Group Policy Settings - Vista

Group Policy Settings ReferenceWindows Vista®

This spreadsheet lists the policy settings for computer and user configurations included in the administrative template files (admx/adml) delivered with

and Windows 2000. These files are used to expose policy settings when you edit Group Policy objects (GPOs) using Group Policy Object Editor (also known as GPEdit).

You can use the filtering capabilities included in this spreadsheet to view a specific subset of data based on one value or a combination of values that are available

To view a specific subset of data, click the drop-down arrow in the column heading of cells that contain the value or combination of values on which you want to filter,and then click the desired value in the drop-down list. For example, to view a subset of policy settings that are available for Windows Vista in the “All” worksheet,

What's NewThe spreadsheet contains three new columns. These columns provide more information about each policy setting's behavior regarding reboots, logoffs, and schema extensions.These columns are:

(detailed documentation for schema changes will be available online after Microsoft releases Windows Vista).

Legal Notice

The information contained in this document represents the current view of Microsoft Corporation on the issues discussed as of the date of publication.

Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot

guarantee the accuracy of any information presented after the date of publication.

The information contained in this document relates to a prerelease software product, which may be substantially modified before its first commercial release.

Accordingly, the information may not accurately describe or reflect the software product when first commercially released.

This document is provided for informational purposes only, and Microsoft makes no warranties, express or implied, with respect to this document or the information contained in it.

This is a preliminary document and may be changed substantially prior to final commercial release of the software described herein.

This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, AS TO THE INFORMATION IN THIS DOCUMENT.

Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in

or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording or otherwise), or for

any purpose, without the express written permission of Microsoft Corp.

Microsoft may have patents, patent applications, trademarks, copyrights or other intellectual property rights covering subject matter in this document.

Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these

patents, trademarks, copyrights or other intellectual property

Unless otherwise noted, the example companies, organizations, products, domain names, e-mail addresses, logos, people, places and events depicted herein are fictitious, and

no association with any real company, organization, product, domain name, e-mail address, logo, person, place or event is intended or should be inferred

© 2008 Microsoft Corp. All rights reserved.

The names of actual companies and products mentioned herein may be the trademarks of their respective owners.

Windows Vista (RTM build 6000). The policy settings included in this spreadsheet cover Windows Vista , Microsoft Windows Server 2003, Windows XP Professional,

in one or more of the columns. In addition, you can click Custom in the drop-down list of any of the column headings to add additional filtering criteria within that column.

click the drop-down arrow next to Supported On, and then click At least Windows Vista.

Reboot Required: A "Yes" in this column means Windows requires a restart before it applies the described policy setting.Logoff Required: A "Yes" in this column means Windows requires the user to log off and log on again before it applies the described policy setting.Active Directory Schema or Domain Requirements: A "Yes" in this column means you extend your Active Directory Schema before deploying this policy setting

Microsoft, the Windows logo, Windows, Windows Media, Active Directory and Windows NT are either registered trademarks or trademarks of Microsoft Corp. in the United States and/or other countries.

