Topic Hub
Windows Server
Windows Server work published on AdminSignal: Group Policy processing against Active Directory, Secure Boot CA 2023 readiness for server fleets, and servicing notes that change those two jobs.
6 published articles in this reading list
What this hub is for
Use these pages when a domain-joined server is not processing Group Policy as expected, when Secure Boot CA 2023 is a fleet change rather than a BIOS tick-box, or when a servicing note changes those two jobs. Start from the published article that matches the ticket.
Collect RSoP evidence before another gpupdate
Most “the GPO did not apply on the server” tickets are scope problems: wrong OU, blocked inheritance, security filtering, or a competing cloud policy. Capture computer and user RSoP or gpresult before forcing another refresh cycle.
Secure Boot CA 2023 is a fleet change
The 2023 certificate authority rollout is a sequenced firmware and OS trust change. Use the published readiness guide for inventory and rollback ownership rather than assuming every server can flip in one window.
Servicing notes that affect this work
Patch Tuesday and Windows servicing articles on this site call out CA 2023 restarts, Server SKU coverage, and driver-trust changes when those items change Group Policy or Secure Boot work. Read them as operational notes for the same two jobs, not as a separate Server textbook.
Latest News
October 2026 Windows Servicing Deadlines: What Still Needs a Plan
Inventory and targeting plan for 13 Oct 24H2 Home/Pro end of updates, Server 2022 mainstream end, 19 Oct PCA 2011 expiry, and 10 Nov 23H2 Enterprise end of updates. Not another CVE list.
22 Aug 2026
May 2026 Patch Tuesday: admin deployment notes and checks
May 2026 Patch Tuesday deployment notes covering KB5089549 for Windows 11, Windows Server updates, BitLocker PCR7 known issue, Secure Boot certificate readiness, Intune Autopatch hotpatch, and WSUS deployment checks.
13 May 2026
Windows Cross-Signed Driver Trust Removal: Enterprise Readiness and Rollout Plan
Enterprise admin guide to Microsoft's cross-signed driver trust removal: evaluation mode, Event Viewer checks, driver audit, Intune rollout sequencing, and vendor escalation.
1 Apr 2026
Deep-Dive Tutorials
Troubleshooting Guides
Group Policy and Intune both apply: prove which channel won
A documentation-reviewed path for hybrid devices where a GPO and an Intune profile both target the same Windows setting. Prove the winner before anyone enables MDMWinsOverGP.
16 min read · Intermediate
Group Policy Not Applying to Users or Computers: A Systematic Diagnosis
Before running gpupdate /force for the third time, follow this decision tree: scope filtering, link order, security filtering, loopback processing, and slow-link detection are all common culprits.
8 min read · Beginner
Related topics