GPO

GPO

Office 2010 SP1 Admin Templates:
Explanation: http://technet.microsoft.com/en-us/library/cc178992.aspx
Download: http://www.microsoft.com/en-us/download/details.aspx?displaylang=en&id=18968

# How to create custom .adm or .admx files to add search providers to the toolbar search box in IE7
http://support.microsoft.com/kb/918238

# Allowing Standard Users to Install Network Printers on Windows 7 without Prompting for Administrative Credentials
http://blogs.msdn.com/b/7/archive/2011/07/11/allowing-standard-users-to-install-network-printers-on-windows-7-without-prompting-for-administrative-credentials.aspx

# Increase wait for network time to avoid Logon/Startup script Event Log
Policy Location: Computer Configuration > Policies > Admin Templates > System > Group Policy
Setting Name: Startup policy processing wait time
Registry Key: HKLM\Software\Policies\Microsoft\Windows\System!GpNetworkStartTimeoutPolicyValue

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v GpNetworkStartTimeoutPolicyValue /t REG_DWORD /d 60


From <http://support.microsoft.com/default.aspx?scid=kb;EN-US;2421599> 

computer config\admin templates system\group policy\startup process processing wait time [120]
computer config\admin templates system\logon\always wait for the network at computer startup and logon [enabled]
computer config\admin templates system\system\verbose vs normal status messages [enabled]

From <http://www.edugeek.net/forums/windows-7/74525-delving-into-w7.html> 


EnableLUA: HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\system\

User Account Control: Run all administrators in Admin Approval Mode

From <http://technet.microsoft.com/en-us/library/dd835564(v=ws.10).aspx#BKMK_AdminApprovalMode> 


# For enabling the GPSVC logging on a Windows 7 machine
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Diagnostics 
Entry: GPSvcDebugLevel 
Type: REG_DWORD 
Value data: 0x30002 (Hexadecimal)
Output File: gpsvc.log
NOTE: Make sure that the following path exists first:
%windir%\debug\usermode
 
Then it needs to be rebooted and the user should logon. After few minutes you can send the the Gpsvc.log