Updating group policy on windows 2016
By running the following query, you get count of clients for each lasterrorcode that reported to CM12.I have got lot many computers with error code –2016409966 .Using this method will grey out the Trusted sites GUI, meaning the end user cannot remove or add any sites to any of the zones.If you would like to be a little more flexible and allow the end users to edit the zones you will need to use an alternative method. Consider the implications of allowing this, as users can add their own sites and potentially reduce the security settings for a given site.Group Policy Preferences Registry Items This method will allow you to deploy Security Zone sites, whilst allowing the end user to modify the zones by adding or removing sites.
You can modify and confirm the setting as shown below. For everything what ever you do in SCCM,the first and foremost is ,client health,otherwise ,there is nothing for you to manage .Using reports/ collections, cleanup lot of old records ,fix SCCM client issues using scripts and clients are now at good success rate (95% ,for some reason, Software update scan is lower than 80% and that causes the SUP compliance failed to meet the SLA.Site to Zone Assignment List Create a new Group Policy Object and browse to Double click on the Site to Zone Assignment List, select enable and choose show to configure the options. 1 for Intranet Zone, 2 for Trusted Sites, 3 for Internet Zone and 4 for Restricted Sites Zone.In this example I have added to the Trusted sites (2).
Search for updating group policy on windows 2016:
Started working with New Customer since few weeks ago ,running Configmgr 2012 R2 CU1 ,yet to upgrade to Latest CU .