Group Policy Settings - Vista

Group Policy Settings Reference
Windows Vista®
This spreadsheet lists the policy settings for computer and user configurations included in the administrative template files (admx/adml) delive
Windows Vista (RTM build 6000). The policy settings included in this spreadsheet cover Windows Vista , Microsoft Windows Server 2003, Win
and Windows 2000. These files are used to expose policy settings when you edit Group Policy objects (GPOs) using Group Policy Object Edi
You can use the filtering capabilities included in this spreadsheet to view a specific subset of data based on one value or a combination of val
in one or more of the columns. In addition, you can click Custom in the drop-down list of any of the column headings to add additional filtering
To view a specific subset of data, click the drop-down arrow in the column heading of cells that contain the value or combination of values on
and then click the desired value in the drop-down list. For example, to view a subset of policy settings that are available for Windows Vista in t
click the drop-down arrow next to Supported On, and then click At least Windows Vista.
What's New
The spreadsheet contains three new columns. These columns provide more information about each policy setting's behavior regarding reboot
and schema extensions.These columns are:
Reboot Required: A "Yes" in this column means Windows requires a restart before it applies the described policy setting.
Logoff Required: A "Yes" in this column means Windows requires the user to log off and log on again before it applies the described polic
Active Directory Schema or Domain Requirements: A "Yes" in this column means you extend your Active Directory Schema before depl
(detailed documentation for schema changes will be available online after Microsoft releases Windows Vista).
Legal Notice
The information contained in this document represents the current view of Microsoft Corporation on the issues discussed as of the date of publication.
Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot
guarantee the accuracy of any information presented after the date of publication.
The information contained in this document relates to a prerelease software product, which may be substantially modified before its first commercial release.
Accordingly, the information may not accurately describe or reflect the software product when first commercially released.
This document is provided for informational purposes only, and Microsoft makes no warranties, express or implied, with respect to this document or the informa
This is a preliminary document and may be changed substantially prior to final commercial release of the software described herein.
This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, AS TO THE INFORMATION IN THIS DO
Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reprodu
or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording or otherwise), or for
any purpose, without the express written permission of Microsoft Corp.
Microsoft may have patents, patent applications, trademarks, copyrights or other intellectual property rights covering subject matter in this document.
Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these
patents, trademarks, copyrights or other intellectual property
Unless otherwise noted, the example companies, organizations, products, domain names, e-mail addresses, logos, people, places and events depicted herein
no association with any real company, organization, product, domain name, e-mail address, logo, person, place or event is intended or should be inferred
© 2008 Microsoft Corp. All rights reserved.
Microsoft, the Windows logo, Windows, Windows Media, Active Directory and Windows NT are either registered trademarks or trademarks of Microsoft Corp. in
The names of actual companies and products mentioned herein may be the trademarks of their respective owners.
File name Scope
ActiveXInstallService.admx Machine
AddRemovePrograms.admx User
AppCompat.admx User
AppCompat.admx Machine
AppCompat.admx User
AttachmentManager.admx User
AutoPlay.admx machine
AutoPlay.admx user
AutoPlay.admx user
AutoPlay.admx user
Bits.admx Machine
Bits.admx Machine
Bits.admx Machine
Bits.admx Machine
Bits.admx Machine
Bits.admx Machine
Bits.admx Machine
Bits.admx Machine
Bits.admx Machine
Bits.admx Machine
Bits.admx Machine
Bits.admx Machine
Bits.admx Machine
CaptureWizard.admx User
CaptureWizard.admx Machine
CEIPEnable.admx Machine
CEIPEnable.admx Machine
CipherSuiteOrder.admx Machine
COM.admx User
COM.admx Machine
Conf.admx User
Conf.admx User
Conf.admx User
Conf.admx User
Conf.admx User
Conf.admx User
Conf.admx User
Conf.admx User
Conf.admx User
Conf.admx User
Conf.admx User
Conf.admx User
Conf.admx User
Conf.admx User
Conf.admx User
Conf.admx User
Conf.admx User
Conf.admx Machine
Conf.admx User
Conf.admx User
Conf.admx User
Conf.admx User
Conf.admx User
Conf.admx User
Conf.admx User
Conf.admx User
Conf.admx User
Conf.admx User
Conf.admx User
Conf.admx User
Conf.admx User
Conf.admx User
Conf.admx User
Conf.admx User
ControlPanel.admx User
ControlPanelDisplay.admx User
Cpls.admx Machine
CredentialProviders.admx Machine
CredentialProviders.admx Machine
CredSsp.admx Machine
CredUI.admx Machine
CredUI.admx Machine
CtrlAltDel.admx User
DCOM.admx Machine
DCOM.admx Machine
Desktop.admx User
Desktop.admx User
Desktop.admx User
Desktop.admx User
Desktop.admx User
Desktop.admx User
Desktop.admx User
Desktop.admx User
Desktop.admx User
Desktop.admx User
Desktop.admx User
Desktop.admx User
Desktop.admx User
Desktop.admx User
Desktop.admx User
Desktop.admx User
Desktop.admx User
Desktop.admx User
Desktop.admx User
Desktop.admx User
Desktop.admx User
Desktop.admx User
Desktop.admx User
Desktop.admx User
Desktop.admx User
Desktop.admx User
Desktop.admx User
Desktop.admx User
Desktop.admx User
DeviceInstallation.admx Machine
DeviceInstallation.admx User
DFS.admx Machine
DigitalLocker.admx User
DigitalLocker.admx Machine
DiskDiagnostic.admx Machine
DiskDiagnostic.admx Machine
DiskNVCache.admx Machine
DiskQuota.admx Machine
DistributedLinkTracking.admx Machine
DnsClient.admx Machine
DWM.admx User
DWM.admx Machine
DWM.admx User
DWM.admx Machine
DWM.admx User
DWM.admx Machine
DWM.admx User
DWM.admx Machine
DWM.admx User
DWM.admx Machine
EncryptFilesonMove.admx Machine
ErrorReporting.admx Machine
ErrorReporting.admx User
EventLog.admx Machine
EventViewer.admx Machine
Explorer.admx User
Explorer.admx User
Explorer.admx User
Explorer.admx Machine
FileRecovery.admx Machine
FileSys.admx Machine
FolderRedirection.admx User
FolderRedirection.admx User
FolderRedirection.admx Machine
FramePanes.admx User
FramePanes.admx User
GameExplorer.admx Machine
GameExplorer.admx Machine
Globalization.admx User
Globalization.admx Machine
GroupPolicy.admx Machine
GroupPolicy.admx User
Help.admx Machine
Help.admx User
Help.admx Machine
HelpAndSupport.admx Machine
HelpAndSupport.admx Machine
HelpAndSupport.admx User
HotStart.admx User
HotStart.admx Machine
ICM.admx User
ICM.admx Machine
ICM.admx Machine
ICM.admx User
ICM.admx Machine
ICM.admx User
ICM.admx Machine
ICM.admx Machine
ICM.admx Machine
ICM.admx Machine
ICM.admx Machine
ICM.admx Machine
ICM.admx Machine
ICM.admx Machine
ICM.admx Machine
ICM.admx Machine
ICM.admx User
ICM.admx Machine
ICM.admx User
ICM.admx Machine
ICM.admx User
ICM.admx Machine
ICM.admx User
ICM.admx Machine
ICM.admx User
ICM.admx Machine
ICM.admx Machine
IIS.admx Machine
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx Machine
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
inetres.admx User
InkWatson.admx User
InkWatson.admx Machine
InputPersonalization.admx User
InputPersonalization.admx Machine
InputPersonalization.admx User
InputPersonalization.admx Machine
iSCSI.admx Machine
iSCSI.admx Machine
iSCSI.admx Machine
iSCSI.admx Machine
iSCSI.admx Machine
iSCSI.admx Machine
iSCSI.admx Machine
iSCSI.admx Machine
iSCSI.admx Machine
iSCSI.admx Machine
Kerberos.admx Machine
LeakDiagnostic.admx Machine
LinkLayerTopologyDiscovery.admx Machine
LinkLayerTopologyDiscovery.admx Machine
Logon.admx User
Logon.admx Machine
Logon.admx User
Logon.admx Machine
Logon.admx Machine
Logon.admx Machine
Logon.admx User
Logon.admx Machine
Logon.admx Machine
Logon.admx Machine
Logon.admx User
Logon.admx Machine
Logon.admx Machine
Logon.admx Machine
MediaCenter.admx User
MediaCenter.admx Machine
MMC.admx User
MMC.admx User
MMC.admx User
MMC.admx User
MMC.admx User
MMCSnapins.admx User
MobilePCMobilityCenter.admx User
MobilePCMobilityCenter.admx Machine
MobilePCPresentationSettings.admx User
MobilePCPresentationSettings.admx Machine
MovieMaker.admx User
MovieMaker.admx Machine
MovieMaker.admx User
MovieMaker.admx Machine
MovieMaker.admx machine
MovieMaker.admx user
MovieMaker.admx machine
MovieMaker.admx user
MSDT.admx Machine
MSDT.admx Machine
MSI.admx Machine
MSI.admx Machine
MSI.admx Machine
MSI.admx User
MSI.admx Machine
MSI.admx Machine
MSI.admx Machine
MSI.admx Machine
MSI.admx Machine
MSI.admx User
MSI.admx Machine
MSI.admx Machine
MSI.admx User
MSI.admx Machine
MSI.admx Machine
MSI.admx Machine
MSI.admx Machine
MSI.admx Machine
MSI.admx Machine
MSI.admx Machine
MSI.admx Machine
MSI.admx Machine
MSI.admx Machine
MSI.admx Machine
MSI.admx User
MSI.admx Machine
Netlogon.admx Machine
NetworkConnections.admx User
NetworkConnections.admx Machine
NetworkProjection.admx User
NetworkProjection.admx Machine
OfflineFiles.admx Machine
OfflineFiles.admx User
P2P-pnrp.admx Machine
ParentalControls.admx Machine
pca.admx Machine
pca.admx Machine
pca.admx Machine
pca.admx Machine
pca.admx Machine
PenTraining.admx User
PenTraining.admx Machine
PerfCenterCPL.admx machine
PerfCenterCPL.admx user
PerformanceDiagnostics.admx Machine
Power.admx Machine
Power.admx Machine
Power.admx Machine
Power.admx Machine
Power.admx Machine
Power.admx Machine
Power.admx Machine
Power.admx Machine
Power.admx Machine
Power.admx Machine
Power.admx Machine
Power.admx Machine
Power.admx Machine
Power.admx Machine
Power.admx Machine
Power.admx Machine
Power.admx Machine
Power.admx User
Power.admx Machine
Power.admx Machine
Power.admx Machine
Power.admx Machine
Power.admx Machine
Power.admx Machine
Power.admx Machine
Power.admx Machine
Power.admx Machine
Power.admx Machine
Power.admx Machine
Power.admx Machine
Power.admx Machine
Power.admx Machine
Power.admx Machine
Power.admx Machine
Power.admx Machine
PreviousVersions.admx User
PreviousVersions.admx Machine
Printing.admx Machine
Printing.admx User
Printing.admx User
Printing.admx User
Printing.admx User
Printing.admx User
Printing.admx User
Printing.admx User
Printing.admx User
Programs.admx User
Programs.admx User
Programs.admx User
Programs.admx User
Programs.admx User
Programs.admx User
Programs.admx User
QOS.admx Machine
QOS.admx Machine
QOS.admx Machine
QOS.admx Machine
QOS.admx Machine
QOS.admx Machine
QOS.admx Machine
QOS.admx Machine
QOS.admx Machine
QOS.admx Machine
QOS.admx Machine
QOS.admx Machine
QOS.admx Machine
QOS.admx Machine
QOS.admx Machine
QOS.admx Machine
QOS.admx Machine
QOS.admx Machine
QOS.admx Machine
Radar.admx Machine
Reliability.admx Machine
RemoteAssistance.admx Machine
RemovableStorage.admx User
RemovableStorage.admx Machine
RPC.admx Machine
RPC.admx Machine
RPC.admx Machine
RPC.admx Machine
RPC.admx Machine
RPC.admx Machine
Scripts.admx Machine
Scripts.admx User
Scripts.admx User
Scripts.admx User
Scripts.admx User
Search.admx Machine
Search.admx Machine
Search.admx Machine
Search.admx Machine
Search.admx Machine
Search.admx Machine
Search.admx Machine
Search.admx Machine
Search.admx Machine
Securitycenter.admx Machine
Setup.admx Machine
Setup.admx Machine
SharedFolders.admx User
SharedFolders.admx User
Sharing.admx User
Shell-CommandPrompt-RegEditTools.admx User
ShellWelcomeCenter.admx User
Sidebar.admx User
Sidebar.admx Machine
Sidebar.admx User
Sidebar.admx User
Sidebar.admx User
Sideshow.admx User
Sideshow.admx Machine
Sideshow.admx User
Sideshow.admx User
Sideshow.admx User
Smartcard.admx Machine
Snmp.admx Machine
Snmp.admx Machine
Snmp.admx Machine
SoundRec.admx User
SoundRec.admx Machine
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
StartMenu.admx User
SystemResourceManager.admx Machine
SystemRestore.admx Machine
SystemRestore.admx Machine
TabletPCInputPanel.admx User
TabletPCInputPanel.admx Machine
TabletShell.admx User
TabletShell.admx Machine
Taskbar.admx User
Taskbar.admx User
Taskbar.admx User
Taskbar.admx User
Taskbar.admx User
Taskbar.admx User
Taskbar.admx User
Taskbar.admx User
Taskbar.admx User
Taskbar.admx User
TaskScheduler.admx User
TaskScheduler.admx Machine
TerminalServer.admx User
TerminalServer.admx Machine
Thumbnails.admx User
Thumbnails.admx User
TouchInput.admx User
TouchInput.admx Machine
TPM.admx Machine
TPM.admx Machine
TPM.admx Machine
TPM.admx Machine
UserDataBackup.admx User
UserDataBackup.admx Machine
UserProfiles.admx Machine
UserProfiles.admx User
VolumeEncryption.admx Machine
W32Time.admx Machine
WDI.admx Machine
WDI.admx Machine
WinCal.admx User
WinCal.admx Machine
WindowsBackup.admx Machine
WindowsCollaboration.admx User
WindowsCollaboration.admx Machine
WindowsCollaboration.admx User
WindowsCollaboration.admx Machine
WindowsColorSystem.admx User
WindowsColorSystem.admx Machine
WindowsConnectNow.admx User
WindowsConnectNow.admx Machine
WindowsConnectNow.admx Machine
WindowsDefender.admx Machine
WindowsExplorer.admx User
WindowsExplorer.admx Machine
WindowsFileProtection.admx Machine
WindowsFirewall.admx Machine
WindowsMail.admx User
WindowsMail.admx Machine
WindowsMail.admx User
WindowsMail.admx Machine
WindowsMediaDRM.admx Machine
WindowsMediaPlayer.admx Machine
WindowsMediaPlayer.admx User
WindowsMessenger.admx Machine
WindowsMessenger.admx User
WindowsMessenger.admx Machine
WindowsMessenger.admx User
WindowsRemoteManagement.admx Machine
WindowsRemoteShell.admx Machine
WindowsUpdate.admx User
WindowsUpdate.admx machine
WindowsUpdate.admx user
WindowsUpdate.admx Machine
WinInit.admx Machine
WinInit.admx Machine
WinLogon.admx Machine
WinLogon.admx User
WinLogon.admx User
WinLogon.admx Machine
WinLogon.admx machine
WinLogon.admx user
WinLogon.admx User
Winsrv.admx Machine
WordWheel.admx User
Policy Path
Windows Components\ActiveX Installer Service
Control Panel\Add or Remove Programs
Windows Components\Application Compatibility
Windows Components\Attachment Manager
Windows Components\AutoPlay Policies
Network\Background Intelligent Transfer Service (BITS)
Windows Components\Import Video
Windows Components\Import Video
Windows Components\Windows Customer Experience Improvement Program
Windows Components\Windows Customer Experience Improvement Program
Network\SSL Configuration Settings
System
System
Windows Components etMeeting\Application Sharing
Windows Components etMeeting\Audio & Video
Windows Components etMeeting
Windows Components etMeeting\Options Page
Control Panel
Control Panel
Control Panel
Control Panel
Control Panel\Display
Control Panel\Display\Desktop Themes
Control Panel\User Accounts
logon:Logon
logon:Logon
System\Credentials Delegation
Windows Components\Credential User Interface
Windows Components\Credential User Interface
System\Ctrl+Alt+Del Options
System\Distributed COM\Application Compatibility Settings
System\Distributed COM\Application Compatibility Settings
Desktop\Desktop
Desktop\Desktop
Desktop\Desktop
Desktop\Desktop
Desktop\Desktop
Desktop\Desktop
Desktop\Desktop
Desktop\Desktop
Desktop\Desktop
Desktop\Desktop
Desktop\Desktop
Desktop\Active Directory
Desktop
Desktop
Desktop
Desktop
Desktop
Desktop
Desktop
Desktop
Desktop
Desktop
Desktop
Desktop
Desktop
Desktop
Desktop
System\Device Installation
System\Device Installation\Device Installation Restrictions
System\Driver Installation
Network
Windows Components\Digital Locker
Windows Components\Digital Locker
Troubleshooting and Diagnostics\Disk Diagnostic
Troubleshooting and Diagnostics\Disk Diagnostic
System\Disk NV Cache
System\Disk Quotas
System\Disk Quotas
System\Disk Quotas
System\Disk Quotas
System\Disk Quotas
System\Disk Quotas
System
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Windows Components\Desktop Window Manager
Windows Components\Desktop Window Manager\Window Frame Coloring
System
Windows Components\Windows Error Reporting
Windows Components\Windows Error Reporting\Advanced Error Reporting Settings
Windows Components\Windows Error Reporting\Consent
Windows Components\Event Log Service\Application
Windows Components\Event Log Service\Security
Windows Components\Event Log Service\Setup
Windows Components\Event Log Service\System
Windows Components\Event Viewer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Troubleshooting and Diagnostics\Corrupted File Recovery
System TFS Filesystem
System\Folder Redirection
Windows Explorer\Explorer Frame Pane
Windows Explorer\Explorer Frame Pane
Windows Components\Game Explorer
Windows Components\Game Explorer
System\Locale Services
Control Panel\Regional and Language Options
System
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System
System
System
Windows Components\Online Assistance
Windows Components\Online Assistance
Internet Communication settings
System\Windows HotStart
System\Windows HotStart
Internet Communication Management
Internet Communication Management
Windows Components\Internet Information Services
Windows Components\Internet Explorer\Administrator Approved Controls
Windows Components\Internet Explorer\Internet Control Panel\Advanced Page
Windows Components\Internet Explorer\Internet Settings\AutoComplete
Windows Components\Internet Explorer\Internet Settings\AutoComplete
Windows Components\Internet Explorer\Internet Control Panel\Advanced settings\Browsing
Windows Components\Internet Explorer\Offline Pages
Windows Components\Internet Explorer\Corporate Settings\Code Download
Windows Components\Internet Explorer\Internet Settings\Display settings
Windows Components\Internet Explorer\Internet Control Panel
Windows Components\Internet Explorer\Internet Settings\URL Encoding
Windows Components\Internet Explorer\Internet Settings\Display settings\General Colors
Windows Components\Internet Explorer\Internet Settings\Component Updates\Help Menu > About Internet Explorer
Windows Components\Internet Explorer\Internet Control Panel\Advanced settings\Internet Connection Wizard Settings
Windows Components\Internet Explorer\Security Features\Add-on Management
Windows Components\Internet Explorer\Security Features\Binary Behavior Security Restriction
Windows Components\Internet Explorer\Security Features\Consistent Mime Handling
Windows Components\Internet Explorer\Security Features\Information Bar
Windows Components\Internet Explorer\Security Features\Local Machine Zone Lockdown Security
Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Feature
Windows Components\Internet Explorer\Security Features\MK Protocol Security Restriction
Windows Components\Internet Explorer\Security Features etwork Protocol Lockdown
Windows Components\Internet Explorer\Security Features\Object Caching Protection
Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation
Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install
Windows Components\Internet Explorer\Security Features\Restrict File Download
Windows Components\Internet Explorer\Security Features\Scripted Window Security Restrictions
Windows Components\Internet Explorer\Security Features etwork Protocol Lockdown\Restricted Protocols Per Security Zone
Windows Components\Internet Explorer
Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone
Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone
Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone
Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone
Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone
Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone
Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone
Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone
Windows Components\Internet Explorer\Internet Control Panel\Security Page
Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone
Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone
Windows Components\Internet Explorer\Internet Settings\Display settings\Link Colors
Windows Components\Internet Explorer\Browser menus
Windows Components\Internet Explorer\Internet Control Panel\Advanced settings\Multimedia
Windows Components\Internet Explorer\Persistence Behavior
Windows Components\Internet Explorer\Internet Control Panel\Advanced settings\Printing
Windows Components\RSS Feeds
Windows Components\Internet Explorer\Application Compatibility\Enable cut, copy or paste operations from the clipboard if URLACTION_SCRIPT_PASTE is s
Windows Components\Internet Explorer\Internet Control Panel\Advanced settings\Searching
Windows Components\Internet Explorer\Security Features
Windows Components\Internet Explorer\Security Features
Windows Components\Internet Explorer\Internet Control Panel\Advanced settings\Signup Settings
Windows Components\Internet Explorer\Toolbars
Windows Components\Internet Explorer\Internet Settings\Component Updates\Periodic check for updates to Internet Explorer and Internet Tools
Windows Components\Internet Explorer\Internet Settings\Component Updates\Periodic check for updates to Internet Explorer and Internet Tools
Tablet PC\Handwriting personalization
System\iSCSI\iSCSI Target Discovery
System\iSCSI\General iSCSI
System\iSCSI\General iSCSI
System\iSCSI\iSCSI Security
System\Kerberos
System\Kerberos
System\Kerberos
Troubleshooting and Diagnostics\Windows Memory Leak Diagnosis
Network\Link-Layer Topology Discovery
Network\Link-Layer Topology Discovery
System\Logon
System\Logon
System\Logon
System\Logon
System\Logon
System\Logon
System\Logon
System\Logon
System\Logon
System
System
System
System\Logon
System\Logon
Windows Components\Windows Media Center
Windows Components\Windows Media Center
Windows Components\Microsoft Management Console
Windows Components\Microsoft Management Console
Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins
Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins
Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins
mmc:MMC_ExtensionSnapins
mmc:MMC_RESTRICT\Group Policy
mmc:MMC_RESTRICT\Group Policy\Group Policy snap-in extensions
mmc:MMC_RESTRICT\Group Policy\Resultant Set of Policy snap-in extensions
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
Windows Components\Windows Mobility Center
Windows Components\Windows Mobility Center
Windows Components\Presentation Settings
Windows Components\Presentation Settings
Windows Components\Windows Movie Maker
Windows Components\Windows Movie Maker
Troubleshooting and Diagnostics\Microsoft Support Diagnostic Tool
Troubleshooting and Diagnostics\Microsoft Support Diagnostic Tool
Windows Components\Windows Installer
System et Logon
System et Logon
System et Logon
System et Logon
System et Logon
System et Logon
System et Logon
System et Logon
System et Logon
System et Logon
System et Logon
System et Logon
System et Logon
System et Logon
System et Logon\DC Locator DNS Records
Network etwork Connections
Windows Components etwork Projector
Windows Components etwork Projector
Network\Offline Files
Network\Microsoft Peer-to-Peer Networking Services
Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Global Clouds
Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Global Clouds
Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Link-Local Clouds
Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Link-Local Clouds
Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Site-Local Clouds
Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Site-Local Clouds
Network\Microsoft Peer-to-Peer Networking Services
Windows Components\Parental Controls
Troubleshooting and Diagnostics\Application Compatibility Diagnostics
Tablet PC\Tablet PC Pen Training
Tablet PC\Tablet PC Pen Training
System\Performance Control Panel
Troubleshooting and Diagnostics\Windows Boot Performance Diagnostics
Troubleshooting and Diagnostics\Windows Standby/Resume Performance Diagnostics
Troubleshooting and Diagnostics\Windows System Responsiveness Performance Diagnostics
Troubleshooting and Diagnostics\Windows Shutdown Performance Diagnostics
System\Power Management otification Settings
System\Power Management\Button Settings
System\Power Management\Hard Disk Settings
System\Power Management\Hard Disk Settings
System\Power Management
System\Power Management\Sleep Settings
System\Power Management\Video and Display Settings
System
Windows Explorer\Previous Versions
Printers
Printers
Printers
Printers
Control Panel\Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Control Panel\Programs
Network\QoS Packet Scheduler\DSCP value of conforming packets
Network\QoS Packet Scheduler\DSCP value of non-conforming packets
Network\QoS Packet Scheduler
Network\QoS Packet Scheduler\Layer-2 priority value
Troubleshooting and Diagnostics\Windows Resource Exhaustion Detection and Resolution
System
wer:CAT_WindowsErrorReportingAdvanced
System
System
System\Remote Assistance
System\Removable Storage Access
System\Remote Procedure Call
System\Scripts
System\Scripts
System\Scripts
System\Scripts
System\Scripts
System\Scripts
System\Scripts
System\Scripts
System\Scripts
System\Scripts
Windows Components\Search
Windows Components\Security Center
System
System
Shared Folders
Shared Folders
Windows Components etwork Sharing
System
System
System
System
Windows Explorer
Windows Components\Windows Sidebar
Windows Components\Windows SideShow
Windows Components\Smart Card
Network\SNMP
Network\SNMP
Network\SNMP
Windows Components\Sound Recorder
Windows Components\Sound Recorder
Start Menu and Taskbar
Windows Components\Windows System Resource Manager
System\System Restore
System\System Restore
Tablet PC\Input Panel
Tablet PC\Accessories
Tablet PC\Cursors
Tablet PC\Cursors
Tablet PC\Hardware Buttons
Tablet PC\Pen Flicks Learning
Tablet PC\Pen Flicks Learning
Tablet PC\Pen UX Behaviors
Tablet PC\Pen UX Behaviors
Windows Components\Task Scheduler
Windows Components\Terminal Services\Remote Desktop Connection Client
Windows Components\Terminal Services\Remote Desktop Connection Client
Windows Components\Terminal Services\Terminal Server\Security
Windows Components\Terminal Services\TS Gateway
Windows Components\Terminal Services\Terminal Server\Connections
Windows Components\Terminal Services\Terminal Server\Remote Session Environment
Windows Components\Terminal Services\Terminal Server\Licensing
Windows Components\Terminal Services\Terminal Server\Profiles
Windows Components\Terminal Services\Terminal Server\Profiles
Windows Components\Terminal Services\TS Licensing
Windows Components\Terminal Services\TS Licensing
Windows Components\Terminal Services\Terminal Server\Device and Resource Redirection
Windows Components\Terminal Services\Terminal Server\Printer Redirection
Windows Components\Terminal Services\Terminal Server\Session Directory
Windows Components\Terminal Services\Terminal Server\Session Time Limits
Windows Components\Terminal Services\Terminal Server\Temporary folders
Windows Components\Terminal Services\Terminal Server\Temporary folders
Windows Explorer
Windows Explorer
Tablet PC\Touch Input
Tablet PC\Touch Input
System\Trusted Platform Module Services
Windows Components\Backup\Client
System\User Profiles
Windows Components\BitLocker Drive Encryption
System\Windows Time Service
System\Windows Time Service\Time Providers
Troubleshooting and Diagnostics
Troubleshooting and Diagnostics
Windows Components\Windows Calendar
Windows Components\Windows Calendar
backup:Backup\Server
Windows Components\Windows Meeting Space
Windows Components\Windows Color System
Windows Components\Windows Color System
Network\Windows Connect Now
Windows Components\Windows Defender
Windows Explorer\Common Open File Dialog
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
System\Windows File Protection
netcon:NetworkConnections\Windows Firewall
netcon:NetworkConnections\Windows Firewall\Domain Profile
netcon:NetworkConnections\Windows Firewall\Standard Profile
Windows Components\Windows Mail
Windows Components\Windows Media Digital Rights Management
Windows Components\Windows Media Player
Windows Components\Windows Media Player\Playback
Windows Components\Windows Media Player\Playback
Windows Components\Windows Media Player\User Interface
Windows Components\Windows Media Player etworking
Windows Components\Windows Messenger
Windows Components\Windows Remote Management (WinRM)\WinRM Client
Windows Components\Windows Remote Management (WinRM)\WinRM Service
Windows Components\Windows Remote Shell
System
Windows Components\Windows Update
Windows Components\Shutdown Options
Windows Components\Shutdown Options
Windows Components\Windows Logon Options
System
System\Shutdown Options
Windows Components\Instant Search
Policy Setting Name
Approved Installation Sites for ActiveX Controls
Specify default category for Add New Programs
Hide the "Add a program from CD-ROM or floppy disk" option
Hide the "Add programs from Microsoft" option
Hide the "Add programs from your network" option
Hide Add New Programs page
Remove Add or Remove Programs
Hide the Set Program Access and Defaults page
Hide Change or Remove Programs page
Go directly to Components Wizard
Remove Support Information
Hide Add/Remove Windows Components page
Prevent access to 16-bit applications
Prevent access to 16-bit applications
Remove Program Compatibility Property Page
Turn Off Application Compatibility Engine
Turn Off Program Compatibility Wizard
Turn Off Program Compatibility Assistant
Turn Off Program Compatibility Assistant
Notify antivirus programs when opening attachments
Trust logic for file attachments
Do not preserve zone information in file attachments
Hide mechanisms to remove zone information
Default risk level for file attachments
Inclusion list for high risk file types
Inclusion list for low file types
Inclusion list for moderate risk file types
Default behavior for AutoRun
Default behavior for AutoRun
Don't set the always do this checkbox
Don't set the always do this checkbox
Turn off Autoplay
Turn off Autoplay
Allow BITS Peercaching
Timeout for inactive BITS jobs
Maximum BITS job download time
Maximum network bandwidth for BITS background transfers
Limit age of items in the BITS Peercache
Limit the BITS Peercache size
Do not allow the computer to act as a BITS Peercaching client
Do not allow the computer to act as a BITS Peercaching server
Maximum network bandwidth used for Peercaching
Maximum number of BITS jobs for this computer
Maximum number of BITS jobs for each user
Maximum number of files allowed in a BITS job
Maximum number of ranges that can be added to the file in a BITS job
Do not allow Import Video to run
Do not allow Import Video to run
Allow Corporate redirection of Customer Experience Improvement uploads
Tag Windows Customer Experience Improvement data with Study Identifier
SSL Cipher Suite Order
Download missing COM components
Download missing COM components
Disable application Sharing
Prevent Control
Prevent Sharing
Prevent Sharing Command Prompts
Prevent Desktop Sharing
Prevent Sharing Explorer windows
Prevent Application Sharing in true color
Disable Audio
Prevent changing DirectSound Audio setting
Disable full duplex Audio
Prevent receiving Video
Prevent sending Video
Limit the bandwidth of Audio and Video
Allow persisting automatic acceptance of Calls
Disable Chat
Disable Whiteboard
Disable NetMeeting 2.x Whiteboard
Disable remote Desktop Sharing
Enable Automatic Configuration
Prevent adding Directory servers
Prevent automatic acceptance of Calls
Prevent changing Call placement method
Disable Directory services
Prevent receiving files
Prevent sending files
Prevent viewing Web directory
Limit the size of sent files
Set the intranet support Web page
Set Call Security options
Disable the Advanced Calling button
Hide the Audio page
Hide the General page
Hide the Security page
Hide the Video page
Hide specified Control Panel items
Force classic Control Panel view
Prohibit access to the Control Panel
Show only specified Control Panel items
Remove Display in Control Panel
Hide Appearance and Themes tab
Hide Desktop tab
Hide Screen Saver tab
Hide Settings tab
Screen Saver
Screen Saver executable name
Password protect the screen saver
Screen Saver timeout
Prevent changing wallpaper
Prohibit Theme color selection
Remove Theme option
Prevent selection of windows and buttons styles
Load a specific visual style file or force Windows Classic
Prohibit selection of font size
Apply the default user logon picture to all users
Assign a default domain for logon
Exclude credential providers
Allow Delegating Default Credentials
Allow Default Credentials with NTLM-only Server Authentication
Allow Delegating Fresh Credentials
Allow Fresh Credentials with NTLM-only Server Authentication
Allow Delegating Saved Credentials
Allow Saved Credentials with NTLM-only Server Authentication
Deny Delegating Default Credentials
Deny Delegating Fresh Credentials
Deny Delegating Saved Credentials
Enumerate administrator accounts on elevation
Require trusted path for credential entry.
Remove Change Password
Remove Lock Computer
Remove Task Manager
Remove Logoff
Allow local activation security check exemptions
Define Activation Security Check exemptions
Enable Active Desktop
Disable Active Desktop
Prohibit changes
Add/Delete items
Prohibit adding items
Prohibit closing items
Prohibit deleting items
Prohibit editing items
Disable all items
Allow only bitmapped wallpaper
Desktop Wallpaper
Enable filter in Find dialog box
Hide Active Directory folder
Maximum size of Active Directory searches
Prohibit User from manually redirecting Profile Folders
Hide and disable all items on the desktop
Remove the Desktop Cleanup Wizard
Hide Internet Explorer icon on desktop
Remove Computer icon on the desktop
Remove My Documents icon on the desktop
Hide Network Locations icon on desktop
Remove Properties from the Computer icon context menu
Remove Properties from the Documents icon context menu
Do not add shares of recently opened documents to Network Locations
Remove Recycle Bin icon from desktop
Remove Properties from the Recycle Bin context menu
Don't save settings at exit
Prevent adding, dragging, dropping and closing the Taskbar's toolbars
Prohibit adjusting desktop toolbars
Treat all digitally signed drivers equally in the driver ranking and selection process
Turn off "Found New Hardware" balloons during device installation
Configure device installation timeout
Do not create system restore point when new device driver installed
Allow remote access to the PnP interface
Do not send a Windows Error Report when a generic driver is installed on a device
Allow administrators to override Device Installation Restriction policies
Allow installation of devices using drivers that match these device setup classes
Prevent installation of devices using drivers that match these device setup classes
Allow installation of devices that match any of these device IDs
Prevent installation of devices that match any of these device IDs
Prevent installation of removable devices
Prevent installation of devices not described by other policy settings
Display a custom message when installation is prevented by policy (balloon title)
Display a custom message when installation is prevented by policy (balloon text)
Allow non-administrators to install drivers for these device setup classes
Configure driver search locations
Turn off Windows Update device driver search prompt
Turn off Windows Update device driver search prompt
Code signing for device drivers
Sets how often a DFS Client discovers DC's
Do not allow Digital Locker to run
Do not allow Digital Locker to run
Disk Diagnostic: Configure custom alert text
Disk Diagnostic: Configure execution level
Turn Off Boot and Resume Optimizations
Turn Off Cache Power Mode
Turn Off Non Volatile Cache Feature
Turn Off Solid State Mode
Enable disk quotas
Enforce disk quota limit
Default quota limit and warning level
Log event when quota limit exceeded
Log event when quota warning level exceeded
Apply policy to removable media
Allow Distributed Link Tracking clients to use domain resources
Connection-Specific DNS Suffix
DNS Servers
Primary DNS Suffix
Register DNS records with connection-specific DNS suffix
Register PTR Records
Dynamic Update
Replace Addresses In Conflicts
Registration Refresh Interval
TTL Set in the A and PTR records
DNS Suffix Search List
Update Security Level
Update Top Level Domain Zones
Primary DNS Suffix Devolution
Turn off Multicast Name Resolution
Allow DNS Suffix Appending to Unqualified Multi-Label Name Queries
Do not allow window animations
Do not allow window animations
Do not allow desktop composition
Do not allow desktop composition
Do not allow Flip3D invocation
Do not allow Flip3D invocation
Specify a default color
Specify a default color
Do not allow color changes
Do not allow color changes
Do not automatically encrypt files moved to encrypted folders
Configure Error Reporting
Display Error Notification
Disable Windows Error Reporting
Disable Windows Error Reporting
Disable Logging
Disable Logging
Do not send additional data
Do not send additional data
Default application reporting settings
List of applications to never report errors for
List of applications to always report errors for
Report operating system errors
Configure Report Archive
Configure Report Archive
Configure Corporate Windows Error Reporting
List of applications to be excluded
List of applications to be excluded
Configure Report Queue
Configure Report Queue
Customize consent settings
Customize consent settings
Ignore custom consent settings
Ignore custom consent settings
Configure Default consent
Configure Default consent
Backup log automatically when full
Log Access
Retain old events
Log File Path
Maximum Log Size (KB)
Log Access
Retain old events
Log File Path
Log Access
Retain old events
Turn on logging
Log File Path
Log Access
Retain old events
Log File Path
Events.asp program
Events.asp program command line parameters
Events.asp URL
Display the menu bar in Windows Explorer
Prevent users from adding files to the root of their Users Files folder.
Turn off common control and window animations
Turn off heap termination on corruption
Configure Corrupted File Recovery Behavior
Selectively allow the evaluation of a symbolic link.
Use localized subfolder names when redirecting Start and My Documents
Do not automatically make redirected folders available offline
Use localized subfolder names when redirecting Start and My Documents
Turn off Details Pane
Turn off Preview Pane
Turn off downloading of game information
Turn off tracking of last play time of games in the Games folder
Disallow selection of Custom Locales
Disallow selection of Custom Locales
Restrict system locales
Restrict user locales
Restrict user locales
Disallow changing of geographic location
Disallow changing of geographic location
Disallow user override of locale settings
Disallow user override of locale settings
Hide Regional and Language Options administrative options
Hide the geographic location option
Hide the select language group options
Hide user locale selection and customization options
Restricts the UI language Windows uses for all logged users
Restricts the UI languages Windows should use for the selected user
Force selected system UI language to overwrite the user UI language
Restrict selection of Windows menus and dialogs language
Century interpretation for Year 2000
Turn off Local Group Policy objects processing
Startup policy processing wait time
Allow Cross-Forest User Policy and Roaming User Profiles
Software Installation policy processing
Disk Quota policy processing
EFS recovery policy processing
Folder Redirection policy processing
Internet Explorer Maintenance policy processing
IP Security policy processing
Registry policy processing
Scripts policy processing
Security policy processing
Wireless policy processing
Wired policy processing
Disallow Interactive Users from generating Resultant Set of Policy data
Disallow Interactive Users from generating Resultant Set of Policy data
Turn off automatic update of ADM files
Turn off background refresh of Group Policy
Remove users ability to invoke machine policy refresh
Enforce Show Policies Only
Group Policy domain controller selection
Group Policy slow link detection
Group Policy slow link detection
Group Policy refresh interval for computers
Group Policy refresh interval for domain controllers
Group Policy refresh interval for users
Default name for new Group Policy objects
Create new Group Policy object links disabled by default
Always use local ADM files for Group Policy Object Editor
Turn off Resultant Set of Policy logging
User Group Policy loopback processing mode
Restrict potentially unsafe HTML Help functions to specified folders
Restrict these programs from being launched from Help
Restrict these programs from being launched from Help
Turn off Active Help
Turn off Untrusted Content
Turn off Help Ratings
Turn off Help Experience Improvement Program
Turn off Windows Online
Turn off Windows HotStart
Turn off Windows HotStart
Restrict Internet communication
Restrict Internet communication
Turn off Automatic Root Certificates Update
Turn off printing over HTTP
Turn off printing over HTTP
Turn off downloading of print drivers over HTTP
Turn off downloading of print drivers over HTTP
Turn off Windows Update device driver searching
Turn off Event Viewer "Events.asp" links
Turn off Help and Support Center "Did you know?" content
Turn off Help and Support Center Microsoft Knowledge Base search
Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com
Turn off Registration if URL connection is referring to Microsoft.com
Turn off Windows Error Reporting
Turn off access to all Windows Update features
Turn off Search Companion content file updates
Turn off Internet File Association service
Turn off Internet File Association service
Turn off Internet download for Web publishing and online ordering wizards
Turn off Internet download for Web publishing and online ordering wizards
Turn off the "Order Prints" picture task
Turn off the "Order Prints" picture task
Turn off the "Publish to Web" task for files and folders
Turn off the "Publish to Web" task for files and folders
Turn off the Windows Messenger Customer Experience Improvement Program
Turn off the Windows Messenger Customer Experience Improvement Program
Turn off Windows Customer Experience Improvement Program
Prevent IIS installation
Audio/Video Player
Carpoint
DHTML Edit Control
Shockwave Flash
Investor
Menu Controls
Microsoft Agent
Microsoft Chat
MSNBC
NetShow File Transfer Control
Microsoft Scriptlet Component
Microsoft Survey Control
Allow active content from CDs to run on user machines
Allow active content from CDs to run on user machines
Check for server certificate revocation
Check for server certificate revocation
Turn off ClearType
Turn off ClearType
Do not allow resetting Internet Explorer settings
Do not allow resetting Internet Explorer settings
Check for signatures on downloaded programs
Check for signatures on downloaded programs
Allow third-party browser extensions
Allow third-party browser extensions
Allow Install On Demand (Internet Explorer)
Allow Install On Demand (Internet Explorer)
Allow Install On Demand (except Internet Explorer)
Allow Install On Demand (except Internet Explorer)
Automatically check for Internet Explorer updates
Automatically check for Internet Explorer updates
Allow software to run or install even if the signature is invalid
Allow software to run or install even if the signature is invalid
Play animations in web pages
Play animations in web pages
Play sounds in web pages
Play sounds in web pages
Play videos in web pages
Play videos in web pages
Turn off Profile Assistant
Turn off Profile Assistant
Do not save encrypted pages to disk
Do not save encrypted pages to disk
Empty Temporary Internet Files folder when browser is closed
Empty Temporary Internet Files folder when browser is closed
Turn on inline AutoComplete for Web addresses
Turn off inline AutoComplete in Windows Explorer
Turn on script debugging
Turn off friendly http error messages
Turn off page transitions
Turn on the display of a notification about every script error
Turn off smooth scrolling
Turn off configuring underline links
Subscription Limits
Disable adding channels
Disable adding schedules for offline pages
Disable offline page hit logging
Disable channel user interface completely
Disable editing and creating of schedule groups
Disable editing schedules for offline pages
Disable removing channels
Disable removing schedules for offline pages
Disable all scheduled offline pages
Disable downloading of site subscription content
Prevent setting of the code download path for each machine
Prevent users from choosing default text size
Disable the Advanced page
Disable the Advanced page
Disable the Connections page
Disable the Connections page
Disable the Content page
Disable the Content page
Disable the General page
Disable the General page
Disable the Privacy page
Disable the Privacy page
Disable the Programs page
Disable the Programs page
Disable the Security page
Disable the Security page
Send internationalized domain names
Send internationalized domain names
Use UTF-8 for mailto links
Use UTF-8 for mailto links
Prevent ignoring certificate errors
Prevent ignoring certificate errors
Turn off sending URLs as UTF-8(requires restart)
Prevent users from configuring background color
Prevent users from configuring text color
Prevent the use of Windows colors
Prevent the configuration of cipher strength update information URLs
Turn on the Internet Connection Wizard Auto Detect
Add-on List
Add-on List
Deny all add-ons unless specifically allowed in the Add-on List
Deny all add-ons unless specifically allowed in the Add-on List
All Processes
All Processes
Process List
Process List
Admin-approved behaviors
Admin-approved behaviors
All Processes
All Processes
Internet Explorer Processes
Process List
Process List
All Processes
All Processes
Process List
Process List
All Processes
All Processes
Process List
Process List
All Processes
All Processes
Process List
Process List
All Processes
All Processes
Process List
Process List
All Processes
All Processes
Process List
Process List
All Processes
All Processes
Process List
Process List
All Processes
All Processes
Process List
Process List
All Processes
All Processes
Process List
Process List
All Processes
All Processes
Process List
Process List
All Processes
All Processes
Process List
Process List
All Processes
All Processes
Process List
Process List
Internet Zone Restricted Protocols
Internet Zone Restricted Protocols
Intranet Zone Restricted Protocols
Intranet Zone Restricted Protocols
Local Machine Zone Restricted Protocols
Local Machine Zone Restricted Protocols
Restricted Sites Zone Restricted Protocols
Restricted Sites Zone Restricted Protocols
Trusted Sites Zone Restricted Protocols
Trusted Sites Zone Restricted Protocols
Turn off Crash Detection
Turn off Crash Detection
Do not allow users to enable or disable add-ons
Do not allow users to enable or disable add-ons
Add a specific list of search providers to the user's search provider list
Add a specific list of search providers to the user's search provider list
Turn on menu bar by default
Turn on menu bar by default
Disable caching of Auto-Proxy scripts
Disable external branding of Internet Explorer
Disable changing Advanced page settings
Customize User Agent String
Customize User Agent String
Use Automatic Detection for dial-up connections
Prevent "Fix settings" functionality
Prevent "Fix settings" functionality
Turn off Managing Phishing filter
Turn off Managing Phishing filter
Turn off the Security Settings Check feature
Turn off the Security Settings Check feature
Moving the menu bar above the navigation bar
Turn off managing Pop-up filter level
Turn off managing Pop-up filter level
Display error message on proxy script download failure
Turn on Compatibility Logging
Turn on Compatibility Logging
Enforce Full Screen Mode
Enforce Full Screen Mode
Disable importing and exporting of favorites and feeds
Turn off page zooming functionality
Turn off page zooming functionality
Identity Manager: Prevent users from using Identities
Configure Media Explorer Bar
Turn off "Delete Browsing History" functionality
Turn off "Delete Browsing History" functionality
Turn off "Delete Forms" functionality
Turn off "Delete Forms" functionality
Turn off "Delete Passwords" functionality
Turn off "Delete Passwords" functionality
Prevent performance of First Run Customize settings
Prevent performance of First Run Customize settings
Turn off displaying the Internet Explorer Help Menu
Turn off displaying the Internet Explorer Help Menu
Prevent the Internet Explorer search box from displaying
Prevent the Internet Explorer search box from displaying
Disable Automatic Install of Internet Explorer components
Turn off Quick Tabs functionality
Turn off Quick Tabs functionality
Restrict changing the default search provider
Restrict changing the default search provider
Disable showing the splash screen
Turn off tabbed browsing
Turn off tabbed browsing
Turn off configuration of tabbed browsing pop-up behavior
Turn off configuration of tabbed browsing pop-up behavior
Disable Periodic Check for Internet Explorer software updates
Turn off configuration of window reuse
Turn off configuration of window reuse
Configure Outlook Express
Pop-up allow list
Pop-up allow list
Disable changing accessibility settings
Disable changing Automatic Configuration settings
Disable changing Automatic Configuration settings
Disable changing Temporary Internet files settings
Disable changing Calendar and Contact settings
Disable changing certificate settings
Disable changing default browser check
Disable changing color settings
Disable changing connection settings
Disable changing connection settings
Disable Internet Connection wizard
Disable changing font settings
Disable AutoComplete for forms
Turn on the auto-complete feature for user names and passwords on forms
Disable "Configuring History"
Disable "Configuring History"
Disable changing home page settings
Disable changing language settings
Disable changing link color settings
Disable changing Messaging settings
Turn off Managing Pop-up Allow list
Turn off Managing Pop-up Allow list
Turn off pop-up management
Turn off pop-up management
Disable changing Profile Assistant settings
Disable changing proxy settings
Disable changing proxy settings
Disable changing ratings settings
Disable the Reset Web Settings feature
Prevent the deletion of temporary Internet files and cookies
Prevent the deletion of temporary Internet files and cookies
Turn off the auto-complete feature for web addresses
Search: Disable Find Files via F3 within the browser
Search: Disable Search Customization
Security Zones: Use only machine settings
Security Zones: Do not allow users to change policies
Security Zones: Do not allow users to add/delete sites
Disable software update shell notifications on program launch
Restrict search providers to a specific list of providers
Restrict search providers to a specific list of providers
Prevent participation in the Customer Experience Improvement Program
Prevent participation in the Customer Experience Improvement Program
Turn off configuration of default behavior of new tab creation
Turn off configuration of default behavior of new tab creation
Make proxy settings per-machine (rather than per-user)
Allow video and animation on a webpage that does not use external media player (through dynsrc attribute)
Allow Scriptlets
Allow Scriptlets
Turn Off First-Run Opt-In
Allow status bar updates via script
Turn on Protected Mode
Web Browser Applications
Disable WinFX Runtime Components Setup
Loose or un-compiled XAML files
XPS files
XPS files
Access data sources across domains
Allow active scripting
Allow META REFRESH
Allow META REFRESH
Allow cut, copy or paste operations from the clipboard via script
Allow binary and script behaviors
Use Pop-up Blocker
Use Pop-up Blocker
Display mixed content
Download signed ActiveX controls
Download unsigned ActiveX controls
Allow drag and drop or copy and paste files
Allow file downloads
Allow font downloads
Allow installation of desktop items
Java permissions
Java permissions
Launching applications and files in an IFRAME
Logon options
Logon options
Open files based on content, not file extension
Navigate sub-frames across different domains
Allow active content over restricted protocols to access my computer
Do not prompt for client certificate selection when no certificates or only one certificate exists.
Automatic prompting for ActiveX controls
Automatic prompting for file downloads
Run ActiveX controls and plugins
Script ActiveX controls marked safe for scripting
Initialize and script ActiveX controls not marked as safe
Scripting of Java applets
Run .NET Framework-reliant components signed with Authenticode
Software channel permissions
Submit non-encrypted form data
Run .NET Framework-reliant components not signed with Authenticode
Userdata persistence
Allow script-initiated windows without size or position constraints
Web sites in less privileged Web content zones can navigate into this zone
Allow Scriptlets
Allow Scriptlets
XPS files
XPS files
Allow META REFRESH
Allow META REFRESH
Use Pop-up Blocker
Use Pop-up Blocker
Java permissions
Java permissions
Logon options
Logon options
Allow Scriptlets
Allow Scriptlets
XPS files
XPS files
Allow META REFRESH
Allow META REFRESH
Use Pop-up Blocker
Use Pop-up Blocker
Java permissions
Java permissions
Logon options
Logon options
Allow Scriptlets
Allow Scriptlets
XPS files
XPS files
Allow META REFRESH
Allow META REFRESH
Use Pop-up Blocker
Use Pop-up Blocker
Java permissions
Java permissions
Logon options
Logon options
Allow Scriptlets
Allow Scriptlets
XPS files
XPS files
Allow META REFRESH
Allow META REFRESH
Use Pop-up Blocker
Use Pop-up Blocker
Java permissions
Java permissions
Logon options
Logon options
Allow Scriptlets
Allow Scriptlets
XPS files
XPS files
Allow META REFRESH
Allow META REFRESH
Use Pop-up Blocker
Use Pop-up Blocker
Java permissions
Java permissions
Logon options
Logon options
Allow Scriptlets
Allow Scriptlets
XPS files
XPS files
Allow META REFRESH
Allow META REFRESH
Use Pop-up Blocker
Use Pop-up Blocker
Java permissions
Java permissions
Logon options
Logon options
Allow Scriptlets
Allow Scriptlets
XPS files
XPS files
Allow META REFRESH
Allow META REFRESH
Use Pop-up Blocker
Use Pop-up Blocker
Java permissions
Java permissions
Logon options
Logon options
Intranet Sites: Include all local (intranet) sites not listed in other zones
Intranet Sites: Include all local (intranet) sites not listed in other zones
Locked-Down Internet Zone Template
Locked-Down Internet Zone Template
Internet Zone Template
Internet Zone Template
Locked-Down Intranet Zone Template
Locked-Down Intranet Zone Template
Intranet Zone Template
Intranet Zone Template
Locked-Down Local Machine Zone Template
Locked-Down Local Machine Zone Template
Local Machine Zone Template
Local Machine Zone Template
Locked-Down Restricted Sites Zone Template
Locked-Down Restricted Sites Zone Template
Restricted Sites Zone Template
Restricted Sites Zone Template
Locked-Down Trusted Sites Zone Template
Locked-Down Trusted Sites Zone Template
Trusted Sites Zone Template
Trusted Sites Zone Template
Intranet Sites: Include all sites that bypass the proxy server
Intranet Sites: Include all sites that bypass the proxy server
Intranet Sites: Include all network paths (UNCs)
Intranet Sites: Include all network paths (UNCs)
Site to Zone Assignment List
Site to Zone Assignment List
Turn on automatic detection of the intranet
Turn on automatic detection of the intranet
Turn on Information bar notification for intranet content
Turn on Information bar notification for intranet content
Allow Scriptlets
Allow Scriptlets
XPS files
XPS files
Allow META REFRESH
Allow META REFRESH
Use Pop-up Blocker
Use Pop-up Blocker
Java permissions
Java permissions
Logon options
Logon options
Allow Scriptlets
Allow Scriptlets
XPS files
XPS files
Allow META REFRESH
Allow META REFRESH
Use Pop-up Blocker
Use Pop-up Blocker
Java permissions
Java permissions
Logon options
Logon options
Prevent users from configuring the hover color
Prevent users from configuring the color of links that have not yet been clicked
Prevent users from configuring the color of links that have already been clicked
Turn on the hover color option
File menu: Disable closing the browser and Explorer windows
File menu: Disable Save As... menu option
File menu: Disable Save As Web Page Complete
File menu: Disable New menu option
File menu: Disable Open menu option
Help menu: Remove 'Send Feedback' menu option
Help menu: Remove 'For Netscape Users' menu option
Help menu: Remove 'Tip of the Day' menu option
Help menu: Remove 'Tour' menu option
Disable Context menu
Hide Favorites menu
Disable Open in New Window menu option
Disable Save this program to disk option
Tools menu: Disable Internet Options... menu option
View menu: Disable Full Screen menu option
View menu: Disable Source menu option
Turn off automatic image resizing
Turn off picture display
Allow the display of image download placeholders
Turn off smart image dithering
File size limits for Local Machine zone
File size limits for Intranet zone
File size limits for Trusted Sites zone
File size limits for Internet zone
File size limits for Restricted Sites zone
Allow the printing of background colors and images
Turn off background sync for feeds
Turn off background sync for feeds
Turn off downloading of enclosures
Turn off downloading of enclosures
Turn off addition and removal of feeds
Turn off addition and removal of feeds
Turn off feed discovery
Turn off feed discovery
Turn off the feed list
Turn off the feed list
All Processes
All Processes
Process List
Process List
Prevent configuration of search from the Address bar
Enable Native XMLHttp Support
Enable Native XMLHttp Support
Turn on Automatic Signup
Turn off toolbar upgrade tool
Turn off toolbar upgrade tool
Disable customizing browser toolbars
Disable customizing browser toolbar buttons
Configure Toolbar Buttons
Turn off configuring the update check interval (in days)
Turn off changing the URL to be displayed for checking updates to Internet Explorer and Internet Tools
Turn off handwriting recognition error reporting
Turn off handwriting recognition error reporting
Turn off automatic learning
Turn off automatic learning
Turn off handwriting personalization
Turn off handwriting personalization
Do not allow manual configuration of iSNS servers
Do not allow manual configuration of target portals
Do not allow manual configuration of discovered targets
Do not allow adding new targets via manual configuration
Do not allow changes to initiator iqn name
Do not allow additional session logins
Do not allow changes to initiator CHAP secret
Do not allow connections without IPSec
Do not allow sessions without mutual CHAP
Do not allow sessions without one way CHAP
Define host name-to-Kerberos realm mappings
Define interoperable Kerberos V5 realm settings
Require strict KDC validation
Configure Scenario Execution Level
Turn on Mapper I/O (LLTDIO) driver
Turn on Responder (RSPNDR) driver
Do not process the legacy run list
Do not process the legacy run list
Do not process the run once list
Do not process the run once list
Always use classic logon
Don't display the Getting Started welcome screen at logon
Run these programs at user logon
Run these programs at user logon
Always wait for the network at computer startup and logon
Remove Boot / Shutdown / Logon / Logoff status messages
Don't display the Getting Started welcome screen at logon
Verbose vs normal status messages
Hide entry points for Fast User Switching
Turn off Windows Startup Sound
Do not allow Windows Media Center to run
Do not allow Windows Media Center to run
Restrict the user from entering author mode
Restrict users to the explicitly permitted list of snap-ins
Extended View (Web View)
ActiveX Control
Link to Web Address
AppleTalk Routing
Authorization Manager
Certification Authority Policy Settings
Connection Sharing (NAT)
DCOM Configuration Extension
Device Manager
DHCP Relay Management
Event Viewer
Event Viewer (Windows Vista)
IAS Logging
IGMP Routing
IP Routing
IPX RIP Routing
IPX Routing
IPX SAP Routing
Logical and Mapped Drives
OSPF Routing
Public Key Policies
RAS Dialin - User Node
Remote Access
Removable Storage
RIP Routing
Routing
Send Console Message
Service Dependencies
Shared Folders Ext
SMTP Protocol
SNMP
System Properties
Group Policy Management
Group Policy Object Editor
Group Policy tab for Active Directory Tools
Resultant Set of Policy snap-in
Administrative Templates (Computers)
Administrative Templates (Users)
Folder Redirection
Internet Explorer Maintenance
IP Security Policy Management
Windows Firewall with Advanced Security
NAP Client Configuration
Remote Installation Services
Scripts (Startup/Shutdown)
Scripts (Logon/Logoff)
Security Settings
Software Installation (Computers)
Software Installation (Users)
Wired Network (IEEE 802.3) Policies
Wireless Network (IEEE 802.11) Policies
Administrative Templates (Computers)
Administrative Templates (Users)
Folder Redirection
Internet Explorer Maintenance
Scripts (Startup/Shutdown)
Scripts (Logon/Logoff)
Security Settings
Software Installation (Computers)
Software Installation (Users)
Active Directory Domains and Trusts
Active Directory Sites and Services
Active Directory Users and Computers
ADSI Edit
Certification Authority
Certificates
Certificate Templates
Component Services
Computer Management
Device Manager
Distributed File System
Disk Defragmenter
Disk Management
Event Viewer
Event Viewer (Windows Vista)
Failover Clusters Manager
FAX Service
FrontPage Server Extensions
Internet Authentication Service (IAS)
Internet Information Services
Indexing Service
IP Security Policy Management
IP Security Monitor
Local Users and Groups
NAP Client Configuration
.Net Framework Configuration
Performance Logs and Alerts
QoS Admission Control
Remote Desktops
Routing and Remote Access
Removable Storage Management
Security Configuration and Analysis
Security Templates
Services
Shared Folders
System Information
Telephony
Terminal Services Configuration
TPM Management
Windows Firewall with Advanced Security
Wireless Monitor
WMI Control
Turn off Windows Mobility Center
Turn off Windows Mobility Center
Turn off Windows presentation settings
Turn off Windows presentation settings
Do not allow Windows Movie Maker to run
Do not allow Windows Movie Maker to run
Turn off Windows Movie Maker online Web links
Turn off Windows Movie Maker online Web links
Turn off Windows Movie Maker automatic codec downloads
Turn off Windows Movie Maker automatic codec downloads
Turn off Windows Movie Maker saving to online video hosting provider
Turn off Windows Movie Maker saving to online video hosting provider
Microsoft Support Diagnostic Tool: Configure execution level
Microsoft Support Diagnostic Tool: Restrict tool download
Enable user to browse for source while elevated
Enable user to use media source while elevated
Enable user to patch elevated products
Always install with elevated privileges
Always install with elevated privileges
Prohibit Use of Restart Manager
Remove browse dialog box for new source
Prohibit Flyweight Patching
Disable logging via package settings
Prevent removable media source for any install
Disable Windows Installer
Prohibit patching
Prohibit rollback
Prohibit rollback
Allow admin to install from Terminal Services session
Enable user control over installs
Prohibit non-administrators from applying vendor signed updates
Prohibit removal of updates
Turn off creation of System Restore Checkpoints
Prohibit User Installs
Enforce upgrade component rules
Baseline file cache maximum size
Logging
Disable IE security prompt for Windows Installer scripts
Search order
Cache transforms in secure location on workstation
Contact PDC on logon failure
Initial DC Discovery Retry Setting for Background Callers
Maximum DC Discovery Retry Interval Setting for Background Callers
Final DC Discovery Retry Setting for Background Callers
Positive Periodic DC Cache Refresh for Background Callers
Log File Debug Output Level
Expected dial-up delay on logon
Maximum Log File Size
Negative DC Discovery Cache Setting
Netlogon share compatibility
Positive Periodic DC Cache Refresh for Non-Background Callers
Scavenge Interval
Site Name
Sysvol share compatibility
Location of the DCs hosting a domain with single label DNS name
Automated Site Coverage by the DC Locator DNS SRV Records
DC Locator DNS records not registered by the DCs
Refresh Interval of the DC Locator DNS Records
TTL Set in the DC Locator DNS Records
Sites Covered by the GC Locator DNS SRV Records
Priority Set in the DC Locator DNS SRV Records
Weight Set in the DC Locator DNS SRV Records
Sites Covered by the Application Directory Partition Locator DNS SRV Records
Sites Covered by the DC Locator DNS SRV Records
Dynamic Registration of the DC Locator DNS Records
Try Next Closest Site
Force Rediscovery Interval
Domain Controller Address Type Returned
Prohibit adding and removing components for a LAN or remote access connection
Prohibit access to the Advanced Settings item on the Advanced menu
Prohibit TCP/IP advanced configuration
Prohibit installation and configuration of Network Bridge on your DNS domain network
Prohibit Enabling/Disabling components of a LAN connection
Ability to delete all user remote access connections
Prohibit deletion of remote access connections
Prohibit access to the Remote Access Preferences item on the Advanced menu
Enable Windows 2000 Network Connections settings for Administrators
Turn off notifications when a connection has only limited or no connectivity
Prohibit access to properties of components of a LAN connection
Ability to Enable/Disable a LAN connection
Prohibit access to properties of a LAN connection
Prohibit access to the New Connection Wizard
Prohibit use of Internet Connection Firewall on your DNS domain network
Ability to change properties of an all user remote access connection
Prohibit access to properties of components of a remote access connection
Prohibit connecting and disconnecting a remote access connection
Prohibit changing properties of a private remote access connection
Ability to rename all user remote access connections
Ability to rename LAN connections or remote access connections available to all users
Ability to rename LAN connections
Prohibit renaming private remote access connections
Prohibit use of Internet Connection Sharing on your DNS domain network
Prohibit viewing of status for an active connection
Turn off Connect to a Network Projector
Turn off Connect to a Network Projector
Subfolders always available offline
Administratively assigned offline files
Administratively assigned offline files
Non-default server disconnect actions
Non-default server disconnect actions
Default cache size
Allow or Disallow use of the Offline Files feature
Encrypt the Offline Files cache
Event logging level
Event logging level
Files not cached
Action on server disconnect
Action on server disconnect
Prevent use of Offline Files folder
Prevent use of Offline Files folder
Prohibit user configuration of Offline Files
Prohibit user configuration of Offline Files
Remove 'Make Available Offline'
Remove 'Make Available Offline'
Prohibit 'Make Available Offline' for these file and folders
Prohibit 'Make Available Offline' for these file and folders
Turn off reminder balloons
Turn off reminder balloons
At logoff, delete local copy of userΓÇÖs offline files
Reminder balloon frequency
Reminder balloon frequency
Initial reminder balloon lifetime
Initial reminder balloon lifetime
Reminder balloon lifetime
Reminder balloon lifetime
Configure Slow link speed
Synchronize all offline files before logging off
Synchronize all offline files before logging off
Synchronize all offline files when logging on
Synchronize all offline files when logging on
Synchronize offline files before suspend
Synchronize offline files before suspend
Turn on economical application of administratively assigned Offline Files
Configure slow-link mode
Limit disk space used by offline files
Turn off Microsoft Peer-to-Peer Networking Services
Turn off Multicast Bootstrap
Set the Seed Server
Set the Seed Server
Set the Seed Server
Disable password strength validation for Peer Grouping
Make Parental Controls control panel visible on a Domain
Detect application install failures
Detect applications unable to launch installers under UAC
Detect application failures caused by deprecated Windows DLLs or COM objects
Detect application installers that need to be run as administrator
Notify blocked drivers
Turn off Tablet PC Pen Training
Turn off Tablet PC Pen Training
Turn off access to the performance center core section
Turn off access to the performance center core section
Turn off access to the solutions to performance problems section
Turn off access to the solutions to performance problems section
Turn off access to the OEM and Microsoft branding section
Turn off access to the OEM and Microsoft branding section
Critical Battery Notification Action
Low Battery Notification Action
Critical Battery Notification Level
Low Battery Notification Level
Turn Off Low Battery User Notification
Select the Power Button Action (Plugged In)
Select the Sleep Button Action (Plugged In)
Select the Lid Switch Action (Plugged In)
Select the Start Menu Power Button Action (Plugged In)
Select the Power Button Action (On Battery)
Select the Sleep Button Action (On Battery)
Select the Lid Switch Action (On Battery)
Select the Start Menu Power Button Action (On Battery)
Turn Off the Hard Disk (Plugged In)
Turn Off the Hard Disk (On Battery)
Specify a Custom Active Power Plan
Select an Active Power Plan
Prompt for password on resume from hibernate / suspend
Turn on Applications to Prevent Sleep Transitions (Plugged In)
Specify the System Hibernate Timeout (Plugged In)
Require a Password When a Computer Wakes (Plugged In)
Specify the System Sleep Timeout (Plugged In)
Turn Off Hybrid Sleep (Plugged In)
Turn on Applications to Prevent Sleep Transitions (On Battery)
Specify the System Hibernate Timeout (On Battery)
Require a Password When a Computer Wakes (On Battery)
Specify the System Sleep Timeout (On Battery)
Turn Off Hybrid Sleep (On Battery)
Turn Off Adaptive Display Timeout (Plugged In)
Turn Off Adaptive Display Timeout (On Battery)
Turn Off the Display (Plugged In)
Turn Off the Display (On Battery)
Allow Standby States (S1-S3) When Sleeping (Plugged In)
Allow Standby States (S1-S3) When Sleeping (On Battery)
Do not turn off system power after a Windows system shutdown has occurred.
Prevent restoring previous versions from backups
Prevent restoring previous versions from backups
Hide previous versions list for local files
Hide previous versions list for local files
Prevent restoring local previous versions
Prevent restoring local previous versions
Hide previous versions list for remote files
Hide previous versions list for remote files
Prevent restoring remote previous versions
Prevent restoring remote previous versions
Hide previous versions of files on backup location
Hide previous versions of files on backup location
Web-based printing
Automatically publish new printers in Active Directory
Custom support URL in the Printers folder's left pane
Add Printer wizard - Network scan page (Managed network)
Browse the network to find printers
Always render print jobs on the server
Allow pruning of published printers
Browse a common web site to find printers
Disallow installation of printers using kernel-mode drivers
Prevent addition of printers
Prevent deletion of printers
Add Printer wizard - Network scan page (Unmanaged network)
Only use Package Point and print
Package Point and print - Approved servers
Computer location
Pre-populate printer search location text
Point and Print Restrictions
Default Active Directory path when searching for printers
Printer browsing
Prune printers that are not automatically republished
Directory pruning interval
Directory pruning priority
Directory pruning retry
Log directory pruning retry events
Allow printers to be published
Allow Print Spooler to accept client connections
Check published state
Hide the Programs Control Panel
Hide "Programs and Features" page
Hide "Installed Updates" page
Hide "Set Program Access and Computer Defaults" page
Hide "Windows Marketplace"
Hide "Get Programs" page
Hide "Windows Features"
Best effort service type
Controlled load service type
Guaranteed service type
Network control service type
Qualitative service type
Limit outstanding packets
Limit reservable bandwidth
Set timer resolution
Non-conforming packets
Enable Persistent Time Stamp
Report unplanned shutdown events
Activate Shutdown Event Tracker System State Data feature
Display Shutdown Event Tracker
Turn on session logging
Allow only Vista or later connections
Turn on bandwidth optimization
Customize Warning Messages
Solicited Remote Assistance
Offer Remote Assistance
Time (in seconds) to force reboot
Time (in seconds) to force reboot
CD and DVD: Deny read access
CD and DVD: Deny read access
CD and DVD: Deny write access
CD and DVD: Deny write access
Custom Classes: Deny read access
Custom Classes: Deny read access
Custom Classes: Deny write access
Custom Classes: Deny write access
Floppy Drives: Deny read access
Floppy Drives: Deny read access
Floppy Drives: Deny write access
Floppy Drives: Deny write access
Removable Disks: Deny read access
Removable Disks: Deny read access
Removable Disks: Deny write access
Removable Disks: Deny write access
All Removable Storage classes: Deny all access
All Removable Storage classes: Deny all access
Tape Drives: Deny read access
Tape Drives: Deny read access
Tape Drives: Deny write access
Tape Drives: Deny write access
WPD Devices: Deny read access
WPD Devices: Deny read access
WPD Devices: Deny write access
WPD Devices: Deny write access
All Removable Storage: Allow direct access in remote sessions
RPC Endpoint Mapper Client Authentication
Propagation of extended error information
Ignore Delegation Failure
Minimum Idle Connection Timeout for RPC/HTTP connections
Restrictions for Unauthenticated RPC clients
RPC Troubleshooting State Information
Maximum wait time for Group Policy scripts
Run legacy logon scripts hidden
Run logoff scripts visible
Run logon scripts synchronously
Run logon scripts synchronously
Run logon scripts visible
Run shutdown scripts visible
Run startup scripts asynchronously
Run startup scripts visible
Allow logon scripts when NetBIOS or WINS is disabled
Allow indexing of encrypted files
Allow using diacritics
Indexer data location
Prevent indexing e-mail attachments
Prevent indexing files in Offline Files cache
Prevent indexing Microsoft Office Outlook
Prevent indexing public folders
Prevent indexing uncached Exchange folders
Prevent displaying advanced indexing options in the Control Panel
Turn on Security Center (Domain PCs only)
Specify Windows Service Pack installation file location
Specify Windows installation file location
Allow DFS roots to be published
Allow shared folders to be published
Prevent users from sharing files within their profile.
Prevent access to the command prompt
Prevent access to registry editing tools
Run only specified Windows applications
Don't run specified Windows applications
Do not display the Welcome Center at user logon
Turn off Windows Sidebar
Turn off Windows Sidebar
Disable unpacking and installation of gadgets that are not digitally signed.
Disable unpacking and installation of gadgets that are not digitally signed.
Turn Off User Installed Windows Sidebar Gadgets
Turn Off User Installed Windows Sidebar Gadgets
Override the More Gadgets Link
Override the More Gadgets Link
Delete data from devices running Microsoft firmware when a user logs off from the computer.
Delete data from devices running Microsoft firmware when a user logs off from the computer.
Turn off Windows SideShow
Turn off Windows SideShow
Turn off automatic wake
Turn off automatic wake
Require a PIN to access data on devices running Microsoft firmware
Require a PIN to access data on devices running Microsoft firmware
Allow certificates with no extended key usage certificate attribute
Allow Integrated Unblock screen to be displayed at the time of logon
Filter duplicate logon certificates
Force the reading of all certificates from the smart card
Allow signature keys valid for Logon
Allow time invalid certificates
Turn on certificate propagation from smart card
Configure root certificate clean up
Turn on root certificate propagation from smart card
Display string when smart card is blocked
Reverse the subject name stored in a certificate when displaying
Allow user name hint
Communities
Permitted Managers
Traps for public community
Do not allow Sound Recorder to run
Do not allow Sound Recorder to run
Clear the recent programs list for new users
Remove Games link from Start Menu
Remove Search Computer link
Do not search files
Do not search Internet
Do not search programs
Do not search communications
Remove user folder link from Start Menu
Use folders instead of library
Add the Run command to the Start Menu
Show QuickLaunch on Taskbar
Clear history of recently opened documents on exit
Add Logoff to the Start Menu
Gray unavailable Windows Installer programs Start Menu shortcuts
Turn off personalized menus
Lock the Taskbar
Add "Run in Separate Memory Space" check box to Run dialog box
Turn off notification area cleanup
Remove Balloon Tips on Start Menu items
Remove Drag-and-drop context menus on the Start Menu
Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commands
Remove common program groups from Start Menu
Remove Favorites menu from Start Menu
Remove Search link from Start Menu
Remove frequent programs list from the Start Menu
Remove Help menu from Start Menu
Turn off user tracking
Remove All Programs list from the Start menu
Remove Network Connections from Start Menu
Remove pinned programs list from the Start Menu
Do not keep history of recently opened documents
Remove Recent Items menu from Start Menu
Do not use the search-based method when resolving shell shortcuts
Do not use the tracking-based method when resolving shell shortcuts
Remove Run menu from Start Menu
Remove programs on Settings menu
Prevent changes to Taskbar and Start Menu Settings
Remove Default Programs link from the Start menu.
Remove Documents icon from Start Menu
Remove Music icon from Start Menu
Remove Network icon from Start Menu
Remove Pictures icon from Start Menu
Remove user's folders from the Start Menu
Force classic Start Menu
Remove Clock from the system notification area
Prevent grouping of taskbar items
Do not display any custom toolbars in the taskbar
Remove access to the context menus for the taskbar
Hide the notification area
Remove user name from Start Menu
Remove links and access to Windows Update
Remove the "Undock PC" button from the Start Menu
Remove Logoff on the Start Menu
Turn on Accounting for WSRM
Set the Email IDs to which notifications are to be sent
Set the Time interval in minutes for logging accounting data
Set the SMTP Server used to send notifications
Turn off Configuration
Turn off System Restore
Turn off AutoComplete integration with Input Panel
Turn off AutoComplete integration with Input Panel
Prevent Input Panel tab from appearing
Prevent Input Panel tab from appearing
For tablet pen input, donΓÇÖt show the Input Panel icon
For tablet pen input, donΓÇÖt show the Input Panel icon
For touch input, donΓÇÖt show the Input Panel icon
For touch input, donΓÇÖt show the Input Panel icon
Turn off password security in Input Panel
Turn off password security in Input Panel
Switch to the Simplified Chinese (PRC) gestures
Switch to the Simplified Chinese (PRC) gestures
Include rarely used Chinese, Kanji, or Hanja characters
Include rarely used Chinese, Kanji, or Hanja characters
Turn off tolerant and Z-shaped scratch-out gestures
Turn off tolerant and Z-shaped scratch-out gestures
Do not allow Inkball to run
Do not allow Inkball to run
Do not allow Windows Journal to be run
Do not allow Windows Journal to be run
Do not allow printing to Journal Note Writer
Do not allow printing to Journal Note Writer
Do not allow Snipping Tool to run
Do not allow Snipping Tool to run
Do not allow Sticky Notes to be run
Do not allow Sticky Notes to be run
Turn off pen feedback
Turn off pen feedback
Prevent Back-ESC mapping
Prevent Back-ESC mapping
Prevent launch an application
Prevent launch an application
Prevent press and hold
Prevent press and hold
Turn off hardware buttons
Turn off hardware buttons
Prevent Flicks Learning Mode
Prevent Flicks Learning Mode
Prevent flicks
Prevent flicks
Remove the battery meter
Remove the networking icon
Remove the volume control icon
Lock all taskbar settings
Prevent users from adding or removing toolbars
Prevent users from rearranging toolbars
Turn off all balloon notifications
Prevent users from moving taskbar to another screen dock location
Prevent users from resizing the taskbar
Turn off taskbar thumbnails
Prohibit Browse
Prohibit Browse
Hide Advanced Properties Checkbox in Add Scheduled Task Wizard
Hide Advanced Properties Checkbox in Add Scheduled Task Wizard
Prohibit Drag-and-Drop
Prohibit Drag-and-Drop
Prevent Task Run or End
Prevent Task Run or End
Hide Property Pages
Hide Property Pages
Prohibit New Task Creation
Prohibit New Task Creation
Prohibit Task Deletion
Prohibit Task Deletion
Do not allow passwords to be saved
Do not allow passwords to be saved
Set client connection encryption level
Always prompt client for password upon connection
Require use of specific security layer for remote (RDP) connections
Require user authentication using RDP 6.0 for remote connections
Server Authentication Certificate Template
Set TS Gateway server authentication method
Enable connection through TS Gateway
Set TS Gateway server address
Automatic reconnection
Limit maximum color depth
Allow users to connect remotely using Terminal Services
Enforce Removal of Remote Desktop Wallpaper
Deny logoff of an administrator logged in to the console session
Configure keep-alive connection interval
Use the specified Terminal Server license servers
Display notifications about TS Licensing problems that affect the Terminal Server
Set the Terminal Server licensing mode
Limit number of connections
Remove "Disconnect" option from Shut Down dialog
Remove Windows Security item from Start menu
Set rules for remote control of Terminal Services user sessions
Set rules for remote control of Terminal Services user sessions
Restrict Terminal Services users to a single remote session
Start a program on connection
Start a program on connection
Do not allow local administrators to customize permissions
Always show desktop on connection
Set TS User Home Directory
Set path for TS Roaming Profiles
License Server Security Group
Prevent License Upgrade
Allow audio redirection
Do not allow clipboard redirection
Do not allow COM port redirection
Do not set default client printer to be default printer in a session
Do not allow drive redirection
Do not allow LPT port redirection
Do not allow supported Plug and Play device redirection
Do not allow client printer redirection
Terminal Server Fallback Printer Driver Behavior
Do not allow smart card device redirection
Allow time zone redirection
Require secure RPC communication
Join Session Directory
Session Directory Cluster Name
Terminal Server IP Address Redirection
Session Directory Server
Terminate session when time limits are reached
Terminate session when time limits are reached
Set time limit for disconnected sessions
Set time limit for disconnected sessions
Set time limit for active but idle Terminal Services sessions
Set time limit for active but idle Terminal Services sessions
Set time limit for active Terminal Services sessions
Set time limit for active Terminal Services sessions
Allow reconnection from original client only
Allow reconnection from original client only
Do not delete temp folder upon exit
Do not use temporary folders per session
Turn off the display of thumbnails and only display icons.
Turn off the display of thumbnails and only display icons on network folders
Turn off Tablet PC touch input
Turn off Tablet PC touch input
Turn on TPM backup to Active Directory Domain Services
Configure the list of blocked TPM commands
Ignore the default list of blocked TPM commands
Ignore the local list of blocked TPM commands
Prevent the user from running the Backup Status and Configuration program
Prevent the user from running the Backup Status and Configuration program
Prevent backing up to local disks
Prevent backing up to local disks
Prevent backing up to network shared folder
Prevent backing up to network shared folder
Prevent backing up to optical media (CD/DVD)
Prevent backing up to optical media (CD/DVD)
Turn off backup configuration
Turn off backup configuration
Turn off restore functionality
Turn off restore functionality
Turn off Complete PC Backup functionality
Turn off Complete PC Backup functionality
Add the Administrators security group to roaming user profiles
Do not check for user ownership of Roaming Profile Folders
Connect home directory to root of the share
Delete cached copies of roaming profiles
Do not detect slow network connections
Prompt user when a slow network connection is detected
Exclude directories in roaming profile
Leave Windows Installer and Group Policy Software Installation Data
Limit profile size
Only allow local user profiles
Timeout for dialog boxes
Do not log users on with temporary profiles
Maximum retries to unload and update user profile
Prevent Roaming Profile changes from propagating to the server
Wait for remote user profile
Slow network connection timeout for user profiles
Delete user profiles older than a specified number of days on system restart
Network directories to sync at Logon/Logoff time only
Do not forcefully unload the users registry at user logoff
Set maximum wait time for the network if a user has a roaming user profile or remote home directory
Set roaming profile path for all users logging onto this computer
Turn on BitLocker backup to Active Directory Domain Services
Control Panel Setup: Enable advanced startup options
Control Panel Setup: Configure recovery options
Control Panel Setup: Configure recovery folder
Configure encryption method
Configure TPM platform validation profile
Prevent memory overwrite on restart
Global Configuration Settings
Configure Windows NTP Client
Enable Windows NTP Client
Enable Windows NTP Server
Diagnostics: Configure scenario retention
Diagnostics: Configure scenario execution level
Turn off Windows Calendar
Turn off Windows Calendar
Allow only system backup
Disallow locally attached storage as backup target
Disallow network as backup target
Disallow optical media as backup target
Disallow run-once backups
Turn off Windows Meeting Space
Turn off Windows Meeting Space
Turn on Windows Meeting Space auditing
Turn on Windows Meeting Space auditing
Prohibit installing or uninstalling color profiles
Prohibit installing or uninstalling color profiles
Prohibit Access of the Windows Connect Now wizards
Prohibit Access of the Windows Connect Now wizards
Configuration of wireless settings using Windows Connect Now
Check for New Signatures Before Scheduled Scans
Turn off Windows Defender
Enable Logging Known Good Detections
Enable Logging Unknown Detection
Turn off Real-Time Protection Prompts for Unknown Detection
Download Entire Signature Set
Configure Microsoft SpyNet Reporting
Turn on definition updates through both WSUS and Windows Update
Hide the common dialog back button
Hide the dropdown list of recent files
Hide the common dialog places bar
Items displayed in Places Bar
Turn on Classic Shell
Display confirmation dialog when deleting files
Allow only per user or approved shell extensions
Do not track Shell shortcuts during roaming
Maximum number of recent documents
Turn off caching of thumbnail pictures
Remove CD Burning features
Remove UI to change menu animation setting
Remove UI to change keyboard navigation indicator setting
Remove DFS tab
Hide these specified drives in My Computer
No Entire Network in Network Locations
Remove File menu from Windows Explorer
Removes the Folder Options menu item from the Tools menu
Remove Hardware tab
Hides the Manage item on the Windows Explorer context menu
Remove Shared Documents from My Computer
Remove "Map Network Drive" and "Disconnect Network Drive"
Do not move deleted files to the Recycle Bin
Do not request alternate credentials
Remove Security tab
Remove Search button from Windows Explorer
Remove Windows Explorer's default context menu
Prevent access to drives from My Computer
Turn off Windows+X hotkeys
No Computers Near Me in Network Locations
Request credentials for network installations
Maximum allowed Recycle Bin size
Turn off shell protocol protected mode
Turn off shell protocol protected mode
Specify Windows File Protection cache location
Limit Windows File Protection cache size
Set Windows File Protection scanning
Hide the file scan progress window
Windows Firewall: Allow authenticated IPSec bypass
Windows Firewall: Define inbound program exceptions
Windows Firewall: Allow local program exceptions
Windows Firewall: Protect all network connections
Windows Firewall: Do not allow exceptions
Windows Firewall: Allow inbound file and printer sharing exception
Windows Firewall: Allow ICMP exceptions
Windows Firewall: Allow logging
Windows Firewall: Prohibit notifications
Windows Firewall: Define inbound port exceptions
Windows Firewall: Allow local port exceptions
Windows Firewall: Allow inbound remote administration exception
Windows Firewall: Allow inbound Remote Desktop exceptions
Windows Firewall: Prohibit unicast response to multicast or broadcast requests
Windows Firewall: Allow inbound UPnP framework exceptions
Windows Firewall: Define inbound program exceptions
Windows Firewall: Allow local program exceptions
Windows Firewall: Protect all network connections
Windows Firewall: Do not allow exceptions
Windows Firewall: Allow inbound file and printer sharing exception
Windows Firewall: Allow ICMP exceptions
Windows Firewall: Allow logging
Windows Firewall: Prohibit notifications
Windows Firewall: Define inbound port exceptions
Windows Firewall: Allow local port exceptions
Windows Firewall: Allow inbound remote administration exception
Windows Firewall: Allow inbound Remote Desktop exceptions
Windows Firewall: Prohibit unicast response to multicast or broadcast requests
Windows Firewall: Allow inbound UPnP framework exceptions
Turn off Windows Mail application
Turn off Windows Mail application
Turn off the communities features
Turn off the communities features
Prevent Windows Media DRM Internet Access
Prevent Automatic Updates
Do Not Show First Use Dialog Boxes
Prevent Video Smoothing
Prevent CD and DVD Media Information Retrieval
Prevent Media Sharing
Prevent Music File Media Information Retrieval
Prevent Quick Launch Toolbar Shortcut Creation
Prevent Radio Station Preset Retrieval
Prevent Desktop Shortcut Creation
Allow Screen Saver
Prevent Codec Download
Do Not Show Anchor
Hide Privacy Tab
Hide Security Tab
Set and Lock Skin
Configure HTTP Proxy
Configure MMS Proxy
Configure RTSP Proxy
Hide Network Tab
Configure Network Buffering
Streaming Media Protocols
Do not automatically start Windows Messenger initially
Do not automatically start Windows Messenger initially
Do not allow Windows Messenger to be run
Do not allow Windows Messenger to be run
Allow Basic authentication
Allow unencrypted traffic
Disallow Digest authentication
Disallow Negotiate authentication
Disallow Kerberos authentication
Trusted Hosts
Allow automatic configuration of listeners
Allow Basic authentication
Allow unencrypted traffic
Disallow Negotiate authentication
Disallow Kerberos authentication
Allow Remote Shell Access
Specify idle Timeout
MaxConcurrentUsers
Specify maximum amount of memory in MB per Shell
Specify maximum number of processes per Shell
Specify Shell Timeout
Specify maximum number of remote shells per user
Windows Automatic Updates
Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog box
Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog box
Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box
Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box
Remove access to use all Windows Update features
Configure Automatic Updates
Specify intranet Microsoft update service location
Automatic Updates detection frequency
Allow non-administrators to receive update notifications
Allow Automatic Updates immediate installation
Turn on recommended updates via Automatic Updates
Enabling Windows Update Power Management to automatically wake up the system to install scheduled updates
No auto-restart for scheduled Automatic Updates installations
Re-prompt for restart with scheduled installations
Delay Restart for scheduled installations
Reschedule Automatic Updates scheduled installations
Enable client-side targeting
Turn off legacy remote shutdown interface
Timeout for hung logon sessions during shutdown
Display information about previous logons during user logon
Remove logon hours expiration warnings
Set action to take when logon hours expire
Disable or enable software Secure Attention Sequence
Report when logon server was not available during user logon
Report when logon server was not available during user logon
Custom User Interface
Turn off automatic termination of applications that block or cancel shutdown
Custom Instant Search Internet search provider
Supported on
At least Windows Vista
Microsoft Windows Server 2003, Windows XP, and Windows 2000 operating systems only
At least Microsoft Windows XP Professional with SP1 or Windows Server 2003 family
At least Microsoft Windows Server 2003
At least Microsoft Windows XP Professional with SP2
At least Microsoft Windows 2000
Windows XP or Windows Server 2003, or computers with BITS 1.5 installed.
Windows XP SP2 or Windows Server 2003 SP1, or computers with BITS 2.0 installed.
at least Windows NetMeeting v3.0
At least Microsoft Windows XP Professional or Windows Server 2003 family
At least Microsoft Windows 2000 Service Pack 1
Microsoft Windows 2000 only
Microsoft Windows Server 2003 and Windows XP operating systems only
Microsoft Windows XP Professional only
Microsoft Windows Server 2003 and Windows XP only
At least Internet Explorer 6 Service Pack 1
At least Microsoft Windows XP Professional with SP2 or Windows Server 2003 family with SP1
At least Microsoft Windows 2000 Service Pack 3, Microsoft Windows XP Professional Service Pack 1 or Microsoft Windows Server 2003 family
Microsoft Windows Server 2003 only
At least Internet Explorer 5.0
At least Internet Explorer 6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
At least Internet Explorer 6.0 in Windows 2003 Service Pack 1
Only Internet Explorer 6.0 in Windows 2003 Service Pack 1
At least Internet Explorer 6.0 in Windows 2003 Service Pack 1. Not supported on Windows Vista
At least Internet Explorer 6.0 in Windows 2003 Service Pack 1. Not supported on Windows Vista
Only Internet Explorer 4.0
Only Internet Explorer 5.0 and Internet Explorer 6.0
At least Internet Explorer 7.0. Not supported on Windows Vista
At least Internet Explorer 7.0 in Windows Vista
Windows Installer v4.0
Microsoft Windows XP or Windows 2000 with Windows Installer v2.0
Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only
Microsoft Windows XP Professional with SP2 and Windows Server 2003 family only
At least Microsoft Windows 2000 Service Pack 5, Microsoft Windows XP Professional Service Pack 2 or Microsoft Windows Server 2003 family Service Pack 1
Windows 2000 or later, running IIS. Not supported on Windows Server 2003
At least Microsoft Windows Vista, or an earlier version with Windows Search
At least Microsoft Windows 2000 Service Pack 3 or Microsoft Windows XP Professional Service Pack 1
Microsoft Windows Server 2003 and Windows XP operating systems only
At least Microsoft Windows XP
At least Microsoft Windows Vista
At least Microsoft Windows XP and Windows Server 2003 only
At least Microsoft Windows Server 2003 with SP1
At least Microsoft Windows 2000 Terminal Services
At least Microsoft Windows 2000 Terminal Services
Microsoft Windows Server 2003, Enterprise Edition
At least Microsoft Windows 2000 Service Pack 4, Microsoft Windows XP Professional Service Pack 1 or Microsoft Windows Server 2003 family
Windows Media Player 9 Series and later.
Windows Media Player 11 for Windows XP or Windows Media Player 11 for Windows Vista or later.
Windows Media Player for Windows XP and later.
Explain Text
The ActiveX Installer Service is the solution to delegate the install of per-machine ActiveX controls to a Standard User in the enterprise. The list of Approve
Specifies the category of programs that appears when users open the "Add New Programs" page. If you enable this setting, only the programs in the category
Removes the "Add a program from CD-ROM or floppy disk" section from the Add New Programs page. This prevents users from using Add or Remove Program
Removes the "Add programs from Microsoft" section from the Add New Programs page. This setting prevents users from using Add or Remove Programs to co
Prevents users from viewing or installing published programs. This setting removes the "Add programs from your network" section from the Add New Program
Removes the Add New Programs button from the Add or Remove Programs bar. As a result, users cannot view or change the attached page. The Add New P
Prevents users from using Add or Remove Programs. This setting removes Add or Remove Programs from Control Panel and removes the Add or Remove Pr
Removes the Set Program Access and Defaults button from the Add or Remove Programs bar. As a result, users cannot view or change the associated page.
Removes the Change or Remove Programs button from the Add or Remove Programs bar. As a result, users cannot view or change the attached page. The C
Prevents users from using Add or Remove Programs to configure installed services. This setting removes the "Set up services" section of the Add/Remove W
Removes links to the Support Info dialog box from programs on the Change or Remove Programs page. Programs listed on the Change or Remove Programs
Removes the Add/Remove Windows Components button from the Add or Remove Programs bar. As a result, users cannot view or change the associated page
Specifies whether to prevent the MS-DOS subsystem (ntvdm.exe) from running for all users. This setting affects the launching of 16-bit applications in the opera
Specifies whether to prevent the MS-DOS subsystem (ntvdm.exe) from running on this computer. This setting affects the launching of 16-bit applications in the
This policy controls the visibility of the Program Compatibility property page shell extension. This shell extension is visible on the property context-menu of any
This policy controls the state of the application compatibility engine in the system. The engine is part of the loader and looks through a compatibility database
This policy controls the state of the Program Compatibility Wizard. When enabled, this policy disables the start page of the wizard in the Help and Support Cen
This policy controls the state of the Program Compatibility Assistant in the system. The PCA monitors user initiated programs for known compatibility issues
This policy controls the state of the Program Compatibility Assistant in the system. The PCA monitors user initiated programs for known compatibility issues
This policy setting allows you to manage the behavior for notifying registered antivirus programs. If multiple programs are registered, they will all be notified. If th
This policy setting allows you to configure the logic that Windows uses to determine the risk for file attachments. Preferring the file handler instructs Windows t
This policy setting allows you to manage whether Windows marks file attachments with information about their zone of origin (i.e. restricted, Internet, intranet, lo
This policy setting allows you to manage whether users can manually remove the zone information from saved file attachments by clicking the Unblock button in
This policy setting allows you to manage the default risk level for file types. To fully customize the risk level for file attachments, you may also need to configure
This policy setting allows you to configure the list of high risk file types. If the file attachment is in the list of high risk file types and is from the restricted zone, W
This policy setting allows you to configure the list of low risk file types. If the attachment is in the list of low risk file types, Windows will not prompt the user befor
This policy setting allows you to configure the list of moderate risk file types. If the attachment is in the list of moderate risk file types and is from the restricted o
Sets the default behavior for Autorun commands. Autorun commands are generally stored in autorun.inf files. They often launch the installation program or oth
Sets the default behavior for Autorun commands. Autorun commands are generally stored in autorun.inf files. They often launch the installation program or oth
If this policy is enabled, the "Always do this..." checkbox in Autoplay dialog will not be set by default when the dialog is shown.
If this policy is enabled, the "Always do this..." checkbox in Autoplay dialog will not be set by default when the dialog is shown.
Turns off the Autoplay feature. Autoplay begins reading from a drive as soon as you insert media in the drive. As a result, the setup file of programs and the m
Turns off the Autoplay feature. Autoplay begins reading from a drive as soon as you insert media in the drive. As a result, the setup file of programs and the m
This setting determines if the BITS Peer-caching feature is enabled on a specific computer. By default, the files in a BITS job are downloaded only from the orig
This setting specifies the number of days a pending BITS job can remain inactive before the job is considered abandoned. By default BITS will wait 90 days bef
This setting limits the amount of time that BITS will take to download the files in a BITS job. The time limit applies only to the time that BITS is actively download
This setting limits the network bandwidth that BITS uses for background transfers (this setting does not affect foreground transfers). You can specify a limit to u
This setting specifies the maximum age of files in the Peercache. In order to make the most efficient use of disk space, by default BITS removes any files in the
This setting specifies the maximum amount of disk space that can be used for the BITS Peercache, as a percentage of the total system disk size. BITS will add
This setting specifies whether the computer will act as a BITS peercaching client. By default, when BITS peercaching is enabled, the computer acts as both a p
This setting specifies whether the computer will act as a BITS peercaching server. By default, when BITS peercaching is enabled, the computer acts as both a p
This setting limits the network bandwidth that BITS uses for peercache transfers (this setting does not affect transfers from the origin server). To prevent any ne
This setting specifies the maximum number of BITS jobs that can be created for all users of the computer. By default, BITS limits the total number of jobs that c
This setting specifies the maximum number of BITS jobs that can be created by a user. By default, BITS limits the total number of jobs that can be created by a
This setting specifies the maximum number of files that a BITS job can contain. By default, a BITS job is limited to 200 files. You can use this setting to raise or
This setting specifies the maximum number of ranges that can be added to a file in a BITS job. By default, files in a BITS job are limited to 500 ranges per file. Y
Specifies whether Import Video can run. Import Video is a feature of Windows Vista that can be used to import video from a digital video device where the vide
Specifies whether Import Video can run. Import Video is a feature of Windows Vista that can be used to import video from a digital video device where the vide
If you enable this setting all Customer Experience Improvement Program uploads are redirected to Microsoft Operations Manager server. If you disable this se
This policy setting will enable tagging of Windows Customer Experience Improvement data when a study is being conducted. If you enable this setting then W
Determines the cipher suites used by the Secure Socket Layer (SSL). If this setting is enabled, SSL cipher suites will be prioritized in the order specified. If th
Directs the system to search Active Directory for missing Component Object Model (COM) components that a program requires. Many Windows programs, su
Directs the system to search Active Directory for missing Component Object Model (COM) components that a program requires. Many Windows programs, su
Disables the application sharing feature of NetMeeting completely. Users will not be able to host or view shared applications.
Prevents users from allowing others in a conference to control what they have shared. This enforces a read-only mode; the other participants cannot change th
Prevents users from sharing anything themselves. They will still be able to view shared applications/desktops from others.
Prevents users from sharing command prompts. This prevents users from inadvertently sharing out applications, since command prompts can be used to launc
Prevents users from sharing the whole desktop. They will still be able to share individual applications.
Prevents users from sharing Explorer windows. This prevents users from inadvertently sharing out applications, since Explorer windows can be used to launch
Prevents users from sharing applications in true color. True color sharing uses more bandwidth in a conference.
Disables the audio feature of NetMeeting. Users will not be able to send or receive audio.
Prevents user from changing the DirectSound audio setting. DirectSound provides much better audio quality, but older audio hardware may not support it.
Disables full duplex mode audio. Users will not be able to listen to incoming audio while speaking into the microphone. Older audio hardware does not perform
Prevents users from receiving video. Users will still be able to send video provided they have the hardware."
Prevents users from sending video if they have the hardware. Users will still be able to receive video from others.
Limits the bandwidth audio and video will consume when in a conference. This setting will guide NetMeeting to choose the right formats and send rate so that t
Make the automatic acceptance of incoming calls persistent.
Disables the Chat feature of NetMeeting.
Disables the T.126 whiteboard feature of NetMeeting.
Disables the 2.x whiteboard feature of NetMeeting. The 2.x whiteboard is available for compatibility with older versions of NetMeeting only. Deployers who do
Disables the remote desktop sharing feature of NetMeeting. Users will not be able to set it up or use it for controlling their computers remotely.
Configures NetMeeting to download settings for users each time it starts. The settings are downloaded from the URL listed in the "Configuration URL:" text bo
Prevents users from adding directory (ILS) servers to the list of those they can use for placing calls.
Prevents users from turning on automatic acceptance of incoming calls. This ensures that others cannot call and connect to NetMeeting when the user is not p
Prevents users from changing the way calls are placed, either directly or via a gatekeeper server.
Disables the directory feature of NetMeeting. Users will not logon to a directory (ILS) server when NetMeeting starts. Users will also not be able to view or pla
Prevents users from receiving files from others in a conference.
Prevents users from sending files to others in a conference.
Prevents users from viewing directories as Web pages in a browser.
Limits the size of files users can send to others in a conference.
Sets the URL NetMeeting will display when the user chooses the Help Online Support command.
Sets the level of security for both outgoing and incoming NetMeeting calls.
Disables the Advanced Calling button on the General Options page. Users will not then be able to change the call placement method and the servers used.
Hides the Audio page of the Tools Options dialog. Users will not then be able to change audio settings.
Hides the General page of the Tools Options dialog. Users will not then be able to change personal identification and bandwidth settings.
Hides the Security page of the Tools Options dialog. Users will not then be able to change call security and authentication settings.
Hides the Video page of the Tools Options dialog. Users will not then be able to change video settings.
Hides specified Control Panel items. This setting removes Control Panel items (such as "Mouse", "System" or "Programs and Features") from the Control Pan
This setting affects the visual style and presentation of the Control Panel. It allows you to disable the new categorized Control Panel Home, which provides ca
Disables all Control Panel programs. This setting prevents Control.exe, the program file for Control Panel, from starting. As a result, users cannot start Control
Hides all Control Panel items and folders except those specified in this setting. This setting removes all Control Panel items (such as "Mouse", "System" or "Pr
Disables Display in Control Panel. If you enable this setting, Display in Control Panel does not run. When users try to start Display, a message appears explain
Removes the Appearance and Themes tabs from Display in Control Panel. When this setting is enabled, it removes the desktop color selection option from the
Removes the Desktop tab from Display in Control Panel. This setting prevents users from using Control Panel to change the pattern and wallpaper on the des
Removes the Screen Saver tab from Display in Control Panel. This setting prevents users from using Control Panel to add, configure, or change the screen sa
Removes the Settings tab from Display in Control Panel. This setting prevents users from using Control Panel to add, configure, or change the display settings
Enables desktop screen savers. If you disable this setting, screen savers do not run. Also, this setting disables the Screen Saver section of the Screen Saver t
Specifies the screen saver for the user's desktop. If you enable this setting, the system displays the specified screen saver on the user's desktop. Also, this se
Determines whether screen savers used on the computer are password protected. If you enable this setting, all screen savers are password protected. If you d
Specifies how much user idle time must elapse before the screen saver is launched. When configured, this idle time can be set from a minimum of 1 second to
Prevents users from adding or changing the background design of the desktop. By default, users can use the Desktop tab of Display in Control Panel to add a
This setting forces the theme color to be the default color scheme. If you enable this setting, a user cannot change the color scheme of the current desktop the
This setting effects the Themes tab that controls the overall appearance of windows. It is accessed through the Display icon in Control Panel. Using the optio
Prevents users from changing the visual style of the windows and buttons displayed on their screens. When enabled, this setting disables the "Windows and bu
This setting allows you to load a specific visual style file by entering the path (location) of the visual style file. This can be a local computer visual style (Luna.m
Prevents users from changing the size of the font in the windows and buttons displayed on their screens. If this setting is enabled, the "Font size" drop-down li
This policy setting allows an administrator to standardize the logon pictures for all users on a system to the default user picture. One application for this policy s
This policy setting specifies a default logon domain which may be a different domain than the machine joined domain. Without this policy, at logon, if a user doe
This policy setting allows the administrator to exclude the specified credential providers from use during authentication. Note: credential providers are used to
This policy setting applies to applications using the Cred SSP component (for example: Terminal Server). If you enable this policy setting you can specify the s
By default administrator accounts are not displayed when attempting to elevate a running application. If you enable this policy setting, all local administrator a
This policy setting requires the user to enter Microsoft Windows credentials using a trusted path, to prevent a Trojan horse or other types of malicious code from
Prevents users from changing their Windows password on demand. This setting disables the "Change Password" button on the Windows Security dialog box (
Prevents users from locking the system. While locked, the desktop is hidden and the system cannot be used. Only the user who locked the system or the syst
Prevents users from starting Task Manager (Taskmgr.exe). If this setting is enabled and users try to start Task Manager, a message appears explaining that a
This setting disables or removes all menu items and buttons that log the user off the system. Also, see the "Remove Logoff on the Start Menu" setting.
Allows you to specify that local computer administrators can supplement the "Define Activation Security Check exemptions" list. If you enable this policy setting
Allows you to view and change a list of DCOM server application ids (appids) which are exempted from the DCOM Activation security check. DCOM uses two s
Enables Active Desktop and prevents users from disabling it. This setting prevents users from trying to enable or disable Active Desktop while a policy controls
Disables Active Desktop and prevents users from enabling it. This setting prevents users from trying to enable or disable Active Desktop while a policy control
Prevents the user from enabling or disabling Active Desktop or changing the Active Desktop configuration. This is a comprehensive setting that locks down the
Adds and deletes specified Web content items. You can use the "Add" box in this setting to add particular Web-based items or shortcuts to users' desktops. U
Prevents users from adding Web content to their Active Desktop. This setting removes the "New" button from Web tab in Display in Control Panel. As a result,
Prevents users from removing Web content from their Active Desktop. In Active Desktop, you can add items to the desktop but close them so they are not disp
Prevents users from deleting Web content from their Active Desktop. This setting removes the Delete button from the Web tab in Display in Control Panel. As
Prevents users from changing the properties of Web content items on their Active Desktop. This setting disables the Properties button on the Web tab in Displ
Removes Active Desktop content and prevents users from adding Active Desktop content. This setting removes all Active Desktop items from the desktop. It
Permits only bitmap images for wallpaper. This setting limits the desktop background ("wallpaper") to bitmap (.bmp) files. If users select files with other image fo
Specifies the desktop background ("wallpaper") displayed on all users' desktops. This setting lets you specify the wallpaper on users' desktops and prevents u
Displays the filter bar above the results of an Active Directory search. The filter bar consists of buttons for applying additional filters to search results. If you en
Hides the Active Directory folder in Network Locations. The Active Directory folder displays Active Directory objects in a browse window. If you enable this se
Specifies the maximum number of objects the system displays in response to a command to browse or search Active Directory. This setting affects all browse d
Prevents users from changing the path to their profile folders. By default, a user can change the location of their individual profile folders like Documents, Musi
Removes icons, shortcuts, and other default and user-defined items from the desktop, including Briefcase, Recycle Bin, Computer, and Network Locations. Re
Prevents users from using the Desktop Cleanup Wizard. If you enable this setting, the Desktop Cleanup wizard does not automatically run on a users worksta
Removes the Internet Explorer icon from the desktop and from the Quick Launch bar on the taskbar. This setting does not prevent the user from starting Intern
This setting hides Computer from the desktop and from the new Start menu. It also hides links to Computer in the Web view of all Explorer windows, and it hide
Removes most occurrences of the My Documents icon. This setting removes the My Documents icon from the desktop, from Windows Explorer, from program
Removes the Network Locations icon from the desktop. This setting only affects the desktop icon. It does not prevent users from connecting to the network or
This setting hides Properties on the context menu for Computer. If you enable this setting, the Properties option will not be present when the user right-clicks M
This setting hides Properties for the context menu on the Documents icon. Note: In operating systems earlier than Microsoft Windows Vista, this policy applies
Remote shared folders are not added to Network Locations whenever you open a document in the shared folder. If you disable this setting or do not configure
Removes most occurrences of the Recycle Bin icon. This setting removes the Recycle Bin icon from the desktop, from Windows Explorer, from programs that
Removes the Properties option from the Recycle Bin context menu. If you enable this setting, the Properties option will not be present when the user right-click
Prevents users from saving certain changes to the desktop. If you enable this setting, users can change the desktop, but some changes, such as the position
Prevents users from manipulating desktop toolbars. If you enable this setting, users cannot add or remove toolbars from the desktop. Also, users cannot drag
Prevents users from adjusting the length of desktop toolbars. Also, users cannot reposition items or toolbars on docked toolbars. This setting does not prevent
When selecting which driver to install, do not distinguish between drivers that are signed by a Microsoft Windows Publisher certificate and drivers that are signe
Do not display "Found New Hardware" balloons during device installation. If you enable this setting, "Found New Hardware" balloons will not appear while a de
Specifies the number of seconds the system will wait for a device installation task to complete. If the task is not complete within the specified number of second
Specifies whether or not a system restore point is created when a new device driver is installed on your machine. If you enable this setting, system restore poi
Specifies whether or not remote access to the Plug and Play interface is allowed. If you enable this setting, remote connections to the PnP interface will be a
Specifies whether or not to send a Windows Error Report when a generic driver is installed on a device. If you enable this setting, a Windows Error Report will
Allows members of the Administrators group to install and update the drivers for any device, regardless of other policy settings. If you enable this setting, admi
Specifies a list of device setup class GUIDs describing devices that can be installed. This setting is intended to be used only when the "Prevent installation of d
Specifies a list of Plug and Play device setup class GUIDs for devices that cannot be installed. If you enable this setting, new devices cannot be installed and e
Specifies a list of Plug and Play hardware IDs and compatible IDs that describe devices that can be installed. This setting is intended to be used only when the
Specifies a list of Plug and Play hardware IDs and compatible IDs for devices that cannot be installed. If you enable this setting, a device cannot be installed o
Prevents removable devices from being installed. If you enable this setting, removable devices may not be installed, and existing removable devices cannot ha
This setting controls the installation policy for devices that are not specifically described by any other policy. If you enable this setting, any device that is not de
Specifies a custom message that is displayed to the user in the title of the notification balloon when policy prevents the installation of a device. If you enable
Specifies a custom message that is displayed to the user in the text of the notification balloon when policy prevents the installation of a device. If you enabl
Specifies a list of device setup class GUIDs describing device drivers that non-administrator members of the built-in Users group may install on the system. If y
This setting configures the location that Windows searches for drivers when a new piece of hardware is found. By default, Windows searches the following pla
Specifies whether the administrator will be prompted about going to Windows Update to search for device drivers using the Internet. Note: This setting only ha
Specifies whether the administrator will be prompted about going to Windows Update to search for device drivers using the Internet. Note: This setting only ha
Determines how the system responds when a user tries to install device driver files that are not digitally signed. This setting establishes the least secure respo
Allows you to configure how often a Distributed File System (DFS) client attempts to discover domain controllers on their network. By default, a DFS client atte
Specifies whether Digital Locker can run. Digital Locker is a dedicated download manager associated with Windows Marketplace and a feature of Windows tha
Specifies whether Digital Locker can run. Digital Locker is a dedicated download manager associated with Windows Marketplace and a feature of Windows tha
Substitutes custom alert text in the disk diagnostic message shown to users when a disk reports a S.M.A.R.T. fault. If you enable this policy setting, Windows
Determines the execution level for S.M.A.R.T.-based disk diagnostics. Self-Monitoring And Reporting Technology (S.M.A.R.T.) is a standard mechanism for st
Turns off the boot and resume optimizations for the hybrid hard disks in the system. If you enable this policy setting, the system does not use the non-volatile (
Turns off the power save mode on the hybrid hard disks in the system. If you enable this policy, the disks will not be put into NV cache power save mode and n
Turns off all support for the non-volatile (NV) cache on all hybrid hard disks in the system. To check if you have hybrid hard disks in the system, from the device
Turns off the solid state mode for the hybrid hard disks. If you enable this policy setting, frequently written files such as the file system metadata and registry m
Enables and disables disk quota management on all NTFS volumes of the computer, and prevents users from changing the setting. If you enable this setting,
Determines whether disk quota limits are enforced and prevents users from changing the setting. If you enable this setting, disk quota limits are enforced. If yo
Specifies the default disk quota limit and warning level for new users of the volume. This setting determines how much disk space can be used by each user o
Determines whether the system records an event in the local Application log when users reach their disk quota limit on a volume, and prevents users from chan
Determines whether the system records an event in the Application log when users reach their disk quota warning level on a volume. If you enable this setting
Extends the disk quota policies in this folder to NTFS file system volumes on removable media. If you disable this setting or do not configure it, the disk quota
Specifies that Distributed Link Tracking clients in this domain may use the Distributed Link Tracking (DLT) server, which runs on domain controllers. The DLT c
Specifies a connection-specific DNS suffix. This setting supersedes the connection-specific DNS suffixes set on the computers to which this setting is applied, t
Defines the DNS servers to which a computer sends queries when it attempts to resolve names. Warning: The list of the DNS servers defined in this setting su
Specifies the primary Domain Name System (DNS) suffix for all affected computers. The primary DNS suffix is used in DNS name registration and DNS name r
Determines if a computer performing dynamic registration may register A and PTR resource records with a concatenation of its Computer Name and a connecti
Determines whether the registration of PTR resource records is enabled for the computers to which this policy is applied. By default, DNS clients configured to
Determines if dynamic update is enabled. Computers configured for dynamic update automatically register and update their DNS resource records with a DNS
Determines whether a DNS client that attempts to register its A resource record should overwrite an existing A resource record or records containing conflicting
Specifies the Registration Refresh Interval of A and PTR resource records for computers to which this setting is applied. This setting may be applied to compute
Specifies the value for the Time-To-Live (TTL) field in A and PTR resource records registered by the computers to which this setting is applied. To specify the
Determines the DNS suffixes to attach to an unqualified single-label name before submission of a DNS query for that name. An unqualified single-label name
Specifies whether the computers to which this setting is applied use secure dynamic update or standard dynamic update for registration of DNS records. To en
Specifies whether the computers to which this setting is applied may send dynamic updates to the zones named with a single label name, also known as top-le
Determines whether the DNS client performs primary DNS suffix devolution in a name resolution process. When a user submits a query for a single-label nam
Local Link Multicast Name Resolution (LLMNR) is a secondary name resolution protocol. Queries are sent over the Local Link, a single subnet, from a client ma
Specifies whether the computers to which this setting is applied may attach suffixes to an unqualified multi-label name before sending subsequent DNS queries
This policy setting controls the appearance of window animations such as those found when restoring, minimizing, and maximizing windows. If you enable this
This policy setting controls the appearance of window animations such as those found when restoring, minimizing, and maximizing windows. If you enable this
This policy setting controls how some graphics are rendered and facilitates other features, including Flip, Flip3D, and Taskbar Thumbnails. If you enable this s
This policy setting controls how some graphics are rendered and facilitates other features, including Flip, Flip3D, and Taskbar Thumbnails. If you enable this s
Flip3D is a 3D window switcher. If you enable this setting, Flip3D will be inaccessible. If you disable or do not configure this policy setting, Flip3D will be acce
Flip3D is a 3D window switcher. If you enable this setting, Flip3D will be inaccessible. If you disable or do not configure this policy setting, Flip3D will be acce
This policy setting controls the default color for window frames when the user does not specify a color. If you enable this policy setting and specify a default co
This policy setting controls the default color for window frames when the user does not specify a color. If you enable this policy setting and specify a default co
This policy setting controls the ability to change the color of window frames. If you enable this policy setting, you prevent users from changing the default wind
This policy setting controls the ability to change the color of window frames. If you enable this policy setting, you prevent users from changing the default wind
Prevents Windows Explorer from encrypting files that are moved to an encrypted folder. If you disable this setting or do not configure it, Windows Explorer auto
Configures how errors are reported and what information is sent when Error Reporting is enabled. This Policy will not enable or disable Error Reporting, to do
Use this setting to control whether or not a user is given the choice to report an error. When Display Error Notification is enabled, the user will be notified that a
If this setting is enabled, Windows Error Reporting will not send any problem information to Microsoft. Additionally, solution information will not be available in th
If this setting is enabled, Windows Error Reporting will not send any problem information to Microsoft. Additionally, solution information will not be available in th
If this setting is enabled Windows Error Reporting events will not be logged to the system event log.
If this setting is enabled Windows Error Reporting events will not be logged to the system event log.
If this setting is enabled any additional data requests from Microsoft in response to a Windows Error Reporting event will be automatically declined without notic
If this setting is enabled any additional data requests from Microsoft in response to a Windows Error Reporting event will be automatically declined without notic
This setting controls whether or not errors in general applications are included when error reporting is enabled. When this setting is enabled, The 'Default' drop
This setting controls error reporting for errors in general applications when error reporting is enabled. The "Default" dropdown list allows you to choose whethe
This setting specifies the applications that are always included in error reporting. When this setting is enabled, You can create a list of applications that are alw
This setting controls whether or not errors in the operating system are included when error reporting is enabled. When this setting is enabled, error reporting w
This setting controls the behavior of the Windows Error Reporting archive. If Archive behavior is set to "Store all", all data collected for each report will be store
This setting controls the behavior of the Windows Error Reporting archive. If Archive behavior is set to "Store all", all data collected for each report will be store
This setting determines the corporate server to which Windows Error Reporting will send reports (instead of sending reports to Microsoft). Server port indicates
This setting determines the behavior of the error reporting exclusion list. Windows will not send reports for any process added to this list. Click "Show" to displa
This setting determines the behavior of the error reporting exclusion list. Windows will not send reports for any process added to this list. Click "Show" to displa
This setting determines the behavior of the Windows Error Reporting queue. If Queuing behavior is set to "Default", Windows will decide each time a problem
This setting determines the behavior of the Windows Error Reporting queue. If Queuing behavior is set to "Default", Windows will decide each time a problem
This policy setting determines the consent behavior of Windows Error Reporting for specific event types. If this policy setting is enabled and the consent level i
This policy setting determines the consent behavior of Windows Error Reporting for specific event types. If this policy setting is enabled and the consent level i
This setting determines the behavior of the default consent setting in relation to custom consent settings. If this setting is enabled, the default Consent level sett
This setting determines the behavior of the default consent setting in relation to custom consent settings. If this setting is enabled, the default Consent level sett
This setting determines the consent behavior of Windows Error Reporting. If Consent level is set to "Always ask before sending data", Windows will prompt the
This setting determines the consent behavior of Windows Error Reporting. If Consent level is set to "Always ask before sending data", Windows will prompt the
This policy setting controls Event Log behavior when the log file reaches its maximum size and takes effect only if the ΓÇ£Retain old eventsΓÇ¥ policy setting is
This policy setting specifies to use the security descriptor for the log using the Security Descriptor Definition Language (SDDL) string. If this policy setting is en
This policy setting controls Event Log behavior when the log file reaches its maximum size. When this policy setting is enabled and a log file reaches its maxim
This policy setting controls the location of the log file. The location of the file must be writable by the Event Log service and should only be accessible to adminis
This policy setting specifies the maximum size of the log file in kilobytes. If you enable this policy setting, you can configure the maximum log file size to be be
This policy setting specifies to use the security descriptor for the log using the Security Descriptor Definition Language (SDDL) string. You cannot configure writ
This policy setting turns on logging. If you enable or do not configure this policy setting, then events can be written to this log. If the policy setting is disabled,
This is the program that will be invoked when the user clicks the events.asp link.
This specifies the command line parameters that will be passed to the events.asp program
This is the URL that will be passed to the Description area in the Event Properties dialog box. Change this value if you want to use a different Web server to han
This policy setting configures Windows Explorer to always display the menu bar. Note: By default, the menu bar is not displayed in Windows Explorer. If you
This policy setting allows administrators to prevent users from adding new items such as files or folders to the root of their Users Files folder in Windows Explor
This policy is similar to settings directly available to computer users. Disabling animations can improve usability for users with some visual disabilities as well a
Disabling heap termination on corruption can allow certain legacy plug-in applications to function without terminating Explorer immediately, although Explorer m
This policy setting allows you to configure the recovery behavior for corrupted files to one of three states: Regular: Detection, troubleshooting, and recovery of
Symbolic links can introduce vulnerabilities in certain applications. To mitigate this issue, you can selectively enable or disable the evaluation of these types of s
This policy setting allows the administrator to define whether Folder Redirection should use localized names for the All Programs, Startup, My Music, My Picture
All redirected shell folders, such as Contacts, Documents, Desktop, Favorites, Music, Pictures, Videos, Start Menu, and AppData\Roaming, are available offline
This policy setting allows the administrator to define whether Folder Redirection should use localized names for the All Programs, Startup, My Music, My Picture
Hides the Details Pane in Windows Explorer. If you enable this policy setting, the Details Pane in Windows Explorer is hidden and cannot be turned on by the
Hides the Preview Pane in Windows Explorer. If you enable this policy setting, the Preview Pane in Windows Explorer is hidden and cannot be turned on by th
Manages download of game box art and ratings from the Windows Metadata Services. If you enable this setting, game information including box art and rating
Tracks the last play time of games in the Games folder. If you enable this setting the last played time of games will not be recorded in Games folder. This setti
This policy prevents a user from selecting a supplemental custom locale as their user locale. The user is restricted to the set of locales that shipped with the ope
This policy prevents a user from selecting a supplemental custom locale as their user locale. The user is restricted to the set of locales that shipped with the ope
This policy restricts the permitted system locales to the specified list. If the list is empty, it locks the system locale to its current value. This policy does not chang
This policy restricts users on a machine to the specified list of user locales. If the list is empty, it locks all user locales to their current values. This policy does no
This policy restricts users on a machine to the specified list of user locales. If the list is empty, it locks all user locales to their current values. This policy does no
This policy prevents users from changing their user geographical location (GeoID). If this policy is Enabled, then the user cannot change their geographical loc
This policy prevents users from changing their user geographical location (GeoID). If this policy is Enabled, then the user cannot change their geographical loc
This policy prevents the user from customizing their locale by changing their user overrides. Any existing overrides in place when this policy is enabled will be
This policy prevents the user from customizing their locale by changing their user overrides. Any existing overrides in place when this policy is enabled will be
This policy removes the Administrative options from the Regional and Language Options control panel. Administrative options include interfaces for setting sys
This policy removes the option to change the user's geographical location (GeoID) from the Language and Regional Options control panel. This does not, howe
This policy removes the option to change the user's menus and dialogs (UI) language from the Language and Regional Options control panel. This does not, h
This policy removes the regional formats interface from the Regional and Language Options control panel. This does not, however, prevent the user or an appl
This is a setting for computers with more than one UI language installed. If you enable this setting the UI language of Windows menus and dialogs language for
This is a setting for computers with more than one UI language installed. If you enable this setting the UI language of Windows menus and dialogs language for
This is a setting for computers with more than one UI language installed. If you enable this setting, the UI language of Windows menus and dialogs language fo
This setting restricts users to the specified language by disabling the menus and dialog box controls in the Regional and Language Options Control Panel. If the
Determines how programs interpret two-digit years. This setting specifies the largest two-digit year interpreted as being preceded by 20. All numbers less than
This policy setting prevents Local Group Policy objects (Local GPOs) from being applied. By default, the policy settings in Local GPOs are applied before any
This policy setting specifies how long Group Policy should wait for network availability notifications during startup policy processing. If the startup policy process
Allows user-based policy processing, roaming user profiles, and user object logon scripts for interactive logons across forests. This setting affects all user acco
Determines when software installation policies are updated. This setting affects all policies that use the software installation component of Group Policy, such
Determines when disk quota policies are updated. This setting affects all policies that use the disk quota component of Group Policy, such as those in Comput
Determines when encryption policies are updated. This setting affects all policies that use the encryption component of Group Policy, such as policies related
Determines when folder redirection policies are updated. This setting affects all policies that use the folder redirection component of Group Policy, such as tho
Determines when Internet Explorer Maintenance policies are updated. This setting affects all policies that use the Internet Explorer Maintenance component o
Determines when IP security policies are updated. This setting affects all policies that use the IP security component of Group Policy, such as policies in Comp
Determines when registry policies are updated. This setting affects all policies in the Administrative Templates folder and any other policies that store values in
Determines when policies that assign shared scripts are updated. This setting affects all policies that use the scripts component of Group Policy, such as those
Determines when security policies are updated. This setting affects all policies that use the security component of Group Policy, such as those in Windows Se
Determines when policies that assign wireless network settings are updated. This setting affects all policies that use the wireless network component of Group
Determines when policies that assign wired network settings are updated. This setting affects all policies that use the wired network component of Group Polic
This setting controls the ability of users to view their Resultant Set of Policy (RSoP) data. By default, interactively logged on users can view their own Resultan
This setting controls the ability of users to view their Resultant Set of Policy (RSoP) data. By default, interactively logged on users can view their own Resultan
Prevents the system from updating the Administrative Templates source files automatically when you open the Group Policy Object Editor. Administrators may
Prevents Group Policy from being updated while the computer is in use. This setting applies to Group Policy for computers, users, and domain controllers. If y
This setting allows you to control a user's ability to invoke a computer policy refresh. If you enable this setting, users may not invoke a refresh of computer poli
Prevents administrators from viewing or using Group Policy preferences. A Group Policy administration (.adm) file can contain both true settings and preferenc
Determines which domain controller the Group Policy Object Editor snap-in uses. -- "Use the Primary Domain Controller" indicates that the Group Policy Obje
Defines a slow connection for purposes of applying and updating Group Policy. If the rate at which data is transferred from the domain controller providing a po
Defines a slow connection for purposes of applying and updating Group Policy. If the rate at which data is transferred from the domain controller providing a po
Specifies how often Group Policy for computers is updated while the computer is in use (in the background). This setting specifies a background update rate on
Specifies how often Group Policy is updated on domain controllers while they are running (in the background). The updates specified by this setting occur in ad
Specifies how often Group Policy for users is updated while the computer is in use (in the background). This setting specifies a background update rate only for
Sets the default display name for new Group Policy objects. This setting allows you to specify the default name for new Group Policy objects created from poli
Creates new Group Policy object links in the disabled state. This setting creates all new Group Policy object links in the disabled state by default. After you con
Always use local ADM files for the Group Policy snap-in. By default, when you edit a Group Policy object (GPO) using the Group Policy Object Editor snap-in,
This setting allows you to enable or disable Resultant Set of Policy (RSoP) logging on a client computer. RSoP logs information on Group Policy settings that h
Applies alternate user settings when a user logs on to a computer affected by this setting. This setting directs the system to apply the set of Group Policy objec
With this policy, you can restrict certain HTML Help commands to function only in HTML Help (.chm) files within specified folders and their subfolders. Alternati
Allows you to restrict programs from being run from online Help. If you enable this setting, you can prevent programs that you specify from being allowed to be
Allows you to restrict programs from being run from online Help. If you enable this setting, you can prevent programs that you specify from being allowed to be
Specifies whether active content links in trusted assistance content are rendered. By default, the Help viewer renders trusted assistance content with active ele
Specifies whether untrusted content is rendered. By default, the Help viewer renders untrusted assistance content pages with the exception of active links. Acti
Specifies whether users can provide ratings for Help content. If this setting is enabled, this policy setting prevents ratings controls from being added to Help co
Specifies whether users can participate in the Help Experience Improvement program. The Help Experience Improvement program collects information about h
Specifies whether users can search and view content from Windows Online in Help and Support. Windows Online provides the most up-to-date Help content fo
This policy setting allows you to manage whether HotStart buttons can be used to launch applications. If you enable this policy setting, applications cannot be
This policy setting allows you to manage whether HotStart buttons can be used to launch applications. If you enable this policy setting, applications cannot be
Specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. If this setting is enabled, all of the the policy settings li
Specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. If this setting is enabled, all of the the policy settings li
Specifies whether to automatically update root certificates using the Windows Update Web site. Typically, a certificate is used when you use a secure Web sit
Specifies whether to allow printing over HTTP from this client. Printing over HTTP allows a client to print to printers on the intranet as well as the Internet. No
Specifies whether to allow printing over HTTP from this client. Printing over HTTP allows a client to print to printers on the intranet as well as the Internet. No
Specifies whether to allow this client to download print driver packages over HTTP. To set up HTTP printing, non-inbox drivers need to be downloaded over H
Specifies whether to allow this client to download print driver packages over HTTP. To set up HTTP printing, non-inbox drivers need to be downloaded over H
This policy specifies whether Windows searches Windows Update for device drivers when no local drivers for a device are present. If you enable this setting, W
Specifies whether "Events.asp" hyperlinks are available for events within the Event Viewer application. The Event Viewer normally makes all HTTP(S) URLs in
Specifies whether to show the "Did you know?" section of Help and Support Center. This content is dynamically updated when users who are connected to the
Specifies whether users can perform a Microsoft Knowledge Base search from the Help and Support Center. The Knowledge Base is an online source of tech
Specifies whether the Internet Connection Wizard can connect to Microsoft to download a list of Internet Service Providers (ISPs). If you enable this setting, th
Specifies whether the Windows Registration Wizard connects to Microsoft.com for online registration. If you enable this setting, it blocks users from connecting
Controls whether or not errors are reported to Microsoft. Error Reporting is used to report information about a system or application that has failed or has stopp
This setting allows you to remove access to Windows Update. If you enable this setting, all Windows Update features are removed. This includes blocking acc
Specifies whether Search Companion should automatically download content updates during local and Internet searches. When the user searches the local m
Specifies whether to use the Microsoft Web service for finding an application to open a file with an unhandled file association. When a user opens a file that ha
Specifies whether to use the Microsoft Web service for finding an application to open a file with an unhandled file association. When a user opens a file that ha
Specifies whether Windows should download a list of providers for the Web publishing and online ordering wizards. These wizards allow users to select from a
Specifies whether Windows should download a list of providers for the Web publishing and online ordering wizards. These wizards allow users to select from a
Specifies whether the "Order Prints Online" task is available from Picture Tasks in Windows folders. The "Order Prints Online" Wizard is used to download a li
Specifies whether the "Order Prints Online" task is available from Picture Tasks in Windows folders. The "Order Prints Online" Wizard is used to download a li
Specifies whether the tasks "Publish this file to the Web," "Publish this folder to the Web," and "Publish the selected items to the Web," are available from File a
Specifies whether the tasks "Publish this file to the Web," "Publish this folder to the Web," and "Publish the selected items to the Web," are available from File a
Specifies whether Windows Messenger collects anonymous information about how Windows Messenger software and service is used. With the Customer Exp
Specifies whether Windows Messenger collects anonymous information about how Windows Messenger software and service is used. With the Customer Exp
The Windows Customer Experience Improvement Program will collect information about your hardware configuration and how you use our software and service
When you enable this setting, it will prevent Internet Information Services (IIS) from being installed, and you will not be able to install Windows components or a
Designates the Audio/Video Player ActiveX control as administrator-approved. This control is used for playing sounds, videos, and other media. If you enable
Designates the Microsoft Network (MSN) Carpoint automatic pricing control as administrator-approved. This control enables enhanced pricing functionality on
This ActiveX control enables users to edit HTML text and see a faithful rendition of how the text would look in the browser. There are two versions of the control
Designates Shockwave flash as an administrator approved control. If you enable this policy, this control can be run in security zones in which you specify that
Designates a set of Microsoft Network (MSN) Investor controls as administrator-approved. These controls enable users to view updated lists of stocks on their
Designates a set of Microsoft ActiveX controls used to manipulate pop-up menus in the browser as administrator-approved. If you enable this policy, these con
Designates the Microsoft Agent ActiveX control as administrator-approved. Microsoft Agent is a set of software services that supports the presentation of softw
Designates the Microsoft Chat ActiveX control as administrator-approved. This control is used by Web authors to build text-based and graphical-based Chat c
Designates a set of MSNBC controls as administrator-approved. These controls enable enhanced browsing of news reports on the MSNBC Web site. If you e
Designates NetShow File Transfer Control as an administrator approved control. If you enable this policy, this control can be run in security zones in which you
Designates Microsoft Scriptlet Component as an administrator approved control. It is an Active X control which is used to render HTML pages. If you enable th
Designates Microsoft Survey Control as an administrator approved control. If you enable this policy, this control can be run in security zones in which you spec
This policy setting allows you to manage whether users receive a dialog requesting permission for active content on a CD to run. If you enable this policy settin
This policy setting allows you to manage whether users receive a dialog requesting permission for active content on a CD to run. If you enable this policy settin
This policy setting allows you to manage whether Internet Explorer will check revocation status of servers' certificates. Certificates are revoked when they have
This policy setting allows you to manage whether Internet Explorer will check revocation status of servers' certificates. Certificates are revoked when they have
This policy setting prevents the text on the screen from being rendered using the ClearType technology that enhances the readability of text on LCD displays.
This policy setting prevents the text on the screen from being rendered using the ClearType technology that enhances the readability of text on LCD displays.
This policy setting prevents users from using the Reset Internet Explorer Settings feature. Reset Internet Explorer Settings will allow the users to reset all setting
This policy setting prevents users from using the Reset Internet Explorer Settings feature. Reset Internet Explorer Settings will allow the users to reset all setting
This policy setting allows you to manage whether Internet Explorer checks for digital signatures (which identifies the publisher of signed software and verifies it
This policy setting allows you to manage whether Internet Explorer checks for digital signatures (which identifies the publisher of signed software and verifies it
This policy setting allows you to manage whether Internet Explorer will launch COM add-ons known as browser helper objects, such as toolbars. Browser helpe
This policy setting allows you to manage whether Internet Explorer will launch COM add-ons known as browser helper objects, such as toolbars. Browser helpe
This policy setting allows you to manage whether users can automatically download and install Web components (such as fonts) that can installed by Internet E
This policy setting allows you to manage whether users can automatically download and install Web components (such as fonts) that can installed by Internet E
This policy setting allows you to manage whether users can download and install self-installing program files (non-Internet Explorer components) that are regist
This policy setting allows you to manage whether users can download and install self-installing program files (non-Internet Explorer components) that are regist
This policy setting allows you to manage whether Internet Explorer checks the Internet for newer versions. When Internet Explorer is set to do this, the checks o
This policy setting allows you to manage whether Internet Explorer checks the Internet for newer versions. When Internet Explorer is set to do this, the checks o
This policy setting allows you to manage whether software, such as ActiveX controls and file downloads, can be installed or run by the user even though the sig
This policy setting allows you to manage whether software, such as ActiveX controls and file downloads, can be installed or run by the user even though the sig
This policy setting allows you to manage whether Internet Explorer will display animated pictures found in Web content. Generally only animated GIF files are a
This policy setting allows you to manage whether Internet Explorer will display animated pictures found in Web content. Generally only animated GIF files are a
This policy setting allows you to manage whether Internet Explorer will play sounds found in web content. Generally only sound files such as MIDI files are affec
This policy setting allows you to manage whether Internet Explorer will play sounds found in web content. Generally only sound files such as MIDI files are affec
