Win 10 Locked down GPO? (pupils accounts)

[newpersn]

Has anyone got a locked down GPO that they could share so i can compare mine to yours?

 

I'm trying to lock down a Pupils GPO and im slowly getting there but im sure i've missed things out.

[mavhc]

So far I have:

 

Control Panel/Personalization

Prevent changing lock screen image Enabled

Prevent changing start menu background Enabled

Prevent enabling lock screen slide show Enabled

 

System/Logon

Do not display network selection UI Enabled

Show first sign-in animation Disabled

 

Windows Components/App Package Deploymenthide

Policy Setting Comment

Allow a Windows app to share application data between users Disabled

Allow deployment operations in special profiles Disabled

Disable installing Windows apps on non-system volumes Enabled

Prevent users' app data from being stored on non-system volumes Enabled

 

 

Windows Components/Cloud Content

Turn off Microsoft consumer experiences Enabled

 

Windows Components/Microsoft Edge

Configure corporate Home pages Enabled

Use this format:

Don't allow SmartScreen Filter warning overrides Enabled

Open a new tab with an empty tab Enabled

Turn off InPrivate browsing Enabled

 

Windows Components/OneDrive

Prevent the usage of OneDrive for file storage Enabled

 

Windows Components/Search

Allow Cortana Disabled

 

 

Windows Components/Windows Game Recording and Broadcasting

Enables or disables Windows Game Recording and Broadcasting Disabled

 

User Configuration

Administrative Templates

System

Don't run specified Windows applications Enabled

List of disallowed applications

OneDriveSetup.exe

Edited May 18, 2016 by mavhc
added more settings

[newpersn]

So far I have:

 

Control Panel/Personalization

Prevent changing lock screen image Enabled

Prevent changing start menu background Enabled

Prevent enabling lock screen slide show Enabled

 

Windows Components/Cloud Content

Turn off Microsoft consumer experiences Enabled

 

Windows Components/OneDrive

Prevent the usage of OneDrive for file storage Enabled

 

Windows Components/Search

Allow Cortana Disabled

 

 

Windows Components/Windows Game Recording and Broadcasting

Enables or disables Windows Game Recording and Broadcasting Disabled

 

Anyone else?

[tmoon-mint]

Very helpful, thanks. I currently also have the settings app locked down using Applocker.

[mavhc]

Added more settings above.

 

Will post later in this thread http://www.edugeek.net/forums/windows-10/170096-deploying-win-10-pro-wds.html about how to install Win 10 with WDS and remove prebuilt apps, no editing of Wim required.

[gaz003]

I am having a slight issue, I have tried disabled cortana (it no longer searches on the web) however when you click on cortana it still loads and allows you to search the local computer for example if a student types "network" it loads lots of network information , they can click on creating a vpn etc

 

How do I stop the search indefinitely??