Determining Desktop Management Strategies
Determining Desktop Management Strategies
By running Windows Vista in a Windows Server 2003 domain, you can specify the level of control exercised over users of these computers. For example, by using Active Directory and Group Policy, you can manage desktops as follows:
- Prevent users from installing applications that are not required for their jobs.
- Make new or updated software available to users without visiting their workstations.
- Customize desktop features or prevent users from making changes to their desktop settings.
- Refresh policy settings from the server without requiring the user to log off or restart the computer.
Table 1.6 describes how you can use the desktop management features to manage computer and user settings.
Table 1.6 Desktop Management Tasks and Features
| Task | Feature |
|---|---|
Configure registry-based policy settings for computers and users. |
Group Policy Administrative Templates |
Manage local, domain, and network security. |
Security Settings |
Manage, install, upgrade, repair, or remove software. |
Software Installation and Maintenance |
Manage Internet Explorer configuration settings. |
Internet Explorer Maintenance, MMC, Group Policy settings |
Apply scripts during user logon/logoff and computer startup/shutdown. |
Group Policy-based scripts |
Manage users' folders and files on the network. |
Folder Redirection |
Manage user profiles. |
Roaming User Profiles |
Make shared files and folders available offline. |
Offline Files and Folders (in conjunction with Folder Redirection) |
If you deploy Windows Vista desktops in a domain that does not include Active Directory, you can still take advantage of some management features. For example, you can manage Windows Vista desktops locally by implementing the following IntelliMirror features:
- Roaming User Profiles
- Logon Scripts
- Folder Redirection
- Internet Explorer Maintenance
- Administrative Templates (registry-based policy)