genesis Posted June 15, 2018 Posted June 15, 2018 Hi We are using windows 7 for the students PC and planning to upgrade their PCs to windows 10. Please let me know the version of windows 10 you are using and the features that you have disbled. Do I need to build a separate GPO for windows 10 PC. Please let me know you experiences and best way of setting up this. Any suggesting would be great. Thanks in advance
caffrey Posted June 15, 2018 Posted June 15, 2018 Personally I just wipe the machines with a fresh build, i'm currently playing with Education 1803. You don't need to set up separate GPO's as they are backwards compatible, but do make sure you use the latest admx templates to the version of windows 10 you are using. I'm planning on new GPO's though as my current ones are very messy
Fazza Posted June 15, 2018 Posted June 15, 2018 Windows 10 Education 1803. Separate GPOs - no. New GPOs to replace existing ones - maybe! You will need the latest ADMX files as they have the newer settings for Windows 10 PCs (as well as maintaining the settings for older OS's). Build a test PC with Windows 1803 on it, install all your software to make sure it works and then see what works/doesnt work and then start working out what GPO settings (if any) you might need/like.
keyboards Posted June 15, 2018 Posted June 15, 2018 Yeah I'll be rebulding/formatting Is there any setting we badly need to apply, that just are applicable to 10
caffrey Posted June 15, 2018 Posted June 15, 2018 I'm still going through, but probably deny access to the store etc. also defer major updates
mikkydoos Posted June 25, 2018 Posted June 25, 2018 Who's using Windows Education N 1803.... are you guys tending to use Enterprise N 1803 instead.. ?
gshaw Posted June 25, 2018 Posted June 25, 2018 Wiping clean but with Education 1709 as we've done all our testing on that build and 1803 had some bugs on initial release. Made new Win10 specific policies I can roll out alongside our existing base GPOs including a few bits such as... > set Store to O365 managed version only > disable ability to boot to recovery from within Windows (check posts on here for why) > set up SSO to OneDrive Files on Demand (finally cloud storage using a native desktop API!) > managed Start Menu layout that also allows user to add additional tiles but not remove Office etc. > File Associations to use Adobe for PDFs rather than Edge > disable Hybrid Boot (seemed to cause issues with GPOs during our tests) > reduce Telemetry to bare minimum There's some others but need to read back through the GPO to remember them all now. Should be a few to get you started
ictgoodpractice Posted June 25, 2018 Posted June 25, 2018 When you upgraded from Win 7 to 10 what did you do with server software and hardware. Did they need upgrading too?
gshaw Posted June 25, 2018 Posted June 25, 2018 When you upgraded from Win 7 to 10 what did you do with server software and hardware. Did they need upgrading too?2012 R2 Domain Controllers work fine, no plans to upgrade those at present
Bedders Posted June 26, 2018 Posted June 26, 2018 (edited) When you upgraded from Win 7 to 10 what did you do with server software and hardware. Did they need upgrading too? At the time of our upgrade from Win 7 to Win 10 workstations we had both a 2003 r2 and a 2008 r2 domain controllers here, with Forest and Domain Functional Levels at 2000 native. I'm in the process of upgrading them but don't worry about legacy Active Directory infrastructure! We still have to have a few Windows 7 clients so I left our existing GPOs in place. All I did was create a new OU for Windows 10 machines and applied anything required to them, working around the User GPOs as best as I can (some stuff still in there from the XP days which I daren't touch!) We're not a school and only have 80-odd workstations and 20 servers. Went to Windows 10 Pro because Enterprise costs far too much. Edited June 26, 2018 by Bedders
PotNoodleTech Posted June 26, 2018 Posted June 26, 2018 Wiping clean but with Education 1709 as we've done all our testing on that build and 1803 had some bugs on initial release. Made new Win10 specific policies I can roll out alongside our existing base GPOs including a few bits such as... > set Store to O365 managed version only > disable ability to boot to recovery from within Windows (check posts on here for why) > set up SSO to OneDrive Files on Demand (finally cloud storage using a native desktop API!) > managed Start Menu layout that also allows user to add additional tiles but not remove Office etc. > File Associations to use Adobe for PDFs rather than Edge > disable Hybrid Boot (seemed to cause issues with GPOs during our tests) > reduce Telemetry to bare minimum There's some others but need to read back through the GPO to remember them all now. Should be a few to get you started Thanks that's very useful! Still running W7 here but thinking of moving to W10 at some point.
ictgoodpractice Posted June 26, 2018 Posted June 26, 2018 Are you running win 7 on new machines please? What server software are you using please?
PotNoodleTech Posted June 26, 2018 Posted June 26, 2018 Are you running win 7 on new machines please? What server software are you using please? Me? Well we don't buy latest gen PCs due to budget so we get refurbed OptiPlex 7010 / 3020 kind of PCs so a couple of generations old. These run excellently on Win7 and have full driver support from dell (for now). At the moment I have not really got a strong business case for moving to Win10 apart from "its new". I am sure that will change over the next year or two as hardware and support starts to dwindle for Win7. Servers are a mixture of 2012R2 and 2016.
caffrey Posted June 26, 2018 Posted June 26, 2018 Not much choice soon, as windows 7 stops support in 2020, I'm looking at moving to 10 next summer
jthompson Posted June 26, 2018 Posted June 26, 2018 Our process was this: Install Win10 (1709 Edu) to a test machine and apply all of the existing (Win7) GPOs. Test all of the settings are working as needed by systematically working through each of the GPOs and their settings. Create new GPOs to manage whatever newer features need configuring in Win10 (e.g. Start menu, Explorer ribbon, Store, etc.). Test those new GPOs against existing Win7 systems to make sure nothing wonky happens to Win7. We found that the existing GPOs all seemed to work with Win10, and none of our new GPOs fouled up Win7. I'd say it pays to not rush any of that, but to take as much time as needed in order to be thorough. Even if you're not planning to deploy it until summer 2019, it'd be worth doing the prep work to get your image(s) ready in plenty of time before then. The one thing we did have to change for Win7 was to stop using a mandatory profile for students. We've instead using local profiles (which was quite fiddly to set up in Win10, tbh).
genesis Posted August 6, 2018 Author Posted August 6, 2018 Please can you post me the features of Windows 10 Education edition that will be useful for Education when compared to Windows Enterprise edition.
gshaw Posted August 6, 2018 Posted August 6, 2018 Please can you post me the features of Windows 10 Education edition that will be useful for Education when compared to Windows Enterprise edition. Education and Enterprise are pretty much the same apart from the badge. In fact when you import the WIM file you actually see ENTERPRISE even when using an Education ISO. Education vs LTSB however is the pertinent question on here usually. Pros for Education are OneDrive Files on Demand, ability to use Store apps (if you have any). Cons are needing to remove the cruft that comes down (use an App removal PowerShell script, easily found on here) and managing the regular releases.
mavhc Posted August 6, 2018 Posted August 6, 2018 Pros for new releases and UWP: New MS apps are all UWP, Paint 3D is great, new features are usually good, fix bugs, more GPO options etc At least if you upgrade every 6 months you find a lot of little problems instead of waiting 4 years and finding a lot of problems all at once
Arthur Posted August 6, 2018 Posted August 6, 2018 Remind me what UWP and LTSB are now? Universal Windows Platform and Long Term Servicing Channel. 1
mavhc Posted August 6, 2018 Posted August 6, 2018 UWP is the new Windows 10 app stuff, what they used to call Metro. LTSB is Windows for devices, not PCs, minimal stuff, rarely updates 1
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now