Goverlan provides a Group Policy Administrative Template which can be used to distribute Goverlan settings using Active Directory.
Before you can use the Goverlan Administrative Template, you need to import it into your group policy object (GPO). You would normally import it into the Default Domain Policy object but it can be imported into any GPO you have configured.
Note: The Microsoft Group Policy Editor is part of the Microsoft Administration Tools Package. If you do not have it installed, you can find it here: Microsoft adminpak.msi.
If you have the Group Policy Management snap-in installed, open it and select the appropriate GPO. Right click on the mouse and select Edit.
If you do not have the Group Policy Management snap-in installed, open the Users and Computers MMC snap-in. Select the root domain or an organizational unit and open its properties window. From the properties window, select the Group Policy tab. The Group Policy tab displays the currently configured GPOs for the selected container. Select the GPO from the list and click on the Edit button.
Once the Group Policy Editor MMC snap-in is opened, expand the Computer Configuration node and select the Administrative Templates container. Right click on the mouse and select Add/Remove Templates... from the menu.
Click on the Add button of the Add/Remove Templates window and browse to the installation directory of Goverlan (i.e.: C:\Program Files\Goverlan v6). Select the Goverlan_Group_Policy_Admin_Template.adm template file and click on Open >> Close.
The Goverlan Administrative Template is now imported into your group policy object.
The Goverlan Universal Settings template folder contains multiple policy containers used to configure different modules and aspects of Goverlan.
Use this section to configure the behavior and settings of the Goverlan Management Console. If you only use the Goverlan Remote Control product, most settings within this section doesn't apply to you.
Use this section to configure the behavior and settings of the Goverlan Remote Control feature on the operator's side. For instance, you can disable the Chat features for a set of machines or only authorize remote control sessions in Observe Only mode.
Use this section to configure the behavior and settings of the Goverlan Remote Control feature on the client's side.
Use this section to configure the behavior and settings of the Goverlan Agents. For instance, you can configure the communication ports used by the Goverlan Service and the Goverlan Remote Control server (see Modifying the Communication Ports).
Use this section to customize the text displayed on the client's side. This can be used to perform company branding or to translate the client side user interface in another language.
To configure a policy, open it, enable it and select its desired value. For instance, to configure a remote machine to prompt the local user for approval before a remote control session is activated, double click on the Pre-Session Action policy, select Enabled and set the Pre-Session Action option to Prompt local user for approval.
Once you have enabled one or more policies, their distribution automatically starts on the machines which belong to the GPO's scope.
All Goverlan policies modify registry values. By default, all users who have local administrative privileges on a machine will be able to modify these registry settings manually. However, you can restrict who can modify these settings by defining specific permissions to the Goverlan Registry keys.
In the Group Policy Editor, select the Computer Configuration >> Windows Settings >> Security Settings >> Registry container.
In the right pane of the editor, right click on the mouse and select Add Key...
Browse through the registry, select the appropriate Goverlan registry key and click on OK. You can also select the Goverlan Universal Settings root key:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\PJ Technologies\Goverlan Universal Settings
Configure the permissions for the registry key, as well as the appropriate inheritance options.
For more information, refer to Microsoft documentation about Active Directory Group Policy.
If you need a higher level of security in the distribution of the Goverlan Universal Settings, you can use the Goverlan Central Server.