Windows 10: GPO questions

Anyone knows GPO for following purpose.GPO to block automatic powershell script/ batch files from executingGPO to block renaming of mass files/ OS files

:)

 

GPO Question

Hi,





To isolate the issue, we have some questions for you:

• 
  When did this issue start?
  
• 
  Were
  there any changes made before the issue start?
  
• 
  What troubleshooting steps have you done so far?
  

We'll be waiting for your response.



Regards.

 

Server 2003 GPO questions

I solved my problem!
My first issue was the installation files that weren't running. I fixed this by enabling windows installer through the "allow select windows applications to run" option in the GPO. My second issue was turning off the GPO on the fly. Unfortunately, there is no option within the GPO editor that allows for this. However, I did create a .bat file which I can run that will insert specific registry key values that will render the GPO ineffective. I also created a "re-enable GPO" .bat file that I run after I am through making the changes, this will bring the GPO back up.
Thanks so much for your help Batou1986! *Toast :toast:

 

Server 2003 GPO questions

Hello,
I am working on a GPO in Microsoft Server 2003 for the majority of domain users here at my work and I am having difficulties achieving the results I need.

Details:
I would like to disable all programs on the domain user account except a select few. I have accomplished this through enabling "Only allow specific Windows applications to run" or something of that like in the GPO. I then added the programs I want the domain user to be able to run and it automatically excludes the rest. This worked beautifully however, I do want them to have access to a few installer files on our network drive but when I attempt to open the installer packages, I get a restriction error. More precisely, I get the same error that comes up when I try to open any other applications that are not included in the "Only allow specific Windows applications to run" field. I have scoured the GPO for about a day now and enabled every option I could think of that may allow these installations to run but I have not succeeded in finding it. Anyone have any advice?
Notes:
I have added the account I am monitoring through the GPO as an administrator on each local machine with my domain specified in the domain field.

I am also wondering if there is a setting which allows an admin to bypass the GPO while logged in as the domain user that is governed by said GPO by some form of authentication?

Let me know if any other information is needed. I will provide it as promptly as possible.

Thanks in advance for the help! *Toast :toast: