Suggested GPO Settings/Config/etc

[Garacesh]

I've started working on building an image for Windows 10 and I figured it might be a useful idea just to post any configurations we would suggest other members using in there images. Should streamline other peoples' prep for W10.

 

So far I've got a modification of this script to uninstall bloatware, and the following GPO's.

 

Disable tracking:

Computer Configuration \ Policies \ Administrative Templates \ Windows Components \ Data Collection and Preview Builds

- Allow Telemetry (Disabled)

- Do not show feedback notifications (Enabled)

 

Disable first logon animation

Computer Configuration \ Policies \ Administrative Templates \ System \ Logon

- Show first sign-in animation (Disabled)

Edit: Apparently not this one. See Post #4

 

Disable Cortana and web search

Computer Configuration \ Policies \ Administrative Templates \ Windows Components \ Search

- Allow Cortana (Disabled)

- Do not allow web search (Enabled)

- Don't search the web or display web results in Search (Enabled)

 

 

Anyone else got anything useful?

Edited December 8, 2015 by Garacesh

[sted]

im not sure disabling first login animation is a good idea id rather the user see something than a black screen while it does this. im also not entirely sure about disabling cortana as for certain kids it could make using a pc much easier

[Garacesh]

I was under the impression that the first logon animation was all the "We're setting things up for you" tosh that isn't actually needed? (As everything should have already been set up)

 

Cortana isn't useful for us. You may find it is for you, but as a secondary school, I see far more misuse than legitimate use.

[sted]

I was under the impression that the first logon animation was all the "We're setting things up for you" tosh that isn't actually needed? (As everything should have already been set up)

 

Cortana isn't useful for us. You may find it isn't for you, but as a secondary school, I see far more misuse than legitimate use.

it is the were doing stuff but by hiding the animation it still does the same stuff it just shows a black screen instead iirc so people are more likely to think its not working

 

cortana im undecided on in theory its a very useful tool for kids who have difficulty using a pc they can just use a mic and do web searches etc but yes there is scope there for it to be abused but im erring on the side of the worst most primary kids will do with it is ask silly questions get it to sing songs etc again I havnt deployed it as last time I tried I had no start menu as any user on my test vm lol

[Garacesh]

it is the were doing stuff but by hiding the animation it still does the same stuff it just shows a black screen instead iirc so people are more likely to think its not working

Well that's bloody annoying :/ Our kids are going to get that message every single time they log on to any machine, in that case.

 

cortana im undecided on in theory its a very useful tool for kids who have difficulty using a pc they can just use a mic and do web searches etc but yes there is scope there for it to be abused but im erring on the side of the worst most primary kids will do with it is ask silly questions get it to sing songs etc again I havnt deployed it as last time I tried I had no start menu as any user on my test vm lol

Ah, see, primary school, there's the difference I fully expect "CORTANA, SEARCH FOR GAY PRONS MEGA LOLZ" in the middle of a 30-strong ICT class. For young'ins it'll be more useful I suspect.

[rpycroft]

We have turned off the first login animation on a couple of test machines and it just comes up with the "old" style Windows 7 login information which is good.

 

Extra tip: Make sure you enable verbose login information in group policy to see more info on what it's doing as it's logging on.