Windows 10: GPO Reboot Rule only Working on Some Computers?

Last Friday I set a scheduled task to reboot the computers every Monday at a time using Run: c:\windows\system32\shutdown.exe with Arguments -R -F and when today came, there were three or four computers that were totally off. Did I do something wrong?

:)

 

AppLocker GPOs marked as applied but Rules are not enforced

Hi Community,

We have been experiencing a problem with AppLocker GPOs in a Windows 10 Environment.

The Domain functionality level is: Server 2012R2

Domain Controllers are running: Windows Server 2016

Workstations are running: Windows 10 Enterprise Build 17134

We have 2 GPOs; one containing DLL AppLocker Rules and one containing EXE, Script, Appx etc.. Rules.

When running a gpupdate /force on an affected workstation and getting the gpresult the GPOs appear to be applied and are marked as winning however the contents of C:\Windows\system32\Applocker files are not being updated and recent rules added to both GPOs
are not being applied. i.e. a new application which has been whitelisted will not run for the user albeit being specified in the applied GPO.

Can someone please shed some light into this issue?

Help is highly appreciated!

Kind regards,

Jason

 

Does this computer build have compatibility problems? Opinions welcomed!

Lets start with what you're going to use this computer for, not what you want to put in it.

Rules/steps to building a computer (in chronological order):
First rule: Determine what your needs are.
Second rule: Define your budget.
Third rule: Pick parts.
Fourth rule: Review parts several times.
Fifth rule: Buy said parts.
Sixth rule: Build it.

You are on rule/step 1. Go through the list until you're done.

 

Enabling Network Discovery via GPO does not work when Windows Firewall


Environment: Windows domain

I'm trying to turn on network discovery for 100+ computers and I've created a computer-targeted GPO following instructions from this article: https://www.technig.com/enable-netwo...-group-policy/

I create a test OU and put one computer in said OU and apply GPO to the computer. I then run gpupdate /force on the targeted machine and restart the computer. I then run gpresult /scope computer /v and confirm that the GPO is being applied.

Incidentally, I didn't do the second part that's required for this to work, which is turn on Windows Firewall via GPO as per the article, but just to test I ran the GPO and confirmed that Network Discovery is turned on only when I turn off Windows Firewall manually when I check Advanced sharing settings: https://i.imgur.com/E7y9OBn.png
When I turn Windows Firewall back on, network discovery and file sharing turn off as per screenshot: https://i.imgur.com/UlJvX5E.png

So I know that my GPO is turning on Network Discovery but windows firewall is blocking it, at least when some inbound rules aren't made yet. I can't turn off Windows Firewall completely (yet) so I proceed to include Windows Firewall exceptions into my GPO as per article instructions. Note that the article suggests only to include inbound rules and not outbound.

I then include these Windows Firewall rules as a part of my network discovery GPO (I didn't bother to create a separate GPO--don't know if this might be a problem).

Anyway, I apply this GPO and I see that the computer pulls it down. The problem is with these inbound firewall rules applied both network discovery and file and print sharing and still turned off. And when I look at Windows Firewall inbound rules I see that the rules are applied and enabled but the tick box for network discovery won't turn on. When I turn off windows firewall for domain the tick box shows it's enabled. So windows firewall is preventing this from working and I don't know what rules to enable to make it work. Turning off windows firewall is the only solution but it's too global.

What am I doing wrong here? Should I have set GPO to enable firewall rule first and then set GPO for enabling network discovery a period after? In my "Network Discovery GPO" I have both network discovery and firewall rules both set. Should I split them up?

I appreciate any insight on this. I really need to get this to work. Thank you.