About Windows Group Policy

See also: InstallMSIThroughGPO

Updating G.P. from D.C.

gpupdate /force

Viewing effective G.P.

gpresult /v/h > %temp%\gp.html

rsop.msc : GUI tool, less info, more easy

Some specific GPOs

Set Wallpaper

User Configuration -> Policies -> Administrative Template -> Desktop -> Desktop -> Desktop wallpare ΚΑΝΟΥΜΕ FILL

Prevent Wallpaper

User Configuration -> Policies -> Administrative Template -> Control Panel -> Personalization -> Prevent Changing Desktop

Screen Saver

User Configuration -> Policies -> Administrative Templates -> Control Panel -> Personalization -> Enable Screen Saver

Screen Saver Timeout

User Configuration -> Policies -> Administrative Templates -> Control Panel -> Personalization -> Screen Saver timeout

Specific Sceen Saver

User Configuration -> Policies -> Administrative Templates -> Control Panel -> Personalization -> Force specific Screen Saver

Prevent changing screen saver

User Configuration -> Policies -> Administrative Templates -> Control Panel -> Personalization -> Prevent changing screen saver

Password protect after screen saver

User Configuration -> Policies -> Administrative Templates -> Control Panel -> Personalization -> Password protect the screen saver

Password and Account Policy

Computer Configuration -> Policies -> Windows Settings -> Account Policies -> και μετά πάμε όπου θέλουμε

Disable usb devices

Computer Configuration -> Policies -> Administrative Templates -> System -> Removable Storage Access

Request credentials for network installations??????

User Configuration\Policies\Administrative Templates\Windows Components\File Explorer

Windows SmartScreen

Computer Configuration\Policies\Administrative Templates\Windows Components\File Explorer -> Configure Windows SmartScreen

Restrict downloading from internet explorer

User Configuration > Policies > Administrative Templates > Windows Components > Internet Explorer > Internet Control Panel > Security Page > Internet Zone > "Allow file download

Απενεργοποίηση NLA

Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\ Security\ Require user authentication for remote connections by using Network Level Authentication

Ενεργοποίηση UAC

Computer Configuration\Policies\Windows Settings\Security Settings\Public Key Policies\Automatic Certificate Request Settings