+ Post New Thread
Results 1 to 15 of 15
Windows 8 Thread, Recommended GPOs for use with Windows 8.1 in a School? in Technical; Finally got time to tinker with 8.1 on a 'Student' desktop PC. What Group Policy settings have you configured to ...
  1. #1
    Fazza's Avatar
    Join Date
    Jun 2012
    Location
    England
    Posts
    201
    Thank Post
    4
    Thanked 23 Times in 21 Posts
    Rep Power
    8

    Arrow Recommended GPOs for use with Windows 8.1 in a School?

    Finally got time to tinker with 8.1 on a 'Student' desktop PC.

    What Group Policy settings have you configured to get it running smoothly on your school network? Any GPO tips/advice are greatly appreciated - especially ones that can help speed up log on times etc!


  2. #2
    robjduk's Avatar
    Join Date
    Jun 2011
    Posts
    388
    Thank Post
    11
    Thanked 60 Times in 47 Posts
    Rep Power
    21
    Have you got a 2012 R2 domain controller? I tried to copy the ADMX files over and it spat them out.

    On your main subject I have dabbled with a test network at home and the xml desktop control is a wonderful addition.

  3. #3
    Fazza's Avatar
    Join Date
    Jun 2012
    Location
    England
    Posts
    201
    Thank Post
    4
    Thanked 23 Times in 21 Posts
    Rep Power
    8
    No we haven't got a 2012 R2 DC, I do have a couple of 2012 R2 member servers though. I've updated the Schema but not added any ADMX files yet.

    I've got Windows 8.1 installed on one of our Student PCs and I plan to tinker with it in the new year, I thought I pop on to Edugeek to find out what others have done and have found useful so I'm up-to-speed ready for January.

  4. #4


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,571
    Thank Post
    228
    Thanked 850 Times in 729 Posts
    Rep Power
    294
    just been altering gpos from a technician pc running 8.1 and settings seem fine. Basically its windows7 settings (with a slightly different software deploy to not install flash), redirecting profiles so that windows 7 and 8.1 profiles are kept separate and user policys is basically the same but with a start screen layout specified. Same redirection policies for docs/start menu etc

  5. #5

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    2,708
    Thank Post
    144
    Thanked 545 Times in 489 Posts
    Rep Power
    149
    Grab the ADMXs from the PolicyDefinitions folder on the 8.1 PC and whack them into your sysvol PolicyDefinitions. I use a 2008 R2 DC to manage my 8.1 clients, works just fine (the ADMXs work on any DCs newer than Server 2008) - you'll just need to play about if you're using certain GPPs.

    The policies we're using are mostly to do with customisation - Start Screen icons, scaling options, etc. Other than that, our Windows 7 policies work happily for the most part.

  6. #6
    chazzy2501's Avatar
    Join Date
    Jan 2008
    Location
    South West
    Posts
    1,778
    Thank Post
    213
    Thanked 263 Times in 213 Posts
    Rep Power
    67
    I've been looking at the custom start screen for 8.1 so you can specify what icons are on the metro interface. This also works with Side loaded apps. It unfortunately requires the Enterprise edition.

    Customize Windows 8.1 Start Screens by Using Group Policy

    Although I hear you can boot straight to desktop. I don't know if that means you can deny metro access.

  7. #7
    robjduk's Avatar
    Join Date
    Jun 2011
    Posts
    388
    Thank Post
    11
    Thanked 60 Times in 47 Posts
    Rep Power
    21
    bah my 2008R2 just did not like the admx files. Looking forward to Jan when I get my new DC's up and running.

  8. #8
    Fazza's Avatar
    Join Date
    Jun 2012
    Location
    England
    Posts
    201
    Thank Post
    4
    Thanked 23 Times in 21 Posts
    Rep Power
    8
    Quote Originally Posted by robjduk View Post
    bah my 2008R2 just did not like the admx files. Looking forward to Jan when I get my new DC's up and running.
    Did you upgrade the Schema first?

  9. #9
    robjduk's Avatar
    Join Date
    Jun 2011
    Posts
    388
    Thank Post
    11
    Thanked 60 Times in 47 Posts
    Rep Power
    21
    oooooohhhh..... so I upgrade the domain level I can do it then without messing with DC upgrades?

