Contents 1 General Information 2 Windows Settings 2.1 Internet Explorer Maintenance 2.1.1 Connection 2.1.2 Favorites and Links 2.1.3 Important URLs 2.1.4 Security 3 User Configuration Settings 3.1 Administrative Templates 3.1.1 Microsoft Access 2002 3.1.2 Windows Components 3.1.2.1 NetMeeting 3.1.2.1.1 Application Sharing 3.1.2.2 Internet Explorer 3.1.2.2.1 Internet Control Panel 3.1.2.2.2 Offline Pages 3.1.2.2.3 Browser Menus 3.1.2.2.4 Toolbars 3.1.2.3 Administrator Approved Controls 3.1.2.4 Windows Explorer 3.1.2.5 Microsoft Management Console 3.1.2.5.1 Restricted/Permitted Snappins 3.1.2.6 Task Scheduler 3.1.2.7 Windows Installer 3.1.3 Windows Messenger 3.1.4 Windows Media Player 3.1.5 Microsoft Excel 2002 3.1.5.1 Tools | Macro 3.1.5.1.1 Security... 3.1.6 Microsoft FrontPage 2002 3.1.7 Microsoft Office XP Clip Organizer 3.1.8 IE Maintenance Only 3.1.9 Windows Installer 3.1.10 Microsoft Office XP 3.1.10.1 Tools | AutoCorrect Options... (Excel, PowerPoint and Access) 3.1.10.1.1 Smart Tags 3.1.10.2 Tools | Options | General | Web Options... 3.1.10.2.1 Files 3.1.10.3 Help | Detect and Repair... 3.1.10.4 Collaboration Settings 3.1.11 Microsoft Outlook 2002 3.1.12 Microsoft PowerPoint 2002 3.1.13 Microsoft Publisher 2002 3.1.14 Start Menu & Taskbar 3.1.15 Desktop 3.1.15.1 Active Desktop 3.1.15.2 Active Directory 3.1.16 Control Panel 3.1.16.1 Add/Remove Programs 3.1.16.2 Display 3.1.16.3 Regional Options 3.1.17 Network 3.1.17.1 Offline Files 3.1.17.2 Network and Dial-up connections 3.1.18 System 3.1.18.1 CTRL+ALT+DEL Options 3.1.19 Windows Media Player 3.1.20 Microsoft Word 2002 3.1.20.1 Tools | Macro 3.1.20.1.1 Security...

General Information

• Policy Package Object: General User Package.staff.vsfc
• Templates Directory: \\Athena\SYS\group-policy\staffuser\
• Applied Settings Types: User Configuration; Security Settings
• Group Policies remain in effect on user logout: No
• Cache User Configuration: No

Please also read this page on Group Policy.

This group of Group Policy settings is applied to all Staff accounts, i.e. all accounts in the staff.vsfc container in eDirectory. In addition Staff Power Users Group Policy settings may also be applied to Staff in the Staff Power User Package policy package.

Only configured policies need to be recorded on this page.

Windows Settings

Internet Explorer Maintenance

Connection

• Proxy Settings:
  • All protocols: 10.10.0.254
  • Bypass:
    • 10.10.*.*
    • *.varndean.ac.uk

Favorites and Links

• Favorites:
  • Varndean Public Website.url = http://www.varndean.ac.uk/
  • Hammer.url = https://online.varndean.ac.uk/hammer/
  • learn.varndean.url = http://learn.varndean.ac.uk/
  • Student Tracking System.url = https://sts.varndean.ac.uk/

Important URLs

• Homepage URL: https://online.varndean.ac.uk/staff/
• Online Support Page URL: https://online.varndean.ac.uk/staff/support/

Security

• Security Zones and Content Rating:
  • *.varndean.ac.uk added to trusted sites list.

User Configuration Settings

Administrative Templates

Microsoft Access 2002

Not configured.