File name Scope

ActiveXInstallService.admx Machine

AddRemovePrograms.admx User











AppCompat.admx User

AppCompat.admx Machine




AppCompat.admx User


AttachmentManager.admx User








AutoPlay.admx machine

AutoPlay.admx user


AutoPlay.admx user


AutoPlay.admx user

Bits.admx Machine

Bits.admx Machine

Bits.admx Machine

Bits.admx Machine

Bits.admx Machine

Bits.admx Machine

Bits.admx Machine

Bits.admx Machine

Bits.admx Machine

Bits.admx Machine

Bits.admx Machine

Bits.admx Machine

Bits.admx Machine

CaptureWizard.admx User

CaptureWizard.admx Machine

CEIPEnable.admx Machine

CEIPEnable.admx Machine

CipherSuiteOrder.admx Machine

COM.admx User

COM.admx Machine

Conf.admx User

Conf.admx User

Conf.admx User

Conf.admx User

Conf.admx User

Conf.admx User

Conf.admx User

Conf.admx User

Conf.admx User

Conf.admx User

Conf.admx User

Conf.admx User

Conf.admx User

Conf.admx User

Conf.admx User

Conf.admx User

Conf.admx User

Conf.admx Machine

Conf.admx User

Conf.admx User

Conf.admx User

Conf.admx User

Conf.admx User

Conf.admx User

Conf.admx User

Conf.admx User

Conf.admx User

Conf.admx User

Conf.admx User

Conf.admx User

Conf.admx User

Conf.admx User

Conf.admx User

Conf.admx User

ControlPanel.admx User




ControlPanelDisplay.admx User















Cpls.admx Machine

CredentialProviders.admx Machine

CredentialProviders.admx Machine

CredSsp.admx Machine









CredUI.admx Machine

CredUI.admx Machine

CtrlAltDel.admx User




DCOM.admx Machine

DCOM.admx Machine

Desktop.admx User

Desktop.admx User

Desktop.admx User

Desktop.admx User

Desktop.admx User

Desktop.admx User

Desktop.admx User

Desktop.admx User

Desktop.admx User

Desktop.admx User

Desktop.admx User

Desktop.admx User

Desktop.admx User

Desktop.admx User

Desktop.admx User

Desktop.admx User

Desktop.admx User

Desktop.admx User

Desktop.admx User

Desktop.admx User

Desktop.admx User

Desktop.admx User

Desktop.admx User

Desktop.admx User

Desktop.admx User

Desktop.admx User

Desktop.admx User

Desktop.admx User

Desktop.admx User

DeviceInstallation.admx Machine
















DeviceInstallation.admx User




DFS.admx Machine

DigitalLocker.admx User

DigitalLocker.admx Machine

DiskDiagnostic.admx Machine

DiskDiagnostic.admx Machine

DiskNVCache.admx Machine




DiskQuota.admx Machine






DistributedLinkTracking.admx Machine

DnsClient.admx Machine















DWM.admx User

DWM.admx Machine

DWM.admx User

DWM.admx Machine

DWM.admx User

DWM.admx Machine

DWM.admx User

DWM.admx Machine

DWM.admx User

DWM.admx Machine

EncryptFilesonMove.admx Machine

ErrorReporting.admx Machine


ErrorReporting.admx User























EventLog.admx Machine





















EventViewer.admx Machine



Explorer.admx User

Explorer.admx User

Explorer.admx User

Explorer.admx Machine

FileRecovery.admx Machine

FileSys.admx Machine

FolderRedirection.admx User

FolderRedirection.admx User

FolderRedirection.admx Machine

FramePanes.admx User

FramePanes.admx User

GameExplorer.admx Machine

GameExplorer.admx Machine

Globalization.admx User

Globalization.admx Machine

















GroupPolicy.admx Machine














GroupPolicy.admx User

















Help.admx Machine

Help.admx User

Help.admx Machine

HelpAndSupport.admx Machine

HelpAndSupport.admx Machine

HelpAndSupport.admx User



HotStart.admx User

HotStart.admx Machine

ICM.admx User

ICM.admx Machine

ICM.admx Machine

ICM.admx User

ICM.admx Machine

ICM.admx User

ICM.admx Machine

ICM.admx Machine

ICM.admx Machine

ICM.admx Machine

ICM.admx Machine

ICM.admx Machine

ICM.admx Machine

ICM.admx Machine

ICM.admx Machine

ICM.admx Machine

ICM.admx User

ICM.admx Machine

ICM.admx User

ICM.admx Machine

ICM.admx User

ICM.admx Machine

ICM.admx User

ICM.admx Machine

ICM.admx User

ICM.admx Machine

ICM.admx Machine

IIS.admx Machine

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx Machine

inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User


inetres.admx User

inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User


inetres.admx User

inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User



inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User

inetres.admx User


inetres.admx User


inetres.admx User



inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User

inetres.admx User


inetres.admx User


inetres.admx User



inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User

inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User



inetres.admx User


inetres.admx User


inetres.admx User

inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User


inetres.admx User

inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User

inetres.admx User


inetres.admx User

inetres.admx User


inetres.admx User


inetres.admx User

inetres.admx User


inetres.admx User

inetres.admx User

inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User



inetres.admx User


inetres.admx User



inetres.admx User


inetres.admx User



inetres.admx User


inetres.admx User

inetres.admx User


inetres.admx User

inetres.admx User


inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User


inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User


inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User


inetres.admx User


inetres.admx User

inetres.admx User


inetres.admx User

inetres.admx User

inetres.admx User


inetres.admx User

inetres.admx User

inetres.admx User





inetres.admx User


inetres.admx User


inetres.admx User



inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User



inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User

inetres.admx User



inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User

inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User



inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User

inetres.admx User



inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User

inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User



inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User

inetres.admx User



inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User

inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User


inetres.admx User

inetres.admx User


inetres.admx User

inetres.admx User


inetres.admx User

inetres.admx User

inetres.admx User



InkWatson.admx User

InkWatson.admx Machine

InputPersonalization.admx User

InputPersonalization.admx Machine

InputPersonalization.admx User

InputPersonalization.admx Machine

iSCSI.admx Machine

iSCSI.admx Machine

iSCSI.admx Machine

iSCSI.admx Machine

iSCSI.admx Machine

iSCSI.admx Machine

iSCSI.admx Machine

iSCSI.admx Machine

iSCSI.admx Machine

iSCSI.admx Machine

Kerberos.admx Machine



LeakDiagnostic.admx Machine

LinkLayerTopologyDiscovery.admx Machine

LinkLayerTopologyDiscovery.admx Machine

Logon.admx User

Logon.admx Machine

Logon.admx User

Logon.admx Machine

Logon.admx Machine

Logon.admx Machine

Logon.admx User

Logon.admx Machine

Logon.admx Machine

Logon.admx Machine

Logon.admx User

Logon.admx Machine

Logon.admx Machine

Logon.admx Machine

MediaCenter.admx User

MediaCenter.admx Machine

MMC.admx User

MMC.admx User

MMC.admx User

MMC.admx User

MMC.admx User

MMCSnapins.admx User







































MobilePCMobilityCenter.admx User

MobilePCMobilityCenter.admx Machine

MobilePCPresentationSettings.admx User

MobilePCPresentationSettings.admx Machine

MovieMaker.admx User

MovieMaker.admx Machine

MovieMaker.admx User

MovieMaker.admx Machine

MovieMaker.admx machine

MovieMaker.admx user

MovieMaker.admx machine

MovieMaker.admx user

MSDT.admx Machine

MSDT.admx Machine

MSI.admx Machine

MSI.admx Machine

MSI.admx Machine

MSI.admx User

MSI.admx Machine

MSI.admx Machine

MSI.admx Machine

MSI.admx Machine

MSI.admx Machine

MSI.admx User

MSI.admx Machine

MSI.admx Machine

MSI.admx User

MSI.admx Machine

MSI.admx Machine

MSI.admx Machine

MSI.admx Machine

MSI.admx Machine

MSI.admx Machine

MSI.admx Machine

MSI.admx Machine

MSI.admx Machine

MSI.admx Machine

MSI.admx Machine

MSI.admx User

MSI.admx Machine

Netlogon.admx Machine




























NetworkConnections.admx User



NetworkConnections.admx Machine






















NetworkProjection.admx User

NetworkProjection.admx Machine

OfflineFiles.admx Machine

OfflineFiles.admx User







































P2P-pnrp.admx Machine








ParentalControls.admx Machine

pca.admx Machine

pca.admx Machine

pca.admx Machine

pca.admx Machine

pca.admx Machine

PenTraining.admx User

PenTraining.admx Machine

PerfCenterCPL.admx machine

PerfCenterCPL.admx user





PerformanceDiagnostics.admx Machine




Power.admx Machine

Power.admx Machine

Power.admx Machine

Power.admx Machine

Power.admx Machine

Power.admx Machine

Power.admx Machine

Power.admx Machine

Power.admx Machine

Power.admx Machine

Power.admx Machine

Power.admx Machine

Power.admx Machine

Power.admx Machine

Power.admx Machine

Power.admx Machine

Power.admx Machine

Power.admx User

Power.admx Machine

Power.admx Machine

Power.admx Machine

Power.admx Machine

Power.admx Machine

Power.admx Machine

Power.admx Machine

Power.admx Machine

Power.admx Machine

Power.admx Machine

Power.admx Machine

Power.admx Machine

Power.admx Machine

Power.admx Machine

Power.admx Machine

Power.admx Machine

Power.admx Machine

PreviousVersions.admx User

PreviousVersions.admx Machine











Printing.admx Machine




Printing.admx User



Printing.admx User


Printing.admx User

Printing.admx User


Printing.admx User

Printing.admx User



Printing.admx User

Printing.admx User










Programs.admx User

Programs.admx User

Programs.admx User

Programs.admx User

Programs.admx User

Programs.admx User

Programs.admx User

QOS.admx Machine

QOS.admx Machine

QOS.admx Machine

QOS.admx Machine

QOS.admx Machine

QOS.admx Machine

QOS.admx Machine

QOS.admx Machine

QOS.admx Machine

QOS.admx Machine

QOS.admx Machine

QOS.admx Machine

QOS.admx Machine

QOS.admx Machine

QOS.admx Machine

QOS.admx Machine

QOS.admx Machine

QOS.admx Machine

QOS.admx Machine

Radar.admx Machine

Reliability.admx Machine




RemoteAssistance.admx Machine






RemovableStorage.admx User

RemovableStorage.admx Machine




























RPC.admx Machine

RPC.admx Machine

RPC.admx Machine

RPC.admx Machine

RPC.admx Machine

RPC.admx Machine

Scripts.admx Machine

Scripts.admx User

Scripts.admx User

Scripts.admx User


Scripts.admx User





Search.admx Machine

Search.admx Machine

Search.admx Machine

Search.admx Machine

Search.admx Machine

Search.admx Machine

Search.admx Machine

Search.admx Machine

Search.admx Machine

Securitycenter.admx Machine

Setup.admx Machine

Setup.admx Machine

SharedFolders.admx User

SharedFolders.admx User

Sharing.admx User

Shell-CommandPrompt-RegEditTools.admx User




ShellWelcomeCenter.admx User

Sidebar.admx User

Sidebar.admx Machine

Sidebar.admx User


Sidebar.admx User


Sidebar.admx User


Sideshow.admx User

Sideshow.admx Machine

Sideshow.admx User


Sideshow.admx User


Sideshow.admx User


Smartcard.admx Machine












Snmp.admx Machine

Snmp.admx Machine

Snmp.admx Machine

SoundRec.admx User

SoundRec.admx Machine

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

StartMenu.admx User

SystemResourceManager.admx Machine




SystemRestore.admx Machine

SystemRestore.admx Machine

TabletPCInputPanel.admx User

TabletPCInputPanel.admx Machine















TabletShell.admx User

TabletShell.admx Machine























Taskbar.admx User

Taskbar.admx User

Taskbar.admx User

Taskbar.admx User

Taskbar.admx User

Taskbar.admx User

Taskbar.admx User

Taskbar.admx User

Taskbar.admx User

Taskbar.admx User

TaskScheduler.admx User

TaskScheduler.admx Machine













TerminalServer.admx User

TerminalServer.admx Machine




























































Thumbnails.admx User

Thumbnails.admx User

TouchInput.admx User

TouchInput.admx Machine

TPM.admx Machine

TPM.admx Machine

TPM.admx Machine

TPM.admx Machine

UserDataBackup.admx User

UserDataBackup.admx Machine













UserProfiles.admx Machine


UserProfiles.admx User



















VolumeEncryption.admx Machine







W32Time.admx Machine




WDI.admx Machine

WDI.admx Machine

WinCal.admx User

WinCal.admx Machine

WindowsBackup.admx Machine





WindowsCollaboration.admx User

WindowsCollaboration.admx Machine

WindowsCollaboration.admx User

WindowsCollaboration.admx Machine

WindowsColorSystem.admx User

WindowsColorSystem.admx Machine

WindowsConnectNow.admx User

WindowsConnectNow.admx Machine

WindowsConnectNow.admx Machine

WindowsDefender.admx Machine








WindowsExplorer.admx User

































WindowsExplorer.admx Machine

WindowsFileProtection.admx Machine




WindowsFirewall.admx Machine





























WindowsMail.admx User

WindowsMail.admx Machine

WindowsMail.admx User

WindowsMail.admx Machine

WindowsMediaDRM.admx Machine

WindowsMediaPlayer.admx Machine



WindowsMediaPlayer.admx User


















WindowsMessenger.admx Machine

WindowsMessenger.admx User

WindowsMessenger.admx Machine

WindowsMessenger.admx User

WindowsRemoteManagement.admx Machine











WindowsRemoteShell.admx Machine







WindowsUpdate.admx User

WindowsUpdate.admx machine

WindowsUpdate.admx user


WindowsUpdate.admx Machine














WinInit.admx Machine

WinInit.admx Machine

WinLogon.admx Machine

WinLogon.admx User

WinLogon.admx User

WinLogon.admx Machine

WinLogon.admx machine

WinLogon.admx user

WinLogon.admx User

Winsrv.admx Machine

WordWheel.admx User

Policy Path

Windows Components\ActiveX Installer Service

Control Panel\Add or Remove Programs











Windows Components\Application Compatibility







Windows Components\Attachment Manager








Windows Components\AutoPlay Policies






Network\Background Intelligent Transfer Service (BITS)













Windows Components\Import Video

Windows Components\Import Video

Windows Components\Windows Customer Experience Improvement Program

Windows Components\Windows Customer Experience Improvement Program

Network\SSL Configuration Settings

System

System

Windows Components etMeeting\Application Sharing







Windows Components etMeeting\Audio & Video






Windows Components etMeeting
















Windows Components etMeeting\Options Page





Control Panel

Control Panel

Control Panel

Control Panel

Control Panel\Display










Control Panel\Display\Desktop Themes





Control Panel\User Accounts

logon:Logon

logon:Logon

System\Credentials Delegation









Windows Components\Credential User Interface

Windows Components\Credential User Interface

System\Ctrl+Alt+Del Options




System\Distributed COM\Application Compatibility Settings

System\Distributed COM\Application Compatibility Settings

Desktop\Desktop

Desktop\Desktop

Desktop\Desktop

Desktop\Desktop

Desktop\Desktop

Desktop\Desktop

Desktop\Desktop

Desktop\Desktop

Desktop\Desktop

Desktop\Desktop

Desktop\Desktop

Desktop\Active Directory



Desktop

Desktop

Desktop

Desktop

Desktop

Desktop

Desktop

Desktop

Desktop

Desktop

Desktop

Desktop

Desktop

Desktop

Desktop

System\Device Installation






System\Device Installation\Device Installation Restrictions









System\Driver Installation





Network

Windows Components\Digital Locker

Windows Components\Digital Locker

Troubleshooting and Diagnostics\Disk Diagnostic

Troubleshooting and Diagnostics\Disk Diagnostic

System\Disk NV Cache




System\Disk Quotas

System\Disk Quotas

System\Disk Quotas

System\Disk Quotas

System\Disk Quotas

System\Disk Quotas

System

Network\DNS Client

Network\DNS Client

Network\DNS Client

Network\DNS Client

Network\DNS Client

Network\DNS Client

Network\DNS Client

Network\DNS Client

Network\DNS Client

Network\DNS Client

Network\DNS Client

Network\DNS Client

Network\DNS Client

Network\DNS Client

Network\DNS Client

Windows Components\Desktop Window Manager






Windows Components\Desktop Window Manager\Window Frame Coloring




System

Windows Components\Windows Error Reporting








Windows Components\Windows Error Reporting\Advanced Error Reporting Settings











Windows Components\Windows Error Reporting\Consent






Windows Components\Event Log Service\Application





Windows Components\Event Log Service\Security





Windows Components\Event Log Service\Setup






Windows Components\Event Log Service\System





Windows Components\Event Viewer



Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Troubleshooting and Diagnostics\Corrupted File Recovery

