IT tutorials
 
Technology
 

Windows Server 2008 and Windows Vista : Preferences (part 4) - Servers

12/5/2013 2:13:34 AM
- Free product key for windows 10
- Free Product Key for Microsoft office 365
- Malwarebytes Premium 3.7.1 Serial Keys (LifeTime) 2019

4. Servers

Plenty of Group Policy settings are intended for configuring servers, not just desktops. It is common for desktops to be centrally managed and configured using tools and technologies. With Group Policy, servers can also be centrally managed. This will improve efficiency of server management, as well as security of servers. Grouping servers that can have the same configurations will not only make the overall management of them more efficient and stable, it will also reduce the time needed to configure the GPOs to make the settings. Table 4 lists many of the Group Policy settings that are available to target servers in your environment.

Table 4. Servers Settings
Full Policy NameComputer or User
Turn off Federation ServiceComputer
Allow Print Spooler to accept client connectionsComputer
Web-based printingComputer
Activate Shutdown Event Tracker System State Data featureComputer
Do not display Manage Your Server page at logonComputer
Enable Persistent Time StampComputer
Allow Cross-Forest User Policy and Roaming User ProfilesComputer
Always use local ADM files for Group Policy Object EditorComputer
Do not allow additional session loginsComputer
Do not allow changes to initiator iqn nameComputer
Do not allow changes to initiator CHAP secretComputer
Do not allow connections without IPsecComputer
Do not allow sessions without mutual CHAPComputer
Do not allow sessions without one-way CHAPComputer
Do not allow adding new targets via manual configurationComputer
Do not allow manual configuration of discovered targetsComputer
Do not allow manual configuration of iSNS serversComputer
Do not allow manual configuration of target portalsComputer
Netlogon share compatibilityComputer
Sysvol share compatibilityComputer
Ignore Delegation FailureComputer
Do not display Initial Configuration Tasks window automatically at logonComputer
Do not display Server Manager automatically at logonComputer
Global Configuration SettingsComputer
Configure Windows NTP ClientComputer
Enable Windows NTP ClientComputer
Enable Windows NTP ServerComputer
Allow remote start of unlisted programsComputer
Redirect only the default client printerComputer
Use Terminal Services Easy Print driver firstComputer
Use TS Session Broker load balancingComputer
Disk Diagnostic: Configure custom alert textComputer
Disk Diagnostic: Configure execution levelComputer
Report unplanned shutdown eventsComputer
Prevent access to 16-bit applicationsComputer
Remove Program Compatibility Property PageComputer
Turn Off Application Compatibility EngineComputer
Turn Off Program Compatibility WizardComputer
Prevent IIS installationComputer
Set the number of retries for Password sync ServersComputer
Set the retry interval for Password sync ServersComputer
Turn On Extensive logging for Password sync ServersComputer
Turn on the Windows to NIS password sync for migrated users for Password sync ServersComputer
Set Update Interval to NIS subordinate serversComputer
Turn on extensive logging for domain controllers running Server for NISComputer
Allow .rdp files from unknown publishersComputer
Allow .rdp files from valid publishers and user’s default .rdp settingsComputer
Configure server authentication for clientComputer
Do not allow passwords to be savedComputer
Prompt for credentials on the client computerComputer
Specify SHA1 thumbprints of certificates representing trusted .rdp publishersComputer
Allow reconnection from original client onlyComputer
Allow users to connect remotely using Terminal ServicesComputer
Automatic reconnectionComputer
Configure keep-alive connection intervalComputer
Deny logoff of an administrator logged in to the console sessionComputer
Limit number of connectionsComputer
Restrict Terminal Services users to a single remote sessionComputer
Set rules for remote control of Terminal Services user sessionsComputer
Allow audio redirectionComputer
Allow time zone redirectionComputer
Do not allow clipboard redirectionComputer
Do not allow COM port redirectionComputer
Do not allow drive redirectionComputer
Do not allow LPT port redirectionComputer
Do not allow smart card device redirectionComputer
Do not allow supported Plug and Play device redirectionComputer
Hide notifications about TS Licensing problems that affect the terminal serverComputer
Set the Terminal Services licensing modeComputer
Use the specified Terminal Services license serversComputer
Do not allow client printer redirectionComputer
Do not set default client printer to be default printer in a sessionComputer
Specify terminal server fallback printer driver behaviorComputer
Set path for TS Roaming ProfilesComputer
Set TS User Home DirectoryComputer
Use mandatory profiles on the terminal serverComputer
Always show desktop on connectionComputer
Enforce Removal of Remote Desktop WallpaperComputer
Limit maximum color depthComputer
Remove “Disconnect” option from Shut Down dialogComputer
Remove Windows Security item from Start menuComputer
Start a program on connectionComputer
Always prompt for password upon connectionComputer
Do not allow local administrators to customize permissionsComputer
Require secure RPC communicationComputer
Require use of specific security layer for remote (RDP) connectionsComputer
Require user authentication for remote connections by using Network Level AuthenticationComputer
Server Authentication Certificate TemplateComputer
Set client connection encryption levelComputer
Set time limit for active but idle Terminal Services sessionsComputer
Set time limit for active Terminal Services sessionsComputer
Set time limit for disconnected sessionsComputer
Terminate session when time limits are reachedComputer
Do not delete temp folder upon exitComputer
Do not use temporary folders per sessionComputer
Join TS Session BrokerComputer
Configure TS Session Broker farm nameComputer
Configure TS Session Broker server nameComputer
Use IP Address RedirectionComputer
License server security groupComputer
Prevent license upgradeComputer
Prevent Windows Media DRM Internet AccessComputer
Set the Email IDs to which notifications are to be sentComputer
Set the SMTP Server used to send notificationsComputer
Set the Time interval in minutes for logging accounting dataComputer
Turn on Accounting for WSRMComputer
Microsoft network server: Amount of idle time required before suspending sessionComputer
Microsoft network server: Digitally sign communications (always)Computer
Microsoft network server: Digitally sign communications (if client agrees)Computer
Microsoft network server: Disconnect clients when log-on hours expireComputer
EnvironmentComputer
RegistryComputer
Network SharesComputer
Data SourcesComputer
Local Users and GroupsComputer
ServicesComputer