This policy setting allows you to manage whether Internet Explorer will display videos found in Web content. Generally only embedded video files are affected b
This policy setting allows you to manage whether Internet Explorer will display videos found in Web content. Generally only embedded video files are affected b
This policy setting specifies whether you will accept requests from Web sites for Profile Assistant information. If you enable this policy setting, Profile Assistant
This policy setting specifies whether you will accept requests from Web sites for Profile Assistant information. If you enable this policy setting, Profile Assistant
This policy setting allows you to manage whether Internet Explorer will save encrypted pages that contain secure (HTTPS) information such as passwords and
This policy setting allows you to manage whether Internet Explorer will save encrypted pages that contain secure (HTTPS) information such as passwords and
This policy setting allows you to manage whether Internet Explorer deletes the contents of the Temporary Internet Files folder after all browser windows are clos
This policy setting allows you to manage whether Internet Explorer deletes the contents of the Temporary Internet Files folder after all browser windows are clos
This policy setting lets you turn on inline AutoComplete for Web addresses. The AutoComplete feature provides suggestions for what you type by automatically
This policy setting let you turn off Inline AutoComplete in Windows Explorer. Inline AutoComplete provides suggestions for what you type by automatically comp
This policy setting allows you to turn on your script debugger, if one is installed. Script debuggers are used by Web site developers to test programs and scripts
This policy setting specifies whether, when there is a problem connecting with an Internet server, to provide a detailed description with hints about how to correc
This policy setting specifies if, as you move from one Web page to another, Internet Explorer fades out of the page you are leaving and fades into the page to w
This policy setting specifies whether to display script errors when a page does not appear properly because of problems with its scripting. This feature is off by d
This policy setting specifies whether smooth scrolling is used to display content at a predefined speed. If you enable this policy setting, smooth scrolling will be
This policy setting specifies how you want links on Web pages to be underlined. Select one of the following settings: ΓÇó To underline all links, click Always. ΓÇ
Restricts the amount of information downloaded for offline viewing. If you enable this policy, you can set limits to the size and number of pages that users can
Prevents users from adding channels to Internet Explorer. Channels are Web sites that are updated automatically on your computer, according to a schedule s
Prevents users from specifying that Web pages can be downloaded for viewing offline. When users make Web pages available for offline viewing, they can view
Prevents channel providers from recording information about when their channel pages are viewed by users who are working offline. If you enable this policy,
Prevents users from viewing the Channel bar interface. Channels are Web sites that are automatically updated on their computer according to a schedule spec
Prevents users from adding, editing, or removing schedules for offline viewing of Web pages and groups of Web pages that users have subscribed to. A subsc
Prevents users from editing an existing schedule for downloading Web pages for offline viewing. When users make Web pages available for offline viewing, th
Prevents users from disabling channel synchronization in Microsoft Internet Explorer. Channels are Web sites that are automatically updated on your compute
Prevents users from clearing the preconfigured settings for Web pages to be downloaded for offline viewing. When users make Web pages available for offline
Disables existing schedules for downloading Web pages for offline viewing. When users make Web pages available for offline viewing, they can view content w
Prevents content from being downloaded from Web sites that users have subscribed to. When users make Web pages available for offline viewing, they can v
This policy setting prevents the setting of the code download path for each machine. The Internet Component Download service exposes a function that is calle
This policy setting allows the user to choose the default text size in Internet Explorer. If you enable this policy setting, a user cannot choose the default text siz
Removes the Advanced tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented from seeing and changing adva
Removes the Advanced tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented from seeing and changing adva
Removes the Connections tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented from seeing and changing co
Removes the Connections tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented from seeing and changing co
If you enable this policy setting, users are prevented from seeing and changing ratings, certificates, AutoComplete, Wallet, and Profile Assistant settings. If you
If you enable this policy setting, users are prevented from seeing and changing ratings, certificates, AutoComplete, Wallet, and Profile Assistant settings. If you
Removes the General tab from the interface in the Internet Options dialog box. If you enable this policy, users are unable to see and change settings for the ho
Removes the General tab from the interface in the Internet Options dialog box. If you enable this policy, users are unable to see and change settings for the ho
Removes the Privacy tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented from seeing and changing default
Removes the Privacy tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented from seeing and changing default
Removes the Programs tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented from seeing and changing defau
Removes the Programs tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented from seeing and changing defau
Removes the Security tab from the interface in the Internet Options dialog box. If you enable this policy, it prevents users from seeing and changing settings fo
Removes the Security tab from the interface in the Internet Options dialog box. If you enable this policy, it prevents users from seeing and changing settings fo
This policy setting allows you to manage whether Internet Explorer converts Unicode domain names to IDN format (Punycode) before sending them to Domain
This policy setting allows you to manage whether Internet Explorer converts Unicode domain names to IDN format (Punycode) before sending them to Domain
This policy setting allows you to manage whether Internet Explorer uses UTF-8 for mailto links. If you enable this policy setting, Internet Explorer will encode m
This policy setting allows you to manage whether Internet Explorer uses UTF-8 for mailto links. If you enable this policy setting, Internet Explorer will encode m
Internet Explorer treats as fatal any Secure Socket Layer/Transport Layer Security (SSL/TLS) certificate errors that interrupt navigation (such as "expired," "revo
Internet Explorer treats as fatal any Secure Socket Layer/Transport Layer Security (SSL/TLS) certificate errors that interrupt navigation (such as "expired," "revo
This policy setting specifies whether to use UTF-8, a standard that defines characters so they are readable in any language. Using UTF-8 enables you to excha
This policy setting prevents users from configuring the background color in Internet Explorer. If you enable this policy setting, a user cannot choose the backgr
This policy setting allows you to manage whether users can choose text color in Internet Explorer. If you enable this policy setting, a user cannot choose text c
This policy setting prevents users from using Windows colors as a part of the display settings. By default, this functionality is turned on. If you enable this polic
This policy setting prevents the configuration of cipher strength update information URLs. When you log on to secure pages, access cannot be granted unless y
This policy setting determines if the Internet Connection Wizard was completed. If it was not completed, it launches the Internet Connection Wizard. If you ena
This policy setting allows you to manage a list of add-ons to be allowed or denied by Internet Explorer. This list can be used with the 'Deny all add-ons unless
This policy setting allows you to manage a list of add-ons to be allowed or denied by Internet Explorer. This list can be used with the 'Deny all add-ons unless
This policy setting allows you to ensure that any Internet Explorer add-ons not listed in the 'Add-on List' policy setting are denied. By default, the 'Add-on List' p
This policy setting allows you to ensure that any Internet Explorer add-ons not listed in the 'Add-on List' policy setting are denied. By default, the 'Add-on List' p
This policy setting allows you to manage whether processes respect add-on management user preferences (as reflected by Add-on Manager) or policy settings
This policy setting allows you to manage whether processes respect add-on management user preferences (as reflected by Add-on Manager) or policy settings
This policy setting allows you to manage whether the listed processes respect add-on management user preferences (as entered into Add-on Manager) or polic
This policy setting allows you to manage whether the listed processes respect add-on management user preferences (as entered into Add-on Manager) or polic
For each zone, the Binary and Scripted Behavior security restrictions may be configured to allow only a list of admin-approved behaviors. This list may be config
For each zone, the Binary and Scripted Behavior security restrictions may be configured to allow only a list of admin-approved behaviors. This list may be config
Internet Explorer contains dynamic binary behaviors: components that encapsulate specific functionality for the HTML elements to which they are attached. This
Internet Explorer uses Multipurpose Internet Mail Extensions (MIME) data to determine file handling procedures for files received through a Web server. This p
This policy setting allows you to manage whether the Information Bar is displayed for processes other than the Internet Explorer processes when file or code ins
This policy setting allows you to manage whether the Information Bar is displayed for processes other than the Internet Explorer processes when file or code ins
This policy setting allows you to manage whether the Information Bar is displayed for Internet Explorer processes when file or code installs are restricted. By de
This policy setting allows you to manage whether the Information Bar is displayed for Internet Explorer processes when file or code installs are restricted. By de
This policy setting allows you to manage whether the Information Bar is displayed for specific processes when file or code installs are restricted. By default, the
This policy setting allows you to manage whether the Information Bar is displayed for specific processes when file or code installs are restricted. By default, the
Internet Explorer places zone restrictions on each Web page it opens, which are dependent upon the location of the Web page (Internet, Intranet, Local Machin
This policy setting determines whether Internet Explorer MIME sniffing will prevent promotion of a file of one type to a more dangerous file type. If you enable t
This policy setting determines whether Internet Explorer MIME sniffing will prevent promotion of a file of one type to a more dangerous file type. This policy set
This policy setting determines whether Internet Explorer MIME sniffing will prevent promotion of a file of one type to a more dangerous file type. This policy set
The MK Protocol Security Restriction policy setting reduces attack surface area by preventing the MK protocol. Resources hosted on the MK protocol will fail.
Internet Explorer may be configured to prevent active content obtained through restricted protocols from running in an unsafe manner. This policy setting contro
Windows Explorer and Internet Explorer may be configured to prevent active content obtained through restricted protocols from running in an unsafe manner. T
Windows Explorer and Internet Explorer may be configured to prevent active content obtained through restricted protocols from running in an unsafe manner. T
This policy setting defines whether a reference to an object is accessible when the user navigates within the same domain or to a new domain. If you enable th
This policy setting defines whether a reference to an object is accessible when the user navigates within the same domain or to a new domain. This policy sett
This policy setting defines whether a reference to an object is accessible when the user navigates within the same domain or to a new domain. This policy sett
Internet Explorer places restrictions on each Web page it opens. The restrictions are dependent upon the location of the Web page (Internet, Intranet, Local Ma
This policy setting enables applications hosting the Web Browser Control to block automatic prompting of ActiveX control installation. If you enable this policy s
This policy setting enables blocking of ActiveX control installation prompts for Internet Explorer processes. If you enable this policy setting, prompting for Activ
This policy setting enables blocking of ActiveX control installation prompts for Internet Explorer processes. If you enable this policy setting, prompting for Activ
This policy setting enables applications hosting the Web Browser Control to block automatic prompting of file downloads that are not user initiated. If you enab
This policy setting enables blocking of file download prompts that are not user initiated. If you enable this policy setting, file download prompts that are not use
This policy setting enables blocking of file download prompts that are not user initiated. If you enable this policy setting, file download prompts that are not use
Internet Explorer allows scripts to programmatically open, resize, and reposition windows of various types. The Window Restrictions security feature restricts po
For each zone, the Network Protocol Lockdown security restriction may be configured to prevent active content obtained through restricted protocols from runni
This policy setting allows you to manage the crash detection feature of add-on Management. If you enable this policy setting, a crash in Internet Explorer will e
This policy setting allows you to manage the crash detection feature of add-on Management. If you enable this policy setting, a crash in Internet Explorer will e
This policy setting allows you to manage whether users have the ability to allow or deny add-ons through Add-On Manager. If you enable this policy setting, us
This policy setting allows you to manage whether users have the ability to allow or deny add-ons through Add-On Manager. If you enable this policy setting, us
This policy setting allows you to add a specific set of search providers to the user's default search provider list. Normally, search providers can be added from th
This policy setting allows you to add a specific set of search providers to the user's default search provider list. Normally, search providers can be added from th
This policy setting allows you to turn on or turn off the legacy "File, Edit, View, etc. ..." menus in Internet Explorer. If you enable this policy setting, the menu ba
This policy setting allows you to turn on or turn off the legacy "File, Edit, View, etc. ..." menus in Internet Explorer. If you enable this policy setting, the menu ba
Prevents automatic proxy scripts, which interact with a server to automatically configure users' proxy settings, from being stored in the users' cache. If you ena
Prevents branding of Internet programs, such as customization of Internet Explorer and Outlook Express logos and title bars, by another party. If you enable th
Prevents users from changing settings on the Advanced tab in the Internet Options dialog box. If you enable this policy, users are prevented from changing ad
This policy setting allows you to customize the Internet Explorer version string as reported to Web servers in the HTTP User Agent header. If you enable this p
This policy setting allows you to customize the Internet Explorer version string as reported to Web servers in the HTTP User Agent header. If you enable this p
Specifies that Automatic Detection will be used to configure dial-up settings for users. Automatic Detection uses a DHCP (Dynamic Host Configuration Protoco
This policy setting prevents users from performing the "Fix settings" functionality related to Security Settings Check. If you enable this policy setting, users can
This policy setting prevents users from performing the "Fix settings" functionality related to Security Settings Check. If you enable this policy setting, users can
This policy setting allows the user to enable a phishing filter that will warn if the Web site being visited is known for fraudulent attempts to gather personal inform
This policy setting allows the user to enable a phishing filter that will warn if the Web site being visited is known for fraudulent attempts to gather personal inform
This policy setting turns off the Security Settings Check feature, which checks Internet Explorer security settings to determine when the settings put Internet Exp
This policy setting turns off the Security Settings Check feature, which checks Internet Explorer security settings to determine when the settings put Internet Exp
The navigation bar contains icons for a variety of features including navigating among web pages, searching the web using a selection of search tools, accessin
You can block or allow pop-ups based on three filter levels: High ΓÇô Block All Pop-ups Medium ΓÇô Block most Automatic pop-ups Low ΓÇô Allow pop
You can block or allow pop-ups based on three filter levels: High ΓÇô Block All Pop-ups Medium ΓÇô Block most Automatic pop-ups Low ΓÇô Allow pop
Specifies that error messages will be displayed to users if problems occur with proxy scripts. If you enable this policy, error messages will be displayed when t
This policy setting logs information that is blocked by new features in Internet Explorer. The logged data is displayed in the Windows Event Viewer. If you enab
This policy setting logs information that is blocked by new features in Internet Explorer. The logged data is displayed in the Windows Event Viewer. If you enab
The Navigation bar includes features for navigating among Web pages, searching the Web using a selection of search tools, viewing a History of visited pages,
The Navigation bar includes features for navigating among Web pages, searching the Web using a selection of search tools, viewing a History of visited pages,
Prevents users from exporting or importing favorite links and feeds by using the Import/Export Wizard. If you enable this policy, the Import/Export Wizard cann
This policy setting prevents the user from zooming into or out of a page to better see the content. If you enable this policy setting, applications hosting MSHTM
This policy setting prevents the user from zooming into or out of a page to better see the content. If you enable this policy setting, applications hosting MSHTM
Prevents users from configuring unique identities by using Identity Manager. Identity Manager enables users to create multiple accounts, such as e-mail accou
Allows Administrators to enable and disable the Media Explorer Bar and set the auto-play default. The Media Explorer Bar plays music and video content from
This policy setting prevents users from performing the "Delete Browsing History" action in Internet Explorer. If you enable this policy setting, users cannot perfo
This policy setting prevents users from performing the "Delete Browsing History" action in Internet Explorer. If you enable this policy setting, users cannot perfo
This policy setting prevents the user from clearing forms. This is available as "Delete Forms" option in the "Delete Browsing History" dialog box in Internet Explo
This policy setting prevents the user from clearing forms. This is available as "Delete Forms" option in the "Delete Browsing History" dialog box in Internet Explo
This policy setting prevents the user from clearing passwords. This option is available as "Delete Passwords" option in the "Delete Browsing History" dialog box
This policy setting prevents the user from clearing passwords. This option is available as "Delete Passwords" option in the "Delete Browsing History" dialog box
This policy setting prevents performance of the First Run Customize settings ability and controls what the user will see when they launch Internet Explorer for th
This policy setting prevents performance of the First Run Customize settings ability and controls what the user will see when they launch Internet Explorer for th
This policy setting allows you to turn off the Help menu in Internet Explorer. If you enable this policy setting, users will not be able to use the Internet Explorer h
This policy setting allows you to turn off the Help menu in Internet Explorer. If you enable this policy setting, users will not be able to use the Internet Explorer h
This policy setting allows you to disable the Internet Explorer search box, which includes a drop-down list of all installed search providers as well as a link to sea
This policy setting allows you to disable the Internet Explorer search box, which includes a drop-down list of all installed search providers as well as a link to sea
Prevents Internet Explorer from automatically installing components. If you enable this policy, it prevents Internet Explorer from downloading a component whe
This policy setting allows you to turn off the Quick Tabs functionality in Internet Explorer. If you enable this policy setting, the entry points to Quick Tabs will be
This policy setting allows you to turn off the Quick Tabs functionality in Internet Explorer. If you enable this policy setting, the entry points to Quick Tabs will be
This policy setting prevents you from setting the default search provider for the address bar and the Toolbar Search Box. If you enable this policy setting, user
This policy setting prevents you from setting the default search provider for the address bar and the Toolbar Search Box. If you enable this policy setting, user
Prevents the Internet Explorer splash screen from appearing when users start the browser. If you enable this policy, the splash screen, which displays the prog
This policy setting allows you to turn off tabbed browsing and related entry points from the Internet Explorer user interface. If you enable this policy setting, tab
This policy setting allows you to turn off tabbed browsing and related entry points from the Internet Explorer user interface. If you enable this policy setting, tab
This policy setting allows you to define the user experience related to pop-up windows and tabbed browsing in Internet Explorer. If you enable this policy settin
This policy setting allows you to define the user experience related to pop-up windows and tabbed browsing in Internet Explorer. If you enable this policy settin
Prevents Internet Explorer from checking whether a new version of the browser is available. If you enable this policy, it prevents Internet Explorer from checkin
This policy setting allows you to configure the behavior of new windows in Internet Explorer. If you enable this policy setting, the user will not be able to configu
This policy setting allows you to configure the behavior of new windows in Internet Explorer. If you enable this policy setting, the user will not be able to configu
Allows Administrators to enable and disable the ability for Outlook Express users to save or open attachments that can potentially contain a virus. If you check
This policy setting allows you to specify a list of web sites that will be allowed to open pop-up windows regardless of the Internet Explorer process's Pop-Up Blo
This policy setting allows you to specify a list of web sites that will be allowed to open pop-up windows regardless of the Internet Explorer process's Pop-Up Blo
If you enable this policy, the user cannot modify the Accessibility options. All options in the "Accessibility" window on the General Tab in the Internet Options dia
This setting specifies to automatically detect the proxy server settings used to connect to the Internet and customize Internet Explorer. This setting specifies tha
This setting specifies to automatically detect the proxy server settings used to connect to the Internet and customize Internet Explorer. This setting specifies tha
Prevents users from changing the browser cache settings, such as the location and amount of disk space to use for the Temporary Internet Files folder. If you
Prevents users from changing the default programs for managing schedules and contacts. If you enable this policy, the Calendar and Contact combo boxes ap
Prevents users from changing certificate settings in Internet Explorer. Certificates are used to verify the identity of software publishers. If you enable this policy
Prevents Microsoft Internet Explorer from checking to see whether it is the default browser. If you enable this policy, the Internet Explorer Should Check to See
Prevents users from changing the default Web page colors. If you enable this policy, the color settings for Web pages appear dimmed. The settings are locate
Prevents users from changing dial-up settings. If you enable this policy, the Settings button on the Connections tab in the Internet Options dialog box appears
Prevents users from changing dial-up settings. If you enable this policy, the Settings button on the Connections tab in the Internet Options dialog box appears
Prevents users from running the Internet Connection Wizard. If you enable this policy, the Setup button on the Connections tab in the Internet Options dialog b
Prevents users from changing font settings. If you enable this policy, users will not be able to change font settings for viewing Web pages. All font settings visib
This AutoComplete feature suggests possible matches when users are filling up forms. If you enable this setting, the user is not suggested matches when fillin
This AutoComplete feature can remember and suggest User names and passwords on Forms. If you enable this setting, the user cannot change "User name
This setting specifies the number of days that Internet Explorer keeps track of the pages viewed in the History List. The delete Browsing History option can be a
This setting specifies the number of days that Internet Explorer keeps track of the pages viewed in the History List. The delete Browsing History option can be a
The Home page in the Internet Options Settings is the default web page that internet explorer loads whenever it is run. If you enable this policy setting, a user
Prevents users from changing language preference settings. If you enable this policy, users will not be able to set language preferences to read websites. Lan
Prevents users from changing the colors of links on Web pages. If you enable this policy, the color settings for links appear dimmed. The settings are located i
Prevents users from changing the default programs for messaging tasks. If you enable this policy, the E-mail, Newsgroups, and Internet Call options in the Inte
You can allow Pop-ups from specific websites by adding the site to the exceptions list. If you enable this policy, users will not be able to add or remove website
You can allow Pop-ups from specific websites by adding the site to the exceptions list. If you enable this policy, users will not be able to add or remove website
This policy setting allows you to manage pop-up management functionality in Internet Explorer. If you enable this policy setting, the Control Panel information
This policy setting allows you to manage pop-up management functionality in Internet Explorer. If you enable this policy setting, the Control Panel information
Prevents users from changing Profile Assistant settings. If you enable this policy, the My Profile button appears dimmed in the Personal Information area on th
This setting specifies to connect to the internet using the proxy server settings specified. A proxy server acts as an intermediary between your internal network (
This setting specifies to connect to the internet using the proxy server settings specified. A proxy server acts as an intermediary between your internal network (
Prevents users from changing ratings that help control the type of Internet content that can be viewed. If you enable this policy, the settings in the Content Adv
Prevents users from restoring default settings for home and search pages. If you enable this policy, the Reset Web Settings button on the Programs tab in the
This policy setting is used to manage temporary Internet files and cookies associated with your Internet browsing history, available by clicking Tools, Internet Op
This policy setting is used to manage temporary Internet files and cookies associated with your Internet browsing history, available by clicking Tools, Internet Op
This AutoComplete feature suggests possible matches when users are entering Web addresses in the browser address bar. If you enable this policy setting, u
Disables using the F3 key to search in Internet Explorer and Windows Explorer. If you enable this policy, the search functionality of the F3 key is disabled. Use
Makes the Customize button in the Search Assistant appear dimmed. The Search Assistant is a tool that appears in the Search bar to help users search the In
Applies security zone information to all users of the same computer. A security zone is a group of Web sites with the same security level. If you enable this pol
Prevents users from changing security zone settings. A security zone is a group of Web sites with the same security level. If you enable this policy, the Custom
Prevents users from adding or removing sites from security zones. A security zone is a group of Web sites with the same security level. If you enable this polic
Specifies that programs using the Microsoft Software Distribution Channel will not notify users when they install new components. The Software Distribution Ch
This policy setting allows you to restrict the search providers that will appear in the search box in Internet Explorer to a list defined in the list of search provider p
This policy setting allows you to restrict the search providers that will appear in the search box in Internet Explorer to a list defined in the list of search provider p
This policy setting prevents users from participating in the Customer Experience Improvement Program (CEIP). If you enable this policy setting, it prevents use
This policy setting prevents users from participating in the Customer Experience Improvement Program (CEIP). If you enable this policy setting, it prevents use
This policy setting allows you to configure the default behavior of new tab creation in Internet Explorer. If you enable this policy setting, the user will not be able
This policy setting allows you to configure the default behavior of new tab creation in Internet Explorer. If you enable this policy setting, the user will not be able
Applies proxy settings to all users of the same computer. If you enable this policy, users cannot set user-specific proxy settings. They must use the zones crea
This policy setting allows you to play video and animation through the dynsrc/img tag in a specified zone. This means video and animation using DirectShow wi
This policy setting allows you to manage whether scriptlets can be allowed. If you enable this policy setting, users will be able to run scriptlets. If you disable
This policy setting controls the First Run response that users see on a zone by zone basis. When a user encounters a new control that has not previously run i
This policy setting allows you to manage whether script is allowed to update the status bar within the zone. If you enable this policy setting, script is allowed to
Protected mode protects Internet Explorer from exploited vulnerabilities by reducing the locations Internet Explorer can write to in the registry and the file system
These are browser-hosted, ClickOnce-deployed applications built using WinFX. These applications execute in a security sandbox and harness the power of the
This feature represents the setup of WinFX Runtime Components. WinFX is the next generation platform for Windows, utilizing the Common Language Runtime
These are eXtensible Application Markup Language (XAML) files. XAML is an XML-based declarative markup language commonly used for creating rich user in
These are files authored using the XML Paper Specification document format that contain a fixed-layout representation of its paginated content and is portable
This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or Ac
This policy setting allows you to manage whether script code on pages in the zone is run. If you enable this policy setting, script code on pages in the zone can
This policy setting allows you to manage whether a user's browser can be redirected to another Web page if the author of the Web page uses the Meta Refresh
This policy setting allows you to manage whether scripts can perform a clipboard operation (for example, cut, copy, and paste) in a specified region. If you ena
This policy setting allows you to manage dynamic binary and script behaviors: components that encapsulate specific functionality for HTML elements to which t
This policy setting allows you to manage whether unwanted pop-up windows appear. Pop-up windows that are opened when the end user clicks a link are not b
This policy setting allows you to manage whether users can display nonsecure items and manage whether users receive a security information message to disp
This policy setting allows you to manage whether users may download signed ActiveX controls from a page in the zone. If you enable this policy, users can do
This policy setting allows you to manage whether users may download unsigned ActiveX controls from the zone. Such code is potentially harmful, especially wh
This policy setting allows you to manage whether users can drag files or copy and paste files from a source within the zone. If you enable this policy setting, us
This policy setting allows you to manage whether file downloads are permitted from the zone. This option is determined by the zone of the page with the link ca
This policy setting allows you to manage whether pages of the zone may download HTML fonts. If you enable this policy setting, HTML fonts can be download
This policy setting allows you to manage whether users can install Active Desktop items from this zone. The settings for this option are: If you enable this policy
This policy setting allows you to manage permissions for Java applets. If you enable this policy setting, you can choose options from the drop-down box. Custo
This policy setting allows you to manage whether applications may be run and files may be downloaded from an IFRAME reference in the HTML of the pages in
This policy setting allows you to manage settings for logon options. If you enable this policy setting, you can choose from the following logon options. Anonym
This policy setting allows you to manage MIME sniffing for file promotion from one type to another based on a MIME sniff. A MIME sniff is the recognition by Inte
This policy setting allows you to manage the opening of sub-frames and access of applications across different domains. If you enable this policy setting, user
This policy setting allows you to manage whether a resource hosted on an admin-restricted protocol in the Intranet Zone can run active content such as script, A
This policy setting allows you to manage whether users are prompted to select a certificate when no certificate or only one certificate exists. If you enable this
This policy setting manages whether users will be automatically prompted for ActiveX control installations. If you enable this policy setting, users will receive a
This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download d
This policy setting allows you to manage whether ActiveX controls and plug-ins can be run on pages from the specified zone. If you enable this policy setting,
This policy setting allows you to manage whether an ActiveX control marked safe for scripting can interact with a script. If you enable this policy setting, script
This policy setting allows you to manage ActiveX controls not marked as safe. If you enable this policy setting, ActiveX controls are run, loaded with parameter
This policy setting allows you to manage whether applets are exposed to scripts within the zone. If you enable this policy setting, scripts can access applets au
This policy setting allows you to manage whether .NET Framework components that are signed with Authenticode can be executed from Internet Explorer. The
This policy setting allows you to manage software channel permissions. If you enable this policy setting, you can choose the following options from the drop-do
This policy setting allows you to manage whether data on HTML forms on pages in the zone may be submitted. Forms sent with SSL (Secure Sockets Layer) e
This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. T
This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or directly within a Web page sav
This policy setting allows you to manage restrictions on script-initiated pop-up windows and windows that include the title and status bars. If you enable this po
This policy setting allows you to manage whether Web sites from less privileged zones, such as Restricted Sites, can navigate into this zone. If you enable this
This policy setting allows you to manage whether Web sites from less privileged zones, such as Internet sites, can navigate into this zone. If you enable this po
This policy setting allows you to manage whether a resource hosted on an admin-restricted protocol in the Trusted Sites Zone can run active content such as sc
This policy setting allows you to manage whether a resource hosted on an admin-restricted protocol in the Trusted Sites Zone can run active content such as sc
This policy setting controls whether local sites which are not explicitly mapped into any Security Zone are forced into the local Intranet security zone. If you ena
This policy setting controls whether local sites which are not explicitly mapped into any Security Zone are forced into the local Intranet security zone. If you ena
This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Medium
This policy setting controls whether sites which bypass the proxy server are mapped into the local Intranet security zone. If you enable this policy setting, sites
This policy setting controls whether sites which bypass the proxy server are mapped into the local Intranet security zone. If you enable this policy setting, sites
This policy setting controls whether URLs representing UNCs are mapped into the local Intranet security zone. If you enable this policy setting, all network pat
This policy setting controls whether URLs representing UNCs are mapped into the local Intranet security zone. If you enable this policy setting, all network pat
This policy setting allows you to manage a list of sites that you want to associate with a particular security zone. These zone numbers have associated security
This policy setting allows you to manage a list of sites that you want to associate with a particular security zone. These zone numbers have associated security
This policy setting enables intranet mapping rules to be applied automatically when the computer belongs to a domain. If you enable this policy setting, intrane
This policy setting enables intranet mapping rules to be applied automatically when the computer belongs to a domain. If you enable this policy setting, intrane
This policy setting allows an Information bar notification to be shown to the user when intranet content is loaded and the intranet mapping rules have not been c
This policy setting allows an Information bar notification to be shown to the user when intranet content is loaded and the intranet mapping rules have not been c
This policy setting prevents users from specifying the color to which hyperlinks change when the mouse pointer pauses on them. If you enable this policy settin
This policy setting prevents users from changing the color of Web page links that they have not yet clicked. Appropriate color choices can make links easier to s
This policy setting prevents users from changing the color of Web page links they have already clicked. Appropriate color choices can make links easier to see
This policy setting is used to make hyperlinks change color when the mouse pointer pauses on them. If you enable this policy setting, the hover color option w
Prevents users from closing Microsoft Internet Explorer and Windows Explorer. If you enable this policy, the Close command on the File menu will appear dim
Prevents users from saving Web pages from the browser File menu to their hard disk or to a network share. If you enable this policy, the Save As command o
Prevents users from saving the complete contents that are displayed on or run from a Web page, including the graphics, scripts, linked files, and other elements
Prevents users from opening a new browser window from the File menu. If this policy is enabled, users cannot open a new browser window by clicking the File
Prevents users from opening a file or Web page from the File menu in Internet Explorer. If you enable this policy, the Open dialog box will not appear when us
Prevents users from sending feedback to Microsoft by clicking the Send Feedback command on the Help menu. If you enable this policy, the Send Feedback
Prevents users from displaying tips for users who are switching from Netscape. If you enable this policy, the For Netscape Users command is removed from th
Prevents users from viewing or changing the Tip of the Day interface in Microsoft Internet Explorer. If you enable this policy, the Tip of the Day command is re
Prevents users from running the Internet Explorer Tour from the Help menu in Internet Explorer. If you enable this policy, the Tour command is removed from
Prevents the shortcut menu from appearing when users click the right mouse button while using the browser. If you enable this policy, the shortcut menu will n
Prevents users from adding, removing, editing or viewing the list of Favorite links. The Favorites list is a way to store popular links for future use. If you enabl
Prevents using the shortcut menu to open a link in a new browser window. If you enable this policy, users cannot point to a link, click the right mouse button, a
Prevents users from saving a program or file that Microsoft Internet Explorer has downloaded to the hard disk. If you enable this policy, users cannot save a pr
Prevents users from opening the Internet Options dialog box from the Tools menu in Microsoft Internet Explorer. If you enable this policy, users cannot change
Prevents users from displaying the browser in full-screen (kiosk) mode, without the standard toolbar. If you enable this policy, the Full Screen command on the
Prevents users from viewing the HTML source of Web pages by clicking the Source command on the View menu. If you enable this policy, the Source comma
This policy setting specifies that you want Internet Explorer to automatically resize large images so that they fit in the browser window. If you enable this policy
This policy setting specifies whether graphical images should be included when pages are displayed. Sometimes, pages that contain several graphical images
This policy setting specifies whether placeholders should be shown for graphical images while they are downloading. This allows items in the page to be positio
This policy setting specifies whether you want Internet Explorer to smooth images, so they appear less jagged when displayed. If you enable this policy setting
Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Local Computer security zone. If you enable this policy
Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Local Intranet security zone. If you enable this policy, y
Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Trusted Sites security zone. If you enable this policy, y
Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Internet security zone. If you enable this policy, you ca
Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Restricted Sites security zone. If you enable this policy
This policy setting specifies whether you want Internet Explorer to print background colors and images when you print a Web page. Selecting this check box mi
This policy setting controls whether to have background sync for feeds. If you enable the policy setting, the ability to sync feeds in the background is disabled.
This policy setting controls whether to have background sync for feeds. If you enable the policy setting, the ability to sync feeds in the background is disabled.
This policy setting prevents users from having enclosures (file attachments) downloaded from a feed to the user's computer. If you enable this policy setting, th
This policy setting prevents users from having enclosures (file attachments) downloaded from a feed to the user's computer. If you enable this policy setting, th
This policy setting prevents the users from subscribing to a feed or deleting a subscribed feed. If you enable this policy setting, the menu item to subscribe to t
This policy setting prevents the users from subscribing to a feed or deleting a subscribed feed. If you enable this policy setting, the menu item to subscribe to t
This policy setting prevents users from having Internet Explorer automatically detect if there is a feed available for an associated webpage. If you enable this p
This policy setting prevents users from having Internet Explorer automatically detect if there is a feed available for an associated webpage. If you enable this p
This policy setting prevents users from using Internet Explorer as a feed reader. This setting has no impact on the RSS Platform. If you enable this policy settin
This policy setting prevents users from using Internet Explorer as a feed reader. This setting has no impact on the RSS Platform. If you enable this policy settin
This policy setting allows this feature to be prevented or allowed for all processes running on the machine. If you enable this policy setting, a script running on
This policy setting allows this feature to be prevented or allowed for all processes running on the machine. If you enable this policy setting, a script running on
This policy setting allows you bypass prompting when scripts running within the Internet Explorer process attempt to perform a clipboard operation (for example
This policy setting allows you bypass prompting when scripts running within the Internet Explorer process attempt to perform a clipboard operation (for example
This policy setting allows administrators to define applications for which they want this feature to be prevented or allowed. Do not enter the Internet Explorer pr
This policy setting allows administrators to define applications for which they want this feature to be prevented or allowed. Do not enter the Internet Explorer pr
This policy setting specifies the action that will be performed when searching from the Address bar. There are two possible actions: ΓÇó Do not search from the
This policy setting allows users to run natively implemented scriptable XMLHTTP. If you enable this policy setting, the users will be allowed to use natively imp
This policy setting allows users to run natively implemented scriptable XMLHTTP. If you enable this policy setting, the users will be allowed to use natively imp
This policy setting allows Internet Explorer to be launched automatically to complete the signup process after the branding is complete for Internet service provi
The toolbar upgrade tool will check to see if incompatible toolbars or browser helper objects are installed when Internet Explorer is launched. When detected th
The toolbar upgrade tool will check to see if incompatible toolbars or browser helper objects are installed when Internet Explorer is launched. When detected th
Prevents users from determining which toolbars are displayed in Microsoft Internet Explorer and Windows Explorer. If you enable this policy, the list of toolbars
Prevents users from determining which buttons appear on the Microsoft Internet Explorer and Windows Explorer standard toolbars. The buttons appearing on th
Specifies which buttons will be displayed on the standard toolbar in Microsoft Internet Explorer. If you enable this policy, you can specify whether or not each b
This setting specifies the update check interval. The default value is 30 days. If you enable this policy setting, the user will not be able to configure the update
This policy setting allows checking for updates for Internet Explorer from the specified URL, included by default in Internet Explorer. If you enable this policy se
Turns off the handwriting recognition error reporting tool. The handwriting recognition error reporting tool enables users to report errors encountered in Tablet
Turns off the handwriting recognition error reporting tool. The handwriting recognition error reporting tool enables users to report errors encountered in Tablet
Turns off the automatic learning component of handwriting recognition personalization. Automatic learning enables the collection and storage of text and/or in
Turns off the automatic learning component of handwriting recognition personalization. Automatic learning enables the collection and storage of text and/or in
Turns off handwriting recognition personalization so the handwriting recognition engine that ships with Windows VistaΓäó is used instead of the personalized ha
Turns off handwriting recognition personalization so the handwriting recognition engine that ships with Windows VistaΓäó is used instead of the personalized ha
If enabled then new iSNS servers may not be added and thus new targets discovered via those iSNS servers; existing iSNS servers may not be removed. If dis
If enabled then new target portals may not be added and thus new targets discovered on those portals; existing target portals may not be removed. If disabled t
If enabled then discovered targets may not be manually configured. If disabled then discovered targets may be manually configured. Note: if enabled there may
If enabled then new targets may not be manually configured by entering the target name and target portal; already discovered targets may be manually configu
If enabled then do not allow the initiator iqn name to be changed. If disabled then the initiator iqn name may be changed.
If enabled then only those sessions that are established via a persistent login will be established and no new persistent logins may be created. If disabled then
If enabled then do not allow the initiator CHAP secret to be changed. If disabled then the initiator CHAP secret may be changed.
If enabled then only those connections that are configured for IPSec may be established. If disabled then connections that are configured for IPSec or connectio
If enabled then only those sessions that are configured for mutual CHAP may be established. If disabled then sessions that are configured for mutual CHAP or
If enabled then only those sessions that are configured for one-way CHAP may be established. If disabled then sessions that are configured for one-way CHAP
This policy setting allows you to specify which DNS host names and which DNS suffixes are mapped to a Kerberos realm. If you enable this policy setting, you
This policy setting configures the Kerberos client so that it can authenticate with interoperable Kerberos V5 realms, as defined by this policy setting. If you e
This policy setting controls the Kerberos client's behavior in validating the KDC certificate. If you enable this policy setting, the Kerberos client requires tha
This policy setting determines whether Diagnostic Policy Service (DPS) will diagnose memory leak problems. If you disable this policy setting, the DPS will not b
This policy setting turns on the Mapper I/O network protocol driver. LLTDIO allows a computer to discover the topology of a network it's connected to. It also a
This policy setting turns on the Responder network protocol driver. The Responder allows a computer to participate in Link Layer Topology Discovery requests
Ignores the customized run list. You can create a customized list of additional programs and documents that the system starts automatically when it runs on W
Ignores the customized run list. You can create a customized list of additional programs and documents that the system starts automatically when it runs on W
Ignores customized run-once lists. You can create a customized list of additional programs and documents that are started automatically the next time the sys
Ignores customized run-once lists. You can create a customized list of additional programs and documents that are started automatically the next time the sys
This setting forces the user to log on to the computer using the classic logon screen. By default, a workgroup is set to use the simple logon screen. This setting
Supresses the welcome screen. This setting hides the welcome screen that is displayed on Windows 2000 Professional each time the user logs on. Users ca
Specifies additional programs or documents that Windows starts automatically when a user logs on to the system. To use this setting, click Show, click Add, a
Specifies additional programs or documents that Windows starts automatically when a user logs on to the system. To use this setting, click Show, click Add, a
Determines whether Windows XP waits for the network during computer startup and user logon. By default, Windows XP does not wait for the network to be ful
Suppresses system status messages. If you enable this setting, the system does not display a message reminding users to wait while their system starts or sh
Supresses the welcome screen. This setting hides the welcome screen that is displayed on Windows 2000 Professional each time the user logs on. Users ca
Directs the system to display highly detailed status messages. If you enable this setting, the system displays status messages that reflect each step in the proc
By enabling the policy, Administrators hide the Switch user button in the Logon UI, the Start menu and the Task Manager.
Turn off the Windows Startup sound and prevent its customization in the Sound item of Control Panel. The Microsoft Windows Startup sound is heard during s
Specifies whether Windows Media Center can run. If you enable this setting, Windows Media Center will not run. If you disable or do not configure this setting
Specifies whether Windows Media Center can run. If you enable this setting, Windows Media Center will not run. If you disable or do not configure this setting
Prevents users from entering author mode. This setting prevents users from opening the Microsoft Management Console (MMC) in author mode, explicitly ope
Lets you selectively permit or prohibit the use of Microsoft Management Console (MMC) snap-ins. -- If you enable this setting, all snap-ins are prohibited, exce
Permits or prohibits use of this snap-in. If you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited. If this setting is
Permits or prohibits use of the Group Policy tab in property sheets for the Active Directory Users and Computers and Active Directory Sites and Services snap-i
This policy setting turns off Windows Mobility Center. If you enable this policy setting, the user is unable to invoke Windows Mobility Center. The Windows Mob
This policy setting turns off Windows Mobility Center. If you enable this policy setting, the user is unable to invoke Windows Mobility Center. The Windows Mob
This policy setting turns off Windows presentation settings. If you enable this policy setting, Windows presentation settings cannot be invoked. If you disable
This policy setting turns off Windows presentation settings. If you enable this policy setting, Windows presentation settings cannot be invoked. If you disable
Specifies whether Windows Movie Maker can run. Windows Movie Maker is a feature of Windows Vista that can be used to edit and then publish video as a m
Specifies whether Windows Movie Maker can run. Windows Movie Maker is a feature of Windows Vista that can be used to edit and then publish video as a m
Specifies whether links to Web sites are available in Windows Movie Maker. These links include the "Windows Movie Maker on the Web" and "Privacy Stateme
Specifies whether links to Web sites are available in Windows Movie Maker. These links include the "Windows Movie Maker on the Web" and "Privacy Stateme
Note: Applies to Windows Movie Maker 2.1 only Specifies whether Windows Movie Maker automatically downloads codecs. Windows Movie Maker can be c
Note: Applies to Windows Movie Maker 2.1 only Specifies whether Windows Movie Maker automatically downloads codecs. Windows Movie Maker can be c
Note: Applies to Windows Movie Maker 2.1 only Specifies whether users can send a final movie to a video hosting provider on the Web by choosing "The We
Note: Applies to Windows Movie Maker 2.1 only Specifies whether users can send a final movie to a video hosting provider on the Web by choosing "The We
Determines the execution level for Microsoft Support Diagnostic Tool. Microsoft Support Diagnostic Tool (MSDT) gathers diagnostic data for analysis by suppo
Restricts the tool download policy for Microsoft Support Diagnostic Tool. Microsoft Support Diagnostic Tool (MSDT) gathers diagnostic data for analysis by sup
Allows users to search for installation files during privileged installations. This setting enables the Browse button in the "Use feature from" dialog box. As a res
Allows users to install programs from removable media, such as floppy disks and CD-ROMs, during privileged installations. This setting permits all users to ins
Allows users to upgrade programs during privileged installations. This setting permits all users to install patches, even when the installation program is running
Directs Windows Installer to use system permissions when it installs any program on the system. This setting extends elevated privileges to all programs. The
Directs Windows Installer to use system permissions when it installs any program on the system. This setting extends elevated privileges to all programs. The
The Restart Manager API can eliminate or reduce the number of system restarts that are required to complete an installation or update. This setting controls Wi
Prevents users from searching for installation files when they add features or components to an installed program. This setting disables the Browse button bes
This setting controls the ability to turn off all patch optimizations. If you turn on this policy setting (set to 1), all Patch Optimization options are turned off during
The MsiLogging property in an installation package can be used to enable automatic logging of all install operations for the package. This setting controls Wind
Prevents users from installing programs from removable media. If a user tries to install a program from removable media, such as CD-ROMs, floppy disks, and
Disables or restricts the use of Windows Installer. This setting can prevent users from installing software on their systems or permit users to install only those p
Prevents users from using Windows Installer to install patches. Patches are updates or upgrades that replace only those program files that have changed. Bec
Prohibits Windows Installer from generating and saving the files it needs to reverse an interrupted or unsuccessful installation. This setting prevents Windows
Prohibits Windows Installer from generating and saving the files it needs to reverse an interrupted or unsuccessful installation. This setting prevents Windows
Allows Terminal Services administrators to install and configure programs remotely. By default, system administrators can install programs only when system
Permits users to change installation options that typically are available only to system administrators. This setting bypasses some of the security features of W
This setting controls the ability of non-administrators to install updates that have been digitally signed by the application vendor. Non-administrator updates pro
This setting controls the ability for users or administrators to remove Windows Installer based updates. This setting should be used if you need to maintain a t
System Restore enables users, in the event of a problem, to restore their computers to a previous state without losing personal data files. By default, the Windo
This setting allows you to configure user installs. To configure this setting, set it to enabled and use the drop-down list to select the behavior you want. If this s
This setting causes the Windows Installer to enforce strict rules for component upgrades - setting this may cause some updates to fail. If you enable this policy
This policy controls the percentage of disk space available to the Windows Installer baseline file cache. The Windows Installer uses the baseline file cache to s
Specifies the types of events that Windows Installer records in its transaction log for each installation. The log, Msi.log, appears in the Temp directory of the sys
Allows Web-based programs to install software on the computer without notifying the user. By default, when a script hosted by an Internet browser tries to inst
Specifies the order in which Windows Installer searches for installation files. By default, the Windows Installer searches the network first, then removable medi
Saves copies of transform files in a secure location on the local computer. Transform files consist of instructions to modify or customize a program during insta
Defines whether a domain controller (DC) should attempt to verify with the PDC the password provided by a client if the DC failed to validate the password. Co
When applications performing periodic searches for domain controllers (DC) are unable to find a DC, the value set in this setting determines the amount of time
When applications performing periodic searches for Domain Controllers (DCs) are unable to find a DC, the value set in this setting determines the maximum ret
When applications performing periodic searches for domain controllers (DC) are unable to find a DC, the value set in this setting determines when retries are no
Determines when a successful DC cache entry is refreshed. This setting is applied to caller programs that periodically attempt to locate DCs, and it is applied be
Specifies the level of debug output for the Net Logon service. The Net Logon service outputs debug information to the log file netlogon.log in the directory %wi
Specifies the additional time for the computer to wait for the domain controllerΓÇÖs (DC) response when logging on to the network. To specify the Expected d
Specifies the maximum size in bytes of the log file netlogon.log in the directory %windir%\debug when logging is enabled. By default, the maximum size of the
Specifies the amount of time (in seconds) the DC locator remembers that a domain controller (DC) could not be found in a domain. When a subsequent attemp
This setting controls whether or not the Netlogon share created by the Net Logon service on a domain controller (DC) should support compatibility in file sharing
Determines when a successful DC cache entry is refreshed. This setting is applied to caller programs that do not periodically attempt to locate DCs, and it is ap
Determines the interval at which Netlogon performs the following scavenging operations: - Checks if a password on a secure channel needs to be modified, an
Specifies the Active Directory site to which computers belong. An Active Directory site is one or more well-connected TCP/IP subnets that allow administrators
This setting controls whether or not the Sysvol share created by the Net Logon service on a domain controller (DC) should support compatibility in file sharing s
Specifies whether the computers to which this setting is applied attempt DNS name resolution of a single-label domain names. By default, when a computer (o
Determines whether domain controllers (DC) will dynamically register DC Locator site-specific SRV records for the closest sites where no DC for the same dom
Determines which Domain Controller (DC) Locator DNS records are not registered by the Netlogon service. To enable this setting, select Enable and specify a
Specifies the Refresh Interval of the domain controller (DC) Locator DNS resource records for DCs to which this setting is applied. These DNS records are dyna
Specifies the value for the Time-To-Live (TTL) field in Net Logon registered SRV resource records. These DNS records are dynamically registered by the Net L
Specifies the sites for which the global catalogs (GC) should register site-specific GC locator DNS SRV resource records. These records are registered in addit
Specifies the Priority field in the SRV resource records registered by domain controllers (DC) to which this setting is applied. These DNS records are dynamical
Specifies the Weight field in the SRV resource records registered by the domain controllers (DC) to which this setting is applied. These DNS records are dynam
Specifies the sites for which the domain controllers (DC) housing application directory partition should register the site-specific, application directory partition-sp
Specifies the sites for which the domain controllers (DC) register the site-specific DC Locator DNS SRV resource records. These records are registered in addit
Determines if Dynamic Registration of the domain controller (DC) locator DNS resource records is enabled. These DNS records are dynamically registered by t
The Domain Controller Locator (DC Locator) service is used by clients to find domain controllers for their Active Directory domain. The default behavior for DC L
The Domain Controller Locator (DC Locator) service is used by clients to find domain controllers for their Active Directory domain. When DC Locator finds a dom
The Domain Controller (DC) Locator APIs return IP address of the DC with the other part of the information. Before the support of IPv6, the returned DC IP add
Determines whether administrators can add and remove network components for a LAN or remote access connection. This setting has no effect on nonadminis
Determines whether the Advanced Settings item on the Advanced menu in Network Connections is enabled for administrators. The Advanced Settings item le
Determines whether users can configure advanced TCP/IP settings. If you enable this setting (and enable the "Enable Network Connections settings for Admi
Determines whether a user can install and configure the Network Bridge. Important: This settings is location aware. It only applies when a computer is connec
Determines whether administrators can enable and disable the components used by LAN connections. If you enable this setting (and enable the "Enable Netw
Determines whether users can delete all user remote access connections. To create an all-user remote access connection, on the Connection Availability pag
Determines whether users can delete remote access connections. If you enable this setting (and enable the "Enable Network Connections settings for Adminis
Determines whether the Remote Acccess Preferences item on the Advanced menu in Network Connections folder is enabled. The Remote Access Preference
Determines whether settings that existed in Windows 2000 Server family will apply to Administrators. The set of Network Connections group settings that exist
This policy setting allows you to manage whether notifications are shown to the user when a DHCP-configured connection is unable to retrieve an IP address fr
Determines whether Administrators and Network Configuration Operators can change the properties of components used by a LAN connection. This setting de
Determines whether users can enable/disable LAN connections. If you enable this setting, the Enable and Disable options for LAN connections are available t
Determines whether users can change the properties of a LAN connection. This setting determines whether the Properties menu item is enabled, and thus, wh
Determines whether users can use the New Connection Wizard, which creates new network connections. If you enable this setting (and enable the "Enable N
Prohibits use of Internet Connection Firewall on your DNS domain network. Determines whether users can enable the Internet Connection Firewall feature on
Determines whether a user can view and change the properties of remote access connections that are available to all users of the computer. To create an all-u
Determines whether users can view and change the properties of components used by a private or all-user remote access connection. This setting determines
Determines whether users can connect and disconnect remote access connections. If you enable this setting (and enable the "Enable Network Connections s
Determines whether users can view and change the properties of their private remote access connections. Private connections are those that are available on
Determines whether nonadministrators can rename all-user remote access connections. To create an all-user connection, on the Connection Availability page
Determines whether users can rename LAN or all user remote access connections. If you enable this setting, the Rename option is enabled for all users. User
Determines whether nonadministrators can rename a LAN connection. If you enable this setting, the Rename option is enabled for LAN connections. Nonadm
Determines whether users can rename their private remote access connections. Private connections are those that are available only to one user. To create a
Determines whether administrators can enable and configure the Internet Connection Sharing (ICS) feature of an Internet connection and if the ICS service can
Determines whether users can view the status for an active connection. Connection status is available from the connection status taskbar icon or from the Sta
Disables the Connect to a Network Projector wizard so that users cannot connect to a network projector. If you enable this policy, users cannot use the Conne
Disables the Connect to a Network Projector wizard so that users cannot connect to a network projector. If you enable this policy, users cannot use the Conne
Makes subfolders available offline whenever their parent folder is made available offline. This setting automatically extends the "make available offline" setting
This policy setting lists network files and folders that are always available for offline use. This ensures that the the specified files and folders are available offline
This policy setting lists network files and folders that are always available for offline use. This ensures that the the specified files and folders are available offline
Determines how computers respond when they are disconnected from particular offline file servers. This setting overrides the default response, a user-specified
Determines how computers respond when they are disconnected from particular offline file servers. This setting overrides the default response, a user-specified
Limits the percentage of the computer's disk space that can be used to store automatically cached offline files. This setting also disables the "Amount of disk s
Determines whether the Offline Files feature is enabled. This setting also disables the "Enable Offline Files" option on the Offline Files tab. This prevents users
This setting determines whether offline files are encrypted. Offline files reside on a user's hard drive, not the network, and they are stored in a local cache on t
Determines which events the Offline Files feature records in the event log. Offline Files records events in the Application log in Event Viewer when it detects e
Determines which events the Offline Files feature records in the event log. Offline Files records events in the Application log in Event Viewer when it detects e
Lists types of files that cannot be used offline. This setting lets you exclude certain types of files from automatic and manual caching for offline use. The system
Determines whether network files remain available if the computer is suddenly disconnected from the server hosting the files. This setting also disables the "W
Determines whether network files remain available if the computer is suddenly disconnected from the server hosting the files. This setting also disables the "W
Disables the Offline Files folder. This setting disables the "View Files" button on the Offline Files tab. As a result, users cannot use the Offline Files folder to vie
Disables the Offline Files folder. This setting disables the "View Files" button on the Offline Files tab. As a result, users cannot use the Offline Files folder to vie
Prevents users from enabling, disabling, or changing the configuration of Offline Files. This setting removes the Offline Files tab from the Folder Options dialog
Prevents users from enabling, disabling, or changing the configuration of Offline Files. This setting removes the Offline Files tab from the Folder Options dialog
Prevents users from making network files and folders available offline. This setting removes the "Make Available Offline" option from the File menu and from a
Prevents users from making network files and folders available offline. This setting removes the "Make Available Offline" option from the File menu and from a
This policy setting allows you to manage a list of files or folders for which you wish to prohibit the 'Make Available Offline' option. If you enable this policy settin
This policy setting allows you to manage a list of files or folders for which you wish to prohibit the 'Make Available Offline' option. If you enable this policy settin
Hides or displays reminder balloons, and prevents users from changing the setting. Reminder balloons appear above the Offline Files icon in the notification a
Hides or displays reminder balloons, and prevents users from changing the setting. Reminder balloons appear above the Offline Files icon in the notification a
Deletes local copies of the user's offline files when the user logs off. This setting specifies that automatically and manually cached offline files are retained only
Determines how often reminder balloon updates appear. If you enable this setting, you can select how often reminder balloons updates appear and also preve
Determines how often reminder balloon updates appear. If you enable this setting, you can select how often reminder balloons updates appear and also preve
Determines how long the first reminder balloon for a network status change is displayed. Reminder balloons appear when the user's connection to a network f
Determines how long the first reminder balloon for a network status change is displayed. Reminder balloons appear when the user's connection to a network f
Determines how long updated reminder balloons are displayed. Reminder balloons appear when the user's connection to a network file is lost or reconnected,
Determines how long updated reminder balloons are displayed. Reminder balloons appear when the user's connection to a network file is lost or reconnected,
Configures the threshold value at which Offline Files considers a network connection to be "slow". Any network speed below this value is considered to be slow
Determines whether offline files are fully synchronized when users log off. This setting also disables the "Synchronize all offline files before logging off" option
Determines whether offline files are fully synchronized when users log off. This setting also disables the "Synchronize all offline files before logging off" option
Determines whether offline files are fully synchronized when users log on. This setting also disables the "Synchronize all offline files before logging on" option
Determines whether offline files are fully synchronized when users log on. This setting also disables the "Synchronize all offline files before logging on" option
Determines whether offline files are synchonized before a computer is suspended. If you enable this setting, offline files are synchronized whenever the comp
Determines whether offline files are synchonized before a computer is suspended. If you enable this setting, offline files are synchronized whenever the comp
This policy setting allows you to turn on economical application of administratively assigned Offline Files. If you enable this policy setting, only new files and fo
This policy setting allows you to enable and configure the slow-link mode of Offline Files. When Offline Files is operating in slow-link mode, all file requests are
This policy limits the amount of the computer's disk space that can be used to store offline files. Using this setting you can configure how much total disk space
This setting turns off Microsoft Peer-to-Peer Networking Services in its entirety, and will cause all dependent applications to stop working. Peer-to-Peer protoc
This setting disables PNRP protocol from advertising the computer or from searching other computers on the local subnet in the global cloud. The Peer Name
This setting sets the seed server for the global cloud to a specified node in the enterprise. The Peer Name Resolution Protocol (PNRP) allows for distributed res