System TFS Filesystem

System\Folder Redirection



Windows Explorer\Explorer Frame Pane

Windows Explorer\Explorer Frame Pane

Windows Components\Game Explorer

Windows Components\Game Explorer

System\Locale Services









Control Panel\Regional and Language Options








System

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System

System

System

Windows Components\Online Assistance

Windows Components\Online Assistance

Internet Communication settings



System\Windows HotStart

System\Windows HotStart

Internet Communication Management

Internet Communication Management


























Windows Components\Internet Information Services

Windows Components\Internet Explorer\Administrator Approved Controls












Windows Components\Internet Explorer\Internet Control Panel\Advanced Page
































Windows Components\Internet Explorer\Internet Settings\AutoComplete

Windows Components\Internet Explorer\Internet Settings\AutoComplete

Windows Components\Internet Explorer\Internet Control Panel\Advanced settings\Browsing






Windows Components\Internet Explorer\Offline Pages











Windows Components\Internet Explorer\Corporate Settings\Code Download

Windows Components\Internet Explorer\Internet Settings\Display settings

Windows Components\Internet Explorer\Internet Control Panel




















Windows Components\Internet Explorer\Internet Settings\URL Encoding

Windows Components\Internet Explorer\Internet Settings\Display settings\General Colors



Windows Components\Internet Explorer\Internet Settings\Component Updates\Help Menu > About Internet Explorer

Windows Components\Internet Explorer\Internet Control Panel\Advanced settings\Internet Connection Wizard Settings

Windows Components\Internet Explorer\Security Features\Add-on Management








Windows Components\Internet Explorer\Security Features\Binary Behavior Security Restriction








Windows Components\Internet Explorer\Security Features\Consistent Mime Handling






Windows Components\Internet Explorer\Security Features\Information Bar






Windows Components\Internet Explorer\Security Features\Local Machine Zone Lockdown Security






Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Feature






Windows Components\Internet Explorer\Security Features\MK Protocol Security Restriction






Windows Components\Internet Explorer\Security Features etwork Protocol Lockdown






Windows Components\Internet Explorer\Security Features\Object Caching Protection






Windows Components\Internet Explorer\Security Features\Protection From Zone Elevation






Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install






Windows Components\Internet Explorer\Security Features\Restrict File Download






Windows Components\Internet Explorer\Security Features\Scripted Window Security Restrictions






Windows Components\Internet Explorer\Security Features etwork Protocol Lockdown\Restricted Protocols Per Security Zone










Windows Components\Internet Explorer










































































































Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone
























Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Internet Zone


















































































Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intranet Zone
























Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Intranet Zone


















































































Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local Machine Zone




















































































Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Local Machine Zone






















Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restricted Sites Zone




















































































Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Restricted Sites Zone






















Windows Components\Internet Explorer\Internet Control Panel\Security Page
































Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trusted Sites Zone




















































































Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locked-Down Trusted Sites Zone






















Windows Components\Internet Explorer\Internet Settings\Display settings\Link Colors




Windows Components\Internet Explorer\Browser menus
















Windows Components\Internet Explorer\Internet Control Panel\Advanced settings\Multimedia




Windows Components\Internet Explorer\Persistence Behavior





Windows Components\Internet Explorer\Internet Control Panel\Advanced settings\Printing

Windows Components\RSS Feeds










Windows Components\Internet Explorer\Application Compatibility\Enable cut, copy or paste operations from the clipboard i






Windows Components\Internet Explorer\Internet Control Panel\Advanced settings\Searching

Windows Components\Internet Explorer\Security Features

Windows Components\Internet Explorer\Security Features

Windows Components\Internet Explorer\Internet Control Panel\Advanced settings\Signup Settings

Windows Components\Internet Explorer\Toolbars





Windows Components\Internet Explorer\Internet Settings\Component Updates\Periodic check for updates to Internet Explorer an

Windows Components\Internet Explorer\Internet Settings\Component Updates\Periodic check for updates to Internet Explorer an



Tablet PC\Handwriting personalization




System\iSCSI\iSCSI Target Discovery




System\iSCSI\General iSCSI

System\iSCSI\General iSCSI

System\iSCSI\iSCSI Security




System\Kerberos

System\Kerberos

System\Kerberos

Troubleshooting and Diagnostics\Windows Memory Leak Diagnosis

Network\Link-Layer Topology Discovery

Network\Link-Layer Topology Discovery

System\Logon

System\Logon

System\Logon

System\Logon

System\Logon

System\Logon

System\Logon

System\Logon

System\Logon

System

System

System

System\Logon

System\Logon

Windows Components\Windows Media Center

Windows Components\Windows Media Center

Windows Components\Microsoft Management Console

Windows Components\Microsoft Management Console

Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins\Extension snap-ins

Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins

Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins

mmc:MMC_ExtensionSnapins





























mmc:MMC_RESTRICT\Group Policy




mmc:MMC_RESTRICT\Group Policy\Group Policy snap-in extensions















mmc:MMC_RESTRICT\Group Policy\Resultant Set of Policy snap-in extensions









mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

Windows Components\Windows Mobility Center

Windows Components\Windows Mobility Center

Windows Components\Presentation Settings

Windows Components\Presentation Settings

Windows Components\Windows Movie Maker

Windows Components\Windows Movie Maker







Troubleshooting and Diagnostics\Microsoft Support Diagnostic Tool

Troubleshooting and Diagnostics\Microsoft Support Diagnostic Tool

Windows Components\Windows Installer


























System et Logon

System et Logon

System et Logon

System et Logon

System et Logon

System et Logon

System et Logon

System et Logon

System et Logon

System et Logon

System et Logon

System et Logon

System et Logon

System et Logon

System et Logon\DC Locator DNS Records














Network etwork Connections

























Windows Components etwork Projector

Windows Components etwork Projector

Network\Offline Files








































Network\Microsoft Peer-to-Peer Networking Services

Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Global Clouds

Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Global Clouds

Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Link-Local Clouds

Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Link-Local Clouds

Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Site-Local Clouds

Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protocol\Site-Local Clouds

Network\Microsoft Peer-to-Peer Networking Services

Windows Components\Parental Controls

Troubleshooting and Diagnostics\Application Compatibility Diagnostics





Tablet PC\Tablet PC Pen Training

Tablet PC\Tablet PC Pen Training

System\Performance Control Panel






Troubleshooting and Diagnostics\Windows Boot Performance Diagnostics

Troubleshooting and Diagnostics\Windows Standby/Resume Performance Diagnostics

Troubleshooting and Diagnostics\Windows System Responsiveness Performance Diagnostics

Troubleshooting and Diagnostics\Windows Shutdown Performance Diagnostics

System\Power Management otification Settings





System\Power Management\Button Settings








System\Power Management\Hard Disk Settings

System\Power Management\Hard Disk Settings

System\Power Management



System\Power Management\Sleep Settings










System\Power Management\Video and Display Settings






System

Windows Explorer\Previous Versions












Printers

Printers

Printers

Printers

Control Panel\Printers

Printers

Printers


Printers



Printers



Printers

Printers



Printers

Printers

Printers

Printers

Printers

Printers

Printers

Printers

Printers

Control Panel\Programs







Network\QoS Packet Scheduler\DSCP value of conforming packets





Network\QoS Packet Scheduler\DSCP value of non-conforming packets





Network\QoS Packet Scheduler



Network\QoS Packet Scheduler\Layer-2 priority value






Troubleshooting and Diagnostics\Windows Resource Exhaustion Detection and Resolution

System

wer:CAT_WindowsErrorReportingAdvanced

System

System

System\Remote Assistance






System\Removable Storage Access





























System\Remote Procedure Call






System\Scripts

System\Scripts

System\Scripts

System\Scripts

System\Scripts

System\Scripts

System\Scripts

System\Scripts

System\Scripts

System\Scripts

Windows Components\Search









Windows Components\Security Center

System

System

Shared Folders

Shared Folders

Windows Components etwork Sharing

System

System

System

System

Windows Explorer

Windows Components\Windows Sidebar








Windows Components\Windows SideShow








Windows Components\Smart Card












Network\SNMP

Network\SNMP

Network\SNMP

Windows Components\Sound Recorder

Windows Components\Sound Recorder

Start Menu and Taskbar





















































Windows Components\Windows System Resource Manager




System\System Restore

System\System Restore

Tablet PC\Input Panel
















Tablet PC\Accessories










Tablet PC\Cursors

Tablet PC\Cursors

Tablet PC\Hardware Buttons








Tablet PC\Pen Flicks Learning

Tablet PC\Pen Flicks Learning

Tablet PC\Pen UX Behaviors

Tablet PC\Pen UX Behaviors











Windows Components\Task Scheduler














Windows Components\Terminal Services\Remote Desktop Connection Client

Windows Components\Terminal Services\Remote Desktop Connection Client

Windows Components\Terminal Services\Terminal Server\Security





Windows Components\Terminal Services\TS Gateway



Windows Components\Terminal Services\Terminal Server\Connections

Windows Components\Terminal Services\Terminal Server\Remote Session Environment





Windows Components\Terminal Services\Terminal Server\Licensing













Windows Components\Terminal Services\Terminal Server\Profiles

Windows Components\Terminal Services\Terminal Server\Profiles

Windows Components\Terminal Services\TS Licensing

Windows Components\Terminal Services\TS Licensing

Windows Components\Terminal Services\Terminal Server\Device and Resource Redirection



