Setting Up Peak Performance Group Policies

Transcription

1 Setting Up Peak Performance Group Policies It is possible and recommended to create Group Policies for Peak Performance in order to control configuration related to Peak Performance users and computers. A Peak Performance Administrative Template is included with deployment that defines policies for the various Peak Performance products. You import the Administrative Template into the Group Policy Management Console or into your Group Policy editor, and then edit the policy settings. Once you have configured the Peak Performance Group Policy, you need to push it to users. To do so, you create an Active Directory Group Policy Object (GPO), edit it from the Active Directory Management Console or the Group Policy Management Console, and apply the GPO to the whole domain, or to an Organizational Unit (OU) of that domain. This action creates and sets the value of the Peak Performance Software keys in each targeted machine's registry. See Appendix 1 for a table of available policies that you can control. Example 1 The following example provides you with step by step instructions necessary to show an icon for the Peak Performance Agent in the user s system tray, enabling them to close the Agent should they wish to. (Note that rarely would you want the user to disable the Peak Performance Agent.) NOTE: The Group Policy Editor is a very powerful tool. Improper use may turn your computer into a small boat anchor. To start the Group Policy Editor (GPE), click the Windows Start button, click Run and type gpedit.msc in the data input line. The GPE will appear:

2 Right click Administrative Templates under User Configuration and select Add/Remove Templates: Right click Administrative Templates under User Configuration and select Add/Remove Templates. The following window opens: Click the Add button:

3 Navigate to the Server\Policy folder, select SPSI.adm and click Open. Ensure the SPSI template is listed and click Close. Click User Configuration then Administrative Templates then South Pacific Software then Agent. In the right hand pane, double click Show Tray Icon :

4 Click and click OK. The policy has been set. The next time the user logs on and the Peak Performance Agent starts, the icon will appear in the Task Tray. Example 2 The following example provides you with an overview of how you would configure Peak Performance Manager for a user that you wanted to give limited access to. This user might be a Health and Safety Manager, that needs to be able to create user groups with various break reminder settings and view reports related to ignored breaks. However, you do not want this user accessing other parts of the product. Open the Group Policy editor. Click User Configuration then Administrative Templates then South Pacific Software then Manager and then Preferences. In the right hand pane, modify the following policies (refer to example 1 if you are unsure of the process): Option Setting

5 Active Directory Import Add-In Settings Administration Agent Deployment Can Not Move Device Between Groups Computer Properties Computer Properties Read Only Device Group Properties Group Properties Group Properties Read Only Hide Report Folders IP Controls Software Maintenance System Controls Tasks User Properties User Properties Read Only

6 Appendix 1 Category Option Description User Properties Prevent the user access to user properties User Properties Read Only Allow read only access to the user properties Group Properties Prevent the user access to group properties Group Properties Read Only Allow read only access to the group properties Administration Prevent access to the complete Admin section System Controls Prevent access to all system controls IP Controls Prevent access to all IP controls Tasks the tasks panel Manager\Preferences Remove the right click menu Device Group Properties that allows you to add/remove/view device groups Can Not Move Device Between Groups Stop users dragging and dropping computers into groups Computer Properties Prevent access to the computer properties Computer Properties Read Only Allow read only access to computer properties Hide Report Folders Allows you to hide any report folder you specify Active Directory Import Disable the Active Directory Import Software Maintenance Software Maintenance Agent Deployment Prevent agents being deployed Add-In Settings Prevent access to add-ins Allows you to setup the connection to the manager Enforce Server Settings server and prevents the user Manager\Login from changing it Prevent Saving Password Stops the user being able to save their password Agent\CheckPointSeconds Number of seconds before backing up to the server Can be between 60 and 9999 Agent\ CheckPointTimeOn the above setting 1 is on and 0 is off Agent\ StressURL URL to stress councilor URL to stress councilor used by the Stress Assessor Agent\HasStressAssessor the above setting 1 is on and 0 is off Agent\ShowTrayIcon Show a tray icon for Kagent Allows users to close the agent.