This setting disables PNRP protocol from advertising the computer or from searching other computers on the local subnet in the link local cloud. The Peer Nam
This setting sets the seed server for the link local cloud to a specified node in the enterprise. The Peer Name Resolution Protocol (PNRP) allows for distributed
This setting disables PNRP protocol from advertising the computer or from searching other computers on the local subnet in the site local cloud. The Peer Nam
This setting sets the seed server for the site local cloud to a specified node in the enterprise. The Peer Name Resolution Protocol (PNRP) allows for distributed
By default, when a Peer Group is created that allows for password-authentication (or the password for such a Group is changed), Peer Grouping validates that
Configure the Parental Controls feature. If you turn on this setting, the Parental Controls control panel will be visible on a domain joined computer. If you turn
This policy setting configures the Program Compatibility Assistant (PCA) to diagnose failures with application installations. If you enable this policy setting, the
This policy setting configures the Program Compatibility Assistant (PCA) to diagnose failures with programs under User Account Control (UAC). If you enable
This policy setting determines whether the Program Compatibility Assistant (PCA) will diagnose DLL load or COM object creation failures in programs. If you e
This policy setting determines whether the Program Compatibility Assistant (PCA) will diagnose failures with application installers that are not detected to run as
This policy setting determines whether the Program Compatibility Assistant (PCA) will diagnose drivers blocked due to compatibility issues. If you enable this
Turns off Tablet PC Pen Training. If you enable this policy setting, users cannot open Tablet PC Pen Training. If you disable or do not configure this policy se
Turns off Tablet PC Pen Training. If you enable this policy setting, users cannot open Tablet PC Pen Training. If you disable or do not configure this policy se
Removes access to the performance center control panel page. If you enable this setting, some settings within the performance control panel page will not be
Removes access to the performance center control panel page. If you enable this setting, some settings within the performance control panel page will not be
Removes access to the performance center control panel solutions to performance problems. If you enable this setting, the solutions and issue section within t
Removes access to the performance center control panel solutions to performance problems. If you enable this setting, the solutions and issue section within t
Removes access to the performance center control panel OEM and Microsoft branding links. If you enable this setting, the OEM and Microsoft web links within
Removes access to the performance center control panel OEM and Microsoft branding links. If you enable this setting, the OEM and Microsoft web links within
Determines the execution level for Windows Boot Performance Diagnostics. If you enable this policy setting, you must select an execution level from the dropd
Determines the execution level for Windows Standby/Resume Performance Diagnostics. If you enable this policy setting, you must select an execution level fr
Determines the execution level for Windows System Responsiveness Diagnostics. If you enable this policy setting, you must select an execution level from the
Determines the execution level for Windows Shutdown Performance Diagnostics. If you enable this policy setting, you must select an execution level from the
Specifies the action that Windows takes when battery capacity reaches the critical battery notification level. Possible actions include: -Take no action -Sleep -
Specifies the action that Windows takes when battery capacity reaches the low battery notification level. Possible actions include: -Take no action -Sleep -Hib
Specifies the percentage of battery capacity remaining that triggers the critical battery notification action. If you enable this policy, you must enter a numeric va
Specifies the percentage of battery capacity remaining that triggers the low battery notification action. If you enable this policy, you must enter a numeric value
Disables a user notification when the battery capacity remaining equals the low battery notification level. If you enable this policy, Windows will not show a not
Specifies the action that Windows takes when a user presses the power button. Possible actions include: -Take no action -Sleep -Hibernate -Shut down If y
Specifies the action that Windows takes when a user presses the sleep button. Possible actions include: -Take no action -Sleep -Hibernate -Shut down If yo
Specifies the action that Windows takes when a user closes the lid on a mobile PC. Possible actions include: -Take no action -Sleep -Hibernate -Shut down
Specifies the action that Windows takes when a user presses the user interface sleep button. Possible actions include: -Sleep -Hibernate -Shut down If you
Specifies the action that Windows takes when a user presses the power button. Possible actions include: -Take no action -Sleep -Hibernate -Shut down If y
Specifies the action that Windows takes when a user presses the sleep button. Possible actions include: -Take no action -Sleep -Hibernate -Shut down If yo
Specifies the action that Windows takes when a user closes the lid on a mobile PC. Possible actions include: -Take no action -Sleep -Hibernate -Shut down
Specifies the action that Windows takes when a user presses the user interface sleep button. Possible actions include: -Sleep -Hibernate -Shut down If you
Specifies the period of inactivity before Windows turns off the hard disk. If you enable this policy, you must provide a value, in seconds, indicating how much id
Specifies the period of inactivity before Windows turns off the hard disk. If you enable this policy, you must provide a value, in seconds, indicating how much id
Specifies an active power plan when you enter a power planΓÇÖs GUID. Retrieve the custom power plan GUID by using powercfg, the power configuration co
Specifies the active power plan from a list of default Windows power plans. To specify a custom power plan, use the Custom Active Power Plan setting. To en
This settings allows you to configure client computers to always lock when resuming from a hibernate or suspend. If you enable this setting, the client compute
Enables applications and services to prevent the system from sleeping. If you enable this policy setting, an application or service may prevent the system from
Specifies the period of inactivity before Windows transitions the system to hibernate. If you enable this policy setting, you must provide a value, in seconds, ind
Specifies whether or not the user is prompted for a password when the system resumes from sleep. If you enable this policy, or if it is not configured, the user
Specifies the period of inactivity before Windows transitions the system to sleep. If you enable this policy setting, you must provide a value, in seconds, indicat
Disables Hybrid Sleep. If you enable this policy setting, a hiberfile is not generated when the system transitions to sleep (Stand By). If you do not configure th
Enables applications and services to prevent the system from sleeping. If you enable this policy setting, an application or service may prevent the system from
Specifies the period of inactivity before Windows transitions the system to hibernate. If you enable this policy setting, you must provide a value, in seconds, ind
Specifies whether or not the user is prompted for a password when the system resumes from sleep. If you enable this policy, or if it is not configured, the user
Specifies the period of inactivity before Windows transitions the system to sleep. If you enable this policy setting, you must provide a value, in seconds, indicat
Disables Hybrid Sleep. If you enable this policy setting, a hiberfile is not generated when the system transitions to sleep (Stand By). If you do not configure th
Manages how Windows controls the setting that specifies how long a computer must be inactive before Windows turns off the computerΓÇÖs display. When
Manages how Windows controls the setting that specifies how long a computer must be inactive before Windows turns off the computerΓÇÖs display. When
Specifies the period of inactivity before Windows turns off the display. If you enable this policy, you must provide a value, in seconds, indicating how much idle
Specifies the period of inactivity before Windows turns off the display. If you enable this policy, you must provide a value, in seconds, indicating how much idle
Dictates whether or not Windows is allowed to use standby states when sleeping the computer. When this policy is enabled, Windows may use standby s
Dictates whether or not Windows is allowed to use standby states when sleeping the computer. When this policy is enabled, Windows may use standby s
This setting allows you to configure whether power is automatically turned off when Windows shutdown completes. This setting does not effect Windows shutd
This setting lets you suppress the Restore button in the previous versions property page when the user has selected a previous version of a local file, in which t
This setting lets you suppress the Restore button in the previous versions property page when the user has selected a previous version of a local file, in which t
This policy setting lets you hide the list or restore of previous versions of files that are on local disks. The previous versions could come from the on-disk shadow
This policy setting lets you hide the list or restore of previous versions of files that are on local disks. The previous versions could come from the on-disk shadow
This setting lets you suppress the Restore button in the previous versions property page when the user has selected a previous version of a local file. If this se
This setting lets you suppress the Restore button in the previous versions property page when the user has selected a previous version of a local file. If this se
This policy setting lets you hide the list or restore of previous versions of files that are on file shares. The previous versions could come from the on-disk shadow
This policy setting lets you hide the list or restore of previous versions of files that are on file shares. The previous versions could come from the on-disk shadow
This setting lets you suppress the Restore button in the previous versions property page when the user has selected a previous version of a file on a file share.
This setting lets you suppress the Restore button in the previous versions property page when the user has selected a previous version of a file on a file share.
This setting lets you hide entries in the list of previous versions of a file in which the previous version is located on backup media. Previous versions can come f
This setting lets you hide entries in the list of previous versions of a file in which the previous version is located on backup media. Previous versions can come f
Determines whether Internet printing is activated on this server. Internet printing lets you display printers on Web pages so that printers can be viewed, manag
Determines whether the Add Printer Wizard automatically publishes the computer's shared printers in Active Directory. If you enable this setting or do not conf
Adds a customized Web page link to the Printers folder. By default, the Printers folder includes a link to the Microsoft Support Web page called "Get help with
This policy sets the maximum number of printers (of each type) that the Add Printer wizard will display on a computer on a managed network (when the comput
Allows users to use the Add Printer Wizard to search the network for shared printers. If you enable this setting or do not configure it, when users choose to add
When printing through a print server, determines whether the print spooler on the client will process print jobs itself, or pass them on to the server to do the work
Determines whether the domain controller can prune (delete from Active Directory) the printers published by this computer. By default, the pruning service on
Adds a link to an Internet or intranet Web page to the Add Printer Wizard. You can use this setting to direct users to a Web page from which they can install pr
Determines whether printers using kernel-mode drivers may be installed on the local computer. Kernel-mode drivers have access to system-wide memory, and
Prevents users from using familiar methods to add local and network printers. This setting removes the Add Printer option from the Start menu. (To find the Ad
Prevents users from deleting local and network printers. If a user tries to delete a printer, such as by using the Delete option in Printers in Control Panel, a mes
This policy sets the maximum number of printers (of each type) that the Add Printer wizard will display on a computer on an unmanaged network (when the com
This policy restricts clients computers to use package point and print only. If this setting is enabled, users will only be able to point and print to printers that use
Restricts package point and print to approved servers. If this setting is enabled, users will only be able to package point and print to print servers approved by
Specifies the default location criteria used when searching for printers. This setting is a component of the Location Tracking feature of Windows printers. To us
Enables the physical Location Tracking support feature of Windows printers. Location tracking lets you design a location scheme for your enterprise and assig
This policy setting controls the servers that a client machine can connect to for point and print, and the security prompts for Windows Vista machines. The polic
Specifies the Active Directory location where searches for printers begin. The Add Printer Wizard gives users the option of searching Active Directory for a sha
Announces the presence of shared printers to print browse master servers for the domain. On domains with Active Directory, shared printer resources are ava
Determines whether the pruning service on a domain controller prunes printer objects that are not automatically republished whenever the host computer does
Specifies how often the pruning service on a domain controller contacts computers to verify that their printers are operational. The pruning service periodically
Sets the priority of the pruning thread. The pruning thread, which runs only on domain controllers, deletes printer objects from Active Directory if the printer tha
Specifies how many times the pruning service on a domain controller repeats its attempt to contact a computer before pruning the computer's printers. The pru
Specifies whether or not to log events when the pruning service on a domain controller attempts to contact a computer before pruning the computer's printers.
Determines whether the computer's shared printers can be published in Active Directory. If you enable this setting or do not configure it, users can use the "Lis
This policy controls whether the print spooler will accept client connections. When the policy is unconfigured, the spooler will not accept client connections un
Directs the system to periodically verify that the printers published by this computer still appear in Active Directory. This setting also specifies how often the sys
This setting prevents users from using the Programs Control Panel in Category View and Programs and Features in Classic View. The Programs Control Pane
This setting prevents users from accessing "Programs and Features" to view, uninstall, change, or repair programs that are currently installed on the computer.
This setting prevents users from accessing "Installed Updates" page from the "View installed updates" task. "Installed Updates" allows users to view and unins
This setting removes the Set Program Access and Defaults page from the Programs Control Panel. As a result, users cannot view or change the associated pa
This setting prevents users from access the "Get new programs from Windows Marketplace" task from the Programs Control Panel in Category View, Programs
Prevents users from viewing or installing published programs from the network. This setting prevents users from accessing the "Get Programs" page from the
This setting prevents users from accessing the "Turn Windows features on or off" task from the Programs Control Panel in Category View, Programs and Featu
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Best Effort service type (ServiceTypeBestEffort). The Pack
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Controlled Load service type (ServiceTypeControlledLoad)
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Guaranteed service type (ServiceTypeGuaranteed). The P
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Network Control service type (ServiceTypeNetworkControl
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Qualitative service type (ServiceTypeQualitative). The Pac
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Best Effort service type (ServiceTypeBestEffort). The Pack
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Controlled Load service type (ServiceTypeControlledLoad)
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Guaranteed service type (ServiceTypeGuaranteed). The P
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Network Control service type (ServiceTypeNetworkControl
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Qualitative service type (ServiceTypeQualitative). The Pac
Specifies the maximum number of outstanding packets permitted on the system. When the number of outstanding packets reaches this limit, the Packet Schedu
Determines the percentage of connection bandwidth that the system can reserve. This value limits the combined bandwidth reservations of all programs runnin
Determines the smallest unit of time that the Packet Scheduler uses when scheduling packets for transmission. The Packet Scheduler cannot schedule packets
Specifies an alternate link layer (Layer-2) priority value for packets with the Best Effort service type (ServiceTypeBestEffort). The Packet Scheduler inserts the c
Specifies an alternate link layer (Layer-2) priority value for packets with the Controlled Load service type (ServiceTypeControlledLoad). The Packet Scheduler in
Specifies an alternate link layer (Layer-2) priority value for packets with the Guaranteed service type (ServiceTypeGuaranteed). The Packet Scheduler inserts th
Specifies an alternate link layer (Layer-2) priority value for packets with the Network Control service type (ServiceTypeNetworkControl). The Packet Scheduler i
Specifies an alternate link layer (Layer-2) priority value for packets that do not conform to the flow specification. The Packet Scheduler inserts the corresponding
Specifies an alternate link layer (Layer-2) priority value for packets with the Qualitative service type (ServiceTypeQualitative). The Packet Scheduler inserts the
Determines the execution level for Windows Resource Exhaustion Detection and Resolution. If you enable this policy setting, you must select an execution lev
The Persistent System Timestamp allows the system to detect the time of unexpected shutdowns by writing the current time to disk on a schedule controlled by
This setting controls whether or not unplanned shutdown events can be reported when error reporting is enabled. When this setting is enabled, error reporting
Defines when the Shutdown Event Tracker System State Data feature is activated. The system state data file contains information about the basic system stat
The Shutdown Event Tracker can be displayed when you shut down a workstation or server. This is an extra set of questions that is displayed when you invoke
This policy setting allows you to turn logging on or off. Log files are located in the user's Documents folder under Remote Assistance. If you enable this policy
This policy setting enables Remote Assistance invitations to be generated with improved encryption so that only computers running this version (or later version
This policy setting allows you to improve performance in low bandwidth scenarios. This setting is incrementally scaled from "No optimization" to "Full optimizat
The "Display warning message before sharing control" policy setting allows you to specify a custom message to display before a user shares control of his or he
This policy setting allows you to enable or disable Solicited (Ask for) Remote Assistance on this computer. If you enable this policy, users on this computer ca
This policy setting allows you to turn on or turn off Offer (Unsolicited) Remote Assistance on this computer. If you enable this policy, users on this computer ca
Set the amount of time (in seconds) that the system will wait to reboot in order to enforce a change in access rights to removable storage devices. If you enabl
Set the amount of time (in seconds) that the system will wait to reboot in order to enforce a change in access rights to removable storage devices. If you enabl
This policy setting denies read access to the CD and DVD removable storage class. If you enable this policy setting, read access will be denied to this remova
This policy setting denies read access to the CD and DVD removable storage class. If you enable this policy setting, read access will be denied to this remova
This policy setting denies write access to the CD and DVD removable storage class. If you enable this policy setting, write access will be denied to this remova
This policy setting denies write access to the CD and DVD removable storage class. If you enable this policy setting, write access will be denied to this remova
This policy setting denies read access to custom removable storage classes. If you enable this policy setting, read access will be denied to these removable s
This policy setting denies read access to custom removable storage classes. If you enable this policy setting, read access will be denied to these removable s
This policy setting denies write access to custom removable storage classes. If you enable this policy setting, write access will be denied to these removable s
This policy setting denies write access to custom removable storage classes. If you enable this policy setting, write access will be denied to these removable s
This policy setting denies read access to the Floppy Drives removable storage class, including USB Floppy Drives. If you enable this policy setting, read acces
This policy setting denies read access to the Floppy Drives removable storage class, including USB Floppy Drives. If you enable this policy setting, read acces
This policy setting denies write access to the Floppy Drives removable storage class, including USB Floppy Drives. If you enable this policy setting, write acce
This policy setting denies write access to the Floppy Drives removable storage class, including USB Floppy Drives. If you enable this policy setting, write acce
This policy setting denies read access to removable disks. If you enable this policy setting, read access will be denied to this removable storage class. If you
This policy setting denies read access to removable disks. If you enable this policy setting, read access will be denied to this removable storage class. If you
This policy setting denies write access to removable disks. If you enable this policy setting, write access will be denied to this removable storage class. If you
This policy setting denies write access to removable disks. If you enable this policy setting, write access will be denied to this removable storage class. If you
Configure access to all removable storage classes. This policy setting takes precedence over any individual removable storage policy settings. To manage ind
Configure access to all removable storage classes. This policy setting takes precedence over any individual removable storage policy settings. To manage ind
This policy setting denies read access to the Tape Drive removable storage class. If you enable this policy setting, read access will be denied to this removabl
This policy setting denies read access to the Tape Drive removable storage class. If you enable this policy setting, read access will be denied to this removabl
This policy setting denies write access to the Tape Drive removable storage class. If you enable this policy setting, write access will be denied to this removab
This policy setting denies write access to the Tape Drive removable storage class. If you enable this policy setting, write access will be denied to this removab
This policy setting denies read access to removable disks, which may include media players, cellular phones, auxiliary displays, and CE devices. If you enable
This policy setting denies read access to removable disks, which may include media players, cellular phones, auxiliary displays, and CE devices. If you enable
This policy setting denies write access to removable disks, which may include media players, cellular phones, auxiliary displays, and CE devices. If you enable
This policy setting denies write access to removable disks, which may include media players, cellular phones, auxiliary displays, and CE devices. If you enable
This policy setting grants normal users direct access to removable storage devices in remote sessions. If you enable this policy setting, remote users will be ab
Enabling this setting directs RPC Clients that need to communicate with the Endpoint Mapper Service to authenticate as long as the RPC call for which the end
Directs the RPC Runtime to generate extended error information when an error occurs. Extended error information includes the local time that the error occurr
Directs the RPC Runtime to ignore delegation failures if delegation was asked for. Windows Server 2003 family includes a new delegation model - constrained
Directs the RPC Runtime to assume the specified timeout as the idle connection timeout even if the IIS server running the RPC HTTP proxy is configured with a
If you enable this setting, it directs the RPC Runtime on an RPC server to restrict unauthenticated RPC clients connecting to RPC servers running on a machine
Determines whether the RPC Runtime maintains RPC state information for the system, and how much information it maintains. Basic state information, which
Determines how long the system waits for scripts applied by Group Policy to run. This setting limits the total time allowed for all logon, logoff, startup, and shut
Hides the instructions in logon scripts written for Windows NT 4.0 and earlier. Logon scripts are batch files of instructions that run when the user logs on. By de
Displays the instructions in logoff scripts as they run. Logoff scripts are batch files of instructions that run when the user logs off. By default, the system does n
Directs the system to wait for the logon scripts to finish running before it starts the Windows Explorer interface program and creates the desktop. If you enable
Directs the system to wait for the logon scripts to finish running before it starts the Windows Explorer interface program and creates the desktop. If you enable
Displays the instructions in logon scripts as they run. Logon scripts are batch files of instructions that run when the user logs on. By default, the system does n
Displays the instructions in shutdown scripts as they run. Shutdown scripts are batch files of instructions that run when the user restarts the system or shuts it
Lets the system run startup scripts simultaneously. Startup scripts are batch files that run before the user is invited to log on. By default, the system waits for e
Displays the instructions in startup scripts as they run. Startup scripts are batch files of instructions that run before the user is invited to log on. By default, the
This policy setting allows user logon scripts to run when the logon cross-forest, DNS suffixes are not configured and NetBIOS or WINS is disabled. This policy s
This policy setting allows encrypted items to be indexed. If you enable this policy setting, indexing disregards encryption flags (access restrictions still apply tho
This policy setting allows words that contain diacritic characters to be treated as separate words. If you enable this policy setting, words that only differ in diacrit
Store indexer database in this directory. This directory must be located on a local fixed drive.
Enable this policy setting to prevent the indexing of the content of e-mail attachments. If enabled, indexing service components (including the ones from 3rd par
If enabled, files on network shares made available offline are not indexed. Otherwise they are indexed. This policy setting is not configured by default.
Enable this policy setting to prevent indexing of any Microsoft Outlook items. The default behavior is to automatically index Outlook items. This policy setting is
Enable this policy setting to prevent indexing public folders in Microsoft Office Outlook. When this policy setting is disabled or not configured, the user has the o
Enabling this policy setting prevents indexing of mail items on a Microsoft Exchange server when Microsoft Outlook is run in uncached mode. This is the default
If enabled, Search and Indexing Options control panel applet does not allow opening the advanced options dialog. Otherwise it can be opened. This policy setti
This policy setting specifies whether Security Center is turned on or off for computers that are joined to an Active Directory domain. When Security Center is tur
Specifies an alternate location for Windows Service Pack installation files. To enable this setting, enter the fully qualified path to the new location in the "Windo
Specifies an alternate location for Windows installation files. To enable this setting, and enter the fully qualified path to the new location in the "Windows Setup
Determines whether the user can publish DFS roots in Active Directory. If you enable this setting or do not configure it, users can use the "Publish in Active Di
Determines whether the user can publish shared folders in Active Directory. If you enable this setting or do not configure it, users can use the "Publish in Activ
By default users are allowed to share files within their profile to other users on their network once an administrator opts in the computer. An administrator can o
Prevents users from running the interactive command prompt, Cmd.exe. This setting also determines whether batch files (.cmd and .bat) can run on the compu
Disables the Windows registry editor Regedit.exe. If this setting is enabled and the user tries to start a registry editor, a message appears explaining that a set
Limits the Windows programs that users have permission to run on the computer. If you enable this setting, users can only run programs that you add to the L
Prevents Windows from running the programs you specify in this setting. If you enable this setting, users cannot run programs that you add to the list of disallo
This policy setting prevents the display of the Welcome Center at user logon. If you enable this policy setting, the Welcome Center will not be displayed at use
Windows Sidebar is a feature that allows the use of gadgets, which are small applets that may display information or utilities to the user. If you enable this sett
Windows Sidebar is a feature that allows the use of gadgets, which are small applets that may display information or utilities to the user. If you enable this sett
Sidebar gadgets can be deployed as compressed files, either digitally signed or unsigned. If you enable this setting, Windows Sidebar will not extract any gadge
Sidebar gadgets can be deployed as compressed files, either digitally signed or unsigned. If you enable this setting, Windows Sidebar will not extract any gadge
The Windows Sidebar will run gadgets that are located in the profile space of the user. Gadgets are small applets that are run by the Windows Sidebar on the S
The Windows Sidebar will run gadgets that are located in the profile space of the user. Gadgets are small applets that are run by the Windows Sidebar on the S
The Windows Sidebar contains a link to allow users to download more gadgets from a website. Microsoft hosts a default website where many gadget authors ca
The Windows Sidebar contains a link to allow users to download more gadgets from a website. Microsoft hosts a default website where many gadget authors ca
This policy setting deletes all data stored on Windows SideShow-compatible devices (running Microsoft firmware) when a user logs off from the computer. This
This policy setting deletes all data stored on Windows SideShow-compatible devices (running Microsoft firmware) when a user logs off from the computer. This
This policy setting turns off Windows SideShow. If you enable this policy setting, the Windows SideShow Control Panel will be disabled and data from Window
This policy setting turns off Windows SideShow. If you enable this policy setting, the Windows SideShow Control Panel will be disabled and data from Window
This policy setting turns off the option to periodically wake the computer to update information on Windows SideShow-compatible devices. If you enable this po
This policy setting turns off the option to periodically wake the computer to update information on Windows SideShow-compatible devices. If you enable this po
This policy setting requires users to enter a default personal identification number (PIN) to unlock and access data on the device after a specified period of inac
This policy setting requires users to enter a default personal identification number (PIN) to unlock and access data on the device after a specified period of inac
This policy setting lets you allow certificates without an Extended Key Usage (EKU) set to be used for logon. Under previous versions of Microsoft Windows, th
This policy setting lets you determine whether the integrated unblock feature will be available in the logon User Interface (UI). In order to use the integrated un
This policy settings lets you configure if all your valid logon certificates are displayed. During the certificate renewal period, a user can have multiple valid logo
This policy setting allows you to manage the reading of all certificates from the smart card for logon. During logon Windows will by default only read the defaul
This policy setting lets you allow signature key-based certificates to be enumerated and available for logon. If you enable this policy setting then any certificate
This policy setting permits those certificates to be displayed for logon that are either expired or not yet valid. Under previous versions of Microsoft Windows, ce
This policy setting allows you to manage the certificate propagation that occurs when a smart card is inserted. If you enable or do not configure this policy sett
This policy setting allows you to manage the clean up behavior of root certificates. If you enable this policy setting then root certificate cleanup will occur accord
This policy setting allows you to manage the root certificate propagation that occurs when a smart card is inserted. If you enable or do not configure this policy
This policy setting allows you to manage the displayed message when a smart card is blocked. If you enable this policy setting, the specified message will be
This policy setting lets you reverse the subject name from how it is stored in the certificate when displaying it during logon. By default the user principal
This policy setting lets you determine whether an optional field will be displayed during logon and elevation that allows a user to enter his or her user name or u
Configures a list of the communities defined to the Simple Network Management Protocol (SNMP) service. SNMP is a protocol designed to give a user the cap
This setting determines the permitted list of hosts that can submit a query to the Simple Network Management (SNMP) agent running on the client computer. S
This setting allows Trap configuration for the Simple Network Management Protocol (SNMP) agent. Simple Network Management Protocol is a protocol design
Specifies whether Sound Recorder can run. Sound Recorder is a feature of Microsoft Windows Vista that can be used to record sound from an audio input dev
Specifies whether Sound Recorder can run. Sound Recorder is a feature of Microsoft Windows Vista that can be used to record sound from an audio input dev
If you enable this policy setting, the recent programs list in the start menu will be blank for each new user. If you disable or do not configure this policy, the star
If you enable this policy the start menu will not show a link to the Games folder. If you disable or do not configure this policy, the start menu will show a link to
If you enable this policy, the "See all results" link will not be shown when the user performs a search in the start menu search box. If you disable or do not con
If you enable this policy the start menu search box will not search for files. If you disable or do not configure this policy, the start menu will search for files, unle
If you enable this policy the start menu search box will not search for internet history or favorites. If you disable or do not configure this policy, the start menu w
If you enable this policy the start menu search box will not search for programs. If you disable or do not configure this policy, the start menu will search for prog
If you enable this policy the start menu search box will not search for communications. If you disable or do not configure this policy, the start menu will search
If you enable this policy the start menu will not show a link to the user's storage folder. If you disable or do not configure this policy, the start menu will display
User folders links launch a folder view of users files instead of a library view.
If you enable this setting, the Run command is added to the Start menu. If you disable or do not configure this setting, the Run command is not visible on the S
This policy setting controls whether the QuickLaunch bar is displayed in the Taskbar. If you enable this policy setting, the QuickLaunch bar will be visible and c
Clear history of recently opened documents on exit. If you enable this setting, the system deletes shortcuts to recently used document files when the user logs
This policy only applies to the classic version of the start menu and does not affect the new style start menu. Adds the "Log Off <username>" item to the S
Displays Start menu shortcuts to partially installed programs in gray text. This setting makes it easier for users to distinguish between programs that are fully in
Disables personalized menus. Windows personalizes long menus by moving recently used items to the top of the menu and hiding items that have not been u
This setting affects the taskbar, which is used to switch between running applications. The taskbar includes the Start button, list of currently running tasks, and
Lets users run a 16-bit program in a dedicated (not shared) Virtual DOS Machine (VDM) process. All DOS and 16-bit programs run on Windows 2000 Profess
This setting affects the notification area, also called the "system tray." The notification area is located in the task bar, generally at the bottom of the screen, and
Hides pop-up text on the Start menu and in the notification area. When you hold the cursor over an item on the Start menu or in the notification area, the syste
Prevents users from using the drag-and-drop method to reorder or remove items on the Start menu. Also, it removes context menus from the Start menu. If yo
This policy setting prevents users from performing the following commands from the Start menu or Windows Security screen: Shut Down, Restart, Sleep, and H
Removes items in the All Users profile from the Programs menu on the Start menu. By default, the Programs menu contains items from the All Users profile an
Prevents users from adding the Favorites menu to the Start menu or classic Start menu. If you enable this setting, the Display Favorites item does not appear
Removes the Search link from the Start menu, and disables some Windows Explorer search elements. Note that this does not remove the search box from the
If you enable this setting, the frequently used programs list is removed from the Start menu. If you disable this setting or do not configure it, the frequently used
Removes the Help command from the Start menu. This setting only affects the Start menu. It does not remove the Help menu from Windows Explorer and doe
Disables user tracking. This setting prevents the system from tracking the programs users run, the paths they navigate, and the documents they open. The sys
If you enable this setting, the "All Programs" item is removed from the simple Start menu. If you disable this setting or do not configure it, the "All Programs" ite
Prevents users from running Network Connections. This setting prevents the Network Connections folder from opening. This setting also removes Network Co
If you enable this setting, the "Pinned Programs" list is removed from the Start menu, and the Internet and Email checkboxes are removed from the simple Star
Prevents the operating system and installed programs from creating and displaying shortcuts to recently opened documents. If you enable this setting, the sys
Removes the Recent Items menu from the Start menu. Removes the Documents menu from the classic Start menu. The Recent Items menu contains links to
Prevents the system from conducting a comprehensive search of the target drive to resolve a shortcut. By default, when the system cannot find the target file f
Prevents the system from using NTFS tracking features to resolve a shortcut. By default, when the system cannot find the target file for a shortcut (.lnk), it sea
Allows you to remove the Run command from the Start menu, Internet Explorer, and Task Manager. If you enable this setting, the following changes occur: (1
Prevents Control Panel, Printers, and Network Connections from running. This setting removes the Control Panel, Printers, and Network and Connection folde
Removes the Taskbar and Start Menu item from Settings on the Start menu. This setting also prevents the user from opening the Taskbar Properties dialog box
Removes the Default Programs link from the Start menu. Clicking the Default Programs link from the Start menu opens the Default Programs control panel an
Removes the Documents icon from the Start menu and its submenus. This setting only removes the icon. It does not prevent the user from using other method
Removes the Music icon from the Start Menu.
Removes the Network icon from the Start Menu.
Removes the Pictures icon from the Start Menu.
Hides all folders on the user-specific (top) section of the Start menu. Other items appear, but folders are hidden. This setting is designed for use with redirecte
This setting affects the presentation of the Start menu. The classic Start menu in Windows 2000 Professional allows users to begin common tasks, while the n
Prevents the clock in the system notification area from being displayed. If you enable this setting, the clock will not be displayed in the system notification area
This setting affects the taskbar buttons used to switch between running programs. Taskbar grouping consolidates similar applications when there is no room o
This setting affects the taskbar. The taskbar includes the Start button, buttons for currently running tasks, custom toolbars, the notification area, and the system
Hides the menus that appear when you right-click the taskbar and items on the taskbar, such as the Start button, the clock, and the taskbar buttons. This settin
This setting affects the notification area (previously called the "system tray") on the taskbar. Description: The notification area is located at the far right end of t
Remove the user name label from the Start Menu. Note: This setting does not apply to Windows Vista. To remove the user name folder on Windows Vista, se
Prevents users from connecting to the Windows Update Web site. This setting blocks user access to the Windows Update Web site at http://windowsupdate.m
If you enable this setting, the "Undock PC" button is removed from the simple Start Menu, and your PC cannot be undocked. If you disable this setting or do no
Removes the "Log Off <username>" item from the Start menu and prevents users from restoring it. If you enable this setting, the Log Off <username&g
This setting turns the Accounting feature On or Off. If you enable this setting, Windows System Resource Manager (WSRM) will start accounting various usag
This setting assigns the email address(es) to which notifications will be sent. Use a semicolon (;) to separate multiple email addresses. If you enable this settin
This setting directs the Accounting feature to log data on the accounting server at the specified time interval. If you enable this setting, Windows System Reso
This setting assigns the address of the SMTP server that sends out notifications. If you enable this setting, Windows System Resource Manager (WSRM) will
Allows you to turn off the Configuration Interface for System Restore. System Restore enables users, in the event of a problem, to restore their computers to a
Determines whether System Restore is turned on or off. System Restore enables users, in the event of a problem, to restore their computers to a previous sta
Turns off the integration of application auto complete lists with Tablet PC Input Panel in applications where this behavior is available. Tablet PC Input Panel is
Turns off the integration of application auto complete lists with Tablet PC Input Panel in applications where this behavior is available. Tablet PC Input Panel is
Prevents Input Panel tab from appearing on the edge of the Tablet PC screen. Tablet PC Input Panel is a Tablet PC accessory that enables you to use handw
Prevents Input Panel tab from appearing on the edge of the Tablet PC screen. Tablet PC Input Panel is a Tablet PC accessory that enables you to use handw
Prevents the Tablet PC Input Panel icon from appearing next to any text entry area in applications where this behavior is available. This policy applies only whe
Adjusts password security settings in Tablet PC Input Panel. These settings include using the on-screen keyboard by default, preventing users from switching to
Adjusts password security settings in Tablet PC Input Panel. These settings include using the on-screen keyboard by default, preventing users from switching to
Switches the gesture set used for editing from the common handheld computer gestures to the Simplified Chinese (PRC) standard gestures. Tablet PC Input P
Switches the gesture set used for editing from the common handheld computer gestures to the Simplified Chinese (PRC) standard gestures. Tablet PC Input P
Includes rarely used Chinese, Kanji, and Hanja characters when handwriting is converted to typed text. This policy applies only to the use of the Microsoft reco
Includes rarely used Chinese, Kanji, and Hanja characters when handwriting is converted to typed text. This policy applies only to the use of the Microsoft reco
Turns off both the more tolerant scratch-out gestures that were added in Windows Vista and the Z-shaped scratch-out gesture that was available in Microsoft W
Turns off both the more tolerant scratch-out gestures that were added in Windows Vista and the Z-shaped scratch-out gesture that was available in Microsoft W
Prevents start of InkBall game. If you enable this policy, the InkBall game will not run. If you disable this policy, the InkBall game will run. If you do not config
Prevents start of InkBall game. If you enable this policy, the InkBall game will not run. If you disable this policy, the InkBall game will run. If you do not config
Prevents start of Windows Journal. If you enable this policy, the Windows Journal accessory will not run. If you disable this policy, the Windows Journal acce
Prevents start of Windows Journal. If you enable this policy, the Windows Journal accessory will not run. If you disable this policy, the Windows Journal acce
Prevents printing to Journal Note Writer. If you enable this policy, the Journal Note Writer printer driver will not allow printing to it. It will remain displayed in the
Prevents printing to Journal Note Writer. If you enable this policy, the Journal Note Writer printer driver will not allow printing to it. It will remain displayed in the
Prevents the snipping tool from running. If you enable this policy setting, the Snipping Tool will not run. If you disable this policy setting, the Snipping Tool wil
Prevents the snipping tool from running. If you enable this policy setting, the Snipping Tool will not run. If you disable this policy setting, the Snipping Tool wil
Prevents start of Sticky Notes. If you enable this policy, the Sticky Notes accessory will not run. If you disable this policy, the Sticky Notes accessory will run.
Prevents start of Sticky Notes. If you enable this policy, the Sticky Notes accessory will not run. If you disable this policy, the Sticky Notes accessory will run.
Disables visual pen action feedback, except for press and hold feedback. If you enable this policy, all visual pen action feedback is disabled except for press a
Disables visual pen action feedback, except for press and hold feedback. If you enable this policy, all visual pen action feedback is disabled except for press a
Removes the Back->ESC mapping that normally occurs when menus are visible, and for applications that subscribe to this behavior. If you enable this polic
Removes the Back->ESC mapping that normally occurs when menus are visible, and for applications that subscribe to this behavior. If you enable this polic
Prevents the user from launching an application from a Tablet PC hardware button. If you enable this policy, applications cannot be launched from a hardware
Prevents the user from launching an application from a Tablet PC hardware button. If you enable this policy, applications cannot be launched from a hardware
Prevents press and hold actions on hardware buttons, so that only one action is available per button. If you enable this policy, press and hold actions are unav
Prevents press and hold actions on hardware buttons, so that only one action is available per button. If you enable this policy, press and hold actions are unav
Turns off Tablet PC hardware buttons. If you enable this policy, no actions will occur when the buttons are pressed, and the buttons tab in Tablet PC Control P
Turns off Tablet PC hardware buttons. If you enable this policy, no actions will occur when the buttons are pressed, and the buttons tab in Tablet PC Control P
Makes pen flicks learning mode unavailable. If you enable this policy, pen flicks are still available but learning mode is not. Pen flicks are off by default and can
Makes pen flicks learning mode unavailable. If you enable this policy, pen flicks are still available but learning mode is not. Pen flicks are off by default and can
Makes pen flicks and all related features unavailable. If you enable this policy, pen flicks and all related features are unavailable. This includes: pen flicks them
Makes pen flicks and all related features unavailable. If you enable this policy, pen flicks and all related features are unavailable. This includes: pen flicks them
Prevents the battery meter in the system control area from being displayed. If you enable this setting, the battery meter will not be displayed in the system notif
Prevents the networking icon in the system control area from being displayed. If you enable this setting, the networking icon will not be displayed in the system
Prevents the volume control icon in the system control area from being displayed. If you enable this setting, the volume control icon will not be displayed in the
Prevents the user from making any changes to the taskbar settings through the Taskbar Properties dialog. If you enable this setting the user cannot access th
Prevents users from adding or removing toolbars. If you enable this policy setting the user will not be allowed to add or remove any toolbars to the taskbar. Ap
Prevents users from rearranging toolbars. If you enable this setting the user will not be able to drag or drop toolbars to the taskbar. If you disable or do not co
If you enable this setting no notification balloons will be shown to the user. If you disable or do not configure this setting balloon notifications will be displayed.
Prevents users from moving taskbar to another screen dock location. If you enable this policy setting the user will not be able to drag their taskbar to another s
Prevent users from resizing the taskbar. If you enable this policy setting the user will not be able to resize their taskbar to be any other size. If you disable or
If you enable this setting the taskbar thumbnails will not be shown, and the system will use standard text for the tooltips. If you disable or do not configure this
Limits newly scheduled to items on the user's Start menu, and prevents the user from changing the scheduled program for existing tasks. This setting removes
Limits newly scheduled to items on the user's Start menu, and prevents the user from changing the scheduled program for existing tasks. This setting removes
This setting removes the "Open advanced properties for this task when I click Finish" checkbox from the last page of the Scheduled Task Wizard. This policy is
This setting removes the "Open advanced properties for this task when I click Finish" checkbox from the last page of the Scheduled Task Wizard. This policy is
Prevents users from adding or removing tasks by moving or copying programs in the Scheduled Tasks folder. This setting disables the Cut, Copy, Paste, and
Prevents users from adding or removing tasks by moving or copying programs in the Scheduled Tasks folder. This setting disables the Cut, Copy, Paste, and
Prevents users from starting and stopping tasks manually. This setting removes the Run and End Task items from the context menu that appears when you rig
Prevents users from starting and stopping tasks manually. This setting removes the Run and End Task items from the context menu that appears when you rig
Prevents users from viewing and changing the properties of an existing task. This setting removes the Properties item from the File menu in Scheduled Tasks
Prevents users from viewing and changing the properties of an existing task. This setting removes the Properties item from the File menu in Scheduled Tasks
Prevents users from creating new tasks. This setting removes the Add Scheduled Task item that starts the New Task Wizard. Also, the system does not respo
Prevents users from creating new tasks. This setting removes the Add Scheduled Task item that starts the New Task Wizard. Also, the system does not respo
Prevents users from deleting tasks from the Scheduled Tasks folder. This setting removes the Delete command from the Edit menu in the Scheduled Tasks fo
Prevents users from deleting tasks from the Scheduled Tasks folder. This setting removes the Delete command from the Edit menu in the Scheduled Tasks fo
Controls whether a user can save passwords using a Terminal Services client. If you enable this setting the password saving checkbox in Terminal Services c
Controls whether passwords can be saved on this computer from Terminal Services clients. If you enable this setting the password saving checkbox in Termin
Specifies whether to require the use of a specific encryption level to secure communications between clients and terminal servers during Remote Desktop Proto
Specifies whether Terminal Services always prompts the client for a password upon connection. You can use this setting to enforce a password prompt for us
Specifies whether to require the use of a specific security layer to secure communications between clients and terminal servers during Remote Desktop Protoco
Specifies whether to require user authentication using Remote Desktop Protocol (RDP) version 6.0 before allowing remote connections to terminal servers. This
This policy setting allows you to specify the name of the certificate template that determines which certificate is automatically selected to authenticate a termina
Specifies the authentication method that clients must use when attempting to connect to a terminal server through a TS Gateway server. You can enforce this p
If you enable this policy setting, then clients must always connect to a terminal server through a TS Gateway over HTTPS, even when client connections are ma
Specifies the address of the TS Gateway server that clients must use when attempting to connect to a terminal server. You can enforce this policy setting or you
Specifies whether to allow Remote Desktop Connection clients to automatically reconnect to Terminal Services sessions if their network link is temporarily lost.
This policy setting allows you to specify the maximum color resolution (color depth) for Terminal Services connections. You can use this policy setting to set a
This policy setting allows you to configure remote access to computers using Terminal Services. If you enable this policy setting, users who are members of th
Specifies whether desktop wallpaper is displayed to remote clients connecting via Terminal Services. You can use this setting to enforce the removal of wallp
This policy setting determines whether an administrator attempting to connect remotely to the console of a server can log off an administrator currently logged o
This policy setting allows you to enter a keep-alive interval to ensure that the session state on the terminal server is consistent with the client state. After a ter
Determines whether terminal servers must first attempt to locate Terminal Server license servers that are specified in this setting before attempting to locate oth
Displays notifications on the terminal server when there are problems with TS Licensing that affect the terminal server. If you enable this setting, after you log
Determines the type of Terminal Server client access license (CAL) a device or user requires to connect to this Terminal Server. Per User licensing mode: Eac
Specifies whether Terminal Services limits the number of simultaneous connections to the server. You can use this setting to restrict the number of remote se
This policy setting allows you to remove the ΓÇ£DisconnectΓÇ¥ option from the Shut Down Windows dialog box on Terminal Services clients. You can use thi
Specifies whether to remove the Windows Security item from the Settings menu on Terminal Services clients. You can use this setting to prevent inexperienced
This policy setting allows you to specify the level of remote control permitted in a Terminal Services session. You can use this policy setting to select one of tw
This policy setting allows you to specify the level of remote control permitted in a Terminal Services session. You can use this policy setting to select one of tw
This policy setting allows you to restrict users to a single remote Terminal Services session. If you enable this policy setting, users who log on remotely using T
Configures Terminal Services to run a specified program automatically upon connection. You can use this setting to specify a program to run automatically wh
Configures Terminal Services to run a specified program automatically upon connection. You can use this setting to specify a program to run automatically wh
Specifies whether to disable the administrator rights to customize security permissions in the Terminal Services Configuration tool. You can use this setting to
This policy setting determines whether the desktop is always displayed after a client connects to a remote computer or an initial program can run. It can be used
Specifies whether Terminal Services uses the specified network share or local directory path as the root of the user's home directory for a Terminal Services se
Specifies whether Terminal Services uses the specified network path for roaming user profiles. You can use this setting to specify a network share where the
Specifies the terminal servers and license servers to which a Terminal Server License Server offers licenses. You can use this setting to control which servers
Determines the type of Terminal Server client access license (CAL) a device or user requires to connect to this Terminal Server. Per User licensing mode: Eac
Specifies whether users can choose where to play the remote computer's audio output during a Terminal Services session (audio redirection). Users can use
Specifies whether to prevent the sharing of clipboard contents (clipboard redirection) between a remote computer and a client computer during a Terminal Serv
Specifies whether to prevent the redirection of data to client COM ports from the remote computer in a Terminal Services session. You can use this setting to
Specifies whether the client default printer is automatically set as the default printer in a Terminal Services session. By default, Terminal Services automatical
Specifies whether to prevent the mapping of client drives in a Terminal Services session (drive redirection). By default, Terminal Services maps client drives a
Specifies whether to prevent the redirection of data to client LPT ports during a Terminal Services session. You can use this setting to prevent users from map
This policy setting allows you to control the redirection of supported Plug and Play devices, such as Windows Portable Devices, to the remote computer in a Te
Specifies whether to prevent the mapping of client printers in Terminal Services sessions. You can use this setting to prevent users from redirecting print jobs
Specifies the Terminal Server fallback printer driver behavior. By default, Terminal Server fallback printer driver is disabled. If the Terminal Server does not ha
This policy setting allows you to control the redirection of smart card devices in a Terminal Services session. If you enable this policy setting, Terminal Service
This policy setting determines whether the client computer redirects its time zone settings to the Terminal Services session. If you enable this policy setting, cl
Specifies whether a Terminal Server requires secure RPC communication with all clients or allows unsecured communication. You can use this setting to stren
Specifies whether Terminal Services uses a Session Directory for tracking user sessions, allowing a group of terminal servers to locate and connect a user bac
Specifies the Cluster Name for the terminal server, associating it with other servers in the same logical group. If the status is set to Enabled, you can specify th
Specifies how client devices are directed when reconnecting to an existing terminal server session. If the status is set to Enabled, client devices attempt to rec
Specifies whether to configure a server as a Session Directory Server for Terminal Services sessions on your network. A Session Directory Server directs inc
Specifies whether to terminate a timed-out Terminal Services session instead of disconnecting it. You can use this setting to direct Terminal Services to termi
Specifies whether to terminate a timed-out Terminal Services session instead of disconnecting it. You can use this setting to direct Terminal Services to termi
This policy setting allows you to configure a time limit for disconnected Terminal Services sessions. You can use this policy setting to specify the maximum am
This policy setting allows you to configure a time limit for disconnected Terminal Services sessions. You can use this policy setting to specify the maximum am
This policy setting allows you to specify the maximum amount of time that an active Terminal Services session can be idle (without user input) before it is autom
This policy setting allows you to specify the maximum amount of time that an active Terminal Services session can be idle (without user input) before it is autom
This policy setting allows you to specify the maximum amount of time that a Terminal Services session can be active before it is automatically disconnected. If
This policy setting allows you to specify the maximum amount of time that a Terminal Services session can be active before it is automatically disconnected. If
Specifies whether to allow users to reconnect to a disconnected Terminal Services session using a computer other than the original client computer. You can
Specifies whether to allow users to reconnect to a disconnected Terminal Services session using a computer other than the original client computer. You can
Specifies whether Terminal Services retains a user's per-session temporary folders at logoff. You can use this setting to maintain a user's session-specific tem
This policy setting allows you to prevent Terminal Services from creating session-specific temporary folders. You can use this policy setting to disable the crea
Disables the display of thumbnails in Windows Explorer. Windows Explorer displays thumbnails by default. If you enable this policy setting, Windows Explore
Disables the display of thumbnails on network folders in Windows Explorer. Windows Explorer displays thumbnails on network folders by default. If you enab
Turn off Tablet PC touch input Turns off touch input, which allows the user to interact with their computer using their finger. If you enable this setting, the user
Turn off Tablet PC touch input Turns off touch input, which allows the user to interact with their computer using their finger. If you enable this setting, the user
This policy setting allows you to manage the Active Directory Domain Services (AD DS) backup of Trusted Platform Module (TPM) owner information. TPM ow
This policy setting allows you to manage the Group Policy list of Trusted Platform Module (TPM) commands blocked by Windows. If you enable this policy sett
This policy setting allows you to enforce or ignore the computer's default list of blocked Trusted Platform Module (TPM) commands. If you enable this policy se
This policy setting allows you to enforce or ignore the computer's local list of blocked Trusted Platform Module (TPM) commands. If you enable this policy sett
This setting lets you disable the Backup Status and Configuration program, which links to the file backup, file restore, and Complete PC Backup applications an
This setting lets you disable the Backup Status and Configuration program, which links to the file backup, file restore, and Complete PC Backup applications an
This setting lets you prevent users from selecting a local disk (internal or external) for storing file backups. If this setting is enabled, the user will be blocked fro
This setting lets you prevent users from selecting a local disk (internal or external) for storing file backups. If this setting is enabled, the user will be blocked fro
This setting lets you prevent users from selecting a network shared folder for storing file backups. If this setting is enabled, users will be blocked from selecting
This setting lets you prevent users from selecting a network shared folder for storing file backups. If this setting is enabled, users will be blocked from selecting
This setting lets you prevent users from selecting optical media (CD/DVD) for storing file backups. If this setting is enabled, users will be blocked from selectin
This setting lets you prevent users from selecting optical media (CD/DVD) for storing file backups. If this setting is enabled, users will be blocked from selectin
This setting lets you disable file backup functionality. If this setting is enabled, the file backup program is disabled. If this setting is disabled or not configured,
This setting lets you disable file backup functionality. If this setting is enabled, the file backup program is disabled. If this setting is disabled or not configured,
This setting lets you disable file restore functionality. If this setting is enabled, the file restore program is disabled. If this setting is disabled or not configured,
This setting lets you disable file restore functionality. If this setting is enabled, the file restore program is disabled. If this setting is disabled or not configured,
This setting lets you disable Complete PC Backup functionality. If this setting is enabled, the Complete PC Backup program is disabled. If this setting is
This setting lets you disable Complete PC Backup functionality. If this setting is enabled, the Complete PC Backup program is disabled. If this setting is
This setting adds the Administrator security group to the roaming user profile share. Once an administrator has configured a users' roaming profile, the profile
This setting disables the more secure default setting for the userΓÇÖs roaming user profile folder. Once an administrator has configured a users' roaming prof
Restores the definitions of the %HOMESHARE% and %HOMEPATH% environment variables to those used in Windows NT 4.0 and earlier. If you enable this
Determines whether the system saves a copy of a userΓÇÖs roaming profile on the local computer's hard drive when the user logs off. This setting, and relate
Disables the slow link detection feature. Slow link detection measures the speed of the connection between a user's computer and the remote server that store
This policy setting provides users with the ability to download their roaming profile, even when a slow network connection with their roaming profile server is det
Lets you add to the list of folders excluded from the user's roaming profile. This setting lets you exclude folders that are normally included in the user's profile.
Determines whether the system retains a roaming userΓÇÖs Windows Installer and Group Policy based software installation data on their profile deletion. By d
This policy setting sets the maximum size of each user profile and determines the system's response when a user profile reaches the maximum size. This polic
This setting determines if roaming user profiles are available on a particular computer. By default, when roaming profile users log on to a computer, their roamin
Determines how long the system waits for a user response before it uses a default value. The default value is applied when the user does not respond to mess
This policy will automatically log off a user when Windows cannot load their profile. If Windows cannot access the user profile folder or the profile contains erro
Determines how many times the system tries to unload and update the registry portion of a user profile. When the number of trials specified by this setting is ex
This setting determines if the changes a user makes to their roaming profile are merged with the server copy of their profile. By default, when a roaming profile
Directs the system to wait for the remote copy of the roaming user profile to load, even when loading is slow. Also, the system waits for the remote copy when t
Defines a slow connection for roaming user profiles. If the server on which the user's roaming user profile resides takes longer to respond than the thresholds
This policy setting allows an administrator to automatically delete user profiles on system restart that have not been used within a specified number of days. No
This policy setting allows you to specify which network directories will be synchronized only at logon and logoff via Offline Files. This policy setting is meant to b
Microsoft Windows will always unload the users registry, even if there are any open handles to the per-user registry keys at user logoff. Using this policy setting
If the user has a roaming user profile or remote home directory and the network is currently unavailable, Microsoft Windows waits 30 seconds for the network w
Specifies whether Microsoft Windows should use the specified network path as the roaming user profile path for all users logging onto this computer. To use t
This policy setting allows you to manage the Active Directory Domain Services (AD DS) backup of BitLocker Drive Encryption recovery information. If you ena
This policy setting allows you to configure whether the BitLocker Drive Encryption setup wizard will ask the user to set up an additional authentication that is req
This policy setting allows you to configure whether the BitLocker Drive Encryption setup wizard will ask the user to save BitLocker recovery options. Two reco
This policy setting allows you to specify the default path that is displayed when the BitLocker Drive Encryption setup wizard prompts the user to enter the locatio
This policy setting allows you to configure the algorithm and key size used by BitLocker Drive Encryption. This policy setting applies on a fully-decrypted disk. C
This policy setting allows you to configure how the computer's Trusted Platform Module (TPM) security hardware secures the BitLocker encryption key. This po
This policy setting controls computer restart performance at the risk of exposing BitLocker secrets. BitLocker secrets include key material used to encrypt data.
Specifies a set of parameters for all time providers installed on your system. There are two sets of parameters: clock discipline parameters, which control how th
Specifies whether the Windows NTP Client synchronizes time from the domain hierarchy or a manually configured NTP server. Specifies whether the client can
Specifies whether the Windows NTP Client is enabled. Enabling the Windows NTP Client allows your computer to synchronize its computer clock with other NT
Specifies whether the Windows NTP Server is enabled. Enabling the Windows NTP Server allows your computer to service NTP requests from other machines
Determines the data retention limit for Diagnostic Policy Service (DPS) scenario data. If you enable this policy setting, you must enter the maximum size of sce
Determines the execution level for Diagnostic Policy Service (DPS) scenarios. If you enable this policy setting, you must select an execution level from the dro
Windows Calendar is a feature that allows users to manage appointments and tasks by creating personal calendars, publishing them, and subscribing to other
Windows Calendar is a feature that allows users to manage appointments and tasks by creating personal calendars, publishing them, and subscribing to other
This policy setting allows you to manage whether backups of only system volumes is allowed or both OS and data volumes can be backed up. If you enable th
This policy setting allows you to manage whether backups of a machine can run to locally attached storage or not. If you enable this policy setting, machine ad
This policy setting allows you to manage whether backups of a machine can run to a network share or not. If you enable this policy setting, machine administra
This policy setting allows you to manage whether backups of a machine can run to an optical media or not. If you enable this policy setting, machine administr
This policy setting allows you to manage whether run-once backups of a machine can be run or not. If you enable this policy setting, machine administrator/ba
Windows Meeting Space is a feature that enables quick, face-to-face collaboration for sharing programs and handouts and for passing notes. If you enable thi
This policy setting affects the ability of users to install or uninstall color profiles. If you enable this policy setting, users will not be able to install new color profile
This policy setting affects the ability of users to install or uninstall color profiles. If you enable this policy setting, users will not be able to install new color profile
This policy setting prohibits access to Windows Connect Now (WCN) wizards. If this policy setting is enabled, the wizards are disabled and users will have no a
This policy setting prohibits access to Windows Connect Now (WCN) wizards. If this policy setting is enabled, the wizards are disabled and users will have no a
This policy setting allows the configuration of wireless settings using Windows Connect Now (WCN). The WCN Registrar enables the discovery and configuratio
Checks for new signatures before running scheduled scans. If you enable this policy setting, the scheduled scan checks for new signatures before it scans the
Turns off Windows Defender Real-Time Protection, and no more scans are scheduled. If you enable this policy setting, Windows Defender does not run, and c
Enables logging detection data during Real-time Protection when Windows Defender detects known good files. Logging detections provides you with detailed in
Enables logging detections during Real-time Protection when Windows Defender detects unknown files. Logging detections provides you with detailed informat
Turns off Real-Time Protection (RTP) prompts for unknown detection. If you enable this policy setting, Windows Defender does not prompt users to allow or bl
Downloads the full signature set, rather than only the signatures that have been updated since the last signature download. Downloading the full signature set c
Adjusts membership in Microsoft SpyNet. Microsoft SpyNet is the online community that helps you choose how to respond to potential spyware threats. The c
This policy setting allows you to configure Windows Defender to check and install definition updates from Windows Update when a locally managed Windows S
Hide the Back button in the Open dialog box. This policy setting lets you remove new features added in Microsoft Windows 2000 Professional, so the Open dia
Removes the list of most recently used files from the Open dialog box. If you disable this setting or do not configure it, the "File name" field includes a drop-dow
