4.7 Control Access to Settings and Controls with Microsoft Group Policy

As an administrator, you can limit users' ability to modify their workspace or session documents by setting permissions from the Microsoft Group Policy Management Console using group policy templates.

NOTE:You can restrict access to Reflection controls only on systems on which the Windows User Access Control (UAC) is enabled. If the UAC is disabled, the configuration settings that restrict access do not apply.

Reflection installs a set of group policy templates (ADM and ADMX files) to the following directory:

\Program Files\Micro Focus\Reflection\Configuration\GroupPolicy

NOTE:To use this feature, you must be running Windows 7, Windows 8.1, or later on an administrative machine. For more information about managing group policy, see Managing Group Policy ADMX Files Step-by-Step Guide.

ADMX files

ADMX files are divided into language-neutral files (.admx) and language-specific resource files (.adml), available to all Group Policy administrators. These factors allow Group Policy tools to adjust their UI according to the administrator's configured language.

Reflection setup.exe installs ADMX files to:

... \ install_dir \Configuration\GroupPolicy\ADMX

It installs ADML files to the following directory:

...\
    install_dir \Configuration\GroupPolicy\ADMX\en-us
  

Reflection provides the following ADMX Group Policy files. Each of these files has a corresponding ADML language file.

This file

Controls access to

ACTIONS.admx

Actions

APPLICATION.admx

Reflection Workspace

RD3X.admx

3270 terminal settings

RD5X.admx

5250 terminal settings

RDOX.admx

VT terminal settings

ReflectionWorkspace.admx

Root-level ADMX file

ReflectionSecurity.admx

TLS and PKI settings

NOTE:This directory also includes the ReflectionPCIDSS.admx file. This file is used to configure information privacy through Group Policy and is not used to control access.

ADM files

ADM files contain the Group Policy definitions and resource strings in the same file.

Reflection setup.exe installs ADM files to:

   ...
   \
    install_dir 
   \Configuration\GroupPolicy\ADM\
  

ADM Group Policy files:

This file

Controls access to

ACTIONS.adm

Actions

APPLICATION.adm

Reflection Workspace

RD3X.adm

3270 terminal settings

RD5X.adm

5250 terminal settings

RDOX.adm

VT terminal settings

NOTE:This directory also includes the ReflectionPCIDSS.adm file. This file is used to configure information privacy through Group Policy and is not used to control access.