Choosing Desktop Computer Configurations

Choosing Desktop Computer Configurations

For desktop computers that are used for specific functions, such as running certain line-of-business applications, you can use a management structure that prevents users from installing any application or device or from modifying the desktop or changing settings. To improve security and manage data storage, you can use Folder Redirection to save all data to a server location instead of on the local computer.

You can also use Group Policy settings to manage configurations, restrict user access to certain features, and limit the customizations users can make to their computer environment. To configure a computer for a single application and no other tasks, you can remove desktop features such as the Start menu and set that application to start when the user logs on.

If users need to exercise a great deal of control over their desktops, and tightly managing them is not acceptable, you can use desktop management strategies to reduce support costs and user downtime. You can allow users to install approved applications and to change many settings that affect them while preventing them from making harmful system changes. For example, you might allow users to install or update printer drivers, but not to install unapproved hardware devices. To ensure that the user’s profile and data are saved to a secure location where it can be backed up regularly and restored in the event of a computer failure, use Roaming User Profiles and Folder Redirection.