8 Best Group Policy Settings

[@Britec09]

Let me know below what policy's you use? Drop us a LIKE 👍

[@ShahnawazKhan1529]

I want protect all these for other user not Administrator, only Administrator can access full features

[@ShahnawazKhan1529]

I am doing same settings but i want to use this settings for other local user

[@PaulNikollaj]

Hi Sir, how do I exclude people from setting up my laptop into a group work group. Im getting hacked and the person is putting my computer into a work group and watching everything I do. They seem to hack me through the Wifi of my modem. Thank you for any help you can give me. This a personal laptop and I never signed up into a group work policy.

[@georgemariano2926]

These are great tutorials. Any extra help to protect your PC is always good! To many bad people out there. As always good info for us less techies. Keep it up, any settings that help secure your PC is always great info.

[@adelbneil7311]

Excellent info on Policy settings. Looking forward to more videos on Policy Editors. Cheers

[@nick92065]

We sett all of these and more. great video.

[@andreaszetea-ster900]

Definitely would like more of this type of content. Great job on this. Maybe if you coulf also recommend some good books on sysadmin topics or thst you learned from, thst would be great. Thanks for the content

[@Deleteyourself83]

You forgot an important one. Turning off Windows diagnostic data.

[@dtmbmw325i]

I like these types of videos. Maybe some videos with the Microsoft Security best practices, CISA, and NSA settings.

[@rexsaavedra4743]

do you have a video policy for other users of my pc?

[@welshtony1]

So this is how certain things on Works and School computers have been blocked. Good to know lol

[@Britec09]

Yes sir

[@baersumaguinajr.7340]

hi! this is very informative video. i have a question can i do this in admin account? does it still prevent admin acc like preventing admin acc to open cmd if i disable it in LGP?

[@davidaderonmu5604]

great video trying to be come IT support administrator, can all this local policy be pushed out via domain controller ?

[@Ratchet_effect]

Brian! you should do a video on how to add group policy editor to windows 10/11 Home edition. There is a number of ways I'm sure users would appreciate being shown 👍🖖

[@ethimself5064]

Just a mention - Never buy a Home Edition

[@NathanS22]

There’s hundreds of websites and KZbin videos showing this.

[@Ratchet_effect]

@@NathanS22 But do they have Brian's KZbin channel showing how to? & he is a Computer Tech channel so it would be fitting?

[@Ratchet_effect]

@@ethimself5064 This is true! 👍

[@Britec09]

I will take a look at the TOS

[@777AndrewR]

Excellent video more videos like this!

[@BBK12121]

I love it, good things to find out ! keep doing it !

[@billpapadopoulos9650]

will these changes in group policy also affect the the main user of the computer ?

[@davidfishwick5573]

By default, the policies applied in User configuration are applied to all users, including admin. However, you can set it to only apply to specific users: for example, you could state that a certain user cannot run control panel or PC settings, while other users can. To do this, you have open mmc.exe, and then adding the local group policy snap in, then select browse and it will come up a list of all users and groups. Select the user or group to apply to and any polices you configure (including SRP policies) will then be applied only to those you specify.

[@georgemariano2926]

Have a question, in one of your videos you said that if you let Microsoft reinstall Windows it will install Win 11 22 H2. Built a computer for my kid 2 years ago and Windows update said that it was not compatible with Windows 11. When I went into the UEFI I found out that TPM was disabled by the default. When I enabled it and restarted the computer Windows update said that it was now compatible with Windows 11, but my kid would not let me install it because he liked win 10 . So the question is, and this may be a video you may want to make, if you go into the UEFI and disabled TPM will Microsoft install Win 10 as it will see your computer is not capable of supporting Win 11? But if you already have win 11 as your OS and disabled TPM will your computer even boot up at this point? That is why I am asking you because if there is a workaround for this I know you will be able to find it. This would be a good way to get Windows 10 back if you do not like Windows 11. Thank you for your time and you keep up the good work, I never find any of your videos uninformative.

[@OMNS777]

Perfect! Cheers mate 😊

[@techman2192]

Please make more videos on GPOs definitely enjoyed this

[@ssist01]

@Britec09 if I want to exclude lets say It group, as they need to use cmd etc. What is the best way to bypass group policies?

[@mohamedeladl6273]

thanks, who can i do not discover active directory partition from clients machine?

[@cwcole]

I use Drive Map, Folder Redirection, Remoted Desktop (enable/disable), Point and Print Restrictions, Account Policies/Account Lockout Policy, Password Policy (Default Domain Policy) and others. Be careful with local Group Policy. You can lock yourself out of the Group Policy editor and its headache getting back in.

[@h.bankruptcy]

Please make video regarding windows 10 version update which being blocked by my organization using group policy "Target Release Version for Feature Updates" & "intranet update service for detecting updates" ....Please help me to solve this issue. Thanks

[@galvanizingtechniques1111]

I can't click nothing in the os windows app to change anything it kicks me out if the mode to do so any solutions..

