Restrict using pendrive and other storage devices using Group policy

Disable Removable Storage Using GPO

Windows Server 2008 introduces a Group Policy setting that can prohibit the read or write activities of floppy, CD and DVD drives, tape, and devices such as mobile phones, music players, and cameras

Within the Group Policy Editor, navigate to \Computer Configuration\Policies\Administrative Templates\System\Removable Storage Access.

 All Removable Storage Classes: Deny All Access. If we enable this policy , then we prevent  users from mounting ANY class of removable media.

Turn OFF windows update using Group policy

TurnOFF windows Update Using GPO

Go to your Group Policy management console and navigate to Administrative Templates | System | Internet Communication Management | Internet Communication Settings

Set the “Turn off access to all Windows Update features” to Enabled.

If this policy setting is enabled, all Windows Update features are removed. It does not allow the client pc to access  the Microsoft Update and Windows Update Web sites. The client pc will not get automatic updates directly from Windows Update , but it can still get updates from a WSUS server in the network

Enable Custom screensaver via group policy

Screensaver Enable

Setting a default screen saver with settings that will be compatible with changes in Windows 7 and with your existing Windows XP and Vista clients.  Start with a Group Policy Object (GPO) that is linked to the OU where your user accounts are located in Active Directory. This can be either a new GPO or an existing GPO that may already have other settings you want applied to all of your users.

Go to Policy > User Configuration > Administrative Templates > Control Panel > Personalization. Here are the policies you’re looking for:

Policy Setting Option Enable Screen Saver Enabled Force Specific Screen Saver Enabled scrnsave.scr Password Protect Screen Saver Enabled Screen Saver timeout Enabled Time set in seconds (900 in the example)

Enable Remote Desktop using Group Policy

Enable or Disable Remote dektop for users

·    Click Start – All programs – Administrative Tools – Group Policy Management.

·    Create or Edit Group Policy Objects.

·    Expand Computer Configuration – Administrative Templates – Windows Components – Remote Desktop Services – Remote Desktop Session Host – Connections.

·    Allow users to connect remotely using Remote Desktop Services (enable or disable)

Prevent changing desktop background using group policy

Prohibit users from  changing the background

1.Under User Configuation -> Policies -> Administative Templates -> Control Panel -> Personalization -> Prevent changing desktop background  Enable - enable this radio button

( To prohibit users from  changing the background )

2. Close Group Policy Management Editor Window

3. Run " gpupdate /force " in DC.

4. In clients i also run the command " gpupdate /force ". Then restart or Log off. 

Group Policy to configure Desktop Wallpaper

Administrative Template “Desktop Wallpaper” Setting

This setting can be found under User Configuration > Administrative Templates > Desktop > Desktop and is straight forward to configure as all you have to do is specify the explicit local path or a UNC to the image you want displayed as the desktop wallpaper

TROUBLESHOOTING

1. Run RSOP.MSC on client, make sure the wallpaper policy was applied.
2. If the policy was applied, check the permission of the wallpaper folder. Make sure Authenticated User has Read Permission.
3. Could you manually set the wallpaper?
4. Run "gpresult /v >>c:\gp.txt"