6.8.1 Administrative Templates
Windows Server 2003 has Administrative Template settings, which uses the .adm file extension, for both
computers and user accounts. You can use Administrative Templates to control the userís environment by
restricting access to user desktops, network resources, and administrative tools and applications while the
Administrative Template settings that you can apply to computers allows you to manage Windows. There
are seven types of Administrative Template settings. Table 6.8 lists the types of settings in the
Administrative Templates extension.
TABLE 6.8: The Administrative Templates
Type of Setting
Windows Components Control the Windows components that a user can gain access.
This includes access to Microsoft Management Console (MMC).
Available and can be applied to both computers and users.
Controls logon and logoff procedures and can be applied to both
computers and users.
Controls the properties of network connections and dial-in
connections, which include shared network access. This can be
applied to both computers and users.
Controls printer settings that can force printers to be
automatically published in Active Directory and can disable
Web-based printing. This can only be applied to computers.
Start Menu and Taskbar Controls which features that users can access from the Start
menu. It also allows you to make the Start menu read-only and
disable usersí ability to make changes. This can only be applied
Controls the Active Desktop and allows you to control a userís
ability to gain access to the network and the Internet by hiding
the appropriate desktop icons and controlling what users can do
with their My Documents folder. This can only be applied to
Allows you to restrict a userís access to several applications in
Control Panel. This includes restricting the use of Add/Remove
Programs, Display, and Printers. This can only be applied to