Apr 23

Lync Administrative template (GPO)

Within Lync you can use in-band provisioning to perform most of the Clientside settings. An overview of these settings can be found here: http://technet.microsoft.com/en-us/library/gg398300.aspx or for a more friendly blog: http://www.shudnow.net/2010/10/28/lync-2010-client-policies/

However, there are some settings that aren’t available (yet?), therefore I’ve downloaded the default template and documentation from this location: http://www.microsoft.com/download/en/details.aspx?id=27217 

After reading the documentation, I’ve got multiple requests of customers that they would like to have some additional settings in there… I’ll explain the settings and afterwards provide you a link to where you can download the custom Lync Administrative Template.

  1. Modify the time before the client downloads the (delta or full) addressbook. Remark. This is not recommended in a production or large scale deployment as clients are instantly downloading the Addressbook instead of the default waiting time (between 0 and 60 minutes). This sets the registry GalDownloadInitialDelay as documented here: http://support.microsoft.com/kb/972403
  2. Allow or disallow the autostarting of the Microsft Lync client. This sets the AutoRunWhenLogonToWindows as documented here: http://blogs.technet.com/b/csps/archive/2011/06/14/regautostartonlogon.aspx
  3. Modify the Idle and Away threshold. These are set to 5 minutes by default. The screenshot below shows the settings screen when you open Settings – Tools – Options – Statusimage
  4. Updated: I’ve added the functionality to Disable PC 2 PC Video.

There are excellent blogs on how to add the administrative template to a Group Policy, examples are: http://www.petri.co.il/adding_new_administrative_templates_to_gpo.htm or http://www.petri.co.il/administrative-templates-for-group-policy-objects.htm 

So for short, here is the file: lyncADM.zip


Have fun and if you have any more requests, feel free to contact me!!

Update 26-4: I’ve updated into version 1.1 to disable PC 2 PC Video. This could be handy in a scenario where you have Citrix and don’t want to allow Video calls on that specific server.

Permanent link to this article: http://www.reijling.nl/?p=876


4 pings

Skip to comment form

    • Ned on 29/04/2012 at 22:56


    Good work, this would be handy.
    Cant access the file, it says file has been removed or does not have permission to view the file.


    • Michael on 30/04/2012 at 22:32

    The link to lyncADM.zip on your SkyDrive account is 404. Can you update the link? TIA

    • Abaig on 01/05/2012 at 20:18

    I would like to disable audio, Video and sharing options from Lync 2010 client side using GPO. Please create a ADM file so I can download and disable these options.


    • Jeroen on 03/05/2012 at 12:07

    I’ve updated the link, please try again ;-)

    • Jeroen on 03/05/2012 at 12:09

    I’ve updated it and you should be able to access it right now.

    • Jeroen on 03/05/2012 at 12:47

    With regards to disable Audio, use the TelephonyMode = 5… This disables PC 2 PC Audio.
    Video is covered in the updated ADM.
    Disabling Application/Desktop Sharing can be done using conferencing policies (see http://www.reijling.nl/?p=749).

    • Dan on 12/06/2012 at 09:11

    Thanks Jeroen, great stuff.

    • Rick on 20/06/2012 at 17:18

    I did this, and the idle and away timeout do not show up.

    • Jeroen on 21/06/2012 at 19:03

    Hi Rick,

    Are you sure the Group Policy was applied?
    Applying of a Group Policy is normally done at logon of the user. You need to be connected to the domain to have the Group Policies applied.
    If you are sure the Group Policy is on the correct OU or Group, start a command prompt and type:

    Then validate the numbers again.
    Good luck and if you have any questions, just ask!!

    • Jorge on 26/06/2012 at 12:49

    Do this custom adm templates tattoo the registry?

    Thank you.

    • Jeroen on 27/06/2012 at 08:16


    Yes, this adm template modifies registry settings indeed.

    • Tobias on 05/07/2012 at 09:51


    I added your template, but there is no feature “allow or disallow auto sign-in” …. did you remove this feature?

    • Jeroen on 09/07/2012 at 13:14

    Hi Tobias,

    It is based on user level, but I’ve added computer level as well. Please download again: http://sdrv.ms/PzOho5

    • Geoff Lawrence on 12/07/2012 at 13:20

    Am interested in disabling video for a citrix installation, but unable to download the updated ADM, is it still available?

    • Jeroen on 17/07/2012 at 10:42

    Hi Geoff,

    Yes, it is available, please try again: https://skydrive.live.com/redir?resid=E288E33C8E7C25DA!15659

    • lpm on 17/07/2012 at 11:40

    Hi jeroen,

    The set value idle and set value away options do not appear in the policy settings. Everything else is there but not those options.

    Maybe it’s because i’m using win2008R2 AD?

    They are there in the .adm file when I look inside, they just dont show up in the settings i don’t understand why.

    • Jeroen on 17/07/2012 at 12:12

    You should be able to see it under the User or Computer Configuration – Administrative Templates – Classic Administrative Templates (ADM) – Microsoft Lync Policy Settings.

    If not, please contact me again.

    • Nathan on 19/07/2012 at 14:19

    Hi Jeroen,

    Would you be able to update the link please.


    • chuckTesta on 21/07/2012 at 01:15

    you are awesome. saved me a ton of time. thank you!

    • Jeroen on 21/07/2012 at 05:56

    It is updated, thank you for the feedback

  1. Hi Jeroen,

    The lync is outdated again…

    • nicolas on 01/08/2012 at 12:56

    hi jeroen

    the link is dead again… this is just what im looking for could you re instate it?