Windows Components\Terminal Services\Terminal Server\Printer Redirection









Windows Components\Terminal Services\Terminal Server\Session Directory




Windows Components\Terminal Services\Terminal Server\Session Time Limits










Windows Components\Terminal Services\Terminal Server\Temporary folders

Windows Components\Terminal Services\Terminal Server\Temporary folders

Windows Explorer

Windows Explorer

Tablet PC\Touch Input

Tablet PC\Touch Input

System\Trusted Platform Module Services




Windows Components\Backup\Client














System\User Profiles





















Windows Components\BitLocker Drive Encryption







System\Windows Time Service

System\Windows Time Service\Time Providers



Troubleshooting and Diagnostics

Troubleshooting and Diagnostics

Windows Components\Windows Calendar

Windows Components\Windows Calendar

backup:Backup\Server





Windows Components\Windows Meeting Space




Windows Components\Windows Color System

Windows Components\Windows Color System

Network\Windows Connect Now



Windows Components\Windows Defender








Windows Explorer\Common Open File Dialog




Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

System\Windows File Protection




netcon:NetworkConnections\Windows Firewall

netcon:NetworkConnections\Windows Firewall\Domain Profile














netcon:NetworkConnections\Windows Firewall\Standard Profile














Windows Components\Windows Mail




Windows Components\Windows Media Digital Rights Management

Windows Components\Windows Media Player









Windows Components\Windows Media Player\Playback

Windows Components\Windows Media Player\Playback

Windows Components\Windows Media Player\User Interface




Windows Components\Windows Media Player etworking






Windows Components\Windows Messenger




Windows Components\Windows Remote Management (WinRM)\WinRM Client






Windows Components\Windows Remote Management (WinRM)\WinRM Service





Windows Components\Windows Remote Shell







System

Windows Components\Windows Update

















Windows Components\Shutdown Options

Windows Components\Shutdown Options

Windows Components\Windows Logon Options






System

System\Shutdown Options

Windows Components\Instant Search

Policy Setting Name

Approved Installation Sites for ActiveX Controls

Specify default category for Add New Programs

Hide the "Add a program from CD-ROM or floppy disk" option

Hide the "Add programs from Microsoft" option

Hide the "Add programs from your network" option

Hide Add New Programs page

Remove Add or Remove Programs

Hide the Set Program Access and Defaults page

Hide Change or Remove Programs page

Go directly to Components Wizard

Remove Support Information

Hide Add/Remove Windows Components page

Prevent access to 16-bit applications

Prevent access to 16-bit applications

Remove Program Compatibility Property Page

Turn Off Application Compatibility Engine

Turn Off Program Compatibility Wizard

Turn Off Program Compatibility Assistant

Turn Off Program Compatibility Assistant

Notify antivirus programs when opening attachments

Trust logic for file attachments

Do not preserve zone information in file attachments

Hide mechanisms to remove zone information

Default risk level for file attachments

Inclusion list for high risk file types

Inclusion list for low file types

Inclusion list for moderate risk file types

Default behavior for AutoRun

Default behavior for AutoRun

Don't set the always do this checkbox

Don't set the always do this checkbox

Turn off Autoplay

Turn off Autoplay

Allow BITS Peercaching

Timeout for inactive BITS jobs

Maximum BITS job download time

Maximum network bandwidth for BITS background transfers

Limit age of items in the BITS Peercache

Limit the BITS Peercache size

Do not allow the computer to act as a BITS Peercaching client

Do not allow the computer to act as a BITS Peercaching server

Maximum network bandwidth used for Peercaching

Maximum number of BITS jobs for this computer

Maximum number of BITS jobs for each user

Maximum number of files allowed in a BITS job

Maximum number of ranges that can be added to the file in a BITS job

Do not allow Import Video to run

Do not allow Import Video to run

Allow Corporate redirection of Customer Experience Improvement uploads

Tag Windows Customer Experience Improvement data with Study Identifier

SSL Cipher Suite Order

Download missing COM components

Download missing COM components

Disable application Sharing

Prevent Control

Prevent Sharing

Prevent Sharing Command Prompts

Prevent Desktop Sharing

Prevent Sharing Explorer windows

Prevent Application Sharing in true color

Disable Audio

Prevent changing DirectSound Audio setting

Disable full duplex Audio

Prevent receiving Video

Prevent sending Video

Limit the bandwidth of Audio and Video

Allow persisting automatic acceptance of Calls

Disable Chat

Disable Whiteboard

Disable NetMeeting 2.x Whiteboard

Disable remote Desktop Sharing

Enable Automatic Configuration

Prevent adding Directory servers

Prevent automatic acceptance of Calls

Prevent changing Call placement method

Disable Directory services

Prevent receiving files

Prevent sending files

Prevent viewing Web directory

Limit the size of sent files

Set the intranet support Web page

Set Call Security options

Disable the Advanced Calling button

Hide the Audio page

Hide the General page

Hide the Security page

Hide the Video page

Hide specified Control Panel items

Force classic Control Panel view

Prohibit access to the Control Panel

Show only specified Control Panel items

Remove Display in Control Panel

Hide Appearance and Themes tab

Hide Desktop tab

Hide Screen Saver tab

Hide Settings tab

Screen Saver

Screen Saver executable name

Password protect the screen saver

Screen Saver timeout

Prevent changing wallpaper

Prohibit Theme color selection

Remove Theme option

Prevent selection of windows and buttons styles

Load a specific visual style file or force Windows Classic

Prohibit selection of font size

Apply the default user logon picture to all users

Assign a default domain for logon

Exclude credential providers

Allow Delegating Default Credentials

Allow Default Credentials with NTLM-only Server Authentication

Allow Delegating Fresh Credentials

Allow Fresh Credentials with NTLM-only Server Authentication

Allow Delegating Saved Credentials

Allow Saved Credentials with NTLM-only Server Authentication

Deny Delegating Default Credentials

Deny Delegating Fresh Credentials

Deny Delegating Saved Credentials

Enumerate administrator accounts on elevation

Require trusted path for credential entry.

Remove Change Password

Remove Lock Computer

Remove Task Manager

Remove Logoff

Allow local activation security check exemptions

Define Activation Security Check exemptions

Enable Active Desktop

Disable Active Desktop

Prohibit changes

Add/Delete items

Prohibit adding items

Prohibit closing items

Prohibit deleting items

Prohibit editing items

Disable all items

Allow only bitmapped wallpaper

Desktop Wallpaper

Enable filter in Find dialog box

Hide Active Directory folder

Maximum size of Active Directory searches

Prohibit User from manually redirecting Profile Folders

Hide and disable all items on the desktop

Remove the Desktop Cleanup Wizard

Hide Internet Explorer icon on desktop

Remove Computer icon on the desktop

Remove My Documents icon on the desktop

Hide Network Locations icon on desktop

Remove Properties from the Computer icon context menu

Remove Properties from the Documents icon context menu

Do not add shares of recently opened documents to Network Locations

Remove Recycle Bin icon from desktop

Remove Properties from the Recycle Bin context menu

Don't save settings at exit

Prevent adding, dragging, dropping and closing the Taskbar's toolbars

Prohibit adjusting desktop toolbars

Treat all digitally signed drivers equally in the driver ranking and selection process

Turn off "Found New Hardware" balloons during device installation

Configure device installation timeout

Do not create system restore point when new device driver installed

Allow remote access to the PnP interface

Do not send a Windows Error Report when a generic driver is installed on a device

Allow administrators to override Device Installation Restriction policies

Allow installation of devices using drivers that match these device setup classes

Prevent installation of devices using drivers that match these device setup classes

Allow installation of devices that match any of these device IDs

Prevent installation of devices that match any of these device IDs

Prevent installation of removable devices

Prevent installation of devices not described by other policy settings

Display a custom message when installation is prevented by policy (balloon title)

Display a custom message when installation is prevented by policy (balloon text)

Allow non-administrators to install drivers for these device setup classes

Configure driver search locations

Turn off Windows Update device driver search prompt

Turn off Windows Update device driver search prompt

Code signing for device drivers

Sets how often a DFS Client discovers DC's

Do not allow Digital Locker to run

Do not allow Digital Locker to run

Disk Diagnostic: Configure custom alert text

Disk Diagnostic: Configure execution level

Turn Off Boot and Resume Optimizations

Turn Off Cache Power Mode

Turn Off Non Volatile Cache Feature

Turn Off Solid State Mode

Enable disk quotas

Enforce disk quota limit

Default quota limit and warning level

Log event when quota limit exceeded

Log event when quota warning level exceeded

Apply policy to removable media

Allow Distributed Link Tracking clients to use domain resources

Connection-Specific DNS Suffix

DNS Servers

Primary DNS Suffix

Register DNS records with connection-specific DNS suffix

Register PTR Records

Dynamic Update

Replace Addresses In Conflicts

Registration Refresh Interval

TTL Set in the A and PTR records

DNS Suffix Search List

Update Security Level

Update Top Level Domain Zones

Primary DNS Suffix Devolution

Turn off Multicast Name Resolution

Allow DNS Suffix Appending to Unqualified Multi-Label Name Queries

Do not allow window animations

Do not allow window animations

Do not allow desktop composition

Do not allow desktop composition

Do not allow Flip3D invocation

Do not allow Flip3D invocation

Specify a default color

Specify a default color

Do not allow color changes

Do not allow color changes

Do not automatically encrypt files moved to encrypted folders

Configure Error Reporting

Display Error Notification

Disable Windows Error Reporting

Disable Windows Error Reporting

Disable Logging

Disable Logging

Do not send additional data

Do not send additional data

Default application reporting settings

List of applications to never report errors for

List of applications to always report errors for

Report operating system errors

Configure Report Archive

Configure Report Archive

Configure Corporate Windows Error Reporting

List of applications to be excluded

List of applications to be excluded

Configure Report Queue

Configure Report Queue

Customize consent settings

Customize consent settings

Ignore custom consent settings

Ignore custom consent settings

Configure Default consent

Configure Default consent

Backup log automatically when full

Log Access

Retain old events

Log File Path

Maximum Log Size (KB)


Log Access

Retain old events

Log File Path



Log Access

Retain old events

Turn on logging

Log File Path



Log Access

Retain old events

Log File Path


Events.asp program

Events.asp program command line parameters

Events.asp URL

Display the menu bar in Windows Explorer

Prevent users from adding files to the root of their Users Files folder.

Turn off common control and window animations

Turn off heap termination on corruption

Configure Corrupted File Recovery Behavior

Selectively allow the evaluation of a symbolic link.