Removes the shortcut bar from the Open dialog box. This setting, and others in this folder, lets you remove new features added in Windows 2000 Professiona
Configures the list of items displayed in the Places Bar in the Windows File/Open dialog. If enable this setting you can specify from 1 to 5 items to be displayed
This setting allows an administrator to revert specific Windows Shell behavior to classic Shell behavior. If you enable this setting, users cannot configure their
Allows you to have Windows Explorer display a confirmation dialog whenever a file is deleted or moved to the Recycle Bin. If you enable this setting, a confirm
This setting is designed to ensure that shell extensions can operate on a per-user basis. If you enable this setting, Windows is directed to only run those shell e
Determines whether Windows traces shortcuts back to their sources when it cannot find the target on the user's system. Shortcut files typically include an abso
Determines how many shortcuts the system can display in the Documents menu on the Start menu. The Documents menu contains shortcuts to the nonprogra
This settings controls whether the thumbnail views are cached. If you enable this setting, thumbnail views are not cached. If you disable or do not configure th
Windows Explorer allows you to create and modify re-writable CDs if you have a CD writer connected to your PC. If you enable this setting, all features in the W
Prevents users from selecting the option to animate the movement of windows, menus, and lists. If you enable this setting, the "Use transition effects for menu
Disables the "Hide keyboard navigation indicators until I use the ALT key" option in Display in Control Panel. When this Display Properties option is selected, t
Removes the DFS tab from Windows Explorer. This setting removes the DFS tab from Windows Explorer and from other programs that use the Windows Expl
Removes the icons representing selected hard drives from My Computer and Windows Explorer. Also, the drive letters representing the selected drives do not a
Removes all computers outside of the user's workgroup or local domain from lists of network resources in Windows Explorer and Network Locations. If you en
Removes the File menu from My Computer and Windows Explorer. This setting does not prevent users from using other methods to perform tasks available o
Removes the Folder Options item from all Windows Explorer menus and removes the Folder Options item from Control Panel. As a result, users cannot use the
Removes the Hardware tab. This setting removes the Hardware tab from Mouse, Keyboard, and Sounds and Audio Devices in Control Panel. It also removes
Removes the Manage item from the Windows Explorer context menu. This context menu appears when you right-click Windows Explorer or My Computer. Th
Removes the Shared Documents folder from My Computer. When a Windows client is in a workgroup, a Shared Documents icon appears in the Windows Exp
Prevents users from using Windows Explorer or Network Locations to map or disconnect network drives. If you enable this setting, the system removes the Ma
When a file or folder is deleted in Windows Explorer, a copy of the file or folder is placed in the Recycle Bin. Using this setting, you can change this behavior. I
Prevents users from submitting alternate logon credentials to install a program. This setting suppresses the "Install Program As Other User" dialog box for loca
Removes the Security tab from Windows Explorer. If you enable this setting, users opening the Properties dialog box for all file system objects, including folde
Removes the Search button from the Windows Explorer toolbar. This setting removes the Search button from the Standard Buttons toolbar that appears in Win
Removes shortcut menus from the desktop and Windows Explorer. Shortcut menus appear when you right-click an item. If you enable this setting, menus do n
Prevents users from using My Computer to gain access to the content of selected drives. If you enable this setting, users can browse the directory structure of
Turn off Windows+X hotkeys. Keyboards with a Windows key provide users with shortcuts to common shell features. For example, pressing the keyboard seq
Removes computers in the user's workgroup and domain from lists of network resources in Windows Explorer and Network Locations. If you enable this settin
Prompts users for alternate logon credentials during network-based installations. This setting displays the "Install Program As Other User" dialog box even wh
Limits the percentage of a volume's disk space that can be used to store deleted files. If you enable this setting, the user has a maximum amount of disk spac
This policy setting allows you to configure the amount of functionality that the shell protocol can have. When using the full functionality of this protocol, applicatio
This policy setting allows you to configure the amount of functionality that the shell protocol can have. When using the full functionality of this protocol, applicatio
Specifies an alternate location for the Windows File Protection cache. To enable this setting, enter the fully qualified local path to the new location in the "Cach
Specifies the maximum amount of disk space that can be used for the Windows File Protection file cache. Windows File Protection adds protected files to the
Determines when Windows File Protection scans protected files. This setting directs Windows File Protection to enumerate and scan all system files for change
Hides the file scan progress window. This window provides status information to sophisticated users, but it might confuse novices. If you enable this setting, t
Allows unsolicited incoming messages from specified systems that authenticate using the IPSec transport. If you enable this policy setting, you must type a se
Allows you to view and change the program exceptions list defined by Group Policy. Windows Firewall uses two program exception lists: one is defined by Grou
Allows administrators to use the Windows Firewall component in Control Panel to define a local program exceptions list. Windows Firewall uses two program ex
Turns on Windows Firewall. If you enable this policy setting, Windows Firewall runs and ignores the "Computer Configuration\Administrative Templates etwork
Specifies that Windows Firewall blocks all unsolicited incoming messages. This policy setting overrides all other Windows Firewall policy settings that allow suc
Allows inbound file and printer sharing. To do this, Windows Firewall opens UDP ports 137 and 138, and TCP ports 139 and 445. If you enable this policy setti
Defines the set of Internet Control Message Protocol (ICMP) message types that Windows Firewall allows. Utilities can use ICMP messages to determine the s
Allows Windows Firewall to record information about the unsolicited incoming messages that it receives. If you enable this policy setting, Windows Firewall wri
Prevents Windows Firewall from displaying notifications to the user when a program requests that Windows Firewall add the program to the program exceptions
Allows you to view and change the inbound port exceptions list defined by Group Policy. Windows Firewall uses two port exception lists: one is defined by Grou
Allows administrators to use the Windows Firewall component in Control Panel to define a local port exceptions list. Windows Firewall uses two port exceptions
Allows remote administration of this computer using administrative tools such as the Microsoft Management Console (MMC) and Windows Management Instrum
Allows this computer to receive inbound Remote Desktop requests. To do this, Windows Firewall opens TCP port 3389. If you enable this policy setting, Windo
Prevents this computer from receiving unicast responses to its outgoing multicast or broadcast messages. If you enable this policy setting, and this computer s
Allows this computer to receive unsolicited inbound Plug and Play messages sent by network devices, such as routers with built-in firewalls. To do this, Window
Allows you to view and change the program exceptions list defined by Group Policy. Windows Firewall uses two program exception lists: one is defined by Grou
Allows administrators to use the Windows Firewall component in Control Panel to define a local program exceptions list. Windows Firewall uses two program ex
Turns on Windows Firewall. If you enable this policy setting, Windows Firewall runs and ignores the "Computer Configuration\Administrative Templates etwork
Specifies that Windows Firewall blocks all unsolicited incoming messages. This policy setting overrides all other Windows Firewall policy settings that allow suc
Allows inbound file and printer sharing. To do this, Windows Firewall opens UDP ports 137 and 138, and TCP ports 139 and 445. If you enable this policy setti
Defines the set of Internet Control Message Protocol (ICMP) message types that Windows Firewall allows. Utilities can use ICMP messages to determine the s
Allows Windows Firewall to record information about the unsolicited incoming messages that it receives. If you enable this policy setting, Windows Firewall wri
Prevents Windows Firewall from displaying notifications to the user when a program requests that Windows Firewall add the program to the program exceptions
Allows you to view and change the inbound port exceptions list defined by Group Policy. Windows Firewall uses two port exception lists: one is defined by Grou
Allows administrators to use the Windows Firewall component in Control Panel to define a local port exceptions list. Windows Firewall uses two port exceptions
Allows remote administration of this computer using administrative tools such as the Microsoft Management Console (MMC) and Windows Management Instrum
Allows this computer to receive inbound Remote Desktop requests. To do this, Windows Firewall opens TCP port 3389. If you enable this policy setting, Windo
Prevents this computer from receiving unicast responses to its outgoing multicast or broadcast messages. If you enable this policy setting, and this computer s
Allows this computer to receive unsolicited inbound Plug and Play messages sent by network devices, such as routers with built-in firewalls. To do this, Window
Denies or allows access to the Windows Mail application. If you enable this setting, access to the Windows Mail application is denied. If you disable or do not
Denies or allows access to the Windows Mail application. If you enable this setting, access to the Windows Mail application is denied. If you disable or do not
Windows Mail will not check your newsgroup servers for Communities support.
Windows Mail will not check your newsgroup servers for Communities support.
Prevents Windows Media Digital Rights Management (DRM) from accessing the Internet (or intranet). When enabled, Windows Media DRM is prevented from
Prevents users from being prompted to update Windows Media Player. This policy prevents the Player from being updated and prevents users with administra
Do Not Show First Use Dialog Boxes This policy prevents the Privacy Options and Installation Options dialog boxes from being displayed the first time a user s
Prevents video smoothing from occurring. This policy prevents video smoothing, which can improve video playback on computers with limited resources, from
Prevents media information for CDs and DVDs from being retrieved from the Internet. This policy prevents the Player from automatically obtaining media inform
Prevents media sharing from Windows Media Player. This policy prevents any user on this computer from sharing digital media content from Windows Media P
Prevents media information for music files from being retrieved from the Internet. This policy prevents the Player from automatically obtaining media informatio
This policy prevents a shortcut for the Player from being added to the Quick Launch bar. When this policy is not configured or disabled, the user can choose w
Prevents radio station presets from being retrieved from the Internet. This policy prevents the Player from automatically retrieving radio station presets from th
This policy prevents a shortcut icon for the Player from being added to the user's desktop. When this policy is not configured or disabled, users can choose wh
Enables a screen saver to interrupt playback. This policy displays a screen saver during playback of digital media according to the options selected on the Scr
Prevents Windows Media Player from downloading codecs. This policy prevents the Player from automatically downloading codecs to your computer. In additi
Prevents the anchor window from being displayed when Windows Media Player is in skin mode. This policy hides the anchor window when the Player is in ski
Hides the Privacy tab. This policy hides the Privacy tab in Windows Media Player. The default privacy settings are used for the options on the Privacy tab unle
Hides the Security tab. This policy hides the Security tab in Windows Media Player. The default security settings for the options on the Security tab are used u
Enables Windows Media Player to be shown only in skin mode, using a specified skin. This policy displays the Player only in skin mode by using the skin spec
Specifies the HTTP proxy settings for Windows Media Player. This policy specifies the proxy settings for the HTTP protocol. When this policy is enabled, a pro
Specifies the MMS proxy settings for Windows Media Player. This policy specifies the proxy settings for the MMS protocol. When this policy is enabled, a prox
Specifies the RTSP proxy settings for Windows Media Player. This policy specifies the proxy settings for the RTSP protocol. When this policy is enabled, a pro
Hides the Network tab. This policy hides the Network tab in Windows Media Player. The default network settings are used unless the user has previously defin
Specifies whether network buffering uses the default or a specified number of seconds. This policy specifies that the default network buffering is used or speci
Specifies that Windows Media Player can attempt to use selected protocols when receiving streaming media from a server running Windows Media Services.
Windows Messenger is automatically loaded and running when a user logs on to a Windows XP computer. You can use this setting to stop Windows Messenge
Windows Messenger is automatically loaded and running when a user logs on to a Windows XP computer. You can use this setting to stop Windows Messenge
Allows you to disable Windows Messenger. If you enable this setting, Windows Messenger will not run. If you disable or do not configure this setting, Window
Allows you to disable Windows Messenger. If you enable this setting, Windows Messenger will not run. If you disable or do not configure this setting, Window
This policy setting allows you to manage whether the Windows Remote Management (WinRM) client uses Basic authentication. If you enable this policy settin
This policy setting allows you to manage whether the Windows Remote Management (WinRM) client sends and receives unencrypted messages over the netw
This policy setting allows you to manage whether the Windows Remote Management (WinRM) client will not use Digest authentication. If you enable this polic
This policy setting allows you to manage whether the Windows Remote Management (WinRM) client will not use Negotiate authentication. If you enable this p
This policy setting allows you to manage whether the Windows Remote Management (WinRM) client will not use Kerberos authentication directly. If you enabl
This policy setting allows you to manage whether Windows Remote Management (WinRM) client uses the list specified in TrustedHostsList to determine if the d
This policy setting allows you to manage whether the Windows Remote Management (WinRM) service automatically listens on the network for requests on the
This policy setting allows you to manage whether the Windows Remote Management (WinRM) service accepts Basic authentication from a remote client. If yo
This policy setting allows you to manage whether the Windows Remote Management (WinRM) service sends and receives unencrypted messages over the net
This policy setting allows you to manage whether the Windows Remote Management (WinRM) service will not accept Negotiate authentication from a remote c
This policy setting allows you to manage whether the Windows Remote Management (WinRM) service will not accept Kerberos credentials over the network. I
Configures access to remote shells. If you enable this policy setting and set it to False, new remote shell connections will be rejected by the server. If you dis
Configures maximum time in milliseconds remote shell will stay open without any user activity until it is automatically deleted. Any value from 0 to 0x7FFFFFFF
Configures the maximum number of users able to concurrently perform remote operations on the same system using remote CMD shell. The value can be any
Configures maximum total amount of memory that can be allocated by any active remote shell and all its child processes. Any value from 0 to 0x7FFFFFFF ca
Configures the maximum number of processes any shell operations are allowed to launch. Any number from 0 to 0x7FFFFFFF can be set, where 0 means un
Configures maximum time in milliseconds that the remote command or script will be allowed to execute. Any value from 0 to 0x7FFFFFFF can be set, where 0
Configures maximum number of concurrent shells any user can remotely open on the same system. Any number from 0 to 0x7FFFFFFF cand be set, where 0
This setting controls automatic updates to a user's computer. Whenever a user connects to the Internet, Windows searches for updates available for the softw
This policy setting allows you to manage whether the 'Install Updates and Shut Down' option is displayed in the Shut Down Windows dialog box. If you enable
This policy setting allows you to manage whether the 'Install Updates and Shut Down' option is displayed in the Shut Down Windows dialog box. If you enable
This policy setting allows you to manage whether the 'Install Updates and Shut Down' option is allowed to be the default choice in the Shut Down Windows dialo
This policy setting allows you to manage whether the 'Install Updates and Shut Down' option is allowed to be the default choice in the Shut Down Windows dialo
This setting allows you to remove access to Windows Update. If you enable this setting, all Windows Update features are removed. This includes blocking acc
Specifies whether this computer will receive security updates and other important downloads through the Windows automatic updating service. This setting let
Specifies an intranet server to host updates from Microsoft Update. You can then use this update service to automatically update computers on your network.
Specifies the hours that Windows will use to determine how long to wait before checking for available updates. The exact wait time is determined by using the h
Specifies whether, when logged on, non-administrative users will receive update notifications based on the configuration settings for Automatic Updates. If Auto
Specifies whether Automatic Updates should automatically install certain updates that neither interrupt Windows services nor restart Windows. If the status is s
Specifies whether Automatic Updates will deliver both important as well as recommended updates from the Windows Update update service. When this policy
Specifies whether the Windows Update will use the Windows Power Management features to automatically wake up the system from hibernation, if there are up
Specifies that to complete a scheduled installation, Automatic Updates will wait for the computer to be restarted by any user who is logged on, instead of causin
Specifies the amount of time for Automatic Updates to wait before prompting again with a scheduled restart. If the status is set to Enabled, a scheduled restart
Specifies the amount of time for Automatic Updates to wait before proceeding with a scheduled restart. If the status is set to Enabled, a scheduled restart will o
Specifies the amount of time for Automatic Updates to wait, following system startup, before proceeding with a scheduled installation that was missed previousl
Specifies the target group name that should be used to receive updates from an intranet Microsoft update service. If the status is set to Enabled, the specified
This policy controls the legacy remote shutdown interface (named pipe). The named pipe remote shutdown interface is needed in order to shutdown this system
The number of minutes the system will wait for the hung logon sessions before proceeding with the system shutdown. If this settings is enabled, the system wi
This policy setting controls whether or not the system displays information about previous logons and logon failures to the user. For local user accounts and do
This policy controls whether the logged on user should be notified when his logon hours are about to expire. By default, a user is notified before logon hours ex
This policy controls which action will be taken when the logon hours expire for the logged on user. The actions include lock the workstation, disconnect the user
This policy setting controls whether or not software can simulate the Secure Attention Sequence (SAS). If you enable this policy setting, you have one of four o
This policy controls whether the logged on user should be notified if the logon server could not be contacted during logon and he has been logged on using pre
This policy controls whether the logged on user should be notified if the logon server could not be contacted during logon and he has been logged on using pre
Specifies an alternate user interface. The Explorer program (%windir%\explorer.exe) creates the familiar Windows interface, but you can use this setting to sp
This policy setting specifies whether Windows will allow console applications and GUI applications without visible top-level windows to block or cancel shutdown
Set up the menu name and URL for the custom Internet search provider. If you enable this setting, the specified menu name and URL will be used for Internet
Registry Settings
HKLM\SOFTWARE\Policies\Microsoft\Windows\AxInstaller!ApprovedList, HKLM\SOFTWARE\Policies\Microsoft\Windows\AxInstaller\ApprovedActiveXInstallSi
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!DefaultCategory
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddFromCDorFloppy
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddFromInternet
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddFromNetwork
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddRemovePrograms
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoChooseProgramsPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoRemovePage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoServices
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoSupportInfo
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoWindowsSetupPage
HKCU\Software\Policies\Microsoft\Windows\AppCompat!VDMDisallowed
HKLM\Software\Policies\Microsoft\Windows\AppCompat!VDMDisallowed
HKLM\Software\Policies\Microsoft\Windows\AppCompat!DisablePropPage
HKLM\Software\Policies\Microsoft\Windows\AppCompat!DisableEngine
HKLM\Software\Policies\Microsoft\Windows\AppCompat!DisableWizard
HKCU\Software\Policies\Microsoft\Windows\AppCompat!DisablePCA
HKLM\Software\Policies\Microsoft\Windows\AppCompat!DisablePCA
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!ScanWithAntiVirus
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!UseTrustedHandlers
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!SaveZoneInformation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!HideZoneInfoOnProperties
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!DefaultFileTypeRisk
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!HighRiskFileTypes
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!LowRiskFileTypes
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!ModRiskFileTypes
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoAutorun
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoAutorun
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DontSetAutoplayCheckbox
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DontSetAutoplayCheckbox
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDriveTypeAutoRun
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDriveTypeAutoRun
HKLM\Software\Policies\Microsoft\Windows\BITS!EnablePeercaching
HKLM\Software\Policies\Microsoft\Windows\BITS!JobInactivityTimeout
HKLM\Software\Policies\Microsoft\Windows\BITS!MaxDownloadTime
HKLM\Software\Policies\Microsoft\Windows\BITS!EnableBITSMaxBandwidth, HKLM\Software\Policies\Microsoft\Windows\BITS!MaxTransferRateOnSchedule,
HKLM\Software\Policies\Microsoft\Windows\BITS!MaxContentAge
HKLM\Software\Policies\Microsoft\Windows\BITS!MaxCacheSize
HKLM\Software\Policies\Microsoft\Windows\BITS!DisablePeerCachingClient
HKLM\Software\Policies\Microsoft\Windows\BITS!DisablePeerCachingServer
HKLM\Software\Policies\Microsoft\Windows\BITS!MaxBandwidthServed
HKLM\Software\Policies\Microsoft\Windows\BITS!MaxJobsPerMachine
HKLM\Software\Policies\Microsoft\Windows\BITS!MaxJobsPerUser
HKLM\Software\Policies\Microsoft\Windows\BITS!MaxFilesPerJob
HKLM\Software\Policies\Microsoft\Windows\BITS!MaxRangesPerFile
HKCU\SOFTWARE\Policies\Microsoft\CaptureWizard!VidCap
HKLM\SOFTWARE\Policies\Microsoft\CaptureWizard!VidCap
HKLM\Software\Policies\Microsoft\SQMClient!CorporateSQMURL, HKLM\Software\Policies\Microsoft\SQMClient!CorporateSQMURL
HKLM\Software\Policies\Microsoft\SQMClient\Windows!StudyId, HKLM\Software\Policies\Microsoft\SQMClient\Windows!StudyId
HKLM\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002!Functions
HKCU\Software\Policies\Microsoft\Windows\App Management!COMClassStore
HKLM\Software\Policies\Microsoft\Windows\App Management!COMClassStore
HKCU\Software\Policies\Microsoft\Conferencing!NoAppSharing
HKCU\Software\Policies\Microsoft\Conferencing!NoAllowControl
HKCU\Software\Policies\Microsoft\Conferencing!NoSharing
HKCU\Software\Policies\Microsoft\Conferencing!NoSharingDosWindows
HKCU\Software\Policies\Microsoft\Conferencing!NoSharingDesktop
HKCU\Software\Policies\Microsoft\Conferencing!NoSharingExplorer
HKCU\Software\Policies\Microsoft\Conferencing!NoTrueColorSharing
HKCU\Software\Policies\Microsoft\Conferencing!NoAudio
HKCU\Software\Policies\Microsoft\Conferencing!NoChangeDirectSound
HKCU\Software\Policies\Microsoft\Conferencing!NoFullDuplex
HKCU\Software\Policies\Microsoft\Conferencing!NoReceivingVideo
HKCU\Software\Policies\Microsoft\Conferencing!NoSendingVideo
HKCU\Software\Policies\Microsoft\Conferencing!MaximumBandwidth
HKCU\Software\Policies\Microsoft\Conferencing!PersistAutoAcceptCalls
HKCU\Software\Policies\Microsoft\Conferencing!NoChat
HKCU\Software\Policies\Microsoft\Conferencing!NoNewWhiteBoard
HKCU\Software\Policies\Microsoft\Conferencing!NoOldWhiteBoard
HKLM\Software\Policies\Microsoft\Conferencing!NoRDS
HKCU\Software\Policies\Microsoft\Conferencing!Use AutoConfig, HKCU\Software\Policies\Microsoft\Conferencing!ConfigFile
HKCU\Software\Policies\Microsoft\Conferencing!NoAddingDirectoryServers
HKCU\Software\Policies\Microsoft\Conferencing!NoAutoAcceptCalls
HKCU\Software\Policies\Microsoft\Conferencing!NoChangingCallMode
HKCU\Software\Policies\Microsoft\Conferencing!NoDirectoryServices
HKCU\Software\Policies\Microsoft\Conferencing!NoReceivingFiles
HKCU\Software\Policies\Microsoft\Conferencing!NoSendingFiles
HKCU\Software\Policies\Microsoft\Conferencing!NoWebDirectory
HKCU\Software\Policies\Microsoft\Conferencing!MaxFileSendSize
HKCU\Software\Policies\Microsoft\Conferencing!IntranetSupportURL
HKCU\Software\Policies\Microsoft\Conferencing!CallSecurity
HKCU\Software\Policies\Microsoft\Conferencing!NoAdvancedCalling
HKCU\Software\Policies\Microsoft\Conferencing!NoAudioPage
HKCU\Software\Policies\Microsoft\Conferencing!NoGeneralPage
HKCU\Software\Policies\Microsoft\Conferencing!NoSecurityPage
HKCU\Software\Policies\Microsoft\Conferencing!NoVideoPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisallowCpl, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Disallo
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ForceClassicControlPanel
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoControlPanel
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!RestrictCpl, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Restrict
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoDispCPL
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoDispAppearancePage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoDispBackgroundPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoDispScrSavPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoDispSettingsPage
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!ScreenSaveActive
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!SCRNSAVE.EXE
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!ScreenSaverIsSecure
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!ScreenSaveTimeOut
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoChangingWallPaper
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoColorChoice
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoThemesTab
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoVisualStyleChoice
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!SetVisualStyle
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoSizeChoice
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!UseDefaultTile
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DefaultLogonDomain
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!ExcludedCredentialProviders
HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!AllowDefaultCredentials, HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation
HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!AllowDefCredentialsWhenNTLMOnly, HKLM\Software\Policies\Microsoft\Windows\Credenti
HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!AllowFreshCredentials, HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation\A
HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!AllowFreshCredentialsWhenNTLMOnly, HKLM\Software\Policies\Microsoft\Windows\Creden
HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!AllowSavedCredentials, HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation\
HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!AllowSavedCredentialsWhenNTLMOnly, HKLM\Software\Policies\Microsoft\Windows\Crede
HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!DenyDefaultCredentials, HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation
HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!DenyFreshCredentials, HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation\D
HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!DenySavedCredentials, HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation\
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\CredUI!EnumerateAdministrators
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\CredUI!EnableSecureCredentialPrompting
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableChangePassword
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableLockWorkstation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableTaskMgr
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoLogoff
HKLM\Software\Policies\Microsoft\Windows NT\DCOM\AppCompat!AllowLocalActivationSecurityCheckExemptionList
HKLM\Software\Policies\Microsoft\Windows NT\DCOM\AppCompat!ListBox_Support_ActivationSecurityCheckExemptionList, HKLM\Software\Policies\Microso
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ForceActiveDesktopOn
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoActiveDesktop
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoActiveDesktopChanges
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop\AdminComponent!Add, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoAddingComponents
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoClosingComponents
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoDeletingComponents
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoEditingComponents
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoComponents
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoHTMLWallPaper
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!Wallpaper, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!Wallpaper
HKCU\Software\Policies\Microsoft\Windows\Directory UI!EnableFilter
HKCU\Software\Policies\Microsoft\Windows\Directory UI!HideDirectoryFolder
HKCU\Software\Policies\Microsoft\Windows\Directory UI!QueryLimit
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisablePersonalDirChange
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDesktop
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDesktopCleanupWizard
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetIcon
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies onEnum!{20D04FE0-3AEA-1069-A2D8-08002B30309D}
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies onEnum!{450D8FBA-AD25-11D0-98A8-0800361B1103}
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNetHood
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPropertiesMyComputer
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPropertiesMyDocuments
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRecentDocsNetHood
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies onEnum!{645FF040-5081-101B-9F08-00AA002F954E}
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPropertiesRecycleBin
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSaveSettings
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoCloseDragDropBands
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoMovingBands
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Settings!AllSigningEqual
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Settings!DisableBalloonTips
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Settings!InstallTimeout
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Settings!DisableSystemRestore
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Settings!AllowRemoteRPC
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Settings!DisableSendGenericDriverNotFoundToWER
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions!AllowAdminInstall
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions!AllowDeviceClasses, HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictio
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions!DenyDeviceClasses, HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictio
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions!AllowDeviceIDs, HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\A
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions!DenyDeviceIDs, HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\D
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions!DenyRemovableDevices
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions!DenyUnspecified
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DeniedPolicy!SimpleText
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DeniedPolicy!DetailText
HKLM\Software\Policies\Microsoft\Windows\DriverInstall\Restrictions!AllowUserDeviceClasses, HKLM\Software\Policies\Microsoft\Windows\DriverInstall\Restri
HKCU\Software\Policies\Microsoft\Windows\DriverSearching!DontSearchFloppies, HKCU\Software\Policies\Microsoft\Windows\DriverSearching!DontSearchCD
HKCU\Software\Policies\Microsoft\Windows\DriverSearching!DontPromptForWindowsUpdate
HKLM\Software\Policies\Microsoft\Windows\DriverSearching!DontPromptForWindowsUpdate
HKCU\Software\Policies\Microsoft\Windows NT\Driver Signing!BehaviorOnFailedVerify
HKLM\Software\Policies\Microsoft\System\DFSClient!DfsDcNameDelay
HKCU\SOFTWARE\Policies\Microsoft\Windows\Digital Locker!DoNotRunDigitalLocker
HKLM\SOFTWARE\Policies\Microsoft\Windows\Digital Locker!DoNotRunDigitalLocker
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{29689E29-2CE9-4751-B4FC-8EFF5066E3FD}!DfdAlertTextOverride
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{29689E29-2CE9-4751-B4FC-8EFF5066E3FD}!ScenarioExecutionEnabled, HKLM\SOFTWARE\Policies\
HKLM\Software\Policies\Microsoft\Windows vCache!OptimizeBootAndResume
HKLM\Software\Policies\Microsoft\Windows vCache!EnablePowerModeState
HKLM\Software\Policies\Microsoft\Windows vCache!EnableNvCache
HKLM\Software\Policies\Microsoft\Windows vCache!EnableSolidStateMode
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!Enable
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!Enforce
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!Limit, HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!LimitUnits, HKLM\Software\Policie
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!LogEventOverLimit
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!LogEventOverThreshold
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!ApplyToRemovableMedia
HKLM\Software\Policies\Microsoft\Windows\System!DLT_AllowDomainMode
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!AdapterDomainName
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!NameServer
HKLM\Software\Policies\Microsoft\System\DNSClient!NV PrimaryDnsSuffix
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegisterAdapterName
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegisterReverseLookup
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationEnabled
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationOverwritesInConflict
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationRefreshInterval
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationTtl
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!SearchList
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!UpdateSecurityLevel
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!UpdateTopLevelDomainZones
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!UseDomainNameDevolution
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!EnableMulticast
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!AppendToMultiLabelName
HKCU\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowAnimations
HKLM\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowAnimations
HKCU\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowComposition
HKLM\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowComposition
HKCU\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowFlip3d
HKLM\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowFlip3d
HKCU\SOFTWARE\Policies\Microsoft\Windows\DWM!DefaultColorizationColorState, HKCU\SOFTWARE\Policies\Microsoft\Windows\DWM!DefaultColorization
HKLM\SOFTWARE\Policies\Microsoft\Windows\DWM!DefaultColorizationColorState, HKLM\SOFTWARE\Policies\Microsoft\Windows\DWM!DefaultColorization
HKCU\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowColorizationColorChanges
HKLM\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowColorizationColorChanges
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoEncryptOnMove
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWNoExternalURL, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWNoFi
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!ShowUI, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWAllowHeadless
HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!Disabled
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!Disabled
HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!LoggingDisabled
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!LoggingDisabled
HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!DontSendAdditionalData
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!DontSendAdditionalData
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!AllOrNone, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!IncludeMicrosoftApps, HKL
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\ExclusionList
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\InclusionList
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!IncludeKernelFaults
HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!DisableArchive, HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Rep
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!DisableArchive, HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Repo
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!CorporateWerServer, HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Erro
HKCU\Software\Policies\Microsoft\Windows\Windows Error Reporting\ExcludedApplications
HKLM\Software\Policies\Microsoft\Windows\Windows Error Reporting\ExcludedApplications
HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!DisableQueue, HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Repo
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!DisableQueue, HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Repo
HKCU\
HKLM\
HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\Consent!DefaultOverrideBehavior
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\Consent!DefaultOverrideBehavior
HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\Consent!DefaultConsent
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\Consent!DefaultConsent
HKLM\Software\Policies\Microsoft\Windows\EventLog\Application!AutoBackupLogFiles
HKLM\Software\Policies\Microsoft\Windows\EventLog\Application!ChannelAccess
HKLM\Software\Policies\Microsoft\Windows\EventLog\Application!Retention
HKLM\Software\Policies\Microsoft\Windows\EventLog\Application!File
HKLM\Software\Policies\Microsoft\Windows\EventLog\Application!MaxSize
HKLM\Software\Policies\Microsoft\Windows\EventLog\Security!AutoBackupLogFiles
HKLM\Software\Policies\Microsoft\Windows\EventLog\Security!ChannelAccess
HKLM\Software\Policies\Microsoft\Windows\EventLog\Security!Retention
HKLM\Software\Policies\Microsoft\Windows\EventLog\Security!File
HKLM\Software\Policies\Microsoft\Windows\EventLog\Security!MaxSize
HKLM\Software\Policies\Microsoft\Windows\EventLog\Setup!AutoBackupLogFiles
HKLM\Software\Policies\Microsoft\Windows\EventLog\Setup!ChannelAccess
HKLM\Software\Policies\Microsoft\Windows\EventLog\Setup!Retention
HKLM\Software\Policies\Microsoft\Windows\EventLog\Setup!Enabled
HKLM\Software\Policies\Microsoft\Windows\EventLog\Setup!File
HKLM\Software\Policies\Microsoft\Windows\EventLog\Setup!MaxSize
HKLM\Software\Policies\Microsoft\Windows\EventLog\System!AutoBackupLogFiles
HKLM\Software\Policies\Microsoft\Windows\EventLog\System!ChannelAccess
HKLM\Software\Policies\Microsoft\Windows\EventLog\System!Retention
HKLM\Software\Policies\Microsoft\Windows\EventLog\System!File
HKLM\Software\Policies\Microsoft\Windows\EventLog\System!MaxSize
HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftRedirectionProgram
HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftRedirectionProgramCommandLineParameters
HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftRedirectionURL
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!AlwaysShowClassicMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!PreventItemCreationInUsersFilesFolder
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TurnOffSPIAnimations
HKLM\Software\Policies\Microsoft\Windows\Explorer!NoHeapTerminationOnCorruption
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{8519d925-541e-4a2b-8b1e-8059d16082f2}!ScenarioExecutionEnabled, HKLM\SOFTWARE\Policies\Mic
HKLM\Software\Policies\Microsoft\Windows\Filesystems TFS!SymLinkState, HKLM\Software\Policies\Microsoft\Windows\Filesystems TFS!SymlinkLocalToLoc
HKCU\Software\Policies\Microsoft\Windows\System\Fdeploy!LocalizeXPRelativePaths
HKCU\Software\Policies\Microsoft\Windows etCache!DisableFRAdminPin
HKLM\Software\Policies\Microsoft\Windows\System\Fdeploy!LocalizeXPRelativePaths
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPreviewPane
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoReadingPane
HKLM\Software\Policies\Microsoft\Windows\GameUX!DownloadGameInfo
HKLM\Software\Policies\Microsoft\Windows\GameUX!ListRecentlyPlayed
HKCU\Software\Policies\Microsoft\Control Panel\International!CustomLocalesNoSelect
HKLM\Software\Policies\Microsoft\Control Panel\International!CustomLocalesNoSelect
HKLM\Software\Policies\Microsoft\Control Panel\International!RestrictSystemLocales, HKLM\Software\Policies\Microsoft\Control Panel\International!AllowableS
HKCU\Software\Policies\Microsoft\Control Panel\International!RestrictUserLocales, HKCU\Software\Policies\Microsoft\Control Panel\International!AllowableUse
HKLM\Software\Policies\Microsoft\Control Panel\International!RestrictUserLocales, HKLM\Software\Policies\Microsoft\Control Panel\International!AllowableUse
HKCU\Software\Policies\Microsoft\Control Panel\International!PreventGeoIdChange
HKLM\Software\Policies\Microsoft\Control Panel\International!PreventGeoIdChange
HKCU\Software\Policies\Microsoft\Control Panel\International!PreventUserOverrides
HKLM\Software\Policies\Microsoft\Control Panel\International!PreventUserOverrides
HKCU\Software\Policies\Microsoft\Control Panel\International!HideAdminOptions
HKCU\Software\Policies\Microsoft\Control Panel\International!HideCurrentLocation
HKCU\Software\Policies\Microsoft\Control Panel\International!HideLanguageSelection
HKCU\Software\Policies\Microsoft\Control Panel\International!HideLocaleSelectAndCustomize
HKLM\Software\Policies\Microsoft\MUI\Settings!PreferredUILanguages
HKCU\Software\Policies\Microsoft\Control Panel\Desktop!PreferredUILanguages
HKLM\Software\Policies\Microsoft\MUI\Settings!MachineUILock
HKCU\Software\Policies\Microsoft\Control Panel\Desktop!MultiUILanguageID
HKCU\Software\Policies\Microsoft\Control Panel\International\Calendars\TwoDigitYearMax!1
HKLM\Software\Policies\Microsoft\Windows\System!DisableLGPOProcessing
HKLM\Software\Policies\Microsoft\Windows\System!GpNetworkStartTimeoutPolicyValue
HKLM\Software\Policies\Microsoft\Windows\System!AllowX-ForestPolicy-and-RUP
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{c6dc5466-785a-11d2-84d0-00c04fb169f7}!NoSlowLink, HKLM\Software\Policies\Microsoft\Windows
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}!NoSlowLink, HKLM\Software\Policies\Microsoft\Windows
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}!NoSlowLink, HKLM\Software\Policies\Microsoft\Win
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{25537BA6-77A8-11D2-9B6C-0000F8080861}!NoSlowLink, HKLM\Software\Policies\Microsoft\Windo
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}!NoSlowLink, HKLM\Software\Policies\Microsoft\Win
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{e437bc1c-aa7d-11d2-a382-00c04f991e27}!NoSlowLink, HKLM\Software\Policies\Microsoft\Windows
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!NoBackgroundPolicy, HKLM\Software\Policies\Micro
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{42B5FAAE-6536-11d2-AE5A-0000F87571E3}!NoSlowLink, HKLM\Software\Policies\Microsoft\Wind
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}!NoBackgroundPolicy, HKLM\Software\Policies\Micro
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}!NoSlowLink, HKLM\Software\Policies\Microsoft\Wi
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{B587E2B1-4D59-4e7e-AED9-22B9DF11D053}!NoSlowLink, HKLM\Software\Policies\Microsoft\Wind
HKCU\Software\Policies\Microsoft\Windows\System!DenyRsopToInteractiveUser
HKLM\Software\Policies\Microsoft\Windows\System!DenyRsopToInteractiveUser
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!DisableAutoADMUpdate
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableBkGndGroupPolicy
HKLM\Software\Policies\Microsoft\Windows\System!DenyUsersFromMachGP
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!ShowPoliciesOnly
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!DCOption
HKCU\Software\Policies\Microsoft\Windows\System!GroupPolicyMinTransferRate
HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyMinTransferRate
HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTime, HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTimeO
HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTimeDC, HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTim
HKCU\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTime, HKCU\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTimeO
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!GPODisplayName
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!NewGPOLinksDisabled
HKLM\Software\Policies\Microsoft\Windows\Group Policy!OnlyUseLocalAdminFiles
HKLM\Software\Policies\Microsoft\Windows\System!RSoPLogging
HKLM\Software\Policies\Microsoft\Windows\System!UserPolicyMode
HKLM\Software\Policies\Microsoft\Windows\System!HelpQualifiedRootDir
HKCU\Software\Policies\Microsoft\Windows\System!DisableInHelp
HKLM\Software\Policies\Microsoft\Windows\System!DisableInHelp
HKLM\Software\Policies\Microsoft\Assistance\Client\1.0!NoActiveHelp
HKLM\Software\Policies\Microsoft\Assistance\Client\1.0!NoUntrustedContent
HKCU\Software\Policies\Microsoft\Assistance\Client\1.0!NoExplicitFeedback
HKCU\Software\Policies\Microsoft\Assistance\Client\1.0!NoImplicitFeedback
HKCU\Software\Policies\Microsoft\Assistance\Client\1.0!NoOnlineAssist
HKCU\Software\policies\Microsoft\System\HotStart!NoHotStart
HKLM\Software\policies\Microsoft\System\HotStart!NoHotStart
HKCU\Software\Policies\Microsoft\InternetManagement!RestrictCommunication, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPublis
HKLM\Software\Policies\Microsoft\InternetManagement!RestrictCommunication, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPublis
HKLM\Software\Policies\Microsoft\SystemCertificates\AuthRoot!DisableRootAutoUpdate
HKCU\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting
HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting
HKCU\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload
HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload
HKLM\Software\Policies\Microsoft\Windows\DriverSearching!DontSearchWindowsUpdate
HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftEventVwrDisableLinks
HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!Headlines
HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!MicrosoftKBSearch
HKLM\Software\Policies\Microsoft\Windows\Internet Connection Wizard!ExitOnMSICW
HKLM\Software\Policies\Microsoft\Windows\Registration Wizard Control!NoRegistration
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!DoReport, HKLM\Software\Policies\Microsoft\Windows\Windows Error Reporting!Disabled
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!DisableWindowsUpdateAccess
HKLM\Software\Policies\Microsoft\SearchCompanion!DisableContentFileUpdates
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPublishingWizard
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPublishingWizard
HKCU\Software\Policies\Microsoft\Messenger\Client!CEIP
HKLM\Software\Policies\Microsoft\Messenger\Client!CEIP
HKLM\Software\Policies\Microsoft\SQMClient\Windows!CEIPEnable
HKLM\Software\Policies\Microsoft\Windows NT\IIS!PreventIISInstall
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{05589FA1-C356-11CE-BF01-00AA0055595A}, HKCU\Software
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{DED22F57-FEE2-11D0-953B-00C04FD9152D}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{2D360201-FFF5-11D1-8D03-00A0C959BC0A}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{D27CDB6E-AE6D-11CF-96B8-444553540000}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{9276B91A-E780-11d2-8A8D-00C04FA31D93}, HKCU\Software
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{275E2FE0-7486-11D0-89D6-00A0C90C9B67}, HKCU\Software
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{D45FD31B-5C6E-11D1-9EC1-00C04FD7081F}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{D6526FE0-E651-11CF-99CB-00C04FD64497}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{2FF18E10-DE11-11D1-8161-00A0C90DD90C}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{26F24A93-1DA2-11D0-A334-00AA004A5FC5}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{AE24FDAE-03C6-11D1-8B76-0080C744F389}
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{BD1F006E-174F-11D2-95C0-00C04F9A8CFA}
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\Settings!LOCALMACHINE_CD_UNLOCK
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\Settings!LOCALMACHINE_CD_UNLOCK
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!CertificateRevocation
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!CertificateRevocation
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!UseClearType
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!UseClearType
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableRIED
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableRIED
HKCU\Software\Policies\Microsoft\Internet Explorer\Download!CheckExeSignatures
HKLM\Software\Policies\Microsoft\Internet Explorer\Download!CheckExeSignatures
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Enable Browser Extensions
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Enable Browser Extensions
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!NoJITSetup
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!NoJITSetup
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!NoWebJITSetup
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!NoWebJITSetup
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!NoUpdateCheck
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!NoUpdateCheck
HKCU\Software\Policies\Microsoft\Internet Explorer\Download!RunInvalidSignatures
HKLM\Software\Policies\Microsoft\Internet Explorer\Download!RunInvalidSignatures
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Play_Animations
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Play_Animations
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Play_Background_Sounds
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Play_Background_Sounds
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Display Inline Videos
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Display Inline Videos
HKCU\Software\Policies\Microsoft\Internet Explorer\Security\P3Global!Enabled
HKLM\Software\Policies\Microsoft\Internet Explorer\Security\P3Global!Enabled
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DisableCachingOfSSLPages
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DisableCachingOfSSLPages
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Cache!Persistent
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Cache!Persistent
HKCU\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete!Append Completion
HKCU\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete!Use AutoComplete
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Disable Script Debugger
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Friendly http errors
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Page_Transitions
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Error Dlg Displayed On Every Error
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!SmoothScroll
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Anchor Underline
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!MaxSubscriptionSize, HKCU\Software\Policies\Microsoft\Internet Explorer\Infodeliv
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoAddingChannels
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoAddingSubscriptions
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoChannelLogging
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoChannelUI
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoEditingScheduleGroups
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoEditingSubscriptions
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoRemovingChannels
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoRemovingSubscriptions
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoScheduledUpdates
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSubscriptionContent
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!CodeBaseSearchPath
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoDefaultTextSize, HKCU\Software\Policies\Microsoft\Internet Explorer\Zoom!ResetTextSizeO
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!AdvancedTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!AdvancedTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!ConnectionsTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!ConnectionsTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!ContentTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!ContentTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!GeneralTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!GeneralTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!PrivacyTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!PrivacyTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!ProgramsTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!ProgramsTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!SecurityTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!SecurityTab
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!EnablePunyCode
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!EnablePunyCode
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Protocols\Mailto!UTF8Encoding
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Protocols\Mailto!UTF8Encoding
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!PreventIgnoreCertErrors
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!PreventIgnoreCertErrors
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!UrlEncoding
HKCU\Software\Policies\Microsoft\Internet Explorer\Settings!Background Color
HKCU\Software\Policies\Microsoft\Internet Explorer\Settings!Text Color
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Use_DlgBox_Colors
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion!IEAKUpdateUrl
HKCU\Software\Policies\Microsoft\Internet Connection Wizard!DisableICW
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!ListBox_Support_CLSID, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLS
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!ListBox_Support_CLSID, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSI
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!RestrictToList
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!RestrictToList
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ADDON_MANAGEMENT, HKCU\Software\Policies\Micr
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ADDON_MANAGEMENT, HKLM\Software\Policies\Micr
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_AllowedBehaviors, HKCU\Software\Policies\Microsoft\Windows\
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_AllowedBehaviors, HKLM\Software\Policies\Microsoft\Windows\
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!(Reserved), HKLM\Software\Policies\Microsoft\Internet Expl
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!(Reserved), HKCU\Software\Policies\Microsoft\Internet Expl
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_BEHAVIORS, HKLM\Software\Policies\Microsoft\Interne
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_BEHAVIORS, HKCU\Software\Policies\Microsoft\Interne
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!(Reserved), HKLM\Software\Policies\Microsoft\Interne
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!(Reserved), HKCU\Software\Policies\Microsoft\Interne
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_HANDLING, HKLM\Software\Policies\Microsoft\In
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_HANDLING, HKCU\Software\Policies\Microsoft\In
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!(Reserved), HKCU\Software\Policies\Microsoft\Internet
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!(Reserved), HKLM\Software\Policies\Microsoft\Internet
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_SECURITYBAND, HKCU\Software\Policies\Microsoft\In
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_SECURITYBAND, HKLM\Software\Policies\Microsoft\Int
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!(Reserved), HKLM\Software\Policies\Mic
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!(Reserved), HKCU\Software\Policies\Mic
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_LOCALMACHINE_LOCKDOWN, HKLM\Software\Policie
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_LOCALMACHINE_LOCKDOWN, HKCU\Software\Polici
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!(Reserved), HKLM\Software\Policies\Microsoft\Internet
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!(Reserved), HKCU\Software\Policies\Microsoft\Internet
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_SNIFFING, HKLM\Software\Policies\Microsoft\Int
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_SNIFFING, HKCU\Software\Policies\Microsoft\In
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!(Reserved), HKLM\Software\Policies\Microso
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!(Reserved), HKCU\Software\Policies\Microso
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_DISABLE_MK_PROTOCOL, HKLM\Software\Policies\M
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_DISABLE_MK_PROTOCOL, HKCU\Software\Policies\M
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!(Reserved), HKCU\Software\Policies\Microsof
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!(Reserved), HKLM\Software\Policies\Microsof
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_PROTOCOL_LOCKDOWN, HKCU\Software\Policies\Mi
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_PROTOCOL_LOCKDOWN, HKLM\Software\Policies\Mi
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!(Reserved), HKLM\Software\Policies\Microsoft\Intern
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!(Reserved), HKCU\Software\Policies\Microsoft\Intern
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_OBJECT_CACHING, HKLM\Software\Policies\Microsoft
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_OBJECT_CACHING, HKCU\Software\Policies\Microsoft
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!(Reserved), HKLM\Software\Policies\Microsoft\Intern
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!(Reserved), HKCU\Software\Policies\Microsoft\Intern
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ZONE_ELEVATION, HKLM\Software\Policies\Microsoft\
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ZONE_ELEVATION, HKCU\Software\Policies\Microsoft
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!(Reserved), HKCU\Software\Policies\Micr
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!(Reserved), HKLM\Software\Policies\Micr
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_ACTIVEXINSTALL, HKCU\Software\Policie
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_ACTIVEXINSTALL, HKLM\Software\Policie
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!(Reserved), HKCU\Software\Policies\Micro
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!(Reserved), HKLM\Software\Policies\Micro
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_FILEDOWNLOAD, HKCU\Software\Policies
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_FILEDOWNLOAD, HKLM\Software\Policies
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!(Reserved), HKLM\Software\Policies\Microso
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!(Reserved), HKCU\Software\Policies\Microso
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_WINDOW_RESTRICTIONS, HKLM\Software\Policies\M
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_WINDOW_RESTRICTIONS, HKCU\Software\Policies\M
HKCU\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\RestrictedProtocols!ListBox_Support_3, HKCU\SOFTWARE\Policies\Microso
HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\RestrictedProtocols!ListBox_Support_3, HKLM\SOFTWARE\Policies\Microsof
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoCrashDetection
HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoCrashDetection
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoExtensionManagement
HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoExtensionManagement
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!AddPolicySearchProviders
HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!AddPolicySearchProviders
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!AlwaysShowMenus
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!AlwaysShowMenus
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!EnableAutoProxyResultCache
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoExternalBranding
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Advanced
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent!Version
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent!Version
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DialupAutodetect
HKCU\Software\Policies\Microsoft\Internet Explorer\Security!DisableFixSecuritySettings
HKLM\Software\Policies\Microsoft\Internet Explorer\Security!DisableFixSecuritySettings
HKCU\Software\Policies\Microsoft\Internet Explorer\PhishingFilter!Enabled
HKLM\Software\Policies\Microsoft\Internet Explorer\PhishingFilter!Enabled
HKCU\Software\Policies\Microsoft\Internet Explorer\Security!DisableSecuritySettingsCheck
HKLM\Software\Policies\Microsoft\Internet Explorer\Security!DisableSecuritySettingsCheck
HKCU\Software\Policies\Microsoft\Internet Explorer\Toolbar\WebBrowser!ITBar7Position
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!DisablePopupFilterLevel
HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!DisablePopupFilterLevel
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DisplayScriptDownloadFailureUI
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\Feature_Enable_Compat_logging!iexplore.exe
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\Feature_Enable_Compat_logging!iexplore.exe
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!AlwaysShowMenus, HKCU\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions!NoNav
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!AlwaysShowMenus, HKLM\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions!NoNav
HKCU\Software\Policies\Microsoft\Internet Explorer!DisableImportExportFavorites
HKCU\Software\Policies\Microsoft\Internet Explorer\ZOOM!ZoomDisabled
HKLM\Software\Policies\Microsoft\Internet Explorer\ZOOM!ZoomDisabled
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Identities!Locked Down
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!No_LaunchMediaBar, HKCU\Software\Microsoft\Internet Explorer\media!Autoplay
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableDeleteBrowsingHistory
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableDeleteBrowsingHistory
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableDeleteForms
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableDeleteForms
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableDeletePasswords
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableDeletePasswords
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!DisableFirstRunCustomize
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!DisableFirstRunCustomize
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpMenu
HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpMenu
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSearchBox
HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSearchBox
HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoJITSetup
HKCU\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!QuickTabsThreshold
HKLM\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!QuickTabsThreshold
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoChangeDefaultSearchProvider
HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoChangeDefaultSearchProvider
HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSplash
HKCU\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!Enabled
HKLM\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!Enabled
HKCU\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!PopupsUseNewWindow
HKLM\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!PopupsUseNewWindow
HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoUpdateCheck
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!AllowWindowReuse
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!AllowWindowReuse
HKCU\Software\Microsoft\Outlook Express!BlockExeAttachments
HKCU\Software\Policies\Microsoft\Internet Explorer ew Windows!ListBox_Support_Allow, HKCU\Software\Policies\Microsoft\Internet Explorer ew Windows\Allo
HKLM\Software\Policies\Microsoft\Internet Explorer ew Windows!ListBox_Support_Allow, HKLM\Software\Policies\Microsoft\Internet Explorer ew Windows\Allo
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Accessibility
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Autoconfig
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!Autoconfig
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Cache
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!CalendarContact
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Certificates
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Check_If_Default
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Colors
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Connection Settings
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!Connection Settings, HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!Conn
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Connwiz Admin Lock
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Fonts
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Use FormSuggest, HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!FormSuggest
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!FormSuggest Passwords, HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!FormSu
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!History, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url His
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!History, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url His
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!HomePage, HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Start Page
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Languages
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!links
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Messaging
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!RestrictPopupExceptionList
HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!RestrictPopupExceptionList
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoPopupManagement
HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoPopupManagement
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Profiles
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Proxy
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!Proxy
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Ratings
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!ResetWebSettings
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Settings
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!Settings
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete!AutoSuggest
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoFindFiles
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSearchCustomization
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Security_HKLM_only
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Security_options_edit
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Security_zones_map_edit
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoMSAppLogo5ChannelNotify
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!UsePolicySearchProvidersOnly
HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!UsePolicySearchProvidersOnly
HKCU\Software\Policies\Microsoft\Internet Explorer\SQM!DisableCustomerImprovementProgram
HKLM\Software\Policies\Microsoft\Internet Explorer\SQM!DisableCustomerImprovementProgram
HKCU\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!OpenInForeground
HKLM\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!OpenInForeground
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ProxySettingsPerUser
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!120A
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!120A
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1209
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1209
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1C00
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1C00
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1A00
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1A00
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1E05
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1E05
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!120A
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!120A
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1209
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1209
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1C00
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1C00
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A00
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A00
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1E05
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1E05
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!IntranetName
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!IntranetName
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Lockdown Settings\Template Policies!InternetZoneLockdownTemplate, HKCU\Software\Po
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Lockdown Settings\Template Policies!InternetZoneLockdownTemplate, HKLM\Software\Po
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Template Policies!InternetZoneTemplate, HKCU\Software\Policies\Microsoft\Wind
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Template Policies!InternetZoneTemplate, HKLM\Software\Policies\Microsoft\Wind
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Lockdown Settings\Template Policies!IntranetZoneLockdownTemplate, HKCU\Software\Po
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Lockdown Settings\Template Policies!IntranetZoneLockdownTemplate, HKLM\Software\Po
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Settings\Template Policies!IntranetZoneTemplate, HKCU\Software\Policies\Microsoft\Wind
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Settings\Template Policies!IntranetZoneTemplate, HKLM\Software\Policies\Microsoft\Wind
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Lockdown Settings\Template Policies!LocalMachineZoneLockdownTemplate,
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Lockdown Settings\Template Policies!LocalMachineZoneLockdownTemplate,
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Settings\Template Policies!LocalMachineZoneTemplate, HKCU\Software\Poli
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Settings\Template Policies!LocalMachineZoneTemplate, HKLM\Software\Polic
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Lockdown Settings\Template Policies!RestrictedSitesZoneLockdownTemplate, HK
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Lockdown Settings\Template Policies!RestrictedSitesZoneLockdownTemplate, HK
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Settings\Template Policies!RestrictedSitesZoneTemplate, HKCU\Software\Policies
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Settings\Template Policies!RestrictedSitesZoneTemplate, HKLM\Software\Policies
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Lockdown Settings\Template Policies!TrustedSitesZoneLockdownTemplate, HKCU\S
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Lockdown Settings\Template Policies!TrustedSitesZoneLockdownTemplate, HKLM\S
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Settings\Template Policies!TrustedSitesZoneTemplate, HKCU\Software\Policies\Mic
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Settings\Template Policies!TrustedSitesZoneTemplate, HKLM\Software\Policies\Micr
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!ProxyByPass
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!ProxyByPass
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!UNCAsIntranet
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!UNCAsIntranet
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_ZoneMapKey, HKCU\Software\Policies\Microsoft\Windows\Curr
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_ZoneMapKey, HKLM\Software\Policies\Microsoft\Windows\Curr
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!AutoDetect
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!AutoDetect
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!WarnOnIntranet
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!WarnOnIntranet
HKCU\Software\Policies\Microsoft\Internet Explorer\Settings!Anchor Color Hover
HKCU\Software\Policies\Microsoft\Internet Explorer\Settings!Anchor Color
HKCU\Software\Policies\Microsoft\Internet Explorer\Settings!Anchor Color Visited
HKCU\Software\Policies\Microsoft\Internet Explorer\Settings!Use Anchor Hover Color
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoBrowserClose
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoBrowserSaveAs
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoBrowserSaveWebComplete
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoFileNew
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoFileOpen
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemSendFeedback
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemNetscapeHelp
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemTipOfTheDay
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemTutorial
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoBrowserContextMenu
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoFavorites
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoOpeninNewWnd
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoSelectDownloadDir
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoBrowserOptions
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoTheaterMode
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoViewSource
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Enable AutoImageResize
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Display Inline Images
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Show image placeholders
HKCU\SOFTWARE\Policies\Microsoft\Internet Explorer!SmartDithering
HKCU\Software\Policies\Microsoft\Internet Explorer\Persistence\0!DomainLimit, HKCU\Software\Policies\Microsoft\Internet Explorer\Persistence\0!DocumentLi
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Print_Background
HKCU\Software\Policies\Microsoft\Internet Explorer\Feeds!BackgroundSyncStatus
HKLM\Software\Policies\Microsoft\Internet Explorer\Feeds!BackgroundSyncStatus
HKCU\Software\Policies\Microsoft\Internet Explorer\Feeds!DisableEnclosureDownload
HKLM\Software\Policies\Microsoft\Internet Explorer\Feeds!DisableEnclosureDownload
HKCU\Software\Policies\Microsoft\Internet Explorer\Feeds!DisableAddRemove
HKLM\Software\Policies\Microsoft\Internet Explorer\Feeds!DisableAddRemove
HKCU\Software\Policies\Microsoft\Internet Explorer\Feed Discovery!Enabled
HKLM\Software\Policies\Microsoft\Internet Explorer\Feed Discovery!Enabled
HKCU\Software\Policies\Microsoft\Internet Explorer\Feeds!DisableFeedPane
HKLM\Software\Policies\Microsoft\Internet Explorer\Feeds!DisableFeedPane
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\Feature_Enable_Script_Paste_URLAction_If_Prompt!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\Feature_Enable_Script_Paste_URLAction_If_Prompt!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\Feature_Enable_Script_Paste_URLAction_If_Prompt!(Reserved), HKCU\Software\Po
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\Feature_Enable_Script_Paste_URLAction_If_Prompt!(Reserved), HKLM\Software\Po
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_Feature_Enable_Script_Paste_URLAction_If_Prompt, HKCU\Softwa
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_Feature_Enable_Script_Paste_URLAction_If_Prompt, HKLM\Softwa
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!AutoSearch
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!XMLHTTP
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!XMLHTTP
HKCU\Software\Policies\Microsoft\IEAK!NoAutomaticSignup
HKCU\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions!DisableToolbarUpgrader
HKLM\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions!DisableToolbarUpgrader
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoBandCustomize
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoToolbarCustomize
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!SpecifyDefaultButtons, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explo
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Update_Check_Interval
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Update_Check_Page
HKCU\Software\Policies\Microsoft\Windows\HandwritingErrorReports!PreventHandwritingErrorReports
HKLM\Software\Policies\Microsoft\Windows\HandwritingErrorReports!PreventHandwritingErrorReports
HKCU\SOFTWARE\Policies\Microsoft\InputPersonalization!RestrictImplicitTextCollection, HKCU\SOFTWARE\Policies\Microsoft\InputPersonalization!RestrictIm
HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization!RestrictImplicitTextCollection, HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization!RestrictIm
HKCU\SOFTWARE\Policies\Microsoft\InputPersonalization!DisablePersonalization
HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization!DisablePersonalization
HKLM\Software\Policies\Microsoft\Windows\iSCSI!ConfigureiSNSServers
HKLM\Software\Policies\Microsoft\Windows\iSCSI!ConfigureTargetPortals
HKLM\Software\Policies\Microsoft\Windows\iSCSI!ConfigureTargets
HKLM\Software\Policies\Microsoft\Windows\iSCSI!NewStaticTargets
HKLM\Software\Policies\Microsoft\Windows\iSCSI!ChangeIQNName
HKLM\Software\Policies\Microsoft\Windows\iSCSI!RestrictAdditionalLogins
HKLM\Software\Policies\Microsoft\Windows\iSCSI!ChangeCHAPSecret
HKLM\Software\Policies\Microsoft\Windows\iSCSI!RequireIPSec
HKLM\Software\Policies\Microsoft\Windows\iSCSI!RequireMutualCHAP
HKLM\Software\Policies\Microsoft\Windows\iSCSI!RequireOneWayCHAP
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos!domain_realm_Enabled, HKLM\Software\Microsoft\Windows\CurrentVersion\Poli
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos!MitRealms_Enabled, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters!KdcValidation
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{180b3a99-8c39-4f12-b631-2031998efe45}!ScenarioExecutionEnabled, HKLM\SOFTWARE\Policies\Micr
HKLM\Software\Policies\Microsoft\Windows\LLTD!EnableLLTDIO, HKLM\Software\Policies\Microsoft\Windows\LLTD!AllowLLTDIOOnDomain, HKLM\Software
HKLM\Software\Policies\Microsoft\Windows\LLTD!EnableRspndr, HKLM\Software\Policies\Microsoft\Windows\LLTD!AllowRspndrOnDomain, HKLM\Software\P
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableCurrentUserRun
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableLocalMachineRun
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableCurrentUserRunOnce
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableLocalMachineRunOnce
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!LogonType
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWelcomeScreen
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKLM\Software\Policies\Microsoft\Windows NT\CurrentVersion\Winlogon!SyncForegroundPolicy
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableStatusMessages
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWelcomeScreen
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!VerboseStatus
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideFastUserSwitching
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableStartupSound
HKCU\Software\Policies\Microsoft\WindowsMediaCenter!MediaCenter
HKLM\Software\Policies\Microsoft\WindowsMediaCenter!MediaCenter
HKCU\Software\Policies\Microsoft\MMC!RestrictAuthorMode
HKCU\Software\Policies\Microsoft\MMC!RestrictToPermittedSnapins
HKCU\Software\Policies\Microsoft\MMC\{B708457E-DB61-4C55-A92F-0D4B5E9B1224}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C96401CF-0E17-11D3-885B-00C04F72C717}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C96401D1-0E17-11D3-885B-00C04F72C717}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1AA7F83C-C7F5-11D0-A376-00C04FC9DA04}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1F5EEC01-1214-4D94-80C5-4BDCD2014DDD}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{3F276EB4-70EE-11D1-8A0F-00C04FB93753}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C2FE450B-D6C2-11D0-A37B-00C04FC9DA04}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{9EC88934-C774-11d1-87F4-00C04FC2C17B}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{90087284-d6d6-11d0-8353-00a0c90640bf}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C2FE4502-D6C2-11D0-A37B-00C04FC9DA04}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{394C052E-B830-11D0-9A86-00C04FD8DBF7}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\FX:{b05566ae-fe9c-4363-be05-7a4cbb7cb510}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{2E19B602-48EB-11d2-83CA-00104BCA42CF}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{90810502-38F1-11D1-9345-00C04FC9DA04}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{6E8E0081-19CD-11D1-AD91-00AA00B8E05A}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{34AB8E82-C27E-11D1-A6C0-00C04FB94F17}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B52C1E50-1DD2-11D1-BC43-00C04FC31FD3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5880CD5C-8EC0-11d1-9570-0060B0576642}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{243E20B0-48ED-11D2-97DA-00A024D77700}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{DAB1A262-4FD7-11D1-842C-00C04FB6C218}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B1AFF7D0-0C49-11D1-BB12-00C04FC9A3A3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{BD95BA60-2E26-AAD1-AD99-00AA00B8E05A}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{58221C69-EA27-11CF-ADCF-00AA00A80033}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{03f1f940-a0f2-11d0-bb77-00aa00a1eab7}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{7AF60DD3-4979-11D1-8A6C-00C04FC33566}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{0F3621F1-23C6-11D1-AD97-00AA00B88E5A}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{E12BBB5D-D59D-4E61-947A-301D25AE8C23}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{8FC0B734-A0E1-11D1-A7D3-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{D70A2BEA-A63E-11D1-A7D4-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{6DC3804B-7212-458D-ADB0-9A07E2AE1FA2}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{0F6B957D-509E-11D1-A7CC-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{0F6B957E-509E-11D1-A7CC-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{88E729D6-BDC1-11D1-BD2A-00C04FB9603F}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{FC715823-C5FB-11D1-9EEF-00A0C90347FF}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{DEA8AFA0-CC85-11d0-9CE2-0080C7221EBD}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{0E752416-F29E-4195-A9DD-7F0D4D5A9D71}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\FX:{a1bc4ecb-66b2-44e8-9915-be02e84438ba}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{3060E8CE-7020-11D2-842D-00C04FA372D4}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{40B6664F-4972-11D1-A7CA-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{40B66650-4972-11D1-A7CA-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{942A8E4F-A261-11D1-A760-00C04FB9603F}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{BACF5C8A-A3C7-11D1-A760-00C04FB9603F}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{06993B16-A5C7-47EB-B61C-B1CB7EE600AC}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{2DA6AA7F-8C88-4194-A558-0D36E7FD3E64}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B6F9C8AE-EF3A-41C8-A911-37370C331DD4}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B6F9C8AF-EF3A-41C8-A911-37370C331DD4}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{c40d66a0-e90c-46c6-aa3b-473e38c72bf2}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{d524927d-6c08-46bf-86af-391534d779d3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{40B66660-4972-11d1-A7CA-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{40B66661-4972-11d1-A7CA-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{fe883157-cebd-4570-b7a2-e4fe06abe626}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{7E45546F-6D52-4D10-B702-9C2E67232E62}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1BC972D6-555C-4FF7-BE2C-C584021A0A6A}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{EBC53A38-A23F-11D0-B09B-00C04FD8DCA6}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{D967F824-9968-11D0-B936-00C04FD8D5B0}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{E355E538-1C2E-11D0-8C37-00C04FD8FE93}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1C5DACFA-16BA-11D2-81D0-0000F87A7AA3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{de751566-4cc6-11d1-8ca0-00c04fc297eb}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{53D6AB1D-2488-11D1-A28C-00C04FB94F17}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{A994E107-6854-4F3D-917C-E6F01670F6D3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C9BC92DF-5B9A-11D1-8F00-00C04FC2C17B}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{74246bfc-4c96-11d0-abef-0020af6b0b7a}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{677A2D94-28D9-11D1-A95B-008048918FB1}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{43668E21-2636-11D1-A1CE-0080C88593A5}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{8EAD3A12-B2C1-11d0-83AA-00A0C92C9D5D}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{975797FC-4E2A-11D0-B702-00C04FD8DBF7}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\FX:{b05566ad-fe9c-4363-be05-7a4cbb7cb510}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\FX:{D2779945-405B-4ACE-8618-508F3E3054AC}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{753EDB4D-2E1B-11D1-9064-00A0C90AB504}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{FF5903A8-78D6-11D1-92F6-006097B01056}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{8F8F8DC0-5713-11D1-9551-0060B0576642}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{A841B6C2-7577-11D0-BB1F-00A0C922E79C}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{95AD72F0-44CE-11D0-AE29-00AA004B9986}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{DEA8AFA2-CC85-11d0-9CE2-0080C7221EBD}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{57C596D0-9370-40C0-BA0D-AB491B63255D}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5D6179C8-17EC-11D1-9AA9-00C04FD8FE93}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\FX:{a1bc4eca-66b2-44e8-9915-be02e84438ba}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{18BA7139-D98B-43c2-94DA-2604E34E175D}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{7478EF61-8C46-11d1-8D99-00A0C913CAD4}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{FD57D297-4FD9-11D1-854E-00C04FC31FD3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{3D5D035E-7721-4B83-A645-6C07A3D403B7}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1AA7F839-C7F5-11D0-A376-00C04FC9DA04}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{3CB6973D-3E6F-11D0-95DB-00A024D77700}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{011BE22D-E453-11D1-945A-00C04FB984F9}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5ADF5BF6-E452-11D1-945A-00C04FB984F9}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{45ac8c63-23e2-11d1-a696-00c04fd58bc3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{E26D02A0-4C1F-11D1-9AA1-00C04FC3357A}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B91B6008-32D2-11D2-9888-00A0C925F917}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\FX:{7d3830aa-e69e-4e17-8bd1-1b87b97099da}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\FX:{b05566ac-fe9c-4368-be02-7a4cbb7cbe11}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{23DC5869-BD9F-46fd-AADD-1F869BA64FC3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5C659257-E236-11D2-8899-00104B2AFB46}!Restrict_Run
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\MobilityCenter!NoMobilityCenter
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\MobilityCenter!NoMobilityCenter
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\PresentationSettings!NoPresentationSettings
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\PresentationSettings!NoPresentationSettings
HKCU\Software\Policies\Microsoft\WindowsMovieMaker!MovieMaker
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!MovieMaker
HKCU\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!CodecDownload
HKCU\Software\Policies\Microsoft\WindowsMovieMaker!CodecDownload
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!WebPublish
HKCU\Software\Policies\Microsoft\WindowsMovieMaker!WebPublish
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{C295FBBA-FD47-46ac-8BEE-B1715EC634E5}!ScenarioExecutionEnabled, HKLM\SOFTWARE\Policies
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{C295FBBA-FD47-46ac-8BEE-B1715EC634E5}!DownloadToolsEnabled, HKLM\SOFTWARE\Policies\Mic
HKLM\Software\Policies\Microsoft\Windows\Installer!AllowLockdownBrowse
HKLM\Software\Policies\Microsoft\Windows\Installer!AllowLockdownMedia
HKLM\Software\Policies\Microsoft\Windows\Installer!AllowLockdownPatch
HKCU\Software\Policies\Microsoft\Windows\Installer!AlwaysInstallElevated
HKLM\Software\Policies\Microsoft\Windows\Installer!AlwaysInstallElevated
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableAutomaticApplicationShutdown
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableBrowse
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableFlyweightPatching
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableLoggingFromPackage
HKCU\Software\Policies\Microsoft\Windows\Installer!DisableMedia
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableMSI
HKLM\Software\Policies\Microsoft\Windows\Installer!DisablePatch
HKCU\Software\Policies\Microsoft\Windows\Installer!DisableRollback
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableRollback
HKLM\Software\Policies\Microsoft\Windows\Installer!EnableAdminTSRemote
HKLM\Software\Policies\Microsoft\Windows\Installer!EnableUserControl
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableLUAPatching
HKLM\Software\Policies\Microsoft\Windows\Installer!DisablePatchUninstall
HKLM\Software\Policies\Microsoft\Windows\Installer!LimitSystemRestoreCheckpointing
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableUserInstalls
HKLM\Software\Policies\Microsoft\Windows\Installer!EnforceUpgradeComponentRules
HKLM\Software\Policies\Microsoft\Windows\Installer!MaxPatchCacheSize
HKLM\Software\Policies\Microsoft\Windows\Installer!Logging
HKLM\Software\Policies\Microsoft\Windows\Installer!SafeForScripting
HKCU\Software\Policies\Microsoft\Windows\Installer!SearchOrder
HKLM\Software\Policies\Microsoft\Windows\Installer!TransformsSecure
HKLM\Software\Policies\Microsoft etlogon\Parameters!AvoidPdcOnWan
HKLM\Software\Policies\Microsoft etlogon\Parameters!BackgroundRetryInitialPeriod
HKLM\Software\Policies\Microsoft etlogon\Parameters!BackgroundRetryMaximumPeriod
HKLM\Software\Policies\Microsoft etlogon\Parameters!BackgroundRetryQuitTime
HKLM\Software\Policies\Microsoft etlogon\Parameters!BackgroundSuccessfulRefreshPeriod
HKLM\Software\Policies\Microsoft etlogon\Parameters!dbFlag
HKLM\Software\Policies\Microsoft etlogon\Parameters!ExpectedDialupDelay
HKLM\Software\Policies\Microsoft etlogon\Parameters!MaximumLogFileSize
HKLM\Software\Policies\Microsoft etlogon\Parameters!NegativeCachePeriod
HKLM\Software\Policies\Microsoft etlogon\Parameters!AllowExclusiveScriptsShareAccess
HKLM\Software\Policies\Microsoft etlogon\Parameters!NonBackgroundSuccessfulRefreshPeriod
HKLM\Software\Policies\Microsoft etlogon\Parameters!ScavengeInterval
HKLM\Software\Policies\Microsoft etlogon\Parameters!SiteName
HKLM\Software\Policies\Microsoft etlogon\Parameters!AllowExclusiveSysvolShareAccess
HKLM\Software\Policies\Microsoft etlogon\Parameters!AllowSingleLabelDnsDomain
HKLM\Software\Policies\Microsoft etlogon\Parameters!AutoSiteCoverage
HKLM\Software\Policies\Microsoft etlogon\Parameters!DnsAvoidRegisterRecords
HKLM\Software\Policies\Microsoft etlogon\Parameters!DnsRefreshInterval
HKLM\Software\Policies\Microsoft etlogon\Parameters!DnsTtl
HKLM\Software\Policies\Microsoft etlogon\Parameters!GcSiteCoverage
HKLM\Software\Policies\Microsoft etlogon\Parameters!LdapSrvPriority
HKLM\Software\Policies\Microsoft etlogon\Parameters!LdapSrvWeight
HKLM\Software\Policies\Microsoft etlogon\Parameters!NdncSiteCoverage
HKLM\Software\Policies\Microsoft etlogon\Parameters!SiteCoverage
HKLM\Software\Policies\Microsoft etlogon\Parameters!UseDynamicDns
HKLM\Software\Policies\Microsoft etlogon\Parameters!TryNextClosestSite
HKLM\Software\Policies\Microsoft etlogon\Parameters!ForceRediscoveryInterval
HKLM\Software\Policies\Microsoft etlogon\Parameters!AddressTypeReturned
HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_AddRemoveComponents
HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_AdvancedSettings
HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_AllowAdvancedTCPIPConfig
HKLM\Software\Policies\Microsoft\Windows etwork Connections!NC_AllowNetBridge_NLA
HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_ChangeBindState
HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_DeleteAllUserConnection
HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_DeleteConnection
HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_DialupPrefs
HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_EnableAdminProhibits
HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_IpStateChecking
HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_LanChangeProperties
HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_LanConnect
HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_LanProperties
HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_NewConnectionWizard
HKLM\Software\Policies\Microsoft\Windows etwork Connections!NC_PersonalFirewallConfig
HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_RasAllUserProperties
HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_RasChangeProperties
HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_RasConnect
HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_RasMyProperties
HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_RenameAllUserRasConnection
HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_RenameConnection
HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_RenameLanConnection
HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_RenameMyRasConnection
HKLM\Software\Policies\Microsoft\Windows etwork Connections!NC_ShowSharedAccessUI
HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_Statistics
HKCU\Software\Policies\Microsoft etworkProjector!DisableNetworkProjector
HKLM\Software\Policies\Microsoft etworkProjector!DisableNetworkProjector
HKLM\Software\Policies\Microsoft\Windows etCache!AlwaysPinSubFolders
HKCU\Software\Policies\Microsoft\Windows etCache\AssignedOfflineFolders
HKLM\Software\Policies\Microsoft\Windows etCache\AssignedOfflineFolders
HKCU\Software\Policies\Microsoft\Windows etCache\CustomGoOfflineActions
HKLM\Software\Policies\Microsoft\Windows etCache\CustomGoOfflineActions
HKLM\Software\Policies\Microsoft\Windows etCache!DefCacheSize
HKLM\Software\Policies\Microsoft\Windows etCache!Enabled
HKLM\Software\Policies\Microsoft\Windows etCache!EncryptCache
HKCU\Software\Policies\Microsoft\Windows etCache!EventLoggingLevel
HKLM\Software\Policies\Microsoft\Windows etCache!EventLoggingLevel
HKLM\Software\Policies\Microsoft\Windows etCache!ExcludeExtensions
HKCU\Software\Policies\Microsoft\Windows etCache!GoOfflineAction
HKLM\Software\Policies\Microsoft\Windows etCache!GoOfflineAction
HKCU\Software\Policies\Microsoft\Windows etCache!NoCacheViewer
HKLM\Software\Policies\Microsoft\Windows etCache!NoCacheViewer
HKCU\Software\Policies\Microsoft\Windows etCache!NoConfigCache
HKLM\Software\Policies\Microsoft\Windows etCache!NoConfigCache
HKCU\Software\Policies\Microsoft\Windows etCache!NoMakeAvailableOffline
HKLM\Software\Policies\Microsoft\Windows etCache!NoMakeAvailableOffline
HKCU\Software\Policies\Microsoft\Windows etCache oMakeAvailableOfflineList
HKLM\Software\Policies\Microsoft\Windows etCache oMakeAvailableOfflineList
HKCU\Software\Policies\Microsoft\Windows etCache!NoReminders
HKLM\Software\Policies\Microsoft\Windows etCache!NoReminders
HKLM\Software\Policies\Microsoft\Windows etCache!PurgeAtLogoff, HKLM\Software\Policies\Microsoft\Windows etCache!PurgeOnlyAutoCacheAtLogoff
HKCU\Software\Policies\Microsoft\Windows etCache!ReminderFreqMinutes
HKLM\Software\Policies\Microsoft\Windows etCache!ReminderFreqMinutes
HKCU\Software\Policies\Microsoft\Windows etCache!InitialBalloonTimeoutSeconds
HKLM\Software\Policies\Microsoft\Windows etCache!InitialBalloonTimeoutSeconds
HKCU\Software\Policies\Microsoft\Windows etCache!ReminderBalloonTimeoutSeconds
HKLM\Software\Policies\Microsoft\Windows etCache!ReminderBalloonTimeoutSeconds
HKLM\Software\Policies\Microsoft\Windows etCache!SlowLinkSpeed
HKCU\Software\Policies\Microsoft\Windows etCache!SyncAtLogoff
HKLM\Software\Policies\Microsoft\Windows etCache!SyncAtLogoff
HKCU\Software\Policies\Microsoft\Windows etCache!SyncAtLogon
HKLM\Software\Policies\Microsoft\Windows etCache!SyncAtLogon
HKCU\Software\Policies\Microsoft\Windows etCache!SyncAtSuspend
HKLM\Software\Policies\Microsoft\Windows etCache!SyncAtSuspend
HKLM\Software\Policies\Microsoft\Windows etCache!EconomicalAdminPinning
HKLM\Software\Policies\Microsoft\Windows etCache!SlowLinkEnabled, HKLM\Software\Policies\Microsoft\Windows etCache\SlowLinkParams
HKLM\Software\Policies\Microsoft\Windows etCache!CacheQuotaLimit, HKLM\Software\Policies\Microsoft\Windows etCache!CacheQuotaLimitUnpinned
HKLM\Software\policies\Microsoft\Peernet!Disabled
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-Global!DisableMulticastBootstrap
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-Global!SeedServer, HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-Global!DontIncludeMicrosoftSe
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-LinkLocal!DisableMulticastBootstrap
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-LinkLocal!SeedServer
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-SiteLocal!DisableMulticastBootstrap
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-SiteLocal!SeedServer
HKLM\Software\policies\Microsoft\Peernet!IgnoreDomainPasswordPolicyForNewGroups
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\ParentalControls!WPCEnableOnDomain
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{acfd1ca6-18b6-4ccf-9c07-580cdb6eded4}!ScenarioExecutionEnabled, HKLM\SOFTWARE\Policies\Micro
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{081D3213-48AA-4533-9284-D98F01BDC8E6}!ScenarioExecutionEnabled, HKLM\SOFTWARE\Policies\M
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{659F08FB-2FAB-42a7-BD4F-566CFA528769}!ScenarioExecutionEnabled, HKLM\SOFTWARE\Policies\M
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{D113E4AA-2D07-41b1-8D9B-C065194A791D}!ScenarioExecutionEnabled, HKLM\SOFTWARE\Policies\
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{affc81e2-612a-4f70-6fb2-916ff5c7e3f8}!ScenarioExecutionEnabled, HKLM\SOFTWARE\Policies\Microso
HKCU\SOFTWARE\Policies\Microsoft\PenTraining!DisablePenTraining
HKLM\SOFTWARE\Policies\Microsoft\PenTraining!DisablePenTraining
HKLM\Software\Policies\Microsoft\Windows\Control Panel\Performance Control Panel!PerfCplEnabled
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Performance Control Panel!PerfCplEnabled
HKLM\Software\Policies\Microsoft\Windows\Control Panel\Performance Control Panel!SolutionsEnabled
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Performance Control Panel!SolutionsEnabled
HKLM\Software\Policies\Microsoft\Windows\Control Panel\Performance Control Panel!UpsellEnabled
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Performance Control Panel!UpsellEnabled
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{67144949-5132-4859-8036-a737b43825d8}!ScenarioExecutionEnabled, HKLM\SOFTWARE\Policies\Mic
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{ffc42108-4920-4acf-a4fc-8abdcc68ada4}!ScenarioExecutionEnabled, HKLM\SOFTWARE\Policies\Micros
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{a7a5847a-7511-4e4e-90b1-45ad2a002f51}!ScenarioExecutionEnabled, HKLM\SOFTWARE\Policies\Mic
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{2698178D-FDAD-40AE-9D3C-1371703ADC5B}!ScenarioExecutionEnabled, HKLM\SOFTWARE\Policies
HKLM\Software\Policies\Microsoft\Power\PowerSettings\637EA02F-BBCB-4015-8E2C-A1C7B9C0B546!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\d8742dcb-3e6a-4b3c-b3fe-374623cdcf06!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\9A66D8D7-4FF7-4EF9-B5A2-5A326CA2A469!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\8183ba9a-e910-48da-8769-14ae6dc1170a!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\bcded951-187b-4d05-bccc-f7e51960c258!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\7648EFA3-DD9C-4E3E-B566-50F929386280!ACSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\96996BC0-AD50-47EC-923B-6F41874DD9EB!ACSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\5CA83367-6E45-459F-A27B-476B1D01C936!ACSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\A7066653-8D6C-40A8-910E-A1F54B84C7E5!ACSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\7648EFA3-DD9C-4E3E-B566-50F929386280!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\96996BC0-AD50-47EC-923B-6F41874DD9EB!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\5CA83367-6E45-459F-A27B-476B1D01C936!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\A7066653-8D6C-40A8-910E-A1F54B84C7E5!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\6738E2C4-E8A5-4A42-B16A-E040E769756E!ACSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\6738E2C4-E8A5-4A42-B16A-E040E769756E!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings!ActivePowerScheme
HKLM\Software\Policies\Microsoft\Power\PowerSettings!ActivePowerScheme
HKCU\Software\Policies\Microsoft\Windows\System\Power!PromptPasswordOnResume
HKLM\Software\Policies\Microsoft\Power\PowerSettings\B7A27025-E569-46c2-A504-2B96CAD225A1!ACSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\9D7815A6-7EE4-497E-8888-515A05F02364!ACSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51!ACSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\29F6C1DB-86DA-48C5-9FDB-F2B67B1F44DA!ACSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\94ac6d29-73ce-41a6-809f-6363ba21b47e!ACSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\B7A27025-E569-46c2-A504-2B96CAD225A1!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\9D7815A6-7EE4-497E-8888-515A05F02364!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\29F6C1DB-86DA-48C5-9FDB-F2B67B1F44DA!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\94ac6d29-73ce-41a6-809f-6363ba21b47e!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\90959D22-D6A1-49B9-AF93-BCE885AD335B!ACSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\90959D22-D6A1-49B9-AF93-BCE885AD335B!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\3C0BC021-C8A8-4E07-A973-6B14CBCB2B7E!ACSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\3C0BC021-C8A8-4E07-A973-6B14CBCB2B7E!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\abfc2519-3608-4c2a-94ea-171b0ed546ab!ACSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\abfc2519-3608-4c2a-94ea-171b0ed546ab!DCSettingIndex
HKLM\Software\Policies\Microsoft\Windows NT!DontPowerOffAfterShutdown
HKCU\Software\Policies\Microsoft\PreviousVersions!DisableBackupRestore
HKLM\Software\Policies\Microsoft\PreviousVersions!DisableBackupRestore
HKCU\Software\Policies\Microsoft\PreviousVersions!DisableLocalPage
HKLM\Software\Policies\Microsoft\PreviousVersions!DisableLocalPage
HKCU\Software\Policies\Microsoft\PreviousVersions!DisableLocalRestore
HKLM\Software\Policies\Microsoft\PreviousVersions!DisableLocalRestore
HKCU\Software\Policies\Microsoft\PreviousVersions!DisableRemotePage
HKLM\Software\Policies\Microsoft\PreviousVersions!DisableRemotePage
HKCU\Software\Policies\Microsoft\PreviousVersions!DisableRemoteRestore
HKLM\Software\Policies\Microsoft\PreviousVersions!DisableRemoteRestore
HKCU\Software\Policies\Microsoft\PreviousVersions!HideBackupEntries
HKLM\Software\Policies\Microsoft\PreviousVersions!HideBackupEntries
HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPrinting
HKLM\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Auto Publishing
HKLM\Software\Policies\Microsoft\Windows NT\Printers!SupportLink
HKLM\Software\Policies\Microsoft\Windows NT\Printers\Wizard!DomainDisplayPrinters_State, HKLM\Software\Policies\Microsoft\Windows NT\Printers\Wizard!
HKCU\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Downlevel Browse
HKLM\Software\Policies\Microsoft\Windows NT\Printers!ForceCSREMFDespooling
HKLM\Software\Policies\Microsoft\Windows NT\Printers!Immortal
HKCU\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Printers Page URL
HKLM\Software\Policies\Microsoft\Windows NT\Printers!KMPrintersAreBlocked
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoAddPrinter
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDeletePrinter
HKLM\Software\Policies\Microsoft\Windows NT\Printers\Wizard!NonDomainDisplayPrinters_State, HKLM\Software\Policies\Microsoft\Windows NT\Printers\Wiz
HKCU\Software\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint!PackagePointAndPrintOnly
HKCU\Software\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint!PackagePointAndPrintServerList, HKCU\Software\Policies\Microsoft\Windows N
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PhysicalLocation
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PhysicalLocationSupport
HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint!Restricted, HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint!Trust
HKCU\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Default Search Scope
HKLM\Software\Policies\Microsoft\Windows NT\Printers!ServerThread
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruneDownlevel
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningInterval
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningPriority
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningRetries
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningRetryLog
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PublishPrinters
HKLM\Software\Policies\Microsoft\Windows NT\Printers!RegisterSpoolerRemoteRpcEndPoint
HKLM\Software\Policies\Microsoft\Windows NT\Printers!VerifyPublishedState
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Programs!NoProgramsCPL
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Programs!NoProgramsAndFeatures
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Programs!NoInstalledUpdates
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Programs!NoDefaultPrograms
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Programs!NoWindowsMarketplace
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Programs!NoGetPrograms
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Programs!NoWindowsFeatures
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeBestEffort
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeControlledLoad
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeGuaranteed
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeNetworkControl
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeQualitative
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeBestEffort
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeControlledLoad
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeGuaranteed
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeNetworkControl
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeQualitative
HKLM\Software\Policies\Microsoft\Windows\Psched!MaxOutstandingSends
HKLM\Software\Policies\Microsoft\Windows\Psched!NonBestEffortLimit
HKLM\Software\Policies\Microsoft\Windows\Psched!TimerResolution
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeBestEffort
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeControlledLoad
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeGuaranteed
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeNetworkControl
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeNonConforming
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeQualitative
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{739FF6CF-5033-428c-9E2F-582096482DD5}!ScenarioExecutionEnabled, HKLM\SOFTWARE\Policies\M
HKLM\Software\Policies\Microsoft\Windows NT\Reliability!TimeStampEnabled, HKLM\Software\Policies\Microsoft\Windows NT\Reliability!TimeStampInterval
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!IncludeShutdownErrs
HKLM\Software\Policies\Microsoft\Windows NT\Reliability!SnapShot
HKLM\Software\Policies\Microsoft\Windows NT\Reliability!ShutdownReasonOn, HKLM\Software\Policies\Microsoft\Windows NT\Reliability!ShutdownReasonUI
HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!LoggingEnabled
HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!CreateEncryptedOnlyTickets
HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!UseBandwidthOptimization, HKLM\Software\policies\Microsoft\Windows NT\Terminal Service
HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!UseCustomMessages, HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!Sh
HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!fAllowToGetHelp, HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!fAllowF
HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!fAllowUnsolicited, HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!fAllowU
HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices!RebootTimeinSeconds_state, HKCU\Software\Policies\Microsoft\Windows\Removable
HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices!RebootTimeinSeconds_state, HKLM\Software\Policies\Microsoft\Windows\Removable
HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56308-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Read
HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56308-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Read
HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56308-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Write
HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56308-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Write
HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\Custom\Deny_Read!Deny_Read, HKCU\Software\Policies\Microsoft\Windows\Remova
HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\Custom\Deny_Read!Deny_Read, HKLM\Software\Policies\Microsoft\Windows\Remova
HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\Custom\Deny_Write!Deny_Write, HKCU\Software\Policies\Microsoft\Windows\Remova
HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\Custom\Deny_Write!Deny_Write, HKLM\Software\Policies\Microsoft\Windows\Remova
HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56311-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Read
HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56311-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Read
HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56311-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Write
HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56311-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Write
HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Read
HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Read
HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Write
HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Write
HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices!Deny_All
HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices!Deny_All
HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630b-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Read
HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630b-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Read
HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630b-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Write
HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630b-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Write
HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{6AC27878-A6FA-4155-BA85-F98F491D4F33}!Deny_Read, HKCU\Software\Policies\
HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{6AC27878-A6FA-4155-BA85-F98F491D4F33}!Deny_Read, HKLM\Software\Policies\M
HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{6AC27878-A6FA-4155-BA85-F98F491D4F33}!Deny_Write, HKCU\Software\Policies\M
HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{6AC27878-A6FA-4155-BA85-F98F491D4F33}!Deny_Write, HKLM\Software\Policies\M
HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices!AllowRemoteDASD
HKLM\Software\Policies\Microsoft\Windows NT\Rpc!EnableAuthEpResolution
HKLM\Software\Policies\Microsoft\Windows NT\Rpc!ExtErrorInformation, HKLM\Software\Policies\Microsoft\Windows NT\Rpc!ExtErrorInfoExceptions
HKLM\Software\Policies\Microsoft\Windows NT\Rpc\IgnoreDelegationFailure!IgnoreDelegationFailure
HKLM\Software\Policies\Microsoft\Windows NT\Rpc\MinimumConnectionTimeout!MinimumConnectionTimeout
HKLM\Software\Policies\Microsoft\Windows NT\Rpc!RestrictRemoteClients
HKLM\Software\Policies\Microsoft\Windows NT\Rpc!StateInformation
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!MaxGPOScriptWait
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideLegacyLogonScripts
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideLogoffScripts
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!RunLogonScriptSync
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!RunLogonScriptSync
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideLogonScripts
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideShutdownScripts
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!RunStartupScriptSync
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideStartupScripts
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!Allow-LogonScript-NetbiosDisabled
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search!AllowIndexingEncryptedStoresOrItems
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search!AllowUsingDiacritics
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search!DataDirectory
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search!PreventIndexingEmailAttachments
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search!PreventIndexingOfflineFiles
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search!PreventIndexingOutlook
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search!PreventIndexingPublicFolders
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search!PreventIndexingUncachedExchangeFolders
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search!PreventUsingAdvancedIndexingOptions
HKLM\Software\Policies\Microsoft\Windows NT\Security Center!SecurityCenterInDomain
HKLM\Software\Policies\Microsoft\Windows NT\Setup!ServicePackSourcePath
HKLM\Software\Policies\Microsoft\Windows NT\Setup!SourcePath
HKCU\Software\Policies\Microsoft\Windows NT\SharedFolders!PublishDfsRoots
HKCU\Software\Policies\Microsoft\Windows NT\SharedFolders!PublishSharedFolders
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInplaceSharing
HKCU\Software\Policies\Microsoft\Windows\System!DisableCMD
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableRegistryTools
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!RestrictRun, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Restric
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisallowRun, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Disallo
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!RestrictWelcomeCenter
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!TurnOffSidebar
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!TurnOffSidebar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!TurnOffUnsignedGadgets
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!TurnOffUnsignedGadgets
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!TurnOffUserInstalledGadgets
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!TurnOffUserInstalledGadgets
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!OverrideMoreGadgetsLink
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!OverrideMoreGadgetsLink
HKCU\Software\Policies\Microsoft\Windows\SideShow!DeleteDataOnLogoff
HKLM\Software\Policies\Microsoft\Windows\SideShow!DeleteDataOnLogoff
HKCU\Software\Policies\Microsoft\Windows\SideShow!Disabled
HKLM\Software\Policies\Microsoft\Windows\SideShow!Disabled
HKCU\Software\Policies\Microsoft\Windows\SideShow!AutoWakeDisabled
HKLM\Software\Policies\Microsoft\Windows\SideShow!AutoWakeDisabled
HKCU\Software\Policies\Microsoft\Windows\SideShow!SetPIN, HKCU\Software\Policies\Microsoft\Windows\SideShow!PIN, HKCU\Software\Policies\Microsoft\
HKLM\Software\Policies\Microsoft\Windows\SideShow!SetPIN, HKLM\Software\Policies\Microsoft\Windows\SideShow!PIN, HKLM\Software\Policies\Microsoft\
HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!AllowCertificatesWithNoEKU
HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!AllowIntegratedUnblock
HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!FilterDuplicateCerts
HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!ForceReadingAllCertificates
HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!AllowSignatureOnlyKeys
HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!AllowTimeInvalidCertificates
HKLM\SOFTWARE\Policies\Microsoft\Windows\CertProp!CertPropEnabled
HKLM\SOFTWARE\Policies\Microsoft\Windows\CertProp!RootCertificateCleanupOption
HKLM\SOFTWARE\Policies\Microsoft\Windows\CertProp!EnableRootCertificatePropagation
HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!IntegratedUnblockPromptString
HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!ReverseSubject
HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!X509HintsNeeded
HKLM\Software\Policies\SNMP\Parameters\ValidCommunities
HKLM\Software\Policies\SNMP\Parameters\PermittedManagers
HKLM\Software\Policies\SNMP\Parameters\TrapConfiguration\public
HKCU\SOFTWARE\Policies\Microsoft\SoundRecorder!Soundrec
HKLM\SOFTWARE\Policies\Microsoft\SoundRecorder!Soundrec
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ClearRecentProgForNewUserInStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuMyGames
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSearchComputerLinkInStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSearchFilesInStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSearchInternetInStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSearchProgramsInStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSearchCommInStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoUserFolderInStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!UseFoldersInStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ForceRunOnStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!QuickLaunchEnabled
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ClearRecentDocsOnExit
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ForceStartMenuLogOff
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!GreyMSIAds
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Intellimenus
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!LockTaskbar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!MemCheckBoxInRunDlg
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoAutoTrayNotify
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMBalloonTip
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoChangeStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoClose
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoCommonGroups
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFavoritesMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFind
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuMFUprogramsList
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMHelp
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInstrumentation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuMorePrograms
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNetworkConnections
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuPinnedList
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRecentDocsHistory
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRecentDocsMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoResolveSearch
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoResolveTrack
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRun
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSetFolders
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSetTaskbar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMConfigurePrograms
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMMyDocs
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuMyMusic
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuNetworkPlaces
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMMyPictures
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuSubFolders
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSimpleStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!HideClock
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoTaskGrouping
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoToolbarsOnTaskbar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoTrayContextMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoTrayItemsDisplay
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoUserNameInStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWindowsUpdate
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuEjectPC
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!StartMenuLogOff
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\WSRM!AccountingEnabled
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\WSRM!EmailIds
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\WSRM!RecordWriteInterval
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\WSRM!SMTPServer
HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore!DisableConfig
HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore!DisableSR
HKCU\software\policies\microsoft\TabletTip\1.7!DisableACIntegration
HKLM\software\policies\microsoft\TabletTip\1.7!DisableACIntegration
HKCU\software\policies\microsoft\TabletTip\1.7!DisableEdgeTarget
HKLM\software\policies\microsoft\TabletTip\1.7!DisableEdgeTarget
HKCU\software\policies\microsoft\TabletTip\1.7!HideIPTIPTarget
HKLM\software\policies\microsoft\TabletTip\1.7!HideIPTIPTarget
HKCU\software\policies\microsoft\TabletTip\1.7!HideIPTIPTouchTarget
HKLM\software\policies\microsoft\TabletTip\1.7!HideIPTIPTouchTarget
HKCU\software\policies\microsoft\TabletTip\1.7!PasswordSecurityState, HKCU\software\policies\microsoft\TabletTip\1.7!PasswordSecurity
HKLM\software\policies\microsoft\TabletTip\1.7!PasswordSecurityState, HKLM\software\policies\microsoft\TabletTip\1.7!PasswordSecurity
HKCU\software\policies\microsoft\TabletTip\1.7!PRCGesture
HKLM\software\policies\microsoft\TabletTip\1.7!PRCGesture
HKCU\software\policies\microsoft\TabletTip\1.7!IncludeRareChar
HKLM\software\policies\microsoft\TabletTip\1.7!IncludeRareChar
HKCU\software\policies\microsoft\TabletTip\1.7!ScratchOutState, HKCU\software\policies\microsoft\TabletTip\1.7!ScratchOut
HKLM\software\policies\microsoft\TabletTip\1.7!ScratchOutState, HKLM\software\policies\microsoft\TabletTip\1.7!ScratchOut
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!DisableInkball
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!DisableInkball
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!DisableJournal
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!DisableJournal
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!DisableNoteWriterPrinting
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!DisableNoteWriterPrinting
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!DisableSnippingTool
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!DisableSnippingTool
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!DisableStickyNotes
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!DisableStickyNotes
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!TurnOffPenFeedback
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!TurnOffPenFeedback
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!PreventButtonBackEscapeMapping
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!PreventButtonBackEscapeMapping
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!PreventButtonApplicationLaunch
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!PreventButtonApplicationLaunch
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!PreventButtonPressAndHold
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!PreventButtonPressAndHold
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!TurnOffButtons
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!TurnOffButtons
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!PreventFlicksLearningMode
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!PreventFlicksLearningMode
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!PreventFlicks
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!PreventFlicks
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!HideSCABattery
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!HideSCANetwork
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!HideSCAVolume
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TaskbarLockAll
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TaskbarNoAddRemoveToolbar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TaskbarNoDragToolbar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TaskbarNoNotification
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TaskbarNoRedock
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TaskbarNoResize
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TaskbarNoThumbnail
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Allow Browse
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Allow Browse
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Disable Advanced
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Disable Advanced
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!DragAndDrop
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!DragAndDrop
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Execution
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Execution
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Property Pages
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Property Pages
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Creation
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Creation
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Deletion
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Deletion
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!DisablePasswordSaving
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!DisablePasswordSaving
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MinEncryptionLevel
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fPromptForPassword
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SecurityLayer
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!UserAuthentication
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!CertTemplateName
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!AllowExplicitLogonMethod, HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Termina
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!UseProxy, HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!AllowE
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!AllowExplicitProxyName, HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal S
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableAutoReconnect
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!ColorDepth
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDenyTSConnections
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fNoRemoteDesktopWallpaper
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableForcibleLogoff
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!KeepAliveEnable, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!LicenseServers
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableTerminalServerTooltip
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!LicensingMode
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxInstanceCount
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDisconnect
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNTSecurity
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!Shadow
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!Shadow
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fSingleSessionPerUser
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fInheritInitialProgram, HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Serv
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!InitialProgram, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!W
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fWritableTSCCPermTab
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fTurnOffSingleAppMode
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!WFHomeDirUNC, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!WFProfilePath, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!W
HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services!fSecureLicensing
HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services!fPreventLicenseUpgrade
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCam
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableClip
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCcm
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fForceClientLptDef
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCdm
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableLPT
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisablePNPRedir
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCpm
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fPolicyFallbackPrintDriver, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fEnableSmartCard
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fEnableTimeZoneRedirection
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fEncryptRPCTraffic
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryActive
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryClusterName
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryExposeServerIP
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryLocation
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fResetBroken
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fResetBroken
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxDisconnectionTime
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxDisconnectionTime
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxIdleTime
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxIdleTime
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxConnectionTime
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxConnectionTime
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fReconnectSame
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fReconnectSame
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!DeleteTempDirsOnExit
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!PerSessionTempDir
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableThumbnails
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableThumbnailsOnNetworkFolders
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!TurnOffTouchInput
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!TurnOffTouchInput
HKLM\Software\Policies\Microsoft\TPM!ActiveDirectoryBackup, HKLM\Software\Policies\Microsoft\TPM!RequireActiveDirectoryBackup
HKLM\SOFTWARE\Policies\Microsoft\Tpm\BlockedCommands!Enabled, HKLM\SOFTWARE\Policies\Microsoft\Tpm\BlockedCommands\List
HKLM\Software\Policies\Microsoft\TPM\BlockedCommands!IgnoreDefaultList
HKLM\Software\Policies\Microsoft\TPM\BlockedCommands!IgnoreLocalList
HKCU\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupLauncher
HKLM\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupLauncher
HKCU\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupToDisk
HKLM\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupToDisk
HKCU\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupToNetwork
HKLM\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupToNetwork
HKCU\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupToOptical
HKLM\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupToOptical
HKCU\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupUI
HKLM\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupUI
HKCU\Software\Policies\Microsoft\Windows\Backup\Client!DisableRestoreUI
HKLM\Software\Policies\Microsoft\Windows\Backup\Client!DisableRestoreUI
HKCU\Software\Policies\Microsoft\Windows\Backup\Client!DisableSystemBackupUI
HKLM\Software\Policies\Microsoft\Windows\Backup\Client!DisableSystemBackupUI
HKLM\Software\Policies\Microsoft\Windows\System!AddAdminGroupToRUP
HKLM\Software\Policies\Microsoft\Windows\System!CompatibleRUPSecurity
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!ConnectHomeDirToRoot
HKLM\Software\Policies\Microsoft\Windows\System!DeleteRoamingCache
HKLM\Software\Policies\Microsoft\Windows\System!SlowLinkDetectEnabled
HKLM\Software\Policies\Microsoft\Windows\System!SlowLinkUIEnabled
HKCU\Software\Policies\Microsoft\Windows\System!ExcludeProfileDirs
HKLM\Software\Policies\Microsoft\Windows\System!LeaveAppMgmtData
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!EnableProfileQuota, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!P
HKLM\Software\Policies\Microsoft\Windows\System!LocalProfile
HKLM\Software\Policies\Microsoft\Windows\System!ProfileDlgTimeOut
HKLM\Software\Policies\Microsoft\Windows\System!ProfileErrorAction
HKLM\Software\Policies\Microsoft\Windows\System!ProfileUnloadTimeout
HKLM\Software\Policies\Microsoft\Windows\System!ReadOnlyProfile
HKLM\Software\Policies\Microsoft\Windows\System!SlowLinkProfileDefault
HKLM\Software\Policies\Microsoft\Windows\System!UserProfileMinTransferRate, HKLM\Software\Policies\Microsoft\Windows\System!SlowLinkTimeOut
HKLM\Software\Policies\Microsoft\Windows\System!CleanupProfiles
HKCU\Software\Policies\Microsoft\Windows\System!CscSuspendDirs
HKLM\Software\Policies\Microsoft\Windows\System!DisableForceUnload
HKLM\Software\Policies\Microsoft\Windows\System!WaitForNetwork
HKLM\Software\Policies\Microsoft\Windows\System!MachineProfilePath
HKLM\Software\Policies\Microsoft\FVE!ActiveDirectoryBackup, HKLM\Software\Policies\Microsoft\FVE!RequireActiveDirectoryBackup, HKLM\Software\Policies
HKLM\SOFTWARE\Policies\Microsoft\FVE!EnableNonTPM, HKLM\SOFTWARE\Policies\Microsoft\FVE!UsePartialEncryptionKey, HKLM\SOFTWARE\Policies
HKLM\SOFTWARE\Policies\Microsoft\FVE!UseRecoveryPassword, HKLM\SOFTWARE\Policies\Microsoft\FVE!UseRecoveryDrive
HKLM\SOFTWARE\Policies\Microsoft\FVE!DefaultRecoveryFolderPath
HKLM\SOFTWARE\Policies\Microsoft\FVE!EncryptionMethod
HKLM\SOFTWARE\Policies\Microsoft\FVE\PlatformValidation!Enabled, HKLM\SOFTWARE\Policies\Microsoft\FVE\PlatformValidation!0, HKLM\SOFTWARE\P
HKLM\Software\Policies\Microsoft\FVE!MorBehavior
HKLM\Software\Policies\Microsoft\W32Time\Config!FrequencyCorrectRate, HKLM\Software\Policies\Microsoft\W32Time\Config!HoldPeriod, HKLM\Software\P
HKLM\Software\Policies\Microsoft\W32time\Parameters!NtpServer, HKLM\Software\Policies\Microsoft\W32time\Parameters!Type, HKLM\Software\Policies\Mic
HKLM\Software\Policies\Microsoft\W32time\TimeProviders tpClient!Enabled
HKLM\Software\Policies\Microsoft\W32Time\TimeProviders tpServer!Enabled
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI!DataRetentionBySizeEnabled, HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI!DirSizeLimit
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI!ScenarioExecutionEnabled, HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI!EnabledScenarioExecu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Windows!TurnOffWinCal
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Windows!TurnOffWinCal
HKLM\Software\Policies\Microsoft\Windows\Backup\Server!OnlySystemBackup
HKLM\Software\Policies\Microsoft\Windows\Backup\Server!NoBackupToDisk
HKLM\Software\Policies\Microsoft\Windows\Backup\Server!NoBackupToNetwork
HKLM\Software\Policies\Microsoft\Windows\Backup\Server!NoBackupToOptical
HKLM\Software\Policies\Microsoft\Windows\Backup\Server!NoRunNowBackup
HKCU\Software\Policies\Microsoft\Windows\Windows Collaboration!TurnOffWindowsCollaboration
HKLM\Software\Policies\Microsoft\Windows\Windows Collaboration!TurnOffWindowsCollaboration
HKCU\Software\Policies\Microsoft\Windows\Windows Collaboration!TurnOnWindowsCollaborationAuditing
HKLM\Software\Policies\Microsoft\Windows\Windows Collaboration!TurnOnWindowsCollaborationAuditing
HKCU\Software\Policies\Microsoft\Windows\WindowsColorSystem!ProhibitInstallUninstall
HKLM\Software\Policies\Microsoft\Windows\WindowsColorSystem!ProhibitInstallUninstall
HKCU\Software\Policies\Microsoft\Windows\WCN\UI!DisableWcnUi
HKLM\Software\Policies\Microsoft\Windows\WCN\UI!DisableWcnUi
HKLM\Software\Policies\Microsoft\Windows\WCN\Registrars!EnableRegistrars, HKLM\Software\Policies\Microsoft\Windows\WCN\Registrars!DisableUPnPReg
HKLM\Software\Policies\Microsoft\Windows Defender\Scan!CheckForSignaturesBeforeRunningScan
HKLM\Software\Policies\Microsoft\Windows Defender!DisableAntiSpyware
HKLM\Software\Policies\Microsoft\Windows Defender\Reporting!DisableLoggingForKnownGood
HKLM\Software\Policies\Microsoft\Windows Defender\Reporting!DisableLoggingForUnknown
HKLM\Software\Policies\Microsoft\Windows Defender\Real-Time Protection!EnableUnknownPrompts
HKLM\Software\Policies\Microsoft\Windows Defender\Signature Updates!ForceFullUpdate
HKLM\Software\Policies\Microsoft\Windows Defender\SpyNet!SpyNetReporting, HKLM\Software\Policies\Microsoft\Windows Defender\SpyNet!SpyNetReportin
HKLM\Software\Policies\Microsoft\Windows Defender\Signature Updates!CheckAlternateDownloadLocation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32!NoBackButton
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32!NoFileMru
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32!NoPlacesBar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!Place0, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg3
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ClassicShell
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ConfirmFileDelete
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!EnforceShellExtensionSecurity
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!LinkResolveIgnoreLinkInfo
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!MaxRecentDocs
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoThumbnailCache
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoCDBurning
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoChangeAnimation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoChangeKeyboardNavigationIndicators
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDFSTab
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDrives
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies etwork!NoEntireNetwork
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFileMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFolderOptions
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoHardwareTab
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoManageMyComputerVerb
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSharedDocuments
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNetConnectDisconnect
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRecycleFiles
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRunasInstallPrompt
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSecurityTab
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoShellSearchButton
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoViewContextMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoViewOnDrive
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWinKeys
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoComputersNearMe
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!PromptRunasInstallNetPath
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!RecycleBinSize
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!PreXPSP2ShellProtocolBehavior
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!PreXPSP2ShellProtocolBehavior
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SFCDllCacheDir
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SfcQuota
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SfcScan
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SfcShowProgress
HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\ICFv4!BypassFirewall
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewa
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications!AllowUserPrefMerge
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile!EnableFirewall
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile!DoNotAllowExceptions
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\FileAndPrint!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowOutboundDestinationUnreachable, HKLM\SOFTWARE\Policies\Micro
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging!LogDroppedPackets, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\D
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile!DisableNotifications
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\Do
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts!AllowUserPrefMerge
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\RemoteAdminSettings!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewal
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\RemoteDesktop!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirew
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile!DisableUnicastResponsesToMulticastBroadcast
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\UPnPFramework!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFire
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedApplications!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirew
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedApplications!AllowUserPrefMerge
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile!EnableFirewall
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile!DoNotAllowExceptions
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\FileAndPrint!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewa
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowOutboundDestinationUnreachable, HKLM\SOFTWARE\Policies\Mic
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging!LogDroppedPackets, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile!DisableNotifications
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\GloballyOpenPorts!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\S
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\GloballyOpenPorts!AllowUserPrefMerge
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\RemoteAdminSettings!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewa
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\RemoteDesktop!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFire
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile!DisableUnicastResponsesToMulticastBroadcast
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\UPnPFramework!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFi
HKCU\SOFTWARE\Policies\Microsoft\Windows Mail!ManualLaunchAllowed
HKLM\SOFTWARE\Policies\Microsoft\Windows Mail!ManualLaunchAllowed
HKCU\SOFTWARE\Policies\Microsoft\Windows Mail!DisableCommunities
HKLM\SOFTWARE\Policies\Microsoft\Windows Mail!DisableCommunities
HKLM\Software\Policies\Microsoft\WMDRM!DisableOnline
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!DisableAutoUpdate
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!GroupPrivacyAcceptance
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!DontUseFrameInterpolation
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventCDDVDMetadataRetrieval
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!PreventLibrarySharing
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventMusicFileMetadataRetrieval
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!QuickLaunchShortcut
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventRadioPresetsRetrieval
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!DesktopShortcut
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!EnableScreenSaver
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventCodecDownload
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!DoNotShowAnchor
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!HidePrivacyTab
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!HideSecurityTab
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!SetAndLockSkin, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!DefaultSkin
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!ProxyPolicy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!ProxyPolicy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!ProxyPolicy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTS
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!HideNetworkTab
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!NetworkBufferingPolicy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!BufferingType, HKC
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols!WindowsMediaStreamingProtocols, HKCU\Software\Policies\Microsoft\WindowsMediaPlaye
HKLM\Software\Policies\Microsoft\Messenger\Client!PreventAutoRun
HKCU\Software\Policies\Microsoft\Messenger\Client!PreventAutoRun
HKLM\Software\Policies\Microsoft\Messenger\Client!PreventRun
HKCU\Software\Policies\Microsoft\Messenger\Client!PreventRun
HKLM\Software\Policies\Microsoft\Windows\WinRM\Client!AllowBasic
HKLM\Software\Policies\Microsoft\Windows\WinRM\Client!AllowUnencryptedTraffic
HKLM\Software\Policies\Microsoft\Windows\WinRM\Client!AllowDigest
HKLM\Software\Policies\Microsoft\Windows\WinRM\Client!AllowNegotiate
HKLM\Software\Policies\Microsoft\Windows\WinRM\Client!AllowKerberos
HKLM\Software\Policies\Microsoft\Windows\WinRM\Client!TrustedHosts, HKLM\Software\Policies\Microsoft\Windows\WinRM\Client!TrustedHostsList
HKLM\Software\Policies\Microsoft\Windows\WinRM\Service!AllowAutoConfig, HKLM\Software\Policies\Microsoft\Windows\WinRM\Service!IPv4Filter, HKLM\So
HKLM\Software\Policies\Microsoft\Windows\WinRM\Service!AllowBasic
HKLM\Software\Policies\Microsoft\Windows\WinRM\Service!AllowUnencryptedTraffic
HKLM\Software\Policies\Microsoft\Windows\WinRM\Service!AllowNegotiate
HKLM\Software\Policies\Microsoft\Windows\WinRM\Service!AllowKerberos
HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS!AllowRemoteShellAccess
HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS!IdleTimeout, HKLM\
HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS!MaxConcurrentUsers
HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS!MaxMemoryPerShellMB
HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS!MaxProcessesPerShell
HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS!ShellTimeOut
HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS!MaxShellsPerUser
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoAutoUpdate
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUShutdownOption
HKCU\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUShutdownOption
HKCU\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUAsDefaultShutdownOption
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUAsDefaultShutdownOption
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate!DisableWindowsUpdateAccess
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAutoUpdate, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!AUOptions,
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!UseWUServer
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!DetectionFrequencyEnabled, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!ElevateNonAdmins
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!AutoInstallMinorUpdates
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!IncludeRecommendedUpdates
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!AUPowerManagement
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAutoRebootWithLoggedOnUsers
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!RebootRelaunchTimeoutEnabled, HKLM\Software\Policies\Microsoft\Windows\WindowsUpda
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!RebootWarningTimeoutEnabled, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!RescheduleWaitTimeEnabled, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\A
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!TargetGroupEnabled, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!TargetGroup
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableShutdownNamedPipe
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!ShutdownSessionTimeout
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisplayLastLogonInfo
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DontDisplayLogonHoursWarnings
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!LogonHoursAction
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!SoftwareSASGeneration
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!ReportControllerMissing
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!ReportControllerMissing
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!Shell
HKLM\Software\Policies\Microsoft\Windows\System!AllowBlockingAppsAtShutdown
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\SearchExtensions!InternetExtensionName, HKCU\Software\Microsoft\Windows\CurrentVe
Reboot Required Logoff Required Active Directory Schema or Domain Requirements
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No Yes None
No Yes None
No Yes None
No Yes None
No Yes None
No Yes None
No Yes None
No Yes None
No Yes None
No Yes None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No Yes None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No Yes None
No Yes None
No No Yes
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No Yes
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
Yes No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
Yes No None
No No None
No No None
No No None
No Yes None
No No None
No Yes None
No Yes None
No Yes None
No No None
No No None
Policy Path
Computer Configuration\Windows Settings\Account Policies\Password Policy

