Windows 10: Group policy 'Prohibit New Task Creation’ is applied and the gpo has 'won' but a standard...

Hi, I've had a need to prevent standard users from creating scheduled tasks in WindowsIn GPEdit.msc , I've set the policy 'Prohibit New Task Creation’ to enable for both user and computer policy, ran gpupdate /force, rebooted and verified with gpresult that the policy has 'won' so isn't being superseded, however on both domain and non domain joined Windows 11 machines, a standard user is still able to create a scheduled task. The other prohibit / hide / prevent policies within both Computer and user configuration > Administrative Templates > Windows Components > Task Scheduler also do

:)

 

Task Scheduler Prohibit Task Creation, Hide Property Pages GP Not Working

Hey Microsoft Guru's,

Please can you help with the following issue.

Group Policy Lockdown for Task Scheduler to prevent task creation and prevent viewing property pages of existing tasks is not working.

We are trying to lockdown users from being able to create new tasks in Windows 10 task scheduler and to prevent users from viewing the property pages of existing task scheduler jobs in the Windows 10 Task Scheduler using the standard Group Polices provided by Microsoft to do this.

However when we set the following Group Polices they do not have the desired effect and users can still create new tasks and view the property pages of existing tasks in the Windows 10 Task Scheduler.

We have tried both Computer Configuration and User Configuration policies as below but neither are working.

Computer Configuration > Administrative Templates > Windows Components > Task Scheduler

Hide Property Pages



Prohibit New Task Creation

User Configuration > Administrative Templates > Windows Components > Task Scheduler

Hide Property Pages



Prohibit New Task Creation

The property pages help for the policies above state the following.

Requirements.

Windows Server 2003, Windows XP and Windows 2000 Only

We are attempting to get these Group Policies working in a Windows 2016 Server and Windows 10 Workstation Environment.

Please can you let me me know if anyone has successfully managed to get these polices working in a Windows 2016 Server and Windows 10 Workstation Environment.

Many Thanks in Advance for your help.

Dan

 

GPO Override Policy Not Working

Following up with class in which we are making an Google Chrome Settings Override GPO for a local group -- added it at the group level; not the higher domain level. This should override the domain's (high-level) GPO that prevents downloads, prevents incognito
mode, and restrict access to netflix.com. This is according to Windows' Group Policy API documentation (Overriding and Blocking Group Policy).

When looking at the group's "Group Policy Inheritance" tab in the Group Policy Management tool from the Server Manager (Wins 2012), I am seeing that the override GPO takes precedence over the previously applied restrictive settings from the higher domain
policy. This is what we want.

However, when logged into a domain client -- with the credentials of the intended local group member -- the local group policy is not listed in Chrome://policy. The browser is still blocking netflix.com, downloads, and the use of incognito mode.

I restarted the client computer many times and ran the gpupdate /force script and successfully updated the policy several times. I also went as far as to enforced the GPO in the inheritance table for the local group taken precedence over all other GPOs.

Nothing is happening. HELP!

 

Windows 10 Group Policies - Newly created user GPOs do not apply

Hi all,

I'm after some help with a problem I've started to encounter. Windows AD domain (2012R2 DCs, but 2003 functional level), starting to provision Windows 10 (1703) clients. GPOs applied at container levels within the OU. As of about a week or so ago, any
group policy created to apply to a user object does not apply. GPO applying to Computer Objects apply instantly. If I create a GPO that solely contains a drive map (start simple), this doesn't apply, GPRESULT doesn't show it being denied or empty etc. Using
the GPMC results tool produces the same result as that on the physical workstation.

What seems odd is there were no problems a couple of weeks ago, I could create new User GPOs and they would apply, now it's like they don't exist. The corresponding GUID folder appears in the sysvol directory for the new GPO and permissions look as expected.
Sysvol and Netlogon UNC paths have been excluded from hardening, KB3163622 is not applied to any client. There is no WMI filtering applied, permissions appear fine (auth users, read and apply GPO).

I am aware there have been a lot of community posts from people experiencing problems with GPOs and Windows 10, but the problem I have seems another level, it doesn't even seem to be aware there should be a GPO applying. I'm at a bit of a loss where to
go next and would be hugely grateful for any advice that could be provided.

Best Regards,

Rob