Microsoft a publié une mise à jour de son fichier de listing des paramétrages de stratégies de groupe (GPO) pour Windows 10 1809 (October 2018 Update). On retrouve de nombreux nouveaux paramétrages dont :
Télémétrie et Vie privée :
- Disable deleting diagnostic data
- Disable diagnostic data viewer.
- Configure Microsoft 365 Update Readiness upload endpoint
Système :
- Settings Page Visibility (pour l’utilisateur). Ceci était très attendu !
- Allow Clipboard synchronization across devices
- Allow Clipboard History
- Remove frequent programs list from the Start Menu
- Remove All Programs list from the Start menu
- Do not keep history of recently opened documents
- Force Start to be either full screen size or menu size
- Remove "Recently added" list from Start Menu
OOBE :
- Don't launch privacy settings experience on user logon
Windows Update
- Remove access to "Pause updates" feature
- Display options for update notifications
Windows Defender :
- Configure detection for potentially unwanted applications
- Configure low CPU priority for scheduled scans
Windows Defender Application Guard :
- Allow Windows Defender Application Guard to use Root Certificate Authorities from the user’s device
- Allow camera and microphone access in Windows Defender Application Guard
- Allow users to trust files that open in Windows Defender Application Guard
- Configure additional sources for untrusted files in Windows Defender Application Guard.
Windows Defender Security Center
- Hide the Virus and threat protection area
- Hide the Ransomware data recovery area
- Hide the Firewall and network protection area
- Hide the App and browser protection area
- Prevent users from modifying settings
- Hide the Device performance and health area
- Hide the Family options area
- Hide all notifications
- Hide non-critical notifications
- Configure customized notifications
- Configure customized contact information
- Specify contact company name
- Specify contact phone number or Skype ID
- Specify contact email address or Email ID
- Specify contact website
- Hide the Account protection area
- Hide the Device security area
- Hide the Security processor (TPM) troubleshooter page
- Hide the Secure boot area
- Disable the Clear TPM button
- Hide the TPM Firmware Update recommendation.
- Hide Windows Security Systray
MMC :
- Group Policy Starter GPO Editor
- Group Policy Management Editor
- Storage Manager for SANs
- Storage Manager for SANS Extension
- Disk Management Extension
- Share and Storage Management
- Share and Storage Management Extension
- DFS Management
- DFS Management Extension
- File Server Resource Manager
- File Server Resource Manager Extension
Préférences de stratégie de groupe :
- Configure Applications preference extension policy processing
- Configure Applications preference logging and tracing
- Configure Data Sources preference extension policy processing
- Configure Data Sources preference logging and tracing
- Configure Devices preference extension policy processing
- Configure Devices preference logging and tracing
- Configure Drive Maps preference extension policy processing
- Configure Drive Maps preference logging and tracing
- Configure Environment preference extension policy processing
- Configure Environment preference logging and tracing
- Configure Files preference extension policy processing
- Configure Files preference logging and tracing
- Configure Folder Options preference extension policy processing
- Configure Folder Options preference logging and tracing
- Configure Folders preference extension policy processing
- Configure Folders preference logging and tracing
- Configure Ini Files preference extension policy processing
- Configure Ini Files preference logging and tracing
- Configure Internet Settings preference extension policy processing
- Configure Internet Settings preference logging and tracing
- Configure Local Users and Groups preference extension policy processing
- Configure Local Users and Groups preference logging and tracing
- Configure Network Options preference extension policy processing
- Configure Network Options preference logging and tracing
- Configure Network Shares preference extension policy processing
- Configure Network Shares preference logging and tracing
- Configure Power Options preference extension policy processing
- Configure Power Options preference logging and tracing
- Configure Printers preference extension policy processing
- Configure Printers preference logging and tracing
- Configure Regional Options preference extension policy processing
- Configure Regional Options preference logging and tracing
- Configure Registry preference extension policy processing
- Configure Registry preference logging and tracing
- Configure Scheduled Tasks preference extension policy processing
- Configure Scheduled Tasks preference logging and tracing
- Configure Services preference extension policy processing
- Configure Services preference logging and tracing
- Configure Shortcuts preference extension policy processing
- Configure Shortcuts preference logging and tracing
- Configure Start Menu preference extension policy processing
- Configure Start Menu preference logging and tracing
- Permit use of Application snap-ins
- Permit use of Applications preference extension
- Permit use of Control Panel Settings (Computers)
- Permit use of Data Sources preference extension
- Permit use of Devices preference extension
- Permit use of Drive Maps preference extension
- Permit use of Environment preference extension
- Permit use of Files preference extension
- Permit use of Folders preference extension
- Permit use of Folder Options preference extension
- Permit use of Ini Files preference extension
- Permit use of Internet Settings preference extension
- Permit use of Local Users and Groups preference extension
- Permit use of Network Options preference extension
- Permit use of Network Shares preference extension
- Permit use of Power Options preference extension
- Permit use of Printers preference extension
- Permit use of Regional Options preference extension
- Permit use of Registry preference extension
- Permit use of Scheduled Tasks preference extension
- Permit use of Services preference extension
- Permit use of Shortcuts preference extension
- Permit use of Start Menu preference extension
- Permit use of Control Panel Settings (Users)
- Permit use of Preferences tab
Note : Il y a d'autres paramétrages mais j'ai sélectionné ceux qui me paraissaient important.
Télécharger Group Policy Settings Reference Spreadsheet Windows 1809
