Windows 10 has new MDM settings. But using your own systems management software you can get these new settings out to your Windows 10 machines … without any expensive MDM cloud service.
PolicyPak MDM Settings Manager Deploy MDM Settings using SCCM or other management software
So in the last video we saw, we could take Windows 10 MDM settings and utilize your existing Group Policy infrastructure to get those settings delivered out there. In this video, we’re going to do something a little bit different. We’re going to take these existing settings that we’ve now pre-staged into Group Policy, but use not Group Policy. And to do this, we’re just going to simply right-click and export these policies as XML settings. And I’ll put it right on the desktop. I’ll call this MDM Allow Cortana No – because we disallowed Cortana – and then I’ll export this setting and call it MDM Force Start Size Large.
By the way, if you were using Collections in PolicyPak MDM Settings Manager, you could just export the whole collection and, boom, all the settings would be right there.
So now that we’ve got the settings exported, which are right here and here as XML files, what we’re going to do next is use the PolicyPak Exporter Utility and this enables you to take any PolicyPak setting, including PolicyPak MDM Settings, and create a new MSI by simply adding existing files there. So we can take these MDM Settings here and use the not Group Policy method. And what does this get us? This gives us the ability to deploy these settings using SCCM, Landesk, or whatever management software you already have. So you don’t have to get a monthly cloud service if you don’t want to just to get these MDM settings that exist in Windows 10.
So go ahead and click “next” here. We’ll call this MDM PolicyPak Settings 1. And I got a share already so I’ll go ahead and put it in my share, c:\share. I’ll call this MDM – I already have 1 – I’ll just overwrite this one that I had from a previous demonstration. Click “save” here and there we go. So I’m ready to rock.
So at this point, you have to use your imagination a little bit. On this machine, you can see that he’s got the small start screen and Cortana is, well, still connecting to the internet, but there we go. And Cortana is active. What we want to do is use our imaginations a little bit and we’re going to use not Group Policy to get this delivered. Now, again, we’re going to pretend. In this case, we’re going to use – just hand install this MSI, which is on DC Share. So it’s called MDM Settings 1 MSI.
Now remember, if you are using SCCM or your own systems management utility, like Altiris or whatever, you wouldn’t be prompted here. You’re only getting prompted because we’re doing this interactively. Now, when you do that, that’s it, you’ve gotten the settings that you’ve exported as MSIs onto your endpoint and PolicyPak MDM Settings Manager has done all the work.
To see this actually be true, let’s go ahead and sign out here. I did that as an admin to get that installed. And now let’s log on as any garden variety user and see what their experience is. Log on as West Sales User 2. Now remember, we’re not using an MDM service. We’re not using Group Policy. We’re using the not Group Policy method. So we’re using whatever you’re already using right now. That’s what’s getting these MDM settings out there.
So first things first. Let’s see about Cortana. If we try to type Cortana here and go to Cortana in search settings, we get “Cortana has been disabled by the company policy.” We can also see that the start menu is set to the large start screen size. Again, this is all using the MDM settings that are in the box for Windows 10, but we make them accessible.
And in the final video, now that you’ve seen the first video about Group Policy, this video about using the not Group Policy method, in the final video you’ll see how you can import these settings into PolicyPak Cloud and then download them and get them out to your machines if you’re using PolicyPak Cloud.