User manual LOGMEIN ADMINISTRATIVE TEMPLATE

[. . . ] 7 Example 1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 Example 2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 Example 3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 500 Unicorn Park Drive Woburn, MA 01801 Copyright © 2010 by LogMeIn, Inc. [. . . ] Managing Group Policy ADMX Files Step-by-Step Guide http://technet2. microsoft. com/WindowsVista/en/library/02633470-396c-4e34-971a0c5b090dc4fd1033. mspx?mfr=true See the LogMeIn Central User Guide to learn more about how LogMeIn Central can help you control your LogMeIn implementation See the LogMeIn Pro2 User Guide for complete documentation of the host Please review the LogMeIn Security White Paper to better understand how a remote access solution with a security-centric design increases productivity and minimizes inherent threats ©2003-2010 LogMeIn Inc. All rights reserved www. LogMeIn. com 3 Installing the LogMeIn Administrative Template To implement Group Policy control over LogMeIn, you must download and install the LogMeIn Administrative Template. We are assuming that you are sitting at your Windows Server 2003 domain controller. Note: If you are working at a regular XP workstation, then you should install the Windows Server 2003 Administration Tools Pack. 1 Download the logmein. adm template from the LogMeIn Support Downloads page. Note: For organizations fully migrated to Windows 7, Vista, or Server 2008, you will need to download and install both logmein. admx and logmein. adml. For details see the following Microsoft article: http://technet2. microsoft. com/WindowsVista/en/library/02633470-396c-4e34-971a0c5b090dc4fd1033. mspx?mfr=true 2 3 4 5 6 7 8 9 Open Active Directory Users & Computers. Click Add and browse to the location where you downloaded the logmein. adm file. 10 Save and close all dialog boxes. The LogMeIn Group Policies will now be available for you to configure against the various computers and users in your domain. Note: Please reference the following Microsoft article: configuration of your Active Directory Group Policies http://technet2. microsoft. com/windowsserver/en/library/c367ca76-4976-4b97-84f1cf5f589f30241033. mspx?mfr=true Accessing LogMeIn Group Policy Settings To access LogMeIn Group Policy settings, follow this procedure: 1 2 3 Open Active Directory Users & Computers Right-click the domain or organizational unit and select Properties > Group Policy tab. The Group Policy window is displayed. www. LogMeIn. com 4 ©2003-2010 LogMeIn Inc. All rights reserved 4 5 To access LogMeIn policies that apply to computers, expand Computer Configuration then Administrative Templates. To configure LogMeIn policies that apply to user accounts, expand User Configuration then Administrative Templates. Working with LogMeIn Policies Computer and User policies can be applied to both computers and user accounts Computer Configuration policies can be applied only to computers User Configuration policies can be applied only to user accounts Computer and User Policies Settings that can be applied to computers and users can be found under both Computer Configuration and User Configuration. If a policy is set at both the computer and user level, computer-level settings will take precedence in case of a conflict unless the Computer policy settings override user policy settings policy is set to Disabled. Allow use of LogMeIn File Sharing Allow access to the Detailed Mode (Dashboard) interface Allow remote reboot Specify Remote Control Permissions To prevent the user from sharing files on the host via the File Sharing feature, set this policy to Disabled. To prevent users from accessing the Detailed Mode (Dashboard) interface, set this policy to Disabled. To prevent users from using the remote reboot function in LogMeIn, set this policy to Disabled. Allow Remote Printing: Enable this option to allow clientside users to print host-side documents to a device connected to the client during remote control. Allow Clipboard Transfer: Enable this option to allow the host computer's clipboard contents to be synchronized with the client clipboard. ©2003-2010 LogMeIn Inc. All rights reserved www. LogMeIn. com 5 Specify File Transfer permissions Enable or disable File Transfer specific settings. [. . . ] 1 2 In Computer Configuration under Administrative Templates select LogMeIn Policies and double-click Specify Remote Control permissions. The policy details area will show three checkboxes (Allow Remote Control, Allow remote printing, Allow clipboard transfer). Repeat the above step for Allow access to the Detailed Mode (Dashboard) interface, Allow remote reboot, and Specify File Transfer permissions. 3 4 Every computer in the domain or organizational unit to which you applied this policy will disallow any sort of remote access via LogMeIn except for remote control. Example 2 Allow file transfer for the "Boston Office" organizational unit, but disallow the use of LogMeIn for every other user. 1 You will first need to create a LogMeIn Policy for your root organization, and another one for the "Boston Office" organizational unit. [. . . ]