Windows 10: Password Policies in Domain not Applying to Workstations

We are trying to apply some changes to the password policies for the domain users.We have verify everything from scope, delegation, inheritance block and still can't seem to find the issue. Which is that whenever the user tries changing the password using CTL+ALT+DELETE it won't allow them do to "complexity requirements".The only problem that we can identify is that when we run "gpresult -v" in an elevated CMD we get this result:But when we run an export with "gpresult /H %userprofile%/result.html" we get this output:

:)

 

Win10 domain workstation, "currently no power options available", tied to group security policy and remote desktop connection

Hello Windows community.

I know there are many threads about the issue of the dreaded "There are currently no power options available." But I haven't found one that fixes my problem.

Initial issue: Windows 10 Pro PC's, connected to a work domain (Windows Server 2012), get the "There are currently no power options available" message when trying to shutdown or restart the PC.

Action taken: Group Policy Editor > Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment > 'Shut down the system' ... The only way to add the user to the list of users for this policy, is
to log on to the server itself, go into Group Policy Management Editor, delve into the domain controller, find the policy, and add the user there.

Result: After restarting the Win10 Pro workstation, the power options are now available from the start menu. Yay... HOWEVER...

New issue: If I use "remote desktop connection" on the workstation, and connect to the server, the user now has the permission to access restart and shutdown options from the start menu for the server itself... Which is not acceptable. We
can't have people accidentally turning off the server through their remote desktop connection (which is used frequently, in order to access MYOB on the server).

EDIT Question: How can I add "users" to this policy for only the workstations, and not when they are connected to the server through Remote Desktop Connection?

Additional information:

• EDIT: I noticed on
  Technet, that the defaults for the policy is different depending on whether it is for "workstations and servers" or for "Domain Controllers". The "Workstations and servers" policy includes the group "users", whilst the "domain controllers" policy does not.
• Windows 7 Pro PC's, connected to the domain in the exact same way, do not have the issue. All users on Windows 7 PC's are not added to the security policy, they CAN access shut down options for their local PC, but CANNOT access shutdown options for the
  server during a remote desktop connection. This means it is working as intended for Windows 7 Pro PC's.
• The current list of users and groups that are listed in the security policy is as follows:
  • Administrators
  • Backup Operators

Thank you in advance for any help.

Sincerely,

Jeremy

 

UnattendedJoin error: failed to find the domain data (0x6e)

Thanks for the suggestion! I don't want to add a domain account, as this is a generic unattended install that will be used for all company machines. Do you think it's possible that the computer would join the domain if, instead of using UnattendedJoin in specialize, I used your steps but left out the specific account?

The other thing I was thinking was to use a generic account to allow the domain join during the specialize step. I added a machine password in the UnattendedJoin component, and instead of getting the error listed above, I got an authentication error, which makes me think I could probably do a secure join instead of the unsecure join.

Thoughts?

 

Accessing Password Policy in Windows 10

Hi,

Thank you for posting your query on Microsoft Community.

I understand that you would like to set Password policy. We will assist you to resolve the issue.

To assist you better, I would like to know what happened when you try to change the policy. Did you get any error message?

I suggest you to follow the below steps and check if it helps.

You must log in as administrator to access these settings.

• 
  Press Windows key + R and type secpol.msc
  and press enter.
  
• 
  The Local Security Policy window will open. Now from the left pane, choose
  Password Policy from under Account Policies.
  
• 
  On the right side, choose Maximum password age.
  
  
• 
  If you wish the password to never Expire, set the value to
  0.
  

Hope the information helps. Let us know if you need further assistance. We will be happy to help.

Thank you.