  10. #10
    Fazza's Avatar
    Join Date
    Jun 2012
    Location
    England
    Posts
    201
    Thank Post
    4
    Thanked 23 Times in 21 Posts
    Rep Power
    8
    Quote Originally Posted by robjduk View Post
    oooooohhhh..... so I upgrade the domain level I can do it then without messing with DC upgrades?
    Yes, after updating the schema to 2012 R2 (from an 2012 R2 disk or mounted ISO image) you then install the .admx files (AKA Group Policy Files) and you can then set Group Policies for 8.1.

    You configure Group Policies for 8.1 in this scenario by installing the RSAT tools on an 8.1 installation, you cant configure them on anything less than 2012 R2 or 8.1.

    Hope that makes sense.

  11. #11

    Join Date
    Aug 2005
    Location
    Shropshire
    Posts
    284
    Thank Post
    16
    Thanked 11 Times in 8 Posts
    Rep Power
    21
    Going back to this post,

    If anybody does have any GPO's that they've used with Windows 8 / 8.1 that they wouldn't mind pulling out a GPO Report (Pupils / Staff) and sharing them with us I'd appreciate it too... I'm about to setup a new Server 2012R2 with Windows 8.1 Enterprise clients, so if anybody can share recommended GPO settings as a starting block rather then re-inventing the wheel it would be useful.

    Thanks

    Matt

  12. #12

    Join Date
    Nov 2013
    Posts
    26
    Thank Post
    2
    Thanked 4 Times in 1 Post
    Rep Power
    2
    Computer Configuration (Enabled)
    Policies
    Administrative Templates
    Windows Components/Family Safety
    Policy Setting Comment
    Make Family Safety control panel visible on a Domain Enabled

    User Configuration (Enabled)
    Policies
    Windows Settings
    Folder Redirection
    Documents
    Setting: Basic (Redirect everyone's folder to the same location)
    Path: %HOMESHARE%%HOMEPATH%

    Options
    Grant user exclusive rights to Documents Enabled
    Move the contents of Documents to the new location Enabled
    Disabled
    Policy Removal Behavior Leave contents


    Downloads
    Setting: Basic (Redirect everyone's folder to the same location)
    Path: H:\Downloads

    Options
    Same as above.

    Pictures
    Setting: Follow the Documents folder

    Videos
    Setting: Follow the Documents folder



    Administrative Templates
    Control Panel
    Policy Setting Comment
    Prohibit access to Control Panel and PC settings Enabled

    Control Panel/Add or Remove Programs
    Policy Setting Comment
    Hide Add New Programs page Enabled
    Hide Add/Remove Windows Components page Enabled
    Hide Change or Remove Programs page Enabled
    Hide the "Add a program from CD-ROM or floppy disk" option Enabled
    Hide the "Add programs from Microsoft" option Enabled
    Hide the "Add programs from your network" option Enabled
    Hide the Set Program Access and Defaults page Enabled
    Remove Add or Remove Programs Enabled

    Control Panel/Display
    Policy Setting Comment
    Disable the Display Control Panel Enabled

    Control Panel/Personalization
    Policy Setting Comment
    Prevent changing visual style for windows and buttons Enabled

    Control Panel/Printers
    Policy Setting Comment
    Point and Print Restrictions Enabled
    Users can only point and print to these servers: Disabled
    Enter fully qualified server names separated by semicolons
    Users can only point and print to machines in their forest Disabled
    Security Prompts:
    When installing drivers for a new connection: Do not show warning or elevation prompt
    When updating drivers for an existing connection: Do not show warning or elevation prompt
    This setting only applies to:
    Windows Vista and later

    Control Panel/Programs
    Policy Setting Comment
    Hide "Get Programs" page Enabled
    Hide "Installed Updates" page Enabled
    Hide "Programs and Features" page Enabled
    Hide "Set Program Access and Computer Defaults" page Enabled
    Hide "Windows Features" Enabled
    Hide "Windows Marketplace" Enabled
    Hide the Programs Control Panel Enabled

    Control Panel/Regional and Language Options
    Policy Setting Comment
    Restricts the UI languages Windows should use for the selected user Enabled
    Restrict users to the following language: English

    Desktop
    Policy Setting Comment
    Do not add shares of recently opened documents to Network Locations Enabled
    Don't save settings at exit Enabled
    Hide Internet Explorer icon on desktop Enabled
    Hide Network Locations icon on desktop Enabled
    Prohibit User from manually redirecting Profile Folders Enabled
    Remove Properties from the Computer icon context menu Enabled
    Remove Properties from the Documents icon context menu Enabled
    Remove Properties from the Recycle Bin context menu Enabled
    Remove the Desktop Cleanup Wizard Enabled

