question

AakashShah-9311 avatar image
0 Votes"
AakashShah-9311 asked LimitlessTechnology-2700 commented

GPO Not working

Hi there,

I am trying to configure "desktop shortcut" GPO for a Google Chrome web page but its not working for a user /or security group. just work for workstations.

if I add workstation it will show up in the gpresult /r but for user its not even showing up.

User Configuration GPO is configured still its not applying to users/groups instead applies to workstation. am i making any mistakes?

please help. thanks

133132-image.png

133161-image.png


windows-group-policy
image.png (107.0 KiB)
image.png (63.7 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

yagmoth555 avatar image
0 Votes"
yagmoth555 answered AakashShah-9311 commented

Hi

Make sure domain computer got read in the delegated tab. If you apply a security group and remove authenticated user, the computer account can't read the GPO to apply it.

Thanks

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

HI thank you for feedback.

But can I just apply GPO's to security group(s)? I want a particular security group(few users) to only have this GPO applied not everyone.

Thanks

0 Votes 0 ·
LimitlessTechnology-2700 avatar image
0 Votes"
LimitlessTechnology-2700 answered LimitlessTechnology-2700 commented

Hello

Thank you for reaching out.

Yes, you can apply GPO to particular Security Group.

  1. Please check if the User is member of that Group and also Computer account is in that Group and OU which you want to apply this GPO.

  2. On the Client computer please run gpupdate /force then gpresult /h C:\test\gpresult.html to check if the GPO has been applied to that user and computer account.

  3. Please have a look on below Microsoft threads discussing the same about chrome shortcut.

https://social.technet.microsoft.com/Forums/en-US/ad48c7fd-e538-4222-a108-d2e46aebb4e5/how-to-configure-url-shortcut-in-chrome-by-gpo?forum=winserverGP

https://social.technet.microsoft.com/Forums/windowsserver/en-US/3682addf-2fce-4e80-a56a-d9179581b17b/group-policy-using-to-create-chome-shortcuts?forum=winserverGP

Hope these helps to resolve the issue.

Thanks

· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thank you for your response.

For Point #1 I have users added to the security group. Should their computer account/object should also be added in that security group? Also the GPO is applied to workstation OU. thanks

0 Votes 0 ·
cthivierge avatar image cthivierge AakashShah-9311 ·

The computer account must be able to read the GPO.

If the GPO is linked to the Workstation OU and the computer account is in that OU, you must be sure that the computer account (or a group where the computer account is member of) is added to the delegation tab. The computer account should have Read / Apply Group Policy permissions (on the advanced tab)

The users should be under the OU where the GPO is linked. If in the OU Workstation, you only have computer accounts, it's not going to work. You may need to link the GPO at a higher level or link the GPO on the OU where the user is located as well as the computer is located

0 Votes 0 ·

Hello,

Thanks for reply,
Normally you should add user or group if you want apply for users only.

But in your case for troubleshooting purpose try to add computer account as well to narrow down the issue.

Thank you.

0 Votes 0 ·