows 10. I noticed that my power GPOs, administrator permissions and remote desktop enablement were not being applied on windows 11 computers but were on windows 10. I started reading and found that there were new ADMX for windows 11 but they were not backward compatible with windows 10 and this makes administration a nightmare. Finally this was solved? I can quietly apply the new templates for windows 11 without them not working for windows 10? I am afraid to make the change and generate chaos. I remain attentive, Greetings to all!Solved3.1KViews0likes5CommentsWindows 11 client control panel visibility
Hi, according to this article: https://learn.microsoft.com/en-us/troubleshoot/windows-client/group-policy/use-settings-app-group-policy And this list: https://learn.microsoft.com/en-us/windows/uwp/launch-resume/launch-settings-app#ms-settings-uri-scheme-reference I apply the GPO to show only certain settings. In my list i show only easeofaccess-display;bluetooth;connecteddevices When user logon using Windows 10 client, all work fine. When user logon using Windows 11 client, he can see only Ease Of Use Display, but Bluetooth device is non available. Anyone can help me to find out why this happend? Thanks504Views0likes0CommentsSecurity filtering of GPO
In the GPM at a GPO, when I click on add at security filtering, I only see the objects User Group etc. but "Computers" is not selected (by default). I have to select "Computers" under "object types" every time. How can I set this so that "Computers" always remains selected.539Views0likes0CommentsMake already created folder to be shared across network
Good Day everyone! We are using Windows server 2019(on VMWARE ESXI), We have 100 computers across our network and all those computer already have one Folder name "Test", is there a way to make that folder(test) to be as shared using a GPO? I know we can create a shared folder via GPO but that would not have all the data that we need from that folder. For example we have Outlook folder on every PC and inside we keep PST file for that user. We want that Outlook folder to be as shared via GPO as making share one by one is time consuming. Do anyone have any idea how to tackle this problem? Thanks in advance1.1KViews0likes2CommentsGetting an error when trying a Group Policy Update
Hi everyone, I'm getting the following error when I'm trying a Group Policy update ( gpupdate /force) in a newly domain joined Windows 10 computer -- This doesn't happen with all the Windows 10 PCs of the domain. Only like 2-3 computers so far. -- The Windows build in the affected PC is 21H2. Can Ping and reach the domain controller. The SYSVOL folder can be reached when browsed via Explorer. I have tried -- ipconfig /flushdns , reboot, trying the gpupdate -- Removing the computer account from the AD, rejoining the PC to the domain and running a gpupdate Can anyone please help me with this ? Thank in advance! Any help is really appreciated. Let me know if you need more details.28KViews0likes1Comment