More Info

Table 4 summarizes the majority of the server-related settings that can be configured in a GPO. The policy name is listed in the table. If you are having trouble finding the policy within the GPME, you can download and refer to spreadsheet, WindowsServer GroupPolicySettings.xls, from the Microsoft Download Center at http://www.microsoft.com/Downloads/

 
Others
 
- Windows Server 2008 and Windows Vista : Preferences (part 3) - Log-on Scripts
- Windows Server 2008 and Windows Vista : Preferences (part 2) - User Account Control
- Windows Server 2008 and Windows Vista : Preferences (part 1) - Terminal Services
- Sharepoint 2013 : Automating tasks with workflows - Switching to the visual designer, Creating workflows in Visio 2013
- Sharepoint 2013 : Automating tasks with workflows - Introducing Microsoft Visio integration with SharePoint workflows - Visio visual designer
- Sharepoint 2013 : Automating tasks with workflows - Editing workflows - Edit an existing list workflow
- Sharepoint 2013 : Creating a list workflow in SharePoint Designer
- Microsoft Access 2010 : Publishing Your Database to Access Services
- Microsoft Access 2010 : Creating Publishable Objects (part 4) - Creating Server Reports
- Microsoft Access 2010 : Creating Publishable Objects (part 3) - Creating Server Forms
 
 
Top 10
 
- Microsoft Visio 2013 : Adding Structure to Your Diagrams - Finding containers and lists in Visio (part 2) - Wireframes,Legends
- Microsoft Visio 2013 : Adding Structure to Your Diagrams - Finding containers and lists in Visio (part 1) - Swimlanes
- Microsoft Visio 2013 : Adding Structure to Your Diagrams - Formatting and sizing lists
- Microsoft Visio 2013 : Adding Structure to Your Diagrams - Adding shapes to lists
- Microsoft Visio 2013 : Adding Structure to Your Diagrams - Sizing containers
- Microsoft Access 2010 : Control Properties and Why to Use Them (part 3) - The Other Properties of a Control
- Microsoft Access 2010 : Control Properties and Why to Use Them (part 2) - The Data Properties of a Control
- Microsoft Access 2010 : Control Properties and Why to Use Them (part 1) - The Format Properties of a Control
- Microsoft Access 2010 : Form Properties and Why Should You Use Them - Working with the Properties Window
- Microsoft Visio 2013 : Using the Organization Chart Wizard with new data
Technology FAQ
- Is possible to just to use a wireless router to extend wireless access to wireless access points?
- Ruby - Insert Struct to MySql
- how to find my Symantec pcAnywhere serial number
- About direct X / Open GL issue
- How to determine eclipse version?
- What SAN cert Exchange 2010 for UM, OA?
- How do I populate a SQL Express table from Excel file?
- code for express check out with Paypal.
- Problem with Templated User Control
- ShellExecute SW_HIDE
programming4us programming4us