Tomster/Windows-Setup
1
0
Fork 0
mirror of https://github.com/TommyTran732/Windows-Setup.git synced 2024-11-24 09:01:44 -05:00
Code

Policy clean up

Browse Source 
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
Tommy 2024-01-19 02:46:56 -07:00
parent 7b226b2cb7
commit e6887192d4
Signed by: Tomster
GPG Key ID: 555C902A34EC968F
6 changed files with 13 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Group Policies Objects/Default Domain Policy/Microsoft Edge/README.md → Group Policies Objects/Default Domain Policy/Microsoft Edge.md
View File

@ -5,3 +5,5 @@
You will need to download the Edge policies from https://www.microsoft.com/en-us/edge/business/download?form=MA13FJ and install it.
SmartScreen and Typosquatting as recommeded settings doesn't seem to apply consistently, therefore I force them to be disabled in my Domain Default Policy.
Policies to set are documented at https://github.com/TommyTran732/Microsoft-Edge-Policies

5
Group Policies Objects/Default Domain Policy/Microsoft Edge/Cast.md
View File

@ -1,5 +0,0 @@
# Cast
`Computer Configuration\Policies\Administrative Templates\Microsoft Edge\Cast`
- Enabled Google Cast -> Disabled `EnableMediaRouter: false`

13
Group Policies Objects/Default Domain Policy/Microsoft Edge/Content Settings.md
View File

@ -1,13 +0,0 @@
# Content Settings
`Computer Configuration\Policies\Administrative Templates\Microsoft Edge\Content Settings`
- Block cookies on specific sites -> ntp.msn.com `CookiesBlockedForUrls": [ "ntp.msn.com" ]`
- Default geolocation setting -> Enabled -> Don't allow any site to track users' physical location `DefaultGeolocationSetting: 2`
- Control use of insecure content Exceptions -> Enabled -> Do not allow any sites to load mixed content `DefaultInsecureContentSetting: 2`
- Configure cookies -> Enabled -> Keep cookies for the duration of the session, except ones listed in "SaveCookiesOnExit" `DefaultCookiesSetting: 4`
- Default setting for third-party storage partitioning -> Let third-party storage partitioning to be enabled. `DefaultThirdPartyStoragePartitioningSetting: 1`
- Control the use of File System API for reading -> Don't allow any site to request and read access to files and directories via the File System API `DefaultFileSystemReadGuardSetting: 2`
- Control the use of File System API for writing -> Don't allow any site to request and write access to files and directories via the File System API `DefaultFileSystemWriteGuardSetting: 2`
- Control use of the Web Bluetooth API -> Don't allow any site to request access to Bluetooth devices via the Web Bluetooth API `DefaultWebBluetoothGuardSetting: 2`
- Allow notifications to set Microsoft Edge as default PDF reader -> Disabled `ShowPDFDefaultRecommendationsEnabled: false`

5
Group Policies Objects/Gaming/Microsoft Edge (Gaming).md Normal file
View File

@ -0,0 +1,5 @@
# Microsoft Edge
`Computer Configuration\Policies\Administrative Templates\Microsoft Edge`
- Game Settings -> Enable Gamer Mode -> Enabled

0
Group Policies Objects/Gaming/Microsoft Office/Microsoft Account (Allow).md → Group Policies Objects/Parallels/Microsoft Office/Microsoft Account (Allow).md
View File

4
Group Policies Objects/README.md
View File

@ -2,3 +2,7 @@
- Make Central Store for policies: https://learn.microsoft.com/en-us/troubleshoot/windows-client/group-policy/create-and-manage-central-store
- Windows 23H2 template can be found here: https://www.microsoft.com/en-us/download/details.aspx?id=105667
The Default Domain Policy directory contains all of the policies I set domain wide. You can either apply them in the Default Domain Policy or break them up into multiple small ones. I split them into files in this repo so that it is easy to read.
Other directories contain the overrides I give to each Organizational Unit (OU). I do recommend breaking these down, as you might reuse the specific overrides across different OUs later on.