Apr 23

Print this Post

Lync Administrative template (GPO)

Within Lync you can use in-band provisioning to perform most of the Clientside settings. An overview of these settings can be found here: http://technet.microsoft.com/en-us/library/gg398300.aspx or for a more friendly blog: http://www.shudnow.net/2010/10/28/lync-2010-client-policies/

However, there are some settings that aren’t available (yet?), therefore I’ve downloaded the default template and documentation from this location: http://www.microsoft.com/download/en/details.aspx?id=27217 

After reading the documentation, I’ve got multiple requests of customers that they would like to have some additional settings in there… I’ll explain the settings and afterwards provide you a link to where you can download the custom Lync Administrative Template.

  1. Modify the time before the client downloads the (delta or full) addressbook. Remark. This is not recommended in a production or large scale deployment as clients are instantly downloading the Addressbook instead of the default waiting time (between 0 and 60 minutes). This sets the registry GalDownloadInitialDelay as documented here: http://support.microsoft.com/kb/972403
  2. Allow or disallow the autostarting of the Microsft Lync client. This sets the AutoRunWhenLogonToWindows as documented here: http://blogs.technet.com/b/csps/archive/2011/06/14/regautostartonlogon.aspx
  3. Modify the Idle and Away threshold. These are set to 5 minutes by default. The screenshot below shows the settings screen when you open Settings – Tools – Options – Statusimage
  4. Updated: I’ve added the functionality to Disable PC 2 PC Video.

There are excellent blogs on how to add the administrative template to a Group Policy, examples are: http://www.petri.co.il/adding_new_administrative_templates_to_gpo.htm or http://www.petri.co.il/administrative-templates-for-group-policy-objects.htm 

So for short, here is the file: lyncADM.zip


Have fun and if you have any more requests, feel free to contact me!!

Update 26-4: I’ve updated into version 1.1 to disable PC 2 PC Video. This could be handy in a scenario where you have Citrix and don’t want to allow Video calls on that specific server.

Permanent link to this article: http://www.reijling.nl/?p=876


4 pings

Skip to comment form

  1. Ned


    Good work, this would be handy.
    Cant access the file, it says file has been removed or does not have permission to view the file.


  2. Michael

    The link to lyncADM.zip on your SkyDrive account is 404. Can you update the link? TIA

  3. Abaig

    I would like to disable audio, Video and sharing options from Lync 2010 client side using GPO. Please create a ADM file so I can download and disable these options.


  4. Jeroen

    I’ve updated the link, please try again ;-)

  5. Jeroen

    I’ve updated it and you should be able to access it right now.

  6. Jeroen

    With regards to disable Audio, use the TelephonyMode = 5… This disables PC 2 PC Audio.
    Video is covered in the updated ADM.
    Disabling Application/Desktop Sharing can be done using conferencing policies (see http://www.reijling.nl/?p=749).

  7. Dan

    Thanks Jeroen, great stuff.

  8. Rick

    I did this, and the idle and away timeout do not show up.

  9. Jeroen

    Hi Rick,

    Are you sure the Group Policy was applied?
    Applying of a Group Policy is normally done at logon of the user. You need to be connected to the domain to have the Group Policies applied.
    If you are sure the Group Policy is on the correct OU or Group, start a command prompt and type:

    Then validate the numbers again.
    Good luck and if you have any questions, just ask!!

  10. Jorge

    Do this custom adm templates tattoo the registry?

    Thank you.

  11. Jeroen


    Yes, this adm template modifies registry settings indeed.

  12. Tobias


    I added your template, but there is no feature “allow or disallow auto sign-in” …. did you remove this feature?

  13. Jeroen

    Hi Tobias,

    It is based on user level, but I’ve added computer level as well. Please download again: http://sdrv.ms/PzOho5

  14. Geoff Lawrence

    Am interested in disabling video for a citrix installation, but unable to download the updated ADM, is it still available?

  15. Jeroen

    Hi Geoff,

    Yes, it is available, please try again: https://skydrive.live.com/redir?resid=E288E33C8E7C25DA!15659

  16. lpm

    Hi jeroen,

    The set value idle and set value away options do not appear in the policy settings. Everything else is there but not those options.

    Maybe it’s because i’m using win2008R2 AD?

    They are there in the .adm file when I look inside, they just dont show up in the settings i don’t understand why.

  17. Jeroen

    You should be able to see it under the User or Computer Configuration – Administrative Templates – Classic Administrative Templates (ADM) – Microsoft Lync Policy Settings.

    If not, please contact me again.

  18. Nathan

    Hi Jeroen,

    Would you be able to update the link please.


  19. chuckTesta

    you are awesome. saved me a ton of time. thank you!

  20. Jeroen

    It is updated, thank you for the feedback

  21. John van Poelgeest

    Hi Jeroen,

    The lync is outdated again…

  22. nicolas

    hi jeroen

    the link is dead again… this is just what im looking for could you re instate it?

  23. Geoff Lawrence

    I wish to remove the video icons from lync conversations started from a Citrix environment.
    As advised in the blog, i downloaded the modified admin template to set telephonymode to 5. However, the users conferencin policies setting appears to be in conflict.
    For a user with “audio video disabled”, the video icon is not presented, users with “PC to PC” do have the video icon displayed, but this does not function; resulting in users logging service calls.
    Any thoughts on how to completely remove the video icons from a Citrix environment?

