- Created by Scott Arnold, last modified on Jan 28, 2021
You are viewing an old version of this page. View the current version.
Compare with Current View Page History
« Previous Version 3 Next »
Recommended Group Policies
We recommend these as best practice to improve user experience and provide the best possible performance.
In This Article
Prevent Bing Extension for Chrome
Prevent Bing Extension for Chrome
- Download and install the Microsoft Office Group Policy Templates (ADMX and ADML files)
- Create new GPO Under the OU with the desktops in it with the name: Evolve IP - DaaS 3 - Disable Bing
- Right-click the GPO that you created for the group policy settings and select Edit.
- Navigate to Computer Configuration -> Policies -> Administrative Templates -> Microsoft Office 2016 (Machine) -> Updates
- Look through the list of policies and double-click on the Don't install extension for Microsoft Search in Bing that makes Bing the default the search engine option.
- Select Enabled and then press Apply followed by OK to configure the policy.
Windows 10 Device Registration
Windows 10 Device Registration
- Create new GPO Under the OU with the desktops in it with the name: Evolve IP - DaaS 3 - Windows 10 Device Registration
- Evolve IP can provide the needed admx/adml files if these options are missing.
- The ADMX files would get copied into your “Policy Definitions” folder
- The ADML files would get copied into your “Policy Definitions\en-US” folder
- Right-click the GPO that you created for the group policy settings and select Edit.
- Computer Configuration -> Policies -> Administrative Templates -> Windows Components -> Device Registration
- Register domain-joined computers as devices
- Enabled
- Register domain-joined computers as devices
- Computer Configuration -> Policies -> Administrative Templates -> Windows Components -> Windows Update
- Do not connect to any Windows Update Internet Locations
- Disabled
- Do not connect to any Windows Update Internet Locations
- Computer Configuration -> Policies -> Administrative Templates -> Windows Components -> Device Registration
Turn Off Display
Turn Off Display
- Create new GPO Under the OU with the desktops in it with the name: Evolve IP - DaaS 3 - Turn Off Display
- Right-click the GPO that you created for the group policy settings and select Edit.
- Computer Configuration -> Administrative Templates -> System -> Power Management -> Video and Display Settings
- Turn Off the Display (Plugged In): Enabled
- Turn Off the Display (seconds): 0
- Computer Configuration -> Administrative Templates -> System -> Power Management -> Video and Display Settings
PCoIP - Clipboard Redirection & vSphere Console Access
PCoIP - Clipboard Redirection & vSphere Console Access
- Create new GPO Under the OU with the desktops in it with the name: Evolve IP - DaaS 3 – PcoIP
- Evolve IP can provide the needed admx/adml files
- Copy PCOIP.ADMX into your “Policy Definitions” folder
- Copy PCOIP.ADML into your “Policy Definitions\en-US” folder
- Right-click the GPO that you created for the group policy settings and select Edit.
- Computer Configuration -> Policies -> Administrative -> Classic -> PCoIP Session Variables -> Overridable Administrator Defaults
- Enable access to a PCoIP session from a vSphere console
- Enabled
- Configure Clipboard Redirection
- Enabled
- Enabled in both directions
- Enable access to a PCoIP session from a vSphere console
- Computer Configuration -> Policies -> Administrative -> Classic -> PCoIP Session Variables -> Overridable Administrator Defaults
Blast - Screen Blanking & Clipboard Redirection
Blast - Screen Blanking & Clipboard Redirection
- Create new GPO Under the OU with the desktops in it with the name: Evolve IP - DaaS 3 – Blast
- Evolve IP can provide the needed admx/adml files
- Copy VDM_BLAST.ADMX into your “Policy Definitions” folder
- Copy VDM_BLAST.ADML into your “Policy Definitions\en-US” folder
- Right-click the GPO that you created for the group policy settings and select Edit.
- Computer Configuration -> Policies -> Administrative -> Classic -> VMware Blast
- Screen Blanking
- Disabled
- Configure Clipboard Redirection
- Enabled
- Enabled in both directions
- Screen Blanking
- Computer Configuration -> Policies -> Administrative -> Classic -> VMware Blast
Internet Explorer / Edge Graphics Optimization
IE Graphics Optimization
- Create new GPO Under the OU with the desktops in it with the name: Evolve IP - DaaS 3 - IE Graphics Optimization
- Right-click the GPO that you created for the group policy settings and select Edit.
- User Configuration -> Preferences -> Windows Settings -> Registry
- Action: Create
- Hive: HKEY_CURRENT_USER
- Key Path: Software\Microsoft\Internet Explorer\Main
- Value Name: UseSWRender
- Value Type: REG_DWORD
- Value Data: 00000001
- Base: Hexadecimal
- User Configuration -> Preferences -> Windows Settings -> Registry
Disable Peer to Peer Windows Updates
Disable Peer to Peer Windows Updates
- Create new GPO under the OU with the desktops in it with the name: Evolve IP- DaaS 3 - Windows Update Delivery Optimization
- Right-click the GPO that you created for the group policy settins and select Edit.
