This FAQ will give information on how to use and configure policies found in the Quicklaunch settings. This screen sets common windows computer policies to help secure the computer.
1) Policies and their uses
Note: Policies are NOT importable from machine to machine
Note: Policies cannot be saved to a template as they would require interactive admin rights on import
Note: Changing any of these options will require administration rights
1) Policies and their uses
To get into the Policies page, first enter QL Settings (Ctrl + Alt + S) or click on the "Gear" option on the top right of the home page. Once in Settings, go to System > Policies.
Remove Change Password
In some usage scenarios you may want to disable "Change Password" for specific users or user roles
Remove Lock Computer
Locking your PC protects it from unauthorized use when you need to step away from the PC. However, you may not want this for the room account. With this option disabled, locking the computer will not be allowed. This includes trying to use the lock shortcut.
Remove Task Manager
The main function of task manager is to monitor the applications and the tasks running in the windows operating system. Disabling this option will not allow a user to view or end any running tasks through the Task Manager.
Disabling this option will not allow a user to logoff the room account, hence, not being able to login with different credentials.
Remove Switch User
Switch User is a feature in Quicklaunch that allows you to have two accounts configured into QL and allows you to switch between the two. Disabling this option, will simply not allow you to do so.
Remove Power Options
This will disable the ability for the user to put the computer to sleep, hibernate, power-off or restart the computer.
Disable Edge Swipe
If using a device that has a touchscreen, you could swipe in from a screen edge to invoke a system UI, e.i swipe from right to open Action Center. This option will disable such actions.
Disable Task View History
This disables the collection of Windows Task View history. Task View FAQ
Disable USB Access
With this option disabled, when a USB is inserted, it will be rejected/not read.
Prohibit access to Control Panel and PC Settings
With this option enabled, access to Control Panel and PC settings will not be allowed.
Do not cache 'Work or School' accounts
This setting disables the prompt to cache Microsoft accounts to "Work or School"
Block consumer accounts for Microsoft Apps
This option will block any consumer accounts from using any Microsoft app.
Disable Notification Center
With this option, you will not receive any notifications that come up in Quicklaunch
Hide People Bar
People Bar is a feature that displays profile images as circular icons of recent active contacts on the system tray in the taskbar. Enabling this option will hide this feature.
Show the touch keyboard when not in tablet mode and there's no keyboard attached
Enabling this option will show a touch keyboard when there is no keyboard plugged into the PC.
Restrict Zoom Desktop client Login
This restricts Zoom desktop client login to only username/password and disables the 'keep me signed in" option. When used with associated Settings 'System\Room Reset\Signout\Zoom' ensures Zoom desktop client is signed out on room reset. Zoom desktop client must be signed out and closed when enabling this policy.
Force Ephemeral Browser Profile
Applies to Chrome and Edge Chromium. Restarting the web browser is required for change to take an effect. Enabling this policy will delete all browser profiles on browser close.
Disable Browser Password Manager
Applies to Chrome and Edge Chromium. Restarting the web browser is required for change to take an effect. Enabling this policy will disable the browser from requesting and saving passwords.
Trusted conferencing sites (cookies, audio and video devices)
Adding any URL will add it as a trusted website and suppress prompts for access to Audio and Video hardware.