Computer Group Policy

[googlemad]

I'm really new to GP, do the following changes seem OK for a 'Computer' level policy (So will filter down to all computer objects)

 

Computer Configuration

--Policies

---Security Options

-----Accounts: Rename administrator account : Defined 'pcadmin'

-----Interactive logon: Do not display last user name : 'Enabled'

-----Interactive logon: Do not require CTRL + ALT + DEL : 'Enabled'

-----Interactive logon: Message text for users attempting to log on : '(our aup message)'

-----Interactive logon: Message title for users attempting to log on : '(our establishment name)'

-----Interactive logon: Number of previous logons to cache (in case domain controller is not available) : Defined '0 logins'

 

------System Services

-----Remote Registry : Defined 'Automatic'

 

------Windows Firewall with Advanced Security

-----Domain Profile : Defined 'Disabled'

-----Private Profile : Defined 'Disabled'

-----Public Profile : Defined 'Disabled'

 

------Administrative Templates

---Logon

-----Hide entry points for Fast User Switching : Defined 'Enabled'

-----Always wait for the network at computer startup and logon : Defined 'Enabled'

---User Profiles

-----Delete user profiles older than a specified number of days on system restart : Defined 'Enabled' 7 days

-----Delete cached copies of roaming profiles : Defined 'Enabled'

---HomeGroup

-----Prevent the computer from joining a homegroup : Defined 'Enabled'

---Windows Defender

-----Turn off Windows Defender : Defined 'Enabled'

---Windows Error Reporting

-----Disabled Windows Error Reporting : Defined 'Enabled'