Windows 10: GPO

Ali MF · Feb 22, 2025 at 6:52 AM

Hi everyone, I have a windows 10 client that I wanna deny access to USB. I do these Computer Configuration > Administrative Templates > System > Removable Storage Access>deny all access >enable But I can't use my CD/DVD drive anymore. After that I try CD/DVD deny read access >disabled but nothing changed I can't still use my DVD drive

:)

axe0 · Feb 22, 2025 at 7:23 AM

Can I create GPO template for a non domain setup?

This might be what you're looking for AdminThing.blogspot.com: Apply GPO settings on non domain computers : Step by Step

Edwald Neo · Feb 22, 2025 at 7:23 AM

GPO for Quick Access

Dear All,

Is there anyway to set GPO to pin the following default folder to the quick access menu and prevent them from being deleted by the user ?

Desktop

Download

Documents

Videos

Music

Pictures

Thanks

Cja123 · Feb 22, 2025 at 7:23 AM

Server 2003 GPO questions

Hello,
I am working on a GPO in Microsoft Server 2003 for the majority of domain users here at my work and I am having difficulties achieving the results I need.

Details:
I would like to disable all programs on the domain user account except a select few. I have accomplished this through enabling "Only allow specific Windows applications to run" or something of that like in the GPO. I then added the programs I want the domain user to be able to run and it automatically excludes the rest. This worked beautifully however, I do want them to have access to a few installer files on our network drive but when I attempt to open the installer packages, I get a restriction error. More precisely, I get the same error that comes up when I try to open any other applications that are not included in the "Only allow specific Windows applications to run" field. I have scoured the GPO for about a day now and enabled every option I could think of that may allow these installations to run but I have not succeeded in finding it. Anyone have any advice?
Notes:
I have added the account I am monitoring through the GPO as an administrator on each local machine with my domain specified in the domain field.

I am also wondering if there is a setting which allows an admin to bypass the GPO while logged in as the domain user that is governed by said GPO by some form of authentication?

Let me know if any other information is needed. I will provide it as promptly as possible.

Thanks in advance for the help! *Toast :toast:
Click to expand...

I solved my problem!
My first issue was the installation files that weren't running. I fixed this by enabling windows installer through the "allow select windows applications to run" option in the GPO. My second issue was turning off the GPO on the fly. Unfortunately, there is no option within the GPO editor that allows for this. However, I did create a .bat file which I can run that will insert specific registry key values that will render the GPO ineffective. I also created a "re-enable GPO" .bat file that I run after I am through making the changes, this will bring the GPO back up.
Thanks so much for your help Batou1986! *Toast :toast:

Windows 10: GPO

GPO

GPO

GPO

GPO - Similar Threads - GPO

GPO

GPO

Intune GPO migration shows unapplicable

Intune GPO migration shows unapplicable

Intune GPO migration shows unapplicable

Windows 11 24H2 security baseline script error The term 'Import-GPO' is not recognized as a...

Windows 11 24H2 security baseline script error The term 'Import-GPO' is not recognized as a...

WuFB GPO options missing

WuFB GPO options missing