Intune – ADMX-backed admin templates (preview)

We all have been using Group Policies for decades for all of our on-prem domain joined machine. Now Microsoft has introduced, in preview, ADMX template style settings in Intune.

MS Docs for details. https://docs.microsoft.com/en-us/intune/administrative-templates-windows

  • Assumption is you have some Intune knowledge and know how to assign profiles.
  1. To access the Preview, go into your Azure Portal – Microsoft Intune -> Device configuration – Profiles
  2. Create a new profile

  3. Name your profile, choose Windows 10 or Later as the platform, and Profile type is Administrative Templates (Preview)

  4. In the profile, choose Settings and you will see all the policies available (there are few pages).

5. In the filter, search for a policy setting if needed like the screen shot below or sort the columns accordingly.

6. Select a setting like I have below and choose an option (similar to GPO). For the Excel save setting, I chose the default to be Excel 5.0/95 Workbook so I can see the change (as Excel XLS is default anyways).

7. In my test I have chosen several different settings.

8. Assign the profile accordingly to your test group.

9. Monitor deployment status

10. Once the settings are applied, check the device for results.

Disable Wi-Fi Sense – Windows 10

Option 1.

Update to registry HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WcmSvc\wifinetworkmanager\config

Or via Login Script or during the task sequences in Configuration Manager or MDT (post image install)

reg add HKLM\SOFTWARE\Microsoft\WcmSvc\wifinetworkmanager\config /t REG_DWORD /v AutoConnectAllowedOEM /d 0

Option 2.

Modify Unattend.xml to add Microsoft-Windows-WiFiNetworkManager

Set WiFiSenseAllowed to 0

Option 3.

For Windows 10 build 1511 or later

Configure the Group Policy Object Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts, and to hotspots offering paid services under

Computer Configuration\Administrative Templates\Network\WLAN Service\WLAN Settings\.

Prevent Internet Explorer 8 from automatically installing

How to Prevent Internet Explorer 8 from automatically installing on computers running Microsoft Windows XP, Windows Vista, Windows Server 2003, and Windows Server 2008.

Add following to the registry (see Figure 1)

Keys: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Setup\8.0]

Value Name: DoNotAllowIE80

Data Type: REG_DWORD

Value: 1


Figure 1

GPO: Custom ADM to redirect Favorites for Windows XP

Custom ADM template to redirect Favorites for Windows XP workstations. Copy the text below to a notepad file and save with .adm extension. Import the ADM file into your GPO and change the path for your environment.

 

 

–Copy start below-

CLASS MACHINE

CLASS USER

    CATEGORY “Custom Policies”

    KEYNAME “Software\Microsoft\Windows\CurrentVersion\Policies”

        POLICY “Favorites”

            PART “Redirect Favorites” EDITTEXT

            KEYNAME “Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders”

            VALUENAME “Favorites”

            DEFAULT “H:\MY DOCUMENTS\Favorites”

            MAXLEN 50

            END PART

        END POLICY

    END CATEGORY

–Copy end above–

How to deploy Windows 7 Taskbar Pinned Icons by Group Policy

 

Question: How to deploy Windows 7 Taskbar Pinned Icons by Group Policy

Answer: Windows 7 taskbar pinned icons are stored in the following locations:

File System:
%APPDATA%\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar

Registry:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]

To deploy it, you can perform the following steps:

  1. Configure Pinned items on a Windows 7 system as a reference computer.
  2. Export Reigstry Key to pinned.reg file:
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband]
  3. And copy items in the “%APPDATA%\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar” to a shared folder.  

Create a logon script to deploy the registry keys and copy the corresponding files.

More Information
If you want to pin items to the Start Menu, you may refer to the following script:
Pin Items to the Start Menu or Windows 7 Taskbar via Script

http://blogs.technet.com/deploymentguys/archive/2009/04/08/pin-items-to-the-start-menu-or-windows-7-taskbar-via-script.aspx