Here

gasownerData Management

Jan 31, 2013 (4 years and 2 months ago)

161 views

Group Policy Settings

MyDomain


Group Policies that I have set according to Domain or OU. Unset settings are
not listed here.


MyDomain
.local

Computer Configuration



Windows|Startup Script


logon.bat (time sync)



Windows|Security Settings|Account Policies|
Password



Enforce


1 Password Remembered



Max Pass age


0 days



Min Pass age


0 days



Min Pass length


5 characters



Windows|Security Settings|Account Policies|Account Lockout



Lockout duration


2 minutes



Lockout threshold


10 invalid login attempts



Reset
account lockout after


2 minutes



Windows|Security Settings|Local Policies|Security Options



Do Not Display last user name in logon screen


enabled



Administrative|Windows Comp|Windows Messenger



Do not allow Windows Messenger to be run


enabled



Do not auto
matically start Windows Messenger initially
-

enabled



Administrative|System|User Profiles



Delete cached copies of roaming profiles


enabled



Administrative|Network|Offline Files



Synchronize offline files before logging off


enabled



Default cache size


en
abled


100



Action on Server Disconnect


enabled


Work Offline



Files not Cached


enabled



*.exe;*.dot;*.htm;*.js;*.asp;*.html;*.dll;*.cab;*.url;*.jpg;*.gif;*.dat;*.pol;*.lnk
;*.ini;*.bin



At Logoff Delete local copies of user’s offline files
-

Enabled

Use
r Configuration



Windows|Logon Script


Map Network Drive Bat file (to Office)



Windows|IE Maintenance|Connection


Set Proxy to 172.16.1.1



Windows|IE Maintenance|URLs



Important Urls


Home page
http://
MyDomain
.sd61
.bc.ca
;
Search
http://www.google.ca



Administrative Templates|Network|Offline Files



Synchronize all files before logging off


enabled



Do NOT automatically make redirected folders available offline


ENABLED



Administrative Templates|System



Don’t display We
lcome Screen


enabled



Windows Automatic Updates


NOT CONFIGURED


Computers Group Policy

Computer Configuration



Windows|Security Settings|Local Policies|Security Options



Number of previous logons to cache (in case DC is unavailable)


0 logons



Admin|Windo
ws|Windows Update



Configure Automatic Updates


Enabled


Set to 4


Autodownload and
schedule. Set Sechedule


6 Every Friday 3:00am



Specify Intranet
http://
MyDC


MyUsers Group Policy

User Configuration



Windows|Folder Redir
ection



My Documents


Redirect according to GROUP.



Users

redirected to
\
\
server
\
Users
\
%Username%



Under Settings UNTICK both boxes and set to “Leave folder in new location”



Do SAME for My Pictures.



Administrative|Windows Comp.|Internet Explorer|Internet
Control Panel



All in list are Enabled (all pages are disabled)



Administrative|Windows Comp.|Internet Explorer|Offline Pages



Disable Adding Channels
-

Enabled



Administrative|Windows Comp.|Internet Explorer|Browser Menu



Hide Favourites Menu


DISABLED



Tools
Menu Disable


Enabled



Disable Context Menu
-

DISABLED



Administrative|Windows Comp.|Internet Explorer|Toolbars



Disable Customizing Buttons
-

Enabled



Disable Customizing Toolbars
-

Enabled



Administrative|Windows Comp.|Windows Explorer|



Removes folder option
s menu


Enabled



Remove Map Net Drive


Enabled



Remove Search (Explorer Only)


Enabled



Remove Default Context Menu (right click menu)


Enabled



Hide the “Manage Items” on the Context Menu.



Hide specified drives in My Computer


Enabled (doesn’t show C:
\

o
r O:
\

(modified system.adm )



Remove Hardware Tab


Enabled



Remove DFS Tab


Enabled



Remove Security Tab
-

Enabled



No “Computers Near Me”


Enabled.



No “Entire Network”


Enabled



Maximum Number of Recent Documents in list


5



Do not request alternate creden
tials


Enabled.



Request Credentials


Enabled.



Remove Shared Documents


Enabled



Turn off Caching of Thumbnail pictures
-

Enabled



Administrative|Windows Comp.|Microsoft Mangement|



Restrict the user from Author Mode


Enabled



Restrict Snapins


Enabled



Admin
istrative|Windows Comp|Windows Update



Remove access to all Windows Update Features
-

Enabled



Administrative|Start Menu & Taskbar



Remove Users’s folders from the Start Menu


DISABLED.



Disable links to Windows Update


Enabled.



