The prm_gina.adm Administrative Template features a powerful set of options that allow you to customize the behavior and appearance of Secure Password Extension according to your requirements. The Administrative Template layout includes the following folders:
• Generic Settings - includes policy settings that can be applied to computers running pre-Vista, Windows Vista, and Windows 7 Microsoft operating systems.
• Pre-Windows Vista Settings - includes policy settings that can be applied to computers running only pre-Vista operating systems.
Brief descriptions of the Administrative Template policy settings are outlined in the tables below. For more information about policy settings, see the Explain tab on the Properties page of each policy.
Generic Settings
The following table outlines generic Administrative Template policy settings you can use to customize the behavior of Secure Password Extension.
POLICY NAME DESCRIPTION
Specify URL path to the Self-Service site This policy lets you specify the link for the access to the Self-Service site from the Windows logon screen. This link is opened when users click the Forgot My Password or Manage My Password buttons on the Windows logon screen in pre-Vista operating systems, and the Forgot My Password command link in Windows Vista and Windows 7 operating systems.
Use the following URL path format:
https://COMPUTER_NAME/VIRTUAL_DIRECTORY/User/ , where COMPUTER_NAME is the name of the server where Password Manager resides, and
VIRTUAL_DIRECTORY is a virtual directory name that was configured during Quest Password Manager Setup (by default, the virtual directory name is QPM). Substitute https:// with http:// if you don’t use HTTPS. Override URL path to Self-Service site By default, Secure Password Extension automatically
locates the Self-Service site in its domain. This policy setting lets you override the default behavior and force Secure Password Extension to use the Self-Service site specified in the "Specify URL path to the Self-service site" setting.
Password Manager Realm Affinity This policy setting lets you force Secure Password Extension to use only Password Manager Service instances that belong to specific Password Manager realm.
Maximum number of attempts to connect to the
Self-Service site This setting specifies the maximum number of attempts to connect to the Self-Service site from Secure Password Extension.
If this setting is disabled or not configured, the default number of attempts is 5.
Force HTTPS This policy setting lets you enforce HTTPS for
connections with the Self-Service site established using the Secure Password Extension.
Proxy Settings
Enable proxy server access This policy setting determines whether connections to the Self-Service from the Windows logon screen are established through the specified proxy server. Configure required proxy settings Specifies the settings required to enable proxy server
access to the Self-Service site from the Windows logon screen.
Configure optional proxy settings Specifies optional settings for the proxy server access. Shortcut Policies
Restore desktop shortcuts for the Self-Service site This policy setting lets you define whether the desktop shortcut to the Self-Service site on a user's computer should be re-created by the Secure Password Extension if the user deletes the desktop shortcut.
Do not create desktop shortcuts for the Self-Service
site This policy setting lets you define whether the desktop shortcuts to the Self-Service site on users' computers should not be created by the Secure Password
Extension.
Do not create any shortcuts for the Self-Service site This policy setting lets you define whether any shortcuts to the Self-Service site on users' computers (on the desktop and in the Start menu) should not be created by the Secure Password Extension.
Secure Password Extension Title Settings Display custom names for the Secure Password
Extension window title This policy setting lets you define whether to replace the default language-specific names of the Secure Password Extension window title with the names that you specify for the required logon languages.
Set custom name for the Secure Password Extension
window title in <Language> This group of policy setting allows you to specify custom name for the Secure Password Extension window title. You can specify the title for each of the required logon languages. 36 language-specific policy settings are available out-of-the-box.
Note: The name you specify must not exceed 32 characters. If a hieroglyphic font is used, the name is limited by 14 characters because of hieroglyph’s width. The URL length must not exceed 256 characters. Usage Policy Settings
Display the usage policy button (command link) Defines whether to display the usage policy buttons and command links for which you have specified the logon language-specific names and URLs.
The usage policy button on pre-Windows Vista operating systems, and the usage policy command link on Windows Vista and Windows 7 operating systems, are displayed on the Windows logon screen, and are intended to open a HTML document that describes the enterprise usage policy or contains any information that you may want to make available to end-users. Set default URL This policy lets you specify an URL referring to the
usage policy document that will be opened by clicking the usage policy button (command link) if no logon language-specific URLs are set. The default URL may refer to a HTML file.
Set name and URL for the usage policy button
(command link) in <Language> This group of policy setting allows you to specify the name of the usage policy button (command link) and set the link to the usage policy document that will be opened by clicking the usage policy button or command link. You can specify the name and URL for each of the required logon languages. 36 language-specific policy settings are available.
Note: The name you specify must not exceed 32 characters. If a hieroglyphic font is used, the name is limited by 14 characters because of hieroglyph’s width. The URL length must not exceed 256 characters. Forgot My Password Settings
Display custom names for the Forgot My Password
button (command link) This policy setting lets you define whether to replace the default language-specific names of the Forgot My Password button and command link with the names that you specify for the required logon languages. The Forgot My Password button (command link) is intended to open the Self-Service site from the Windows logon screen. On pre-Windows Vista operating systems, the Forgot My Password button is displayed if you are not logged on to the system. On Windows Vista and Windows 7 operating systems, the command link is displayed on the Windows logon screen irrespective of whether the user is logged on to the system or not.
Set custom name for the Forgot My Password button
(command link) in <Language> This group of policy settings allows you to specify names of the Forgot My Password button (command link) individually for each of the required logon languages. 36 language-specific policy settings are available.
Notifications Customization
Notification recurrence interval If the registration notification is turned on, users will be notified of the necessity to register with Password Manager through a dialog box displayed on the desktop screen. This setting lets you specify how often you want registration notifications to be displayed on the desktop of user computers where the Secure Password Extension is running.
Set background image for registration notification
dialog box This policy setting allows you to change the default background by specifying an image that will be used as a new background.
Enable customization of registration notifications This policy setting allows you to define whether you want to replace the default text on language-specific registration notification dialog boxes with your custom text.
Registration Notifications
Customize registration notification in <Language> This group of policy settings allows you to customize texts in notification dialog boxes individually for each of the required logon languages. 36 language-specific policy settings are available.
Q&A profile update notifications
Customize Q&A profile update notification in
<Language> This group of policy settings allows you to customize notifications that request users to update their Q&A profiles individually for each of the required logon languages. 36 language-specific policy settings are available.