Computer Configuration\Windows Settings\Account Policies\Account Lockout Policy
Computer Configuration\Windows Settings\Local Policies\Kerberos Policy
Computer Configuration\Windows Settings\Local Policies\Audit Policy


Computer Configuration\Windows Settings\Local Policies\User Rights Assignment







Computer Configuration\Windows Settings\Local Policies\Security Options
















Computer Configuration\Windows Settings\Security Settings\Event Log


Computer Configuration\Windows Settings\Security Settings\Restricted Groups
Computer Configuration\Windows Settings\Security Settings\System Services
Computer Configuration\Windows Settings\Security Settings\Registry
Computer Configuration\Windows Settings\Security Settings\File System

Policy Setting Name
Enforce password history
Maximum password age
Minimum password age
Minimum password length
Password must meet complexity requirement
Store passwords using reversible encryption for all users in the domain
Account lockout duration
Account lockout threshold
Reset lockout counter after
Enforce user logon restrictions
Maximum lifetime for service ticket
Maximum lifetime for user ticket
Maximum lifetime for user ticket renewal
Maximum tolerance for computer clock synchronization
Audit account logon events

Audit account management
Audit directory service access
Audit logon events
Audit object access
Audit policy change

Audit privilege use
Audit process tracking
Audit system events
Access this computer from the network
Access Credential Manager as a trusted caller

Act as part of the operating system
Add workstations to a domain
Adjust memory quotas for a process
Allow log on locally
Allow log on through Terminal Services

Backup files and directories
Bypass traverse checking
Change the system time
Change the time zone

Create a pagefile
Create a token object
Create global objects
Create permanent shared objects
Create Symbolic Links
Debug programs
Deny access to this computer from the network
Deny log on as a batch job

Deny log on as a service
Deny log on locally
Deny log on through Terminal Services
Enable computer and user accounts to be trusted for delegation
Force shutdown from a remote system
Generate security audits

Impersonate a client after authentication
Increase a process working set
Increase scheduling authority
Load and unload device drivers
Lock pages in memory
Log on as a batch job

Log on as a service
Log on locally
Manage auditing and security log
Modify an object label
Modify firmware environment values
Perform volume maintenance tasks
Profile single process
Profile system performance
Remove computer from docking station
Replace a process level token

Restore files and directories
Shut down the system
Synchronize directory service data
Take ownership of files or other objects
Accounts: Administrator account status
Accounts: Guest account status
Accounts: Limit local account use of blank passwords to console logon only
Accounts: Rename administrator account
Accounts: Rename guest account
Audit: Audit the accesss of global system objects
Audit: Audit the use of Backup and Restore privilege
Audit: Audit the use of Backup and Restore privilege
Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings
Audit: Shut down system immediately if unable to log security audits

Audit: Shut down system immediately if unable to log security audits
DCOM: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) syntax
DCOM: Machine Launch Restrictions in Security Descriptor Definition Language (SDDL) syntax
Devices: Allow undock without having to log on
Devices: Allowed to format and eject removable media
Devices: Prevent users from installing printer drivers
Devices: Restrict CD-ROM access to locally logged-on user only
Devices: Restrict floppy access to locally logged-on user only
Devices: Unsigned driver installation behavior
Domain controller: Allow server operators to schedule tasks

Domain controller: LDAP server signing requirements
Domain controller: Refuse machine account password changes
Domain member: Digitally encrypt or sign secure channel data (always)
Domain member: Digitally encrypt secure channel data (when possible)

Domain member: Digitally sign secure channel data (when possible)
Domain member: Disable machine account password changes
Domain member: Maximum machine account password age
Domain member: Require strong (Windows 2000 or later) session key
Interactive logon: Do not display last user name

Interactive logon: Do not require CTRL+ALT+DELETE
Interactive logon: Message text for users attempting to logon
Interactive logon: Message title for users attempting to logon
Interactive logon: Number of previous logons to cache (in case domain controller is not available)
Interactive logon: Prompt user to change password before expiration
Interactive logon: Require Domain Controller authentication to unlock workstation
Interactive logon: Require smart card

Interactive logon: Smart card removal behavior
Microsoft network client: Digitally sign communications (always)
Microsoft network client: Digitally sign communications (if server agrees)

Microsoft network client: Send unencrypted password to third-party SMB servers
Microsoft network server: Amount of idle time required before suspending session
Microsoft network server: Digitally sign communications (always)

Microsoft network server: Digitally sign communications (if client agrees)
Microsoft network server: Disconnect clients when logon hours expire
Network access: Allow anonymous SID/Name translation
Network access: Do not allow anonymous enumeration of SAM accounts
Network access: Do not allow anonymous enumeration of SAM accounts and shares
Network access: Do not allow storage of credentials or .NET Passports for network authentication
Network access: Let Everyone permissions apply to anonymous users
Network access: Named Pipes that can be accessed anonymously
Network access: Remotely accessible registry paths
Network access: Remotely accessible registry paths

Network access: Remotely accessible registry paths and subpaths
Network access: Restrict anonymous access to Named Pipes and Shares
Network access: Shares that can be accessed anonymously
Network access: Sharing and security model for local accounts
Network security: Do not store LAN Manager hash value on next password change
Network security: Force logoff when logon hours expire
Network security: LAN Manager authentication level
Network security: LDAP client signing requirements
Network security: Minimum session security for NTLM SSP based (including secure RPC) clients
Network security: Minimum session security for NTLM SSP based (including secure RPC) servers
Recovery console: Allow automatic administrative logon

Recovery console: Allow floppy copy and access to all drives and all folders
Shutdown: Allow system to be shut down without having to log on
Shutdown: Clear virtual memory pagefile
System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing
System Cryptography: Force strong key protection for user keys stored on the computer
System objects: Default owner for objects created by members of the Administrators group
System objects: Require case insensitivity for non-Windows subsystems
System objects: Strengthen default permissions of internal system objects (e.g., Symbolic Links)
System settings: Optional subsystems
System settings: Use Certificate Rules on Windows Executables for Software Restriction Policies
Admin Approval Mode for the Built-in Administrator account
Behavior of the elevation prompt for administrators in Admin Approval Mode
Behavior of the elevation prompt for standard users

Detect application installations and prompt for elevation
Only elevate executables that are signed and validated
Only elevate UIAccess applications that are installed in secure locations
Run all administrators in Admin Approval Mode
Switch to the secure desktop when prompting for elevation

Virtualize file and registry write failures to per-user locations
Maximum application log size
Maximum security log size
Maximum system log size
Prevent local guests group from accessing application log
Prevent local guests group from accessing security log

Prevent local guests group from accessing system log
Retain application log
Retain security log
Retain system log
Retention method for application log
Retention method for security log

Retention method for system log
Restricted Groups
System Services
Registry
File System
Supported on Explain Text
Windows XP SP2, Windows Server 2003 Enforce password history
This security setting determines the number of unique new passwords that have to be associated with a us
This policy enables administrators to enhance security by ensuring that old passwords are not reused con
Default:
24 on domain controllers.
0 on stand-alone servers.
Note: By default, member computers follow the configuration of their domain controllers.
To maintain the effectiveness of the password history, do not allow passwords to be changed immediately
Windows XP SP2, Windows Server 2003 Maximum password age
This security setting determines the period of time (in days) that a password can be used before the system
Note: It is a security best practice to have passwords expire every 30 to 90 days, depending on your enviro
Default: 42.
Windows XP SP2, Windows Server 2003 Minimum password age
This security setting determines the period of time (in days) that a password must be used before the user
The minimum password age must be less than the Maximum password age, unless the maximum passwo
Configure the minimum password age to be more than 0 if you want Enforce password history to be effect
Default:
Windows XP SP2, Windows Server 2003 Minimum password length
This security setting determines the least number of characters that a password for a user account may co
Default:
Windows XP SP2, Windows Server 2003 Password must meet complexity requirements
This security setting determines whether passwords must meet complexity requirements.
If this policy is enabled, passwords must meet the following minimum requirements:
Not contain the user's account name or parts of the user's full name that exceed two consecutive characte
Be at least six characters in length
Contain characters from three of the following four categories:
English uppercase characters (A through Z)
English lowercase characters (a through z)
Base 10 digits (0 through 9)
Non-alphabetic characters (for example, !, $, #, %)
Complexity requirements are enforced when passwords are changed or created.
Default:
Enabled on domain controllers.

Disabled on stand-alone servers.
Windows XP SP2, Windows Server 2003 Store passwords using reversible encryption
This security setting determines whether the operating system stores passwords using reversible encryptio
This policy provides support for applications that use protocols that require knowledge of the user's passw
This policy is required when using Challenge-Handshake Authentication Protocol (CHAP) authentication th
Default: Disabled.
Windows XP SP2, Windows Server 2003 Account lockout duration
This security setting determines the number of minutes a locked-out account remains locked out before au
If an account lockout threshold is defined, the account lockout duration must be greater than or equal to th
Default: None, because this policy setting only has meaning when an Account lockout threshold is specifie
Windows XP SP2, Windows Server 2003 Account lockout threshold
This security setting determines the number of failed logon attempts that causes a user account to be lock
Failed password attempts against workstations or member servers that have been locked using either CTR
Default: 0.
Windows XP SP2, Windows Server 2003 Reset account lockout counter after
This security setting determines the number of minutes that must elapse after a failed logon attempt before
If an account lockout threshold is defined, this reset time must be less than or equal to the Account lockou
Default: None, because this policy setting only has meaning when an Account lockout threshold is specifie
Windows XP SP2, Windows Server 2003 Enforce user logon restrictions
This security setting determines whether the Kerberos V5 Key Distribution Center (KDC) validates every re
Default: Enabled.
Windows XP SP2, Windows Server 2003 Maximum lifetime for service ticket
This security setting determines the maximum amount of time (in minutes) that a granted session ticket ca
If a client presents an expired session ticket when it requests a connection to a server, the server returns a
Default: 600 minutes (10 hours).

Windows XP SP2, Windows Server 2003 Maximum lifetime for user ticket
This security setting determines the maximum amount of time (in hours) that a user's ticket-granting ticket
Default: 10 hours.
Windows XP SP2, Windows Server 2003 Maximum lifetime for user ticket renewal
This security setting determines the period of time (in days) during which a user's ticket-granting ticket (TG
Default: 7 days.
Windows XP SP2, Windows Server 2003 Maximum tolerance for computer clock synchronization
This security setting determines the maximum time difference (in minutes) that Kerberos V5 tolerates betw
To prevent "replay attacks," Kerberos V5 uses time stamps as part of its protocol definition. For time stamp
Important
This setting is not persistent. If you configure this setting and then restart the computer, this setting reverts
Default: 5 minutes.
Windows XP SP2, Windows Server 2003 Audit account logon events
This security setting determines whether to audit each instance of a user logging on to or logging off from a
If you define this policy setting, you can specify whether to audit successes, audit failures, or not audit the
To set this value to No auditing, in the Properties dialog box for this policy setting, select the Define these
If success auditing for account logon events is enabled on a domain controller, an entry is logged for each
Default: Success.
Windows XP SP2, Windows Server 2003 Audit account management
This security setting determines whether to audit each event of account management on a computer. Exam
A user account or group is created, changed, or deleted.

A user account is renamed, disabled, or enabled.
A password is set or changed.
Default:
Success on domain controllers.

No auditing on member servers.
Windows XP SP2, Windows Server 2003 Audit directory service access
This security setting determines whether to audit the event of a user accessing an Active Directory object t
By default, this value is set to no auditing in the Default Domain Controller Group Policy object (GPO), and
Note that you can set a SACL on an Active Directory object by using the Security tab in that object's Prope
Default:

Undefined for a member computer.
Windows XP SP2, Windows Server 2003 Audit logon events
This security setting determines whether to audit each instance of a user logging on to or logging off from a
Account logon events are generated on domain controllers for domain account activity and on local compu
Default: Success.
Windows XP SP2, Windows Server 2003 Audit object access
This security setting determines whether to audit the event of a user accessing an objectùfor example, a fi
Note that you can set a SACL on a file system object using the Security tab in that object's Properties dialo
Default: No auditing.
Windows XP SP2, Windows Server 2003 Audit policy change
This security setting determines whether to audit every incident of a change to user rights assignment polic
Default:

Windows XP SP2, Windows Server 2003 Audit privilege use
This security setting determines whether to audit each instance of a user exercising a user right.
If you define this policy setting, you can specify whether to audit successes, audit failures, or not audit this
Default: No auditing.
Audits are not generated for use of the following user rights, even if success audits or failure audits are spe
Bypass traverse checking

Debug programs
Create a token object
Replace process level token
Generate security audits
Back up files and directories
Restore files and directories
Caution
Incorrectly editing the registry may severely damage your system. Before making changes to the registry,
Windows XP SP2, Windows Server 2003 Audit process tracking
This security setting determines whether to audit detailed tracking information for events such as program
Default: No auditing
Windows XP SP2, Windows Server 2003 Audit system events
This security setting determines whether to audit when a user restarts or shuts down the computer or when
Default:

Windows XP SP2, Windows Server 2003 Access this computer from the network
This user right determines which users and groups are allowed to connect to the computer over the netwo
Default on workstations and servers:

Administrators
Backup Operators
Users
Everyone
Default on domain controllers:

Administrators
Authenticated Users
Enterprise Domain Controllers
Everyone
Pre-Windows 2000 Compatible Access
Windows Vista, Longhorn This setting is used by Credential Manager during Backup/Restore. No accounts should have this privilege
Windows XP SP2, Windows Server 2003 Act as part of the operating system
This user right allows a process to impersonate any user without authentication. The process can therefore
Processes that require this privilege should use the LocalSystem account, which already includes this priv
Caution
Assigning this user right can be a security risk. Only assign this user right to trusted users.
Default: None.
Windows XP SP2, Windows Server 2003 Add workstations to domain
This security setting determines which groups or users can add workstations to a domain.
This security setting is valid only on domain controllers. By default, any authenticated user has this right an
Adding a computer account to the domain allows the computer to participate in Active Directoryûbased net
Default: Authenticated Users on domain controllers.
Note: Users who have the Create Computer Objects permission on the Active Directory computers contain
Windows XP SP2, Windows Server 2003 Adjust memory quotas for a process
This privilege determines who can change the maximum memory that can be consumed by a process.
This user right is defined in the Default Domain Controller Group Policy object (GPO) and in the local secu
Note: This privilege is useful for system tuning, but it can be misused, for example, in a denial-of-service a
Default: Administrators
Local Service
Network Service.
Windows Server 2003 Allow log on locally
This logon right determines which users can interactively log on to this computer. Logons initiated by press
Default on workstations and servers: Administrators

Backup Operators
Users.
Default on domain controllers: Account Operators

Administrators
Backup Operators
Print Operators
Server Operators.
Windows XP SP2, Windows Server 2003 Allow log on through Terminal Services
This security setting determines which users or groups have permission to log on as a Terminal Services c
Default:
On workstation and servers: Administrators, Remote Desktop Users.

