Tag Archives: group policy

Skype for Business Launch At Start Up Minimized Group Policy GPO

You think that having Skype launch minimized at start up would be an easy and well known Group Policy ADMX file or such… but no no no.
No easy life for you Mr Sysadmin.

Well for you yes, cause I’m writing how I managed to achieve it so you don’t have to bang your head against the desk too much.

Configures Skype’s Own AutoStart

This might be a bit belt and braces and the order 3 item below starts Skype4B on Windows start up already.

  • User Configuration
    • Preferences
      • Windows Settings
        • Registry
          • AutoOpenMainWindowOnStartUp (Order:1)
HiveHKEY_CURRENT_USER
Key pathSoftware\Microsoft\Office\16.0\Lync
Value nameAutoOpenMainWindowWhenStartup
Value typeREG_DWORD
Value data0x0 (0)

All Common option set to No

Minimize Skype

  • User Configuration
    • Preferences
      • Windows Settings
        • Registry
          • MinimizeWindowToNotificationArea (Order: 2)
HiveHKEY_CURRENT_USER
Key pathSoftware\Microsoft\Office\16.0\Lync
Value nameMinimizeWindowToNotificationArea
Value typeREG_DWORD
Value data0x1 (1)

Start Skype with Windows

Again this is a bit belt and braces, I’d go with this option over the first as the only method of starting Skype.

Also note that lync.exe is in the path, so the value data could just be lync/lync.exe so that the officeXX in the path doesn’t matter, for a bit of future proofing.

  • User Configuration
    • Preferences
      • Windows Settings
        • Registry
          • Lync (Order: 3)
          • Action: Replace
HiveHKEY_CURRENT_USER
Key pathSoftware\Microsoft\Windows\CurrentVersion\Run
Value nameLync
Value typeREG_SZ
Value data%ProgramFiles(x86)%\Microsoft Office\root\Office16\lync.exe

This should then be applied to the OU that the users exist in and Domain Computers be given read access.

Easy GPO Audit Using Powershell

After poking around the Group Policy Objects (GPO) of an infrastructure that was new to me I needed a decent way of producing a quick and useful report on the state of the GPOs.

Because the ComputerVersion and UserVersion numbers are listed as two figures, one for AD and one for Sysvol just an export-csv of get-gpo left me with blank ComputerVersion and UserVersion.

I found this post: https://community.spiceworks.com/topic/551588-get-gpo-userversion-and-computerversion-troubles

By using the following powershell I was able to within minutes provide useful information on the state of the GPOs.

get-gpo -all | select Displayname,ID,Description,GPOStatus,CreationTime,ModificationTime,@{Label="ComputerVersion";Expression={$_.computer.dsversion}},@{Label="UserVersion";Expression={$_.user.dsversion}}| export-csv gpo-audit.csv

A small bit of conditional formatting later and we can see that the Domain GPO has a large amount of user setting edits and should be split into a user only GPO and a computer GPO (I won’t go into where these GPOs should be linked at this stage).
A snipping of an excel spreadsheet with colour coding providing meaning to the figures