Administrators can select an object and change the corresponding policies and restrictions. For example, the Web Desktop tree can be expanded, and the Desktop object can be selected to specify Desktop options such as Do not allow changes to Active Desktop . When unpacked, the .inf files are used to change policies and restrictions on users' systems. The two possible cabinet files are branding.cab and desktop.cab. If these .cab files are created, then they need to be copied to the Web distribution point where the automatic configuration .ins file resides.
Administrators can specify desktop, shell, and security settings across an organization.
Numerous settings can be customized, ranging from whether users can delete printers to whether they can add items to the Windows Desktop Update . When features are locked down, they either don't appear or they appear in gray type on the user's desktop. Before changing system policies and restrictions, administrators should understand the impact of the security settings on users, especially if roaming users will be sharing computers with other users. Consider for example, the implications of removing icons from the desktop, or not allowing users to change their security settings. These policies should be clearly communicated to the users before deploying any changes to the organization.