Microsoft Windows Registry Guide, Second Edition

Using DesktopStandard PolicyMaker

Group Policy doesn't do everything that every IT professional needs it to do. In fact, even Microsoft folks will admit that there are holes in the coverage that Group Policy provides. That's why Microsoft made Group Policy extensible. To date, however, very few companies have extended Group Policy with useful tools that help you to better manage users and computers.

PolicyMaker from DesktopStandard (http://www.desktopstandard.com) is a new product that fills this void. If you've ever wished that your GPOs could do more, I recommend that you evaluate PolicyMaker. It seamlessly adds new features to every GPO you create, such as:

• Network drive mappings.

  You can assign network drives. For example, you can create a GPO that maps drive M to the network share containing the accounting department's data files, and then assign that GPO to the accounting department's OU.

• Shared printer connections.

  You can assign shared and TCP/IP printer connections. In a classroom environment, for example, you can assign GPOs to each classroom's OU that connects to the printer in that classroom.

• Creating, changing, and removing shortcuts.

  You can create GPOs that add shortcuts to Internet Explorer, the Start menu, the Quick Launch toolbar, the desktop, and more. You can also use a GPO to remove shortcuts, such as those for distracting programs that are difficult to remove from Windows XP Professional. A practical application that I've found is using a GPO to update existing shortcuts. For example, you can add command-line options to existing shortcuts.

• Configuring environment variables.

  You can create GPOs that define system and user environment variables. I've used GPOs to assign environment variables, and then relied on those environment variables in logon and other scripts. This approach makes scripts less sensitive to change.

• Configuring registry settings.

  Instead of creating your own administrative templates for use with Group Policy, PolicyMaker allows you to add, change, or remove any setting in the registry. This is handy when no policy exists for a setting that you want to manage, but you know the location of the setting in the registry.

• Copying and removing files.

  You can create a GPO that copies and removes files on the computer. For example, you can copy network shortcuts to the users' Nethood folders. You can create a GPO that automatically adds certain shortcuts to the SendTo folders.

• Managing files and folders, even attributes.

  You can create GPOs that manage files and folders. For example, you can use a GPO to remove temporary folders. Another example is to create a GPO that changes the attribute of Internet Explorer's Links folder so that it doesn't show up on the Favorites menu. There are many practical applications for managing files and folders through a GPO, and PolicyMaker gives you numerous and flexible options for doing so.

• Configuring Microsoft Office.

  You can almost completely configure Office by using a GPO. PolicyMaker even presents you with dialog boxes similar to those that Office presents, making it easier to configure Office in a GPO.

• Building Outlook user profiles.

  You can use a GPO to create Outlook user profiles. This task has always been a tedious chore, but PolicyMaker makes it simple.

PolicyMaker is easy to install; installation usually takes just a few minutes. And because PolicyMaker fits seamlessly into Group Policy Editor, using PolicyMaker is straightforward for any IT professional with basic knowledge of using Group Policy Editor. The client-side extension supports Windows 2000, Windows XP Professional, and Windows Server 2003, and it supports reporting by using RSoP. ProfileMaker also supports all versions of Office and Outlook.

NOTE

DesktopStandard provides their PolicyMaker Registry Extension free of charge.