184 questions
184 questions with Windows for business | Windows Server | Directory services | Deploy group policy objects tags
4 answers
One of the answers was accepted by the question author.
How to properly export live settings in GPO applied to a machine
Hi, I needed to get which of the following settings, and with which values, are applied live on a server. The needed settings are : SeInteractiveLogonRight SeRemoteInteractiveLogonRight SeDenyInteractiveLogonright SeDenyRemoteInteractiveLogonRight It…
Windows for business | Windows Server | Directory services | Deploy group policy objects
asked 2026-04-16T15:04:39.7333333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(201.6, 71%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EEA%3C/text%3E%3C/svg%3E)
Egoitz Aurrekoetxea
41
Reputation points
edited an answer 2026-04-16T15:34:40.64+00:00
Egoitz Aurrekoetxea
41
Reputation points
2 answers
I want to disable Print Spooler service from our Windows AD DC server
We are planning to stop the Print Spooler service from our AD DC server can you tell me I can do it using steps below or need different approach? Sign in on the Domain Controller Open Group Policy Management Right-click on the Domain Controllers OU …
Windows for business | Windows Server | Directory services | Deploy group policy objects
asked 2026-04-13T05:15:24.7566667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(188.79999999999998, 38%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJO%3C/text%3E%3C/svg%3E)
Joshi Omkar
0
Reputation points
answered 2026-04-13T06:02:53.2733333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(172.8, 86%, 26%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJN%3C/text%3E%3C/svg%3E)
Jason Nguyen Tran
15,590
Reputation points
Independent Advisor
1 answer
come disabilitare in modo massivo su pc di dominio (attiva avvio rapido )
Buongiorno, sono Diego Fraraccio IT di Formula spa , avrei la necessità di disabilitare in modo massivo l'avvio rapido su circa 500 pc , vorrei farlo con una policy ma stiamo riscontrando problemi potreste indicarci una soluzione grazie
Windows for business | Windows Server | Directory services | Deploy group policy objects
asked 2026-04-02T07:05:53.9+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(195.2, 48%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAF%3C/text%3E%3C/svg%3E)
Admin Fraraccio
0
Reputation points
answered 2026-04-02T10:05:57.8066667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(0, 61%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EHP%3C/text%3E%3C/svg%3E)
Harry Phan
17,360
Reputation points
Independent Advisor
2 answers
After changing a GPO we can not login to our windows server 2022 dc
By adopting this policy reccomended by defender we are locked out from our domain controller Need remediation urgently
Windows for business | Windows Server | Directory services | Deploy group policy objects
asked 2026-03-27T11:33:22.08+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(19.2, 9%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMB%3C/text%3E%3C/svg%3E)
Merkouris Bouchlas
0
Reputation points
answered 2026-03-27T16:08:10.1166667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(284.8, 33%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDV%3C/text%3E%3C/svg%3E)
Domic Vo
19,580
Reputation points
Independent Advisor
1 answer
One of the answers was accepted by the question author.
How to get GPO's to run when Server 2025 keeps booting up to the Public Firewall profile?
My GPO's will not work. Running gpupdate /force prompts that the machine must reboot to run the gpo, but it never is able to run because of the firewall profile always starting up as public. Yes, I can restart the NIC, but that does not fix the GPO…
Windows for business | Windows Server | Directory services | Deploy group policy objects
asked 2026-03-17T15:43:54.3366667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(230.39999999999998, 28.000000000000004%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECW%3C/text%3E%3C/svg%3E)
Chris Watkins
40
Reputation points
commented 2026-03-17T17:17:37.45+00:00
Chris Watkins
40
Reputation points
2 answers
how to deploy exe through GPO
how to deploy .exe through GPO to all clients, i want to push Trend Micro Agent that is in .exe with supporting folder and applications
Windows for business | Windows Server | Directory services | Deploy group policy objects
asked 2026-03-16T23:23:31.96+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(121.6, 57.99999999999999%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMA%3C/text%3E%3C/svg%3E)
Mohammed Ahmed
0
Reputation points
answered 2026-03-17T05:44:27.4933333+00:00
Domic Vo
19,580
Reputation points
Independent Advisor
2 answers
One of the answers was accepted by the question author.
