Show Contents / Index / Search

Restrict Access with Group Policy

As an administrator, you may want to reduce complexity by limiting users' ability to modify their workspace or session documents. Reflection installs a set of .ADM and .ADMX files to the Reflection installation folder, in the following directory:

Configuration\GroupPolicy

You can use Microsoft Group Policy to manage permissions. Reflection 2011 supports both ADM and ADMX formats.

For an overview on using ADMX files, reference: Managing Group Policy ADMX Files Step-by-Step Guide (http://technet2.microsoft.com/WindowsVista/en/library/02633470-396c-4e34-971a-0c5b090dc4fd1033.mspx?mfr=true).

Note: ADMX policy files can be managed only from Windows 7 (or Vista)–based or Windows Server–based administrative machines running Group Policy Object Editor or Group Policy Management Console.

ADMX files

ADMX files are divided into language-neutral files (.admx) and language-specific resource files (.adml), available to all Group Policy administrators. These factors allow Group Policy tools to adjust their UI according to the administrator's configured language. (In Reflection 2011 R2 or greater, only US English files are included.)

The Reflection 2011 Setup tool installs ADMX files to:

...\install_dir\Configuration\GroupPolicy\ADMX

It installs ADML files to the following directory:

...\install_dir\Configuration\GroupPolicy\ADMX\en-us

Reflection provides the following ADMX Group Policy files. Each of these files has a corresponding ADML language file.

This file

Controls access to

ACTIONS.admx

Actions

APPLICATION.admx

Workspace

RD3X.admx

Mainframe terminal

RD5X.admx

AS/400 terminal

RDOX.admx

UNIX/OpenVMS terminal

ReflectionWorkspace.admx

Root-level ADMX file

Note: This directory also includes the ReflectionPCIDSS.admx file. This file is used to configure information privacy through Group Policy and is not used to control access.

ADM files

ADM files contain the Group Policy definitions and resource strings in the same file.

Reflection Setup installs ADM files to:

...\install_dir\Configuration\GroupPolicy\ADM\

ADM Group Policy files:

This file

Controls access to

ACTIONS.adm

Actions

APPLICATION.adm

Workspace

RD3X.adm

Mainframe terminal

RD5X.adm

AS/400 terminal

RDOX.adm

UNIX/OpenVMS terminal

Before you deploy group policy definitions, set and test them on a local test machine.

To deploy ADMX & ADML files on a local test machine

  1. Copy the .admx files from …\install_dir\Configuration\GroupPolicy\ADMX to the central store (%systemroot%\PolicyDefinitions)
  2. Copy all required locale .adml files to: %systemroot%\PolicyDefinitions\<locale>
  3. Open the Group Policy Object Editor (gpedit.msc)
  4. Under either Computer Configuration or User Configuration, browse to Administrative Templates | Reflection Workspace.
  5. In the Group Policy Management Editor, navigate to the setting or feature you want to configure.
  6. Enable the Group Policy settings you want to restrict access to.

    Note: For more about using ADMX files to set group policy, see Managing Group Policy ADMX Files Step-by-Step Guide (http://technet2.microsoft.com/WindowsVista/en/library/02633470-396c-4e34-971a-0c5b090dc4fd1033.mspx?mfr=true).

To install ADM files on a local test machine

  1. Copy all .adm files

    From:

    ...\install_dir\Configuration\GroupPolicy\ADM\

    to:

    C:\Windows\inf

  2. Open Group Policy Object Editor (gpedit.msc)
  3. Under either User Configuration or Computer Configuration, Right-click on Administrative Templates and select Add/Remove Templates.
  4. Click Add, select the Reflection ADM files you need to add, and then click Open.

    The Reflection ADM files are listed in the Add/Remove Templates dialog box, in the Current Policy Templates list.

  5. Under either Computer Configuration or User Configuration, browse to Administrative Templates | Classic Administrative Templates (ADM) | Reflection Workspace.
  6. In the Group Policy Management Editor, navigate to the setting or feature you want to configure.
  7. Enable the Group Policy settings you want to restrict access to.

    Notes:
    Registry keys are added when policy settings are Enabled. When Not Configured or Disabled, no key is present.

    For more about using ADM files to set group policy, see Add or remove an Administrative Template (.adm file) (http://technet.microsoft.com/en-us/library/cc739134.aspx).