Management Tools

How can we improve the management tools and experience in Windows Server?

(thinking…)

Enter your idea and we'll search to see if someone has already suggested it.

If a similar idea already exists, you can support and comment on it.

If it doesn't exist, you can post your idea so others can support it.

Enter your idea and we'll search to see if someone has already suggested it.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Extend GPO Group Policies support in Powershell

    At the moment we can only copy a GPO, must be able to change GPO settings in PowerShell as well to fully automate

    13 votes
    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      Signed in as (Sign out)

      We’ll send you updates on this idea

      1 comment  ·  Group Policy  ·  Flag idea as inappropriate…  ·  Admin →
    • Add a new Group Policy Preference for Default Start Tile Layout

      Today, we have the option of enforcing a Start Screen Tile Layout, for Windows 8 and 10, but no option to set a default Start Tile Layout for our users.

      This leads to admins creating logon scripts to set this on first login, which is cludgey (and because it uses PowerShell, gives us a ~6 second delay for the script to be executed) and not very streamlined.

      Most organizations want to provide a default starting experience, but allow their users to deviate and customize if desired. This is an opportunity.

      30 votes
      Sign in
      Check!
      (thinking…)
      Reset
      or sign in with
      • facebook
      • google
        Password icon
        Signed in as (Sign out)

        We’ll send you updates on this idea

        2 comments  ·  Group Policy  ·  Flag idea as inappropriate…  ·  Admin →
      • GPO to support Edge Favorite Sync and Timeline for clients in on-premise domain

        Since you made it impossible for us to allow users to sync their Edge Favorites and Timeline data via their Microsoft accounts (Timeline works for Azure-connected domains, but not on-premise domains), you are making our lives harder.

        First, instead of allowing us to encourage users to use the Edge browser, this effectively forces us to tell them all to use Firefox, Opera, or Chrome so they can sync their bookmarks. I know the official Microsoft word is that admins requested blocking syncing with a Microsoft account as a security measure. I don't think many of us believe that. Aside from…

        1 vote
        Sign in
        Check!
        (thinking…)
        Reset
        or sign in with
        • facebook
        • google
          Password icon
          Signed in as (Sign out)

          We’ll send you updates on this idea

          0 comments  ·  Group Policy  ·  Flag idea as inappropriate…  ·  Admin →
        • GPEDIT.MSC (how to access group policy and update)? Windows Admini Center

          Unable to access group policies from RSAT or WAC (Windows Admin Center)

          5 votes
          Sign in
          Check!
          (thinking…)
          Reset
          or sign in with
          • facebook
          • google
            Password icon
            Signed in as (Sign out)

            We’ll send you updates on this idea

            0 comments  ·  Group Policy  ·  Flag idea as inappropriate…  ·  Admin →
          • In Local Group Policy Editor, it is possible to turn on Filter Option and search for text in Title, Help Text, and Comments. Unfortunately,

            In the Local Group Policy Editor tool, it is possible to turn on Filter Option and search for text in Title, Help Text, and Comments. However, the Requirements section does not seem to be indexed which is very unfortunate. If that could also be indexed, I could search for "1709" and that way filter for new settings for Windows 1709. This is likely a very minor change in the tool that would greatly benefit users.

            3 votes
            Sign in
            Check!
            (thinking…)
            Reset
            or sign in with
            • facebook
            • google
              Password icon
              Signed in as (Sign out)

              We’ll send you updates on this idea

              0 comments  ·  Group Policy  ·  Flag idea as inappropriate…  ·  Admin →
            • Provide a PowerShell cmdlet that reports on and discovers GPO settings

              Currently in order to report on GPOs, one has to run Get-GPOReport and then parse the XML/HTML report. And this is extremely challenging since GPO XML schemas are non-trivial to learn if you aren't a developer.

              Ideally this PowerShell cmdlet would enable any admin to easily identify GPO settings that apply to their OU and quickly discover the impact of GPO application order.

              Please add a Get-GPOSetting cmdlet which performs the following:

              * Identifies GPO settings when provided an OU, site or domain.

