Azure SQL VM: Update Local Group policies using Powershell

Question

Azure SQL VM: Update Local Group policies using Powershell

Rahul 296

Hello Team,

We have some Security recommendations from Azure Microsoft Defender under SOC 2 Security Standard for Azure VM.

Microsoft has the Resolution to update the Local Group Policies using User Interface.

User's image

Is there any way to update the Local GPO recommendations using Powershell after spinning up the Windows server on Azure?

I'm not found any PS command to update system group policy string values for Computer Configuration and User Configuration.

Thanks in advance.

Regards,

Rahul

Marilee Turscak-MSFT 37,206 Reputation points Microsoft Employee Moderator

2023-11-16T01:02:11.6366667+00:00

@Rahul ,

I believe this might be a product limitation but I've reached out to some product group contacts to confirm.
Catherine Kyalo 1,930 Reputation points Microsoft Employee

2023-11-29T08:58:23.2333333+00:00

Yes, you can use PowerShell to update the Local Group Policy settings on Windows servers running on Azure.

The PowerShell cmdlet SetGPRegistryValue can be used to set the registry values for a specific Group Policy object (GPO).

To update the Local Group Policy settings, you can follow the below steps:

1. Open PowerShell as an administrator on the Windows server.

2. Load the Group Policy module by running the command Import-Module GroupPolicy.

3. Use the GetGPO cmdlet to get the GPO object that you want to modify. For example, to get the GPO object for the default domain policy, you can run the command Get-GPO -Name \"Default Domain Policy\".

4. Use the SetGPRegistryValue cmdlet to set the registry values for the GPO object.

You can also use SetGPRegistryValue to set other registry values for the GPO object. For more information, see the Microsoft documentation on

Set-GPRegistryValue.

1 answer

Your answer

Marilee Turscak-MSFT 37,206 Reputation points Microsoft Employee Moderator

2023-11-16T01:02:11.6366667+00:00

@Rahul ,

I believe this might be a product limitation but I've reached out to some product group contacts to confirm.
Catherine Kyalo 1,930 Reputation points Microsoft Employee

2023-11-29T08:58:23.2333333+00:00

Yes, you can use PowerShell to update the Local Group Policy settings on Windows servers running on Azure.

The PowerShell cmdlet SetGPRegistryValue can be used to set the registry values for a specific Group Policy object (GPO).

To update the Local Group Policy settings, you can follow the below steps:

1. Open PowerShell as an administrator on the Windows server.

2. Load the Group Policy module by running the command Import-Module GroupPolicy.

3. Use the GetGPO cmdlet to get the GPO object that you want to modify. For example, to get the GPO object for the default domain policy, you can run the command Get-GPO -Name \"Default Domain Policy\".

4. Use the SetGPRegistryValue cmdlet to set the registry values for the GPO object.

You can also use SetGPRegistryValue to set other registry values for the GPO object. For more information, see the Microsoft documentation on

Set-GPRegistryValue.

Answer 1

Rahul 296

Hi @Catherine Kyalo

Thanks for your reply.

For some reason, the Import-Module GroupPolicy is not working in Elevated Powershell. However, I already have the GroupPolicy Feature Enabled on my Azure VM. My PS Module is Up to date.

User's image

Does the above PS command support to update Local GPO (system GPO) for the below?

For example below type of recommendations. Audit File share to "Success" and "Failure". @Catherine Kyalo

MicrosoftTeams-image (9).png

Share via

Azure SQL VM: Update Local Group policies using Powershell

1 answer

Your answer