Determining Desktop Management Strategies

Determining Desktop Management Strategies

By running Windows Vista in a Windows Server 2003 domain, you can specify the level of control exercised over users of these computers. For example, by using Active Directory and Group Policy, you can manage desktops as follows:

  • Prevent users from installing applications that are not required for their jobs.
  • Make new or updated software available to users without visiting their workstations.
  • Customize desktop features or prevent users from making changes to their desktop settings.
  • Refresh policy settings from the server without requiring the user to log off or restart the computer.

Table 1.6 describes how you can use the desktop management features to manage computer and user settings.

Table 1.6 Desktop Management Tasks and Features

Task Feature

Configure registry-based policy settings for computers and users.

Group Policy Administrative Templates

Manage local, domain, and network security.

Security Settings

Manage, install, upgrade, repair, or remove software.

Software Installation and Maintenance

Manage Internet Explorer configuration settings.

Internet Explorer Maintenance, MMC, Group Policy settings

Apply scripts during user logon/logoff and computer startup/shutdown.

Group Policy-based scripts

Manage users' folders and files on the network.

Folder Redirection

Manage user profiles.

Roaming User Profiles

Make shared files and folders available offline.

Offline Files and Folders (in conjunction with Folder Redirection)

If you deploy Windows Vista desktops in a domain that does not include Active Directory, you can still take advantage of some management features. For example, you can manage Windows Vista desktops locally by implementing the following IntelliMirror features:

  • Roaming User Profiles
  • Logon Scripts
  • Folder Redirection
  • Internet Explorer Maintenance
  • Administrative Templates (registry-based policy)