Group policy is one of my favorite administration and “security” tools. There are just thousands of possibilities with GPO, and my favorite part is the expandability. If you know the registry settings for either a windows feature/function or an app you can change how it behaves by writing your own GPO file.

I’ve yet to actually write my own files though, so maybe another post sometime. For now, here is a list of some GPO additions that I have found over the years that are FREE to add to your GPO repertoire.

Office: https://www.microsoft.com/en-us/download/details.aspx?id=49030
Chrome: https://chromeenterprise.google/browser/download/#manage-policies-tab
Adobe: https://www.adobe.com/devnet-docs/acrobatetk/tools/DesktopDeployment/gpo.html
Firefox: https://support.mozilla.org/en-US/kb/customizing-firefox-using-group-policy-windows
STIG: https://public.cyber.mil/stigs/gpo/
SCT: https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-security-configuration-framework/windows-security-baselines
https://www.microsoft.com/en-us/download/details.aspx?id=55319
SecCon-Framework: https://github.com/microsoft/SecCon-Framework
https://github.com/microsoft/SecCon-Framework/blob/master/windows-security-configuration-framework.md