Windows Server 2019 Group Policy Explained

[@grbknt]

I really enjoy how you are performing your lectures and I am getting directly the meaning of them. I am a Cyber Security Consultant working on Azure AD and your lectures for Windows Server AD helped me perceive how things are working on-prem and on the respective services of cloud. Keep up with those videos, you are a gold standard in instructing.

[@AndyMaloneMVP]

Aw that’s so kind thanks so much and it’s great to hear you’re enjoying my channel 😊👍

[@Binara]

This is amazing. I was looking for a good understanding of the GP. You actually provided a foundation instead of showing this is how you do a particular task. Now I am not scared of Group Policy management. Thank you!

[@AndyMaloneMVP]

You are very welcome and thank you 👍

[@user-yy2ke6gx5h]

This is exactly what i have been looking for , thanks for the extraordinary explanation !

[@Rohullahwardak1]

Thank you very much Mr. Andy for serving us. It was very helpful. Appreciate you

[@MohamedIbrahim-pw2tm]

Big thumbs up for you Mr. Andy Malone. Really it was very helpful to me. I am expecting more videos from you.

[@AndyMaloneMVP]

Very kind of you. Yes I have plenty of content 👍😊

[@supriyochatterjee4095]

Very very important information and video, waiting for all your videos on Windows Server series relevant to Windows Server Migration, Windows Server OU MIGRATION, Windows Server Provisioning, Windows Server Certificate Creation and Generations and Installation, Windows Server Backup Management, Windows Server Automations using Powershell and various other technical troubleshooting scenarios for Windows Server

[@AndyMaloneMVP]

Thanks for the requests. This will keep me busy forever 🤣😂 I hope you enjoyed the video

[@DaniLearnsIT]

I am so glad I found another video of this topic with you Mr Malone! I think something that would've been amazing to cover in this video is the use of the loopback configuration for computers! Some settings only show up for users and this was confusing at first 😭

[@JaysonPakkam]

Thank you so much Sir. You teaching method so very clear and clean. Hoping that you have a full video for the Windows Server 2019 that guide us to learn further more. It's really a massive appreciated to share with us. More Blessings to you and Thanks a lot Sir. :)

[@75579e]

I've been looking for a useful lesson like this. Awesome!! I greatly appreciate your help!

[@SilvermanMan]

The best tutorial ever in terms of group policy

[@AndyMaloneMVP]

Thank you most kindly 👍😊

[@MOHAMEDMOHAMED-ch3ur]

Thanks Andy well done GPO

[@AndyMaloneMVP]

My pleasure and thanks 👍

[@pravinlipare2920]

Thank you Sir, This was amazing video. I am new to this Windows Server and the way explained it has answered many of my questions. Thank you very much. Appreciate for uploading this informative video.

[@mrbillyrubens]

Excellent explanation. Well done Sir.

[@AndyMaloneMVP]

Thanks 😊

[@soxesh]

Thank you very much for detailed explanation with such an ease. Best video on this topic.

[@AndyMaloneMVP]

Glad it was helpful!

[@silas5809]

Very clear and precise. Many thanks

[@AndyMaloneMVP]

Thanks, and you’re very welcome

[@mikekorsak373]

This was very insightful and helping - thank you very much.🌟

[@conaxlearn8566]

This is great stuff. Would be even better if effects of GPO applied is demoed. I created a domain of VMs in Hyper V and configured a few settings in the default domain policy but they didn't seemed to be updated to the domain computers. For example, I created a Drive Mapping under User Configuration->Preferences->Windows Settings->Drive Maps, which maps a shared folder on the domain controller that Everyone has read access. But after logging onto a domain computer, I didn't see the mapped drive. I might have totally mis-understood how this should be configured...

[@ajaylohar404]

Thanks Mr. Andy it was really very helpful very easy to understand. Keep continue...

[@AndyMaloneMVP]

Thanks so much, and I’ll continue to do my best for you 😊 👍

[@wigglywrigglydoo]

This was a wonderful presentation, well-paced, well spoken and very informative. I wish you would cover the last bit about the resultant policy inheritance, what the ordering and numbers on that tab means, and which of the two enforced (higher up and lower down) policy will take precendence and if they will merge. Second, I cannot wrap my head around User Configuration setting in a GPO linked to the top level computer OU for example, and if security filtering will let me filter the policy to apply onto to specific users in a security group that logon to all computers under that computer OU.

