Windows 10: Windows 10 and Windows 11 - Adjustment of GPO policies for the company

HiI have Windows 10 and Windows 11 computers in my company. I would like to increase the efficiency of my systems and speed up their operation. What GPO policies can be enabled?

:)

 

Windows 10 GPO Printer Add issues

A total shot in the dark since this is a very specific issue to our environment, but here it goes...

A little background on this issue, my school district is moving to windows 10. We partially deployed Windows 10 LTSB to some of the labs in the district. We are seeing sporadic issues with our Group Policies deploying printers. We have below 50% success rate with printers actually installing on the Windows 10 client machines.

Thinking it was an issue with LTSB, we downloaded and installed Windows 10 Education version 1709 on a test VM and joined it to the domain. I then applied GPO’s from 4 different servers. 3 Physical Server 2012 R2 servers and the original problem Server 2012 R2 VM Server.

What I found was the same inconsistency after rebooting the Win 10 Edu Test VM. I am getting the same Event 513. See below:





I am 100% sure the naming is right because I can manually add the same printer using the \\SERVER\FerLib path. All printers that fail to add have the Event 513. I am also going to post this on other forums.

We are only seeing this on student accounts which are domain guest accounts, meaning their profiles are non-permanent. We do not have the option to turn them into regular users per district policy. If you need more info that I omitted please let me know. We are getting desperate.

Thanks!

 

Windows 10 Tweaks

Pressing “Windows+Pause Break” (it’s up there next to scroll lock) opens the “System” Window.

Windows 10: In the new version of Windows, Explorer has a section called Quick Access. This includes your frequent folders and recent files. Explorer defaults to opening this page when you open a new window. If you’d rather open the usual This PC, with links to your drives and library folders, follow these steps:

• Open a new Explorer window.
• Click View in the ribbon.
• Click Options.
• Under General, next to “Open File Explorer to:” choose “This PC.”
• Click OK

credit to Lifehacker.

 

GPO Override Policy Not Working

Following up with class in which we are making an Google Chrome Settings Override GPO for a local group -- added it at the group level; not the higher domain level. This should override the domain's (high-level) GPO that prevents downloads, prevents incognito
mode, and restrict access to netflix.com. This is according to Windows' Group Policy API documentation (Overriding and Blocking Group Policy).

When looking at the group's "Group Policy Inheritance" tab in the Group Policy Management tool from the Server Manager (Wins 2012), I am seeing that the override GPO takes precedence over the previously applied restrictive settings from the higher domain
policy. This is what we want.

However, when logged into a domain client -- with the credentials of the intended local group member -- the local group policy is not listed in Chrome://policy. The browser is still blocking netflix.com, downloads, and the use of incognito mode.

I restarted the client computer many times and ran the gpupdate /force script and successfully updated the policy several times. I also went as far as to enforced the GPO in the inheritance table for the local group taken precedence over all other GPOs.

Nothing is happening. HELP!