Windows Components

NetMeeting

• Enable Automatic Configuration: Disabled
• Disable Directory Services: Enabled
• Prevent adding directory servers: Enabled
• Prevent viewing web directory: Enabled
• Set the intranet support page: Disabled
• Set call security options: Required
• Prevent changing call placement method: Enabled
• Allow Persisting Automatic Acceptance of Calls : Disabled
• Prevent Automatic acceptance of calls: Enabled
• Prevent sending files: Enabled
• Prevent receiving files: Enabled
• Limit Size of Sent Files : Disabled
• Disable chat: Enabled
• Disable NetMeeting 2.x Whiteboard : Enabled
• Disable Whiteboard: Enabled

Application Sharing

• Disable Application Sharing: Enabled
• Prevent Sharing: Enabled
• Prevent Desktop Sharing: Enabled
• Prevent Sharing Command Prompts: Enabled
• Prevent Sharing Explorer Windows: Enabled
• Prevent Control: Enabled
• Prevent Application Sharing in True Colour: Enabled

Internet Explorer

• Search: Disable Search Customisation : Enabled
• Search: Disable Find Files via F3 in the Browser : Disabled
• Disable external branding: Enabled
• Disabled Importing/Exporting of Favourites: Disabled
• Disable Changing of the Advanced Page Settings: Enabled
• Disable changing home page settings: Enabled
• Use Automatic Detection for Dial-up Connections : Disabled
• Disable Caching of auto-proxy scripts: Enabled
• Display Error Message on Proxy Script Download Failure: Disabled
• Disable changing Temporay Internet File Settings: Disabled
• Disable changing History settings: Disabled
• Disable Changing Colour Settings: Disabled
• Disable Changing Link Colour Settings: Enabled
• Disable changing Font Settings: Disabled
• Disable changing Language Settings: Enabled
• Disable changing Accessibility Settings: Disabled
• Disable Internet Connection Wizzard: Enabled
• Disable changing Connection Settings: Enabled
• Disable changing Proxy Settings: Enabled
• Disable changing Automatic Configuration Scripts: Enabled
• Turn Off Pop-Up Management: Enabled
• Disable changing ratings Settings: Enabled
• Disable changing Certificate Settings: Enabled
• Disable changing Profile Assistant Settings: Enabled
• Disable Autocomplete for forms: Enabled
• Do not allow autocomplete to save passwords: Enabled
• Disable changing Messaging Settings: Enabled
• Disable changing Calendar and Contact Settings: Enabled
• Disable reset web settings feature: Enabled
• Disable Chaning Default Browser Check: Enabled
• Turn off Crash Detection: Enabled
• Do not allow users to enable/disable add-ons: Enabled
• Identity Manager: Prevent Users from using identities: Enabled
• Configure Outlook Express: Disabled

Internet Control Panel

• Diable the General page: Disabled
• Disable the security page: Enabled
• Disable the Content Page: Enabled
• Disable the connections page: enabled
• Disable the Programs Page: Enabled
• Disable the Privacy Page: Enabled
• Disable the advanced page: Enabled

Offline Pages

• Disable Adding channels: Enabled
• Disable Removing Channels: Enabled
• Disable adding schedules for offline pages: Enabled
• Disable editing schedules for offline pages: Enabled
• Disable removing schedules for offline pages: Enabled
• Disable offline page hit logging: Enabled
• Disable all scheduled offline pages: Enabled
• Disable channel user interface completely: Enabled
• Disable downloading of site subscription content: Enabled
• Disable editing and creating or schedule groups: Enabled
• Subscription Limits: Disabled

Browser Menus

• File Menu: Disable Save As Option: Disabled
• File Menu: Disable New Menu Option: Disabled
• File Menu: Disable Open Menu Option: Disalbed
• File Menu: Disabled Save as Web Page Complete: Disabled
• File Menu: Disable Closing The Browser and Explorer Windows: Disabled
• View Menu: Disable Source Menu Option: Disabled
• View Menu: Disable Full Screen Menu Option: Disabled
• Hide Favourites Menu: Disabled
• Tools Menu: Disable Internet Options Menu: Disabled
• Help menu: remove tip of the day menu option: Enabled
• Help menu: remove For Netscape Users menu option: Enabled
• Help Menu: Remove Tour menu option: Enabled
• Help menu: Remove Send Feedback menu option: Enabled
• Disable Context Menu: Not Configured
• Disable Open in New Window Menu Option: Disabled
• Disable Save Program to Disk Option: Disabled

Toolbars

• Disable Customizing Browser Toolbar Buttons: Enabled
• Disable Customizing Browser Toolbar: Enabled
• Configure Toolbar Buttons

-Toolbar Buttons-

SHOW:

