Products History Gallery Manuals Download Links Arcade Forum Up&Runng Windows PC News
    Microsoft Windows Vista, 2003 and XP processes and tips.  Includes Group Policy, Active Directory, Windows SharePoint Services, Outlook Shared Calendars, RAID5, McAfee and much more.  

  

 

This page is a subset of our Common Group Policies page.

NOTE: The author will not accept responsibility for damages as a result of following the suggestions below.  They are provided "as is" and intended only as a rough guide.  You should always back up your servers System State prior to changing Group Policies.  USE AT "YOUR OWN RISK".
Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available
Default Domain Policy
Computer Configuration (Enabled)
Policies
Windows Settings
Security Settings
Account Policies/Password Policy
PolicySetting
Enforce password history5 passwords remembered
Maximum password age120 days
Minimum password age0 days
Minimum password length5 characters
Password must meet complexity requirementsDisabled
Store passwords using reversible encryptionDisabled
Account Policies/Account Lockout Policy
PolicySetting
Account lockout duration5 minutes
Account lockout threshold3 invalid logon attempts
Reset account lockout counter after5 minutes
Local Policies/Audit Policy
PolicySetting
Audit logon eventsSuccess, Failure
Audit object accessSuccess, Failure
Local Policies/Security Options
Microsoft Network Server
PolicySetting
Microsoft network server: Disconnect clients when logon hours expire Enabled
Network Security
PolicySetting
Network security: Force logoff when logon hours expireEnabled

 

 

Ian - Allow Printer Driver Install on Vista - Nov 2007

User Configuration (Enabled)
Policies
Administrative Templates
Policy definitions (ADMX files) retrieved from the local machine.
Control Panel/Printers
PolicySetting Comment
Point and Print RestrictionsDisabled

 

Ian - Enable Verbose Mode Start Up & Shut Down Messages - Dec 2008   

Computer Configuration (Enabled)
Policies
Administrative Templates
Policy definitions (ADMX files) retrieved from the local machine.
System
Policy Setting Comment
Verbose vs normal status messages Enabled

 

Ian - Allow RDP - July 2007

Computer Configuration (Enabled)
Policies
Administrative Templates
Policy definitions (ADMX files) retrieved from the local machine.
Windows Components/Terminal Services/Terminal Server/Connections
PolicySetting Comment
Allow users to connect remotely using Terminal ServicesEnabled

 

 

Ian - Enable Remote Assistance

Computer Configuration (Enabled)
Policies
Administrative Templates
Policy definitions (ADMX files) retrieved from the local machine.
System/Remote Assistance
PolicySetting Comment
Offer Remote AssistanceEnabled
Permit remote control of this computer:Allow helpers to remotely control the computer
Helpers:
YourInternalDomainName\domain admins
Policy SettingComment
Solicited Remote AssistanceEnabled
Permit remote control of this computer:Allow helpers to remotely control the computer
Maximum ticket time (value):1
Maximum ticket time (units):Hours
Method for sending e-mail invitations:Mailto

 

Ian - Firewall: Enable F&P Sharing, RDP, Remote Admin - July 2007

Computer Configuration (Enabled)
Policies
Administrative Templates
Policy definitions (ADMX files) retrieved from the local machine.
Network/Network Connections/Windows Firewall/Domain Profile
PolicySetting Comment
Windows Firewall: Allow inbound file and printer sharing exception EnabledENTER YOUR SUBNET
Allow unsolicited incoming messages from these IP addresses: 10.1.1.0/24,10.1.2.0/24
PolicySetting Comment
Windows Firewall: Allow inbound remote administration exception EnabledENTER YOUR SUBNET
Allow unsolicited incoming messages from these IP addresses: 10.1.1.0/24,10.1.2.0/24
PolicySetting Comment
Windows Firewall: Allow inbound Remote Desktop exceptions EnabledENTER YOUR SUBNET
Allow unsolicited incoming messages from these IP addresses: 10.1.1.0/24,10.1.2.0/24

 

Ian - Hide / Remove RESTORE button from PREVIOUS VERSIONS tab - December 2008

User Configuration (Enabled)
Policies
Administrative Templates
Windows Components/Windows Explorer/Previous Versions
Policy Setting Comment
Prevent restoring remote previous versions Enabled

 

Ian - Hide Security/Sharing Tabs - KB303153 - January 2004

Computer Configuration (Enabled)
Policies
Windows Settings
Security Settings
Registry
CLASSES_ROOT\CLSID\{1F2E5C40-9550-11CE-99D2-00AA006E086C}
Configure this key then: Propagate inheritable permissions to all subkeys
CLASSES_ROOT\CLSID\{40dd6e20-7c17-11ce-a804-00aa003ca9f6}
Configure this key then: Propagate inheritable permissions to all subkeys
Owner
Permissions
Allow inheritable permissions from the parent to propagate to this object and all child objectsDisabled
Auditing
No auditing specified

 

User Configuration (Enabled)
Policies
Administrative Templates
Policy definitions (ADMX files) retrieved from the local machine.
Windows Components/Windows Explorer
PolicySetting Comment
Remove Security tabEnabled

 

  

(C) 2002 through 2009 Up & Running Technologies Incorporated
If you want to use any images or text from this site you must get written approval first.  Click HERE to send an email request explaining your intended usage.