8 Best Group Policy Settings

8 Best Group Policy Settings
So you want to lockdown windows computer and stop users from installing software, changing settings or anything else? well you can with group policy editor, you will need Windows 10 or Windows 11 pro or above to get access to GPO.

1. Prohibit access to the control panel
User Configuration / Administrative Templates / Control Panel

2. Prevent access to the command prompt
User Configuration / Administrative Templates / System

3. Deny all removable storage access
User Configuration / Administrative Templates / System / Removable Storage Access

4. Prohibit users from installing unwanted software
Computer Configuration / Administrative Templates / Windows Components / Windows Installer

5. Guest account status settings
Computer Configuration / Windows Settings / Security Settings / Local Policies / Security Options

6. Do not store LAN Manager hash values on next password changes
Computer Configuration / Windows Settings / Security Settings / Local Policies / Security Options

7. Prevent auto-restarts during scheduled update installations
Computer Configuration / Administrative Templates / Windows Component / Windows Update

8. Audit Policies
Computer Configuration / Policies / Windows Settings / Security Settings / Advanced Audit Policy Configuration / Audit Policies/

📃Watch related playlists and videos
🚩 Connect with me on social:

🛍 Support me with your Amazon purchases:

[Britec]

Let me know below what policy's you use? Drop us a LIKE 👍

[georgemariano]

These are great tutorials. Any extra help to protect your PC is always good! To many bad people out there. As always good info for us less techies. Keep it up, any settings that help secure your PC is always great info.

[adelbneil]

Excellent info on Policy settings. Looking forward to more videos on Policy Editors. Cheers

[nick]

We sett all of these and more. great video.

[andreaszetea-ster]

Definitely would like more of this type of content. Great job on this. Maybe if you coulf also recommend some good books on sysadmin topics or thst you learned from, thst would be great. Thanks for the content

[baersumaguinajr.]

hi! this is very informative video. i have a question can i do this in admin account? does it still prevent admin acc like preventing admin acc to open cmd if i disable it in LGP?

[davidaderonmu]

great video trying to be come IT support administrator, can all this local policy be pushed out via domain controller ?

[AndrewR]

Excellent video more videos like this!

[BBKBOSS]

I love it, good things to find out !
keep doing it !

[georgemariano]

Have a question, in one of your videos you said that if you let Microsoft reinstall Windows it will install Win 11 22 H2. Built a computer for my kid 2 years ago and Windows update said that it was not compatible with Windows 11. When I went into the UEFI I found out that TPM was disabled by the default. When I enabled it and restarted the computer Windows update said that it was now compatible with Windows 11, but my kid would not let me install it because he liked win 10 . So the question is, and this may be a video you may want to make, if you go into the UEFI and disabled TPM will Microsoft install Win 10 as it will see your computer is not capable of supporting Win 11? But if you already have win 11 as your OS and disabled TPM will your computer even boot up at this point? That is why I am asking you because if there is a workaround for this I know you will be able to find it. This would be a good way to get Windows 10 back if you do not like Windows 11. Thank you for your time and you keep up the good work, I never find any of your videos uninformative.

[techman]

Please make more videos on GPOs definitely enjoyed this

[Therealryu]

in regards to the user installs GP, is this a given already if the user is not an admin???
as im typing i realise there are some applications whic can be installed without admin priveleges...lol thanks anyway great vid :D

[agadhrp]

If we disable command prompt access, would that impact certain game installations?

[welshtony]

So this is how certain things on Works and School computers have been blocked. Good to know lol

[Robinrpv]

Greetings Brian, could you tell us more about " usb selective suspend settings windows 10" and what it does, reason for asking, when I play a game (Tom Clancy's Ghost Recon - Wildlands) and at odd times my mouse will stop responding and I have to unplug it and put it back to get it working, I have no idea what is doing this, driver updates, driver conflict, software issues... I us the ROCCAT KONE [+] Gaming Mouse, This is getting totally frustrating to a point of buying another mouse, any suggestions PLEASE, I have just reinstalled Windows 10 Pro, It happens regardless and my mouse works just fine on another pc with W11.

Regards
Robin.

[mohamedeladl]

thanks, who can i do not discover active directory partition from clients machine?

[galvanizingtechniques]

I can't click nothing in the os windows app to change anything it kicks me out if the mode to do so any solutions..

[h.bankruptcy]

Please make video regarding windows 10 version update which being blocked by my organization using group policy "Target Release Version for Feature Updates" & "intranet update service for detecting updates" ....Please help me to solve this issue. Thanks

[Grimoor]

after enabling, my control panel still works, doe's that mean people on the network can't access it?

[dtmbmwi]

I like these types of videos. Maybe some videos with the Microsoft Security best practices, CISA, and NSA settings.