Samba 3 and Windows Vista Clients
- Overview of Windows Vista's Changes
- Working with User Profiles & Folder Redirection
- Working Around the Lack of System Policies
- Making Vista not Suck (as a Workstation)
- Windows Vista's Annoyances
- Improving Vista's Performance
- Dealing with Windows Vista Components
- Windows Vista as a (somewhat) Decent Workstation
- Various Windows Vista User Restrictions
- An Example Samba-Vista Deployment
Dealing with Windows Vista Components
The following sections will show you how you can bypass or change various features within Windows Vista by applying policies or writing certain registry keys. These settings are listed as:
Group Policy - Location within the Local Group Policy Editor where you will find the appropriate Setting. I include both the User and Computer Policies when available.
Computer Registry Key - This is the HKLM registry value that will set the specified policy/preference. This will apply the policy/preference to all the Users logging into the workstation.
User Registry Key - This is the HKCU registry value that will set the specified Policy/Preference. This will only be set for the current User, making this key pretty much worthless. These are only listed if I could not find an appropriate HKLM key.
Non-Admin User Editable Registry Key - This registry key can be written by any user regardless if they are an Administrator or not. These preferences are best used within a Logon Script of some kind.
Internet Explorer Adjustments & Policies
Always Show Menubar
Local Group Policy User and CPU - Windows Components - Internet Explorer - Turn on Menu Bar by Default Local Machine RegKey HKLM\Software\Policies\Microsoft\Internet Explorer\Main - AlwaysShowMenus - 1 (DWORD)
Set the Menubar to the Top Position
Local Group Policy User - Windows Components - Internet Explorer - Move the Menu Bar above the Nav Bar Local Machine RegKey HKLM\Software\Policies\Microsoft\Internet Explorer\Toolbar\WebBrowser - ITBar7Position - 1 (DWORD)
Remove the Command Bar
Local Machine RegKey HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions - NoCommandBar - 1 Non-Admin User Editable Key Software\Microsoft\Internet Explorer\CommandBar - Enabled - 0 (DWORD)
Remove the Search Box
Local Group Policy User and CPU - Windows Components - Internet Explorer - Prevent the Search Box from Displaying Local Machine RegKey HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions - NoSearchBox - 1 (DWORD)
Set Google as the Default Search Box
Non-Admin User Editable Key
Software\Microsoft\Internet Explorer\SearchScopes - DefaultScope - {2D16E5B6-2F07-4341-934E-118468986E78}
Also Create the Key:
Software\Microsoft\Internet Explorer\SearchScopes\{2D16E5B6-2F07-4341-934E-118468986E78}
And Add these Values:
DisplayName - Google
URL - http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
Disable the Phishing Filter
Local Group Policy User and CPU - Windows Components - Internet Explorer - Turn off Managing Phishing Filter Local Machine RegKey HKLM\Software\Policies\Microsoft\Internet Explorer\PhishingFilter - Enabled - 0 (DWORD)
Make Internet Explorer flush the Cache on Exit
Non-Admin User Editable Key Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache - Persistent - 0 (REG_SZ)
Disable Personalized Favorite Menu
Non-Admin User Editable Key Software\Microsoft\Internet Explorer\Main - FavIntelliMenus - No (REG_SZ)
Always Prompt User When Downloading Files
Local Computer RegKey HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions - AlwaysPromptWhenDownload - 1 (REG_SZ)
Windows Media Player Settings & Policies
Media Player - Set and Lock Skin - Policy not available to set using Local Computer Registry
Local Group Policy User - Windows Components - Media Player - User Interface - Set and Lock Skin User Registry Key HKCU\Software\Policies\Microsoft\WindowsMediaPlayer - SetAndLockSkin - 1 (DWORD) Also Set HKCU\Software\Policies\Microsoft\WindowsMediaPlayer - DefaultSkin - (Leave Blank for Corporate Skin)
Do Not Show First Use Dialog Boxes
Local Group Policy CPU - Windows Components - Windows Media Player - Do Not Show First Use Dialog Boxes Local Machine RegKey HKLM\Software\Policies\Microsoft\WindowsMediaPlayer - GroupPrivacyAcceptance - 1 (DWORD)
Disable Windows Media Player first run wizard
Computer Registry Key HKLM\SOFTWARE\Policies\Microsoft\WindowsMediaPlayer - GroupPrivacyAcceptance - 1 (DWORD)
Disable Windows Media Player Automatic Updates
Computer Registry Key HKLM\SOFTWARE\Policies\Microsoft\WindowsMediaPlayer - DisableAutoUpdate - 1 (DWORD)
Prevent Windows Media DRM Internet Access
Computer Registry Key HKLM\SOFTWARE\Policies\Microsoft\WMDRM - DisableOnline - 1 (DWORD)
Prevent Windows Media Player Media Sharing
Computer Registry Key HKLM\SOFTWARE\Policies\Microsoft\WindowsMediaPlayer - PreventLibrarySharing - 1 (DWORD)
