Active Directory group policies, also called Group Policy Object (GPO), are one of my core topics. I have a lot to do with this in various projects and as a Microsoft trainer. As a result, I have accumulated a number of templates and links. This link collection should make your search a little easier. Only templates of the respective manufacturers or projects are listed here. I have deliberately avoided third-party guidelines.
Group Policy
Set Windows target release
Especially in test environments, you often need an older release of Windows 10, but how can you set Windows to a target release? Many companies are currently still using Windows 10 1909, and the Enterprise Edition is still supported until 11.05.2022. Unfortunately, I can only defer the feature upgrade in Windows 10 for 365 days. This means that a newly installed Windows 10 1909 updates to 20H2.
German Federal Office for Information Security (German BSI) security recommendations for Windows 10
The German Federal Office for Information Security (BSI) has published new documents on Microsoft Windows 10 and how to secure it. I looked at the BSI security recommendations for Windows 10 before I wanted to report on them. The background to this is that in the past, publications in this direction were sometimes more than outdated when they were published or they were very superficial.
User-related administrative templates in Intune (version 2101)
Let’s first look at the comparative figures between the last article from October 2019 and now. The Edge Bowser and Microsoft Office have seen the most changes.
Device-specific administrative templates in Intune 2101
Let’s first look at the comparative figures between the last article from October 2019 and now. The most changes have been made to Edge Bowser and Internet Explorer. There are also new settings for BitLocker. These were previously only configurable via their own policies in Intune.
Administrative Templates in Intune (Version 2101)
In October 2019, I had already published a list of administrative templates. After that time, I thought I should update it.
Implement Microsoft Connected Cache with SCCM
At Ignite 2019, Microsoft announced the Connected Cache (previously known as Delivery Optimization In-Network Cache (DOINC)). I’ll take a closer look at it now. But what do you really need it for?
Setting up Office 365 – Part 2
This article is part of my migration from my old Office 365 to my new Microsoft 365 Tenant. It is also about setting up Office 365, the other Microsoft 365 topics will follow later. I also have written this article intentionally so that it can also be used for setup outside of a migration scenario. Part 1 was about choosing the right edition, setting up the account and configuring the domains and DNS.
Microsoft Azure AD – what do you need it for?
I am often asked, what actually is this Azure-AD? I thought I could dedicate a blog series to this question, after all it is becoming more and more important. In this series, I will also write about authentication methods, types of identities and objects, licenses and compatible services. In short, everything about Azure Active Directory.
Windows 10 and the Microsoft Store
Many companies would like to turn off the Microsoft Store so that not everyone installs “Netflix” or “Ages of Empires” on their corporate device. There are many ways, but which one is the right one, that depends. The risk exists that if the store is deactivated incorrectly, the integrated apps (for example the calculator or the photo app) will not receive any updates. However, there are a few basics that need to be clarified before you can get started.