Use localized subfolder names when redirecting Start and My Documents

Do not automatically make redirected folders available offline

Use localized subfolder names when redirecting Start and My Documents

Turn off Details Pane

Turn off Preview Pane

Turn off downloading of game information

Turn off tracking of last play time of games in the Games folder

Disallow selection of Custom Locales

Disallow selection of Custom Locales

Restrict system locales

Restrict user locales

Restrict user locales

Disallow changing of geographic location

Disallow changing of geographic location

Disallow user override of locale settings

Disallow user override of locale settings

Hide Regional and Language Options administrative options

Hide the geographic location option

Hide the select language group options

Hide user locale selection and customization options

Restricts the UI language Windows uses for all logged users

Restricts the UI languages Windows should use for the selected user

Force selected system UI language to overwrite the user UI language

Restrict selection of Windows menus and dialogs language

Century interpretation for Year 2000

Turn off Local Group Policy objects processing

Startup policy processing wait time

Allow Cross-Forest User Policy and Roaming User Profiles

Software Installation policy processing

Disk Quota policy processing

EFS recovery policy processing

Folder Redirection policy processing

Internet Explorer Maintenance policy processing

IP Security policy processing

Registry policy processing

Scripts policy processing

Security policy processing

Wireless policy processing

Wired policy processing

Disallow Interactive Users from generating Resultant Set of Policy data

Disallow Interactive Users from generating Resultant Set of Policy data

Turn off automatic update of ADM files

Turn off background refresh of Group Policy

Remove users ability to invoke machine policy refresh

Enforce Show Policies Only

Group Policy domain controller selection

Group Policy slow link detection

Group Policy slow link detection

Group Policy refresh interval for computers

Group Policy refresh interval for domain controllers

Group Policy refresh interval for users

Default name for new Group Policy objects

Create new Group Policy object links disabled by default

Always use local ADM files for Group Policy Object Editor

Turn off Resultant Set of Policy logging

User Group Policy loopback processing mode

Restrict potentially unsafe HTML Help functions to specified folders

Restrict these programs from being launched from Help

Restrict these programs from being launched from Help

Turn off Active Help

Turn off Untrusted Content

Turn off Help Ratings

Turn off Help Experience Improvement Program

Turn off Windows Online

Turn off Windows HotStart

Turn off Windows HotStart

Restrict Internet communication

Restrict Internet communication

Turn off Automatic Root Certificates Update

Turn off printing over HTTP

Turn off printing over HTTP

Turn off downloading of print drivers over HTTP

Turn off downloading of print drivers over HTTP

Turn off Windows Update device driver searching

Turn off Event Viewer "Events.asp" links

Turn off Help and Support Center "Did you know?" content

Turn off Help and Support Center Microsoft Knowledge Base search

Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com

Turn off Registration if URL connection is referring to Microsoft.com

Turn off Windows Error Reporting

Turn off access to all Windows Update features

Turn off Search Companion content file updates

Turn off Internet File Association service

Turn off Internet File Association service

Turn off Internet download for Web publishing and online ordering wizards

Turn off Internet download for Web publishing and online ordering wizards

Turn off the "Order Prints" picture task

Turn off the "Order Prints" picture task

Turn off the "Publish to Web" task for files and folders

Turn off the "Publish to Web" task for files and folders

Turn off the Windows Messenger Customer Experience Improvement Program

Turn off the Windows Messenger Customer Experience Improvement Program

Turn off Windows Customer Experience Improvement Program

Prevent IIS installation

Audio/Video Player

Carpoint

DHTML Edit Control

Shockwave Flash

Investor

Menu Controls

Microsoft Agent

Microsoft Chat

MSNBC

NetShow File Transfer Control

Microsoft Scriptlet Component

Microsoft Survey Control

Allow active content from CDs to run on user machines

Allow active content from CDs to run on user machines

Check for server certificate revocation

Check for server certificate revocation

Turn off ClearType

Turn off ClearType

Do not allow resetting Internet Explorer settings

Do not allow resetting Internet Explorer settings

Check for signatures on downloaded programs

Check for signatures on downloaded programs

Allow third-party browser extensions

Allow third-party browser extensions

Allow Install On Demand (Internet Explorer)

Allow Install On Demand (Internet Explorer)

Allow Install On Demand (except Internet Explorer)

Allow Install On Demand (except Internet Explorer)

Automatically check for Internet Explorer updates

Automatically check for Internet Explorer updates

Allow software to run or install even if the signature is invalid

Allow software to run or install even if the signature is invalid

Play animations in web pages

Play animations in web pages

Play sounds in web pages

Play sounds in web pages

Play videos in web pages

Play videos in web pages

Turn off Profile Assistant

Turn off Profile Assistant

Do not save encrypted pages to disk

Do not save encrypted pages to disk

Empty Temporary Internet Files folder when browser is closed

Empty Temporary Internet Files folder when browser is closed

Turn on inline AutoComplete for Web addresses

Turn off inline AutoComplete in Windows Explorer

Turn on script debugging

Turn off friendly http error messages

Turn off page transitions

Turn on the display of a notification about every script error

Turn off smooth scrolling

Turn off configuring underline links

Subscription Limits

Disable adding channels

Disable adding schedules for offline pages

Disable offline page hit logging

Disable channel user interface completely

Disable editing and creating of schedule groups

Disable editing schedules for offline pages

Disable removing channels

Disable removing schedules for offline pages

Disable all scheduled offline pages

Disable downloading of site subscription content

Prevent setting of the code download path for each machine

Prevent users from choosing default text size

Disable the Advanced page

Disable the Advanced page

Disable the Connections page

Disable the Connections page

Disable the Content page

Disable the Content page

Disable the General page

Disable the General page

Disable the Privacy page

Disable the Privacy page

Disable the Programs page

Disable the Programs page

Disable the Security page

Disable the Security page

Send internationalized domain names

Send internationalized domain names

Use UTF-8 for mailto links

Use UTF-8 for mailto links

Prevent ignoring certificate errors

Prevent ignoring certificate errors

Turn off sending URLs as UTF-8(requires restart)

Prevent users from configuring background color

Prevent users from configuring text color

Prevent the use of Windows colors

Prevent the configuration of cipher strength update information URLs

Turn on the Internet Connection Wizard Auto Detect

Add-on List

Add-on List

Deny all add-ons unless specifically allowed in the Add-on List

Deny all add-ons unless specifically allowed in the Add-on List

All Processes

All Processes

Process List

Process List

Admin-approved behaviors

Admin-approved behaviors

All Processes

All Processes

Internet Explorer Processes


Process List

Process List

All Processes

All Processes



Process List

Process List

All Processes

All Processes



Process List

Process List

All Processes

All Processes



Process List

Process List

All Processes

All Processes



Process List

Process List

All Processes

All Processes



Process List

Process List

All Processes

All Processes



Process List

Process List

All Processes

All Processes



Process List

Process List

All Processes

All Processes



Process List

Process List

All Processes

All Processes



Process List

Process List

All Processes

All Processes



Process List

Process List

All Processes

All Processes



Process List

Process List

Internet Zone Restricted Protocols

Internet Zone Restricted Protocols

Intranet Zone Restricted Protocols

Intranet Zone Restricted Protocols

Local Machine Zone Restricted Protocols

Local Machine Zone Restricted Protocols

Restricted Sites Zone Restricted Protocols

Restricted Sites Zone Restricted Protocols

Trusted Sites Zone Restricted Protocols

Trusted Sites Zone Restricted Protocols

Turn off Crash Detection

Turn off Crash Detection

Do not allow users to enable or disable add-ons

Do not allow users to enable or disable add-ons

Add a specific list of search providers to the user's search provider list

Add a specific list of search providers to the user's search provider list

Turn on menu bar by default

Turn on menu bar by default

Disable caching of Auto-Proxy scripts

Disable external branding of Internet Explorer

Disable changing Advanced page settings

Customize User Agent String

Customize User Agent String

Use Automatic Detection for dial-up connections

Prevent "Fix settings" functionality

Prevent "Fix settings" functionality

Turn off Managing Phishing filter

Turn off Managing Phishing filter

Turn off the Security Settings Check feature

Turn off the Security Settings Check feature

Moving the menu bar above the navigation bar

Turn off managing Pop-up filter level

Turn off managing Pop-up filter level

Display error message on proxy script download failure

Turn on Compatibility Logging

Turn on Compatibility Logging

Enforce Full Screen Mode

Enforce Full Screen Mode

Disable importing and exporting of favorites and feeds

Turn off page zooming functionality

Turn off page zooming functionality

Identity Manager: Prevent users from using Identities

Configure Media Explorer Bar

Turn off "Delete Browsing History" functionality

Turn off "Delete Browsing History" functionality

Turn off "Delete Forms" functionality

Turn off "Delete Forms" functionality

Turn off "Delete Passwords" functionality

Turn off "Delete Passwords" functionality

Prevent performance of First Run Customize settings

Prevent performance of First Run Customize settings

Turn off displaying the Internet Explorer Help Menu

Turn off displaying the Internet Explorer Help Menu

Prevent the Internet Explorer search box from displaying

Prevent the Internet Explorer search box from displaying

Disable Automatic Install of Internet Explorer components

Turn off Quick Tabs functionality

Turn off Quick Tabs functionality

Restrict changing the default search provider

Restrict changing the default search provider

Disable showing the splash screen

Turn off tabbed browsing

Turn off tabbed browsing

Turn off configuration of tabbed browsing pop-up behavior

Turn off configuration of tabbed browsing pop-up behavior

Disable Periodic Check for Internet Explorer software updates

Turn off configuration of window reuse

Turn off configuration of window reuse

Configure Outlook Express

Pop-up allow list

Pop-up allow list

Disable changing accessibility settings

Disable changing Automatic Configuration settings

Disable changing Automatic Configuration settings

Disable changing Temporary Internet files settings

Disable changing Calendar and Contact settings

Disable changing certificate settings

Disable changing default browser check

Disable changing color settings

Disable changing connection settings

Disable changing connection settings

Disable Internet Connection wizard

Disable changing font settings

Disable AutoComplete for forms

Turn on the auto-complete feature for user names and passwords on forms

Disable "Configuring History"