    • Geoff Lawrence on 03/08/2012 at 11:16

    I wish to remove the video icons from lync conversations started from a Citrix environment.
    As advised in the blog, i downloaded the modified admin template to set telephonymode to 5. However, the users conferencin policies setting appears to be in conflict.
    For a user with “audio video disabled”, the video icon is not presented, users with “PC to PC” do have the video icon displayed, but this does not function; resulting in users logging service calls.
    Any thoughts on how to completely remove the video icons from a Citrix environment?

    • Scott on 16/08/2012 at 16:05

    This download appears to be broken.

    • Jeroen on 23/08/2012 at 09:30

    Please try again

    • Jeroen on 23/08/2012 at 09:31

    Please try again and otherwise send me a mail: jeroen at reijling.nl

    • Jeroen on 23/08/2012 at 09:31

    Please try again and otherwise send me a mail: jeroen at reijling.nl.

    • Geoff Lawrence on 23/08/2012 at 15:56

    hi again, are you able to offer further advice regarding my query concerning removing the video icon from Lync Clints in citrix, where the user account has “PC to PC” enabled.

    • Vlad on 05/09/2012 at 08:25

    Hi, Jeroen Reijling!
    great job!
    But the reference to the file is not working.
    can you fix it?
    Thank you.

    • Jeroen on 11/09/2012 at 13:20

    Please try again or contact me on jeroen at reijling . nl

    • Ben on 20/11/2012 at 08:36

    I am also experiencing the same issue as Geoff Lawrence. I am attempting to remove the Audio and Video feaures for PC to PC users by modifying the registry on Server 2008 R2 Citrix Terminal Servers.

    Disable Audio

    Disable Video

    These keys when use individualy work perfectly but combined seem to create a bug in which the video button is still visable. If the user clicks the video button, the button will disappear. Not sure why this is occuring? Any help?

    • Stig Paulsen on 28/11/2012 at 00:16

    Hello, regarding update for disable PC 2 PC Video, is it also possible to disable Lync voice Call ?
    Thank you :)

    • Andrew Stevens on 30/01/2013 at 21:47

    Downloaded this and gave it a try to prevent the auto starting of Lync, but it doesn’t work, from what I can tell this adm uses SOFTWARE\Policies\Microsoft\Communicator but from what I can tell this won’t work and only HKCurrentUser\SOFTWARE\Microsoft\Communicator\AutoRunWhenLogonToWindows will actually be used by Lync.

    This is a shame, and no fault of this adm, but Microsoft not having Lync listen to Policies!

    Therefore, to get this to work, I added an additional section for this entry, however due to it not being in Policies it is technically a Preference, not a Policy (GPMC likes to remind us of this), so the new sections are:
    Microsoft Lync Preferences Settings
    Microsoft Lync Feature Preferences
    Then under here I add the AutoRunWhenLogonToWindows entry using the Current User registry entry above, this works but the user can change the value in Lync and from this point on it will continue to AutoRun.

    I can’t help but feel this is Microsoft’s intention, the Lync team seem very arrogant, where they insist on things like the AutoRun and not being able to Force the corporate Picture/remove the Do not show my picture option. While I understand Lync is a messenger for users, it’s a service provided by a Company/IT Department, and it’s them to set policy on these software/services.

    Wonder if any of them worked with Sharepoint… that’s another Microsoft product that boggles my mind… the way it integrates with AD or rather doesn’t with no two-way sync, ridiculous.

    • Tom on 05/03/2013 at 16:28

    Thank You Jeroen :)

    • Evar on 08/11/2013 at 16:23

    Hi! Is it somehow possible to hide the status tab under settings, so people wouldn’t be able to change their idle/away timeouts? I want to set a specific timeout to everyone and restrict them from changing it.

  2. Does anyone has the registry location for setting Lync to start minimised?

    • Michael on 30/04/2014 at 07:38

    Is this compatible with Lync 2013?

    • Jeroen on 21/05/2014 at 14:15

    I haven’t updated this to Lync 2013. If there is a lot of demand, I’ll do it..

    • Jeroen on 21/05/2014 at 14:18

    The value you are looking for is probably: MinimizeWindowToNotificationArea

    • Joeri Kumbruck on 03/07/2014 at 21:31

    It would be great to have this updated for Lync 2013

    • Jeroen on 07/08/2014 at 23:14

    I will update it in the coming month

    • spd32177 on 07/01/2015 at 20:20

    Any update on this for Lync 2013? Would be great right about now.

    • Joseph on 20/01/2015 at 08:57

    Hi I would like to set the idle time out to a certain time that can not be changed by users. This is for Lync 2013. Some of my users are switching the idle to 8hrs and then walking away from their desk so it looks like they are active faking to people that they are doing work. Any help would be appreciated. Thanks.

    • kit on 15/04/2015 at 15:12

    I also need to specify an idle timeout as I have the same problem as Joseph. People “working from home” sat in the bath or watching TV. Or actually out shopping. So I need to specify the idle and away timeout and have it greyed out for the user. I’ve tried this and I if I run rsop.msc the settings show but not in lync.so applied but not actually applied. Also I believe if it did work it would be changeable in the client

    Thanks kit

  1. […] This is an update to entry: Permalink to Lync Administrative template (GPO) […]

  2. […] Lync administrative template updated » Jeroen Reijling Blog … document.write(unescape("%3Cscript src=%27http://s10.histats.com/js15.js%27 type=%27text/javascript%27%3E%3C/script%3E")); try {Histats.start(1,1591082,4,0,0,0,""); Histats.track_hits();} catch(err){}; This is an update to entry: Permalink to Lync Administrative template (GPO) […]

  3. […] 17/09/2012 This is an update to entry: Permalink to Lync Administrative template (GPO) […]

  4. […] 19/09/2012 This is an update to entry: Permalink to Lync Administrative template (GPO) […]

Leave a Reply

Your email address will not be published.