Remove Programs on Settings

Menu


DISABLED. (Printers Only)



Remove Network/Dial Up


Enabled.



Remove Favourites


Enabled



Remove Search


Enabled.



Remove Run


Enabled



Add Logoff


Enabled.



Remove and prevent access to Shut Down



Remove Drag and Drop


Enabled



Prevent Changes to Tas
kbar


Enabled.



Remove Access to Taskbar Context menus


Enabled



Do not keep History


Enabled.



Clear History of Documents


Enabled



Turn off Personalized menus


Enabled.



Turn off User Tracking


Enabled.



Do not use search
-
based


Enabled.



Do not use trac
king
-
based


Enabled



Prevent grouping of Taskbar Items


Enabled



Turn off notification area cleanup


Enabled



Lock the Taskbar
-

Enabled



Remove pinned programs list from Start Menu


Enabled



Remove and Disable


Turn off Computer Button


Enabled



Remove Us
er name from Start Menu


DISABLED



Administrative|Desktop



Remove My Documents icon on Desktop


DISABLED



Remove My Computer icon from Desktop


DISABLED



Remove Recycle Bin icon from desktop


DISABLED



Remove Properties from the My Documents context Menu


Enabled



Remove Properties from the My Computer context Menu


Enabled



Remove Properties from the Recycle Bin context Menu
-

Enabled



Hide “My Network Places Icon” on desktop


DISABLED.



Hide Internet Explorer icon on Desktop
-

DISABLED



Do not add shares to
My Network
-

Enabled



Users can’t change “My Documents” path
-
Enabled



Prevent Dragging/Dropping Toolbars


Enabled.



Prohibit Adjusting Toolbars


Enabled



Don’t Save Settings on Exit


Enabled



Remove Desktop Cleaning Wizard
-

Enabled



Administrative|Desktop|A
ctive Desktop



Disable Active Desktop
-

Enabled



Administrative|Desktop|Active Directory



Hide Active Directory Folder


Enabled.



Administrative|Control Panel



Prohibit access to Control Panel


Enabled.



Printers:



Disable Deletion of Printers


Enabled



Disabl
e Addition of Printers


DISABLED



Browse the Network


DISABLED



Display:



Remove Display


Enabled



Add/Remove Programs:



Remove Add/Remove Programs


Enabled



Regional Options:



Restrict Selection of Windows 2000 Menus


Enabled




Administrative|System



Don’t di
splay Getting Started Welcome Screen



Prevent access to the Command Prompt


Enabled. (No for limiting processing)



Prevent access to Registry Editing Tools


Enabled.



Restrict Certain Programs under Explorer


icqlite.exe; trillian.exe; trillian
-
v0.74.exe



W
indows Automatic Updates
-

Enabled



Administrative|System|Ctrl
-
Alt
-
Del Options



Remove Lock Computer


enabled



Administrative|Microsoft Word 2000|Tools Autocorrect|Autocorrect



Correct TWo INtial Capitals


Enabled



Correct accidental use of cAPS LOCK key


En
abled



Administrative|Microsoft Word 2000|Tools Autocorrect|Autoformat|Apply as Type



Headings


DISABLED



Borders


Enabled



Tables


Enabled



Dates


Enabled



Automatic Bulleted Lists


DISABLED



Automatic numbered lists


DISABLED



Administrative|Microsoft Word

2000|Tools Autocorrect|Autoformat|Replace as type



All enabled BUT internet and network paths, Autospace and Dash
-
like
characters.



Administrative|Microsoft Word 2000|Tools Autocorrect|Autoformat|Automatically



Format beginning of list item like one before i
t
-

DISABLED


My Other Users Group Policy

User Configuration



Windows|Folder Redirection



My Documents


Redirect according to GROUP.



OtherUsers

redirected to
\
\
s
erver
\
OtherUsers
\
%Username%



Under Settings UNTICK both boxes and set to “Leave folder in new

location”



Do SAME for My Pictures.



Administrative|Windows Comp.|Internet Explorer|Internet Control Panel



All in list are Enabled (all pages are disabled)



Administrative|Windows Comp.|Internet Explorer|Offline Pages



Disable Adding Channels
-

Enabled



Admini
strative|Windows Comp.|Internet Explorer|Browser Menu



Hide Favourites Menu


DISABLED



Tools Menu Disable


Enabled



Disable Context Menu
-

DISABLED



Administrative|Windows Comp.|Internet Explorer|Toolbars



Disable Customizing Buttons
-

Enabled



Disable Customi
zing Toolbars
-

Enabled



Administrative|Windows Comp.|Windows Explorer|



Removes folder options menu


Enabled



Remove Map Net Drive


Enabled



Remove Search (Explorer Only)


Enabled



Remove Default Context Menu (right click menu)


DISABLED



Hide the “Manage I
tems” on the Context Menu.