- Computer Configuration -> Policies → Administrative Templates → Windows Components → Delivery Optimization
- Edit Download Mode
- Enabled
- HTTP only (0)
- Edit Download Mode
- Computer Configuration -> Policies → Administrative Templates → Windows Components → Delivery Optimization
Google Chrome Graphics Optimization
Chrome Graphics Optimization
- Create new GPO Under the OU with the desktops in it with the name: Evolve IP - DaaS 3 - Chrome Graphics Optimization
- Evolve IP can provide the needed admx/adml files
- Copy CHROME.ADMX into your “Policy Definitions” folder
- Copy CHROME.ADML into your “Policy Definitions\en-US” folder
- Right-click the GPO that you created for the group policy settings and select Edit.
- Computer Configuration -> Polices -> Administrative Templates -> Google Chrome
- Use hardware acceleration when available: Disabled
- Computer Configuration -> Polices -> Administrative Templates -> Google Chrome
Office 2016/2019/365 Graphics Optimization
Office 2016/2019/365 Graphics Optimization
- NOTE: This GPO is version specific. If using an older version of office, the appropriate ADMX/ADML files would be required.
- Create new GPO Under the OU with the desktops in it with the name: Evolve IP - DaaS 3 - Office 2016/2019/365 Graphics Optimization
- Evolve IP can provide the needed admx/adml files
- Copy all office ADMX files into your “Policy Definitions” folder
- Copy all office ADML files into your “Policy Definitions\en-US” folder
- Right-click the GPO that you created for the group policy settings and select Edit.
- User Configuration -> Policies -> Administrative Templates -> Microsoft Office 2016 -> Miscellaneous
- Do not use hardware graphics acceleration: Enabled
- User Configuration -> Policies -> Administrative Templates -> Microsoft Office 2016 -> Miscellaneous
Outlook - Cached Mode Enabled
Outlook - Cached Mode Enabled
- Create new GPO Under the OU with the desktops in it with the name: Evolve IP - DaaS 3 - Outlook Cached Mode.
- Right-click the GPO that you created for the group policy settings and select Edit.
- User Configuration -> Policies -> Administrative Templates → Microsoft Outlook 2016 → Account Settings → Exchange → Cached Exchange Mode
- Set Cached Exchange Mode Sync Settings to enabled and 3 months unless customer requests longer duration
- Set Use Cached Exchange Mode for new and existing Outlook profiles to enabled.
- User Configuration -> Policies -> Administrative Templates → Microsoft Outlook 2016 → Outlook Options → Delegates
- Set Disable shared mail folder caching to enabled
Allow Windows Store Apps to Auto Update
Allow Windows Store Apps to Auto Update
- Create new GPO Under the OU with the desktops in it with the name: Evolve IP - DaaS 3 - Windows Store Apps
- Right-click the GPO that you created for the group policy settings and select Edit.
- Computer Configuration -> Preferences -> Windows Settings -> Registry
- Action: Delete
- Hive: HKEY_LOCAL_MACHINE
- Key Path: Software\Policies\Microsoft\WindowsStore
- Value Name: AutoDownload
- Computer Configuration -> Preferences -> Windows Settings -> Registry
Windows Updates
DaaS Windows Updates
- Create new GPO Under the OU with the desktops in it with the name: Evolve IP - DaaS 3 - Windows Updates
- Right-click the GPO that you created for the group policy settings and select Edit.
- Computer Configuration → Policies → Administrative Templates → Windows Components → Windows Updates → Windows Updates for Business
- Select when Preview Builds and Feature Updates are received: Enabled
- Select the Windows readiness level for the updates you receive: Semi-annual Channel
- After a Preview Build or Feature Update is released, defer receiving it for this many days: 365
- Select when Preview Builds and Feature Updates are received: Enabled
- Computer Configuration → Policies → Administrative Templates → Windows Components → Windows Updates → Windows Updates for Business
- Disable Peer-to-Peer Delivery: Disable Windows Update Delivery Optimization through Group Policy or - Microsoft Community
RMM Windows Firewall Exceptions
RMM Windows Firewall Exceptions
- Create new GPO Under the OU with the desktops in it with the name: Evolve IP - DaaS 3 - Windows Firewall
- Right-click the GPO that you created for the group policy settings and select Edit.
- Computer Configuration → Polices → Administrative Templates → Network → Network Connections → Windows Defender Firewall → Domain Profile
- Windows Defender Firewall: Allow inbound file and printer sharing exception : Enabled
- Allow unsolicited incoming messages from these IP addresses: 10.200.1.0/24
- Windows Defender Firewall: Allow ICMP exceptions: Enabled
- Options: Allow inbound echo request
- Windows Defender Firewall: Allow inbound remote administration exception: Enabled
- Allow unsolicited incoming messages from these IP addresses: 10.200.1.0/24
- Windows Defender Firewall: Allow inbound file and printer sharing exception : Enabled
- Computer Configuration → Polices → Administrative Templates → Network → Network Connections → Windows Defender Firewall → Domain Profile
RMM Checks
RMM Checks
RMM allows you to set up periodic checks to ensure optimal performance. We recommend setting these checks for after hours in order to reduce load on the platform.
