REG - DEVICE LEVEL
---------------------------
; Disable Credential Guard to prevent Wi-Fi breaking (Policy to keep it off)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard]
"LsaCfgFlags"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"LsaCfgFlags"=dword:00000000
; Configure Zone Mapping required for SSO capabilities - School
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\blah[.]com\*.domain]
"*"=dword:00000001
; Configure Zone Mapping required for SSO capabilities - Azure AD
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\
autologon.microsoftazuread-s…]
"HTTPS"=dword:00000001
; Configure Zone Mapping required for SSO capabilities - Azure AD Logon
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\
microsoftazuread-sso.com\autologon]
"https"=dword:00000001
; Configure Zone Mapping required for SSO capabilities - Microosft Login
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\
login.microsoftonline.com\device]
"HTTPS"=dword:00000001
; Prevent provisioning DevHome
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\Orchestrator\UScheduler_Oobe\DevHomeUpdate]
; Prevent Provisioning Consumer Outlook/Mail
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\Orchestrator\UScheduler_Oobe\OutlookUpdate]
; Ensure that the logon background is blank to make branding work better
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
"DisableLogonBackgroundImage"=dword:00000001
; Set OneNote Desktop as Default for the missing protocol handler
[HKEY_CLASSES_ROOT\onenote-cmd\shell\open\command]
@="\"C:\\Program Files (x86)\\Microsoft Office\\Root\\Office16\\ONENOTE.EXE\" /hyperlink \"%1\""
; Set Microsoft Teams QoS defaults - Audio
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\QoS\QOS - Teams Audio]
"Version"="1.0"
"Application Name"="Teams.exe"
"Protocol"="*"
"Local Port"="50000:50019"
"Local IP"="*"
"Local IP Prefix Length"="*"
"Remote Port"="*"
"Remote IP"="*"
"Remote IP Prefix Length"="*"
"DSCP Value"="46"
"Throttle Rate"="-1"
; Set Microsoft Teams QoS defaults - Sharing
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\QoS\QOS - Teams Sharing]
"Version"="1.0"
"Application Name"="Teams.exe"
"Protocol"="*"
"Local Port"="50040:50059"
"Local IP"="*"
"Local IP Prefix Length"="*"
"Remote Port"="*"
"Remote IP"="*"
"Remote IP Prefix Length"="*"
"DSCP Value"="18"
"Throttle Rate"="-1"
; Set Microsoft Teams QoS defaults - Video
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\QoS\QOS - Teams Video]
"Version"="1.0"
"Application Name"="Teams.exe"
"Protocol"="*"
"Local Port"="50020:50039"
"Local IP"="*"
"Local IP Prefix Length"="*"
"Remote Port"="*"
"Remote IP"="*"
"Remote IP Prefix Length"="*"
"DSCP Value"="34"
"Throttle Rate"="-1"
; Prefer Store Apps - Warn Users
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer]
"AicEnabled"="PreferStore"
; Allow elevated user to use mapped drives
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLinkedConnections"=dword:00000001
; Configure device-wide defaults for user experience
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"HideFirstRunExperience"=dword:00000001
"NewTabPageContentEnabled"=dword:00000000
"NewTabPageHideDefaultTopSites"=dword:00000001
"PromotionalTabsEnabled"=dword:00000000
"HubsSidebarEnabled"=dword:00000000
"AllowSurfGame"=dword:00000000
"DefinePreferredLanguages"="en-AU"
; Configure device-wide defaults for user experience (Preferences)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\Recommended]
"ShowHomeButton"=dword:00000001
"FavoritesBarEnabled"=dword:00000001
"DefaultSearchProviderSearchURL"="
google.com/search?q={searchTerms}"
"DefaultSearchProviderEnabled"=dword:00000001
"DefaultSearchProviderName"="Google"
"ApplicationLocaleValue"="en-AU"
; Configure device-wide defaults for user experience (Spelling)
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\SpellcheckLanguage]
"1"="en-AU"
; Prevent Edge Desktop Shortcut
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\EdgeUpdate]
"CreateDesktopShortcutDefault"=dword:00000000