[@AndyMaloneMVP]

Great suggestion, I'll add it to my request list :-)

[@DailyLearnings1]

This video was awesome to refresh knowledge. I was expecting some words around LSDOU maybe you can cover up later

[@AndyMaloneMVP]

Noted

[@erikpalacios01]

Great explanation! I appreciate you share your knowledge.

[@AndyMaloneMVP]

Glad you enjoyed it!

[@tech-n-data]

Clear and concise. Excellent, thank you.

[@peacekeepermoe]

Your videos are great, learning lots. Keep them coming. Subscribed :)

[@AndyMaloneMVP]

Absolutely and great to have you on board👍😊

[@heranfahmy3975]

Thank you sir it was very useful you cleared a lots of things

[@AndyMaloneMVP]

You’re very welcome and thank you

[@danielk938]

Awesome Video! Thanks Andy :)

[@AndyMaloneMVP]

My pleasure!

[@barrybartlett5047]

Excellent! More Please using actual VMs and seeing them applied.

[@stephenolsthoorn7871]

Andy, just found your series and really enjoy them. Question; when reviewing Azure AD, is there any type of canned microsoft report or download that would highlight each individual user showing each individual group and each individual application that they are associated with? The purpose would be for a regular review of those membership to ensure the appropriate allocation of each based on current job role (to account for transfers etc within the organization). The Governance reviews appear to only be purposeful for 'approve' or 'deny' decisions from the license as a whole but not from sharepoint groups, distribution lists etc. Going through one by one is rather tedious, as you can imagine.

[@AndyMaloneMVP]

Okay so you’re talking Microsoft azure active directory. The only thing that comes to mind, is the group policy analytics tool which is currently in preview which is part of Microsoft and point manager a.k.a. Microsoft in tune. But you will need additional licenses for this beyond that I’m not sure. I hope this helps though. Thanks again and all the best.

[@stephenolsthoorn7871]

@@AndyMaloneMVP Thank you Andy, I will give that a try. Great job on the videos btw, very informative and it is a pleasure listening to you explain the concepts in a 'down-to-earth' fashion!

[@AndyMaloneMVP]

@@stephenolsthoorn7871 Thanks so much Stephen I really appreciate it. And great to have you on board.

[@miktham]

Excellent explanation sir

[@AndyMaloneMVP]

Thanks and welcome

[@temp_name_01]

Thank you!

[@itmallen4488]

Great video. Thank you.

[@AndyMaloneMVP]

Awesome thanks so much🤩

[@StephanV]

Very nice Videos that you make.

[@AndyMaloneMVP]

Thanks Steven I appreciate it

[@serkangul4170]

Thanks for the video

[@75579e]

Thanks!

[@AndyMaloneMVP]

Aw thank you so much I really appreciate that🙂👍

[@ITSupport-ix7sn]

thankyou Sir

[@rsm5412]

Thank you.

[@dchumik]

Awesome video 👍

[@Amdz115]

Hi sir , Thank you for all the videos . I just completed a windows server 2016 tutorial , is there lot of changes between 2016 and 2019 ?

[@AndyMaloneMVP]

In terms of AD no

[@AquavivaSK]

Hi Andy, I am a bit newbie. How can I restrict changing background for desktop and rename description of icons on the same desktop too for some user. I have WS2021 and users use Windows 10 and Windows 11 Thx

[@AndyMaloneMVP]

I'm currently recording a session for this. more to come soon ...

[@ejcrist]

Andy these are FANTASTIC. Thanks so much for your videos. Question: Can I still deploy printers to my users and/or computers using Group Policy?? I've read where that has been removed because of security reasons. Your thoughts??

[@AndyMaloneMVP]

You can via group policy preferences. In Azure you can use universal print. Printers must be comparable

[@jrcna6739]

Hi Andy, Thank you for your video, but I have a question. How to set GPO on Server for all user laptop which already join domain on Active Directory, when they out or going home, the laptop can be used normally, because right now we have a problem, when users going home and put their laptop online again, after enter username and password, the laptop suddently blank, no icon start, etc and the only shortcut can run is Ctrl + Alt + Del (Task Manager). Can you help us for this case? Thank you.