How to define an GPO for Remote desktop User for specify Computer and user
Hi, How can I create an GPO for RDP Connection that user X does allow connect to the Computer Y? It mean the User X can connect only to the Computer Y. Regards Nick
Windows for business | Windows Server | Directory services | Deploy group policy objects
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(67.2, 90%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EST%3C/text%3E%3C/svg%3E)
2 answers
List of Group Policy which can apply on the Domain controller
Hi All, Is there any Group Policy best practices which I can apply/configure on the Domain Controller? If yes then can you please provide list of Group Policy which I can apply on Domain Controller?
Windows for business | Windows Server | Directory services | Deploy group policy objects
asked 2026-02-23T10:59:59.9766667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(163.2, 71%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKS%3C/text%3E%3C/svg%3E)
Kaushal Shah
0
Reputation points
answered 2026-02-23T11:46:25.1633333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(89.60000000000001, 96%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETV%3C/text%3E%3C/svg%3E)
Tan Vu
2,175
Reputation points
Independent Advisor
2 answers
One of the answers was accepted by the question author.
Group Policy Preferences - Replace Folder
I have a GPP that recreates a folder. It deletes any files or folders within. It just occurred to me that this may be happening every 90 minutes or so. My intention was to do this at logon only. Am I correct that this is happening every 90 minutes…
Windows for business | Windows Server | Directory services | Deploy group policy objects
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(118.4, 94%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
1 answer
ps1 script to deploy custom mouse cursors works, but it needs additional manual push
The script <# .SYNOPSIS Automates deployment of custom mouse cursors via Active Directory GPO. .DESCRIPTION Creates a Group Policy Object that deploys custom cursor files and configures registry settings to apply them. .PARAMETER…
Windows for business | Windows Server | Directory services | Deploy group policy objects
asked 2025-11-05T23:25:04.1033333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(118.4, 54%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVJ%3C/text%3E%3C/svg%3E)
Vladimir Jovanovski
0
Reputation points
edited a comment 2026-01-10T21:44:49.83+00:00
Vladimir Jovanovski
0
Reputation points
1 answer
Computer Policy GPO fails to apply
Domain Structure: two domains , domain A and domain B, both these domains have two way trust configured. Endpoint : target machine is a W365 Machine, domain joined to domain B. GPO Config : local admin gpo is configured for the target…
Windows for business | Windows Server | Directory services | Deploy group policy objects
asked 2026-01-09T06:31:09.2166667+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(307.2, 24%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPK%3C/text%3E%3C/svg%3E)
Praveen Kumar
0
Reputation points
answered 2026-01-09T09:23:23.0533333+00:00
Domic Vo
19,580
Reputation points
Independent Advisor
1 answer
One of the answers was accepted by the question author.
Drive is not Accessible: "Access Denied" to Mounted Drives/Virtual Drives
Hi Microsoft Community, Good Day! Asking for your help on this one. We tried to use Arsenal Image Mounter to create a drive for our digital forensic purposes, but when we tried to mount a zip file, it seems that the drive is inaccessible Additionally,…
Windows for business | Windows Server | Directory services | Deploy group policy objects
asked 2025-12-09T12:54:05.7833333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(288, 33%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJD%3C/text%3E%3C/svg%3E)
Joshua D. Engracia
20
Reputation points
accepted 2025-12-17T11:05:32.9466667+00:00
Joshua D. Engracia
20
Reputation points
3 answers
One of the answers was accepted by the question author.
Account lockout policy is not functioning on PCs joined to Active Directory
The account lockout policy configured for PCs joined to Active Directory is not functioning. The detailed status is as follows: ■ Status of AD-joined client PCs 1.Even after several incorrect password attempts when signing in to the client PC, …
Windows for business | Windows Server | Directory services | Deploy group policy objects
asked 2025-12-11T00:31:16.81+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(150.4, 80%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESI%3C/text%3E%3C/svg%3E)
Satoshi Inagaki
40
Reputation points
commented 2025-12-16T01:14:21.64+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 26%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKP%3C/text%3E%3C/svg%3E)
Kate Pham (WICLOUD CORPORATION)
665
Reputation points Microsoft External Staff
Moderator
3 answers
One of the answers was accepted by the question author.
