How to Edit Group Policy Settings

Once you have added a LogMeIn Group Policy, you must define the settings that you want to deploy to your LogMeIn hosts.

1. Open Active Directory Users & Computers.
2. Right click a domain or organizational unit and select Properties.
3. Go to the Group Policy tab.
4. Select the LogMeIn Policy and click Edit.
5. Settings that can be applied to both computers and users are found under Computer Configuration and User Configuration.

   Option	Description
   Allow use of File Sharing	To prevent users from sharing files on the host via the File Sharing feature, set this policy to Disabled.
   Allow access to the Detailed Mode (Dashboard) interface	To prevent users from accessing the Detailed Mode (Dashboard) interface, set this policy to Disabled.
   Allow remote reboot	To prevent users from using the remote reboot function in LogMeIn, set this policy to Disabled.
   Specify Remote Control Permissions	Enable or disable Remote Control specific settings. Allow Remote Printing: Enable this option to allow client-side users to print host-side documents to a device connected to the client during remote control. Allow Clipboard Transfer: Enable this option to allow the host computer's clipboard contents to be synchronized with the client clipboard.
   Specify File Transfer permissions	Enable or disable File Transfer specific settings. Copy Files from the Host: Enable this option to allow the client-side user to copy files from the host. Copy Files to the Host: Enable this option to allow the client-side user to copy files to the host.
   Allow Desktop Sharing	Enable this option to allow the host-side user to invite others to access the host via the Desktop Sharing feature.

   Important: When a policy is set at both the computer and user level, computer-level settings will take precedence unless Computer policy settings override user policy settings is set to Disabled.

6. Settings that can be applied only at the computer level are found under Computer Configuration.

   Option	Description
   Specify File Transfer permissions	Enable or disable File Transfer specific settings. Copy Files from the Host: Enable this option to allow the client-side user to copy files from the host. Copy Files to the Host: Enable this option to allow the client-side user to copy files to the host.
   Allow Desktop Sharing	Enable this option to allow the host-side user to invite others to access the host via the Desktop Sharing feature.
   Computer policy settings override user policy settings	By default, computer policy settings take precedence over user policy settings. Set this policy to Disabled to allow LogMeIn user policies to take precedence over computer policies. Note: Use caution when allowing LogMeIn user policies to take precedence over computer policies. This could permit a user (if explicit LogMeIn user policies allow) to perform tasks that existing LogMeIn computer policies might forbid.
   Allow LogMeIn Installation	To prevent users from installing LogMeIn on the computer to which the policy object applies, set this policy to Disabled.

7. The one setting that can be applied only at the user level is found under User Configuration only.

   Option	Description
   Allow users to access LogMeIn	This is a User level setting. To prevent a user or user group from starting remote sessions with LogMeIn hosts, set this policy to Disabled.