Table: Overview of Policy Template

1. Custom Template – AZ.ADM

AZ.ADM is a custom template, which controls policies and corresponding Registry settings to provide some advanced level of control over the computer and user settings. This template was developed and tested on the Windows NT platform. Some of the policies defined by this template may be meaningful for Windows 95 platform as well, but applying this template to control Windows 95 policies requires further testing.

Custom Computer Policies

AutoLogon

Controls Autologon feature on the Windows Nt platform.

Option	Comment
Auto Logon	If unchecked, precludes setting up autologon on the affected computer. If checked, enables autologon, provided that the values are entered for Username, Password and Domain
Username	Username of the account under which computer will autologon.
Password	Password of the specified account
Domain	Domain where the Username resides

Browsing Client

Controls appearance of the affected computer in the domain/workgroup browse list.

Option	Comment
Hide this computer from the Browser	If checked, precludes affected computer from advertising itself to domain/workgroup browser. Generally, this policy is enabled for workstations, which do not expose file or print resources to the network.

Browsing Server

Controls participation of the affected computer in the domain/workgroup browser selection.

Option	Comment
Domain Browser	Controls participation of the affected computer in the domain/workgroup browser selection. If enabled, you must enter the *Browser Status* for this browser
Browser Status	Accepts one of the three choices: *Preferred Browser, Potential Browser, and Not a Browser*.
Preferred Browser	This computer will have an advantage in being selected as domain/workgroup primary or backup browser. Usually this policy is enabled on primary and backup domain controllers.
Potential Browser	This computer may become a primary or backup browser at the request of primary browser, or if primary browser is unavailable. Usually this policy is enabled for member servers.
Not a Browser	This computer under no circumstances may become a domain/workgroup browser and will not participate or initiate browser selection race.

SAP over IPX

Controls whether the Windows NT computer with gateway or client services for NetWare will advertise itself as a server on NetWare network.

Option	Comment
Enable SAP over IPX	If enabled, allows Windows NT computer with gateway or client services for NetWare to advertise itself as a server on NetWare network. Usually enabled only on the Windows NT servers that provide essential services on a NetWare network.

Memory Management

Controls paging of the Windows NT executive.

Controls Windows NT memory/cache management algorithms to optimize computer performance.

Option	Comment
Disable NT Executive paging	If enabled, fixes Windows NT executive in the physical memory. This policy provides performance enhancements on servers that have sufficient RAM installed (generally, 256 KB and more)
Cache Control	When enabled, controls Windows NT memory/cache management algorithms to optimize computer performance. To enable this policy you have to select one of the 4 available memory management algorithms.
Minimize cache memory usage	Favors other memory requirements over the file cache. Reserves certain amount of memory for fast allocation in response to changing conditions.
Maximize cache memory usage	Favors cache over other memory requirements. Generally improves performance of file servers.
Balance cache and WS memory usage	Tries to achieve balance between the file cache and application working set. Generally improves performance on general-purpose servers, that provides file services as well as application services.
Maximize WS memory usage	Favors memory allocation to working set of running applications. Generally improves performance of dedicated application servers, such as Exchange, Notes, or SQL servers.

Custom User/Group Policies

Persistent Drive Mappings

Allows controlling persistent drive mappings independently of logon scripts or user profiles.

Option	Comment
Drive	If enabled, sets persistent drive mapping for corresponding drive letter. To enable this policy *Provider, Network Path, and User Name* fields need to be filled in for each mapping.
Provider	Selects network services provider for this mappings. Accepts one of the 2 predefined values: *Microsoft Windows Network* or *NetWare or Compatible Network*.
Network Path	Provides network path for this mapping in the form *\\\*.
User Name	Specifies user name to be used for mounting this share. Generally used in the form *%USERNAME%* (for NetWare or Compatible Network) or *%USERDOMAIN%\%USERNAME%* (for Microsoft Windows Network).

Comments

Plain text