-->

1. Open Domain Group Policy Editor
2. Edit Domain Group Policy Remotely

Since the Group Policy settings are stored in the Registry, the easiest method to create department-wide configurations might be through a.reg file, Microsoft maintains a list of the Group Policy Registry keys. For example, line 188 shows HKLM Software Microsoft Windows CurrentVersion Policies Explorer!AllowOnlineTips controls online tooltips. Prequisite: Only users that are Domain Admins or Enterprise Admins, or equivalent, are able to configure password policy on a Domain. Procedure: Navigate to Start – Administrative Tools – Group Policy Management. Expand the relevant domain node. Right click Default Domain Policy and select Edit from the drop down list. Updating Group Policy—domain-wide. Occasionally, I make a change to Group Policy on the network, and I want to force the policy to update on all the computers. Occasionally, they make changes at work, and I need to update my local Group Policy settings. To update Group Policy settings, I use the GPUpdate utility. The GPUpdate utility has a. Open the Group Policy Management Console and edit an object. Default group policy objects (GPOs) exist for users and computers in a managed domain. With the Group Policy Management feature installed from the previous section, let's view and edit an existing GPO. In the next section, you create a custom GPO. Configure Legal Notices On Domain Computers Using Group Policy. To configure Legal Notices On Domain Computers Using Group Policy. Login to the domain controller with an administrator account. Click Start Administrative Tools Group Policy Management. Under Domains, right click your domain and click Create a GPO in this domain, and link it here.

Applies to

• Windows 10

Describes steps to configure a security policy setting on the local device, on a domain-joined device, and on a domain controller.

You must have Administrators rights on the local device, or you must have the appropriate permissions to update a Group Policy Object (GPO) on the domain controller to perform these procedures.

When a local setting is inaccessible, it indicates that a GPO currently controls that setting.

To configure a setting using the Local Security Policy console

1. To open Local Security Policy, on the Start screen, type secpol.msc, and then press ENTER.

2. Under Security Settings of the console tree, do one of the following:

   • Click Account Policies to edit the Password Policy or Account Lockout Policy.
   • Click Local Policies to edit an Audit Policy, a User Rights Assignment, or Security Options.

3. When you find the policy setting in the details pane, double-click the security policy that you want to modify.

4. Modify the security policy setting, and then click OK.

   Note

   • Some security policy settings require that the device be restarted before the setting takes effect.
   • Any change to the user rights assignment for an account becomes effective the next time the owner of the account logs on.

To configure a security policy setting using the Local Group Policy Editor console

You must have the appropriate permissions to install and use the Microsoft Management Console (MMC), and to update a Group Policy Object (GPO) on the domain controller to perform these procedures.

1. Open the Local Group Policy Editor (gpedit.msc).

2. In the console tree, click Computer Configuration, click Windows Settings, and then click Security Settings.

3. Do one of the following:

   • Click Account Policies to edit the Password Policy or Account Lockout Policy.
   • Click Local Policies to edit an Audit Policy, a User Rights Assignment, or Security Options.

4. In the details pane, double-click the security policy setting that you want to modify.

   Note

   If this security policy has not yet been defined, select the Define these policy settings check box.

5. Modify the security policy setting, and then click OK.

Note

If you want to configure security settings for many devices on your network, you can use the Group Policy Management Console.

To configure a setting for a domain controller

The following procedure describes how to configure a security policy setting for only a domain controller (from the domain controller).

1. To open the domain controller security policy, in the console tree, locate GroupPolicyObject [ComputerName] Policy, click Computer Configuration, click Windows Settings, and then click Security Settings.

2. Do one of the following:

   • Double-click Account Policies to edit the Password Policy, Account Lockout Policy, or Kerberos Policy.
   • Click Local Policies to edit the Audit Policy, a User Rights Assignment, or Security Options.

3. In the details pane, double-click the security policy that you want to modify.

   Note

   If this security policy has not yet been defined, select the Define these policy settings check box.

4. Modify the security policy setting, and then click OK.

Important

• Always test a newly created policy in a test organizational unit before you apply it to your network.
• When you change a security setting through a GPO and click OK, that setting will take effect the next time you refresh the settings.

Related topics

-->

Applies to

• Windows 10

Looking for consumer information? See Customize the Start menu

In Windows 10 Pro, Enterprise, and Education, you can use a Group Policy Object (GPO) to deploy a customized Start and taskbar layout to users in a domain. No reimaging is required, and the layout can be updated simply by overwriting the .xml file that contains the layout. This enables you to customize Start and taskbar layouts for different departments or organizations, with minimal management overhead.

This topic describes how to update Group Policy settings to display a customized Start and taskbar layout when the users sign in. By creating a domain-based GPO with these settings, you can deploy a customized Start and taskbar layout to users in a domain.

