Link to home
Start Free TrialLog in
Avatar of ManieyaK_
ManieyaK_Flag for United States of America

asked on

Domain Level GPO's

Hello - I'm working on setting GPO for my Win 10 boxes, I'm farely new to Domain level GPO so bare with me as i try to explain.  What I'm having a hard time with is some controls that are available through local GP, are not available in Domain GP for example.
- Computer Config>Admin Templates>System>Credentials Delegation> "Remote host allows delegation of non-exportable credentials" to enabled. in quotations is what's missing from Domain GP
-Computer Config>Admin Templates>Windows Components>"Micorsoft Edge"  what in quotations is missing on domain GP
-Computer Config>Admin Templates>Windows Components>"Windows Game Recording & Broadcasting"  what in quotations is missing on domain GP

---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Second part of question
How do i add registry keys to GP's
How do i create a GPO that will disable / enable certain services
How do i create a GPO for DEP
Avatar of ManieyaK_
ManieyaK_
Flag of United States of America image

ASKER

Another one i just noticed that isn't avilable on domain level GP
Computer Config>Admin Templates>Windows Components>"Windows Defender Security Center"  what in quotations is missing on domain GP
ASKER CERTIFIED SOLUTION
Avatar of Cliff Galiher
Cliff Galiher
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Did you add the Windows 10 ADMX files?  https://www.microsoft.com/en-us/download/details.aspx?id=56880

Without these, you will not see a lot of the settings in Windows 10.
  For registry keys and services, I would use Group Policy Preferences. DEP a little harder. Never worked with it in a GPO