Tag: User Configuration
Set time (in seconds) to force reboot
This policy setting configures the amount of time (in seconds) that the operating system waits to reboot in order to enforce a change in access rights to removable storage devices. If you enable this policy setting you can set the number of seconds you want the system to wait until a reboot. If you disable or do not configure this setting the operating system does not force a reboot. Note: If no reboot is forced the access right does not take effect until the operating system is restarted.
Hide “Windows Features”
This setting prevents users from accessing the “Turn Windows features on or off” task from the Programs Control Panel in Category View Programs and Features in Classic View and Get Programs. As a result users cannot view enable or disable various Windows features and services. If this setting is disabled or is not configured the “Turn Windows features on or off” task will be available to all users. This setting does not prevent users from using other tools and methods to configure services or enable or disable program components.
Hide “Get Programs” page
Prevents users from viewing or installing published programs from the network. This setting prevents users from accessing the “Get Programs” page from the Programs Control Panel in Category View Programs and Features in Classic View and the “Install a program from the netowrk” task. The “Get Programs” page lists published programs and provides an easy way to install them. Published programs are those programs that the system administrator has explicitly made available to the user with a tool such as Windows Installer. Typically system administrators publish programs to notify users of their availability to recommend their use or to enable users to install them without having to search for installation files. If this setting is enabled users cannot view the programs that have been published by the system administrator and they cannot use the “Get Programs” page to install published programs. Enabling this feature does not prevent users from installing programs by using other methods. Users will still be able to view and installed assigned (partially installed) programs that are offered on the desktop or on the Start menu. If this setting is disabled or is not configured the “Install a program from the network” task to the “Get Programs” page will be available to all users. Note: If the “Hide Programs Control Panel” setting is enabled this setting is ignored.
Hide “Windows Marketplace”
This setting prevents users from access the “Get new programs from Windows Marketplace” task from the Programs Control Panel in Category View Programs and Features in Classic View and Get Programs. Windows Marketplace allows users to purchase and/or download various programs to their computer for installation. Enabling this feature does not prevent users from navigating to Windows Marketplace using other methods. If this feature is disabled or is not configured the “Get new programs from Windows Marketplace” task link will be available to all users. Note: If the “Hide Programs control Panel” setting is enabled this setting is ignored.
Hide “Set Program Access and Computer Defaults” page
This setting removes the Set Program Access and Defaults page from the Programs Control Panel. As a result users cannot view or change the associated page. The Set Program Access and Computer Defaults page allows administrators to specify default programs for certain activities such as Web browsing or sending e-mail as well as specify the programs that are accessible from the Start menu desktop and other locations. If this setting is disabled or not configured the Set Program Access and Defaults button is available to all users. This setting does not prevent users from using other tools and methods to change program access or defaults. This setting does not prevent the Default Programs icon from appearing on the Start menu.
Hide “Installed Updates” page
This setting prevents users from accessing “Installed Updates” page from the “View installed updates” task. “Installed Updates” allows users to view and uninstall updates currently installed on the computer. The updates are often downloaded directly from Windows Update or from various program publishers. If this setting is disabled or not configured the “View installed updates” task and the “Installed Updates” page will be available to all users. This setting does not prevent users from using other tools and methods to install or uninstall programs.
Hide “Programs and Features” page
This setting prevents users from accessing “Programs and Features” to view uninstall change or repair programs that are currently installed on the computer. If this setting is disabled or not configured “Programs and Features” will be available to all users. This setting does not prevent users from using other tools and methods to view or uninstall programs. It also does not prevent users from linking to related Programs Control Panel Features including Windows Features Get Programs or Windows Marketplace.
Hide the Programs Control Panel
This setting prevents users from using the Programs Control Panel in Category View and Programs and Features in Classic View. The Programs Control Panel allows users to uninstall change and repair programs enable and disable Windows Features set program defaults view installed updates and purchase software from Windows Marketplace. Programs published or assigned to the user by the system administrator also appear in the Programs Control Panel. If this setting is disabled or not configured the Programs Control Panel in Category View and Programs and Features in Classic View will be available to all users. When enabled this setting takes precedence over the other settings in this folder. This setting does not prevent users from using other tools and methods to install or uninstall programs.
Default Active Directory path when searching for printers
Specifies the Active Directory location where searches for printers begin. The Add Printer Wizard gives users the option of searching Active Directory for a shared printer. If you enable this policy setting these searches begin at the location you specify in the “Default Active Directory path” box. Otherwise searches begin at the root of Active Directory. This setting only provides a starting point for Active Directory searches for printers. It does not restrict user searches through Active Directory.
Point and Print Restrictions
This policy setting controls the client Point and Print behavior including the security prompts for Windows Vista computers. The policy setting applies only to non-Print Administrator clients and only to computers that are members of a domain. If you enable this policy setting: -Windows XP and later clients will only download print driver components from a list of explicitly named servers. If a compatible print driver is available on the client a printer connection will be made. If a compatible print driver is not available on the client no connection will be made. -You can configure Windows Vista clients so that security warnings and elevated command prompts do not appear when users Point and Print or when printer connection drivers need to be updated. If you do not configure this policy setting: -Windows Vista client computers can point and print to any server. -Windows Vista computers will show a warning and an elevated command prompt when users create a printer connection to any server using Point and Print. -Windows Vista computers will show a warning and an elevated command prompt when an existing printer connection driver needs to be updated. -Windows Server 2003 and Windows XP client computers can create a printer connection to any server in their forest using Point and Print. If you disable this policy setting: -Windows Vista client computers can create a printer connection to any server using Point and Print. -Windows Vista computers will not show a warning or an elevated command prompt when users create a printer connection to any server using Point and Print. -Windows Vista computers will not show a warning or an elevated command prompt when an existing printer connection driver needs to be updated. -Windows Server 2003 and Windows XP client computers can create a printer connection to any server using Point and Print. -The “Users can only point and print to computers in their forest” setting applies only to Windows Server 2003 and Windows XP SP1 (and later service packs).