Search the Community

Afternoon All, Just a quick question regarding settings within windows 10, I'm trying to allow users access to some options but not all of them. For example I want users to be able to access the ease of access section (Color Filters) but because I have restricted the accounts from viewing settings this has become an issue. I have also added the following string "(ShowOnly:easeofaccess-colorfilter)" to the Group Policy. in order for them to view certain settings. Just wondered if there was a way arounds this? Thanks

Greetings to all. Apologies if this is in the wrong area. Lately ive been coming accross the same Group policy error over multiple machines. Both Windows 10 and Windows 11. Though on only select machines. And all atemps to find out whats going on are stumping me. The error is below: "The processing of Group Policy failed. Windows attempted to read the file \\******\sysvol\******\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following: a) Name Resolution/Network Connectivity to the current domain controller. b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller). c) The Distributed File System (DFS) client has been disabled." Bit of background. We have 2 domain controllers. All PC's are imaged with either Windows 10 or recently Windows 11 using SCCM. Which has been syspreped before capture. Then joined to the domain using SCCM. Have been using the same Windows 10 image for a while now, and only recently have we started getting problems. Specifically on brand new machines that are much newer than anything else we have. Ive checked for duplicate SID's and thats clear. We have no doplicates. The issue is it seems to hit at random times. We could have 10-15 machines in a room and about half of them will come up with this. Then an hour later they are working fine no issues. All PCs are the same version (Win10 Edu 22H2) going through the same switch. When i get this error, i can manually get to the policy in question and it opens fine. I look for it on both domain controllers and its there. Ive checked for duplicate SID's. DNS seems fine and resolves both domain controllers. Replication between both domain controllers seems to be working ok. DC Diag on the domain controllers shows no errors. We have a GP that specifies to wait for network before processing anything. Anything i may have missed here? As stupid as it sounds, could these PC's be too quick for the domain controllers? As they are far better than anything else we have on site. Any help would be apreciated. If this is the wrong area, just point me in the right place and ill post there. Thanks

I'm trying to apply some group policy settings to our terminal servers to restrict certain elements when a member of staff is logging to it. I have created the GPO, added the staff security group to the Security Filtering section of GPMC so that the policies don't apply to myself and other administrators, GP Modelling reports that the policies are being applied but when I log in none of them seem to have taken effect. When I remove the staff security group and revert to Authenticated Users the policies apply correctly but they effect myself and other admins (as you would expect) What am I doing wrong

Hey! Bit of a quick one - Is it possible to schedule a GPO to apply from a specific point? I can't find anything online about this, so I presume that it isn't possible, but maybe someone here knows how to work some magic! The query relates to changing proxy settings if anyone is wondering. Any suggestions are greatly appreciated.

Good morning I have recently moved all of our users home folders from an old 2003 server to a new 2008 R2 server. Their home folders used to be a path of \\Servername\Username$, they have redirected documents to these folders. I have changed the home folder path in AD to \\servername\Staff\Username and their home folder maps correctly when you browse in My Computer but the Documents folder is still redirected to the old server location which isn't available anymore. I have enforced the policy to see if that makes a difference but it looks as if Windows is using some locally cached profile data or reg entry with the old settings in. I have deleted the local profiles of some staff on some PC's and when the profile is recreated the problem is corrected. The issue is that some staff have local docs and there are about 600 PC's that will need this doing if I go down that route. Does anyone know of a solution to enforce the old profiles to take the new My Documents redirection location or is going to be a whole site local profile deletion and recreation? Many thanks Paul