2,025 questions with Windows for business | Windows Server | Devices and deployment | Configure application groups tags

Sort by: Updated
1 answer

SSL Certificate Issuance Testing

Automated SSL certificate issuance for a domain is failing with a 429 Too Many Requests error during the certificate request process. As a result, new certificates cannot be issued successfully. Environment: Certbot Automated SSL certificate issuance…

Windows for business | Windows Server | Devices and deployment | Configure application groups
asked 2026-10-02T14:38:45.2266667+00:00
Leon 40 Reputation points
answered 2026-10-02T18:56:25.9633333+00:00
Hoang Le Huy 0 Reputation points Independent Advisor
1 answer

Local Admin Users Bypassing Chrome Extension Restrictions

Symptoms: local admin users can bypass enterprise Chrome extension restrictions. Enterprise policies are applied normally for standard users, but local profiles can override the configured restrictions through registry settings. Looking at how to…

Windows for business | Windows Server | Devices and deployment | Configure application groups
asked 2026-10-01T15:27:12.99+00:00
Huang Bei 20 Reputation points
commented 2026-10-02T17:18:05.9233333+00:00
Chen Tran 13,270 Reputation points Independent Advisor
1 answer

Need to know configuring Exceptions for Legitimate Binary Updates Blocked by Suspicious File Download Detection

Hello guys, good day!!! I would like to understand whether there is a recommended approach to configure file blocking policy exceptions when legitimate binary update packages are being blocked by a security appliance due to the Suspicious File Download…

Windows for business | Windows Server | Devices and deployment | Configure application groups
asked 2026-10-02T14:22:19.72+00:00
Leo Jones 40 Reputation points
answered 2026-10-02T14:56:04.3033333+00:00
Domic Vo 34,165 Reputation points Independent Advisor
1 answer

Citrix Workspace Repeated Credential Prompts

Hi there, citrix Workspace continues to ask users to enter their credentials each time the application is opened, although SAML SSO has already been configured. The SSO setup is available, but the Workspace client does not appear to retain or use the…

Windows for business | Windows Server | Devices and deployment | Configure application groups
asked 2026-10-02T13:15:26.4933333+00:00
Harry Porter 0 Reputation points
answered 2026-10-02T13:48:48.65+00:00
Domic Vo 34,165 Reputation points Independent Advisor
3 answers

Win Server 2025: unable to activate PIN or Fingerprint sign-in options.

Hello to all. I have a bit of a problem, I would really appreciate your expertise. I have installed a standalone Win Server 2025 LTSC Preview Build 26052, which was successfully updated to Build 26063.1 through Windows Update, on a pretty old but…

Windows for business | Windows Server | User experience | Other
Windows for business | Windows Server | Devices and deployment | Configure application groups
asked 2024-02-29T10:29:33.92+00:00
LedZep 30 Reputation points
answered 2026-10-01T15:49:35.5233333+00:00
Nathan Sherman 5 Reputation points Microsoft Employee
2 answers

BitLocker Recovery Prompt When Using a New Thunderbolt Dock

Hello community, after introducing a new Thunderbolt dock model, laptops connected to the dock started asking for the BitLocker recovery key during startup. It appears that the dock is causing changes to the TPM PCR measurements, which BitLocker…

Windows for business | Windows Server | Devices and deployment | Configure application groups
asked 2026-10-01T14:11:39+00:00
William Carter 0 Reputation points
answered 2026-10-01T14:44:58.2233333+00:00
Domic Vo 34,165 Reputation points Independent Advisor
2 answers

Domain Account Lockouts on Shared Lab Laptops

No recent GPO changes. No issues with Active Directory authentication. Multiple users are logging into shared lab laptops and encountering unexpected account lockouts. The behavior appears to be related to cached domain credentials in the background,…

Windows for business | Windows Server | Devices and deployment | Configure application groups
asked 2026-09-30T15:46:19.6633333+00:00
Fredle Coper 20 Reputation points
answered 2026-09-30T16:17:53.4366667+00:00
Domic Vo 34,165 Reputation points Independent Advisor
2 answers

About domain Controller CPU Spikes from Unauthenticated LDAP Queries

Hello hope you could help. The domain controller CPU usage spikes to 100% when unauthenticated LDAP queries scan the directory tree. This excessive directory search activity is causing high CPU utilization and impacting domain controller performance. I…

Windows for business | Windows Server | Devices and deployment | Configure application groups
asked 2026-09-30T06:10:37.2+00:00
Fited Zaheen 20 Reputation points
answered 2026-09-30T07:23:58.27+00:00
Domic Vo 34,165 Reputation points Independent Advisor
1 answer

Hi there, I have PAC File Syntax Causing Internet Connectivity Issues

Laptops lose external internet connectivity when the proxy auto-configuration (PAC) file contains a missing semicolon. How can we validate the PAC file syntax before deployment to ensure it is correctly formatted? Is there a recommended tool or method to…

Windows for business | Windows Server | Devices and deployment | Configure application groups
asked 2026-09-30T01:47:18.3633333+00:00
Olivia Davis 0 Reputation points
answered 2026-09-30T03:06:38.1866667+00:00
HLBui 13,020 Reputation points Independent Advisor
1 answer

SSPR Password Reset Blocked by SMS Quota

Hi there, employees are currently unable to reset their passwords because the SSPR portal has exceeded its monthly SMS sending limit. What is the recommended way to increase the cloud provider’s messaging quota so that password reset verification…

Windows for business | Windows Server | Devices and deployment | Configure application groups
asked 2026-09-29T14:46:53.3+00:00
Michael Smith 0 Reputation points
answered 2026-09-29T15:27:03.2233333+00:00
Allan Solomon Mejia 10,225 Reputation points
1 answer

Review Rate Limiting for Partner APIs

Partner API requests are currently bypassing tier limits due to an issue with header extraction in the API Gateway. We need to review and update the rate-limiting usage plans to ensure tier-based limits are applied correctly and consistently.

