Windows 10 Group policy settings

[nathan3388]

Hi

 

Was just wondering what group policy setting people have applied to their windows 10 deployment, we are just in the process of testing all the current setting and wondering if there are any must have GPO settings. Or are there any problems that i will encounter that are general faults etc folder redirections, printer settings, etc?

 

Thanks

 

Nathan

[techy32]

we are also at the same situation and closely watching this thread......

[Michael]

Best advice I can offer is setup a test workstation and tweak away. You'll soon realise what you want to change or lock down.

[DrCheese]

Yeah, there's no real one size fits all list of settings to watch out for. Only way is to do the above, setup a test workstation, copy your existing GPOs and tweak until it works how you like it. Then test on your Windows 7/8 machines if holding onto to any.

[nathan3388]

yeah i am testing it by tweaking settings, but just after some essential ones that everyone would have?.

[JRowley]

Some that I've configured by default:

 

Interactive logon: Do not display last user name

Interactive logon: Do not require CTRL+ALT+DEL

Do not display network selection UI

Show first sign-in animation

Turn off app notifications on the lock screen

Turn off picture password sign-in

Turn off Microsoft consumer experiences

Allow Cortana

 

Mainly these are aimed at speeding up the login process and tidying up the login experience.

[PotNoodleTech]

Subscribing as I've got a few W10 PCs now and so far they're just inheriting whatever GPOs were on Windows 7, everything seems to work so far but any extra W10 specific magic would be useful!

[sted]

Subscribing as I've got a few W10 PCs now and so far they're just inheriting whatever GPOs were on Windows 7, everything seems to work so far but any extra W10 specific magic would be useful!

 

ones ive found worth setting

 

computer config\admin templates\windows components\delivery optimisation\download mode disabled

 

computer config\admin templates\windows components\cloud content\Turn off Microsoft consumer experiences enabled

 

computer config\admin templates\network\network provider\hardened unc paths stick netlogon and domain\server names here (the example in gpo explains it fairly well) but my setting are

 

\\*\NETLOGON RequireMutualAuthentication=0,RequireIntegrity=0 \\*\SYSVOL RequireMutualAuthentication=0,RequireIntegrity=0