Manage Google Sketchup using Group Policy, SCCM or your own management utility
Hi. This is Jeremy Moskowitz, Group Policy MVP and Founder of PolicyPak Software. In this video, we’re going to learn how to manage and lock down Google SketchUp using PolicyPak.
I’ve already got “SketchUp” installed on my target computer. I’m just a regular user here. As you can see, I’m logged on as a guy called “EastSales User4.” If we open up this application from the Start menu and go to “Preferences,” we can see a number of settings here for us to configure.
I’ll go to “General” where there are some key settings, such as “Create backup” and “Auto-save,” which if were set up correctly would be very beneficial to my users. Like with many applications, I don’t want my users managing their own updates so I definitely want to turn off “Automatically check for updates.” This application has some hardware specific settings as well, such as mouse settings under “Drawings” and hardware acceleration settings under “OpenGL.”
Let’s see how we can quickly ensure compliance and perform desktop management quickly using PolicyPak. I’ll go ahead and switch over to my management station computer. We’ll go ahead and right click over our “East Sales Users” and “Create a GPO in this domain, and link it here.” We’ll call it “Lockdown Google Sketchup.” This GPO is now associated with the East Sales Users.
I’ll right click over it, I’ll click “Edit” and I’ll dive down under “User Configuration/PolicyPak/Applications/New/Application.” There it is: “PolicyPak for SketchUp” along with tons of other desktop applications like Java, Flash, Firefox, Skype and lots of other desktop applications that your users utilize every day and you want to make more secure.
Let’s start with “General” and make sure that the “Automatically check for updates” checkbox is always unchecked. Notice how as soon as I change the checkbox value, that setting becomes underlined. That means the setting’s value is going to be delivered by PolicyPak.
Now to make sure my users never try to reverse this setting, I’m going to right click upon it and select “Disable corresponding control in target application.” While I’m here, let’s go ahead and enable “Auto-save,” which if I right click and “Perform ACL Lockdown,” will also ensure my users can’t modify this setting in any way even if they knew what they were doing through the registry.
Let’s go down to “Drawing.” We want to make sure our users have a predictive experience each time they use the mouse, so we’ll make sure “Auto detect” is always enforced. This time, I’m going to right click upon the setting and select “Hide corresponding control in target application” so my users don’t even know that this setting exists.
I’ll go back to my client machine. We’ll get a command prompt and run GP Update. Now you could envision the user logging on for the first time, using a Terminal Services or Citrix machine, using a VDI session, changing job roles or even getting a new computer. I just happen to be using GP Update to get the PolicyPak settings out there right now.
Now that that’s done, let’s go ahead and reopen the application. We can see that our desired preference settings for “General” have been delivered and are grayed out so my users can’t even manipulate them at all. What’s more impressive is that under “Drawing,” we can’t even see the settings for the mouse as it has been completely hidden from users. There you go. PolicyPak is doing its job.
Now let’s pretend that this user is very savvy and attempts to modify this setting through the registry. I’ve saved the registry location here to make things go a little faster. You can see here that if the user tries to “Modify” the “AutoSave” settings, PolicyPak ACL Lockdown thwarts even the toughest end user.
That’s it. We’re done. That is how incredibly easy it is for you to use PolicyPak to manage, secure and lockdown Google SketchUp as well as tons of your other desktop applications.
If you’re looking for a trial of PolicyPak, just click on the “Webinar/Download” button on the right.
Thanks so much for watching, and get in touch with us soon if you want to get started. Thanks so much.