So now let's talk about admin templates.
So admin templates, as I showed in a previous demo, is both per computer and per user.
So you can find those settings under computer configuration or user configuration policies, administrative
templates, backslash, Windows Components, backslash, Internet Explorer.
And there's a lot of options within those.
There's some subfolders under there for all the various pieces of functionality like privacy, security,
Internet control panel, etc..
Lots of detail in the admin template settings for Internet Explorer.
And if you're wondering where these options come from and how they get updated, the admin template
file that underlies the Internet Explorer options is called Anita's dot admixture, and it's got an
associated dot adma file.
And this is the file that stores all of the settings that you see in admin templates.
This file actually gets updated if you update your browser from let's say I tend to ie11.
This file automatically gets updated in your local admet store.
So under see colon backslash windows backslash policy definitions.
You'll notice after you install Ie11 that you've got a new version of this file that contains all the
additional options that you can configure using administrative templates in ie11.
So lots of good functionality in that ADMA file lets you lock down and enforce the browser configuration
for your users.
And again, remember that the distinguishing feature here of IP is that it enforces I'm sorry of admin
templates is that it enforces the settings on the user.
The user cannot undo those settings, so it makes it very, very locked down in terms of what the user
gets within IEEE.
And this is good for kiosk type of configurations or public workstations where multiple users might
be coming and using IEEE, and you don't want them fiddling with those settings.
So typically admin templates is a good place to do that locked down.
Now some of the other things you can do with IEEE Admin templates, you can set the home page just as
you could with preferences.
And again, you're setting it and locking it so the user can change it versus in preferences.
The user will get that new home page, but they can go in and change it as they see fit.
Site to zone assignments.
I alluded to these a little bit earlier.
This is where you can define which sites belong to which zones from a security perspective.
So you might have some corporate intranet sites that you always want to be trusted with lower security.
You might even have some Internet sites that you do business with on a regular basis.
You want those to be trusted because you know they're good sites.
You can stick those into specific zones using the site to zone assignment lists, zone security, just
as you could with preferences.
You can set each of the different zones to, you know, low, medium, high, medium, low, etc..
So that capability is also available and admin templates.
And again, it locks the option so the user can't change it.
Pop up blocker and pop up blocker exceptions can be set through admin templates and then you can use
it in conjunction with GP preferences to lock down areas that have been set by those preference settings.
And what I'm going to do in my next demo is show you an example of using both admin templates and GP
preferences in conjunction to sort of get the best of both worlds.
So you get the capabilities to lock down the proxy that are included in GP preferences and not in admin
templates.
And if you don't want the user to change that, we're going to show you how you can use admin templates
to essentially lock out the options so the user can't mess with it.