    Network/Network Connections
    Policy Setting Comment
    Prohibit access to properties of a LAN connection Enabled
    Prohibit access to properties of components of a LAN connection Enabled
    Prohibit access to the Remote Access Preferences item on the Advanced menu Enabled

    Start Menu and Taskbar
    Policy Setting Comment
    Lock the Taskbar Enabled
    Prevent changes to Taskbar and Start Menu Settings Enabled
    Prevent users from rearranging toolbars Enabled
    Prevent users from resizing the taskbar Enabled
    Prevent users from uninstalling applications from Start Enabled
    Remove Default Programs link from the Start menu. Enabled
    Remove links and access to Windows Update Enabled
    Remove Run menu from Start Menu Enabled
    Remove the "Undock PC" button from the Start Menu Enabled
    Remove the Action Center icon Enabled
    Turn off feature advertisement balloon notifications Enabled
    Turn off notification area cleanup Enabled

    System
    Policy Setting Comment
    Prevent access to the command prompt Enabled
    Disable the command prompt script processing also? No

    Windows Components/Add features to Windows 8.1
    Policy Setting Comment
    Prevent the wizard from running. Enabled

    Windows Components/App runtime
    Policy Setting Comment
    Allow Microsoft accounts to be optional Enabled

    Windows Components/Credential User Interface
    Policy Setting Comment
    Do not display the password reveal button Enabled

    Windows Components/File Explorer
    Policy Setting Comment
    Display the menu bar in File Explorer Enabled
    Hide these specified drives in My Computer Enabled
    Pick one of the following combinations Restrict C drive only
    Policy Setting Comment
    Prevent access to drives from My Computer Enabled
    Pick one of the following combinations Restrict C drive only

    Windows Components/Microsoft Management Console
    Policy Setting Comment
    Restrict the user from entering author mode Enabled

    Windows Components/Network Sharing
    Policy Setting Comment
    Prevent users from sharing files within their profile. Enabled

    Windows Components/Windows Mail
    Policy Setting Comment
    Turn off the communities features Enabled
    Turn off Windows Mail application Enabled

    Windows Components/Windows Messenger
    Policy Setting Comment
    Do not allow Windows Messenger to be run Enabled
    Do not automatically start Windows Messenger initially Enabled

    Last edited by ZeroHour; 29th March 2014 at 02:12 AM.

  13. 4 Thanks to eshaq786:

    mattpant (16th January 2014), projector1 (12th June 2014), RTFM (19th May 2014), william_tropico (20th May 2014)

  14. #13

    Join Date
    Aug 2005
    Location
    Shropshire
    Posts
    284
    Thank Post
    16
    Thanked 11 Times in 8 Posts
    Rep Power
    21
    Thanks eshaq786 for sharing your settings - much appreciated!

  15. #14
    chazzy2501's Avatar
    Join Date
    Jan 2008
    Location
    South West
    Posts
    1,778
    Thank Post
    213
    Thanked 263 Times in 213 Posts
    Rep Power
    67
    I don't suppose anyone has a user gpo export they're happy with, I'd like to use /modify one. I can't find the enthusiasm to trawl through all the new settings.

  16. #15

    Join Date
    May 2014
    Location
    Sweden
    Posts
    1
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Hi

    I want to thank you for the big help of your info about recomended school gpo, what i want to ask you is if you have an ide about a recomended gpo for student exam settings to close all programs and all internet and make only wordpad working.

    best regards

    Sanfoor

SHARE:
+ Post New Thread

Similar Threads

  1. Camera recommendations for use with DartFish
    By robknowles in forum Hardware
    Replies: 2
    Last Post: 17th June 2010, 08:16 PM
  2. Ranger for Networks with Windows 7
    By alfatec in forum Network and Classroom Management
    Replies: 0
    Last Post: 18th May 2010, 03:08 PM
  3. CLEO MIS Intergration Tool released for use with SIMS/CMIS
    By Geoff in forum Virtual Learning Platforms
    Replies: 11
    Last Post: 7th July 2008, 11:11 AM
  4. Which CMS for use with AD?
    By alan-d in forum Web Development
    Replies: 6
    Last Post: 25th November 2006, 04:50 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •