Help Center

Follow

Windows 10 Apps and Advertising: Group Policy Settings

This is a companion piece to the Live Webcast for Thursday, March 30th (links and additional information will be added after the webcast).

First, download the latest Windows 10 ADM* files from Microsoft: https://www.microsoft.com/en-us/download/details.aspx?id=53430

It is recommended, but not required, to use the Central Store for the ADM* templates. For more information on how to configure the Central Store, please see This Article.

You will want to create at least three GPOs. One GPO will handle the computer settings. One GPO will handle the user settings, and one GPO will handle the user settings, Start Menu layout (Windows 10 Enterprise and Education SKUs only).

Remember, when you apply the Group Policy Objects to an OU, both computer and user AD objects must be within that OU or a child OU of the parent.

First GPO, Computer Settings:
Computer Settings:
If a setting is not listed, then it is assumed to be "Not configured"
Computer Configuration > Policies > Administrative Templates > Windows Components

Important Settings:
> Cloud Content

  • Turn off Microsoft consumer experience (only applies to Enterprise and Education SKUs)

> Store

  • Turn off Automatic Download and Install of updates = Enabled
  • Turn off the offer to update to the latest version of Windows = Enabled
  • Turn off the Store application = Enabled (optional)

Important, but Optional Settings:
> Data Collection and Preview Builds

  • Toggle user control over Insider builds = Disabled
  • Allow Telemetry = Enabled, with a "0" option
  • Disable pre-release features or settings = Disabled
  • Do not show feedback notifications = Enabled

> OneDrive

  • Save documents to OneDrive by default = Disabled
  • Prevent the usage of OneDrive for file storage = Enabled

> Search

  • Allow Cortana = Disabled
  • Allow Cortana above lock screen = Disabled (if Cortana is disabled, you don’t theoretically need this setting)
  • Allow search and Cortana to use location = Disabled
  • Do not allow web search = Enabled
  • Don’t search the web or display web results in Search = Enabled

Optional Settings:
> App Privacy

  • All setting can be "Enabled" with a Default for all apps setting = "Force Deny"

> App runtime

  • Configure these to match your needs and your file associations

Second GPO, User Settings
User Settings:
If a setting is not listed, then it is assumed to be "Not configured"
User Configuration > Policies > Administrative Templates > Windows Components
> Cloud Content

  • Turn off all Windows spotlight features = Enabled

Third GPO, User Settings
Applicable only to Enterprise and Education SKUs
User Settings:
If a setting is not listed, then it is assumed to be "Not configured"
User Configuration > Policies > Administrative Templates
> Start Menu and Taskbar

  • Start Layout = Enabled (point to shared XML file)
  • Remove Games link from Start Menu = Enabled
  • Do not search Internet = Enabled
  • Add the Run command to the Start Menu = Enabled (optional, but useful)
  • Show Windows Store apps on the taskbar = Disabled (optional, depending on the apps installed)

More information on setting up the Start Menu (and Taskbar) can be found in the following articles:



Was this article helpful?
2 out of 2 found this helpful
Have more questions? Submit a request

0 Comments

Article is closed for comments.