{"id":2222,"date":"2016-10-04T23:47:20","date_gmt":"2016-10-04T23:47:20","guid":{"rendered":"http:\/\/pariswells.com\/blog\/?p=2222"},"modified":"2016-10-04T23:47:37","modified_gmt":"2016-10-04T23:47:37","slug":"gpos-for-enterprise-windows-10-roll-out","status":"publish","type":"post","link":"https:\/\/pariswells.com\/blog\/research\/gpos-for-enterprise-windows-10-roll-out","title":{"rendered":"GPO’s For Enterprise Windows 10 Roll Out"},"content":{"rendered":"

There is a big list by Microsoft I went through – https:\/\/technet.microsoft.com\/itpro\/windows\/manage\/manage-connections-from-windows-operating-system-components-to-microsoft-services#BKMK_WiFiSense<\/a> , Microsoft also provides a DISA STIG Baseline ( here<\/a> ) \u00a0however I have gone a bit further on security<\/p>

Computer Configuration – Administrative Templates – Windows Components – Data Collection and Preview Builds<\/strong><\/p>

Disable access to pre-release features – Disabled<\/p>

Configure telemetry to level 0 – Enterprise Only<\/p>

Do not show feedback notifications – Enabled<\/p>

Toggle user control over Insider builds – Disabled<\/p>

\u00a0<\/strong><\/p>

Computer Configuration – Administrative Templates \u2013 System – Log on<\/strong><\/p>

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Show first sign-in animation \u2013 Disable<\/p>

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Turn on convenience PIN sign-in – Diable<\/p>

Turn off picture password sign-in -Enable<\/p>

\u00a0<\/strong><\/p>

Computer Configuration – Administrative Templates – Windows Components – Search \u2013<\/strong><\/p>

Allow Cortana \u2013 Disabled<\/p>

\u00a0<\/strong><\/p>

Computer Configuration – Administrative Templates – Windows Components \u2013 Cloud Content<\/strong><\/p>

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Do Not Show Windows Tips – Enabled<\/p>

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Turn off Microsoft Consumer Experiences – Enabled<\/p>

\u00a0<\/strong><\/p>

Computer Configuration – Administrative Templates \u2013 Control Panel<\/strong><\/p>

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Do not display the lock screen – Enabled<\/p>

\u00a0<\/strong><\/p>

Computer Configuration \u2013 Windows Settings \u2013 Security Settings \u2013 Local Policies \u2013 Security Options \u00a0\u00a0\u00a0\u00a0<\/strong><\/p>

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Accounts: Block Microsoft Accounts \u2013 Enabled From Longon and Adding<\/p>

\u00a0<\/strong><\/p>

Computer Configuration\\Administrative Templates\\Network\\WLAN Service\\WLAN Settings\\<\/strong><\/p>

Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services<\/strong>\u00a0– Disabled\u00a0<\/p>

\u00a0<\/strong><\/p>

Computer Configuration\\ Administrative Templates\\ Control Panel\\ Regional and Language Options\\ Allow Input Personalization and set to Disabled.<\/strong><\/p>

We also collect your typed and handwritten words to improve character recognition and provide you with a personalized user dictionary and text completion suggestions. Some of this data is stored on your device and some is sent to Microsoft to help improve these services.<\/p>

Is it possible that any collected words may accidentally include patient information?<\/p>

\u00a0<\/strong><\/p>

Computer Configuration > Administrative Templates > Windows Components > OneDrive > Prevent the usage of OneDrive for file storage<\/strong> \u2013 Enabled<\/p>

\u00a0<\/strong><\/p>

Computer Configuration > Administrative Templates > Windows Components > Search> Don\u2019t search the web or display web results in Search<\/strong> \u2013 Enabled<\/p>

\u00a0<\/strong><\/p>

Computer Configuration > Administrative Templates > Windows Components > Search> Don\u2019t search the web or display web results in Search over metered connections<\/strong>\u2013 Enabled<\/p>

Why might you want to disable web search?\u00a0 It is a good idea if you don\u2019t want your local search queries sent to Bing.<\/p>

Computer Configuration> Administrative Templates> System> User Profiles> Turn off the advertising ID<\/strong><\/p>

Turn off the advertising ID to disable targeted ads –\u00a0 Enabled<\/p>

Computer Configuration\u00a0>\u00a0Administrative Templates\u00a0>\u00a0Windows Components\u00a0>\u00a0Store\u00a0>Disable all apps from Windows Store.
<\/strong>You can turn off the ability to launch apps from the Windows Store that were preinstalled or downloaded. This will also turn off automatic app updates, and the Windows Store will be disabled. On Windows Server 2016, this will block Windows Store calls from Universal Windows Apps.<\/p>","protected":false},"excerpt":{"rendered":"

There is a big list by Microsoft I went through – https:\/\/technet.microsoft.com\/itpro\/windows\/manage\/manage-connections-from-windows-operating-system-components-to-microsoft-services#BKMK_WiFiSense , Microsoft also provides a DISA STIG Baseline ( here ) \u00a0however I have gone […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[1238,547,1629,1213],"class_list":["post-2222","post","type-post","status-publish","format-standard","hentry","category-research","tag-enterprise","tag-group-policy","tag-rollout","tag-windows-10"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t