Disable "Configuring History"

Disable changing home page settings

Disable changing language settings

Disable changing link color settings

Disable changing Messaging settings

Turn off Managing Pop-up Allow list

Turn off Managing Pop-up Allow list

Turn off pop-up management

Turn off pop-up management

Disable changing Profile Assistant settings

Disable changing proxy settings

Disable changing proxy settings

Disable changing ratings settings

Disable the Reset Web Settings feature

Prevent the deletion of temporary Internet files and cookies

Prevent the deletion of temporary Internet files and cookies

Turn off the auto-complete feature for web addresses

Search: Disable Find Files via F3 within the browser

Search: Disable Search Customization

Security Zones: Use only machine settings

Security Zones: Do not allow users to change policies

Security Zones: Do not allow users to add/delete sites

Disable software update shell notifications on program launch

Restrict search providers to a specific list of providers

Restrict search providers to a specific list of providers

Prevent participation in the Customer Experience Improvement Program

Prevent participation in the Customer Experience Improvement Program

Turn off configuration of default behavior of new tab creation

Turn off configuration of default behavior of new tab creation

Make proxy settings per-machine (rather than per-user)

Allow video and animation on a webpage that does not use external media player (through dynsrc attribute)


Allow Scriptlets

Allow Scriptlets

Turn Off First-Run Opt-In


Allow status bar updates via script


Turn on Protected Mode


Web Browser Applications


Disable WinFX Runtime Components Setup


Loose or un-compiled XAML files


XPS files

XPS files

Access data sources across domains


Allow active scripting


Allow META REFRESH

Allow META REFRESH

Allow cut, copy or paste operations from the clipboard via script


Allow binary and script behaviors


Use Pop-up Blocker

Use Pop-up Blocker

Display mixed content


Download signed ActiveX controls


Download unsigned ActiveX controls


Allow drag and drop or copy and paste files


Allow file downloads


Allow font downloads


Allow installation of desktop items


Java permissions

Java permissions

Launching applications and files in an IFRAME


Logon options

Logon options

Open files based on content, not file extension


Navigate sub-frames across different domains


Allow active content over restricted protocols to access my computer


Do not prompt for client certificate selection when no certificates or only one certificate exists.


Automatic prompting for ActiveX controls


Automatic prompting for file downloads


Run ActiveX controls and plugins


Script ActiveX controls marked safe for scripting


Initialize and script ActiveX controls not marked as safe


Scripting of Java applets


Run .NET Framework-reliant components signed with Authenticode


Software channel permissions


Submit non-encrypted form data


Run .NET Framework-reliant components not signed with Authenticode


Userdata persistence


Allow script-initiated windows without size or position constraints


Web sites in less privileged Web content zones can navigate into this zone




Allow Scriptlets

Allow Scriptlets













XPS files

XPS files





Allow META REFRESH

Allow META REFRESH





Use Pop-up Blocker

Use Pop-up Blocker















Java permissions

Java permissions



Logon options

Logon options



































Allow Scriptlets

Allow Scriptlets













XPS files

XPS files





Allow META REFRESH

Allow META REFRESH





Use Pop-up Blocker

Use Pop-up Blocker















Java permissions

Java permissions



Logon options

Logon options





































Allow Scriptlets

Allow Scriptlets













XPS files

XPS files





Allow META REFRESH

Allow META REFRESH





Use Pop-up Blocker

Use Pop-up Blocker















Java permissions

Java permissions



Logon options

Logon options



































Allow Scriptlets

Allow Scriptlets













XPS files

XPS files





Allow META REFRESH

Allow META REFRESH





Use Pop-up Blocker

Use Pop-up Blocker















Java permissions

Java permissions



Logon options

Logon options





































Allow Scriptlets

Allow Scriptlets













XPS files

XPS files





Allow META REFRESH

Allow META REFRESH





Use Pop-up Blocker

Use Pop-up Blocker















Java permissions

Java permissions



Logon options

Logon options



































Allow Scriptlets

Allow Scriptlets













XPS files

XPS files





Allow META REFRESH

Allow META REFRESH





Use Pop-up Blocker

Use Pop-up Blocker















Java permissions

Java permissions



Logon options

Logon options





































Allow Scriptlets

Allow Scriptlets













XPS files

XPS files





Allow META REFRESH

Allow META REFRESH





Use Pop-up Blocker

Use Pop-up Blocker















Java permissions

Java permissions



Logon options

Logon options

































Intranet Sites: Include all local (intranet) sites not listed in other zones

Intranet Sites: Include all local (intranet) sites not listed in other zones

Locked-Down Internet Zone Template

Locked-Down Internet Zone Template

Internet Zone Template

Internet Zone Template

Locked-Down Intranet Zone Template

Locked-Down Intranet Zone Template

Intranet Zone Template

Intranet Zone Template

Locked-Down Local Machine Zone Template

Locked-Down Local Machine Zone Template

Local Machine Zone Template

Local Machine Zone Template

Locked-Down Restricted Sites Zone Template

Locked-Down Restricted Sites Zone Template

Restricted Sites Zone Template

Restricted Sites Zone Template

Locked-Down Trusted Sites Zone Template

Locked-Down Trusted Sites Zone Template

Trusted Sites Zone Template

Trusted Sites Zone Template

Intranet Sites: Include all sites that bypass the proxy server

Intranet Sites: Include all sites that bypass the proxy server

Intranet Sites: Include all network paths (UNCs)

Intranet Sites: Include all network paths (UNCs)

Site to Zone Assignment List

Site to Zone Assignment List

Turn on automatic detection of the intranet

Turn on automatic detection of the intranet

Turn on Information bar notification for intranet content

Turn on Information bar notification for intranet content



Allow Scriptlets

Allow Scriptlets













XPS files

XPS files





Allow META REFRESH

Allow META REFRESH





Use Pop-up Blocker

Use Pop-up Blocker















Java permissions

Java permissions



Logon options

Logon options





































Allow Scriptlets

Allow Scriptlets













XPS files

XPS files





Allow META REFRESH

Allow META REFRESH





Use Pop-up Blocker

Use Pop-up Blocker















Java permissions

Java permissions



Logon options

Logon options

































Prevent users from configuring the hover color

Prevent users from configuring the color of links that have not yet been clicked

Prevent users from configuring the color of links that have already been clicked

Turn on the hover color option

File menu: Disable closing the browser and Explorer windows

File menu: Disable Save As... menu option

File menu: Disable Save As Web Page Complete

File menu: Disable New menu option

File menu: Disable Open menu option

Help menu: Remove 'Send Feedback' menu option

Help menu: Remove 'For Netscape Users' menu option

Help menu: Remove 'Tip of the Day' menu option

Help menu: Remove 'Tour' menu option

Disable Context menu

Hide Favorites menu

Disable Open in New Window menu option

Disable Save this program to disk option

Tools menu: Disable Internet Options... menu option

View menu: Disable Full Screen menu option

View menu: Disable Source menu option

Turn off automatic image resizing

Turn off picture display

Allow the display of image download placeholders

Turn off smart image dithering

File size limits for Local Machine zone

File size limits for Intranet zone

File size limits for Trusted Sites zone

File size limits for Internet zone

File size limits for Restricted Sites zone

Allow the printing of background colors and images

Turn off background sync for feeds

Turn off background sync for feeds

Turn off downloading of enclosures

Turn off downloading of enclosures

Turn off addition and removal of feeds

Turn off addition and removal of feeds

Turn off feed discovery

Turn off feed discovery

Turn off the feed list

Turn off the feed list

All Processes

All Processes



Process List

Process List

Prevent configuration of search from the Address bar

Enable Native XMLHttp Support

Enable Native XMLHttp Support

Turn on Automatic Signup

Turn off toolbar upgrade tool

Turn off toolbar upgrade tool

Disable customizing browser toolbars

Disable customizing browser toolbar buttons

Configure Toolbar Buttons

Turn off configuring the update check interval (in days)

Turn off changing the URL to be displayed for checking updates to Internet Explorer and Internet Tools

Turn off handwriting recognition error reporting

Turn off handwriting recognition error reporting

Turn off automatic learning

Turn off automatic learning

Turn off handwriting personalization

Turn off handwriting personalization

Do not allow manual configuration of iSNS servers

Do not allow manual configuration of target portals

Do not allow manual configuration of discovered targets

Do not allow adding new targets via manual configuration

Do not allow changes to initiator iqn name

Do not allow additional session logins

Do not allow changes to initiator CHAP secret

Do not allow connections without IPSec

Do not allow sessions without mutual CHAP

Do not allow sessions without one way CHAP

Define host name-to-Kerberos realm mappings

Define interoperable Kerberos V5 realm settings

Require strict KDC validation

Configure Scenario Execution Level

Turn on Mapper I/O (LLTDIO) driver

Turn on Responder (RSPNDR) driver

Do not process the legacy run list

Do not process the legacy run list

Do not process the run once list

Do not process the run once list

Always use classic logon

Don't display the Getting Started welcome screen at logon

Run these programs at user logon

Run these programs at user logon

Always wait for the network at computer startup and logon

Remove Boot / Shutdown / Logon / Logoff status messages

Don't display the Getting Started welcome screen at logon

Verbose vs normal status messages

Hide entry points for Fast User Switching

Turn off Windows Startup Sound

Do not allow Windows Media Center to run

Do not allow Windows Media Center to run

Restrict the user from entering author mode

Restrict users to the explicitly permitted list of snap-ins

Extended View (Web View)

ActiveX Control

Link to Web Address

AppleTalk Routing

Authorization Manager

Certification Authority Policy Settings

Connection Sharing (NAT)

DCOM Configuration Extension

Device Manager

DHCP Relay Management

Event Viewer

Event Viewer (Windows Vista)

