Locking UI With Group Policy

Starting with ControlUp 3.0 there is an option to restrict the display of ControlUp Console user interface components trough Microsoft Group Policy. You can hide panes, views, actions, columns and buttons, thus creating a limited view which may be useful for delegated administrators, such as helpdesk personnel. These restrictions are visual only and do not change any rights the user might have.

Usage

Download the administrative templates ZIP file and extract ‘ControlUpConsole.admx’ and ‘ControlUpConsole.adml’ files to your policy definition folder.

For detailed explanation on Group Policy Templates please refer to http://msdn.microsoft.com/en-us/library/bb530196.aspx
After importing the template, your policy should look similar to the following:

The policies are applied to users. Use the template in GPOs linked to Active Directory OUs in which your delegated ControlUp administrators’ user accounts are located.

Under ControlUp > Console in the policy there is a subfolder for each pane, view, ribbons, and settings window. The policy names are sorted alphabetically.

The following user interface components may be hidden using the policy template:

Action pane

  • The action history pane has only one policy ‘Hide’, when applied it hides the action history pane.

Controllers pane

  • The controller pane can hide the entire pane or individual controller
    • Registry controller
    • User Registry
    • File System
    • Program and Updates Machine
    • Program and Updates User
    • Services
    • Shares

Events pane

  • The events pane has only one policy ‘Hide’.

Incidents pane

  • The incidents pane has only one policy ‘Hide’.

Monitor status view

  • The monitor status view has only one policy ‘Hide’.

My Organization pane

  • Holds the majority of the policies, as the default view of ControlUp it cannot be hiding.

Accounts view

  • You can hide the accounts view
  • The sub folder “Accounts columns” you can ‘Hide’ each of the available columns

Agent Control

  • You can hide any of the actions you can perform on ControlUp agents
    • Hide Deploy .net framework
    • Hide Agent Ribbon
    • Hide Set listening port
    • Hide Remove remote agent
    • Hide Restart remote agent
    • Hide Start remote agent
    • Hide Stop Remote Agent
    • Hide Agent tree view context menu
    • Hide Upgrade remote agent
    • Hide agent properties

Computer view

  • You cannot hide the computers view.
  • The subfolder “Computer columns” you can ‘Hide’ each of the available columns
  • You can hide the following actions:
    • Abort Shutdown
    • Admin$ Diagnostics Instruction
    • Disable Process Execution
    • Enable Process Execution
    • Launch Event Viewer On Remote Computer
    • Flush Dns
    • Import Registry Computer
    • NSLookup Diagnostics Instruction
    • Ping Diagnostics Instruction
    • Reboot machine
    • Refresh Machine Policy
    • Send Message (same as in sessions view)
    • Send Super Message (same as in sessions view)
    • Send Wake On Lan Signal
    • Shutdown machine
    • Run As User
    • Test WMI Diagnostics Instruction
    • Trace Diagnostics Instruction
    • Wake On Lan

Executables view

  • You can hide the Executables view
  • The sub folder “Executables columns” you can ‘Hide’ each of the available columns

Folders view

  • You can hide the Folders view
  • The sub folder “Folders columns” you can ‘Hide’ each of the available columns

Process view

  • You can hide the Process view
  • The sub folder “Process columns” you can ‘Hide’ each of the available columns
  • You can hide the following actions:
    • End Process
    • Go To >> Session
    • Kill Process
    • PsKill
    • Set Process Priority

Session view

  • You can hide the Session view
  • The sub folder “Session columns” you can ‘Hide’ each of the available columns
  • You can hide the following actions:
    • Chat
    • Disconnect Session
    • Get Session Screenshot With Approval
    • Get Session Screenshot With Notification
    • Get Session Screenshot Without notifying the user
    • Go To >> Computer
    • Import registry user
    • Logoff session
    • Reapply group policy
    • Refresh user group policy
    • Remote assistance
    • Kill policy
    • Send message (same as in computers view)
    • send super message (same as in computers view)

Remote Desktop pane

  • You can hide the ALL Remote Desktop actions from ControlUp Console

Ribbons

  • You can hide the following options from the Ribbons menus
    • Help ribbon
    • Add context menu on tree view
    • Organization properties
    • Button actions
    • Button add computers
    • Button Add folders
    • Button Export
    • Button move computer or folder
    • Button remove computer or folder
    • Button rename folder
    • Button Script based actions

Security Policy pane

  • You can hide the Security Policy pane from ControlUp Console

Settings

  • You can hide all the settings or the following individual settings:
    • AD Connection Settings
    • Agent
    • Agent
    • Alert
    • Controllers
    • Credentials
    • Display
    • Events
    • Export
    • Manage monitors
    • Schedule
    • Manage triggers
    • Proxy
    • Remote assistance
    • Security
    • Stress
Powered by Zendesk