User Group Policy Loopback
User Group Policy Loopback
- Create new GPO Under the OU with the desktops in it with the name: Evolve IP - DaaS 3 - User Group Policy Loopback
- Right-click the GPO that you created for the group policy settings and select Edit.
- Computer Configuration -> Policies -> Administrative Templates -> System -> Group Policy
- User Group Policy Loopback processing mode: Enabled
- Mode: Merge
- User Group Policy Loopback processing mode: Enabled
- Computer Configuration -> Policies -> Administrative Templates -> System -> Group Policy
- Ensure this GPO is processed last.
Folder Redirection
Folder Redirection
- Create new GPO Under the OU with the desktops in it with the name: Evolve IP - DaaS 3 - Folder Redirection
- Right-click the GPO that you created for the group policy settings and select Edit.
- User Configuration -> Policies -> Windows Settings -> Folder Redirection
- Favorites (right click the folder)
- Setting: Basic (Redirect everyone’s folder to the same location)
- Target Folder Location: Create a folder for each user under the root path
- Root Path: \\server\share
- Options:
- Grant user exclusive rights to Favorites: Disabled
- Move the Contents of Favorites to the new location: Enabled
- Also apply redirection policy to Windows 2000 server, Windows…: Disabled
- Policy Removal Behavior: Leave Contents
- Desktop
- Setting: Basic (Redirect everyone’s folder to the same location)
- Target Folder Location: Create a folder for each user under the root path
- Root Path: \\server\share
- Options:
- Grant user exclusive rights to Desktop: Disabled
- Move the Contents of Desktop to the new location: Enabled
- Also apply redirection policy to Windows 2000 server, Windows…: Disabled
- Policy Removal Behavior: Leave Contents
- Documents
- Setting: Basic (Redirect everyone’s folder to the same location
- Target Folder Location: Create a folder for each user under the root path
- Root Path: \\server\share
- Options:
- Grant user exclusive rights to Documents: Disabled
- Move the Contents of Documents to the new location: Enabled
- Also apply redirection policy to Windows 2000 server, Windows…: Disabled
- Policy Removal Behavior: Leave Contents
- Downloads
- Setting: Basic (Redirect everyone’s folder to the same location)
- Target Folder Location: Create a folder for each user under the root path
- Root Path: \\server\share
- Options:
- Grant user exclusive rights to Downloads: Disabled
- Move the Contents of Downloads to the new location: Enabled
- Also apply redirection policy to Windows 2000 server, Windows…: Disabled
- Policy Removal Behavior: Leave Contents
- Music
- Setting: Follow the Documents Folder
- Videos
- Setting: Follow the Documents Folder
- Pictures
- Setting: Follow the Documents Folder
- Favorites (right click the folder)
- User Configuration -> Policies -> Windows Settings -> Folder Redirection
Trend Micro Worry Free
Trend Micro Worry Free
Create a new GPO in the DaaS OU with the following properties.
- Name: Evolve IP - DaaS - Trend WF Install
- Computer Configuration → Policies → Windows Settings → Scripts → Startup
- PowerShell Scripts → Add
- Script Name: Click Browse and locate the install script you just created in your deployment share.
- PowerShell Scripts → Add
- PowerShell Script: C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Citrix\User Profile Manager\UserProfileManager.exe
C:\Program Files\Citrix\Server Resource Management\Memory Optimization Management\Program\CtxSFOSvc.exe
C:\Windows\system32\taskmgr.exe
${WinDir}\SoftwareDistribution\Datastore\DataStore.edb
${WinDir}\SoftwareDistribution\Datastore\Logs\Edb*.jrs
${WinDir}\SoftwareDistribution\Datastore\Logs\Edb.chk
${WinDir}\SoftwareDistribution\Datastore\Logs\Tmp.edb
${windir}\Security\Database\*.edb
${windir}\Security\Database\*.sdb
${windir}\Security\Database\*.log
${windir}\Security\Database\*.chk
${windir}\Security\Database\*.jrs
${windir}\Security\Database\*.xml
${windir}\Security\Database\*.csv
${windir}\Security\Database\*.cmtx
pcoip_server_win32.exe
wssm.exe
VMBlastS.exe
wsnm_jms.exe
vmwareviewclipboard.exe*
outlook.exe*
excel.exe
splwow64.exe
vmtoolsd.exe
C:\Program Files (x86)\VMware\VMware DaaS Agent\service\DaaSAgent.exe
- No labels