Pokazywanie postów oznaczonych etykietą gpo. Pokaż wszystkie posty
Pokazywanie postów oznaczonych etykietą gpo. Pokaż wszystkie posty

2018-04-11

Confusing gpo setting - pre-release features

Very confusing setting in gpo (one of many):

To disable pre-release features or settings You shouldn't enable this policy, You must disable it. Very, very confusing.

2018-04-10

Windows 2016 or Windows 10 - Check updates Install updates - grayed out

Strange error/configuration problem. Windows 2016 or Windows 10 (Enterprise, but it's probably connected with every SKU) - policies applied and as an administrator You can't check for updates and You can see this stupid message:
Some settings are managed by your organization
Very funny, I'm an administrator, the gpo works perfectly for Windows 2008/R2/2012/R2 but for 2016 not.
Multiple people have the same problem but for some unknown reason there are not too many solutions. The best one is here - Microsoft forum for Partners.
In a few words:
- change to Not Configured policy Remove access to use all Windows Update features;
- do two restarts;
It should work now.

2018-03-29

winhttp proxy settings - registry

Based on this blog.

To distribute proxy settings for operating system and local system processes - it can be set by gpo:

Computer Configuration > Preferences > Windows Settings > Registry

Action: UpdateReplace
Hive: HKEY_LOCAL_MACHINE
Key path: SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections
Value name: WinHTTPSettings
Value type: REG_BINARY
Value data: (You must prepare it from command line and just copy value)

How to prepare binary value? On machine with Group Policy Management Console (GPMC) - run cmd.exe in context of local administrator (run as administrator) and from command line provide command like for some bogus company:
(to avoid lost of setting - let view current setting)
netsh winhttp show proxy
(and finally set to - if it is really required - maybe Your current setting is previously set - set to anything that will be configured on machines through gpo)
netsh winhttp set proxy proxy1:8080 "10.*;192.168.*;"
During creation of setting in GPMC it will be filled up with this value