From time to time Microsoft changes their ADMX templates and that may mean a setting you have configured becomes orphaned. Because you can not see the entry when you are EDITING the GPO you can’t delete it; you can only see it in the GPMC SETTINGS tab. So the question […]
There are 3 ways to configure the START MENU tiles and left RAIL (the thin menu on the far left that defaults with power, settings, documents) in Windows 10 with default applications: A – GPO Using a Windows 10 PC add the tiles and rail configuration you would like. Open […]
UPDATE OCT 18 2018 – You CAN now use a GPO to block the public Microsoft Store but keep your private corporate Store. See our short explanation HERE. After working on setting up a private Microsoft Business Store (businessstore.microsoft.com) I was shocked to find that I could not disable the […]
If you want to set your modern Windows (Win 10, Server 2016, Server 2019…) to not download and install updates automatically, there is a simple Group Policy Object you can create: GPO To Stop Windows From Automatically Updating: Expand COMPUTER > POLICIES > ADMINISTRATIVE TOOLS > WINDOWS COMPONENTS > WINDOWS […]
As you likely already know, because you have found this page, the GPO to disable the MICROSOFT STORE app was set to be ineffective on Windows 10 Pro after build 1511. This annoying change meant that you could only block the store using a GPO if you were running Windows […]
Here are the features that Microsoft is killing in Windows 10 1803. There are two lists, features that have been removed and features that Microsoft has stopped working on. Note that Windows 10 1803 is also known as the “Spring Creators Update” and “Redstone 4”. FEATURES REMOVED FROM WINDOWS 10 […]
Installing and configuring Windows Server Update Services (WSUS) on Server 2016 or Server 2012R2 is straight forward. There are four key steps:
To be clear, the process below will take you 20 minutes of work time to complete, but because you have to wait for the install to complete (5-15mins) and then the initial sync to complete (several hours), you will need a day to get your WSUS server functional.
To add the WSUS role launch SERVER MANAGER > MANAGE > ADD ROLES > then click next through to the ROLES and select WSUS. Then click NEXT to the end. Do NOT change the defaults.
If you run Windows 10 in a corporate settings you will likely want to set a few default entries in the START menu and TASKBAR. If nothing else you will likely want to remove the default junk that Microsoft clutters the START menu with. Fortunately after a few hours of […]
If you have Sophos Safeguard you likely have annoying popup messages saying things like: Sophos Safeguard: Communicating With Server Sophos Safeguard: No New Settings Available Sophos Safeguard: Synchronization with Sophos Safeguard server succeeded These will occur several times a day and drive your staff insane. Fortunately there is an easy way […]
If you want to disable the RESTORE button in PREVIOUS VERSIONS/SHADOW COPIES using a Group Policy Object (GPO), you are smart. Humans make mistakes so IT Administrators need to set policies to protect people from themselves. I argued with Microsoft about this fact when Shadow Copies came out and the response was that staff […]
UPDATE: VALIDATED THIS PROCESS ON WINDOWS 10 1909 – SEPT 18 2020 If you have Windows 10 clients on a WSUS server and you want to confirm that they are receiving patches from that WSUS server and not going directly to Microsoft to update, you used to just read the […]
This was a major a pain to me. I have found that many sites, including MSN.COM, Outlook Web Access, GoToMeeting.com and others, do not load properly with PROTECTED MODE enabled on Windows 7, 8 and 10 so after arguing with Microsoft about it for a few months last year, I have […]
When you think of product names like Windows Home and Windows Pro, you think of… well… products. This has changed in Windows 10. There are different editions of Windows 10, like Windows 10 Home, Windows 10 Pro, and Windows 10 Enterprise but there are ALSO streams of those editions. The […]
May 20th 2016 UPDATE: We have a solution to disabling the STORE in Windows 10 Pro using a Group Policy Object . To avoid confusion I started a new post HERE. JANUARY 28 2016 UPDATE: I have found this GPO to cause the STORE to fail to download apps but […]
Well, according to Microsoft you cannot currently change the background image on Windows 8.1 Login Screen. I confirmed this with Microsoft Partner Support HERE . I believe this will change in future versions of Windows. That being said you can force a specific colour (or color for our American friends!) […]
If you are in IT and deploying Office 2013 you are likely woried about security and in particular, you might want to disable the APPS FOR OFFICE feature. You can disable AfO in three ways: REGISTRY: HKEY_CURRENT_USER\software\policies\microsoft\office\15.0\WEF\trustedcatalogs!disableallcatalogs . GROUP POLICY: User Configuration\Administrative Templates\Microsoft Office 2013\Security Settings\Trust Center\Trusted Catalogs . OFFICE […]