Windows 8.1 GPO Setting – How to Disable the Help Tips for Charms during first time login?

Whenever a new user login to Windows 8.1, they will get help tips on Charms as shown on below screen capture. It will go away till user perform once as instructed. This can really be irritating to experienced users. But it can be useful for those new users to Windows 8.

image

If you are instructed to disable the help tips for charms, you can do so with consideration on whether you want to apply to ALL or certain group of users as follow:

Consideration 1 – Anyone who logon to the Computer may consider to configure following GPO Setting:

Machine Configuration > Administrative Templates: Policy Definitions (ADMX… > Windows Components > Edge UI > Disable Help Tips

Consideration 2 – Target certain user may consider to configure following GPO Setting:

User Configuration > Administrative Templates: Policy Definitions (ADMX… > Windows Components > Edge UI > Disable Help Tips

image

Note: As of now, I will retain the setting as “Not Configured” as most users in my environment are still new to Windows 8. But after one year later when most people would have been familiar with Windows 8 when they upgraded their home machine, I will set this setting to “Enabled” before users come after me! Cheers!

Advertisements
Posted in Group Policy, Managing Group Policy Objects | Tagged , , | Leave a comment

Windows 8.1 GPO Setting – Why Configure "Search, Share, Start, Devices, and Settings don’t appear when the mouse is pointing to the upper-right corner of the screen"?

Does your user complains to you that the Search, Share, Start, Devices and Settings Edge User Interface (UI) keep appearing every time they try to close a Windows Explorer or Application Windows?

image

This is the reason why you get this GPO setting under

User Configuration > Administrative Template Policy Definitions (ADMX….  > Windows Components > Edge UI > Search, Share, Start, Devices, and Settings don’t appear when the mouse is pointing to the upper right corner of the screen

image

Note: This is user configuration policy so that you can target this setting to certain group of users in your environment. And PLEASE discuss with your bosses as many people may be used to move their mouse pointer to the upper-right corner of the screen?

Hope this helps in your planning on deploying Windows 8.1 in your environment!

Posted in Group Policy, Managing Group Policy Objects, Microsoft Windows | Tagged , | Leave a comment

What is “WinX” or “Charms” in Windows 8.1 and Windows Server 2012 R2 Group Policy Settings Reference Sheet is referring to?

Anyone who tried to view through the newly release excel sheet from Microsoft sharing on the new GPO settings applicable to Windows 8.1 and Windows Server 2012 R2. I believe you will have some questions as I do…

In case you are thinking what are the following settings mean. I am sharing with you on what I have combed through for my usage to buy you some time… Hope you find it useful.

 

File Name

Policy Setting Name (Excel Sheet)

Policy Setting Name (GPMC View)

Desktop.admx

Prevent adding

Note: Unable to find in the ADMX file

EdgeUI.admx

App switching

clip_image002[8]

EdgeUI.admx

Charms

clip_image004[8]

EdgeUI.admx

WinX

clip_image006[8]

EdgeUI.admx

 

clip_image008[8]

SkyDrive.admx

 

clip_image010[8]

SkyDrive.admx

 

clip_image012[8]

SkyDrive.admx

 

clip_image014[8]

kdc.admx

 

(Found New Setting that is not Reflected in the Excel Sheet)

Request compound authentication

clip_image016[8]

kerberos.admx

 

(Found New Setting that is not Reflected in the Excel Sheet)

clip_image020[8]

OfflineFiles.admx

At Logoff

Note: Cannot find in ADMX file.

Search.admx

Disable indexing of removable drives

Do not allow locations on removable drive to be added to libraries

clip_image024[8]

Search.admx

Don’t search the web or display web results in Search

clip_image026[8]

Search.admx

Don’t search the web or display web results in Search over metered connections

clip_image028[8]

Search.admx

Set what information is shared in Search

clip_image030[8]

Search.admx

Set the SafeSearch setting for Search

clip_image032[8]

SettingSync.admx

Do not sync Apps

clip_image034[8]

StartMenu.admx

Default

“GoToDesktopOnSignIn”

Go to the desktop instead of start when signing in or when all the apps on a screen are closed

clip_image036[8]

StartMenu.admx

Default app

“ShowAppsViewOnStart”

Show the Apps view automatically when the user goes to Start

clip_image038[8]

StartMenu.admx

Default search

“DisableGlobalSearchOnAppsView”

Search just apps from the Apps View

clip_image040[8]

StartMenu.admx

Sort

“DesktopAppsFirstInAppsView”

List Desktop Apps First in the Apps View

clip_image042[8]

StartMenu.admx

Multimon

“ShowStartOnDisplayWithForegroundOnWinKey”

Show start on the display the user is using when they press the Windows Logo Key

clip_image044[8]

UserProfiles.admx

User management of sharing user name

Turn Off The Advertising ID

clip_image046[8]

Posted in Group Policy, Managing Group Policy Objects, Troubleshooting | Tagged , , , , | Leave a comment

Group Policy Settings Reference for Windows 8.1 and Windows Server 2012 R2 – Missing Details in the Excel Sheet

For those who went to download the excel sheet that provide the list of new GPO settings from the link – http://www.microsoft.com/en-us/download/details.aspx?id=25250

You may need to comb through the whole excel sheet together with test environment to get a full picture of what the settings are.

Following are some that I went to sort out. Hope this will buy you some time.

