Hello SysJustin-9433,
Thank you for posting here.
If our server core 2016 is in the domain, we can configure the group policy settings under Security Settings we want on DC and apply it to this server core 2016.
1.Create an OU and put this server core 2016 into this OU.
2.Create a GPO and link this GPO to the OU above.
3.Edit this GPO as we want.
4.Run gpupdate /force on server core 2016.
5.Check if the GPO settings take effect on server core 2016.
If our server core 2016 is in the workgroup, we can configure the group policy settings we want on server 2016 with GUI, copy the settings to server core 2016 and apply the settings to this server core 2016.
1.We can configure the group policy settings under Security Settings we want on server 2016 with GUI, I assume it is called security template.
2.Copy the security template on server 2016 with GUI to server core 2016.
3.Import security template on server core 2016.
4.Check if the GPO settings take effect on server core 2016.
For more information and detailed steps, we can refer to this similar case.
Unable to Change Security Settings / Log on as Batch Service on Server Core
https://social.technet.microsoft.com/Forums/windowsserver/en-US/92528813-9dbc-4af2-82dd-6579ecc109f1/unable-to-change-security-settings-log-on-as-batch-service-on-server-core?forum=winservercore
Hope the information is helpful, if anything is unclear, please feel free to let us knkow.
Best Regards,
Daisy Zhou