IAS Logging

IGMP Routing

IP Routing

IPX RIP Routing

IPX Routing

IPX SAP Routing

Logical and Mapped Drives

OSPF Routing

Public Key Policies

RAS Dialin - User Node

Remote Access

Removable Storage

RIP Routing

Routing

Send Console Message

Service Dependencies

Shared Folders Ext

SMTP Protocol

SNMP

System Properties

Group Policy Management

Group Policy Object Editor

Group Policy tab for Active Directory Tools

Resultant Set of Policy snap-in

Administrative Templates (Computers)

Administrative Templates (Users)

Folder Redirection

Internet Explorer Maintenance

IP Security Policy Management

Windows Firewall with Advanced Security

NAP Client Configuration

Remote Installation Services

Scripts (Startup/Shutdown)

Scripts (Logon/Logoff)

Security Settings

Software Installation (Computers)

Software Installation (Users)

Wired Network (IEEE 802.3) Policies

Wireless Network (IEEE 802.11) Policies

Administrative Templates (Computers)

Administrative Templates (Users)

Folder Redirection

Internet Explorer Maintenance

Scripts (Startup/Shutdown)

Scripts (Logon/Logoff)

Security Settings

Software Installation (Computers)

Software Installation (Users)

Active Directory Domains and Trusts

Active Directory Sites and Services

Active Directory Users and Computers

ADSI Edit

Certification Authority

Certificates

Certificate Templates

Component Services

Computer Management

Device Manager

Distributed File System

Disk Defragmenter

Disk Management

Event Viewer

Event Viewer (Windows Vista)

Failover Clusters Manager

FAX Service

FrontPage Server Extensions

Internet Authentication Service (IAS)

Internet Information Services

Indexing Service

IP Security Policy Management

IP Security Monitor

Local Users and Groups

NAP Client Configuration

.Net Framework Configuration

Performance Logs and Alerts

QoS Admission Control

Remote Desktops

Routing and Remote Access

Removable Storage Management

Security Configuration and Analysis

Security Templates

Services

Shared Folders

System Information

Telephony

Terminal Services Configuration

TPM Management

Windows Firewall with Advanced Security

Wireless Monitor

WMI Control

Turn off Windows Mobility Center

Turn off Windows Mobility Center

Turn off Windows presentation settings

Turn off Windows presentation settings

Do not allow Windows Movie Maker to run

Do not allow Windows Movie Maker to run

Turn off Windows Movie Maker online Web links

Turn off Windows Movie Maker online Web links

Turn off Windows Movie Maker automatic codec downloads

Turn off Windows Movie Maker automatic codec downloads

Turn off Windows Movie Maker saving to online video hosting provider

Turn off Windows Movie Maker saving to online video hosting provider

Microsoft Support Diagnostic Tool: Configure execution level

Microsoft Support Diagnostic Tool: Restrict tool download

Enable user to browse for source while elevated

Enable user to use media source while elevated

Enable user to patch elevated products

Always install with elevated privileges

Always install with elevated privileges

Prohibit Use of Restart Manager

Remove browse dialog box for new source

Prohibit Flyweight Patching

Disable logging via package settings

Prevent removable media source for any install

Disable Windows Installer

Prohibit patching

Prohibit rollback

Prohibit rollback

Allow admin to install from Terminal Services session

Enable user control over installs

Prohibit non-administrators from applying vendor signed updates

Prohibit removal of updates

Turn off creation of System Restore Checkpoints

Prohibit User Installs

Enforce upgrade component rules

Baseline file cache maximum size

Logging

Disable IE security prompt for Windows Installer scripts

Search order

Cache transforms in secure location on workstation

Contact PDC on logon failure

Initial DC Discovery Retry Setting for Background Callers

Maximum DC Discovery Retry Interval Setting for Background Callers

Final DC Discovery Retry Setting for Background Callers

Positive Periodic DC Cache Refresh for Background Callers

Log File Debug Output Level

Expected dial-up delay on logon

Maximum Log File Size

Negative DC Discovery Cache Setting

Netlogon share compatibility

Positive Periodic DC Cache Refresh for Non-Background Callers

Scavenge Interval

Site Name

Sysvol share compatibility

Location of the DCs hosting a domain with single label DNS name

Automated Site Coverage by the DC Locator DNS SRV Records

DC Locator DNS records not registered by the DCs

Refresh Interval of the DC Locator DNS Records

TTL Set in the DC Locator DNS Records

Sites Covered by the GC Locator DNS SRV Records

Priority Set in the DC Locator DNS SRV Records

Weight Set in the DC Locator DNS SRV Records

Sites Covered by the Application Directory Partition Locator DNS SRV Records

Sites Covered by the DC Locator DNS SRV Records

Dynamic Registration of the DC Locator DNS Records

Try Next Closest Site

Force Rediscovery Interval

Domain Controller Address Type Returned

Prohibit adding and removing components for a LAN or remote access connection

Prohibit access to the Advanced Settings item on the Advanced menu

Prohibit TCP/IP advanced configuration

Prohibit installation and configuration of Network Bridge on your DNS domain network

Prohibit Enabling/Disabling components of a LAN connection

Ability to delete all user remote access connections

Prohibit deletion of remote access connections

Prohibit access to the Remote Access Preferences item on the Advanced menu

Enable Windows 2000 Network Connections settings for Administrators

Turn off notifications when a connection has only limited or no connectivity

Prohibit access to properties of components of a LAN connection

Ability to Enable/Disable a LAN connection

Prohibit access to properties of a LAN connection

Prohibit access to the New Connection Wizard

Prohibit use of Internet Connection Firewall on your DNS domain network

Ability to change properties of an all user remote access connection

Prohibit access to properties of components of a remote access connection

Prohibit connecting and disconnecting a remote access connection

Prohibit changing properties of a private remote access connection

Ability to rename all user remote access connections

Ability to rename LAN connections or remote access connections available to all users

Ability to rename LAN connections

Prohibit renaming private remote access connections

Prohibit use of Internet Connection Sharing on your DNS domain network

Prohibit viewing of status for an active connection

Turn off Connect to a Network Projector

Turn off Connect to a Network Projector

Subfolders always available offline

Administratively assigned offline files

Administratively assigned offline files

Non-default server disconnect actions

Non-default server disconnect actions

Default cache size

Allow or Disallow use of the Offline Files feature

Encrypt the Offline Files cache

Event logging level

Event logging level

Files not cached

Action on server disconnect

Action on server disconnect

Prevent use of Offline Files folder

Prevent use of Offline Files folder

Prohibit user configuration of Offline Files

Prohibit user configuration of Offline Files

Remove 'Make Available Offline'

Remove 'Make Available Offline'

Prohibit 'Make Available Offline' for these file and folders

Prohibit 'Make Available Offline' for these file and folders

Turn off reminder balloons

Turn off reminder balloons

At logoff, delete local copy of userΓÇÖs offline files

Reminder balloon frequency

Reminder balloon frequency

Initial reminder balloon lifetime

Initial reminder balloon lifetime

Reminder balloon lifetime

Reminder balloon lifetime

Configure Slow link speed

Synchronize all offline files before logging off

Synchronize all offline files before logging off

Synchronize all offline files when logging on

Synchronize all offline files when logging on

Synchronize offline files before suspend

Synchronize offline files before suspend

Turn on economical application of administratively assigned Offline Files

Configure slow-link mode

Limit disk space used by offline files

Turn off Microsoft Peer-to-Peer Networking Services

Turn off Multicast Bootstrap

Set the Seed Server


Set the Seed Server


Set the Seed Server

Disable password strength validation for Peer Grouping

Make Parental Controls control panel visible on a Domain

Detect application install failures

Detect applications unable to launch installers under UAC

Detect application failures caused by deprecated Windows DLLs or COM objects

Detect application installers that need to be run as administrator

Notify blocked drivers

Turn off Tablet PC Pen Training

Turn off Tablet PC Pen Training

Turn off access to the performance center core section

Turn off access to the performance center core section

Turn off access to the solutions to performance problems section

Turn off access to the solutions to performance problems section

Turn off access to the OEM and Microsoft branding section

Turn off access to the OEM and Microsoft branding section





Critical Battery Notification Action

Low Battery Notification Action

Critical Battery Notification Level

Low Battery Notification Level

Turn Off Low Battery User Notification

Select the Power Button Action (Plugged In)

Select the Sleep Button Action (Plugged In)

Select the Lid Switch Action (Plugged In)

Select the Start Menu Power Button Action (Plugged In)

Select the Power Button Action (On Battery)

Select the Sleep Button Action (On Battery)

Select the Lid Switch Action (On Battery)

Select the Start Menu Power Button Action (On Battery)

Turn Off the Hard Disk (Plugged In)

Turn Off the Hard Disk (On Battery)

Specify a Custom Active Power Plan

Select an Active Power Plan

Prompt for password on resume from hibernate / suspend

Turn on Applications to Prevent Sleep Transitions (Plugged In)

Specify the System Hibernate Timeout (Plugged In)

Require a Password When a Computer Wakes (Plugged In)

Specify the System Sleep Timeout (Plugged In)

Turn Off Hybrid Sleep (Plugged In)

Turn on Applications to Prevent Sleep Transitions (On Battery)

Specify the System Hibernate Timeout (On Battery)

Require a Password When a Computer Wakes (On Battery)

Specify the System Sleep Timeout (On Battery)

Turn Off Hybrid Sleep (On Battery)

Turn Off Adaptive Display Timeout (Plugged In)

Turn Off Adaptive Display Timeout (On Battery)

Turn Off the Display (Plugged In)

Turn Off the Display (On Battery)

Allow Standby States (S1-S3) When Sleeping (Plugged In)

Allow Standby States (S1-S3) When Sleeping (On Battery)

Do not turn off system power after a Windows system shutdown has occurred.