Synkronization are not working between Domain Controllers
Case: DC on Windows 2012R2 was shut down 216 days ago and manually deleted about 14 days ago. Before the DC was shut down, a DC1 was installed on Windows 2022. The roles were moved from DC to DC1. Because the DC has been shut down for more than…
Windows for business | Windows Server | Directory services | Deploy group policy objects
asked 2025-12-08T09:08:56.69+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(144, 67%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJB%3C/text%3E%3C/svg%3E)
Johnny Broe
686
Reputation points
accepted 2025-12-08T11:00:08.82+00:00
Johnny Broe
686
Reputation points
2 answers
Default Domain Policy misconfigured — Domain Admins & Enterprise Admins added to DENY logon settings, locking all admin access
Hello, I need help recovering my Active Directory domain after an incorrect settings change was applied to the Default Domain Policy (DGP {31B2F340-016D-11D2-945F-00C04FB984F9}). A change was made to the GPO’s security policy that added multiple Deny…
Windows for business | Windows Server | Directory services | Deploy group policy objects
asked 2025-11-28T07:08:19.64+00:00
AlAguilar-2292
0
Reputation points
edited an answer 2025-12-01T01:27:11.9733333+00:00
Kate Pham (WICLOUD CORPORATION)
665
Reputation points Microsoft External Staff
Moderator
1 answer
Secured Domain Admins and Enterprise Admins accounts, now access is denied
Good day... A coworker tried to set up role-based access using our domain accounts, following a YouTube video (https://www.youtube.com/watch?v=VO2P6MiniM4). Shortly after, he was logged out, and now none of us can log into any domain-joined workstations…
Windows for business | Windows Server | Directory services | Deploy group policy objects
asked 2025-11-27T03:49:07.43+00:00
AlAguilar-2292
0
Reputation points
commented 2025-11-28T07:18:55.8266667+00:00
AlAguilar-2292
0
Reputation points
1 answer
Security Filtering shows none on denying apply on a single user
I have a group policy that has Authenticated Users and SYSTEM in security filtering. Basically I want it to apply to all users apart from 3 which are the admins. They are part of a group called IT which I was earlier added in delegation and denying…
Windows for business | Windows Server | Directory services | Deploy group policy objects
asked 2025-11-13T17:57:59.7733333+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(19.2, 76%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAG%3C/text%3E%3C/svg%3E)
Aakarsh Gupta
0
Reputation points
answered 2025-11-14T01:06:12.2366667+00:00
Harry Phan
17,360
Reputation points
Independent Advisor
6 answers
After applying the Windows Server 2016 Security baseline GPO to the domain controllers OU replication does not work (Access Dined error)
Dear Team, After implementing the Windows Server 2016 Security baseline GPO (https://www.microsoft.com/en-us/download/details.aspx?id=55319) on the Domain Controllers OU, replication functions have ceased across all domain controllers. Our environment…
Windows for business | Windows Server | Directory services | Deploy group policy objects
asked 2025-10-17T03:33:25.68+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(89.60000000000001, 52%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAD%3C/text%3E%3C/svg%3E)
Ashan Dissanayake
46
Reputation points
answered 2025-10-30T15:53:35.22+00:00
Ashan Dissanayake
46
Reputation points
2 answers
Restricting Removable Devices on Windows Server 2022
Hi, I have a Windows Server 2022 and i would like to disable the access to removable disks but it doesnt seem to want to work. Within MMC > Non-administrator policy i have set the pin 'All Removable Storage Classes: Deny all access' to enabled…
Windows for business | Windows Server | Directory services | Deploy group policy objects
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(9.6, 33%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EE%3C/text%3E%3C/svg%3E)
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(275.2, 16%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EV%3C/text%3E%3C/svg%3E)
3 answers
GPO and trusted relationships
If there is a trust relationship between two domains configured with Selective Authentication, and in domain A there is a GPO with Loopback Processing enabled in Merge mode (meaning user policies are combined with computer policies), a problem occurs.…
Windows for business | Windows Server | Directory services | Deploy group policy objects
asked 2025-10-18T17:11:53.25+00:00
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(307.2, 43%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EFG%3C/text%3E%3C/svg%3E)
Filip Gronostaj
20
Reputation points
commented 2025-10-22T17:00:13.3566667+00:00
Filip Gronostaj
20
Reputation points