Hide specified drives in My Computer


Enabled (doesn’t show C:
\

or O:
\

(modified system.adm )



Remove Hardware Tab


Enabled



Remove DFS Tab


Enabled



Remove Security Tab
-

Enabled



No “Computers Near Me”


Enabled.



No “Entire Netw
ork”


Enabled



Maximum Number of Recent Documents in list


5



Do not request alternate credentials


Enabled.



Request Credentials


Enabled.



Remove Shared Documents


Enabled



Turn off Caching of Thumbnail pictures
-

Enabled



Administrative|Windows Comp.|Mic
rosoft Mangement|



Restrict the user from Author Mode


Enabled



Restrict Snapins


Enabled



Administrative|Windows Comp|Windows Update



Remove access to all Windows Update Features
-

Enabled



Administrative|Start Menu & Taskbar



Remove Users’s folders from the St
art Menu


DISABLED.



Remove links to Windows Update


Enabled.



Remove Programs on Settings Menu


DISABLED. (Printers Only)



Remove Network/Dial Up


Enabled.



Remove Favourites


Enabled



Remove Run


Enabled



Add Logoff


Enabled.



Remove and prevent access

to Shut Down



Remove Drag and Drop


Enabled



Prevent Changes to Taskbar


Enabled.



Remove Access to Taskbar Context menus


Enabled



Do not keep History


Enabled.



Clear History of Documents


Enabled



Turn off Personalized menus


Enabled.



Turn off User Tra
cking


Enabled.



Do not use search
-
based


Enabled.



Do not use tracking
-
based


Enabled



Prevent grouping of Taskbar Items


Enabled



Turn off notification area cleanup


Enabled



Lock the Taskbar
-

Enabled



Remove pinned programs list from Start Menu


Enable
d



Remove and Disable


Turn off Computer Button



Remove User name from Start Menu
-

DISABLED



Administrative|Desktop



Remove My Documents icon on Desktop


DISABLED



Remove My Computer icon from Desktop


DISABLED



Remove Recycle Bin icon from desktop


DISABLE
D



Remove Properties from the My Documents context Menu


Enabled



Remove Properties from the My Computer context Menu


Enabled



Remove Properties from the Recycle Bin context Menu
-

Enabled



Hide “My Network Places Icon” on desktop


DISABLED.



Hide Internet
Explorer icon on Desktop
-

DISABLED



Do not add shares to My Network
-

Enabled



Users can’t change “My Documents” path
-
Enabled



Disable Dragging/Dropping Toolbars


Enabled.



Disable Adjusting Toolbars


Enabled



Don’t Save Settings on Exit


Enabled



Remove De
sktop Cleaning Wizard
-

Enabled



Administrative|Desktop|Active Desktop



Disable Active Desktop
-

Enabled



Administrative|Desktop|Active Directory



Hide Active Directory Folder


Enabled.



Administrative|Control Panel



Prohibit access to Control Panel


Enabled.



Printers:



Disable Deletion of Printers


Enabled



Disable Addition of Printers


DISABLED



Browse the Network


DISABLED



Display:



Disable Display


Enabled



Add/Remove Programs:



Disable Add/Remove Programs


Enabled



Regional Options:



Restrict Selection of Wi
ndows 2000 Menus


Enabled



Administrative|System



Don’t display Getting Started Welcome Screen



Prevent access to Registry Editing Tools


Enabled.



Prevent access to the Command Prompt


Enabled. (No for limiting processing)



Windows Automatic Updates
-

Enabl
ed



Administrative|Microsoft Word 2000|Tools Autocorrect|Autocorrect



Correct TWo INtial Capitals


Enabled



Correct accidental use of cAPS LOCK key


Enabled



Administrative|Microsoft Word 2000|Tools Autocorrect|Autoformat|Apply as Type



Headings


DISABLED



Bo
rders


Enabled



Tables


Enabled



Dates


Enabled



Automatic Bulleted Lists


DISABLED



Automatic numbered lists


DISABLED



Administrative|Microsoft Word 2000|Tools Autocorrect|Autoformat|Replace as type



All enabled BUT internet and network paths, Autospace a
nd Dash
-
like
characters.



Administrative|Microsoft Word 2000|Tools Autocorrect|Autoformat|Automatically



Format beginning of list item like one before it
-

DISABLED