Book Image

Windows 11 for Enterprise Administrators - Second Edition

By : Manuel Singer, Jeff Stokes, Steve Miles, Thomas Lee, Richard Diver
Book Image

Windows 11 for Enterprise Administrators - Second Edition

By: Manuel Singer, Jeff Stokes, Steve Miles, Thomas Lee, Richard Diver

Overview of this book

Windows 11 comes with a plethora of new security measures, customizability, and accessibility features that can help your organization run more smoothly. But, without a proper introduction to this new version of Windows, it’s easy to miss the most important improvements, along with configuration options that will make migrating to Windows 11 frictionless. Windows 11 for Enterprise Administrators helps you understand the installation process, configuration methods, deployment scenarios, and management strategies. You’ll delve into configuring Remote Server Administration Tools for remote Windows Server and Azure Active Directory management. This edition emphasizes PowerShell's role in automating administrative tasks, and its importance in Windows 11 and Windows Server management. It also provides comprehensive insights into Windows 11 updates, including Version 21H2 and 22H2, contrasting them with Windows 10, ensuring your knowledge stays current with the latest enhancements in the Windows ecosystem. By the end of this book, you'll be well-equipped with Windows 11's vital technologies and potentials, enabling you to adeptly oversee and implement these attributes within your company.
Table of Contents (13 chapters)
9
Chapter 9: Advanced Configurations

Changes to GPOs in Windows 10/11

Besides the major changes to MDM management, there are also changes to the GPO processing of Windows 10/11, which were first introduced with Windows 10 and will be covered now. These changes begin with GPOs only applicable to certain stock-keeping units (SKUs), known issues when upgrading your central policy definition store, and known issues when editing new GPOs, including GPPs with the old Group Policy Management Console (GPMC).

Enterprise- and Education-only GPOs

There have been policies that apply only to Windows 10/11, but for the first time ever in Windows history, there are also now GPOs, since Windows 10, that apply to certain SKUs only. Several GPOs for customizing Windows 10/11 apply only to Windows 10/11 Enterprise and Education SKUs. At the time of writing this book, the following GPOs have such a restriction:

  • Configure Spotlight on the lock screen
  • Turn off all Windows Spotlight features
  • Turn off Microsoft consumer...