The STANDARD.POL system policy file is an example of settings that allow you to implement a level of control over users' desktop functionality while allowing specific corporate customization. STANDARD.POL includes the following additions.
STANDARD.POL Settings
Category | Policy setting |
Computer settings: | |
Network Logon | Logon Banner (modify banner text as needed) Require Validation by Network for Windows Access |
Network Passwords | Hide Share Passwords with Asterisks Minimum Windows Password Length (6) |
System | Enable User Profiles |
User settings: | |
Control Panel | Disable Deletion of Printer (printer restrictions) |
System | Disable Registry Editing Tools1 Disable MS-DOS Prompt |
Custom Folders2 | Custom Desktop Icons Custom Programs Folder Custom Startup Folder Custom Network Neighborhood Custom Start Menu Hide Start menu Subfolders (custom folders are defined) |
1 This setting disables only Registry Editor, not System Policy Editor.
2 These options provide an opportunity for corporate customization, such as defining a program group containing corporate applications, applications that run at system startup, a custom Network Neighborhood, or a custom Start menu with standard choices.
To implement the custom settings specified in the STANDARD.POL policy file, make sure you define the UNC path names for the custom settings. Also be sure to place the customized folders for Programs, Startup, Network Neighborhood, and Start Menu in a secure network location, as described in "Managing Custom Folders for Use with System Policies" earlier in this chapter.