Microsoft actualiza las plantillas administrativas (admx) para Windows 10 desde mayo de 2020

Microsoft ha publicado nuevas plantillas administrativas para Windows 10 versión 2004, dada la actualización de mayo de 2020, que le han agregado características para Windows 10 y algunas que se han eliminado.

Los administradores pueden ampliar el conjunto predeterminado de políticas instalando las Plantillas administrativas de Windows 10 y poder administrar centralizadamente más componentes del sistema Windows.

Estas plantillas instalan políticas adicionales en dispositivos con Windows 10. Microsoft actualiza las plantillas administrativas opcionales cada vez que lanza una nueva actualización de características para el sistema operativo.

La última versión al momento de la redacción, Plantillas administrativas para Windows 10 versión 2004, la actualización de mayo de 2020, ya está disponible en este enlace.

Las plantillas administrativas para Windows 10 versión 2004 incluyen las siguientes GPO nuevas, (las dejo en inglés porque así uso mis DC):

1. Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > Account Policies > Password Policy > Minimum Password Length Audit
   • Determines the minimum password length for which password length audit warning events are issued.
2. Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > Account Policies > Password Policy > Relax minimum password length limits
   • Defines if the minimum password length setting can be increased beyond the legacy limit of 14.
3. Local Computer Policy > Computer Configuration > Administrative Templates > System > Logon > Turn on security key sign-in
   • This policy setting allows you to control whether users can sign in using external security keys.
4. Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Windows Components > App Privacy > Let Windows apps access user movements while running in the background
   • Specifies whether applications may access the movement of a user’s head, hands, motion controllers, and other tracked objects, while they runs in the background.
5. Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Windows Components > App Package Deployment > Prevent non-admin users from installing packaged Windows apps
   • Prevent the installation of packaged Windows apps by non-administrators.
6. Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Delivery Optimization > Maximum Foreground Download Bandwidth in KB/s
   • Set the maximum foreground download bandwidth that the device can use across all concurrent download activities using Delivery Optimization.
7. Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Delivery Optimization > Maximum Background Download Bandwidth in KB/s
   • Set the maximum background download bandwidth that the device can use across all concurrent download activities using Delivery Optimization.
8. Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Delivery Optimization > Cache Server Hostname Source
   • Specifies how clients discover Delivery Optimization in Network Cache servers dynamically. Options are 1=DHCP Option 235, 2=DHCP Option 235 Force.
9. Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Internet Explorer > Configure which channel of Microsoft Edge to use for opening redirected sites
   • Define which version of Chromium Edge is going to used for opening redirected sites.
10. Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Windows Components > Microsoft Defender Antivirus > MpEngine > Enable file hash for computation feature
    • Microsoft Defender will compute hash values for files it scans if enabled.
11. Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Windows Update > Windows Update for Business > Select the target Feature Update version
    1. Enable this policy to request a specific Feature Update version in future scans.
12. Local Computer Policy > User Configuration > Administrative Templates > Windows Components > IME > Configure Japanese IME version
13. Local Computer Policy > User Configuration > Administrative Templates > Windows Components > IME > Configure Simplified Chinese IME version
14. Local Computer Policy > User Configuration > Administrative Templates > Windows Components > IME > Configure Traditional Chinese IME version
    • Defines whether users may control the IME version to use in the selected language.

Microsoft eliminó cinco políticas en las nuevas plantillas administrativas:

• Delivery Optimization > Max Upload Bandwidth (in KB/s)
• Delivery Optimization > Maximum Download Bandwidth (in KB/s)
• Delivery Optimization > Maximum Download Bandwidth (percentage)
• Windows Defender Application Guard > Allow users to trust files that open in Windows Defender Application Guard
• Windows Defender Application Guard > Configure additional sources for untrusted files in Windows Defender Application Guard