Windows for business | Windows Server | Devices and deployment | Configure application groups
asked 2026-09-28T12:25:52.0833333+00:00
Banjo Langdo 0 Reputation points
answered 2026-09-28T12:58:26.77+00:00
Domic Vo 34,165 Reputation points Independent Advisor
1 answer One of the answers was accepted by the question author.

Database Migration Service task stops after full load and does not continue in CDC phase

I am running a Database Migration Service (DMS) task to migrate data from a source database to a target environment. The migration of historical data completes successfully during the initial full load phase, but the task stops progressing once it…

Windows for business | Windows Server | Devices and deployment | Configure application groups
asked 2026-09-23T15:21:26.8533333+00:00
Mia Wilson 60 Reputation points
commented 2026-09-28T01:16:29.4133333+00:00
Mia Wilson 60 Reputation points
2 answers

Recommend to Domain controller problem.

Hi there, we have a Domain Controller that was offline for around 180 days. After bringing it back online, it is unable to sync with the domain and continuously logs Event ID 2042. The other Domain Controllers are healthy and replication is working…

Windows for business | Windows Server | Devices and deployment | Configure application groups
asked 2026-09-24T14:31:59.19+00:00
NovaCore Systems 0 Reputation points
answered 2026-09-24T14:51:16.7733333+00:00
Marcin Policht 109.6K Reputation points MVP Volunteer Moderator
2 answers

OpenSearch Cluster Status Showing Yellow Due to Unassigned Replica Shards

Hello, I have a question about our OpenSearch cluster status. Currently, the OpenSearch cluster is showing a yellow status because some replica shards are unassigned. I understand that the yellow status means the primary shards are allocated, but one or…

Windows for business | Windows Server | Devices and deployment | Configure application groups
asked 2026-09-18T15:54:57.5066667+00:00
Leo Walker 40 Reputation points
answered 2026-09-18T19:19:13.28+00:00
Allan Solomon Mejia 10,225 Reputation points
3 answers

The 'Microsoft Azure RSA TLS Issuing CA 03' certificate is expiring

The 'Microsoft Azure RSA TLS Issuing CA 03' certificate is expiring. Where can we obtain the renewal file? We checked the provided Microsoft link, which states the expiration date is 26/08/2026; however, our local system indicates it will expire…

Windows for business | Windows Server | Devices and deployment | Configure application groups
asked 2026-08-24T16:14:58.2366667+00:00
Poornesh Purushotham 0 Reputation points
commented 2026-08-25T07:41:10.2166667+00:00
Poornesh Purushotham 0 Reputation points
2 answers

Identrust EV certificate not working

We have an Identrust EV code signing certificate that stopped working mid-June. Identrust says that is your issue. When will Microsoft update their certificate chain so that an Identrust EV certificate works again?

Windows for business | Windows Server | Devices and deployment | Configure application groups
asked 2026-07-02T16:22:23.07+00:00
Stefani Warren 0 Reputation points
edited an answer 2026-07-08T20:05:39.7266667+00:00
WD 0 Reputation points
1 answer

Winget User vs. System Scopes

Our helpdesk is using winget install via remote PowerShell scripts to deploy updates, but the apps are accidentally installing under the system account profile instead of the logged-in user's profile, breaking app shortcuts. How do we use the --scope…

Windows for business | Windows Server | Devices and deployment | Configure application groups
asked 2026-07-02T18:45:14.5266667+00:00
NovaCore Systems 0 Reputation points
answered 2026-07-02T19:24:01.4533333+00:00
Domic Vo 34,165 Reputation points Independent Advisor
1 answer

Windows IoT Enterprise Shell Launcher

We are deploying Windows IoT Enterprise LTSC to multi-million dollar medical imaging machines. We don't want the clinical operators to ever see the Windows desktop, taskbar, or desktop background. How do we configure Shell Launcher v2 to replace…

Windows for business | Windows Server | Devices and deployment | Configure application groups
asked 2026-07-02T18:41:30.94+00:00
Oliver Taylor 0 Reputation points
answered 2026-07-02T19:13:08.1666667+00:00
Domic Vo 34,165 Reputation points Independent Advisor
1 answer

I cant Uninstall Adobe On my windows i try many time it still exists

I cant Uninstall Adobe On my windows i try many time it still exists

Windows for business | Windows Server | Devices and deployment | Configure application groups
asked 2025-09-20T05:35:54.81+00:00
Wala Galal 0 Reputation points
commented 2026-06-27T08:43:06.5466667+00:00
Birger Rieb 0 Reputation points
1 answer

Cynet is marking many of Microsoft signed files as Malicious

Cynet which is a threat itself IMO, because it will remove many of the users' legit files, is also marking many of the Microsoft signed files as Malicious (score: 100) Visual Studio…

Windows for business | Windows Client for IT Pros | Devices and deployment | Configure application groups
Windows for business | Windows Server | Devices and deployment | Configure application groups
asked 2024-01-21T22:58:32.7933333+00:00
Peter Volz 1,295 Reputation points
commented 2026-05-21T12:16:51.64+00:00
Samsonait 0 Reputation points