              * Provides a combined report of all settings applied to an OU,site, or domain, including detail on…

              24 votes
              Sign in
              Check!
              (thinking…)
              Reset
              or sign in with
              • facebook
              • google
                Password icon
                Signed in as (Sign out)

                We’ll send you updates on this idea

                1 comment  ·  Group Policy  ·  Flag idea as inappropriate…  ·  Admin →
              • Set-GPPermissions always prompting

                Does anyone know how to bypass the Set-GPPermissions prompt? I have an automated script that removes 'Authenticated Users' from the security filtering and I couldn´t find a way to bypass it. Even if I put -Confirm:$false it still prompts... There is no -force option in this command..
                Get-gpo $policy_name -Domain $domain | Set-GPPermissions -Replace -PermissionLevel None -TargetName 'Authenticated Users' -TargetType group
                I know after kb3163622 all computers must have read access to user GPOs, and I will be using another security group to this GPO above, so just wanted to avoid that prompt confirmation.
                I have already posted it here …

                19 votes
                Sign in
                Check!
                (thinking…)
                Reset
                or sign in with
                • facebook
                • google
                  Password icon
                  Signed in as (Sign out)

                  We’ll send you updates on this idea

                  1 comment  ·  Group Policy  ·  Flag idea as inappropriate…  ·  Admin →
                • Add a GPO option to set "Directory Services" (and other default channels) event log maximum size.

                  Add a GPO option to set "Directory Services" (and other defaults channels) event log maximum size. Currently this is done by setting maxsize on "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventLog\Directory Services", but it would be great if there's a default admx for it.

                  3 votes
                  Sign in
                  Check!
                  (thinking…)
                  Reset
                  or sign in with
                  • facebook
                  • google
                    Password icon
                    Signed in as (Sign out)

                    We’ll send you updates on this idea

                    0 comments  ·  Group Policy  ·  Flag idea as inappropriate…  ·  Admin →
                  • Add a rich GPO provider

                    I'd like to see a good, rich GPO provider. One that would allow me to do a set-location to some node in any .ADM/.ADMX we have loaded, would allow me to load/remove ADMXs from scope, and get/set/new any value.

                    The idea is to enable IT Pros to automate fully any setting in any GPO object.

                    6 votes
                    Sign in
                    Check!
                    (thinking…)
                    Reset
                    or sign in with
                    • facebook
                    • google
                      Password icon
                      Signed in as (Sign out)

                      We’ll send you updates on this idea

                      0 comments  ·  Group Policy  ·  Flag idea as inappropriate…  ·  Admin →
                    • We need a native Get-GPLink cmdlet

                      For a day to day GPO administration, it is important to know to which domain, site and/or OU a GPO is linked to.

                      3 votes
                      Sign in
                      Check!
                      (thinking…)
                      Reset
                      or sign in with
                      • facebook
                      • google
                        Password icon
                        Signed in as (Sign out)

                        We’ll send you updates on this idea

                        0 comments  ·  Group Policy  ·  Flag idea as inappropriate…  ·  Admin →
                      • Missing Turn off the upgrade to the latest version of Windows through Windows Update

                        Turn off the upgrade to the latest version of Windows through Windows Update is missing from the latest ADMX on Windows Server and Windows 10. This setting is only available as a hotfix for Win7 (KB3065987) and Win8.1 (KB3065988) which will overwrite the Win10 ADMX in the central store.

                        4 votes
                        Sign in
                        Check!
                        (thinking…)
                        Reset
                        or sign in with
                        • facebook
                        • google
                          Password icon
                          Signed in as (Sign out)

                          We’ll send you updates on this idea

                          1 comment  ·  Group Policy  ·  Flag idea as inappropriate…  ·  Admin →
                        • Modification time is different on "get-gpo" if queried directly or stored in an array

                          I believe this is a bug although not sure. Say you have 1 Group policy and you run this command

                          $($1=get-gpo -all)
                          $1[0]

                          now run this, replacing "YOURGUID" with the guid from the above result

                          $(get-gpo -guid "YOURGUID")

                          In my tests this is always a second wrong, is it rounding, which is not really apporiate for this field

                          2 votes
                          Sign in
                          Check!
                          (thinking…)
                          Reset
                          or sign in with
                          • facebook
                          • google
                            Password icon
                            Signed in as (Sign out)

                            We’ll send you updates on this idea

                            2 comments  ·  Group Policy  ·  Flag idea as inappropriate…  ·  Admin →
                          • Add "Save" to GPOs

                            When I edit a GPO it should be open in read mode and I have to save the changes.

                            11 votes
                            Sign in
                            Check!
                            (thinking…)
                            Reset
                            or sign in with
                            • facebook
                            • google
                              Password icon
                              Signed in as (Sign out)

                              We’ll send you updates on this idea

                              2 comments  ·  Group Policy  ·  Flag idea as inappropriate…  ·  Admin →
                            • Deleting outdated Configurations in GPO

                              Give me an option to delete old configurations like Folderredirection. If it is configured one time, you can't "unconfigure" that option.

