Viewing Group Policy Templates

The Group Policy Management Console reads ADMX files from the central store typically
 \\<domain.com>\sysvol\<domain.com>\Policies\PolicyDefinitions

which on a DC is

C:\Windows\SYSVOL\domain\Polices\PolicyDefinitions

If you want to view ADMX files before placing them in the central store, copy them to C:\Windows\PolicyDefinitions.  Copy the language files ADML files to the suitable subfolder.

Change this key to 1 then launch GPMC.  Editing a policy will read from the local ADMX files not the central store.

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Group Policy\EnableLocalStoreOverrideType: REG_DWORD
Values:
0 - Use PolicyDefinitions on Sysvol if present (Default)
1 - Use local PolicyDefinitions always

Updating central store

Install a downloaded MSI containing the ADMX/ADML files which may install to 

e.g. C:\Program Files (x86)\Windows Server 2022 August 2021 Update\Policy Definitions

On the DC

Copy the required ADMX policy template files to 

C:\Windows\SYSVOL\domain\Polices\PolicyDefinitions

Copy the the required ADML policy template files from the language specific folder e.g.

C:\Program Files (x86)\Microsoft Group Policy\Windows Server 2022 August 2021 Update\PolicyDefinitions\en-US

to 

C:\Windows\SYSVOL\domain\Polices\PolicyDefinitions\en-US

The Policy options provided by the templates will now be visible in Group Policy Management Editor

Mapping to Sharepoint folders

Useful article about mapping File Explorer and/or OneDrive to Sharepoint Folders

https://docs.microsoft.com/en-us/sharepoint/support/administration/troubleshoot-mapped-network-drives

Start Menu Locked grrrrrr

Why some sysadmins lock the start menu I don't know.  It just reduces productivity when users are unable to customize the area designed to allow quick launching of favourite apps.

So if you suspect there is a group policy locking this down try this.

1. Set this key to 0
   
   HKCU\Software\Policies\Microsoft\Windows\Explorer
   LockedStartLayout   REG_DWORD    0
   
   As a user you probably won't have permissions.  Elevate then edit the user key below the appropriate SID in HKEY_USERS
   
2. Use the task manager to End Process on explorer.exe
   
3. Then in task manager use File_Run New Task to re-launch explorer

You can now "Pin to Start" for as long as the GPO has not affected the current explorer session.  You would likely have to carry out the procedure again before you could "Pin to Start", after a reboot for example.

administrator has blocked you from running this app

Oh no! That's terrible.  It looks very serious.

I doubt just running it in an elevated command window would make much difference. Oh, it does!