|
6.8.1 Administrative Templates
Windows Server 2003 has Administrative Template settings, which uses the .adm file extension, for both
computers and user accounts. You can use Administrative Templates to control the user’s environment by
restricting access to user desktops, network resources, and administrative tools and applications while the
Administrative Template settings that you can apply to computers allows you to manage Windows. There
are seven types of Administrative Template settings. Table 6.8 lists the types of settings in the
Administrative Templates extension.
TABLE 6.8: The Administrative Templates
Type of Setting
Use
Windows Components Control the Windows components that a user can gain access.
This includes access to Microsoft Management Console (MMC).
Available and can be applied to both computers and users.
System
Controls logon and logoff procedures and can be applied to both
computers and users.
Network
Controls the properties of network connections and dial-in
connections, which include shared network access. This can be
applied to both computers and users.
Printers
Controls printer settings that can force printers to be
automatically published in Active Directory and can disable
Web-based printing. This can only be applied to computers.
Start Menu and Taskbar Controls which features that users can access from the Start
menu. It also allows you to make the Start menu read-only and
disable users’ ability to make changes. This can only be applied
to users
Desktop
Controls the Active Desktop and allows you to control a user’s
ability to gain access to the network and the Internet by hiding
the appropriate desktop icons and controlling what users can do
with their My Documents folder. This can only be applied to
users
Control Panel
Allows you to restrict a user’s access to several applications in
Control Panel. This includes restricting the use of Add/Remove
Programs, Display, and Printers. This can only be applied to
users
|