Recommended Standard Desktop Configuration

The STANDARD.POL system policy file is an example of settings that allow you to implement a level of control over users' desktop functionality while allowing specific corporate customization. STANDARD.POL includes the following additions.

STANDARD.POL Settings

Category

Policy setting

Computer settings:

Network Logon

Logon Banner (modify banner text as needed)

Require Validation by Network for Windows Access

Network Passwords

Hide Share Passwords with Asterisks

Minimum Windows Password Length (6)

System

Enable User Profiles

User settings:

Control Panel

Disable Deletion of Printer (printer restrictions)

System

Disable Registry Editing Tools1

Disable MS-DOS Prompt

Custom Folders2

Custom Desktop Icons

Custom Programs Folder

Custom Startup Folder

Custom Network Neighborhood

Custom Start Menu

Hide Start menu Subfolders (custom folders are defined)


1 This setting disables only Registry Editor, not System Policy Editor.

2 These options provide an opportunity for corporate customization, such as defining a program group containing corporate applications, applications that run at system startup, a custom Network Neighborhood, or a custom Start menu with standard choices.

To implement the custom settings specified in the STANDARD.POL policy file, make sure you define the UNC path names for the custom settings. Also be sure to place the customized folders for Programs, Startup, Network Neighborhood, and Start Menu in a secure network location, as described in "Managing Custom Folders for Use with System Policies" earlier in this chapter.