Software to control:

  • User permissions
  • Group permissions
  • Desktop customization

Policy List

  • Prevent registry edits
  • Prevent access to command prompt
  • Log on locally: Defines who may log on to a system locally
  • Shut down system
  • Minimum password length
  • Account lockout threshold: Maximum number of logon attempts
  • Disable windows installer: Prevent users from installing software with .msi (they can still use portable software)
  • Printer browsing: Enables users to browse for printers rather than having assigned printers