[GPO Compatibility] Windows Server 2008 R2 and Windows Server 2019

Benjijis 21 Reputation points
2022-10-20T11:50:44.597+00:00

Hello,
I have a main server in Windows Server 2008 R2 (domain functional level and forest functional level in WS 2008 R2 as well).
On this server I added GPO to drive a RDS Server (Windows Server 2019).

The problem is that some GPOs are not working.
Example: Change the Windows menu for users / Set a start page for Firefox / Hide the server manager for standard users.
Other GPOs work perfectly like:
Hide C: drive / Deny access to Control Panel for standard users.

I have downloaded the admx files for Windows 10 :
https://www.microsoft.com/en-us/download/details.aspx?id=103667
As well as the admx for Firefox.

Could there be a compatibility problem between WS 2008 R2 and WS 2019? (for the moment we can't upgrade our Server 2008 R2).

Windows for business | Windows Client for IT Pros | User experience | Remote desktop services and terminal services
Windows for business | Windows Server | User experience | Other
Windows for business | Windows Client for IT Pros | User experience | Other
0 comments No comments
{count} votes

Accepted answer
  1. Limitless Technology 44,781 Reputation points
    2022-10-21T15:16:41.917+00:00

    Hello

    Thank you for your question and reaching out. I can understand you are having issues related to GPO settings.

    Windows 10 is not fully compatible with windows server 2008 R2. Some policies may not works, look for compatibility.

    You may check on Windows 10 workstation whether policies were fully applied, run a RSOP or gpresult /h c:\tem/gpresult.htm

    Reference :

    https://learn.microsoft.com/en-us/troubleshoot/windows-client/identity/known-issues-for-group-policy-clients

    -----------------------------------------------------------------------------------------------------------------------------------------------

    --If the reply is helpful, please Upvote and Accept as answer--

    1 person found this answer helpful.
    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Samuel Boynton 0 Reputation points
    2023-04-11T13:15:48.8866667+00:00

    Late answer, it may or may not work. However, you can try updating your ADMX files for the GPO management console with the domain group policy directory, instructions below. I had a previous work domain that also had an old 2008r2 domain and of course, IE11 compatibility/settings didn't exist back then. But updating the ADMX files with the domain controller (after backing them up of course) should fix most of the issues with GPO settings not working or applying properly. https://deploywindows.com/2015/08/20/how-do-you-update-your-group-policy-admx-files/ Also take a look at this answer, as it may answer questions on that subject also. https://serverfault.com/questions/1096677/how-to-update-admx-files-different-server-os-versions-in-domain If you go down this route, I would recreate your GPOs after updating the ADMX files as updating old policies may not be best with some options missing from deprecated settings that were removed from the console. W10 22H2 ADMX files for GPO! https://www.microsoft.com/en-us/download/104677

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.