• Back
• Forward
• Stop
• Refresh
• Home
• Favourites
• Print

Administrator Approved Controls

• Media Player: Enabled
• Menu Controls: Not Configured
• Microsoft Agent: Not Configured
• Microsoft Chat: Disabled
• Microsoft Survey Control: Not Configured
• Shockwave Flash: Enabled
• NetShow File Transfer Control: Not Configured
• DHTML Edit Control: Not Configured
• Micorosoft Scriptlet Component: Not Configured
• Carpoint: Disabled
• Investor: Disabled
• MSNBC: Disalbed

Windows Explorer

• Turn On Classic Shell: Not Configured
• Removes the Folder Options menu item from the Tools menu: Enabled
• Remove File Menu from Windows Explorer: Disabled
• Remove Map Network Drive and Disconnect Network Drive: Enabled
• Remove Search Button from Windows Explorer: Disabled
• Remove Windows Explorer's Default Context Menu's: Disabled
• Hide the Manage item on the Windows Explorer context menu: Enabled
• Only Allow Per User or Approved Shell Extensions: Disabled
• Do not track shell shortcuts during roaming: Enabled
• Hide these specified drives in My Computer: Hide h,j-m,o,q-z(Staff) - Care: Read Hiding / restricting available drives using Group Policy
• Prevent access to drives from My Computer: NoAccess to c,h,j,k,m,o,r-z(Staff) - Care: Read Hiding / restricting available drives using Group Policy
• Remove Hardware Tab: Enabled
• Remove DFS tab: Enabled
• Remove Security Tab: Enabled
• Remove UI For menu Animation Settings: Enabled
• Remove UI to Change Keyboard Navigation Indicator Settings
• No Computers Near Me in My Network Places: Enabled
• No Entire Network in My Network Places: Enabled
• Maximum Number of Recent Documents: 1
• Do Not Request Alternate Credentials: Enabled
• Request Credentials for Network Installations: Not Configured
• Remove CD Burning Features: Enabled
• Do Not Move Deleted Files to the Recycle Bin: Disabled
• Display Conformation Diaglogue when Deleting Files: Enabled
• Maximum Allowed Recycle Bin Size: 10%
• Remove Shared Documents from My Computer: Enabled
• Turn off Caching of Thumbnail Pictures: Enabled
• Turn off Windows + X Hotkeys: Disabled
• Turn Off Shell Protected Mode: Not Configured

Microsoft Management Console

• Restrict the user from entering author mode: Enabled
• Restrict users to the explicitly permitted list of snappins: Enabled

Restricted/Permitted Snappins

• Certificates: Enabled

Task Scheduler

• Hide Property Pages: Enabled
• Prevent Task Run or End: Enabled
• Disable drag-and-drop: Enabled
• Disable new task creation: Enabled
• Disable task deletion: Enabled
• Disable advanced menu: Enabled
• Prohibit Browse: Enabled

Windows Installer

• Always Install with elevated privilages: Enabled

Windows Messenger

• Do Not Allow Windows Messenger to be Run: Enabled
• Do Not Automatically Start Windows Messenger Initially: Enabled

Windows Media Player

Networking:

• Hide Networking Tab: Enabled
• Configure HTTP Proxy: Use Browser

Microsoft Excel 2002

Tools | Macro

Security...

• Security Level: Medium

Microsoft FrontPage 2002

Not configured.

Microsoft Office XP Clip Organizer

Not configured.

IE Maintenance Only

Not configured.

Windows Installer

• Always install with elevated privilages: Enabled

Microsoft Office XP

Not configured.

Tools | AutoCorrect Options... (Excel, PowerPoint and Access)

Smart Tags

• Recognize smart tags in Word: Disabled
• Recognize smart tags in Excel: Disabled

Tools | Options | General | Web Options...

Files

• Check if office is the default editor for web pages created in office: Disabled

Help | Detect and Repair...

• Restore my shortcuts while repairing: Disabled

Collaboration Settings

• Outlook: send for review: Disabled
• Outlook: Ad hoc reviewing: Disabled

Microsoft Outlook 2002

Microsoft PowerPoint 2002

Not configured.

Microsoft Publisher 2002

Not configured.

