ptotham Posted February 12, 2015 Posted February 12, 2015 I have been asked to package up office 2013 and deploy I have never had to lock office down before so am looking for any tips/advice the software will be used by students and staff?
MatthewL Posted February 12, 2015 Posted February 12, 2015 What do you want to restrict? Worth looking at using the ADMX's for use in group policy.
ptotham Posted February 13, 2015 Author Posted February 13, 2015 Hi MatthewL not so much what I want to restrict more what should I restrict?
MatthewL Posted February 13, 2015 Posted February 13, 2015 Load up the ADM's and see what you can do, only you will know what is best for your network. Personally if your OS is locked down I don't see the need to lock any of office down. Maybe just worth going through and changing default save paths possibly. I don't know what options are available on the 2013 ADMX's, last time I looked at them for Office is was for 2003!
caffrey Posted February 13, 2015 Posted February 13, 2015 I usually just go through the options in the office customisation tool and remove what's not needed etc. (setup.exe /admin)
FN-GM Posted February 13, 2015 Posted February 13, 2015 Maybe disable the save to OneDrive stuff if you don't use it? I would also use the ADMX files to disable to first run wizard. 1
abillybob Posted February 13, 2015 Posted February 13, 2015 Maybe disable the save to OneDrive stuff if you don't use it? How do you go about doing this? Also is there a way so that it automatically saves into shared areas?
Smed Posted February 13, 2015 Posted February 13, 2015 you can add your share to the place bar locations user config/policies/admin templates/ms office 2013/file open/save dialog box/places bar locations
Oaktech Posted February 13, 2015 Posted February 13, 2015 Also look at disabling the outlook social connector and the options menu for kids... Have good read around macro security too, there's lots about that on the office blogs.
abillybob Posted February 13, 2015 Posted February 13, 2015 you can add your share to the place bar locations user config/policies/admin templates/ms office 2013/file open/save dialog box/places bar locations Hey Mate, I don't have that option could that be because we are still running Server 2008 R2?
Smed Posted February 13, 2015 Posted February 13, 2015 mmm not sure im on 2012, you have installed the admx files yeah? Download Office 2013 Administrative Template files (ADMX/ADML) and Office Customization Tool from Official Microsoft Download Center
Arthur Posted February 13, 2015 Posted February 13, 2015 could that be because we are still running Server 2008 R2? It sounds like you just need to update your Group Policy templates for Office 2013. Download the latest from MS and put them in your central store. 1
FN-GM Posted February 13, 2015 Posted February 13, 2015 Hey Mate, I don't have that option could that be because we are still running Server 2008 R2? You need to import the ADMX templates first. https://msdn.microsoft.com/en-us/library/bb530196.aspx https://social.technet.microsoft.com/Forums/windowsserver/en-US/633e0c88-025c-4b6e-b2d3-ee166496895e/office-2013-gpo-administrative-templates-on-w2k08r2 1
LeMarchand Posted February 13, 2015 Posted February 13, 2015 Don't lock Office down, but do suppress first run etc and fill in their User Details automatically.
abillybob Posted February 13, 2015 Posted February 13, 2015 Ok I think I've done this right although it won't work and I don't see the GP option there under Group Policy Manager!? Is there like a YouTube video or can you guys just let me know how to import them step by step so I know I've done it right? It'll be really handy for me because I can't manage IE 11 at the moment either without doing this. Any help would be most appreciated!
rom1984 Posted February 13, 2015 Posted February 13, 2015 I did most of my Office configuration via the customisation wizard, disabled first run etc then deployed it. For anything that I didn't do on the customisation wizard I downloaded the admx templates, created a GP central store and did little bits of customisation via the GP template.
FN-GM Posted February 15, 2015 Posted February 15, 2015 I did most of my Office configuration via the customisation wizard, disabled first run etc then deployed it. For anything that I didn't do on the customisation wizard I downloaded the admx templates, created a GP central store and did little bits of customisation via the GP template. Problem with this method is you can just make a quick change like you can in GP. You will have to tweak the package and reinstall office.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now