User Group Policy - Administrative Templates

Group Policy - Administrative Templates

This section deals with the classic Microsoft Group Policies for Windows Server 2003.  If you are new to Group Policies, this is the best place to start.  Cut your teeth on these policies which are easy to understand, and fun to implement, for example, 'Disable the Run Command' or 'Hide all icons on the desktop'.

While many administrators get fixated on policies which remove tabs, I find it satisfying to discover settings which improve users' productivity, for example 'Run Programs at Logon'.  As I look through the hundreds of policies, I became aware that most of them would only be useful in specialist situations.  What I have done is to highlight those policies that are worth implementing in a medium secure network.

Note: Microsoft created two sets of Administrative Templates, one for Users (this page) and one for Computers.  The User Configuration folder has the richer set of policies.

Group Policy Topics

Administrative Templates

• Windows Components
• Start Menu and Taskbar
• Desktop
• Control Panel
• Shared Folders (little of interest)
• Network
• System

Pre-requisites before creating your User Group Polices:

• Access to a Windows Server 2003 domain controller.  (Windows 2000 has different menus with fewer settings.)
• Install Group Policy Management Console (GPMC). If necessary get a copy from Microsoft's site.
• Dedicate a test OU for your experimental policies.  (Not essential, but safer than using the default domain policy)
• Create a Group Policy (GPO). Right click your policy, then edit.
• Navigate to the User Configuration (not Computer).  Next expand the Administrative Templates.

Troubleshooting Group Policies is tricky.  As an MCT trainer, I can thoroughly recommend TrainSignal because they provide practical hands on training.  In particular, I like the way TrainSignal cover all learning methods, instructor lead, video and of course text material.  You can either take one module, for example Group Policy or go for a combination of modules.  See more about Group Policy training here

•  Group Policy Home    Next: Windows Components