Restricting Wallpaper using Group Policies and ZENworks
Novell Cool Solutions: Feature
By Noah Broadwater
Digg This -
Posted: 12 Nov 2002
Version: ZENworks for Desktops 3 or higher
Prerequisites: Windows 2000 or XP, ZENworks for Desktops 3 or higher
SETTING THE WALLPAPER
1. Before creating a Group Policy to manage the desktop wallpaper, you must create a wallpaper file you want to use and place it in a standard location. For this example, I have created a folder in the root of C:\ called Wallpaper. In that folder I have placed the standard wallpaper file that I want on all my machines. I recommend putting the folder for this in a place where all users and profiles will have access to it. If you want customized wallpaper for different standard profile groups as created by a DLU, you can set the wallpaper in the profile directories. If you have a location on the network that all users have read and filescan access to (i.e. Sys\Public), you can put the wallpaper file in that location to ensure that nobody can find any way to modify the file.
2. After putting this file in the folder, I set the folder properties to read-only and hidden. Right click on the Wallpaper folder and change the ?view? settings in ?Folder Options? under ?Tools? to ?Do not show hidden files or folders.?
3. On the desktop, right click and go to the display properties. Browse to find the file you created in the Wallpaper folder and set it as the desktop.
SECURING THE DESKTOP WALLPAPER
1. Open ConsoleOne and either create a new Group Policy or modify an existing Group Policy you want to use. In this case, I created a new workstation policy in one of the lab containers and set up Group Policies for Windows 2000 (you can also do this using a User Policy Package).
2. Open the Group Policy Properties and make sure you have a location to store them on the network where your users will have access.
3. Edit the Policies. This will bring up the Group Policies window on the machine you are working on (You must perform this on a machine with the OS that you will be modifying -- Windows 2000 or XP).
4. Under the Local Computer Policy, expand Administrative Templates under User Configuration. Select Desktop.
5. In the Desktop folder, make sure ?Don't save settings at exit? is set to enabled.
6. Expand the Desktop folder and Select Active Desktop.
7. In Active Desktop, change Enable Active Desktop, Prohibit Changes, and Prohibit Editing items to Enabled.
8. Open Active Desktop Wallpaper by double clicking on it.
9. Set the properties to Enabled.
10. In the Wallpaper Name field, enter the location and filename you created earlier. In this case it is C:\wallpaper\wallpaper.jpg.
11. For the Wallpaper Style, select either Center or Stretch based on your preferences.
12. Select Apply and OK.
13. Close the Group Policy window.
14. In the User or Workstation Package Group Policy window, select the tab for Policy Schedule and adjust the event for when you wan the policies to be set on the machine. We set this for User Login so it is refreshed upon every login.
15. Click OK to accept the changes.
16. In the Policy Package window, select the Associations tab to associate this policy to the users or workstations you want to get this policy.
17. Select OK to accept the changes to the Policy Package.
18. Now whenever a User or Workstation associated to that package logs in, their desktop wallpaper will be locked down.
Novell Cool Solutions (corporate web communities) are produced by WebWise Solutions. www.webwiseone.com