Server Core 216 - How do I access/edit local group policy for Computer-Windows Settings-Security Settings

Sys Justin 41 Reputation points
2020-08-03T19:50:03.997+00:00

Hello experts, I am having some trouble using remote MMC to edit the security settings of a Windows server 2016 CORE machine. When I pull up the Group Policy Object Editor snap-in, I can't see any child-objects in the "Security Settings" node, things like Local Policies, Account Polices are all missing. Since this is server core, I cannot run the local gpedit.msc tool either.

Server Core 216 - How do I access/edit local group policy for Computer-Windows Settings-Security Settings

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,639 questions
{count} votes

Accepted answer
  1. Daisy Zhou 17,991 Reputation points Microsoft Vendor
    2020-08-04T01:13:57.057+00:00

    Hello SysJustin-9433,

    Thank you for posting here.

    If our server core 2016 is in the domain, we can configure the group policy settings under Security Settings we want on DC and apply it to this server core 2016.
    1.Create an OU and put this server core 2016 into this OU.
    2.Create a GPO and link this GPO to the OU above.
    3.Edit this GPO as we want.
    4.Run gpupdate /force on server core 2016.
    5.Check if the GPO settings take effect on server core 2016.

    If our server core 2016 is in the workgroup, we can configure the group policy settings we want on server 2016 with GUI, copy the settings to server core 2016 and apply the settings to this server core 2016.
    1.We can configure the group policy settings under Security Settings we want on server 2016 with GUI, I assume it is called security template.
    2.Copy the security template on server 2016 with GUI to server core 2016.
    3.Import security template on server core 2016.
    4.Check if the GPO settings take effect on server core 2016.

    For more information and detailed steps, we can refer to this similar case.
    Unable to Change Security Settings / Log on as Batch Service on Server Core
    https://social.technet.microsoft.com/Forums/windowsserver/en-US/92528813-9dbc-4af2-82dd-6579ecc109f1/unable-to-change-security-settings-log-on-as-batch-service-on-server-core?forum=winservercore

    Hope the information is helpful, if anything is unclear, please feel free to let us knkow.

    Best Regards,
    Daisy Zhou


1 additional answer

Sort by: Most helpful
  1. Sys Justin 41 Reputation points
    2020-08-04T16:08:46.367+00:00

    Big thanks for the help, I used the group policy settings for advanced audit policies, and that seems to be working correctly now.