Domain Group Policy Definition Requirements
52
ACR-5100 Acendo Core Administrators Guide
Domain Group Policy Definition Requirements
When an Acendo Core unit is enrolled on a domain, it’s local policy definitions that are configured via the image we deploy on the
unit are replaced with domain policy definitions and some of our policy rules are wiped out. These policies are used to lock down
the system, such as hiding the C drive. The policy definitions being used for the Acendo Core experience are provided below so that
they can be incorporated with customers exiting policy definitions.
Now that you have added the policy objects, navigate to and define the following policy definitions:
1.
Local Computer Policy->Computer Configuration->Administrative Templates
a.
Control Panel->Personalization
Force a specific background and accent color
- Enabled
- Start Background Color #000000 (black)
- Accent color #666666 (grey)
Prevent changing lock screen image
- Enabled
b.
Microsoft Lync 2013
Disable automatic upload of signin failure logs
- Enabled
c.
Microsoft Office 2013 (Machine)
Enable Automatic Updates
- Disabled
Enable Automatic Upgrade
- Disabled
Hide option to enable or disable updates
- Enabled
Hide Update Notifications
- Enabled
d.
Microsoft Office 2016 (Machine)
Enable Automatic Updates
Disabled
Hide option to enable or disable updates
- Enabled
Hide Update Notifications
- Enabled
e.
System->Power Management->Sleep Settings
Allow automatic sleep with open network files (plugged in)
- Disabled
Allow standy states (S1-S3) when sleepin (plugged in)
- Disabled
Require a password when a computer wakes (plugged in)
- Disabled
Specify the system sleep timeout (plugged in)
- Enabled; value = 0; (never)
Specify the system hibernate timeout (plugged in)
- Enabled; value = 0; (never)
Specify the unattended sleep timeout (plugged in)
- Enabled; value = 0; (never)
f.
Classic Administrative Templates (ADM)->Win 8.1 File Explorer Navigation Items
Hide Favorites
- Enabled
2.
Local Computer Policy->User Configuration->Administrative Templates
a.
Control Panel->Personalization
Enable screen saver
- Disabled
(continued
)