Cheeky Request - Stealing GPOs

[Steve21]

Afternoon All,

 

Hopefully in the new year governors are going to sign off on a bulk replacement of computers which will finally kick the place into realising they need to upgrade (They only upgraded to 7 just before I joined so have been very hesitant on moving again yet), and obviously need to have a play and sort out new GPOs etc. I get the feeling all the new machines are going to have the same problems on 7 with drivers etc that our last few laptops had with the fact there aren't any etc!

 

I was wondering if anyone who's happy with their win10 setup might be kind enough to consider zipping up all their win10 GPOs and sending over a copy via email etc (Obviously nothing private, just the boring stuff! ), I've been having a play locally with them to compare to our 7 ones but would be awesome to see exactly how others have theirs setup and just have a test machine built up with your setup as such to see how it runs here.

 

Couple of local people I know mentioned about visiting them but just thinking first case would be good to have a bash at it here before raising hundreds of questions

 

Very cheeky I know, but thought I'd ask Reading through a lot of the 10 threads here seems there's so many new bits hidden around I get the feeling I'm going to end up missing a lot otherwise!

 

Thanks,

Steve

[DJ-1701]

I don't think it's a cheeky request, it could help a lot of people out... but sometimes it can be hard to follow why people have done things in a certain way.

 

I've only converted the Primary to Windows 10 at present, but if it's any help I can export and anonymise the GPOs when I have a moment, as well as detail the items I do to change update the Windows 10 build. Might not be all that you want, but I guess it would be a base line.

[Steve21]

Yep any and all would be appreciated Always better to have more to play with than not enough!

 

Happy to send emails if it's easier than removing every item if you mean server names etc (obviously passwords etc if you're using any haha)

 

Many thanks in advance,

Steve

[smadison]

Any help would be appreciated here as well. Happy to share once I have my GPO's finished.

[alfatec]

PM me. I have a default Windows 10 student profile that is fully locked down. Been used and tweeked since Windows 10 came out. We now run 1709 and it runs fine. Has all the start menu, desktop re-direction, start menu tile xml, Chrome settings,

Office 2016 settings and Edge settings. Also have one for 1709 but will need to edit some bits out.

[Steve21]

Many thanks in advance! Thrown PM across.

 

Steve

[NetworkNinja]

PM me. I have a default Windows 10 student profile that is fully locked down. Been used and tweeked since Windows 10 came out. We now run 1709 and it runs fine. Has all the start menu, desktop re-direction, start menu tile xml, Chrome settings,

Office 2016 settings and Edge settings. Also have one for 1709 but will need to edit some bits out.

 

Hello,

 

I have sent you a PM i hope you don't mind

[danrhodes]

I’m in the process of upgrading my standard gpo set to be compliant with 1709 so if anybody is interested I’m fine for anybody having a copy. I will stick it up on GPO Share at the end of next week.

[mdrabble]

Be good to compare and see where I need to improve my settings

[danrhodes]

I agree I’d like to take a look at how other people go about locking down windows 10. My basic set of gpos include a default computer policy then various user policies for students and staff. I also have a power shell installer that crates the ou structure etc etc if you want to take a look?

[caffrey]

Interested too, our GPO's have been added on and on over the years and they seriously need a good clean out - It's one of those jobs you just put off because stuff works.

[danrhodes]

It sure is they become very messy it’s same at a lot of my sites every so often I try to strip them back, normally in the summer hols.

 

The power shell installer I wrote as I install new servers / networks as a job mainly in junior schools but also some secondaries and I got tired of doing it all manually and there being slight differences with each install so along came a 3k lines power shell script 👍 it’s not perfect it’s a work in progress but it works for me. Basically plonk it on a fresh fully updated 2012 r2 or 2016 server and it will sort everything from domain onwards, dhcp, DNs scavenging, ou structure, group policies etc etc

[speckytecky]

@Steve21 thanks for raising this extremely useful thread; it's a subject I'd felt I was well, well behind the curve on and I'm heartened to see others seem to be in the same canoe! Thanks also to @alfatec (PM'd you) and @danrhodes for your offers above.

 

As an aside, it's interesting to see the level of Governor involvement in your IT.

Edited December 9, 2017 by speckytecky

[Steve21]

Yep, many thanks to all who are offering.

 

Even if it's just small GPOs for something like Menus or Apps or something doesn't need to be the entire thing (obviously would be nice haha) I'm sure it'll all help someone.

 

Many thanks in advance!

 

Steve

[Netmanager]

@alfatec. Your offer of GPO assistance will be greatly appreciated - Feels like I'm going round in circles here...PM Sent

[The_Oracle]

Likewise, thanks all for contributing to this thread, once again EduGeek comes to the rescue!

[newpersn]

Sorry to bump. Could i have a look at Windows 10 GPO?

[alfatec]

NetManager - PM me with your email address and I will send it over. Thanks.

[thompsonc]

Just sent you a PM hope you don't mind

[newpersn]

Big thank you to @alfatec

 

On the side note has anyone got Windows 10 Default Machine GPO i could have a look at?

 

When we moved to windows 10 i rewrote most of our GPO's and there a few things that are not 100% (also im slowly removing items from staff and would like to compare mine against yours ...)

[thompsonc]

If you PM me I can send our device policies over, we've been running these in production since September so should be pretty solid!

[Steve21]

Might jump in on that offer too if that's ok Always need more to check mine over, slowly starting to get some configured up in spare time!

 

Steve

[mgs1990]

any objections if i jump in on the offer aswell? Starting to migrate to windows 10 over the summer and it would be nice to have something to compare to.

[newpersn]

If you PM me I can send our device policies over, we've been running these in production since September so should be pretty solid!

 

Pm sent.

[thompsonc]

None at all, PM me your email address and I'll send them over!