[@AndyMaloneMVP]

GPOs only work on AD Joined devices. EntraID joined devices can be configured via Intune.

[@jeanca0426]

Hi Andy, Thank you for this information, I have been learning a lot with you. One of my questions is, Is there a site where we can practice Group Policies? Like a virtual environment or something similar? Again Thank you very much for this video.

[@AndyMaloneMVP]

Hmm There are companies offering virtual hands on labs. If you google them I'm sure you'll find them :-)

[@jeanca0426]

@@AndyMaloneMVP I will check that out. Thank you so much Andy.

[@tobe2240]

Was there anything new mentioned since Windows Server 2003? I think the title could also be "Windows Server 2003-2019 Group Policy Explained".

[@AndyMaloneMVP]

Totally.

[@luislopez-rq7kt]

Great video! any recommendations on my path of learning for a helpdesk position?

[@AndyMaloneMVP]

MS-102 Microsoft 365

[@rogerweihrauch9195]

Hello Andy. Great explanation on GP's. Thanks. I did not get the (dis-) advantage on (en-) forcing/ waterfalling mech'm on the inheritage policy mech'm. what is it for? is it for having sec-pol's distributed also/only to london, but not for the marketing dep't?

[@AndyMaloneMVP]

It's important if you're a large company and need to enforce policies down from head office to branches, who may have different GPO settings. Examples would include software, desktop[s settings etc. I hope this helps.

[@xmelsky]

Didn't answer a basic question - in which order the GPO is applying?

[@AndyMaloneMVP]

Everything waterfalls down from the site, domain, OU

[@mousam.mondal]

I want to know how can i restrict non-admin users to access This PC app, CMD, Control panel and PowerShell. This query is specific to Windows server 2019 and newer versions. Also I want to allot specific storage limit to each users (non-admin users).

[@AndyMaloneMVP]

Settings are same as the client. Groups policy training can be found at Learn.Microsoft.cm

[@Orac2001]

Often in ITILS organizations, we do not have the possibility to control via console what the administrators have established on the Backoffice side, but we have to understand how the policies on the client side are working. Can you give us a series of useful client-side commands to check the applied Policies and know what inherits?

[@AndyMaloneMVP]

Hmm well in order to do this from the client. Users would have to be admins. Never a good idea. But yes there are things you can do and yes I will do a follow up video for you :-) Many thanks for the comment and great to have you on board.

[@OfficalLawDawe]

im having an issue with GPO and adobe acrobat, ive got windows server 2022, and i have to white list and do a run only setup, ive got 1 user, and ive allowed every .exe adobe has but, when the user opens to view a pdf, they get a restriction error and they click ok, pops up 3 times and then they can just use adobe acrobat with no issues. but the error it self doesnt say what it is restricting just that it is.

[@AndyMaloneMVP]

No idea sorry. You could try the Microsoft tech community 👍

[@OfficalLawDawe]

@AndyMaloneMVP much appreciated the reply anyway thanks!

[@rameshs5283]

how to configure NIS in windows 2016 server and give user credential to ubuntu client

[@AndyMaloneMVP]

That's beyond the scope of this channel. But You can do it in Intune

[@mohammadaslamahmadzai2644]

Thank you andy sir! I am really appreciated from you... May ALLAH give you happy andlong life 🙏

[@AndyMaloneMVP]

Thank you most kindly🎉😀

[@MoeinEsther]

is there any way to use this group policy to block websites for all users on the network ! Lan and Wifi. I tried many ways and could not get it done, and router URL filter cant block many of Https websites.

[@AndyMaloneMVP]

Absolutely. Here you go thesysadminchannel.com/how-to-restrict-internet-access-using-group-policy-gpo/ and here docs.microsoft.com/en-us/troubleshoot/windows-server/group-policy/use-gp-control-access-web-site

[@samoriab5999]

How do i deploy software from the server to the clients? for example i install ms office on the server...and deploy across all my 3000 clients?

[@AndyMaloneMVP]

You’ve gave me a great idea for a session

[@samoriab5999]

@@AndyMaloneMVP Awesome! Thanks

[@75579e]

Thanks!

[@AndyMaloneMVP]

Thank you 👍