Windows Group Policies Supported by Reflection
Technical Note 1819
Last Reviewed 31-May-2006
Applies To
Reflection Windows-based Products version 13.0 through 14.x
Summary

This technical note provides a list of Windows Group Policies supported by Reflection.

Reflection Group Policy Support

Reflection Group Policy support provides administrators with an added tool for customizing and securing Reflection applications. Examples of customizations that can be made using Group Policies include: enabling only secure, encrypted connections; disabling macros; disabling password saving; and disabling file transfers to or from host computers.

Windows Group Policy editor support is available for Windows 2000 and Windows 2003 server, and Windows 2000 and Windows XP workstations.

Should I Use the Reflection Profiler or Group Policies?

Both Reflection Profilers and the Windows Group Policy editor enable you to lock down Reflection features. Although Active Directory is not a requirement, the administrator will gain the greatest benefits of Group Policy settings when implemented using Active Directory. If you want to take advantage of Active Directory, and the features you want to lock down are available through Reflectionís Group Policy settings, using Group Policies is easier and more flexible than using the Profilers.

Note: Profilers are available in all Reflection products except Reflection for Secure IT. (Reflection for Secure IT does support Windows Group Policies.)

For further information about using the Reflection Profiler or Windows Group Policies with the Reflection product(s) you are using, see the Reflection System Administrator Guide for your product at http://support.attachmate.com/manuals/.

Windows Group Policies Supported by Reflection

The following tables provide information about each policy supported by Reflection.

Note: By default, features associated with policies are available unless the feature is disabled by a policy, the Profiler, or through some other means.

Table Value Definitions

There are two policy values types noted in these tables:

Enable/Disable - These policies can be enabled or disabled. If the policy is disabled, these features are unavailable.

Configurable Setting - These policies require a value to be specified. If the policy is disabled, these settings are locked at their default value.

The following Reflection product abbreviations are used in the Applies To column of these tables.

RUO - Reflection for UNIX and OpenVMS
RRG - Reflection for ReGIS Graphics
RHP - Reflection for HP
RIBM - Reflection for IBM
RX - Reflection X
RFTP - Reflection FTP Client utility
RSIT – Reflection for Secure IT

Reflection Settings

These policies are available from User Configuration > Administrative Templates > Reflection Settings.

Setting Name and Description
Supported in Reflection Version
Value Type
Applies To
Migration of settings from F-Secure to Reflection:
This policy determines whether Reflection migrates (imports) F-Secure settings when a Reflection session starts. The migration is performed only once. You can also specify that the migration is performed silently.

13.0-14.x
Configurable Setting
RHP
RUO
RSIT
RRG

Allow non-FIPS mode:
If this policy is disabled, all Reflection products run in FIPS mode. When enabled, Reflection products are not run in FIPS mode.
12.0.3-14.x
Enable/
Disable

RUO
RRG
RHP
RIBM
RX
RFTP
RSIT

Allow files to be sent to host computers:
If this policy is disabled, Reflection will not permit files to be sent to host computers.

11.0-14.x
Enable/
Disable

RUO
RRG
RHP
RIBM
RFTP
RSIT

Allow files to be received from host computers:
If this policy is disabled, Reflection will not permit files to be received from host computers.

11.0-14.x
Enable/
Disable

RUO
RRG
RHP
RIBM
RFTP
RSIT

Allow Reflection to save passwords:
If this policy is disabled, Reflection will not allow users to save passwords in scripts, macros or settings files.

11.0-14.x
Enable/
Disable

RUO
RRG
RHP
RIBM
RX
RFTP

Allow sessions without settings files:
If this policy is disabled, Reflection requires every Reflection session to be associated with a settings file. Users will be unable to create untitled sessions.

Disabling this policy terminates untitled sessions created prior to the policy change.

11.0-14.x
Enable/
Disable

RUO
RRG
RHP
RIBM
RSIT

Allow start screen:
If this policy is disabled, the splash screen is not displayed on Reflection startup. This policy does not affect the display of the About Box at startup.

11.0-14.x
Enable/
Disable

RUO
RRG
RHP
RIBM
RX
RFTP
RSIT

Allow tracing for troubleshooting:
If this policy is disabled, Reflection will not permit tracing for troubleshooting. Use this policy if there is a significant concern that sensitive information could be revealed in traces.

Using this policy may impede product support. This policy has no effect on RFTP logging.

11.0-14.x
Enable/
Disable

RUO
RRG
RHP
RIBM
RX
RSIT

Allow unencrypted connections:
If this policy is disabled, users are required to use encryption for all host connections and FTP transfers. Reflection X client connections also require encryption, unless the client is running locally on the same computer as Reflection X.

11.0-14.x
Enable/
Disable

RUO
RRG
RHP
RIBM
RFTP
RX

Folder for the default auto update file:
This policy controls whether and how Reflection looks for settings.rsu, settings.r1u, settings.r2u, or settings.r4u.
If enabled, you can specify the folder where Reflection should look for this file. If you leave the folder name empty, Reflection will not look for the settings.r?u file.
If disabled or not configured, Reflection will look for this file in the Reflection User Folder. This policy is ignored, and settings.r?u is ignored if a settings file has specified a value for the "Auto Update File" setting.
You can use environment variables as in the following examples:
%personalfolder%\Reflection
%programfiles%\Reflection

