Online Help > Support/Resources > How-To Online Help

How to apply policies

2019-11-18

Description

Administrative Templates facilitates the management of registry-based policy settings that can be applied on the computer and/or the user configuration. Group policy (GPO) is a tool for organizations to enforce settings on their computers and allows to harden Remote Desktop Manager security.

 

The Administrative Templates are simply registry settings that are enforced by domains. They contain registry keys that can also be set on computers that are not joined to domains. Proper Access Control Lists (ACL) must be put in place to prevent users from modifying registry settings in this case. Refer to the tables below to find the registry key for each policy setting.

 

To learn more on how to deploy the Remote Desktop Manager Administrative Templates on your domain please refer to the Microsoft Online Help.

 

The admx file is distributed with Remote Desktop Manager, you will find it in a Policies sub-folder. By default the path is C:\Program Files (x86)\Devolutions\Remote Desktop Manager\Policies.

 

Settings

 

RemoteDesktopManager includes an Administrative templates file (.admx), which describes the policies that are offered.

 

Group Policy Management Folder

Group Policy Management Folder

 

In the console tree, click the folder under Administrative Templates that contains the policy settings you want to configure.

 

 

General

POLICY NAME

REGISTRY KEY (PLEASE SEE NOTE 1)

Disable the telemetry data collection

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableAnalytics

Disable the application automatic update check

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableAutoUpdate

Disable the Help - Check Version button

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableUpdate

Disable the x64 edition of the application

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableX64

Disable the x86 of the application

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableX86

Force the loading of the default.cfg file

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ForceDefaultConfigurationLoading

 

Security

POLICY NAME

REGISTRY KEY (PLEASE SEE NOTE 1)

Force the user to always be prompted for the passphrase while connecting to a data source that is protected by a Passphrase Security Provider

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\AlwaysPromptForPassphrase

Disable the caching mode

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableCaching

Disable the offline mode

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableOffline

Disable the tools of the password generator

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisablePasswordGenerator

Disable the override hard drive specific settings for the RDP entries

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableRDPHardDrivesSpecificSettings

Disable the read/write in offline mode

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableReadWriteOffline

Force the user to always be prompted for his credentials when opening the application

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\ForceLogin

 

Sessions

POLICY NAME

REGISTRY KEY (PLEASE SEE NOTE 1)

Disable the add-on creation and the Add-on Manager

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableAddOn

Disable the Add-on creation of entries

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableAddOnEntries

Disable the Add-on Manager

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableAddOnManager

Disable the custom image edition in the session configuration

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableCustomImage

Disable import in private vault

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManagerDisableImportInPrivateVault

Disable the reveal password command

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableRevealPassword

Allow the user to connect even after the entry has expired

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\EnableConnectionAfterExpiration

Inside the private vault, allows only credentials entries

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\OnlyAllowCredentialsInPrivateVault

 

User Interface

POLICY NAME

REGISTRY KEY (PLEASE SEE NOTE 1)

Disable the menu Help - About

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableAbout

Disable all the local application tools like the Event Viewer or IIS

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableApplicationTools

Disable the possibility to drag and drop sessions

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableDragAndDrop

Disable the menu File - Data Sources

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableFileDataSources

Disable the menu File - Options

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableFileOptions

Disable the import and the export of the Configuration File in File - Options

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableImportExportOptions

Disable the My Personal Credential feature

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableMyPersonalCredentials

Disable the Devolutions Account usage

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableOnlineAccount

Disable the option to open with parameter

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableOpenWithParameters        

Disable the error report prompt

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableSendErrorReportDialog

Disable the Add-On Manager in the Tools menu

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableToolsAddOnManager        

Disable the Chocolatey Console in the Tools menu

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableToolsChocolateyConsole

Disable the Devolutions Password Server Console in the Tools menu (Deprecated 12.6.8)

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableToolsDevolutionsServerConsole

Disable the Extension Manager in the Tools menu

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableToolsExtensionManager

Disable the Local RDP/RemoteApp Manager in the Tools menu

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableToolsLocalRDPRemoteAppManager

Disable the Macro/Script/Tool Manager in the Tools menu

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableToolsMacroScriptToolManager

Disable the Tools ribbon tab and menu

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableToolsMenu

Disable the Open New Remote Desktop option in the Tools menu

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableToolsOpenNewRemoteDesktop

Disable the Powershell RDM Cmdlet in the Tools menu

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableToolsPowershellRDMCmdlet

Disable the RDM Agent in the Tools menu

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableToolsRDMAgent

Disable the Translation Manager in the Tools menu

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableToolsTranslationManager

Disable the Top Pane (Ribbon/Menubar)

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\DisableTopPane

Force the Merge credential list with sessions option

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\EnableMergeCredentialListWithSessions

Force the merging of the session toll list with sessions

%Root%\SOFTWARE\Policies\Devolutions\RemoteDesktopManager\EnableMergeSessionToolListWithSessions

 

Notes

 

%Root% can either be HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER depending on how you want to enforce the policy. Please refer to Microsoft's documentation to make the best choice for your situation.