Shulou(Shulou.com)06/03 Report--

Most Windows system administrators know that group policy management is an indispensable tool for managing user, security, and network policies.

Windows Server 2016 makes some small changes to Group Policy and includes many new policy settings that administrators should consider.

Some policies are particularly noteworthy for administrators who manage mobile devices. For example, Windows Server 2016 includes a set of application management group policies in the appprivacy.admx template. These allow Windows applications to access local tools such as calendars, call logs, contacts, cameras, emails, locations, messages, microphones, actions, radios, account information, trusted devices and synchronization.

Administrators can apply new Group Policy settings from various templates to:

Prevent Windows runtime API access from launching Windows App Store applications (appxruntime.admx); disable Microsoft Consumer experience reports (cloudcontent.admx); allow personalization (globalization.admx); block untrusted fonts (grouppolicy.admx); switch user control over builds and switch use of telemetry (datacollection.admx); stop displaying Windows prompts (cloudcontent.admx).

Windows Server 2016 also adds a number of security policies and features to Group Policy management. For example, an administrator can disable the pre-release feature or setting (datacollection.admx), turn off the key management service client and online address authentication system authentication (avsvalidationgp.admx), use enhanced anti-spoofing technology (biometrics.admx), and assign a default credential provider (credentialproviders.admx).

Some new Group Policy settings are specific to encryption operations. Administrators can use the ciphersuiteorder.admx template to set the elliptic curve encryption order, or use lanmanserver.admx to set the cipher suite order or force the cipher suite order.

These new policies are mainly used for Windows Server; Windows Nano Server does not directly support group policies. However, administrators can apply other policies to core applications, such as Internet Explorer 10pm Microsoft Edge and so on.

Welcome to the official account of Wechat: Xiao Wen study Society.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.