Configuration – Base Active Directory Policy
Page 82 Windows 7 Desktop Optimizations
Screenshot Description
6
Expand the navigation tree in Group Policy Management Editor to the following path:
Computer Configuration > Policies >
Administrative Templates > Windows Components > Windows Error Reporting
Right click the setting for Disable Windows Error Reporting and select Edit.
7
Configure the policy setting by selecting the Enable radio button.
Click Apply to put the policy into effect
Click OK to accept the changes to policy and return to the Group Policy Management Editor.
8
Expand the navigation tree in Group Policy Management Editor to the following path:
Computer Configuration > Policies >
Administrative Templates > Windows Components > Windows Update
Right click the setting for Configure Automatic Updates and select Edit.
Windows 7 Desktop Optimizations
Screenshot Description
9
Configure the policy setting by selecting the Disable radio button.
Click Apply to put the policy into effect
Click OK to accept the changes to policy and return to the Group Policy Management Editor.
10
Expand the navigation tree in Group Policy Management Editor to the following path:
Computer Configuration > Policies >
Administrative Templates > System >
System Restore
Right click the setting for Turn off System Restore and select Edit.
11
Configure the policy setting by selecting the Enable radio button.
Click Apply to put the policy into effect
Click OK to accept the changes to policy and return to the Group Policy Management Editor.
Page 84 Windows 7 Desktop Optimizations
Screenshot Description
12
Expand the navigation tree in Group Policy Management Editor to the following path:
User Configuration > Policies >
Administrative Templates > Control Panel >
Personalization
Right click the setting for Enable Screen Saver and select Edit.
13
Configure the policy setting by selecting the Enable radio button.
Click Apply to put the policy into effect
Click OK to accept the changes to policy and return to the Group Policy Management Editor.
14
Repeat Step 12 and 13 for the following Group Policies under Personalization
Prevent changing screen saver: Enabled
Password protect screen saver: Enabled
Screen saver timeout: Enabled: 600 seconds
Force specific screen saver: Enabled
Configurating a specific screen saver: scrnsave.scr
Windows 7 Desktop Optimizations
Screenshot Description
15
Expand the navigation tree in Group Policy Management Editor to the following path:
Computer Configuration > Preferences >
Windows Settings > Registry
Click the Add a new item icon to create a new entry.
16
Configure the New Registry Properties for Disable Last Access Timestamp as follows:
Action: Update
Hive: HKEY_LOCAL_MACHINE
17
Use the tree browser to navigate to the following Registry Key Path:
SYSTEM > CurrentControlSet > Control >
FileSystem > NtfsDisableLastAccessUpdate
Click Select to modify settings for this Registry Key
Page 86 Windows 7 Desktop Optimizations
Screenshot Description
18
Configure the New Registry Properties for Disable Last Access Timestamp as follows:
Value Type: REG_DWORD Value data: 00000001
Base: Hexadecimal
Click OK to save settings for this Registry Key
19
Expand the navigation tree in Group Policy Management Editor to the following path:
Computer Configuration > Preferences >
Windows Settings > Registry
Click the Add a new item icon to create a new entry.
20
Configure the New Registry Properties for Disable Large Send Offload as follows:
Action: Create
Hive: HKEY_LOCAL_MACHINE
Windows 7 Desktop Optimizations
Screenshot Description
21
Enter the following value in the Key Path:
SYSTEM\CurrentControlSet\Services\BNNS\
Parameters
Configure the Properties as follows:
Value Name: EnableOffload Value type: REG_DWORD Value data: 00000000
Base: Hexadecimal
Click Apply and then OK to save settings for this Registry Key.
22 ***NOTE***
As Windows 7 Installation methods and features for various enterprises can vary, the following step contains a list of Registry Key additions and updates that should be made to optimize the base image for XenDesktop. As such, System Administrators should validate whether the following keys exist or not in the base image using regedit, then use the procedure outlined in Steps 15 – 18 to add registry keys *OR* Steps 19 – 21 to update registry keys for the following entries:
Disable TCP/IP Offload [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\
Parameters] "DisableTaskOffload"=dword:00000001
Increase Service Startup Timeout [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control]
"ServicesPipeTimeout"=dword:0002bf20
Hide Hard Error Messages [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Windows]
"ErrorMode"=dword:00000002
Disable CIFS Change Notifications [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Policies\Explorer]"NoRemoteRecursiveEvents"=dword:00000001
Disable Logon Screensaver [HKEY_USERS\.DEFAULT\Control Panel\Desktop]
"ScreenSaveActive"="0"
Disable Clear Page File at Shutdown HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management] "ClearPageFileAtShutdown"=dword:00000000
Page 88 Windows 7 Desktop Optimizations
Screenshot Description
22 (Step 22 Continued from prior page)
Disable Offline Files [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
NetCache] "Enabled"=dword:00000000
Disable Background Defragmentation [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Dfrg\BootOptimizeFunction]
"Enable"="N"
Disable Background Layout Service [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\
OptimalLayout] "EnableAutoLayout"=dword:00000000
Disable Bug Check Memory Dump [HKLM\SYSTEM\CurrentControlSet\Control\CrashControl]
“CrashDumpEnabled"= dword:00000000
"LogEvent"=dword:00000000
"SendAlert"=dword:00000000
Disable Hibernation [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\
Session Manager\Power]
"Heuristics"=hex:05,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,3f,42,0f,00
Disable Memory Dumps [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl]
"CrashDumpEnabled"=dword:00000000 "LogEvent"=dword:00000000
"SendAlert"=dword:00000000
Disable Mach. Acct. Password Changes [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\
Parameters] "DisablePasswordChange"=dword:00000001
Redirect Event Logs HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application]
"File"="D:\EventLogs\Application.evtx"
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security]
"File"="D:\EventLogs\Security.evtx"
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\System]
"File"="D:\EventLogs\System.evtx"
Reduce Event Log Size to 64K HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application]
"MaxSize"=dword:00010000
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security]
"MaxSize"=dword:00010000
[HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\System]
"MaxSize"=dword:00010000
Disable Move to Recycle Bin [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Explorer\BitBucket]
"UseGlobalSettings"=dword:00000001
"NukeOnDelete"=dword:00000001
Force Offscreen Composition for Internet Explorer
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Force Offscreen Composition"=dword:00000001
Windows 7 Desktop Optimizations
Screenshot Description
22 (Step 22 Continued from prior page)
Reduce Menu Show Delay [HKEY_CURRENT_USER\Control Panel\Desktop] "MenuShowDelay"="150"
Disable all Visual Effects except "Use common tasks in folders" and "Use visual styles on windows and buttons"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Explorer\VisualEffects] "VisualFXSetting"=dword:00000003
[HKEY_CURRENT_USER\Control Panel\Desktop\WindowMetrics]
"MinAnimate"="0"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion
\Explorer\Advanced]
"ListviewAlphaSelect"=dword:00000000
"TaskbarAnimations"=dword:00000000
"ListviewWatermark"=dword:00000000
"ListviewShadow"=dword:00000000
[HKEY_CURRENT_USER\Control Panel\Desktop]
"DragFullWindows"="0"
"FontSmoothing"="0"
"UserPreferencesMask"=binary:90,12,01,80 ,10,00,00,00