Wave provides both .adm and .admx GPO templates which are located in the following folder on the ERAS server:

C:\<Program Files>\Wave Systems\EMBASSY Remote Administration Server\Support\Group Policy

For a complete list of policies and what they do, please see the ERAS Admin Manual.

Importing Methods:

For Windows Server 2008 and above, copy the ADMX files above to the following locations on the Domain Controller:

  1. Copy WaveSystemsCorp.adml to C:\Windows\PolicyDefinitions\en-US
  2. Copy WaveSystemsCorp.admx to C:\Windows\PolicyDefinitions

The Policies will show up under Computer Configuration >> Administrative Template >> Windows Components >>Wave Systems Corp >> Embassy Remote Administration >>

For Windows Server 2003, create new GPO and import the adm file.  If you do not know how to do this, please follow steps in this video:   http://youtube/6C2yhHeKspUor go to http://technet.microsoft.com/en-us/library/cc739134(WS.10).aspx

 

Minimum GPO Settings Required for ERAS client management

The following group policies need to be set and applied to all machines using the ERAS connector: 

  • Computer Configuration\Administrative Templates\Windows Components\Wave Systems Corp\Embassy Remote Administration Server\Configure ERAS Connector settings
    • This specifies the server that the machine should be connecting to 
  • Computer Configuration\Administrative Templates\Windows Components\Wave Systems Corp\Embassy Remote Administration Server\Configure ERAS setup parameters
    • This specifies the ERAS service account so that the connector can properly configure the permissions for this account
    • NOTE: this must be specified in domain\user format to function properly

To check locally on the client if the policies have been applied, go to the following Registry settings:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Wave Systems Corp\ERAS

ERASServiceAccount  value should be set in Domain\Username format

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Wave Systems Corp\ERASConnector

SVCHost value should be set to ERAS server name or IP address

OptionalSVCPort value should be set to port number if using non-default 80