Control Access to Settings and Controls with Microsoft Group Policy
As an administrator, you can limit users' ability to modify their Reflection X settings by setting permissions with the Microsoft Group Policy Management Console, using group policy templates.
notes
-
You can restrict access to Reflection X controls only on systems on which the Windows User Access Control (UAC) is enabled. If the UAC is disabled, the configuration settings that restrict access do not apply.
-
To use this feature, you must be running Windows on an administrative machine.
ADMX files
ADMX files are divided into language-neutral files (.admx) and language-specific resource files (.adml), available to all Group Policy administrators. These files allow Group Policy tools to adjust their UI according to the administrator's configured language.
The Setup program installs ADMX files to:
C:\Program Files (x86)\Micro Focus\Reflection\Configuration\GroupPolicy\ADMX
It installs ADML files to the following directory:
C:\Program Files (x86)\Micro Focus\Reflection\Configuration\GroupPolicy\ADMX\en-us
You can use Group Policy to control access to the following settings:
- Disable Import Dialog On First Run
- Disallow Remote IP Connections
- Exit program on last client
- Force use of FIPS approved Cryptographic Module
Set Access with Group Policy
Before you deploy group policy definitions, set and test them on a local test machine.
To set access with the Group Policy Object Editor
-
Copy the
ReflectionX.admx
file fromC:\Program Files (x86)\Micro Focus\Reflection\Configuration\GroupPolicy\ADMX
to the central store (%systemroot%\PolicyDefinitions
). -
Copy the
ReflectionX.adml
file to%systemroot%\PolicyDefinitions\<locale>
. -
Open the Group Policy Object Editor (
gpedit.msc
). -
Under either Computer Configuration or User Configuration, open Administrative Templates and then open Reflection X.
Group Policies can be set at the machine (Computer Configuration) or user (User Configuration) levels.
-
Select User Settings to display the list of settings you can configure.
-
Double-click on the Group Policy setting you want to restrict access to and then select Enabled.
Note
When a policy for a setting is Enabled, that setting is restricted.
Registry keys are added when policy settings are Enabled. These keys remain in the registry when policy settings are Disabled. No key is present when policy settings are Not Configured.