Windows 8 Gpedit.msc - Group Policy Editor

Microsoft Windows 8 Group Policy Editor - Gpedit.msc
There is always something satisfying in controlling computer settings with group policies. The key to getting started is finding the gpedit.msc snap-in for your version of Windows 8.

Windows 8 Group Policy Review
  • Group Policy Strategies for windows 8 Clients
  • How to Launch the Gpedit.msc Snap-in
  • Problem: You Cannot Find Gpedit in Windows 8
  • Secpol.msc -Security Policy Editor
  • Examples of Windows 8 Group Policy Settings                            

If your Windows 8 machine is part of an Active Directory domain, then configure the settings via the GPMC on the domain controller.  However, if your Windows 8 is in work group, Home Group, or in a stand-alone configuration then seek out the local group policy editor - gpedit.msc.
Group Policy Tactics
There are three reasons for changing group policy settings; just for fun I give each a personality:

Mr Nasty's Reasons: to restrict users, for example, 'Prevent users from adding or removing tool bars'.
Mr Nice's Reasons: to pamper users, for example to adjust settings that confuse users, such as 'AutoPlay' where without a policy their machine would play the wrong media by default.
Mr Luddite: to configure the machine with old settings that were found in previous versions of Windows, but have been replaced, phased out, or deprecated in Windows 8. 

1.    From the Metro UI, type gpedit.msc
From the desktop call for the 'Search' charm, type in the dialog box: gpedit.msc
Trap:  Many people forget to append the .msc file extension, consequently they cannot find the editor.
2.    Once gpedit appears in the resultant Apps list, consider right-click, Advanced and 'Pin to Taskbar'.
3.    It's straightforward from now on, launch gpedit and navigating through the Local Computer Policies.
4.    The most interesting policies are found in the User Configuration, Administrative Templates folders.
5.    Alternatively, you could research policies from the 'All Settings' folder.
If you can rule out a typo, and you remembered that .msc extension, then the most likely reason you cannot see Microsoft's Windows 8 gpedit.msc is that you have the Home Premium Edition.  There has to be some benefit in paying the extra for the Windows 8 Ultimate, or Professional, and getting the Local Group Policy Editor is one of them.
If you cannot get a copy of gpedit.msc, one work-around would be to call for Reg edit and change the setting in the registry.
Microsoft introduced the idea of group policies back in the days of NT 4.0, naturally, each successive Windows generation has added more settings so that we now have over 3,000 policies.


AutoPlay Example
If media you insert into the computer is not behaving as you wish, then call for gpedit.msc.

Navigate to:
Computer Configuration / Administrative Templates /
Windows Components / AutoPlay Policies

Research: Turn off AutoPlay --> Enabled / Disabled.

Here are ideas for changes that you could make to the Windows 8 desktop, some policies add features (Mr Nice), while others restrict the user's actions (Mr Nasty).
*       Enforce disk quota limit.
*       Require a password when a computer wakes.
*       Windows Firewall: Do not allow exceptions.
*       Configure automatic updates.  (Several options)
*       Prevent installation of removable device.
*       Disable Chat.
*       Lock the Task bar settings.
*       Prevent access to registry editing tools.
*       Prohibit user installs.
*       Prohibit connection to roaming Mobile Broadband. networks.
*       Remove Task manager.
*       Turn off autoplay.
*       Turn off location.
*       Internet Explorer is a fertile area, for example: 'Disable     change proxy settings'. 
GPUpdate
To take effect many policies need "gpupdate /force", which saves a reboot.  From within PowerShell, or from the command prompt issue the instruction thus:
       c:\>gpupdate /force
       Updating Policy...
C:\>gpupdate /force
Updating Policy...
User Policy update has completed successfully.
Computer Policy update has completed successfully.
Gpedit and Logon Scripts








One use of Gpedit.msc is to link logon scripts to a Group Policy.
You could expand the Computer Configuration, but I prefer to go to the User Configuration, see Image:
Scripts (Logon/Logoff)
Naturally, you select 'Logon' from the right pane.  As ever, if you have an up-to-date operating system such as Windows 8, then configuring is easy.  Select the PowerShell Scripts tab, then click on 'Add...' and now wire-up your PowerShell.ps1 file to the 'Scripts' policy.
Tip: The trick is to copy your logon.ps1 file (into memory) then paste into the location revealed by the 'Add...' button.  See image above.
The actual location C:\Windows\System32\GroupPolicy\User\Scripts\Logon is a hidden folder.  This is one reason the above interface provides a 'Show Files...' button.  To see the files in Windows Explorer you may need to change the folder view options.  See more about PowerShell Logon Scripts.

Gpedit and UAC
If you visit the Computer Configuration section, and expand Windows Settings, Security Settings and Security Options, then you can examine the UAC policies.  For example: User Account Control: Turn on Admin Approval Mode. 
Summary of Windows 8 Gpedit.msc - Local Group Policy Editor
Microsoft produces a lovely utility called Local Group Policy Editor so that you can change registry settings conveniently.  As with previous Windows operating systems you can inspect and adjust the settings with a snap-in called gpedit.msc.
If won't find gpedit.msc in Windows 8 Home Premium, this is because it does not exist; you need to upgrade to the Ultimate edition.



Comments

Popular posts from this blog

Introduction and Fundamental of Computer for free Studying at home

Photoshop Cs 2 9.0 Learning...............