Migrate imported GPOs to Intune with Group Policy analytics (preview) Introduction In our previous blog post, where I wrote about exporting GPOs from Group Policy management on-prem using PowerShell and doing a proper cleanup with Microsoft Graph, I promised you an article about the new migration option within Group Policy
Group Policy analytics (preview) – Export linked and enabled GPOs. Introduction It has almost been a year since I wrote our original blog post about Group Policy analytics (preview) in Microsoft Endpoint Manager. Since then, several improvements have been added to the tool, but there are still a few areas
Prevent sensitive information from being captured on Cloud PCs with screen capture protection. Introduction In this blog post I will show you how to enable a feature called “Screen Capture Protection” which will prevent sensitive information from being captured on your Windows 365 Cloud PC(s), intentionally or by malicious software.
Introduction In this blog post I will be looking at Group Policy Analytics (preview) in Microsoft Endpoint Manager. Organizations have been using group policy objects (GPOs) for decades to configure user and computer settings on devices in their environment. But in these modern days, where many organizations are embracing cloud
How often have you clicked through numerous screens when starting the local office package? I know I have done my fair shares, and I am done with it. As we enter the cloud with more and more services, we also have new tools providing control across our devices. I
This is an updated version of one of our very old articles ADMX files available Also take a look at this post about How to create and manage the Central Store for Group Policy Administrative Templates in Windows And now we are talking policies – I would like to recommend
You might see this warning on Windows 7, Windows 8, Windows 10 or when working with RDS/XenApp servers and libraries: Some library features are unavailable due to unsupported library locations. click here to learn more. Windows 7: Windows 8.1: And Windows 10: You will see this warning if you have
Microsoft has now released ADMX files from Windows 10 as a downloadable file. Administrative Templates (.admx) for Windows 10 When I compare the downloaded ADMX files with my Windows 10, the following files are changed a bit: settingsync.admx PreviousVersions.admx And these are brand new: DeliveryOptimization.admx fileservervssagent.admx gamedvr.admx grouppolicypreferences.admx grouppolicy-server.admx mmcsnapins2.admx
Microsoft has released new Excel spreadsheet with information’s about the Group Policy settings in Windows 10. You can filter settings so you are able to see only new policies or for example only Microsoft Edge settings. Group Policy Settings Reference for Windows and Windows Server These spreadsheets list the policy
In Windows 2012 R2 we have a very nice feature in the Group policy Management Console were we are able to run GPUpdate on all computers in a OU. On a OU holding for example RDS or Citrix servers this is very useful. But there is just one problem, users
I often find my self working on a computer where the control panel has been restricted so that only selected item are shown (hidden). Some of the missing items can still be started and also as an other user if necessary. Item Command Action Center wscui.cpl Date and Time timedate.cpl
In some environments I really don’t want this message when trying to shut down or restart a Windows server. Luckily we got a GPO setting that can remove this prompt. Computer Configuration – Policies –Administrative Templates – System – Display Shutdown Event Tracker Setting this to Disabled will remove the
Some times I find my self working on a machine with administrative rights but Internet Explorer Security tab has been removed by a Group Policy. For testing only I really need to add an address to the trusted zoned. Because of my local administrative rights I am able to temporary
You might find yourself in a situation where Folder redirection on Windows 8.1 does not apply anymore. If the redirected folder is not already on the share it is not created. Apparently, there is no errors in the event log, but event ID 1012 might be there: Folder Redirection configuration
On Windows 7 you might not want your users to be able to see the recent opened documents in the start menu. Or in the jump list of the program. And finally nor in the application as shown here: One way to deal with this is to clear the history
In Windows 8.1 we have an option to boot windows directly to the desktop (desktop mode). Right click on the taskbar and select Properties. Select the Navigation tab and under Start screen, check the first option that says When I sign in or close all apps on a screen, go
This is one of the old ones, I have never had the time to blog. I some situations you might find you self in so big trouble that you would like to recreate the original Domain and Domain Controllers policies. This is possible with the command DCGPOFIX http://technet.microsoft.com/en-us/library/hh875588(v=ws.10).aspx As an
Yet another popup we might want to hide In Devices and Printers you can see the information Windows can display enhanced device icons and information from the internet. in order to remove / disable this information we can use a Group policy Computer Configuration – Policies –Administrative Templates – System
You might see this prompt in Internet Explorer 9. Speed up browsing by disabling add-ons. If you don’t want your users to see this question, one way to remove it is to create a Group Policy (GPO). This is one setting that can be controlled in both the Computer and
The first time you start internet Explorer 9 for a new user you will se this popup. The user has the choice to select between Use recommended security and compatibility settings or Don’t use recommended settings. It might be a god idea to skip this popup for all users. On
The goal in this case is to create shortcuts on the start menu or desktop, for users who is member of a Active Directory group. If the user later is removed from the group the shortcut must also be removed. This can be achieved in many ways but one way
Here are some ADMX/ADML files you might be missing in your PolicyDefinitions folder on Windows 7, but need them for your Central Group Policy Store. Search.admx Windows search feature must be installed after installation search.admx and adml will be available in the policyDefinitions folder. ShapeCollector.admx Tablet PC Components feature must
In this post I will list the ADMX/ADML files I am aware of. Some of them I have used in my daily work , there are properly many more so let me know if you know other ADMX files and I will update the list. Product Download Link/Information Link Office
After updating the ADMX files in you central store, you might see this error in GPMC: Encountered an error while parsing. Expected one of the following possible element(s) This error is for example seen if you try to open the administrative template node from a Windows 2008 server but your
Update 18-11-2015 Looks like the ADMX files for the 1511 update has almost the same problem as the last time: If you previously has copied ADMX files for Windows 8.1 you might see this error: Namespace ‘Microsoft.Policies.WindowsStore’ is already defined as the target namespace for another file in the store.
Modern Workplace consultant and a Microsoft MVP in Windows and Devices.
Infrastructure architect with focus on Modern Workplace and Microsoft 365 security.
Cloud & security specialist with focus on Microsoft backend products and cloud technologies.
Cloud & Security Specialist, with a passion for all things Cybersecurity
Cloud and infrastructure security specialist with background in networking.
Infrastructure architect with focus on design, implementation, migration and consolidation.
Infrastructure consultant with focus on cloud solutions in Office365 and Azure.
Modern workplace and infrastructure architect with a focus on Microsoft 365 and security.
