Products History Gallery Manuals Download Links Arcade Forum Up&Runng Windows PC News
    Microsoft Windows Vista, 2003 and XP processes and tips.  Includes Group Policy, Active Directory, Windows SharePoint Services, Outlook Shared Calendars, RAID5, McAfee and much more.  

  

 

This page is a subset of our Common Group Policies page.

NOTE: The author will not accept responsibility for damages as a result of following the suggestions below.  They are provided "as is" and intended only as a rough guide.  You should always back up your servers System State prior to changing Group Policies.  USE AT "YOUR OWN RISK".

Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available
Ian - Terminal Server Lock Down - July 2004
   
Computer Configuration (Enabled)
Policies
Windows Settings
Security Settings
Local Policies/Security Options
Devices
PolicySetting
Devices: Restrict CD-ROM access to locally logged-on user onlyEnabled
Devices: Restrict floppy access to locally logged-on user onlyEnabled
Interactive Logon
PolicySetting
Interactive logon: Do not display last user nameEnabled
System Services
helpsvc (Startup Mode: Disabled)
Permissions
TypeNamePermission
AllowBUILTIN\AdministratorsFull Control
AllowNT AUTHORITY\SYSTEMFull Control
AllowNT AUTHORITY\INTERACTIVERead
Auditing
TypeNameAccess
FailureEveryoneFull Control
Administrative Templates
Policy definitions (ADMX files) retrieved from the local machine.
System/Group Policy
PolicySettingComment
User Group Policy loopback processing modeEnabled
Mode:Merge
Windows Components/Terminal Services/Terminal Server/Connections
Windows Components/Terminal Services/Terminal Server/Device and Resource Redirection
PolicySettingComment
Allow audio redirectionEnabled
Windows Components/Terminal Services/Terminal Server/Remote Session Environment
Windows Components/Terminal Services/Terminal Server/Session Time Limits
PolicySettingComment
Set time limit for disconnected sessionsEnabled
End a disconnected session30 minutes
Windows Components/Windows Installer
PolicySettingComment
Disable Windows InstallerEnabled
Disable Windows InstallerAlways
User Configuration (Enabled)
Policies
Windows Settings
Folder Redirection
AppData(Roaming)
Setting: Not configured
Documents
Setting: Advanced (Specify locations for various user groups)
GroupPath
YourInternalDomainName\All Probe Staff\\\\HostNameOfServer\shared datamgt$
YourInternalDomainName\All Corp Staff\\\\HostNameOfServer\shared corp$
YourInternalDomainName\All Processing Staff\\\\HostNameOfServer\shared proc$
YourInternalDomainName\All Surveys Staff\\\\HostNameOfServer\shared srv$
YourInternalDomainName\ts-no_y_drive\\\\HostNameOfServer\shared misc
Options
Grant user exclusive rights to DocumentsDisabled
Move the contents of Documents to the new locationDisabled
Also apply redirection policy to Windows 2000, Windows 2000 server, Windows XP, and Windows Server 2003 operating systemsEnabled
Policy Removal BehaviorLeave contents
Music
Setting: Follow the Documents folder
Pictures
Setting: Follow the Documents folder
Videos
Setting: Follow the Documents folder
Administrative Templates
Policy definitions (ADMX files) retrieved from the local machine.
Control Panel
PolicySettingComment
Prohibit access to the Control PanelEnabled
Control Panel/Add or Remove Programs
PolicySettingComment
Remove Add or Remove ProgramsEnabled
Desktop
Start Menu and Taskbar
System
PolicySettingComment
Prevent access to registry editing toolsEnabled
Disable regedit from running silently?No
PolicySettingComment
Prevent access to the command promptEnabled
Disable the command prompt script processing also?No
System/Ctrl+Alt+Del Options
PolicySettingComment
Remove Task ManagerEnabled
Windows Components/Internet Explorer
Windows Components/Internet Explorer/Browser menus
PolicySettingComment
Disable Context menuEnabled
Hide Favorites menuEnabled
Windows Components/Task Scheduler
Windows Components/Windows Explorer
Windows Components/Windows Explorer/Common Open File Dialog
PolicySettingComment
Hide the common dialog places barEnabled
Windows Components/Windows Messenger
PolicySettingComment
Do not allow Windows Messenger to be runEnabled
Windows Components/Windows Update
PolicySettingComment
Remove access to use all Windows Update featuresEnabled
Configure notifications: 
Extra Registry Settings
Display names for some settings cannot be found. You might be able to resolve this issue by updating the .ADM files used by Group Policy Management.

SettingState
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDrives255
Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoViewOnDrive255

 

  

(C) 2002 through 2009 Up & Running Technologies Incorporated
If you want to use any images or text from this site you must get written approval first.  Click HERE to send an email request explaining your intended usage.