Must have GPO settings

[TriggerHappyUK]

Hi guys,

 

Not posted for a long time, since moving out of the education scene and into the commercial side of things. But now I'm about to start a new job, back into education (An academy with 6th form), and was wondering what GPO's are a 'must have' for everyone.

 

I have a decent idea of what should be there, but been out of it during the whole Win10/Server 2016 chapter.

 

Thanks for looking,

 

 

C

[BOOT]

My personal favourite during my Windows 10 rollout is:

Computer Configuration -> Policies -> Administrative Templates -> System -> User Profiles -> Only allow local user profiles

... Goodbye roaming profile headaches.

[gmonks]

I made this post RE good GPOs for Windows 10 1803 Education

 

http://www.edugeek.net/forums/o-s-deployment/201697-windows-10-1803-building-reference-image.html#post1721216

[TwistedHelixis]

Not near server so cant remember proper name etc, but the one that 'waits for network at logon'. I will post back later with location / name

[DrBeaker]

Verbose logon - for the love of god and everything else. I always enable verbose logon! I've had a lifetime of the stuck on "Please wait" and "Welcome" screen messages to last a lifetime!

[TheNerdyBirdUK]

Definitely set default search provider in IE to google otherwise staff will be using Bing ...

 

[Guest ZFarnworth]

Disable show sign in animation

 

Most needed in every domain environment in my opinion.

[DrBeaker]

I always enable verbose/detailed logon messages. Very useful to IT and improves the perception to the user the computer is actually doing something.