ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login
    1. Topics
    2. Tags
    3. ou
    Log in to post
    • All categories
    • wrx7mW

      Group Policy - HKCU Registry Update (via GPP) For All Users, Only on RDP Server

      IT Discussion
      • gpo group policy gpp ou windows security filtering • • wrx7m
      19
      0
      Votes
      19
      Posts
      2.4k
      Views

      ObsolesceO

      @wrx7m said in Group Policy - HKCU Registry Update (via GPP) For All Users, Only on RDP Server:

      @Obsolesce said in Group Policy - HKCU Registry Update (via GPP) For All Users, Only on RDP Server:

      @wrx7m said in Group Policy - HKCU Registry Update (via GPP) For All Users, Only on RDP Server:

      t only applies the setting when linked to the OU of the user

      We'll according to that screenshot, it IS a user setting.

      Yeah. I want all users or a group of users who login to the RD00 server (and only this server) to have this GPP modifying HKCU to apply. Is it even possible?

      Yes, it's possible.

      Ensure the GPO is applying to the user. For example, if User1 is in the Company > Users OU, then make sure that GPO is either in Company or Users OU and the Users OU is inheriting the GPO. Verify with RSOP and gpresult that user is getting the policy.

      I think, but it's been awhile since I did much with AD GP... (like you are in the screenshot) use item-level targeting to the server name.

      Test it by having one of the in-scope users log on to a difference server, run gpresult and see if it's applying, then try it on the targeted server and see if it applies then.

    • wrx7mW

      Any Way to Automate Adding a New Computer to an AD Group?

      IT Discussion
      • windows 10 windows server ad active directory gpo mdt powershell ps pdq deploy ou task sequence • • wrx7m
      32
      0
      Votes
      32
      Posts
      8.5k
      Views

      F

      @marcinozga said in Any Way to Automate Adding a New Computer to an AD Group?:

      @flaxking said in Any Way to Automate Adding a New Computer to an AD Group?:

      @marcinozga said in Any Way to Automate Adding a New Computer to an AD Group?:

      Ansible can do that. https://docs.ansible.com/ansible/latest/modules/win_domain_group_membership_module.html#win-domain-group-membership-module
      You can add new PCs to domain, and change their group membership, you just need to know computer names in advance.

      Which is just a layer on top of Powershell. The Active Directory Powershell module is still required.

      It's not required, or that module is included already in Windows 10 by default. Because I haven't had to install it on any machine I managed with Ansible.

      "win_domain_group_membership requires the ActiveDirectory PS module to be installed"
      https://github.com/ansible/ansible/blob/devel/lib/ansible/modules/windows/win_domain_group_membership.ps1

      They have it in the documentation as well "This must be run on a host that has the ActiveDirectory powershell module installed."
      https://docs.ansible.com/ansible/latest/modules/win_domain_group_module.html

    • 1 / 1