There is a premade custom GPE called Local Security Policies (Can be found in Administrative Tools), which only shows the "Local Computer Policy" -> "Computer Configuration" -> "Window Settings" -> "Security Settings" (WinXP Home doesn't have this):gpedit.msc
To create a custom GPE (Like SecPol.msc):secpol.msc
- Start Microsoft Management Console (MMC) with this command:
mmc.exe
- Select the "Console"-menu and click "Add/Remove Snap-In"
- Press the Add... -button, Select "Group Policy", Press the Add-button, Press Finish-button and Press Close-button.
- Select the newly added "Group Policy"-snapin and select the Extension-fan.
- It is possible to uncheck policy extensions that are not interesting.
- When finished press Ok and one can now fiddle with the custom GPE.
- To save the custom GPE select the "Console"-menu and click "Save As..."
Note it is possible to add extra ADM templates to the GPE, which allows one to configure even more options:
- Start GpEdit.msc (WinXP Home doesn't have this)
- Select one of the two Administrative Templates nodes
- Right-click the selected node and select Add/Remove Templates...
- In the new window press Add-button and f.ex. select WuAu.adm and press Close
- Expand Local Computer Policy -> Computer Policy -> Administrative Templates -> Windows Components
- The new Windows Update node should now be seen (Contains options for configuring AU policies)
Note the GPE shows by default only policies, and not preferences that are located in non-policy areas of the registry. The difference between policies and preferences is when a link to a policy .ADM file is removed then policies are removed but preferences stays.To also see preferences start GPE, select View, Filtering and clear the "Only show policy settings that can be fully managed".
Note if not using the GPE for applying registry settings, then one can disable the applying of Group Policies to increase startup performance:
- Start GpEdit.msc (WinXP Home doesn't have this)
- In the left tree select the root Local Computer Policy
- Right-click the root and select Properties
- Tick Disable Computer Configuration settings
- Tick Disable User Configuration settings
- Press Ok-button
Leave a Reply