[@John-uf4hp]

But it keeps reverting to back after i restarted My PC..they gain access again yo control panel.

[@agadhrp6772]

If we disable command prompt access, would that impact certain game installations?

[@Grimoor]

after enabling, my control panel still works, doe's that mean people on the network can't access it?

[@trusttech9942]

If the user attempts access to the blocked areas, will they receive a prompt for admin credentials?

[@Britec09]

it will give them a blocked message

[@ijo680]

Thanks for sharing

[@ethimself5064]

Could you do a vid in the Terms and Conditions of TikTok? When I saw them they literally blew me away. It seems incredible that it is not banned in at least the Western World all things considered. Thanks

[@Robinrpv]

Greetings Brian, could you tell us more about " usb selective suspend settings windows 10" and what it does, reason for asking, when I play a game (Tom Clancy's Ghost Recon - Wildlands) and at odd times my mouse will stop responding and I have to unplug it and put it back to get it working, I have no idea what is doing this, driver updates, driver conflict, software issues... I us the ROCCAT KONE [+] Gaming Mouse, This is getting totally frustrating to a point of buying another mouse, any suggestions PLEASE, I have just reinstalled Windows 10 Pro, It happens regardless and my mouse works just fine on another pc with W11. Regards Robin.

[@Therealryu10]

in regards to the user installs GP, is this a given already if the user is not an admin??? as im typing i realise there are some applications whic can be installed without admin priveleges...lol thanks anyway great vid :D

[@thelamb288]

Is there a way to do these types of things on Windows 10/11 Home or should I just get the Windows 11 Pro when I do update? Cheers.

[@EricSAlbright]

The Lamb: Everything you can do in Group Policy, you can do by directly editing the registry, but I would not recommend that...

[@thelamb288]

@@EricSAlbright I do not mess with the Registry...EVER! :D . Thanks for the reply tho. Cheers.

[@medosasa4580]

why I didn't find Windows store in drive c?

[@josephjenkyns4162]

Can you do full co figuration video for a work group

[@safwansyed4521]

I love these video's please keep it coming!!

[@zeljko2874]

Interested. Great video

[@ShahnawazKhan1529]

This is work far all user including Administrator also. How we can do same settings for other local user eccept Administrator

[@brandycorvette]

Thank You For The Video Much Needed.. Would Love More Videos On GPO as Admin I Needed This The Most... 🤗 🥰 ❤️

[@Britec09]

Glad it was helpful!

[@ethimself5064]

How does one keep from locking themselves out?

[@eddietours3728]

more videos sir pretty good thanks

[@Britec09]

Thanks

[@ShahnawazKhan1529]

I want protect all these for other user not Administrator, only Administrator can access full features

[@kg3474]

Thank you!

[@Britec09]

You're welcome

[@John-uf4hp]

This is My Settings, first i disable control panel, second disable regedt,registry editing tools. and lastly disable gpedt..by system32 so no one could gain access..

[@awaiz12346yt]

Cool!

[@Britec09]

Thanks

[@yosser33]

Hi sorry to bother you. I recently had to go back to windows 10 from 11 because of stability issues. I am just wondering if Microsoft have fixed this issue? and is it safe to go back to windows 11?

[@lifeisallaboutperspective9617]

thanks

[@Britec09]

Welcome

[@davidjamgochian]

Great advice!!!!

[@robinextraco]

good

[@nicholasbackwell1869]

DON'T SKIP! Can you collaborate with Awesome Open Source and IBRACORP on their new playlist starting a business with open source They just did a video on Zentyal as a domain controller alternative to Windows Server and I would love to see more GPO videos to implement once my server is up

[@Doc-z1s]

These are basic. More basic and continue from there with other essentials and recommended edits.

[@welshtony1]

1st Member... hahaha

[@ethimself5064]

477 th 😎

[@welshtony1]

@@ethimself5064 haha yep, it was a joke comment to curb all the 1st comments haha

[@ethimself5064]

@@welshtony1 🤣🤣

[@Britec09]

I am always first

[@ethimself5064]

@@Britec09 I would bank on that🤣

[@Gordonseries385]

👍

[@SimiRagia]

Hi

[@louf7178]

Off topic and a long shot, but doing a video using Task Scheduler by event (Win10) for after a program ran. E.g. Task Scheduler Custom XML trigger: *[System[Provider[@Name='Microsoft-Windows-Security-Auditing'] and (band(Keywords,9007199254740992)) and (EventID=4689)]] and *[EventData[(Data='C:\Program Files (x86)\WinTV\WinTV7\AppName.exe')]] The specific program "and" portion always gets kicked out of the XML. (Process Tracking reminded me of this; open files must be enabled, also)

[@TyrantExterminator1776]

WHO WON'T have ACCESS, Someone PHYSICALLY USING YOUR PC or a HACKER? And then does that mean I WOULD NO LONGER HAVE ACCESS TO USING THEM?