Windows 10: Security Center, GPO is not applying

The security center has recommendations to implement, and we completed a few on some test laptops before putting in production. The security score didn't go up for a setting after a few days, so we dove into it. An example would be the GPO named "Security Improvements, with a setting ""Scan all downloaded files and attachments" not applying. The GPO has 4 settings, including that one. We see the policy applied to the computer and in RSOP, and we see the other 3 settings applied and the security center listing those improvements. The example is nowhere to be found, hence why our security s

:)

 

How to apply GPO to specific server in SERVERS OU?

• Servers OU - contains all servers, including server1. Main OU for applying GPOs on servers. So, shifting server1 to another OU isn't an option for me.
  
• Users OU - Contains all users.
  

I want to apply a GPO to server1, that will run a logon script when users log in to it. Others servers should not be affected.

How to do it?

What I have done.

- Created GPO, set user Logon script, enabled loopback policy with the merge option in Computer Configuration.

- Applied the GPO to Servers OU.

- Set the security filtering, and added server1, given permissions are Read, Apply GPO.

- Removed Authenticated users.

What is wrong here?

 

GPO for Automatic Updates doesn't seem to be applying


Howdy,

I'm trying to create a GPO to point our Windows 10 machines to our WSUS server and then use Automatic Download and Install during a maintenance schedule.

• I've gone under Automatic Maintenance Activation Boundary and set that to 13:00 (1PM) for testing.
• I've gone under Maintenance Random Delay and set that to 1 hour

• I've gone under Config Automatic Updates and set it to 4 (download and install). I also set day to Saturday and time to 13:00 (1PM) but I don't know how this affects the Maintenance Boundary up above...
• I've gone under Specify Intranet Site and put in our WSUS server.

Anyway, I then ran a GPUpdate on my laptop which worked and gpresult says it applied the setting. However, when I go under All Settings | Update & security and then click Advance Options, it still shows "Never check for updates" which is what our normal GPO for everyone else uses. I put my machine in a sub-OU and assigned the test GPO to that sub folder. The main WSUS GPO is not Enforced and the test GPO is Enforced.

Should that dropdown change to reflect the current settings? Is there some other way to tell if the settings are applied correctly? I don't want to click "Check for Updates" because that usually checks and installs which is NOT what I want to do. I want to test the automatic install portion but can't tell if the right settings are in place or not.

I hope that all makes sense. Let me know if I can provide any other information.

Thanks!

 

Windows keeps turning off the security center.

Hi Maninder,

I suggest you to follow the steps below and check if it helps.

• Press Windows key + R and type Services.msc then hit enter.
• Services Console will appear.
• Find Security Center Service on the right details pane > right click it choose properties >
• Security Center Properties should appear > on the General Tab

set start-up type to automatic (Delayed start)

• On service Status Stop and then Start.

If this does not works & error still continues then there are more chances that your system is infected

Let us know the status of the issue in regards with Security Center. Your reply is important to assist you further.

Regards,

Guru Kiran