Creating new W10 image for company + auto update Java?

Hello all,

Together with a colleague of mine we are working on a new Windows 10 image to use as a standard on our desktop machines.

Apart from looking for Windows 10 guides for fresh installations such as these i was wondering if there are any other crucial tips out there?
Like, i could disable telemetry and statistics options using the registry editor. But i was also considering O&O Shutup10 to do so. Thing is, shouldn't we reapply these settings after every large 'windows update' ?
Or is it good practice to make this registry value a GPO to solve this?

Also, we are planning to setup a new WSUS server. Could this also be used to automatically and silently install Java updates so end-users are no longer plagued by those? Or is there an easier solution?
Are there people out there who use WSUS to update a bunch of other software? (stuff like notepad++, foxit reader etc.).

Anyone?

I can't answer all of your questions, but I have not observed nor heard of a Cumulative Update that reset one or more previous settings. Now Feature updates have in the past changed previous settings. As far as using unsupported utilities to modify a setting or two, I would presume your company would have policies on that usage. Myself I would not use tools and would use the policy editor.

I can't answer your questions about WSUS server maybe some other member here can answer these questions.

storageman said:

I can't answer all of your questions, but I have not observed nor heard of a Cumulative Update that reset one or more previous settings. Now Feature updates have in the past changed previous settings. As far as using unsupported utilities to modify a setting or two, I would presume your company would have policies on that usage. Myself I would not use tools and would use the policy editor.

I can't answer your questions about WSUS server maybe some other member here can answer these questions.

Thanks for the reply.
Yeah i was actually talking about Feature updates when i meant, i had seen some updates simply reinstall the OS entirely and reset some registry values in the process.

In regards of the 'custom tools' ; if every setting concerning telemetry and privacy that is available in Shutup10 has a GPO than i will search for those instead (i agree GPO is the way to go).
Do you know if there is a nice powertool for managing GPO's or should i just stick to the GPMC only?

I was talking about gpedit.msc to edit policies. I really don't know what GPMC is ?