How to deploy desktop wallpaper and lock screen image to domain joined windows 10 laptops using GPO – For PCs connected via VPN and also for PCs in office LAN

Requirement I got a request from client to deploy their organization wallpaper and lock screen image across all the domain joined workstations. Domain joined workstations also include the laptops which are not in office but connect via VPN. I have created one GPO which covers both the scenarios. Its a tested policy which is working fine on the target systems / users. Let me share the policy details which can save some time for you if you get a similar request. For Domain joined PC’s which are not in the office and connect occasionally via VPN –> I have used wallpaper.bat file which is copied on users desktop and i …

Read more

Create Group Policy to Lock User’s Workstation after 20 minutes of inactivity (Windows 10)

Its a best practice to lock the workstation whenever you are stepping away from the desk, whether its for few minutes or few hours. But, we know that this practice is not 100% followed leaving the workstation not secured / exposed for information leak. Therefore, you can create a Group Policy to automatically lock users workstation after X minutes of inactivity. X can be any value between 1 second to maximum of 86,400 Seconds (24 hours). Lets see how it can be configured. Create a new Group Policy e.g. Workstation_AutoLock_Policy. Edit the Group Policy -> User Configuration -> Policies -> Administrative Templates -> Control Panel -> Personalization Configure the settings: …

Read more

Add an Active Directory user to the Local Administrators Group using Group Policy (GPO)

In this post, I will show you how to add a user to the Local Administrators Group on the machines using GPO. Point to note that this procedure is not limited to adding a user to local Administrators group. You can use the process to rename, create or delete a Local Group (by selecting different Action in the GPO setting). We will choose Update Action as we are updating Local Administrators Group. We will be using Group Policy Preferences (GPP) to complete this task. You can use Restricted Groups GPO setting as well, but using Restricted Groups you cannot add users to the Local Groups. For adding a user to …

Read more