Templates (User/Computer Configuration Templates in Desktop Management)
Desktop Management provides many templates
for remote desktop management. Templates reduce the time taken to configure a particular setting, as they are already defined and only needs to be implemented. You can access them from Desktop
Management-> Configuration-> Templates option. List of templates:
To deploy a template on a Computer, Group or a Customer select according in the Choose Target. Finally click on Deploy. You can also save the template as a draft and deploy later by clicking on Save as Draft.
----------------------------------------------------------------------------
Disable USB Drives
You can disable USB drives across multiple desktops using this template. It modifies the following registry setting.
| Action |
Write Value |
| Header Key |
HKEY_LOCAL-MACHINE |
| *Sub-key |
SYSTEM\CurrentControlSet\Services\USBSTOR |
| Data Type |
REG_DWORD |
| *Value Name |
Start |
| Value Data / Expression |
4 |
Write Protect USB devices
You can write protect the USB devices across multiple desktops using this template. It modifies the following registry setting.
Action
|
Write Value
|
Header Key
|
HKEY_LOCAL-MACHINE
|
*Sub-key
|
|
Data Type
|
REG_SZ
|
*Value Name
|
|
| Value Data / Expression |
|
Restrict CD-ROM access
This
configuration helps you to disable the CD-ROM access of the desktops to
locally logged on users. The following options will be enabled. Security Policy-> Computer-> Restrict CD-ROM access to locally logged-on user only
Note:Restrict CD-ROM access can be disabled by clicking on the 'Disable' option.
Restrict Floppy access
This
configuration helps you to disable the Floppy access of the desktops to
locally logged on users. The following options will be enabled.
Security Policy-> Computer-> Restrict Floppy access to locally logged-on user only
Note:Restrict Floppy access can be disabled by clicking on the 'Disable' option.
Restrict Network Access
By using this template you can restrict network access across multiple desktops. The following options will be enabled.
Security policy-> Network-> Ability to enable/Disable LAN connections
Security policy-> Network-> Prohibit access to properties of LAN
Security policy-> Network-> Prohibit TCP/IP advanced configuration
Note:The above can be disabled by clicking on the corresponding 'Disable' option.
Cleanup recycle bin
This template helps you to delete the data available in the recycle bin across multiple desktops. Check the following settings.
- Define task-> Disk cleanup will be selected-> Next
- Recycle bin will be selected-> Next
- Choose target-> Next
- Define scheduler based on your requirement-> Finish
Defrag hard disk
This template helps you to defragment the fragmented hard disk across multiple desktops.
A fragmented disk reduces the performance. It is recommended to defragment
the disk periodically to improve the hard disk performance. Check the following settings.
- Define task-> Disk Defragmenter will be selected-> Next
-
Select the options for defragmentation of the disk-> select the
desired Volume-> Verbose mode will be selected->
Analyze defragmentation level will be selected-> Next
- Choose target-> Next
- Define scheduler baseSd on your requirement-> Finish
Scan and fix hard disk errors
This
template helps you to scan and fix hard disk errors across multiple
desktops inorder to improve the life and performance of the disk. Check
the following settings.
- Define task-> Check Disk will be selected-> Next
-
Select the options to check the disk-> select the
desired Volume-> Verbose mode will be selected-> Fix Errors on the Disk will be selected-> Quick check will be
selected-> Next
- Choose target-> Next
- Define scheduler based on your requirement-> Finish
Restrict setting in IE
This
template helps you to restrict setting in IE across multiple desktops.
By this you can prevent the logged on user to modify his connection,
security, history etc. settings. The following options will be enabled.
Security policy-> Internet Explorer-> Hide Advanced Option Screen
Security policy-> Internet Explorer-> Hide Connections Option Screen
Security policy-> Internet Explorer-> Hide Content Option Screen
Security policy-> Internet Explorer-> Hide Programs Option Screen
Security policy-> Internet Explorer-> Hide Security Option Screen
Security policy-> Internet Explorer-> Restrict changing history settings
Security policy-> Internet Explorer-> Restrict using Save As... menu option
Note: The above can be disabled by clicking on the corresponding 'Disable' option.
Configure Proxy in IE
Desktop Management periodically updates the vulnerability database with that
of the Central Patch Repository that resides at AdventNet's site. It
uses this configuration to connect to the internet to update the
vulnerability database. This template helps you to configure the proxy
server settings in IE across multiple desktops. In the IE configuration
the following option will be enabled.
Proxy server-> Use proxy server
This modifies the following IE configuration.
*Address
| http://proxy-server
|
*Port
| 80
|
| Bypass for local addresses | Preserve client settings
|
Do not use proxy server
for addresses beginning with | <local |
Laptop power saver scheme
This template provides the recommended power saver settings for multiple laptops. The following option will be selected.
Power Management-> Create scheme-> Enable Hibernate support
This modifies the following settings.
When computer is
| Plugged in
| Running on batteries
|
System Hibernate
| Never
| After 2 hours
|
Disable control panel
This
template helps you to disable the complete control panel access across
multiple desktops. The following option will be enabled.
Security policy-> Control panel-> Disable control panel
Note:Restriction to access the control panel can be disabled by clicking on the 'Disable' option.
Restrict control panel applets
This
template helps you to restrict the logged-on user from accessing some
of the control panel applets like add/remove programs, add/remove
hardware, internet options, power options etc. inorder to prevent the
logged on user from changing any settings. The following options will
be enabled.
Security policy-> Control panel-> Hide Add/Remove Hardware Applet
Security policy-> Control panel-> Hide Add/Remove Programs Applet
Security policy-> Control panel-> Hide add/remove windows components page
Security policy-> Control panel-> Hide Internet Options Applet
Security policy-> Control panel-> Hide Power Options Applet
Security policy-> Control panel-> Hide System Applet
Note:Restrictions to the control panel applets can be disabled by clicking on the 'Disable' option.
Change local admin a/c password
To enhance the security, the administrators will prefer to change the password
periodically. This template enables you to change the password of the
local administrator account accross multiple desktops. Enter the Username and new password in the 'Change Password' field.
Create local admin a/c
To
keep the computers secured, the administrators will prefer to change
the local administrator account periodically. This template enables you
to create an alternate local administrator account in the client
computers. Enter the user name, full name, description, password and
confirm password in the 'Add User' field.
Delete local admin a/c
This
template helps you to delete the local administrator account. This
needs to be done periodically for security reasons. Enter the user name
in the 'User name' field.
Disable unused local guest a/c
This
template helps you to disable the unused guest accounts from the client
computers. Unused guest accounts are vulnerable points for the hackers.
It is recommended to delete or disable any unused guest accounts from
the client computers to avoid any misuse. Enter the user name whose
account to be disabled in the 'User name' field. The following option will be enabled.
Advanced settings-> Account is Disabled
Note: Account can be enabled by clicking on the 'No' option.
Open MEDC Ports
Opens required ports in the firewall for MEDC client-server communication
Uninstall Skype
Uninstalls Skype application version 3.8.0.180 from the computers.
Note: For uninstalling other versions of Skype change the command.
Disable Interactive Services Detection
Disables
the service "Interactive Services Detection" that is running in Vista.
This process is a part of windows security infrastructure.
Get Log Files from Agent Box
Retrieves the log files computer.log and dcServices.log from the computers.
