Using Administrative Templates

Administrative templates are installed by default in Group Policy. They are changes to the Registry of Windows 2000 and XP machines. In the Registry, the changes are stored in the \HKEY_LOCAL_MACHINE (HKLM) hive for computer policies and HKEY_CURRENT_USER (HKCU) hive for user policies and then in the following hives under HKLM or HKCU:

\SOFTWARE\POLICIES \SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES

By default, standard users do not have the right to change Registry entries in these keys and change the Group Policy behavior because the keys are protected by ACLs.

You don't have to be limited by the default installed Administrative Templates. Microsoft provides additional templates to enhance the choices available for use with Group Policy, and custom Administration Templates can be written and imported to add custom keys and Group Policy options.

Policies Versus Preference

Both preferences and policies are controlled through the Registry. Preferences are changes to the Registry that the user has control over and are not found in the Registry keys listed previously. These are options, such as wallpaper or screensavers. Policies are changes to the Registry in the keys listed previously, which are protected by ACLs. Although Group Policy can overrule preferences, the basic user would normally have access to change the Registry settings through the operating system or an application. The policy does not overwrite the preference keys, and if the policy is removed, the preferences will return. The preference settings remain in effect until they are removed or changed via the Registry.

It is a good idea to use policies rather than preferences when you want to control a certain aspect of an application or want something the user accesses to remain static. You can disable users from being able to change the appearance, configuration, or functionality of the item. For those items, using administrative templates is your best answer.

Using Microsoft Add-on GP Templates

Microsoft provides additional administrative templates for use with Microsoft Officeusually as part of the Office Resource Kits. Installing these administrative templates provides you with many more Group Policy options for each Microsoft Office product.