Windows 10: Event ID 5136 for group policy changes by NT AUTHORITY\SYSTEM

Discus and support Event ID 5136 for group policy changes by NT AUTHORITY\SYSTEM in Windows 10 Gaming to solve the problem; Hi, I would like to understand, why and in what circumstances NT AUTHORITY\SYSTEM do the group policy changes in AD. This question popups after I... Discussion in 'Windows 10 Gaming' started by Prabagaran Achannan1, Jun 30, 2022.

  1. PRABAGARAN ACHANNAN1
    Prabagaran Achannan1 Win User

    Event ID 5136 for group policy changes by NT AUTHORITY\SYSTEM


    Hi, I would like to understand, why and in what circumstances NT AUTHORITY\SYSTEM do the group policy changes in AD. This question popups after I filter out the event log: 5136.Thanks.

    :)
     
    Prabagaran Achannan1, Jun 30, 2022
    #1
  2. GOATBERG
    Goatberg Win User

    NT AUTHORITY\Authenticated Users added to Users group upon every restart

    I have a Windows 10 computer that I would only like certain users on a domain to be able to login to. Lets say limit access to only those users in the group named football.

    I have added the football group to the Windows users group. The computer is on a domain and I noticed the following two groups both of which I removed from the Windows users group.

    • NT AUTHORITY\Authenticated Users
    • NT AUTHORITY\Interactive
    I have tested that NT AUTHORITY\Authenticated Users is allowing users outside of the football group to login to the computer and this is not wanted.

    If I remove both of these groups from the Windows users group then they will reappear upon every restart of the computer. This did not have with Windows 7. This seems to be a security problem???
     
    Goatberg, Jun 30, 2022
    #2
  3. LEON SOL
    leon sol Win User
    NT Service\TrustedInstaller & NT authority\system

    is "NT Service\TrustedInstaller" the same thing as "NT Authority\system"? can you log into "NT Athority\system"?

    i understand that "NT Service\TrustedInstaller" is not a user, i under stand that "NT Service\TrustedInstaller" is just trustedinstaller.exe with a temporary user ID.

    i know that i cannot log into "NT Service\TrustedInstaller".

    when i say "log into" i mean: "go into the user account and open file explorer's desktop and make it act like a normal user"
     
    leon sol, Jun 30, 2022
    #3
  4. ELISEM_456
    EliseM_456 Win User

    Event ID 5136 for group policy changes by NT AUTHORITY\SYSTEM

    NT Service\TrustedInstaller & NT authority\system

    Hi, I'm Elise, an independent advisor and I'd be happy to help with your issue.

    You can't log into either, NT Authority\System is actually a user group as well.

    These are both mostly used by various system services.

    Kind Regards,

    Elise
     
    EliseM_456, Jun 30, 2022
    #4
Thema:

Event ID 5136 for group policy changes by NT AUTHORITY\SYSTEM

Loading...

  1. Event ID 5136 for group policy changes by NT AUTHORITY\SYSTEM - Similar Threads - Event 5136 group

  2. Group policy changes are not being applied

    in Windows 10 Software and Apps
    Group policy changes are not being applied: Hello all,I have a Windows 11 Home. Initially it did not have a gpeditor built within it. However I run the code below as a bat file to install gpeditor. It runs normally, but any change that I do to any policy does not have any effect even after I restart my computer. Does...

  3. Event ID 5136 - NT Authority/SYSTEM modified the default domain policy

    in Windows 10 Gaming
    Event ID 5136 - NT Authority/SYSTEM modified the default domain policy: HelloI have auditing of GPO changes turned on. While we have password complexity enabled, while being audited it was found to be disabled.After searching the logs from the GPO modified date, we found that it was the SYSTEM that made the changes. Leaving 2 entries. one for...

  4. Event ID 5136 - NT Authority/SYSTEM modified the default domain policy

    in Windows 10 Software and Apps
    Event ID 5136 - NT Authority/SYSTEM modified the default domain policy: HelloI have auditing of GPO changes turned on. While we have password complexity enabled, while being audited it was found to be disabled.After searching the logs from the GPO modified date, we found that it was the SYSTEM that made the changes. Leaving 2 entries. one for...

  5. Event ID 5136 for group policy changes by NT AUTHORITY\SYSTEM

    in Windows 10 Software and Apps
    Event ID 5136 for group policy changes by NT AUTHORITY\SYSTEM: Hi, I would like to understand, why and in what circumstances NT AUTHORITY\SYSTEM do the group policy changes in AD. This question popups after I filter out the event log: 5136.Thanks....

  6. Event ID 5136 for group policy changes by NT AUTHORITY\SYSTEM

    in AntiVirus, Firewalls and System Security
    Event ID 5136 for group policy changes by NT AUTHORITY\SYSTEM: Hi, I would like to understand, why and in what circumstances NT AUTHORITY\SYSTEM do the group policy changes in AD. This question popups after I filter out the event log: 5136.Thanks....

  7. Change Microsoft Edge Policy in GPEdit (Group Policy)

    in Browsers and Email
    Change Microsoft Edge Policy in GPEdit (Group Policy): Hi forum I want to disable two Edge policies below, but I can't find anything in GPEdit (Group Policy)! Any help? (Current Edge version : 91.0.864.37 Stable x64) Microsoft Edge Browser Policy Documentation | Microsoft Docs Microsoft Edge Browser Policy Documentation |...

  8. Group policy fails with event ID 1058 and 1129

    in Windows 10 BSOD Crashes and Debugging
    Group policy fails with event ID 1058 and 1129: Hi Guys,We ran into the weird problem or can say known problem to some people. In our scenario, we have 2 DCs and both in replication mode.Recently we've had sporadic student profile issues. The main symptom of the issue that is reported is that they can't get to any...

  9. The processing of Group Policy failed, Event ID 1058

    in Windows 10 News
    The processing of Group Policy failed, Event ID 1058: [ATTACH] [ATTACH]Error message The processing of Group Policy failed, Event ID 1058 occurs in Windows Server, when the OS is not able to read the file from a domain controller. The Group Policy service reads the information from Active Directory and [...] This post The...

  10. Local Group Policy Issue. Policy not changing. Glitch?

    in Windows 10 Support
    Local Group Policy Issue. Policy not changing. Glitch?: Hello everyone. This is my first post to this forum. I hope someone can help me out. I am having a problem with Local Group Policy. I have been experimenting with this just for learning purposes and I am stumped by something. One of the first things I tried doing was removing...