# Computer Configuration Templates

## Table of contents

1. [Change local admin account password](#change-local-admin-account-password)
2. [Cleanup Recycle bin to free-up Hard Disk space](#cleanup-recycle-bin-to-free-up-hard-disk-space)
3. [Create Alternate local Admin Account](#create-alternate-local-admin-account)
4. [Defrag Hard Disk for performance](#defrag-hard-disk-for-performance)
5. [Delete local Administrator Account](#delete-local-administrator-account)
6. [Disable/Enable USB storage devices](#disableenable-usb-storage-devices)
7. [Disable Unused local Guest account](#disable-unused-local-guest-account)
8. [Open MEDC ports for communication](#open-medc-ports-for-communication)
9. [Restrict CD-ROM access](#restrict-cd-rom-access)
10. [Restrict Floppy Access to locally logged on users](#restrict-floppy-access-to-locally-logged-on-users)
11. [Scan and Fix Hard disk Errors](#scan-and-fix-hard-disk-errors)
12. [Start MEDC Agent Service](#start-medc-agent-service)
13. [Prevent writing to the USB Storage Devices](#prevent-writing-to-the-usb-storage-devices)

## Change local admin account password

To enhance security, administrators prefer to change the password periodically. This template enables you to change the password of the local administrator account in the client machines.

## Cleanup Recycle bin to free-up Hard Disk space

This helps in freeing up the hard disk space by removing unwanted files/data from 18 different locations.

## Create Alternate local Admin Account

To keep computers secure, administrators prefer to change the local administrator account periodically. This template enables you to create an alternate local administrator account in the client computers.

## Defrag Hard Disk for performance

A fragmented disk reduces performance. It is recommended to defragment the disk periodically to improve hard disk performance.

This template enables defragmentation of the hard disk at the scheduled time.

## Delete local Administrator Account

This template enables you to delete the local administrator account in the client computers.

## Disable/Enable USB storage devices

To prevent data theft, administrators may prevent users from using USB drives. These templates, when applied to client computers, either prevent the use of USB drives or allow their use.

## Disable Unused local Guest account

Unused guest accounts are vulnerable points for hackers. It is recommended to delete or disable any unused guest accounts from client computers to avoid misuse.

This template helps disable unused guest accounts from client computers.

## Open MEDC ports for communication

Endpoint Central requires port 8020 for agent-server communication and port 8443 for Remote Desktop Sharing. These ports should not be blocked by Windows Firewall for smooth functioning.

This template, when applied to client computers, opens these ports to enable proper communication between the agent and server.

## Restrict CD-ROM access

This template restricts users from accessing CD-ROM drives.

## Restrict Floppy Access to locally logged on users

Allowing locally logged-on users to access floppy drives is a vulnerable point for hacking. Administrators prefer to disable access to floppy drives when users have not logged on to the domain.

This template helps restrict locally logged-on users from accessing floppy drives.

## Scan and Fix Hard disk Errors

Hard disks must be periodically scanned for errors and fixed. This improves the life and performance of the disk.

This template enables scanning and fixing hard disk errors in client machines at a scheduled time.

## Start MEDC Agent Service

When the Scope of Management is defined, the Endpoint Central agent is installed on all client computers within scope. The Endpoint Central agent must run as a service on client computers to ensure proper communication with the Endpoint Central Server.

This template helps you start the Endpoint Central Agent service on client computers.

## Prevent writing to the USB Storage Devices

To prevent data theft, administrators may prevent users from writing data to USB storage devices. This template, when applied to client computers, prevents them from writing any data to USB storage devices.

Learn more about [computer configurations](https://www.manageengine.com/products/desktop-central/help/computer_configuration/computer_configurations.html).