InfoConnect Desktop Installation and Deployment Guide > Customize InfoConnect > Locking Down Settings > Control Access with Group Policy

Control Access with Group Policy

As an administrator, you can limit users' ability to modify their workspace or session documents by setting permissions from the Microsoft Group Policy Management Console using group policy templates.

InfoConnect installs a set of group policy templates (ADM and ADMX files) to the following directory:

InfoConnect program folder The default on English language systems is C:\Program Files (x86)\Micro Focus\InfoConnect on 64-bit systems and C:\Program Files\Micro Focus\InfoConnect on 32-bit systems. \Configuration\GroupPolicy

ADM files contain the Group Policy definitions and resource strings in the same file. Reflection provides the following ADM Group Policy files.

This file

Controls access to

ACTIONS.adm

Actions

APPLICATION.adm

InfoConnect Workspace

ReflectionWorkspace.adm

Root-level ADMX file

NOTE:This directory also includes the ReflectionPCIDSS.adm file. This file is used to configure information privacy through Group Policy and is not used to control access. If you have installed a Pro product, you will also see files for configuring 3270, 5250, and VT sessions.

ADMX files are divided into language-neutral files (.admx) and language-specific resource files (.adml), available to all Group Policy administrators. These factors allow Group Policy tools to adjust their UI according to the administrator's configured language. (In InfoConnect Desktop, only US English files are included.)

Install and Test Group Policy Settings

Before you deploy group policy definitions, set and test them on a local test machine.

To install ADM files on a local test machine

  1. Copy all .adm files

    From:

    InfoConnect program folder The default on English language systems is C:\Program Files (x86)\Micro Focus\InfoConnect on 64-bit systems and C:\Program Files\Micro Focus\InfoConnect on 32-bit systems. \Configuration\GroupPolicy\ADM\

    To:

    C:\Windows\inf

  2. Open Group Policy Object Editor (gpedit.msc)

  3. Under either User Configuration or Computer Configuration, Right-click on Administrative Templates and select Add/Remove Templates.

  4. Click Add, select the ADM files you need to add, and then click Open.

    The added ADM files are listed in the Add/Remove Templates dialog box, in the Current Policy Templates list. Click Close.

  5. Under either Computer Configuration or User Configuration, browse to Administrative Templates | Classic Administrative Templates (ADM) | Reflection Desktop.

  6. In the Group Policy Management Editor, navigate to the setting or feature you want to configure.

  7. Enable the Group Policy settings to which you want to restrict access.

NOTE:Registry keys are added when policy settings are Enabled. When Not Configured, no key is present. When a setting is Disabled, the key is still present, and it's data is set to 0x00000000. The data is 0x00000004 when enabled.

For more about using ADM files to set group policy, see Add or remove an Administrative Template (.adm file).