We all have been using Group Policies for decades for all of our on-prem domain joined machine. Now Microsoft has introduced, in preview, ADMX template style settings in Intune.
MS Docs for details. https://docs.microsoft.com/en-us/intune/administrative-templates-windows
- Assumption is you have some Intune knowledge and know how to assign profiles.
- To access the Preview, go into your Azure Portal – Microsoft Intune -> Device configuration – Profiles
Create a new profile
Name your profile, choose Windows 10 or Later as the platform, and Profile type is Administrative Templates (Preview)
- In the profile, choose Settings and you will see all the policies available (there are few pages).
5. In the filter, search for a policy setting if needed like the screen shot below or sort the columns accordingly.
6. Select a setting like I have below and choose an option (similar to GPO). For the Excel save setting, I chose the default to be Excel 5.0/95 Workbook so I can see the change (as Excel XLS is default anyways).
7. In my test I have chosen several different settings.
8. Assign the profile accordingly to your test group.
9. Monitor deployment status
10. Once the settings are applied, check the device for results.
Update to registry HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WcmSvc\wifinetworkmanager\config
Or via Login Script or during the task sequences in Configuration Manager or MDT (post image install)
reg add HKLM\SOFTWARE\Microsoft\WcmSvc\wifinetworkmanager\config /t REG_DWORD /v AutoConnectAllowedOEM /d 0
Modify Unattend.xml to add Microsoft-Windows-WiFiNetworkManager
Set WiFiSenseAllowed to 0
For Windows 10 build 1511 or later
Configure the Group Policy Object Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services under
Computer Configuration\Administrative Templates\Network\WLAN Service\WLAN Settings\.
How to disable certain Internet Protocol version 6 (IPv6) components in Windows Vista, Windows 7 and Windows Server 2008
via How to disable certain Internet Protocol version 6 (IPv6) components in Windows Vista, Windows 7 and Windows Server 2008.
How to Prevent Internet Explorer 8 from automatically installing on computers running Microsoft Windows XP, Windows Vista, Windows Server 2003, and Windows Server 2008.
Add following to the registry (see Figure 1)
Keys: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Setup\8.0]
Value Name: DoNotAllowIE80
Data Type: REG_DWORD
Custom ADM template to redirect Favorites for Windows XP workstations. Copy the text below to a notepad file and save with .adm extension. Import the ADM file into your GPO and change the path for your environment.
–Copy start below-
CATEGORY “Custom Policies”
PART “Redirect Favorites” EDITTEXT
KEYNAME “Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders”
DEFAULT “H:\MY DOCUMENTS\Favorites”
–Copy end above–
Question: How to deploy Windows 7 Taskbar Pinned Icons by Group Policy
Answer: Windows 7 taskbar pinned icons are stored in the following locations:
%APPDATA%\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar
To deploy it, you can perform the following steps:
- Configure Pinned items on a Windows 7 system as a reference computer.
- Export Reigstry Key to pinned.reg file:
- And copy items in the “%APPDATA%\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar” to a shared folder.
Create a logon script to deploy the registry keys and copy the corresponding files.
If you want to pin items to the Start Menu, you may refer to the following script:
Pin Items to the Start Menu or Windows 7 Taskbar via Script