                              6 votes
                              Sign in
                              Check!
                              (thinking…)
                              Reset
                              or sign in with
                              • facebook
                              • google
                                Password icon
                                Signed in as (Sign out)

                                We’ll send you updates on this idea

                                0 comments  ·  Group Policy  ·  Flag idea as inappropriate…  ·  Admin →
                              • Add a GPO for Pinned Items

                                Today, every corporate customer that I've worked with has the same cludgey login script to provision default pinned items to users on first login.

                                Requiring admins to use VB Script to pin items to the start menu for users is a real super backwards approach, and something which I think should be provided via GPO instead.

                                The GPO should allow for a set of default icons to be pinned, and allow IT the option to enforce those pins, or allow users to add to them or change them.

                                27 votes
                                Sign in
                                Check!
                                (thinking…)
                                Reset
                                or sign in with
                                • facebook
                                • google
                                  Password icon
                                  Signed in as (Sign out)

                                  We’ll send you updates on this idea

                                  0 comments  ·  Group Policy  ·  Flag idea as inappropriate…  ·  Admin →
                                • If it exists as a GUI option in a Microsoft Product , make sure there's a GPO that can be applied to it

                                  Any setting that a user (or admin) could effect through the GUI of Windows, Office etc. should have a corresponding entry in a Group Policy. Good example is the loss of easy control of zones with the move away from GPO settings in IE10/11 for the IEAK and the current lack of GPO for Edge browser.

                                  25 votes
                                  Sign in
                                  Check!
                                  (thinking…)
                                  Reset
                                  or sign in with
                                  • facebook
                                  • google
                                    Password icon
                                    Signed in as (Sign out)

                                    We’ll send you updates on this idea

                                    0 comments  ·  Group Policy  ·  Flag idea as inappropriate…  ·  Admin →
                                  • Update GPOs

                                    - Get rid of settings or references for old programs and operatings systems. For example GPO editor/Filter options still lists IE3 to 6.
                                    - Windows 2000 is already not supported als domain member in Server 2012, therefore GPO settings for it should be removed in Server 2016
                                    - Several Security Options items have warnings for changing settings that mattered over 10 years ago but no longer (e.g. require strong (Windows 2000 and later) session key)
                                    - Software Restriction Policies should be removed and any missing functionality added to the newer AppLocker
                                    - Some harmonisation by removing the old Win XP…

                                    105 votes
                                    Sign in
                                    Check!
                                    (thinking…)
                                    Reset
                                    or sign in with
                                    • facebook
                                    • google
                                      Password icon
                                      Signed in as (Sign out)

                                      We’ll send you updates on this idea

                                      4 comments  ·  Group Policy  ·  Flag idea as inappropriate…  ·  Admin →
                                    • 10 votes
                                      Sign in
                                      Check!
                                      (thinking…)
                                      Reset
                                      or sign in with
                                      • facebook
                                      • google
                                        Password icon
                                        Signed in as (Sign out)

                                        We’ll send you updates on this idea

                                        0 comments  ·  Group Policy  ·  Flag idea as inappropriate…  ·  Admin →
                                      • Windows Store Apps distribution by GPO

                                        Windows Store Apps distribution by GPO

                                        18 votes
                                        Sign in
                                        Check!
                                        (thinking…)
                                        Reset
                                        or sign in with
                                        • facebook
                                        • google
                                          Password icon
                                          Signed in as (Sign out)

                                          We’ll send you updates on this idea

                                          0 comments  ·  Group Policy  ·  Flag idea as inappropriate…  ·  Admin →
                                        • Craft a "do over" for Group Policy that lets you select for a server to particpate in new, old, or merged settings.

                                          Group policy is archaic. It shows far too much evidence of bolted-together evolution and enhancement. It has no granularity of management.

                                          Rewrite it. From the ground up. It can likely use a lot of the same policy management locations on the backend, but the administrative interface needs to be reorganized. You need to implement delegation "per setting", so I can grant individual management groups the capability to control specific settings. It needs better logging for application of settings. Authoring needs to be improved, with versioning, and the ability to check out a gpo for modification, check back in, apply to…

                                          9 votes
                                          Sign in
                                          Check!
                                          (thinking…)
                                          Reset
                                          or sign in with
                                          • facebook
                                          • google
                                            Password icon
                                            Signed in as (Sign out)

                                            We’ll send you updates on this idea

                                            1 comment  ·  Group Policy  ·  Flag idea as inappropriate…  ·  Admin →
                                          • Don't see your idea?

                                          Feedback and Knowledge Base