- Mon, Aug 22 2022 at 1:24 am #1567267AlexTLSParticipantMember Points: 285Rank: 2
As mentioned in the title, I want to know what account will be used when the system applies computer policies (not user policy).
1. Let’s say I want to push a file to domain joined computers by using GPO under Computer Configuration –> Preferences –> Windows Settings –> Files. The AD domain controller needs to authenticate to computers before it can copy a file to the computers, right? But what account will the AD DC use for authentication ?
2. Similar to item 1 , I want to add bookmarks to Microsoft Edge for domain joined computers by using GPO under Computer Configuration –> Polices –> Administrative Template –> Microsoft Edge. This needs to authentication to computers before changes to the Edge browser can be made. What account will the ADDC use?
- This topic was modified 1 month, 1 week ago by Michael Pietroforte.
- Mon, Aug 22 2022 at 3:10 pm #1567312James GrettonParticipantMember Points: 89Rank: 1
You have it the wrong way around, the GPO will tell the workstation to pull the files from a location. You need to set your share to allow
- either the computer in question,
- domain computers group,
- a security group with the relevant computers in it
access to the share.
Files are stored on \\FS1\Share\Bookmarks
Share Permissions = Everyone: Full Control
NTFS Permissions = Domain Computers: Read Only
In this way, the computer account is authenticating against the share and can access the files in question.
- Wed, Aug 24 2022 at 2:48 am #1567333Michael PietroforteKeymasterMember Points: 37,140Rank: 4
James, is right about the file.
With regards to applying computer policies, if I remember it right, Windows uses the local system account to apply the the policies, that is changing the corresponding Registry settings.
- Wed, Aug 24 2022 at 5:28 am #1567342James GrettonParticipantMember Points: 89Rank: 1
Yes the local system account is used to apply the group policy to the system itself. Microsoft has got a mountain of info for you to devour on this topic, the other recommended reading is anything by Mark Minasi, if you really want to know how all the pieces fit together
- You must be logged in to reply to this topic.