Tag: windows

Office Installer settings

This is a two-part job. First configure the setup installation package for the client computer and afterwards create a Group Policy with additional settings.

Setup

Run “setup.exe /admin” and change the following sections.

Setup:

I accept the terms in the License Agreement = Selected
Display Level = None 
Completion notice = Not selected
Suppress modal = Selected
No Cancel = Selected
HIDEUPDATEUI = True
AUTO_ACTIVATE = 1
SETUP_REBOOT = Never

Features:

Office, First run
	Disable First Run Movie = Enabled
	Disable Office First Run on application boot = Enabled
Office, Privacy
	Disable Opt-In Wizard on first run = Enabled
Office, Miscellaneous
	Disable the Office Start screen for all Office applications = Enabled
	Suppress recommended settings dialog = Enabled

Additional content:

HKCU Software\Microsoft\Office\<version>\Common\General ShownFileFmtPrompt = DWORD 1
HKCU Software\Microsoft\Office\<version>\Registration AcceptAllEulas = DWORD 1
HKCU Software\Microsoft\Office\<version>\Lync SavePassword = DWORD 1
HKCU Software\Microsoft\Office\<version>\Lync TutorialFeatureEnabled = DWORD 1
HKCU Software\Microsoft\Office\<version>\Lync IsBasicTutorialSeenByUser = DWORD 1
HKCU Software\Microsoft\Office\<version>\Lync AutoRunWhenLogonToWindows = DWORD 1
HKCU Software\Microsoft\Office\<version>\Lync MinimizeWindowToNotificationArea = DWORD 1
HKCU Software\Microsoft\Office\<version>\Lync AutoOpenMainWindowWhenStartup = DWORD 1

Group Policy

Launch ‘Group Policy Management’ or other Group Policy Management tool.

User, Microsoft Office\First Run
	Disable First Run Movie	= Enabled
	Disable Office First Run on application boot = Enabled
User, Microsoft Office \Microsoft Save As PDF and XPS add-ins
	Disable Microsoft Save As PDF and XPS add-ins = Enabled, Disable XPS
User, Microsoft Office\Miscellaneous
	Block signing into Office = OrgID Only
	Disable the Office Start screen for all Office applications = Enabled
	Suppress recommended settings dialog = Enabled
	Show OneDrive Sign In = Disabled
User, Microsoft Office\Privacy\Trust Center
	Automatically receive small updates to improve reliability = Disabled
	Disable Opt-in Wizard on first run = Enabled
	Enable Customer Experience Improvement Program = Disabled
	Send Office Feedback = Disabled
User, Microsoft Office\Subscription Activationshow
	Automatically activate Office with federated organization credentials = Enabled
	Do not show "Manage Account" link for subscription licenses = Enabled

SetACL examples (CMD)

Here are a few examples of the most common SetACL commands, that I use in Command Shell, to give further access.

SetACL.exe -on "[folder][file]" -ot file -actn ace -ace "n:S-1-5-32-545;p:change;s:y"
SetACL.exe -on "[folder][file]" -ot file -actn clear -clr "dacl,sacl"
SetACL.exe -on "[key]" -ot reg -actn ace -ace "n:S-1-5-32-545;p:full;s:y"
SetACL.exe -on "[service]" -ot svr -actn ace -ace "n:S-1-5-32-545;p:start_stop;s:y"

For a complete list of ‘Well-known security identifiers’ (SIDs) please visit Microsoft.