  24. Scott

    This download appears to be broken.

  25. Jeroen

    Please try again

  26. Jeroen

    Please try again and otherwise send me a mail: jeroen at reijling.nl

  27. Jeroen

    Please try again and otherwise send me a mail: jeroen at reijling.nl.

  28. Geoff Lawrence

    hi again, are you able to offer further advice regarding my query concerning removing the video icon from Lync Clints in citrix, where the user account has “PC to PC” enabled.

  29. Vlad

    Hi, Jeroen Reijling!
    great job!
    But the reference to the file is not working.
    can you fix it?
    Thank you.

  30. Jeroen

    Please try again or contact me on jeroen at reijling . nl

  31. Ben

    I am also experiencing the same issue as Geoff Lawrence. I am attempting to remove the Audio and Video feaures for PC to PC users by modifying the registry on Server 2008 R2 Citrix Terminal Servers.

    Disable Audio

    Disable Video

    These keys when use individualy work perfectly but combined seem to create a bug in which the video button is still visable. If the user clicks the video button, the button will disappear. Not sure why this is occuring? Any help?

  32. Stig Paulsen

    Hello, regarding update for disable PC 2 PC Video, is it also possible to disable Lync voice Call ?
    Thank you :)

  33. Andrew Stevens

    Downloaded this and gave it a try to prevent the auto starting of Lync, but it doesn’t work, from what I can tell this adm uses SOFTWARE\Policies\Microsoft\Communicator but from what I can tell this won’t work and only HKCurrentUser\SOFTWARE\Microsoft\Communicator\AutoRunWhenLogonToWindows will actually be used by Lync.

    This is a shame, and no fault of this adm, but Microsoft not having Lync listen to Policies!

    Therefore, to get this to work, I added an additional section for this entry, however due to it not being in Policies it is technically a Preference, not a Policy (GPMC likes to remind us of this), so the new sections are:
    Microsoft Lync Preferences Settings
    Microsoft Lync Feature Preferences
    Then under here I add the AutoRunWhenLogonToWindows entry using the Current User registry entry above, this works but the user can change the value in Lync and from this point on it will continue to AutoRun.

    I can’t help but feel this is Microsoft’s intention, the Lync team seem very arrogant, where they insist on things like the AutoRun and not being able to Force the corporate Picture/remove the Do not show my picture option. While I understand Lync is a messenger for users, it’s a service provided by a Company/IT Department, and it’s them to set policy on these software/services.

    Wonder if any of them worked with Sharepoint… that’s another Microsoft product that boggles my mind… the way it integrates with AD or rather doesn’t with no two-way sync, ridiculous.

  34. Tom

    Thank You Jeroen :)

  35. Evar

    Hi! Is it somehow possible to hide the status tab under settings, so people wouldn’t be able to change their idle/away timeouts? I want to set a specific timeout to everyone and restrict them from changing it.

  36. Exam Fan

    Does anyone has the registry location for setting Lync to start minimised?

  37. Michael

    Is this compatible with Lync 2013?

  38. Jeroen

    I haven’t updated this to Lync 2013. If there is a lot of demand, I’ll do it..

  39. Jeroen

    The value you are looking for is probably: MinimizeWindowToNotificationArea

  40. Joeri Kumbruck

    It would be great to have this updated for Lync 2013

  41. Jeroen

    I will update it in the coming month

  42. spd32177

    Any update on this for Lync 2013? Would be great right about now.

  43. Joseph

    Hi I would like to set the idle time out to a certain time that can not be changed by users. This is for Lync 2013. Some of my users are switching the idle to 8hrs and then walking away from their desk so it looks like they are active faking to people that they are doing work. Any help would be appreciated. Thanks.

  44. kit

    I also need to specify an idle timeout as I have the same problem as Joseph. People “working from home” sat in the bath or watching TV. Or actually out shopping. So I need to specify the idle and away timeout and have it greyed out for the user. I’ve tried this and I if I run rsop.msc the settings show but not in lync.so applied but not actually applied. Also I believe if it did work it would be changeable in the client

    Thanks kit

  1. Lync administrative template updated » Jeroen Reijling Blog | Jeroen Reijling Blog

    […] This is an update to entry: Permalink to Lync Administrative template (GPO) […]

  2. Lync Blog » Blog Archive » Lync administrative template updated » Jeroen Reijling Blog …

    […] Lync administrative template updated » Jeroen Reijling Blog … document.write(unescape("%3Cscript src=%27http://s10.histats.com/js15.js%27 type=%27text/javascript%27%3E%3C/script%3E")); try {Histats.start(1,1591082,4,0,0,0,""); Histats.track_hits();} catch(err){}; This is an update to entry: Permalink to Lync Administrative template (GPO) […]

  3. Lync administrative template updated (17 sept 2012) » Jeroen Reijling Blog | Jeroen Reijling Blog

    […] 17/09/2012 This is an update to entry: Permalink to Lync Administrative template (GPO) […]

  4. Lync administrative template updated (9-7-2012) » Jeroen Reijling Blog | Jeroen Reijling Blog

    […] 19/09/2012 This is an update to entry: Permalink to Lync Administrative template (GPO) […]

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>