Thursday, June 21, 2007

Lock the Windows Sidebar

While the Windows Sidebar is a nice piece of functional eye candy for home users, it can be an administrator's nightmare in a business environment. Having users installing an endless amount of gadgets off of the internet can at the very least waste work time and bandwidth and a worse case scenario would be a security breach. You can limit or eliminate the Windows Sidebar and keep control of what, if any, gadgets are able to run on the users' machines.

1. Click the Start Button.

2. Click All Programs and select Accessories.

3. Click Run.

4. Input gpedit.msc and click OK.

5. When the UAC prompt appears, click Continue.

6. In the left pane, select Computer Configuration and double-click Administrative Templates.

7. Double-click Windows Components.

8. Select Windows Sidebar.

9. In the right pane, select one of the four settings to limit usage of the Windows Sidebar. To enable a setting, double-click the setting and select the Enabled radio button and click OK. The choices are:

Override the More Gadgets Link - The Windows Sidebar has a link to download additional gadgets from the Microsoft site. By enabling this setting, you can redirect your users to a different site. This means that if you create gadgets for your users to access various company data, you can redirect them to your intranet to download and install the gadgets. Input the address of the new location in the Override Gadget Location textbox after selecting the Enabled radio button.

Turn off Windows Sidebar - Enable this setting to turn off the Windows Sidebar.

Disable unpacking and installation of gadgets that are not digitally signed - Enabling this setting will prevent the installation of any gadgets that are unsigned.

Turn Off User Installed Windows Sidebar Gadgets - Enable this setting to prevent Windows Sidebar from running any user installed gadgets.

10. Close the Group Policy Object Editor.