Start Menu & Taskbar

• Remove user's folder from the start menu: Disabled
• Disable and remove links to windows update: Enabled
• Remove common program groups from start menu: Enabled
• Remove My Documents from Start Menu: Disabled
• Remove documents menu from start menu: Enabled
• Remove Programs From Settings Menu: Disabled
• Remove network connections from start menu: Enabled
• Remove Favourites Menu from Start Menu: Enabled
• Remove Search from Start Menu: Disabled
• Remove Help from Start Menu: Disabled
• Remove Run menu from start menu: Enabled
• Remove My Pictures Icon from Start Menu: Enabled
• Remove My Music Icon from Start Menu: Enabled
• Remove My Network Places from Start Menu: Enabled
• Add logoff to the start menu: Enabled
• Remove Log Off from Start Menu: Disabled
• Remove and Prevent Access to Shutdown Command: Disabled
• Remove Drag and Drop Contexts on the Start Menu: Enabled
• Prevent Changes to Taskbar and Start Menu Settings: Enabled
• Remove Context Menus from Start Menu: Disabled
• Do Not Keep History of Recently Opened Documents: Enabled
• Turn Off Personalised Menu's: Enabled
• Turn Off User Tracking: Enabled
• Disable drag-and-drop context menus on the start menu: Enabled
• Disable changes to the taskbar and start menu: Enabled
• Do not keep history of recently opened documents: Disabled
• Disable personalized menus: Enabled
• Disable user tracking: Enabled
• Do not use the search based method when resolving shell shortcuts: Enabled
• Do not use the tracking-based method when resolving shell shortcuts: Enabled
• Force Classic Start Menu: Enabled
• Remove Baloon Tips on Start Menu's: Enabled
• Remove Pinned Programs List from Start Menu: Enabled
• Remove Frequent Programs List: Enabled
• Remove Set Program Access & Defaults from Start Menu: Enabled

Desktop

• Remove My Documents Icon on Desktop: Disabled
• Remove Properties from My Documents Context Menu: Enabled
• Remove Properties from My Computer Context Menu: Enabled
• Remove Properties from Recylce Bin Context Menu: Enabled
• Hide My Network places icon on desktop: Enabled
• Hide Internet Explorer Icon on desktop: Enabled
• Do not add shares of recently opened documents to My Network places: Enabled
• Prohibit user from changing My Documents path: Enabled
• Prevent Adding, Draging, Dropping and Closing the Taskbar's Toolbars: Enabled
• Disable Save Settings on Exit: Disabled
• Remove the Desktop Cleanup Wizard: Enabled

Active Desktop

• Disable Active Desktop: Enabled
• Allow only bitmapped wallpaper: Enabled

Active Directory

• Hide active directory folder: Enabled

Control Panel

• Disable Control panel: Disabled
• Show only specified control panel applets: Enabled:
  • access.cpl
  • desk.cpl
  • inet.cpl
  • Keyboard
  • main.cpl
  • Printers
• Force Classic Control Panel: Enabled

Add/Remove Programs

• Disable add/Remove Programs: Enabled

Display

• Disable Display in Control Panel: Disabled
• Hide settings tab: Enabled
• Hide screen saver tab: Enabled

Regional Options

• Restrict selection of Windows 2000 menus and dialogs language: Enabled

Network

Offline Files

• Disable user configuration of Offline Files: Enabled
• Disable reminder balloons: Enabled

Network and Dial-up connections

• Prohibit enabling/disabling a LAN connection: Enabled
• Prohibit access to properties of a LAN connection: Enabled
• Prohibit renaming LAN connections or RAS connections available to all users: Enabled
• Prohibit adding and removing components of a LAN or RAS connection: Enabled
• Prohibit access to properties of components of a LAN connection: Enabled
• Prohibit access to the Network Connection Wizzard: Enabled
• Prohibit access to the Advanced Settings item on the Advanced menu: Enabled
• Prohibit Configuration of connection sharing: Enabled
• Prohibit TCP/IP advanced configuration: Enabled

System

• Dont display welcome screen at logon: Enabled
• Code signing for device drivers: Enabled: Ignore
• Disable the command prompt: Enabled
• Disable registry editing tools: Enabled
• Download missing COM components: Enabled
• Automatic Updates: Not Configured
• Turn Off Windows Update Device Driver Search Prompt: Enabled

CTRL+ALT+DEL Options

• Disable Change Password: Enabled

Windows Media Player

Not configured.

Microsoft Word 2002

Tools | Macro

Security...

• Security Level: Enabled: Medium