12.0-14.x
Configurable Setting
RUO
RRG
RHP
RIBM
RSIT

Folder for the shared macros settings file:
This policy controls whether and how Reflection looks for SharedMacros.rsf, SharedMacros.r1w, SharedMacros.r2w or SharedMacros.r4w.
If enabled, you can specify the folder where Reflection should look for SharedMacros.* files. If you leave the folder name empty, Reflection will not look for the SharedMacros.* files.
If disabled, Reflection will look for SharedMacros.* in the Reflection User Folder. If not configured, Reflection will look for SharedMacros.* in the folder specified by the SharedMacrosFolder property. If the SharedMacrosFolder property is not set, Reflection will look for SharedMacros.* in the Reflection User Folder.
Changes to this policy will not affect Reflection sessions that are already started.
You can use environment variables as in the following examples:
%personalfolder%\Reflection
%programfiles%\Reflection

12.0-14.x
Configurable Setting
RUO
RRG
RHP
RIBM

Language override:
When multiple user interface languages are installed, this policy overrides the way Reflection normally chooses which language to use. This is helpful if none of the installed languages matches the language configured for Windows. This policy has no effect if only one user interface language is installed.

11.0-14.x
Configurable Setting
RUO
RRG
RHP
RIBM
RX
RFTP
RSIT

Settings only in these folders:
This policy prevents Reflection from opening settings files in folders not specifically listed.
You can use Windows environment variables, such as %PersonalFolder%, to specify folders whose path specification may vary from user to user.

Disabling this policy is equivalent to leaving it not configured.

11.0-14.x
Configurable Setting
RUO
RRG
RHP
RIBM
RSIT

When Reflection Exits

These policies are available from User Configuration > Administrative Templates > Reflection Settings > When Reflection Exits.

Setting Name and Description
Supported in Reflection Version
Value Type
Applies To
If there are unsaved changes:
This policy specifies what to do if the user exits Reflection before changes have been saved.

11.0-14.x
Configurable Setting
RUO
RRG
RHP
RIBM
RX
RSIT

Prompt if connected when user exits Reflection:
If a host connection is active when the user exits Reflection, this policy specifies whether a confirmation prompt is displayed.

11.0-14.x
Configurable Setting
RUO
RRG
RHP
RIBM
RX
RFTP
RSIT

Prompt when exiting all Reflection sessions:
If the user chooses to exit all Reflection sessions, this policy specifies whether a confirmation prompt is displayed.

11.0-14.x
Configurable Setting
RUO
RRG
RHP
RIBM
RSIT

Application Programming Interfaces

These policies are available from User Configuration > Administrative Templates > Reflection Settings > Application Programming Interfaces.

Setting Name and Description
Supported in Reflection Version
Value Type
Applies To
Allow scripts and macros on the startup command line:
If this policy is disabled, Reflection will not run scripts, macros or commands specified on the startup command line.

11.0-14.x
Enable/
Disable

RUO
RRG
RHP
RIBM
RFTP

Allow other applications to use Reflection's DLL API:
If this policy is disabled, Reflection will not permit other applications to use Reflection's DLL API.

11.0-14.x
Enable/
Disable

RIBM
Allow other applications to use Reflection's HLLAPI interface:
If this policy is disabled, Reflection will not permit other applications to use Reflection's HLLAPI interface.

11.0-14.x
Enable/
Disable

RIBM
Allow other applications to use Reflection's OLE automation interface:
If this policy is disabled, Reflection will not permit other applications to use Reflection's OLE automation interface.

11.0-14.x
Enable/
Disable

RUO
RRG
RHP
RIBM
RFTP

Allow Reflection FTP Client scripting:
If this policy is disabled, the Reflection FTP client will not run RFS scripts.

11.0-14.x
Enable/
Disable

RFTP
Allow Reflection to process DDE requests:
If this policy is disabled, Reflection will not process DDE requests from other applications.

11.0-14.x
Enable/
Disable

RUO
RRG
RHP
RIBM

Allow Reflection to run Reflection Basic scripts:
This policy allows host programs to run Reflection Basic scripts in Reflection. If disabled, Reflection will not run Reflection Basic scripts.

Note: Host-initiated scripting is available only when Reflection is emulating a VT or HP terminal.

11.0-14.x
Enable/
Disable

RUO
RRG
RHP
RIBM

Allow Reflection to run RCL scripts:
This policy permits host programs to run RCL scripts in Reflection. If disabled, Reflection will not run RCL (Reflection Command Language) scripts.

11.0-14.x
Enable/
Disable

RUO
RRG
RHP

Allow Reflection to run Visual Basic for Applications macros:
If this policy is disabled, Reflection will not run Visual Basic for Applications macros.

11.0-14.x
Enable/
Disable

RUO
RRG
RHP
RIBM

Client Metering

This policy is available from Computer Configuration > Administrative Templates > Reflection Settings > Client Metering.

Setting Name and Description
Supported in Reflection Version
Value Type
Applies To
Client metering, Require connection to metering server, and Metering web server:
If this policy is enabled, Reflection attempts to contact the Reflection metering server at the specified URL. If Reflection cannot contact the metering server and "Require connection to metering server" is checked, Reflection exits after issuing an error message.

This policy is configured from Computer Policy > Computer Configuration > Administrative Templates > Reflection Settings > Client Metering.

12.0-14.x
Enable/
Disable

RUO
RRG
RHP
RIBM
RX
RSIT


Related Technical Notes
1572 How to Upgrade Reflection Installations Using Microsoft Group Policies
1803 Using Group Policy to Deploy Reflection
2216 How to Enable FIPS in Reflection 2008 or 2007
2227 DDE Support in Attachmate Emulation Products

Did this technical note answer your question?

           



Need further help? For technical support, please contact Support.