File Name Policy Setting Name (From Excel Sheet) Policy Setting Name (From GPMC) Scope
EdgeUI.admx App switching Turn off switching between recent apps User
EdgeUI.admx Charms Search, Share, Start, Devices and Settings don’t appear when the mouse is pointing to the upper-right corner of the screen User

EdgeUI.admx

WinX Prevent Users from Replacing the Command Prompt with Windows PowerShell in the Menu they see when they right-click the lower-left corner or press the Windows Logo Key+X User

StartMenu.admx

Default Go to the desktop instead of start when signing in or when all the apps on a screen are closed User

StartMenu.admx

Default app List Desktop Apps First in the Apps View User

StartMenu.admx

Default search Search just apps from the Apps View User
StartMenu.admx Sort Show the Apps view automatically when the user goes to Start User
StartMenu.admx Multimon Show start on the display the user is using when they press the Windows Logo Key User

UserProfiles.admx

User management of sharing user name Turn Off The Advertising ID Machine

 

Ok… I am still going through the whole excel sheet. Most of the new settings are for Windows Defender that will make it very manageable. But my environment is using McAfee. Guess I can only play it in my test environment! Smile

Posted in Group Policy, Managing Group Policy Objects | Tagged , , | Leave a comment

Unable to edit GPO with settings imported – Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))

How I love Monday. Smile

Situation

Scenario today is:

1. Setup a new test Windows Server 2012 R2 Test Domain in Microsoft Virtual Environment.

2. Backup GPOs from existing Domain and convert the Folder containing the GPOs into ISO

3. Mount the ISO to the Virtualized Windows Server 2012 R2 Domain Controller

4. Create new GPOs and Import GPO setting directly from ISO.

5. Try to edit the GPO and….. encounter an error message – “Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))

image

Anyone spotted the root cause? Hahaha… Actually, I encountered this problem before too.

What happened is when ISO mounted in virtual machine is DVD-Drive, right? The files are “Read-Only”…

So, when you import… It took the whole setting over!

Resolution

How to revert? Locate the GPO’s unique ID.

image

Go to the folder containing the GPO folder. Find the folder that is named after the GPO unique ID.

image

Under properties of the folder, uncheck “Read-Only” and select “Apply Changes to the folder.. subfolder and files”, and click OK.

image

Note that after you apply, you may noticed that under the properties page, the check box is marked “Read-Only”. Do not panic, just go and try to edit the GPO now. It should work.

Pointers to Note:

The solution here is target for single GPO issue. If you cannot edit ALL GPOs. The problem may lies with the permission of your SYSVOL. Which I suggest you to look else where for solution.

Posted in Group Policy, Troubleshooting | Tagged , | 1 Comment

Group Policy Settings Reference for Windows 8.1 and Windows Server 2012 R2 is released!

The wait is over… The spread sheet that GPO administrator will NEED is out.

Thank You Microsoft!

Please follow the link below to grab it now!

http://www.microsoft.com/en-us/download/details.aspx?id=25250

image

What to do after you download? HAVE FUN! Smile I am going through one by one again to make sure I do not leave out any of the settings!

Cheers!

Posted in Group Policy, Managing Group Policy Objects, Microsoft Windows, Windows Server | Tagged , , | 1 Comment

Remember to Update Your WMI Filter in GPOs!

Recently, after I successfully deployed a GPO for Windows 8, another of my team-mate told me that 802.1x GPO does not work for Windows 8 machine. So, fun time – troubleshooting begins!

All settings looks fine on the GPOs from GPMC. But I noticed something… the GPO containing the network setting for 802.1x has a WMI filter that targets ONLY Windows 7! So, what does that mean? That GPO will not be applied to the Windows 8 Client machine! Open-mouthed smile Haha!

The reason why it was there initially is to prevent people from joining Windows XP to domain and get the 802.1x settings. Never realised that it will have some impact now after 2 years.

So, after I removed the WMI filter from the GPO, problem solved!

I actually take some time to comb through the whole domain for other GPOs that were applied with the Windows 7 WMI filter. Smile

So, do we need WMI filter still? Yes. we will still need it. And let me take this chance to share with you all on how to prepare the WMI query command string:

First, lets have a quick overview on various common product version / producttype / OSArchitecture Value

Operating System Version ProductType OSArchitecture
Windows XP 5.1% 1 32-bit or
64-bit
Windows Server 2003
(R2 too)
5.2% 2 or
3
32-bit or
64-bit
Windows Vista 6.0% 1 32-bit or
64-bit
Windows Server 2008 6.0% 2 or
3
32-bit or
64-bit
Windows 7 6.1% 1 32-bit or
64-bit
Windows Server 2008 R2 6.1% 2 or
3
64-bit
Windows 8 6.2% 1 32-bit or
64-bit
Windows Server 2012 6.2% 2 or
3
64-bit

Product Type Meaning

Client versions of Windows

1

Server versions of Windows that are operating as a domain controller

2

Server versions of Windows that are not operating as a domain controller (typically referred to as member servers)

3

So for Windows 8 64 bit OS, the WMI query string will be

Select * from Win32_OperatingSystem Where Version like “6.2%” AND ProductType=”1” AND OSArchitecture = “64-bit

For Windows Vista, Windows 7 and Windows 8 (32 bit or 64 bit), the WMI query string will be

Select * from Win32_OperatingSystem Where Version like “6.%” AND ProductType=”1

For Windows Server 2012, the WMI query string will be

Select * from Win32_OperatingSystem Where Version like “6.2%” AND (ProductType=”2” or ProductType=”3)

Hope this helps!

And once again, please remember to update your WMI filter in your GPO! Else when you deploy Windows 8, no GPO will be applied! Cheers!~

Posted in Managing Group Policy Objects, Microsoft Windows, Singapore Windows User Group (SWUG), Troubleshooting | Tagged , | 1 Comment