ScriptLogic Desktop Authority 7.7

Desktop Authority enables a network administrator to control a user's desktop configuration. The software needs to run under Windows 2000 Server or Server 2003 and can operate with either type of Windows Domain. An active internet connection is needed during installation, since additional components such as SQL Express may need to be downloaded during the process. It can be installed on a Domain Controller, although ScriptLogic advises against it.

The software uses a combination of user profiles and login scripts to control drive share mapping and printer shares, and to configure aspects of the user's desktop. If Exchange Server is used, the software can control each user's access to their Exchange mailbox. A user profile may also use validation logic to include conditional operations. For example, a profile may only allow a particular action if a system is operating from within a specified network address range and not running in a VMware virtual machine. By assigning users to groups and assigning profiles to groups, it's possible to produce complex configurations.

A login script can be set up to run apps at startup, saving users time in running repetitive tasks each day. The network administrator can also enforce the running of specific apps, perhaps for a security audit. Profiles can even enforce which homepage the user's Internet Explorer will log on to when launched.

This new release brings a number of significant changes. The code now supports 64-bit, allowing it to take advantage of the current 64-bit versions of Microsoft's OSes. This not only includes Windows Server 2003 and the forthcoming Server 2008 release, but also the 64-bit versions of XP and Vista.It's also now possible to configure personalised desktops, which can follow the user whichever system they log onto.

There are new end-point security features, too. Removable storage can be controlled to prevent unauthorised use. USB, FireWire and Bluetooth devices can all be controlled, as well as CD/DVD and floppy disk drives, and serial and parallel ports. Devices and ports can be restricted to allow read access only in appropriate cases, while others can be blocked. It's also possible to ensure only specified USB devices can be connected to a system. All unauthorised attempts are logged and reported in the detailed security auditing reports.

The patch-management system has been extended with multilingual support and filters to control which patches are deployed. The user can defer patch downloads and reboots to a more convenient time. However, they can't defer them indefinitely, and the administrator can enforce the installation.

Reporting has been enhanced, too. The predefined reports should be sufficient, but a wizard now also helps to create customised reports. Essentially, a friendly front end to the Desktop Authority database, it relieves the user of any need to get to grips with SQL to access their data.

ScriptLogic's Desktop Authority software is an established provider of centralised desktop management facilities for Windows systems, and the new features extend its usefulness even further.

Author: Ian Parsons