1
00:00:03,080 --> 00:00:05,750
So now let's talk about admin templates.

2
00:00:06,620 --> 00:00:11,670
So admin templates, as I showed in a previous demo, is both per computer and per user.

3
00:00:11,720 --> 00:00:18,590
So you can find those settings under computer configuration or user configuration policies, administrative

4
00:00:18,590 --> 00:00:22,330
templates, backslash, Windows Components, backslash, Internet Explorer.

5
00:00:22,340 --> 00:00:24,440
And there's a lot of options within those.

6
00:00:25,340 --> 00:00:31,280
There's some subfolders under there for all the various pieces of functionality like privacy, security,

7
00:00:31,280 --> 00:00:33,410
Internet control panel, etc..

8
00:00:34,300 --> 00:00:38,000
Lots of detail in the admin template settings for Internet Explorer.

9
00:00:38,020 --> 00:00:43,180
And if you're wondering where these options come from and how they get updated, the admin template

10
00:00:43,180 --> 00:00:48,610
file that underlies the Internet Explorer options is called Anita's dot admixture, and it's got an

11
00:00:48,610 --> 00:00:50,710
associated dot adma file.

12
00:00:51,550 --> 00:00:55,840
And this is the file that stores all of the settings that you see in admin templates.

13
00:00:56,740 --> 00:01:02,740
This file actually gets updated if you update your browser from let's say I tend to ie11.

14
00:01:03,610 --> 00:01:07,540
This file automatically gets updated in your local admet store.

15
00:01:07,630 --> 00:01:12,910
So under see colon backslash windows backslash policy definitions.

16
00:01:12,910 --> 00:01:17,950
You'll notice after you install Ie11 that you've got a new version of this file that contains all the

17
00:01:17,950 --> 00:01:22,540
additional options that you can configure using administrative templates in ie11.

18
00:01:23,440 --> 00:01:29,350
So lots of good functionality in that ADMA file lets you lock down and enforce the browser configuration

19
00:01:29,350 --> 00:01:30,220
for your users.

20
00:01:31,090 --> 00:01:36,760
And again, remember that the distinguishing feature here of IP is that it enforces I'm sorry of admin

21
00:01:36,760 --> 00:01:39,430
templates is that it enforces the settings on the user.

22
00:01:39,490 --> 00:01:45,850
The user cannot undo those settings, so it makes it very, very locked down in terms of what the user

23
00:01:45,850 --> 00:01:47,020
gets within IEEE.

24
00:01:47,830 --> 00:01:53,500
And this is good for kiosk type of configurations or public workstations where multiple users might

25
00:01:53,500 --> 00:01:57,280
be coming and using IEEE, and you don't want them fiddling with those settings.

26
00:01:58,180 --> 00:02:02,410
So typically admin templates is a good place to do that locked down.

27
00:02:03,250 --> 00:02:08,440
Now some of the other things you can do with IEEE Admin templates, you can set the home page just as

28
00:02:08,440 --> 00:02:10,150
you could with preferences.

29
00:02:10,150 --> 00:02:15,100
And again, you're setting it and locking it so the user can change it versus in preferences.

30
00:02:15,100 --> 00:02:19,660
The user will get that new home page, but they can go in and change it as they see fit.

31
00:02:20,560 --> 00:02:22,120
Site to zone assignments.

32
00:02:22,120 --> 00:02:24,340
I alluded to these a little bit earlier.

33
00:02:25,260 --> 00:02:29,760
This is where you can define which sites belong to which zones from a security perspective.

34
00:02:29,880 --> 00:02:34,890
So you might have some corporate intranet sites that you always want to be trusted with lower security.

35
00:02:35,790 --> 00:02:40,200
You might even have some Internet sites that you do business with on a regular basis.

36
00:02:41,130 --> 00:02:44,370
You want those to be trusted because you know they're good sites.

37
00:02:45,300 --> 00:02:52,110
You can stick those into specific zones using the site to zone assignment lists, zone security, just

38
00:02:52,110 --> 00:02:53,920
as you could with preferences.

39
00:02:53,940 --> 00:02:59,580
You can set each of the different zones to, you know, low, medium, high, medium, low, etc..

40
00:03:00,450 --> 00:03:04,110
So that capability is also available and admin templates.

41
00:03:04,990 --> 00:03:08,530
And again, it locks the option so the user can't change it.

42
00:03:09,450 --> 00:03:15,990
Pop up blocker and pop up blocker exceptions can be set through admin templates and then you can use

43
00:03:15,990 --> 00:03:21,330
it in conjunction with GP preferences to lock down areas that have been set by those preference settings.

44
00:03:22,240 --> 00:03:27,430
And what I'm going to do in my next demo is show you an example of using both admin templates and GP

45
00:03:27,460 --> 00:03:30,880
preferences in conjunction to sort of get the best of both worlds.

46
00:03:31,810 --> 00:03:37,540
So you get the capabilities to lock down the proxy that are included in GP preferences and not in admin

47
00:03:37,540 --> 00:03:38,110
templates.

48
00:03:38,980 --> 00:03:43,540
And if you don't want the user to change that, we're going to show you how you can use admin templates

49
00:03:43,540 --> 00:03:47,050
to essentially lock out the options so the user can't mess with it.