Skip to content

Archive

Category: Group Policy

Applies To: Windows Server 2008 / 2008 R2

You can use this procedure to deploy a certificate to multiple computers by using Active Directory Domain Services and a Group Policy object (GPO). A GPO can contain multiple configuration options, and is applied to all computers that are within the scope of the GPO.

 

To deploy a certificate by using Group Policy


  1. Open Group Policy Management Console.
  2. Find an existing or create a new GPO to contain the certificate settings. Ensure that the GPO is associated with the domain, site, or organizational unit whose users you want affected by the policy.
  3. Right-click the GPO, and then select Edit.

Group Policy Management Editor opens, and displays the current contents of the policy object.

  1. In the navigation pane, open Computer Configuration\Windows Settings\Security Settings\Public Key Policies\Trusted Publishers.
  2. Click the Action menu, and then click Import.
  3. Follow the instructions in the Certificate Import Wizard to find and import the certificate.
  4. If the certificate is self-signed, and cannot be traced back to a certificate that is in the Trusted Root Certification Authorities certificate store, then you must also copy the certificate to that store. In the navigation pane, click Trusted Root Certification Authorities, and then repeat steps 5 and 6 to install a copy of the certificate to that store.

Suppressing Welcome to Microsoft Office 2010 dialog box for Remote Desktop Users / Terminal Server Users

You can do this job through Group Policy and you need additonal administative template for it. Download the package from, Office 2010 Administrative Template files (ADM, ADMX/ADML) and Office Customization Tool

Extract the downloaded package to the server local harddisk then add the template under Administrative Templates -> Add/Remove Templates…;

Use the add button to add the template file \ADM\en-us\office14.adm;

Now you can suppress the Welcome to Microsoft Office 2010 dialog box by enabling the Suppress recommended settings dialog setting in the Group Policy setting which is located in the Group Policy Object Editor under User Configuration -> Administrative Templates -> Classic Administrative Templates -> Microsoft Office 2010 -> Miscellaneous.

Suppress Recommended Setting : Enable.

This setting prevents the Welcome to Microsoft Office 2010 dialog box from appearing the first time that a user starts Office 2010. If you enable this setting, the automatic updating feature remains unchanged and the privacy options that control Internet-based services are not enabled.

More setting and details information are available in this link: http://technet.microsoft.com/en-us/library/cc179123.aspx