Group Policy Extensions for DesktopsThe most efficient way to enforce desktop endpoint security is through Group Policy. But endpoint security isn’t the only reason to rely on Group Policy. While desktop administrators may be using Microsoft’s native Group Policy for desktop management, it is an incomplete solution often requiring an extension of desktop management capabilities through costly and inefficient log-in scripts or manual processes. Group Policy Extensions for Desktops allows desktop administrators to implement and enforce endpoint security,remotely manage Outlook and user profiles, security group membership, configuration settings, network connections and scheduled tasks. Through Group Policy Extensions, organizations can leverage their investment in Group Policy for endpoint security and administrators can be assured of efficient, ongoing desktop management. 
Endpoint Security Capabilities:Group Policy Extensions for Desktops includes a number of powerful capabilities that allow organizations to fully leverage Group Policy for endpoint security. Application Security ManagerBy modifying an application’s security token on Windows XP- or Windows 2000-based workstations; Application Security Manager enables users without administrative rights to run legacy applications that would otherwise require such permissions. It also has the ability to decrease privileges in the similar fashion. For example, all users can run as local administrators, but when they launch Internet Explorer, it runs with strictly controlled and fine-grained privileges, which is much safer. Security EnforcerSecurity Enforcer prevents the unwanted transfer of data by disabling USB (mp3 players, flash drives, etc.) and all other devices (CD-ROM, DVD burners, etc.) on the network. Local Groups ManagerGroup Policy Extensions improves on built-in Restricted Group Policy to provide better flexibility for local group membership. This delivers the ability to merge group memberships beyond the capability provided by Microsoft’s Restricted Group features. It can also define users and their roles on each computer by dynamically populating local group membership based on a comma-separated (CSV) file. Password ResetPassword Reset provides the ability to make password changes to the local SAM user accounts on desktops and servers in-mass. Connection ManagerThrough Group Policy Extensions’ Connection Manager administrators can centrally disable communication devices such as WI-FI and Bluetooth. Policy EnforcerGroup Policy Extensions for Desktops provides the ability to force Group Policy refresh on network events to instantly reconfigure client computers when they move within the network, or connect to the corporate network via Virtual Private Network (VPN) or dial-up. Group Policy Extensions allows for the ability to force Group Policy Refresh on network events to instantly reconfigure your client computers when they move in your network, or connect to your corporate network via VPN or dial-up. Desktop Management Capabilities:Group Policy Extensions for Desktops also provides a powerful and flexible set of tools to enhance the desktop management capabilities available through Group Policy. Mail Profile ManagerGroup Policy Extensions automatically creates or updates all Outlook profiles eliminating the need to visit each workstation. This benefits you by providing standardized Outlook profiles to your end users. PowerSaverAccording to the Environmental Protection Agency, unmanaged personal computers waste up to $100 per year in unnecessary energy costs. While the industry has provided robust power management capability in hardware devices such as monitors, CPUs, and disk drives, computers provide no way to centrally manage these features. Group Policy Extensions for Desktops provides a flexible and easy way to manage power saving hardware features through Group Policy. Microsoft Office ManagerConfigure all major Microsoft Office applications: Outlook, Word, Excel, and PowerPoint. Unlike standard administrative templates, Group Policy Extensions allows you to configure almost any setting in these applications. In addition to setting all options to the desired values, you can optionally “lock down” the chosen options to prevent user from being able to modify the values set by Group Policy Extensions. Comprehensive FilteringFilters allow administrator to selectively apply the extension policies based on various criteria (hardware, IP subnet, Active Directory, etc). A policy can be filtered by user and computer properties, and you can also create expressions to precisely target the users and computers the policy will be applied to. Get Started
|