Open Domain Group Policy Editor

Warning

When a full Start layout is applied with this method, the users cannot pin, unpin, or uninstall apps from Start. Users can view and open all apps in the All Apps view, but they cannot pin any apps to Start. When a partial Start layout is applied, the contents of the specified tile groups cannot be changed, but users can move those groups, and can also create and customize their own groups. When you apply a taskbar layout, users will still be able to pin and unpin apps, and change the order of pinned apps.

Before you begin: Customize and export Start layout

Operating system requirements

In Windows 10, version 1607, Start and taskbar layout control using Group Policy is supported in Windows 10 Enterprise and Windows 10 Education. In Windows 10, version 1703, Start and taskbar layout control using Group Policy is also supported in Windows 10 Pro.

The GPO can be configured from any computer on which the necessary ADMX and ADML files (StartMenu.admx and StartMenu.adml) for Windows 10 are installed. In Group Policy, ADMX files are used to define Registry-based policy settings in the Administrative Templates category. To find out how to create a central store for Administrative Templates files, see article 929841, written for Windows Vista and still applicable in the Microsoft Knowledge Base.

How Start layout control works

Three features enable Start and taskbar layout control:

• The Export-StartLayout cmdlet in Windows PowerShell exports a description of the current Start layout in .xml file format.

  Note

  To import the layout of Start to a mounted Windows image, use the Import-StartLayout cmdlet.

• You can modify the Start .xml file to include <CustomTaskbarLayoutCollection> or create an .xml file just for the taskbar configuration.

• In Group Policy, you use the Start Layout settings for the Start Menu and Taskbar administrative template to set a Start and taskbar layout from an .xml file when the policy is applied. The Group Policy object doesn't support an empty tile layout, so the default tile layout for Windows is loaded in that case.

Note

To learn how customize Start to include your line-of-business apps when you deploy Windows 10, see Customize the Windows 10 Start layout.

Use Group Policy to apply a customized Start layout in a domain

To apply the Start and taskbar layout to users in a domain, use the Group Policy Management Console (GPMC) to configure a domain-based Group Policy Object (GPO) that sets Start Layout policy settings in the Start Menu and Taskbar administrative template for users in a domain.

The GPO applies the Start and taskbar layout at the next user sign-in. Each time the user signs in, the timestamp of the .xml file with the Start and taskbar layout is checked and if a newer version of the file is available, the settings in the latest version of the file are applied.

The GPO can be configured from any computer on which the necessary ADMX and ADML files (StartMenu.admx and StartMenu.adml) for Windows 10 are installed.

The .xml file with the Start and taskbar layout must be located on shared network storage that is available to the users’ computers when they sign in and the users must have Read-only access to the file. If the file is not available when the first user signs in, Start and the taskbar are not customized during the session, but the user will be prevented from making changes to Start. On subsequent sign-ins, if the file is available at sign-in, the layout it contains will be applied to the user's Start and taskbar.

For information about deploying GPOs in a domain, see Working with Group Policy Objects.

Use Group Policy to apply a customized Start layout on the local computer

You can use the Local Group Policy Editor to provide a customized Start and taskbar layout for any user who signs in on the local computer. To display the customized Start and taskbar layout for any user who signs in, configure Start Layout policy settings for the Start Menu and Taskbar administrative template. You can use the Start Menu and Taskbar administrative template in User Configuration or Computer Configuration.

Note

This procedure applies the policy settings on the local computer only. For information about deploying the Start and taskbar layout to users in a domain, see Use Group Policy to deploy a customized Start layout in a domain.

This procedure creates a Local Group Policy that applies to all users on the computer. To configure Local Group Policy that applies to a specific user or group on the computer, see Step-by-Step Guide to Managing Multiple Local Group Policy Objects. The guide was written for Windows Vista and the procedures still apply to Windows 10.

This procedure adds the customized Start and taskbar layout to the user configuration, which overrides any Start layout settings in the local computer configuration when a user signs in on the computer.

To configure Start Layout policy settings in Local Group Policy Editor

1. On the test computer, press the Windows key, type gpedit, and then select Edit group policy (Control panel).

2. Go to User Configuration or Computer Configuration > Administrative Templates >Start Menu and Taskbar. Senior exit projectmr. beckers classroom.

3. Right-click Start Layout in the right pane, and click Edit.

   This opens the Start Layout policy settings.

4. Enter the following settings, and then click OK:

   1. Select Enabled.

   2. Under Options, specify the path to the .xml file that contains the Start and taskbar layout. For example, type C:UsersTest01StartScreenMarketing.xml.

   3. Optionally, enter a comment to identify the Start and taskbar layout.

   Important

   If you disable Start Layout policy settings that have been in effect and then re-enable the policy, users will not be able to make changes to Start, however the layout in the .xml file will not be reapplied unless the file has been updated. In Windows PowerShell, you can update the timestamp on a file by running the following command:

   (ls <path>).LastWriteTime = Get-Date

Update a customized Start layout

Edit Domain Group Policy Remotely

After you use Group Policy to apply a customized Start and taskbar layout on a computer or in a domain, you can update the layout simply by replacing the .xml file that is specified in the Start Layout policy settings with a file with a newer timestamp.

Related topics