On domain controllers: Administrators.
Important
This setting does not have any effect on Windows 2000 computers that have not been updated to Service
Windows XP SP2, Windows Server 2003 Back up files and directories
This user right determines which users can bypass file and directory, registry, and other persistent object p
Specifically, this user right is similar to granting the following permissions to the user or group in question o
Traverse Folder/Execute File

List Folder/Read Data
Read Attributes
Read Extended Attributes
Read Permissions
Caution
Assigning this user right can be a security risk. Since there is no way to be sure that a user is backing up d
Default on workstations and servers: Administrators

Backup Operators.
Default on domain controllers:Administrators

Backup Operators
Server Operators
Windows XP SP2, Windows Server 2003 Bypass traverse checking
This user right determines which users can traverse directory trees even though the user may not have pe

Administrators
Backup Operators
Users
Everyone
Local Service
Network Service

Administrators
Authenticated Users
Everyone
Local Service
Network Service
Pre-Windows 2000 Compatible Access
Windows XP SP2, Windows Server 2003 Change the system time
This user right determines which users and groups can change the time and date on the internal clock of th

Administrators
Local Service

Administrators
Server Operators
Local Service
Windows Vista, Longhorn Change the Time Zone
This user right determines which users and groups can change the time zone used by the computer for dis
Default: Administrators, Users

Windows XP SP2, Windows Server 2003 Create a pagefile
This user right determines which users and groups can call an internal application programming interface (
For information about how to specify a paging file size for a given drive, see To change the size of the virtu
Default: Administrators.
Windows XP SP2, Windows Server 2003 Create a token object
This security setting determines which accounts can be used by processes to create a token that can then
This user right is used internally by the operating system. Unless it is necessary, do not assign this user rig
Caution
Assigning this user right can be a security risk. Do not assign this user right to any user, group, or process
Default: None
Windows XP SP2, Windows Server 2003 Create global objects
This user right is required for a user account to create global objects during Terminal Services sessions. U
Caution
Assigning this user right can be a security risk. Assign this user right only to trusted users.
Default:
Administrators
Local Service
Network Service
Service
Windows XP SP2, Windows Server 2003 Create permanent shared objects
This user right determines which accounts can be used by processes to create a directory object using the
This user right is used internally by the operating system and is useful to kernel-mode components that ex
Default: None.
Windows Vista, Longhorn Create Symbolic Links
This privilege determines if the user can create a symbolic link from the computer he is logged on to.
Default: Administrator
WARNING: This privilege should only be given to trusted users. Symbolic links can expose security vulner
Note
This setting can be used in conjunction a symlink filesystem setting that can be manipulated with the comm
Windows XP SP2, Windows Server 2003 Debug programs
This user right determines which users can attach a debugger to any process or to the kernel. Developers
Caution
Windows XP SP2, Windows Server 2003 Deny access to this computer from the network
This security setting determines which users are prevented from accessing a computer over the network. T
Default: None.
Windows XP SP2, Windows Server 2003 Deny log on as a batch job
This security setting determines which accounts are prevented from being able to log on as a batch job. Th
Default: None.
Windows XP SP2, Windows Server 2003 Deny log on as a service
This security setting determines which service accounts are prevented from registering a process as a ser
Note: This security setting does not apply to the System, Local Service, or Network Service accounts.
Default: None.
Windows XP SP2, Windows Server 2003 Deny log on locally
This security setting determines which users are prevented from logging on at the computer. This policy se
Important
If you apply this security policy to the Everyone group, no one will be able to log on locally.
Default: None.
Windows XP SP2, Windows Server 2003 Deny log on through Terminal Services
This security setting determines which users and groups are prohibited from logging on as a Terminal Serv
Default: None.
Important
This setting does not have any effect on Windows 2000 computers that have not been updated to Service
Windows XP SP2, Windows Server 2003 Enable computer and user accounts to be trusted for delegation
This security setting determines which users can set the Trusted for Delegation setting on a user or compu
The user or object that is granted this privilege must have write access to the account control flags on the
Caution
Misuse of this user right, or of the Trusted for Delegation setting, could make the network vulnerable to sop
Default: Administrators on domain controllers.

Windows XP SP2, Windows Server 2003 Force shutdown from a remote system
This security setting determines which users are allowed to shut down a computer from a remote location
Default:
On workstations and servers: Administrators.

On domain controllers: Administrators, Server Operators.
Windows XP SP2, Windows Server 2003 Generate security audits
This security setting determines which accounts can be used by a process to add entries to the security lo
Default: Local Service

Network Service.
Windows XP SP2, Windows Server 2003 Impersonate a client after authentication
Assigning this privilege to a user allows programs running on behalf of that user to impersonate a client. R
Caution
Default:
Administrators
Local Service
Network Service
Service
Note: By default, services that are started by the Service Control Manager have the built-in Service group
In addition, a user can also impersonate an access token if any of the following conditions exist.
The access token that is being impersonated is for this user.

The user, in this logon session, created the access token by logging on to the network with explicit credent
The requested level is less than Impersonate, such as Anonymous or Identify.
Because of these factors, users do not usually need this user right.
For more information, search for "SeImpersonatePrivilege" in the Microsoft Platform SDK.
Warning
Windows Vista, Longhorn If you enable

Increase this setting,
a process workingprograms
set that previously had the Impersonate privilege may lose it, and they ma
This privilege determines which user accounts can increase or decrease the size of a process’s working se
Increase a process working set
This privilege determines which user accounts can increase or decrease the size of a process’s working se
Default: Users
The working set of a process is the set of memory pages currently visible to the process in physical RAM m
Warning: Increasing the working set size for a process decreases the amount of physical memory availabl
Windows XP SP2, Windows Server 2003 Increase scheduling priority
This security setting determines which accounts can use a process with Write Property access to another
Windows XP SP2, Windows Server 2003 Load and unload device drivers
This user right determines which users can dynamically load and unload device drivers or other code in to
Caution
Assigning this user right can be a security risk. Do not assign this user right to any user, group, or process
Default on workstations and servers: Administrators.

Administrators
Print Operators
Windows XP SP2, Windows Server 2003 Lock pages in memory
This security setting determines which accounts can use a process to keep data in physical memory, whic
Default: None.
Windows XP SP2, Windows Server 2003 Log on as a batch job
This security setting allows a user to be logged on by means of a batch-queue facility and is provided only
For example, when a user submits a job by means of the task scheduler, the task scheduler logs that user
Backup Operators.
Windows XP SP2, Windows Server 2003 Log on as a service
This security setting determines which service accounts can register a process as a service.
Default: Network Service.

Windows XP SP2 Log on locally
Determines which users can log on to the computer.
Important
Modifying this setting may affect compatibility with clients, services, and applications. For compatibility info
Default:
• On workstations and servers: Administrators, Backup Operators, Power Users, Users, and Guest.
• On domain controllers: Account Operators, Administrators, Backup Operators, and Print Operators.
Windows XP SP2, Windows Server 2003 Manage auditing and security log
This security setting determines which users can specify object access auditing options for individual resou
This security setting does not allow a user to enable file and object access auditing in general. For such au
You can view audited events in the security log of the Event Viewer. A user with this privilege can also view
Windows Vista, Longhorn Modify an object label
This privilege determines which user accounts can modify the integrity label of objects, such as files, regis
Default: None
Windows XP SP2, Windows Server 2003 Modify firmware environment values
This security setting determines who can modify firmware environment values. Firmware environment vari
On x86-based computers, the only firmware environment value that can be modified by assigning this user
On Itanium-based computers, boot information is stored in nonvolatile RAM. Users must be assigned this u
On all computers, this user right is required to install or upgrade Windows.
Note: This security setting does not affect who can modify the system environment variables and user env
Windows XP SP2, Windows Server 2003 Perform volume maintenance tasks
Description
This security setting determines which users and groups can run maintenance tasks on a volume, such as
Use caution when assigning this user right. Users with this user right can explore disks and extend files in
Windows XP SP2, Windows Server 2003 Profile single process
This security setting determines which users can use performance monitoring tools to monitor the perform
Windows XP SP2, Windows Server 2003 Profile system performance
This security setting determines which users can use performance monitoring tools to monitor the perform
Windows XP SP2, Windows Server 2003 Remove computer from docking station
This security setting determines whether a user can undock a portable computer from its docking station w
If this policy is enabled, the user must log on before removing the portable computer from its docking statio
Windows XP SP2, Windows Server 2003 Replace a process level token
This security setting determines which user accounts can call the CreateProcessAsUser() application prog
Default: Network Service, Local Service.

Windows XP SP2, Windows Server 2003 Restore files and directories
This security setting determines which users can bypass file, directory, registry, and other persistent objec
Specifically, this user right is similar to granting the following permissions to the user or group in question o
Traverse Folder/Execute File

Write
Caution
Assigning this user right can be a security risk. Since users with this user right can overwrite registry settin
Default:
Workstations and servers: Administrators, Backup Operators.

Domain controllers: Administrators, Backup Operators, Server Operators.
Windows XP SP2, Windows Server 2003 Shut down the system
This security setting determines which users who are logged on locally to the computer can shut down the
Default on Workstations: Administrators, Backup Operators, Users.
Default on Servers: Administrators, Backup Operators.
Default on Domain controllers: Administrators, Backup Operators, Server Operators, Print Operators.
Windows XP SP2, Windows Server 2003 Synchronize directory service data
This security setting determines which users and groups have the authority to synchronize all directory ser
Defaults: None.
Windows XP SP2, Windows Server 2003 Take ownership of files or other objects
This security setting determines which users can take ownership of any securable object in the system, inc
Caution
Assigning this user right can be a security risk. Since owners of objects have full control of them, only assi
Windows XP SP2, Windows Server 2003 Accounts: Administrator account status
This security setting determines whether the local Administrator account is enabled or disabled.
Notes
If you try to reenable the Administrator account after it has been disabled, and if the current Administrator p
Disabling the Administrator account can become a maintenance issue under certain circumstances. For ex
Under Safe Mode boot, the Administrator account is always enabled, regardless of this setting.
Default: Enabled.
Windows XP SP2, Windows Server 2003 Accounts: Guest account status
This security setting determines if the Guest account is enabled or disabled.
Default: Disabled.
Note: If the Guest account is disabled and the security option Network Access: Sharing and Security Mode
Windows XP SP2, Windows Server 2003 Accounts: Limit local account use of blank passwords to console logon only
This security setting determines whether local accounts that are not password protected can be used to lo
Default: Enabled.
Warning:
Computers that are not in physically secure locations should always enforce strong password policies for a
If you apply this security policy to the Everyone group, no one will be able to log on through terminal servic
Notes
This setting does not affect logons that use domain accounts.
It is possible for applications that use remote interactive logons to bypass this setting.
Windows XP SP2, Windows Server 2003 Accounts: Rename administrator account
This security setting determines whether a different account name is associated with the security identifier
Default: Administrator.
Windows XP SP2, Windows Server 2003 Accounts: Rename guest account
This security setting determines whether a different account name is associated with the security identifier
Default: Guest.
Windows XP SP2, Windows Server 2003 Audit: Audit the access of global system objects
This security setting determines whether to audit the access of global system objects.
If this policy is enabled, it causes system objects, such as mutexes (mutual exclusive), events, semaphore
Note: When configuring this security setting, changes will not take effect until you restart Windows.
Default: Disabled.
Windows XP SP2, Windows Server 2003 Audit: Audit the use of Backup and Restore privilege
This security setting determines whether to audit the use of all user privileges, including Backup and Resto
If you disable this policy, then use of the Backup or Restore privilege is not audited even when Audit privile
Default: Disabled.
Windows Vista, Longhorn Audit: Audit the use of Backup and Restore privilege
This security setting determines whether to audit the use of all user privileges, including Backup and Resto
If you disable this policy, then use of the Backup or Restore privilege is not audited even when Audit privile
Default: Disabled.
Windows Vista, Longhorn Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category se
Windows Vista and later versions of Windows allow audit policy to be managed in a more precise way usin
If the category level audit policy set here is not consistent with the events that are currently being generate
Default: Disabled
Windows XP SP2, Windows Server 2003 Audit: Shut down system immediately if unable to log security audits
This security setting determines whether the system shuts down if it is unable to log security events.
If this security setting is enabled, it causes the system to stop if a security audit cannot be logged for any r
If the security log is full and an existing entry cannot be overwritten, and this security option is enabled, the
STOP: C0000244 {Audit Failed}

An attempt to generate a security audit failed.
To recover, an administrator must log on, archive the log (optional), clear the log, and reset this option as d
Default: Disabled.
Windows Vista, Longhorn Audit: Shut down system immediately if unable to log security audits
This security setting determines whether the system shuts down if it is unable to log security events.
If this security setting is enabled, it causes the system to stop if a security audit cannot be logged for any r
If the security log is full and an existing entry cannot be overwritten, and this security option is enabled, the
STOP: C0000244 {Audit Failed}

An attempt to generate a security audit failed.
To recover, an administrator must log on, archive the log (optional), clear the log, and reset this option as d
Default: Disabled.
Windows XP SP2, Windows Server 2003 DCOM: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) syntax
This policy setting determines which users or groups can access DCOM application remotely or locally. Th
You can use this policy setting to specify access permissions to all the computers to particular users for DC
The registry settings that are created as a result of enabling the DCOM: Machine Access Restrictions in Se
The possible values for this policy setting are:
ò Blank. This represents the local security policy way of deleting the policy enforcement key. This value de
ò SDDL. This is the Security Descriptor Definition Language representation of the groups and privileges yo
ò Not Defined. This is the default value.
Note
If the administrator is denied permission to access DCOM applications due to the changes made to DCOM
Windows XP SP2, Windows Server 2003 DCOM: Machine Launch Restrictions in Security Descriptor Definition Language (SDDL) syntax
This policy setting determines which users or groups can launch or activate DCOM applications remotely o
You can use this setting to grant access to all the computers to users of DCOM applications. When you de
The registry settings that are created as a result of this policy take precedence over the previous registry s
The possible values for this Group Policy setting are:
ò Blank. This represents the local security policy way of deleting the policy enforcement key. This value de
ò SDDL. This is the Security Descriptor Definition Language representation of the groups and privileges yo
ò Not Defined. This is the default value.
Note
If the administrator is denied access to activate and launch DCOM applications due to the changes made t
User Account Control: Admin Approval Mode for the Built-in Administrator account
This security setting determines the behavior of Admin Approval mode for the Built-in Administrator accoun
The options are:
ò Enabled: The Built-in Administrator will logon in Admin Approval Mode. By default any operation that req
ò Disabled: The Built-in Administrator will logon in XP compatible mode and run all applications by default
Default: Disabled
Windows XP SP2, Windows Server 2003 Devices: Allow undock without having to log on
This security setting determines whether a portable computer can be undocked without having to log on. If
Default: Enabled.
Caution
Disabling this policy may tempt users to try and physically remove the laptop from its docking station using
Windows XP SP2, Windows Server 2003 Devices: Allowed to format and eject removable media
This security setting determines who is allowed to format and eject removable NTFS media. This capability
Administrators
Administrators and Interactive Users
Default: This policy is not defined and only Administrators have this ability.
Windows XP SP2, Windows Server 2003 Devices: Prevent users from installing printer drivers
For a computer to print to a network printer, the driver for that network printer must be installed on the loca
Default on servers: Enabled.

Default on workstations: Disabled
Notes
This setting does not affect the ability to add a local printer.
This setting does not affect Administrators.
Windows XP SP2, Windows Server 2003 Devices: Restrict CD-ROM access to locally logged-on user only
This security setting determines whether a CD-ROM is accessible to both local and remote users simultan
If this policy is enabled, it allows only the interactively logged-on user to access removable CD-ROM medi
Default: This policy is not defined and CD-ROM access is not restricted to the locally logged-on user.
Windows XP SP2, Windows Server 2003 Devices: Restrict floppy access to locally logged-on user only
This security setting determines whether removable floppy media are accessible to both local and remote
If this policy is enabled, it allows only the interactively logged-on user to access removable floppy media. If
Default: This policy is not defined and floppy disk drive access is not restricted to the locally logged-on use
Windows XP SP2, Windows Server 2003 Devices: Unsigned driver installation behavior
This security setting determines what happens when an attempt is made to install a device driver (by mean
The options are:
Silently succeed
Warn but allow installation
Do not allow installation
Default: Warn but allow installation.
Windows XP SP2, Windows Server 2003 Domain controller: Allow server operators to schedule tasks
This security setting determines if Server Operators are allowed to submit jobs by means of the AT schedu
Note: This security setting only affects the AT schedule facility; it does not affect the Task Scheduler facilit
Default: This policy is not defined, which means that the system treats it as disabled.
Windows Server 2003? Domain controller: LDAP server signing requirements
This security setting determines whether the LDAP server requires signing to be negotiated with LDAP clie
None: Data signing is not required in order to bind with the server. If the client requests data signing, the s
Require signature: Unless TLS\SSL is being used, the LDAP data signing option must be negotiated.
Default: This policy is not defined, which has the same effect as None.
Caution
If you set the server to Require Signature, you must also set the client. Not setting the client results in loss
Notes
This setting does not have any impact on LDAP simple bind or LDAP simple bind through SSL. No Microso
If signing is required, then LDAP simple bind and LDAP simple bind through SSL requests are rejected. No
Windows XP SP2, Windows Server 2003 Domain controller: Refuse machine account password changes
This security setting determines whether domain controllers will refuse requests from member computers t
If it is enabled, this setting does not allow a domain controller to accept any changes to a computer accoun
Default: This policy is not defined, which means that the system treats it as Disabled.
Windows XP SP2, Windows Server 2003 Domain member: Digitally encrypt or sign secure channel data (always)
This security setting determines whether all secure channel traffic initiated by the domain member must be
When a computer joins a domain, a computer account is created. After that, when the system starts, it use
This setting determines whether or not all secure channel traffic initiated by the domain member meets min

Domain member: Digitally sign secure channel data (when possible)
Default: Enabled.
Notes:
If this policy is enabled, the policy Domain member: Digitally sign secure channel data (when possible) is a
If this policy is enabled, the policy Domain member: Digitally sign secure channel data (when possible) is a
Logon information transmitted over the secure channel is always encrypted regardless of whether encrypti
Windows XP SP2, Windows Server 2003 Domain member: Digitally encrypt secure channel data (when possible)
This security setting determines whether a domain member attempts to negotiate encryption for all secure
This setting determines whether or not the domain member attempts to negotiate encryption for all secure
Default: Enabled.
Important
There is no known reason for disabling this setting. Besides unnecessarily reducing the potential confident
Note: Domain controllers are also domain members and establish secure channels with other domain cont
Windows XP SP2, Windows Server 2003 Domain member: Digitally sign secure channel data (when possible)
This security setting determines whether a domain member attempts to negotiate signing for all secure cha
This setting determines whether or not the domain member attempts to negotiate signing for all secure cha
Default: Enabled.
Notes:
If the policy Domain member: Digitally encrypt or sign secure channel data (always) is enabled, then this p
Domain controllers are also domain members and establish secure channels with other domain controllers
Windows XP SP2, Windows Server 2003 Domain member: Disable machine account password changes
Determines whether a domain member periodically changes its computer account password. If this setting
Default: Disabled.
Notes
This security setting should not be enabled. Computer account passwords are used to establish secure ch
This setting should not be used in an attempt to support dual-boot scenarios that use the same computer a
Windows XP SP2, Windows Server 2003 Domain member: Maximum machine account password age
This security setting determines how often a domain member will attempt to change its computer account
Default: 30 days.
Important
This setting applies to Windows 2000 computers, but it is not available through the Security Configuration
Windows XP SP2, Windows Server 2003 Domain member: Require strong (Windows 2000 or later) session key
This security setting determines whether 128-bit key strength is required for encrypted secure channel dat
Depending on what version of Windows is running on the domain controller that the domain member is com
Domain member: Digitally encrypt or sign secure channel data (always)

Some or all of the information that is transmitted over the secure channel will be encrypted. This policy set
If this setting is enabled, then the secure channel will not be established unless 128-bit encryption can be p
Default: Disabled.
Important
In order to take advantage of this policy on member workstations and servers, all domain controllers that c
In order to take advantage of this policy on domain controllers, all domain controllers in the same domain a
Windows XP SP2, Windows Server 2003 Interactive logon: Do not display last user name
This security setting determines whether the name of the last user to log on to the computer is displayed in
If this policy is enabled, the name of the last user to successfully log on is not displayed in the Log On to W
If this policy is disabled, the name of the last user to log on is displayed.
Default: Disabled.
Windows XP SP2, Windows Server 2003 Interactive logon: Do not require CTRL+ALT+DEL
This security setting determines whether pressing CTRL+ALT+DEL is required before a user can log on.
If this policy is enabled on a computer, a user is not required to press CTRL+ALT+DEL to log on. Not havin
If this policy is disabled, any user is required to press CTRL+ALT+DEL before logging on to Windows (unle
Default on domain-computers: Disabled.

Default on stand-alone computers: Enabled.
Windows XP SP2, Windows Server 2003 Interactive logon: Message text for users attempting to log on
This security setting specifies a text message that is displayed to users when they log on.
This text is often used for legal reasons, for example, to warn users about the ramifications of misusing co
Default: No message.
Windows XP SP2, Windows Server 2003 Interactive logon: Message title for users attempting to log on
This security setting allows the specification of a title to appear in the title bar of the window that contains t
Default: No message.
Windows XP SP2, Windows Server 2003 Interactive logon: Number of previous logons to cache (in case domain controller is not available)
All previous users' logon information is cached locally so that, in the event that a domain controller is unav
Windows cannot connect to a server to confirm your logon settings. You have been logged on using previo
If a domain controller is unavailable and a user's logon information is not cached, the user is prompted with
The system cannot log you on now because the domain <DOMAIN_NAME> is not available.
In this policy setting, a value of 0 disables logon caching. Any value above 50 only caches 50 logon attemp
Default: 10
Windows XP SP2, Windows Server 2003 Interactive logon: Prompt user to change password before expiration
Determines how far in advance (in days) users are warned that their password is about to expire. With this
Default: 14 days.
Windows XP SP2, Windows Server 2003 Interactive logon: Require Domain Controller authentication to unlock
Logon information must be provided to unlock a locked computer. For domain accounts, this security settin
Default: Disabled.
Important
This setting applies to Windows 2000 computers, but it is not available through the Security Configuration
Windows XP SP2, Windows Server 2003 Interactive logon: Require smart card
This security setting requires users to log on to a computer using a smart card.
The options are:
Enabled: Users can only log on to the computer using a smart card.
Disabled. Users can log on to the computer using any method.
Default: Disabled.
Important
This setting will apply to any computers running Windows 2000 through changes in the registry, but the se
Windows XP SP2, Windows Server 2003 Interactive logon: Smart card removal behavior
This security setting determines what happens when the smart card for a logged-on user is removed from
The options are:
ò No Action
ò Lock Workstation
ò Force Logoff
ò Disconnect if a remote Terminal Services session
If you click Lock Workstation in the Properties dialog box for this policy, the workstation is locked when the
If you click Force Logoff in the Properties dialog box for this policy, the user is automatically logged off whe
If you click Disconnect if a remote Terminal Services session, removal of the smart card disconnects the s
Default: This policy is not defined, which means that the system treats it as No action.
On Windows Vista and above: In order for this setting to work, the Smart Card Removal Policy service mu
Windows XP SP2, Windows Server 2003 Microsoft network client: Digitally sign communications (always)
This security setting determines whether packet signing is required by the SMB client component.
The server message block (SMB) protocol provides the basis for Microsoft file and print sharing and many
If this setting is enabled, the Microsoft network client will not communicate with a Microsoft network server
Default: Disabled.
Important
For this policy to take effect on computers running Windows 2000, client-side packet signing must also be
Computers that have this policy set will not be able to communicate with computers that do not have serve
Server-side packet signing can be enabled on computers running Windows 2000 and later by setting Micro
Server-side packet signing can be enabled on computers running Windows NT 4.0 Service Pack 3 and late
HKLM\System\CurrentControlSet\Services\LanManServer\Parameters\EnableSecuritySignature
Server-side packet signing cannot be enabled on computers running Windows 95 or Windows 98.
Notes
All Windows operating systems support both a client-side SMB component and a server-side SMB compon
Microsoft network client: Digitally sign communications (always) - Controls whether or not the client-side S
Microsoft network client: Digitally sign communications (if server agrees) - Controls whether or not the clien
Microsoft network server: Digitally sign communications (always) - Controls whether or not the server-side
Microsoft network server: Digitally sign communications (if client agrees) - Controls whether or not the serv
If server-side SMB signing is required, a client will not be able to establish a session with that server, unles
If server-side SMB signing is enabled, SMB packet signing will be negotiated with clients that have client-s
Using SMB packet signing can impose up to a 15 percent performance hit on file service transactions.
Windows XP SP2, Windows Server 2003 Microsoft network client: Digitally sign communications (if server agrees)
This security setting determines whether the SMB client attempts to negotiate SMB packet signing.
If this setting is enabled, the Microsoft network client will ask the server to perform SMB packet signing upo
Default: Enabled.
Notes
If server-side SMB signing is required, a client will not be able to establish a session with that server unles
Similarly, if client-side SMB signing is required, that client will not be able to establish a session with serve
Using SMB packet signing can degrade performance up to 15 percent on file service transactions.
Windows XP SP2, Windows Server 2003 Microsoft network client: Send unencrypted password to connect to third-party SMB servers
If this security setting is enabled, the Server Message Block (SMB) redirector is allowed to send plaintext p
Sending unencrypted passwords is a security risk.
Default: Disabled.
Windows XP SP2, Windows Server 2003 Microsoft network server: Amount of idle time required before suspending a session
This security setting determines the amount of continuous idle time that must pass in a Server Message B
Administrators can use this policy to control when a computer suspends an inactive SMB session. If client
For this policy setting, a value of 0 means to disconnect an idle session as quickly as is reasonably possib
Default:This policy is not defined, which means that the system treats it as 15 minutes for servers and und
Windows XP SP2, Windows Server 2003 Microsoft network server: Digitally sign communications (always)
This security setting determines whether packet signing is required by the SMB server component.
If this setting is enabled, the Microsoft network server will not communicate with a Microsoft network client
Default:
Disabled for member servers.

Enabled for domain controllers.
Notes
Using SMB packet signing can degrade performance up to 15 percent on file service transactions.
Important
For this policy to take effect on computers running Windows 2000, server-side packet signing must also be
Microsoft network server: Digitally sign communications (if server agrees)
For Windows 2000 servers to negotiate signing with Windows NT 4.0 clients, the following registry value m
HKLM\System\CurrentControlSet\Services\lanmanserver\parameters\enableW9xsecuritysignature
Computers that have this policy set will not communicate with computers that do not have client-side pack
Windows XP SP2, Windows Server 2003 Microsoft network server: Digitally sign communications (if client agrees)
This security setting determines whether the SMB server will negotiate SMB packet signing with clients tha
If this setting is enabled, the Microsoft network server will negotiate SMB packet signing as requested by th
Default: Enabled on domain controllers only.
Important
Tor Windows 2000 servers to negotiate signing with Windows NT 4.0 clients, the following registry value m
Notes
Using SMB packet signing can impose up to a 15 percent performance hit on file service transactions.
Windows XP SP2, Windows Server 2003 Microsoft network server: Disconnect clients when logon hours expire
This security setting determines whether to disconnect users who are connected to the local computer out
When this policy is enabled, it causes client sessions with the SMB Service to be forcibly disconnected wh
If this policy is disabled, an established client session is allowed to be maintained after the client's logon ho
Default on Windows Vista: Enabled.

Default on Windows XP: Disabled
Windows XP SP2, Windows Server 2003 Network access: Allow anonymous SID/name translation
This security setting determines if an anonymous user can request security identifier (SID) attributes for an
If this policy is enabled, a user with knowledge of an administrator's SID could contact a computer that has
Default on workstations and member servers: Disabled.

Default on domain controllers: Enabled.
Windows XP SP2, Windows Server 2003 Network access: Do not allow anonymous enumeration of SAM accounts
This security setting determines what additional permissions will be granted for anonymous connections to
Windows allows anonymous users to perform certain activities, such as enumerating the names of domain
This security option allows additional restrictions to be placed on anonymous connections as follows:
Enabled: Do not allow enumeration of SAM accounts. This option replaces Everyone with Authenticated U
Disabled: No additional restrictions. Rely on default permissions.
Default on workstations: Enabled.

Default on server:Disabled.
Important
This policy has no impact on domain controllers.
Windows XP SP2, Windows Server 2003 Network access: Do not allow anonymous enumeration of SAM accounts and shares
This security setting determines whether anonymous enumeration of SAM accounts and shares is allowed
Default: Disabled.
Windows XP SP2, Windows Server 2003 Network access: Do not allow storage of credentials or .NET Passports for network authentication
This security setting determines whether Stored User Names and Passwords saves passwords, credential
If it is enabled, this setting prevents the Stored User Names and Passwords from storing passwords and c
For more information about Stored User Names and Passwords, see Stored User Names and Passwords.
Default: Disabled.
Windows XP SP2, Windows Server 2003 Network access: Let Everyone permissions apply to anonymous users
This security setting determines what additional permissions are granted for anonymous connections to th
If this policy is enabled, the Everyone SID is added to the token that is created for anonymous connections
Default: Disabled.
Windows XP SP2, Windows Server 2003 Network access: Named pipes that can be accessed anonymously
This security setting determines which communication sessions (pipes) will have attributes and permission
Default: None.
Windows XP SP2 Network access: Remotely accessible registry paths
This security setting determines which registry paths can be accessed over the network, regardless of the
Default:
System\\CurrentControlSet\\Control\\ProductOptions
System\\CurrentControlSet\\Control\\Server Applications
Software\\Microsoft\\Windows NT\\CurrentVersion
Caution
Note: This security setting is not available on earlier versions of Windows. The security setting that appea
Default:
System\CurrentControlSet\Control\ProductOptions
System\CurrentControlSet\Control\Server Applications
Software\Microsoft\Windows NT\CurrentVersion
Windows Server 2003 Network access: Remotely accessible registry paths
This security setting determines which registry paths can be accessed over the network, regardless of the
Default:
System\\CurrentControlSet\\Control\\ProductOptions
System\\CurrentControlSet\\Control\\Server Applications
Software\\Microsoft\\Windows NT\\CurrentVersion
Caution
Note: This security setting is not available on earlier versions of Windows. The security setting that appea
Default:
System\CurrentControlSet\Control\ProductOptions
System\CurrentControlSet\Control\Server Applications
Software\Microsoft\Windows NT\CurrentVersion
Windows Server 2003 Network access: Remotely accessible registry paths and subpaths
This security setting determines which registry paths and subpaths can be accessed over the network, reg
Default:
System\\CurrentControlSet\\Control\\Print\\Printers
System\\CurrentControlSet\\Services\\Eventlog
Software\\Microsoft\\OLAP Server
Software\\Microsoft\\Windows NT\\CurrentVersion\\Print
Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows
System\\CurrentControlSet\\Control\\ContentIndex
System\\CurrentControlSet\\Control\\Terminal Server
System\\CurrentControlSet\\Control\\Terminal Server\\UserConfig
System\\CurrentControlSet\\Control\\Terminal Server\\DefaultUserConfiguration
Software\\Microsoft\\Windows NT\\CurrentVersion\\Perflib
System\\CurrentControlSet\\Services\\SysmonLog
System\\CurrentControlSet\\Services\\CertSvc
System\\CurrentControlSet\\Services\\Wins
Caution
Note: On Windows XP, this security setting was called "Network access: Remotely accessible registry path
Windows Server 2003 Network access: Restrict anonymous access to Named Pipes and Shares
When enabled, this security setting restricts anonymous access to shares and pipes to the settings for:
Network access: Named pipes that can be accessed anonymously

Network access: Shares that can be accessed anonymously
Default: Enabled.
Windows XP SP2, Windows Server 2003 Network access: Shares that can be accessed anonymously
This security setting determines which network shares can accessed by anonymous users.
Default: None specified.
Windows XP SP2, Windows Server 2003 Network access: Sharing and security model for local accounts
This security setting determines how network logons using local accounts are authenticated. If this setting
If this setting is set to Guest only, network logons that use local accounts are automatically mapped to the
Default on domain omputers: Classic.

Default on stand-alone computers: Guest only
Important
With the Guest only model, any user who can access your computer over the network (including anonymo
Note:
This setting does not affect interactive logons that are performed remotely by using such services as Telne
This policy will have no impact on computers running Windows 2000.
When the computer is not joined to a domain, this setting also modifies the Sharing and Security tabs in th
Windows XP SP2, Windows Server 2003 Network security: Do not store LAN Manager hash value on next password change
This security setting determines if, at the next password change, the LAN Manager (LM) hash value for the
Default on Windows Vista: Enabled

Default on Windows XP: Disabled.
Important
Windows 2000 Service Pack 2 (SP2) and above offer compatibility with authentication to previous versions
This setting can affect the ability of computers running Windows 2000 Server, Windows 2000 Professional
Windows XP SP2, Windows Server 2003 Network security: Force logoff when logon hours expire
This security setting determines whether to disconnect users who are connected to the local computer out
When this policy is enabled, it causes client sessions with the SMB server to be forcibly disconnected whe
If this policy is disabled, an established client session is allowed to be maintained after the client's logon ho
Default: Enabled.
Note: This security setting behaves as an account policy. For domain accounts, there can be only one acc
Windows XP SP2, Windows Server 2003 Network security: LAN Manager authentication level
This security setting determines which challenge/response authentication protocol is used for network logo
Send LM & NTLM responses: Clients use LM and NTLM authentication and never use NTLMv2 session se
Send LM & NTLM - use NTLMv2 session security if negotiated: Clients use LM and NTLM authentication a
Send NTLM response only: Clients use NTLM authentication only and use NTLMv2 session security if the
Send NTLMv2 response only: Clients use NTLMv2 authentication only and use NTLMv2 session security i
Send NTLMv2 response only\\refuse LM: Clients use NTLMv2 authentication only and use NTLMv2 sessio
Send NTLMv2 response only\\refuse LM & NTLM: Clients use NTLMv2 authentication only and use NTLM
Important
This setting can affect the ability of computers running Windows 2000 Server, Windows 2000 Professional
Default:
Send LM & NTLM responses on server.

Undefined on workstations.
Windows XP SP2, Windows Server 2003 Network security: LDAP client signing requirements
This security setting determines the level of data signing that is requested on behalf of clients issuing LDA
None: The LDAP BIND request is issued with the options that are specified by the caller.
Negotiate signing: If Transport Layer Security/Secure Sockets Layer (TLS\SSL) has not been started, the L
Require signature: This is the same as Negotiate signing. However, if the LDAP server's intermediate sasl
Caution
If you set the server to Require signature, you must also set the client. Not setting the client results in a los
Note: This setting does not have any impact on ldap_simple_bind or ldap_simple_bind_s. No Microsoft LD
Default: Negotiate signing.
Windows XP SP2, Windows Server 2003 Network security: Minimum session security for NTLM SSP based (including secure RPC) clients
This security setting allows a client to require the negotiation of 128-bit encryption and/or NTLMv2 session
Require NTLMv2 session security: The connection will fail if NTLMv2 protocol is not negotiated.
Require 128-bit encryption: The connection will fail if strong encryption (128-bit) is not negotiated.
Default: No requirements.
Windows XP SP2, Windows Server 2003 Network security: Minimum session security for NTLM SSP based (including secure RPC) servers
This security setting allows a server to require the negotiation of 128-bit encryption and/or NTLMv2 sessio
Require NTLMv2 session security: The connection will fail if message integrity is not negotiated.
Require 128-bit encryption. The connection will fail if strong encryption (128-bit) is not negotiated.
Default: No requirements.
Windows XP SP2, Windows Server 2003 Recovery console: Allow automatic administrative logon
This security setting determines if the password for the Administrator account must be given before access
Default: This policy is not defined and automatic administrative logon is not allowed.
Windows XP SP2, Windows Server 2003 Recovery console: Allow floppy copy and access to all drives and all folders
Enabling this security option makes the Recovery Console SET command available, which allows you to s
AllowWildCards: Enable wildcard support for some commands (such as the DEL command).
AllowAllPaths: Allow access to all files and folders on the computer.
AllowRemovableMedia: Allow files to be copied to removable media, such as a floppy disk.
NoCopyPrompt: Do not prompt when overwriting an existing file.
Default: This policy is not defined and the recover console SET command is not available.
Windows XP SP2, Windows Server 2003 Shutdown: Allow system to be shut down without having to log on
This security setting determines whether a computer can be shut down without having to log on to Window
When this policy is enabled, the Shut Down command is available on the Windows logon screen.
When this policy is disabled, the option to shut down the computer does not appear on the Windows logon
Default on workstations: Enabled.

Default on servers: Disabled.
Windows XP SP2, Windows Server 2003 Shutdown: Clear virtual memory pagefile
This security setting determines whether the virtual memory pagefile is cleared when the system is shut do
Virtual memory support uses a system pagefile to swap pages of memory to disk when they are not used.
When this policy is enabled, it causes the system pagefile to be cleared upon clean shutdown. If you enab
Default: Disabled.
Windows XP SP2, Windows Server 2003 System cryptography: Use FIPS compliant algorithms for encryption, hashing and signing
This security setting determines if the Transport Layer Security/Secure Sockets Layer (TL/SS) Security Pro
For Encrypting File System Service (EFS), it supports only the Triple Data Encryption Standard (DES) enc
For Terminal Services, it supports only the Triple DES encryption algorithm for encrypting terminal service
Default: Disabled.
Note: The Federal Information Processing Standard (FIPS) 140-1 is a security implementation designed fo
Windows Server 2003 System Cryptography: Force strong key protection for user keys stored on the computer
This security setting determines if users' private keys require a password to be used.
The options are:
User input is not required when new keys are stored and used
User is prompted when the key is first used
User must enter a password each time they use a key
For more information, see Public key infrastructure.
Default: This policy is not defined.
Windows XP SP2, Windows Server 2003 System objects: Default owner for objects created by members of the Administrators group
Description
This security setting determines which users and groups have the authority to run volume maintenance tas
Default: Administrators group (on servers).

Windows XP SP2, Windows Server 2003 System objects: Require case insensitivity for non-Windows subsystems
This security setting determines whether case insensitivity is enforced for all subsystems. The Win32 subs
If this setting is enabled, case insensitivity is enforced for all directory objects, symbolic links, and IO objec
Default: Enabled.
Windows XP SP2, Windows Server 2003 System objects: Strengthen default permissions of internal system objects (e.g., Symbolic Links)
This security setting determines the strength of the default discretionary access control list (DACL) for obje
Active Directory maintains a global list of shared system resources, such as DOS device names, mutexes,
If this policy is enabled, the default DACL is stronger, allowing users who are not administrators to read sh
Default: Enabled.
Windows Server 2003 System settings: Optional subsystems
This security setting determines which subsystems are used to support your applications. With this securit
Default: POSIX.
Windows Server 2003 System settings: Use Certificate Rules on Windows Executables for Software Restriction Policies
This security setting determines if digital certificates are processed when a user or process attempts to run
When certificate rules are enabled, software restriction policies will check a certificate revocation list (CRL)
Default: Disabled.
Windows Vista, Longhorn User Account Control: Admin Approval Mode for the Built-in Administrator account
This security setting determines the behavior of Admin Approval mode for the Built-in Administrator accoun
The options are:
ò Enabled: The Built-in Administrator will logon in Admin Approval Mode. By default any operation that req
ò Disabled: The Built-in Administrator will logon in XP compatible mode and run all applications by default
Default: Disabled
Windows Vista, Longhorn User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode
This security setting determines the behavior of the elevation prompt for administrators
The options are:
ò Prompt for consent: An operation that requires elevation of privilege will prompt the Consent Admin to se
ò Prompt for credentials: An operation that requires elevation of privilege will prompt the Consent Admin to
ò Elevate without prompting: This option allows the Consent Admin to perform an operation that requires e
Default: Prompt for consent
Windows Vista, Longhorn User Account Control: Behavior of the elevation prompt for standard users
This security setting determines the behavior of the elevation prompt for standard users
The options are:
ò Prompt for credentials: An operation that requires elevation of privilege will prompt the user to enter an a
ò Automatically deny elevation requests: This option results in an access denied error message being retu
Default: Prompt for credentials (home) / Automatically deny elevation requests (enterprise)
Windows Vista, Longhorn User Account Control: Detect application installations and prompt for elevation
This security setting determines the behavior of application installation detection for the entire system.
The options are:
ò Enabled: Application installation packages that require an elevation of privilege to install will be heuristica
ò Disabled: Enterprises running standard users desktops that leverage delegated installation technologies
Default: Enabled (home) / Disabled (enterprise)
Windows Vista, Longhorn User Account Control: Only elevate executables that are signed and validated
This security setting will enforce PKI signature checks on any interactive application that requests elevatio
The options are:
ò Enabled: Enforces the PKI certificate chain validation of a given executable before it is permitted to run.
ò Disabled: Does not enforce PKI certificate chain validation before a given executable is permitted to run.
Default: Disabled
Windows Vista, Longhorn User Account Control: Only elevate UIAccess applications that are installed in secure locations
This security setting will enforce the requirement that applications that request execution with a UIAccess i
- à\Program Files\, including subdirectories

- à\Windows\system32\
- à\Program Files (x86)\, including subdirectories for 64 bit versions of Windows
Note: Windows enforces a PKI signature check on any interactive application that requests execution with
The options are:
ò Enabled: An application will only launch with UIAccess integrity if it resides in a secure location in the file
ò Disabled: An application will launch with UIAccess integrity even if it does not reside in a secure location
Default: Enabled
Windows Vista, Longhorn User Account Control: Run all users, including administrators, as standard users.
This security setting determines the behavior of all UAC policies for the entire system.
The options are:
ò Enabled: Admin Approval Mode and all other UAC policies are dependent on this option being enabled.
ò Disabled: Admin Approval Mode user type and all related UAC policies will be disabled. Note: the Secur
Default: Enabled
Windows Vista, Longhorn User Account Control: Switch to the secure desktop when prompting for elevation
This security setting determines whether the elevation request will prompt on the interactive users desktop
The options are:
ò Enabled: All elevation requests by default will go to the secure desktop
ò Disabled: All elevation requests will go to the interactive users desktop
Default: Enabled
Windows Vista, Longhorn User Account Control: Virtualizes file and registry write failures to per-user locations
This security setting enables the redirection of legacy application write failures to defined locations in both
Virtualization facilitates the running of pre-Vista (legacy) applications that historically failed to run as Stand
The options are:
ò Enabled: Facilitates the runtime redirection of application write failures to defined user locations for both
ò Disabled: Applications that write data to protected locations will simply fail as they did in previous version
Default : Enabled
Windows XP SP2, Windows Server 2003 Maximum application log size
This security setting specifies the maximum size of the application event log, which has a maximum of 4 G
Notes
Log file sizes must be a multiple of 64 KB. If you enter a value that is not a multiple of 64 KB, Event Viewe
This setting does not appear in the Local Computer Policy object.
Event Log size and log wrapping should be defined to match the business and security requirements you d
Default: For the Windows Server 2003 family, 16 MB; for Windows XP Professional Service Pack 1, 8 MB;
Windows XP SP2, Windows Server 2003 Maximum security log size
This security setting specifies the maximum size of the security event log, which has a maximum size of 4
Notes
Windows XP SP2, Windows Server 2003 Maximum system log size
This security setting specifies the maximum size of the system event log, which has a maximum size of 4 G
Notes
Windows XP SP2, Windows Server 2003 Prevent local guests group from accessing application log
This security setting determines if guests are prevented from accessing the application event log.
Notes
This security setting affects only computers running Windows 2000 and Windows XP.
Default: Enabled.
Windows XP SP2, Windows Server 2003 Prevent local guests group from accessing security log
This security setting determines if guests are prevented from accessing the security event log.
Notes
A user must possess the Manage auditing and security log user right to access the security log.
Default: Enabled.
Windows XP SP2, Windows Server 2003 Prevent local guests group from accessing system log
This security setting determines if guests are prevented from accessing the system event log.
Notes
Default: Enabled.
Windows XP SP2, Windows Server 2003 Retain application log
This security setting determines the number of days' worth of events to be retained for the application log i
Set this value only if you archive the log at scheduled intervals and you make sure that the Maximum appli
Notes
A user must possess the Manage auditing and security log user right to access the security log.
Default: None.
Windows XP SP2, Windows Server 2003 Retain security log
This security setting determines the number of days' worth of events to be retained for the security log if th
Set this value only if you archive the log at scheduled intervals and you make sure that the Maximum secu
Note: This setting does not appear in the Local Computer Policy object.
Default: None.
Windows XP SP2, Windows Server 2003 Retain system log
This security setting determines the number of days' worth of events to be retained for the system log if the
Set this value only if you archive the log at scheduled intervals and you make sure that the Maximum syste
Default: None.
Windows XP SP2, Windows Server 2003 Retention method for application log
This security setting determines the "wrapping" method for the application log.
If you do not archive the application log, in the Properties dialog box for this policy, select the Define this p
If you archive the log at scheduled intervals, in the Properties dialog box for this policy, select the Define th
If you must retain all the events in the log, in the Properties dialog box for this policy, select the Define this
Default: None.
Windows XP SP2, Windows Server 2003 Retention method for security log
This security setting determines the "wrapping" method for the security log.
If you do not archive the security log, in the Properties dialog box for this policy, select the Define this polic
Default: None.
Windows XP SP2, Windows Server 2003 Retention method for system log
This security setting determines the "wrapping" method for the system log.
If you do not archive the system log, in the Properties dialog box for this policy, select the Define this policy
Default: None.
Windows XP SP2, Windows Server 2003 Restricted Groups
This security setting allows an administrator to define two properties for security-sensitive groups ("restrict
The two properties are Members and Member Of. The Members list defines who belongs and who does no
When a Restricted Groups Policy is enforced, any current member of a restricted group that is not on the M
You can use Restricted Groups policy to control group membership. Using the policy, you can specify wha
For example, you can create a Restricted Groups policy to only allow specified users (for example, Alice a
There are two ways to apply Restricted Groups policy:
Define the policy in a security template, which will be applied during configuration on your local computer.
Define the setting on a Group Policy object (GPO) directly, which means that the policy goes into effect wit
Default: None specified.
Caution
If a Restricted Groups policy is defined and Group Policy is refreshed, any current member not on the Res
Notes
Restricted Groups should be used primarily to configure membership of local groups on workstation or me
An empty Members list means that the restricted group has no members; an empty Member Of list means
Windows XP SP2, Windows Server 2003 System Services security settings
Allows an administrator to define the startup mode (manual, automatic, or disabled) as well as the access
Default: Undefined.
Notes
If you choose to set system service startup to Automatic, perform adequate testing to verify that the service
For performance optimization, set unnecessary or unused services to Manual.
Windows XP SP2, Windows Server 2003 Registry security settings
Allows an administrator to define access permissions (on discretionary access control lists (DACLs)) and a
Default: Undefined.
Windows XP SP2, Windows Server 2003 File System security settings
Allows an administrator to define access permissions (on discretionary access control lists (DACLs)) and a
Default: Undefined.
Registry Settings Reboot Required
Password Policy security settings are not registry keys. No

Account Lockout Policy security settings are not registry keys. No
Kerberos Policy security settings are not registry keys. No
Audit Policy security settings are not registry keys. No


User Rights security settings are not registry keys No







Not a registry key No
MACHINE\System\CurrentControlSet\Control\Lsa\LimitBlankPasswordUse
No
MACHINE\System\CurrentControlSet\Control\Lsa\AuditBaseObjects Yes
MACHINE\System\CurrentControlSet\Control\Lsa\FullPrivilegeAuditingYes
MACHINE\System\CurrentControlSet\Control\Lsa\FullPrivilegeAuditingNo
MACHINE\System\CurrentControlSet\Control\Lsa\SCENoApplyLegacyAuditPolicy
No
MACHINE\System\CurrentControlSet\Control\Lsa\CrashOnAuditFail Yes
MACHINE\System\CurrentControlSet\Control\Lsa\CrashOnAuditFail No
MACHINE\SOFTWARE\policies\Microsoft\windows NT\DCOM\MachineAccessRestriction
No
MACHINE\SOFTWARE\policies\Microsoft\windows NT\DCOM\MachineLaunchRestriction
No
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\UndockWithoutLogon
No
MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\AllocateDASD
No
MACHINE\System\CurrentControlSet\Control\Print\Providers\LanMan No
Print Services\Servers\AddPrinterDrivers
MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\AllocateCDRoms
No
MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\AllocateFloppies
No
MACHINE\Software\Microsoft\Driver Signing\Policy No
MACHINE\System\CurrentControlSet\Control\Lsa\SubmitControl Yes
MACHINE\System\CurrentControlSet\Services\NTDS\Parameters\LDAPServerIntegrity
No
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RefusePasswordChange
No
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RequireSignOrSeal
No
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\SealSecureChannel
No
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\SignSecureChannel
No
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\DisablePasswordChange
No
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\MaximumPasswordAge
No
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RequireStrongKey
No
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\DontDisplayLastUserName
No
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableCAD
No
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\LegalNoticeText
No
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\LegalNoticeCaption
No
MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\CachedLogonsCount
No
MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\PasswordExpiryWarning
No
MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\ForceUnlockLogon
No
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\ScForceOption
No
MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\ScRemoveOption
No
MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\RequireSecuritySignature
Yes
MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\EnableSecuritySignature
Yes
MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\EnablePlainTextPassword
Yes
MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\AutoDisconnect
Yes
MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\RequireSecuritySignature
Yes
MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\EnableSecuritySignature
No
MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\EnableForcedLogOff
No
MACHINE\System\CurrentControlSet\Control\Lsa\RestrictAnonymousSAM
No
MACHINE\System\CurrentControlSet\Control\Lsa\RestrictAnonymous No
MACHINE\System\CurrentControlSet\Control\Lsa\DisableDomainCreds
No
MACHINE\System\CurrentControlSet\Control\Lsa\EveryoneIncludesAnonymous
No
MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\NullSessionPipes
Yes
MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths\Machine
No
MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedExactPaths\Machine
No
MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths\Machine
No
MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\NullSessionShares
Yes
MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\NullSessionShares
Yes
MACHINE\System\CurrentControlSet\Control\Lsa\ForceGuest No
MACHINE\System\CurrentControlSet\Control\Lsa\NoLMHash No
MACHINE\System\CurrentControlSet\Control\Lsa\LmCompatibilityLevel
No
MACHINE\System\CurrentControlSet\Services\LDAP\LDAPClientIntegrity
Yes
MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\NTLMMinClientSec
No
MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\NTLMMinServerSec
No
MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Setup\RecoveryConsole\SecurityLevel
No
MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Setup\RecoveryConsole\SetCommand
No
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\ShutdownWithoutLogon
No
MACHINE\System\CurrentControlSet\Control\Session Manager\Memory
YesManagement\ClearPageFileAtShutdown
MACHINE\System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicyNo
MACHINE\Software\Policies\Microsoft\Cryptography\ForceKeyProtection
Yes
MACHINE\System\CurrentControlSet\Control\Lsa\NoDefaultAdminOwner
No
MACHINE\System\CurrentControlSet\Control\Session Manager\Kernel\ObCaseInsensitive
Yes
MACHINE\System\CurrentControlSet\Control\Session Manager\ProtectionMode
Yes
MACHINE\System\CurrentControlSet\Control\Session Manager\SubSystems\optional
Yes
MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\AuthenticodeEnabled
No
GP Not reg setting No

GP Not reg setting Yes

Event Log security settings are not registry keys. No


Restricted Groups policy settings are not registry keys. No
System Services policy settings are not registry keys. No
not a registry key No
File System policy settings are not registry keys. No

Group Policy Settings - Vista

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Group Policy Settings - Vista

Uploaded by

Copyright:

Available Formats

Group Policy Settings Reference

Computer Configuration\Windows Settings\Account Policies\Password Policy

Computer Configuration\Windows Settings\Account Policies\Password Policy

Computer Configuration\Windows Settings\Account Policies\Password Policy

Computer Configuration\Windows Settings\Account Policies\Password Policy

Computer Configuration\Windows Settings\Account Policies\Password Policy

Computer Configuration\Windows Settings\Account Policies\Account Lockout Policy

Computer Configuration\Windows Settings\Account Policies\Account Lockout Policy

Computer Configuration\Windows Settings\Local Policies\Kerberos Policy

Computer Configuration\Windows Settings\Local Policies\Kerberos Policy

Computer Configuration\Windows Settings\Local Policies\Kerberos Policy

Computer Configuration\Windows Settings\Local Policies\Kerberos Policy

Computer Configuration\Windows Settings\Local Policies\Kerberos Policy

Computer Configuration\Windows Settings\Local Policies\Audit Policy

Computer Configuration\Windows Settings\Local Policies\Audit Policy

Computer Configuration\Windows Settings\Local Policies\Audit Policy

Computer Configuration\Windows Settings\Local Policies\Audit Policy

Computer Configuration\Windows Settings\Local Policies\Audit Policy

Computer Configuration\Windows Settings\Local Policies\Audit Policy

Computer Configuration\Windows Settings\Local Policies\Audit Policy

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\Security Options

Computer Configuration\Windows Settings\Local Policies\Security Options

Computer Configuration\Windows Settings\Local Policies\Security Options

Computer Configuration\Windows Settings\Local Policies\Security Options

Computer Configuration\Windows Settings\Local Policies\Security Options

Computer Configuration\Windows Settings\Local Policies\Security Options

Computer Configuration\Windows Settings\Local Policies\Security Options