WINDOWS 7 GROUP POLICY – GPEDIT.MSC

Microsoft introduced the idea of group policies way back in the NT 4.0, moreover each successive generation has added more settings so that in Windows 7 we have over 2,500 policies. As with previous operating systems you can inspect and control the settings with a snap-in called gpedit.msc.

WINDOWS 7 GROUP POLICY STRATEGY

If you have Active Directory then you will control group policy strategy with GPMC on the domain controller. However, if you are responsible for Windows 7 in workgroup or HomeGroup configuration then you will choose the local group policy editor – gpedit.msc.

Types of Group Policy Settings

There are broadly three reasons for changing group policy settings, firstly, adding features present in Vista and XP, but absent in Window 7. Secondly, using group policy to remove stuff that is inappropriate for that machine, for example ‘Remove volume control icon’ if you have no speakers. Thirdly, employing the traditional group policy role of restricting users, for example, ‘Prevent users from changing the taskbar’.

SAMPLE GROUP POLICY SETTINGS

Here are ideas for changes that you could make to the Windows 7 desktop, as usual, some add features, while others restrict the user’s actions.

Start Menu and Taskbar

Add Logoff to the Start Menu
Add the Run command to the Start Menu
Do not display any custom toolbars in the taskbar
Force classic Start Menu
Hide the notification area
Lock the Taskbar
Prevent users from adding or removing toolbars
Prevent users from rearranging toolbars
Prevent users from resizing the taskbar
Remove the battery meter
Remove the networking icon
Remove the volume control icon
Remove Search link from Start Menu
Remove the "Undock PC" button from the Start Menu
Remove user name from Start Menu
Remove user’s folders from the Start Menu
Remove Games link from Start Menu
Remove Help menu from Start Menu
Remove links and access to Windows Update
Remove Logoff on the Start Menu
Remove Music icon from Start Menu
Remove Network Connections from Start Menu
Remove Network icon from Start Menu
Show QuickLaunch on Taskbar
Turn off all balloon notifications
Turn off taskbar thumbnails
Turn off notification area cleanup

SECPOL – SECURITY POLICY EDITOR

Secpol is a subset of Gpedit, a little sister if prefer. This snap-in enables you to focus on just the security settings.

SUMMARY OF WINDOWS 7 GPEDIT.MSC – LOCAL GROUP POLICY EDITOR

Microsoft has continued the good work of creating a Local Group Policy Editor so that you can change settings without using regedit. As with previous operating systems you can inspect and control the settings with a snap-in called gpedit.msc, and see that in Windows 7 we have over 2,500 policies.

If you are troubleshooting gpedit.msc in Windows 7 Home Premium, it does not exist; you need to upgrade to the Ultimate edition.