question

MarceloFares-3762 avatar image
0 Votes"
MarceloFares-3762 asked ·

GPOS do not apply locally through MMC.

Hello everybody.
I'm from Brazil and my English is not very good.
I have a problem on a specific computer that uses local GPOS in the user profile without administrative powers.

Basically, I used mmc.exe to add a snap-in for local group policies, linked to users without administrative powers because, I want to block access to the various functions within WINDOWS 10. Having done that, I always copied the files located within System32 as pictured below, in order to replicate the same policies and settings for all other computers. Unfortunately this company is small and does not have any domain controller. Until then, everything was ok because on other computers, the policies (copy and paste) were applied and accepted, however, on only one computer there is no way to do the same to apply the defined policies completely.

70681-1052175857-capturadetela2021-02-10as13-23-11png26c.png

I'll give you an example:
I created restrictions on access to the control panel;
Start menu run;
Access to the CMD prompt, and others.

Many of these policies that I created to block user access, do not work only on this specific computer, and all others apply. It is as if the GPOs were applied by part and not completely because many functions that I defined as blocked are respected, but others are not and it ends up being released for this specific computer. The only way that I managed to apply the restrictions to these rules above, was through GPEDIT.MSC
I ask, do you have any tips or methods to avoid or solve this problem?
I even created a new user on this computer and even then, the problem continues. I even corrected errors with chkdsk, sfc / scannow and used the dism, but nothing solved it.
Does anyone have any light for this?


windows-group-policy
· 1
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,
 

If there are any updates, welcome to share here!
Please feel free to let us know if you have any questions further.

Best Regards,

0 Votes 0 ·
FanFan-MSFT avatar image
0 Votes"
FanFan-MSFT answered ·

Hi,

I would recommend you check if there are any computer configuration on this PC.
You can check that by the gpresult command: gpresult /h report.html.
If no other configuration , you can check more details for the GPOs on the specific computer through the GPSVC.log, for more information ,you can refer to:
https://blogs.technet.microsoft.com/askds/2015/04/17/a-treatise-on-group-policy-troubleshootingnow-with-gpsvc-log-analysis/

Best Regards,

· 4 ·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Where is this file (gpresult / h report.html) saved for me to access?

0 Votes 0 ·
FanFan-MSFT avatar image FanFan-MSFT MarceloFares-3762 ·

Hi,
You can define the file location like:
gpresult /h c:\report.html
If didn't define you can find the file by :
research it in the research box, and right click it
73968-342.jpg
In my situation ,it is under (logged on with the administrator ) C:\Users\Administrator.FAB\report.html

0 Votes 0 ·
342.jpg (35.5 KiB)

Unfortunately I tried everything and nothing worked
Even applying the gpos through gpedit.msc, the policies are not applying to the user's profile. I do not know what else to do.

0 Votes 0 ·
Show more comments
MarceloFares-3762 avatar image
0 Votes"
MarceloFares-3762 answered ·

I noticed that, when I applied the policies through GPEDIT.MSC while logging in as ADMINISTRATOR, the policies were not validated for my user without administrative rights but for the administrator's profile, that is, it seems inconsistent / crazy

·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.