question

SysJustin-9433 avatar image
0 Votes"
SysJustin-9433 asked DaisyZhou-MSFT commented

Server Core 216 - How do I access/edit local group policy for Computer-Windows Settings-Security Settings

Hello experts, I am having some trouble using remote MMC to edit the security settings of a Windows server 2016 CORE machine. When I pull up the Group Policy Object Editor snap-in, I can't see any child-objects in the "Security Settings" node, things like Local Policies, Account Polices are all missing. Since this is server core, I cannot run the local gpedit.msc tool either.



Server Core 216 - How do I access/edit local group policy for Computer-Windows Settings-Security Settings

windows-group-policy
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Maybe is there a good powershell command or something, some way to edit the registry ?

0 Votes 0 ·
DaisyZhou-MSFT avatar image
0 Votes"
DaisyZhou-MSFT answered DaisyZhou-MSFT edited

Hello SysJustin-9433,

Thank you for posting here.

If our server core 2016 is in the domain, we can configure the group policy settings under Security Settings we want on DC and apply it to this server core 2016.
1.Create an OU and put this server core 2016 into this OU.
2.Create a GPO and link this GPO to the OU above.
3.Edit this GPO as we want.
4.Run gpupdate /force on server core 2016.
5.Check if the GPO settings take effect on server core 2016.

If our server core 2016 is in the workgroup, we can configure the group policy settings we want on server 2016 with GUI, copy the settings to server core 2016 and apply the settings to this server core 2016.
1.We can configure the group policy settings under Security Settings we want on server 2016 with GUI, I assume it is called security template.
2.Copy the security template on server 2016 with GUI to server core 2016.
3.Import security template on server core 2016.
4.Check if the GPO settings take effect on server core 2016.

For more information and detailed steps, we can refer to this similar case.
Unable to Change Security Settings / Log on as Batch Service on Server Core
https://social.technet.microsoft.com/Forums/windowsserver/en-US/92528813-9dbc-4af2-82dd-6579ecc109f1/unable-to-change-security-settings-log-on-as-batch-service-on-server-core?forum=winservercore

Hope the information is helpful, if anything is unclear, please feel free to let us knkow.


Best Regards,
Daisy Zhou

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

SysJustin-9433 avatar image
0 Votes"
SysJustin-9433 answered DaisyZhou-MSFT commented

Big thanks for the help, I used the group policy settings for advanced audit policies, and that seems to be working correctly now.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hello,
Thank you for your update and accepting the reply as answer. I’m very glad that the information is helpful.

As always, if there is any question in future, we warmly welcome you to post in this forum again. We are happy to assist you!


Best Regards,
Daisy Zhou

0 Votes 0 ·