Prevent restoring previous versions from backups

Prevent restoring previous versions from backups

Hide previous versions list for local files

Hide previous versions list for local files

Prevent restoring local previous versions

Prevent restoring local previous versions

Hide previous versions list for remote files

Hide previous versions list for remote files

Prevent restoring remote previous versions

Prevent restoring remote previous versions

Hide previous versions of files on backup location

Hide previous versions of files on backup location

Web-based printing

Automatically publish new printers in Active Directory

Custom support URL in the Printers folder's left pane

Add Printer wizard - Network scan page (Managed network)

Browse the network to find printers

Always render print jobs on the server

Allow pruning of published printers

Browse a common web site to find printers

Disallow installation of printers using kernel-mode drivers

Prevent addition of printers

Prevent deletion of printers

Add Printer wizard - Network scan page (Unmanaged network)

Only use Package Point and print

Package Point and print - Approved servers

Computer location

Pre-populate printer search location text

Point and Print Restrictions

Default Active Directory path when searching for printers

Printer browsing

Prune printers that are not automatically republished

Directory pruning interval

Directory pruning priority

Directory pruning retry

Log directory pruning retry events

Allow printers to be published

Allow Print Spooler to accept client connections

Check published state

Hide the Programs Control Panel

Hide "Programs and Features" page

Hide "Installed Updates" page

Hide "Set Program Access and Computer Defaults" page

Hide "Windows Marketplace"

Hide "Get Programs" page

Hide "Windows Features"

Best effort service type

Controlled load service type

Guaranteed service type

Network control service type

Qualitative service type






Limit outstanding packets

Limit reservable bandwidth

Set timer resolution





Non-conforming packets



Enable Persistent Time Stamp

Report unplanned shutdown events

Activate Shutdown Event Tracker System State Data feature

Display Shutdown Event Tracker

Turn on session logging

Allow only Vista or later connections

Turn on bandwidth optimization

Customize Warning Messages

Solicited Remote Assistance

Offer Remote Assistance

Time (in seconds) to force reboot

Time (in seconds) to force reboot

CD and DVD: Deny read access

CD and DVD: Deny read access

CD and DVD: Deny write access

CD and DVD: Deny write access

Custom Classes: Deny read access

Custom Classes: Deny read access

Custom Classes: Deny write access

Custom Classes: Deny write access

Floppy Drives: Deny read access

Floppy Drives: Deny read access

Floppy Drives: Deny write access

Floppy Drives: Deny write access

Removable Disks: Deny read access

Removable Disks: Deny read access

Removable Disks: Deny write access

Removable Disks: Deny write access

All Removable Storage classes: Deny all access

All Removable Storage classes: Deny all access

Tape Drives: Deny read access

Tape Drives: Deny read access

Tape Drives: Deny write access

Tape Drives: Deny write access

WPD Devices: Deny read access

WPD Devices: Deny read access

WPD Devices: Deny write access

WPD Devices: Deny write access

All Removable Storage: Allow direct access in remote sessions

RPC Endpoint Mapper Client Authentication

Propagation of extended error information

Ignore Delegation Failure

Minimum Idle Connection Timeout for RPC/HTTP connections

Restrictions for Unauthenticated RPC clients

RPC Troubleshooting State Information

Maximum wait time for Group Policy scripts

Run legacy logon scripts hidden

Run logoff scripts visible

Run logon scripts synchronously

Run logon scripts synchronously

Run logon scripts visible

Run shutdown scripts visible

Run startup scripts asynchronously

Run startup scripts visible

Allow logon scripts when NetBIOS or WINS is disabled

Allow indexing of encrypted files

Allow using diacritics

Indexer data location

Prevent indexing e-mail attachments

Prevent indexing files in Offline Files cache

Prevent indexing Microsoft Office Outlook

Prevent indexing public folders

Prevent indexing uncached Exchange folders

Prevent displaying advanced indexing options in the Control Panel

Turn on Security Center (Domain PCs only)

Specify Windows Service Pack installation file location

Specify Windows installation file location

Allow DFS roots to be published

Allow shared folders to be published

Prevent users from sharing files within their profile.

Prevent access to the command prompt

Prevent access to registry editing tools

Run only specified Windows applications

Don't run specified Windows applications

Do not display the Welcome Center at user logon

Turn off Windows Sidebar

Turn off Windows Sidebar

Disable unpacking and installation of gadgets that are not digitally signed.

Disable unpacking and installation of gadgets that are not digitally signed.

Turn Off User Installed Windows Sidebar Gadgets

Turn Off User Installed Windows Sidebar Gadgets

Override the More Gadgets Link

Override the More Gadgets Link

Delete data from devices running Microsoft firmware when a user logs off from the computer.

Delete data from devices running Microsoft firmware when a user logs off from the computer.

Turn off Windows SideShow

Turn off Windows SideShow

Turn off automatic wake

Turn off automatic wake

Require a PIN to access data on devices running Microsoft firmware

Require a PIN to access data on devices running Microsoft firmware

Allow certificates with no extended key usage certificate attribute

Allow Integrated Unblock screen to be displayed at the time of logon

Filter duplicate logon certificates

Force the reading of all certificates from the smart card

Allow signature keys valid for Logon

Allow time invalid certificates

Turn on certificate propagation from smart card

Configure root certificate clean up

Turn on root certificate propagation from smart card

Display string when smart card is blocked

Reverse the subject name stored in a certificate when displaying

Allow user name hint

Communities

Permitted Managers

Traps for public community

Do not allow Sound Recorder to run

Do not allow Sound Recorder to run

Clear the recent programs list for new users

Remove Games link from Start Menu

Remove Search Computer link

Do not search files

Do not search Internet

Do not search programs

Do not search communications

Remove user folder link from Start Menu

Use folders instead of library

Add the Run command to the Start Menu

Show QuickLaunch on Taskbar

Clear history of recently opened documents on exit

Add Logoff to the Start Menu

Gray unavailable Windows Installer programs Start Menu shortcuts

Turn off personalized menus

Lock the Taskbar

Add "Run in Separate Memory Space" check box to Run dialog box

Turn off notification area cleanup

Remove Balloon Tips on Start Menu items

Remove Drag-and-drop context menus on the Start Menu

Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commands

Remove common program groups from Start Menu

Remove Favorites menu from Start Menu

Remove Search link from Start Menu

Remove frequent programs list from the Start Menu

Remove Help menu from Start Menu

Turn off user tracking

Remove All Programs list from the Start menu

Remove Network Connections from Start Menu

Remove pinned programs list from the Start Menu

Do not keep history of recently opened documents

Remove Recent Items menu from Start Menu

Do not use the search-based method when resolving shell shortcuts

Do not use the tracking-based method when resolving shell shortcuts

Remove Run menu from Start Menu

Remove programs on Settings menu

Prevent changes to Taskbar and Start Menu Settings

Remove Default Programs link from the Start menu.

Remove Documents icon from Start Menu

Remove Music icon from Start Menu

Remove Network icon from Start Menu

Remove Pictures icon from Start Menu

Remove user's folders from the Start Menu

Force classic Start Menu

Remove Clock from the system notification area

Prevent grouping of taskbar items

Do not display any custom toolbars in the taskbar

Remove access to the context menus for the taskbar

Hide the notification area

Remove user name from Start Menu

Remove links and access to Windows Update

Remove the "Undock PC" button from the Start Menu

Remove Logoff on the Start Menu

Turn on Accounting for WSRM

Set the Email IDs to which notifications are to be sent

Set the Time interval in minutes for logging accounting data

Set the SMTP Server used to send notifications

Turn off Configuration

Turn off System Restore

Turn off AutoComplete integration with Input Panel

Turn off AutoComplete integration with Input Panel

Prevent Input Panel tab from appearing

Prevent Input Panel tab from appearing

For tablet pen input, donΓÇÖt show the Input Panel icon

For tablet pen input, donΓÇÖt show the Input Panel icon

For touch input, donΓÇÖt show the Input Panel icon

For touch input, donΓÇÖt show the Input Panel icon

Turn off password security in Input Panel

Turn off password security in Input Panel

Switch to the Simplified Chinese (PRC) gestures

Switch to the Simplified Chinese (PRC) gestures

Include rarely used Chinese, Kanji, or Hanja characters

Include rarely used Chinese, Kanji, or Hanja characters

Turn off tolerant and Z-shaped scratch-out gestures

Turn off tolerant and Z-shaped scratch-out gestures

Do not allow Inkball to run

Do not allow Inkball to run

Do not allow Windows Journal to be run

Do not allow Windows Journal to be run

Do not allow printing to Journal Note Writer

Do not allow printing to Journal Note Writer

Do not allow Snipping Tool to run

Do not allow Snipping Tool to run

Do not allow Sticky Notes to be run

Do not allow Sticky Notes to be run

Turn off pen feedback

Turn off pen feedback

Prevent Back-ESC mapping

Prevent Back-ESC mapping

Prevent launch an application

Prevent launch an application

Prevent press and hold

Prevent press and hold

Turn off hardware buttons

Turn off hardware buttons

Prevent Flicks Learning Mode

Prevent Flicks Learning Mode

Prevent flicks

Prevent flicks

Remove the battery meter

Remove the networking icon

Remove the volume control icon

Lock all taskbar settings

Prevent users from adding or removing toolbars

Prevent users from rearranging toolbars

Turn off all balloon notifications

Prevent users from moving taskbar to another screen dock location

Prevent users from resizing the taskbar

Turn off taskbar thumbnails

Prohibit Browse

Prohibit Browse

Hide Advanced Properties Checkbox in Add Scheduled Task Wizard

Hide Advanced Properties Checkbox in Add Scheduled Task Wizard

Prohibit Drag-and-Drop

Prohibit Drag-and-Drop

Prevent Task Run or End

Prevent Task Run or End

Hide Property Pages

Hide Property Pages

Prohibit New Task Creation

Prohibit New Task Creation

Prohibit Task Deletion

Prohibit Task Deletion

Do not allow passwords to be saved

Do not allow passwords to be saved

Set client connection encryption level

Always prompt client for password upon connection

Require use of specific security layer for remote (RDP) connections

Require user authentication using RDP 6.0 for remote connections

Server Authentication Certificate Template

Set TS Gateway server authentication method

Enable connection through TS Gateway

Set TS Gateway server address

Automatic reconnection

Limit maximum color depth

Allow users to connect remotely using Terminal Services

Enforce Removal of Remote Desktop Wallpaper

Deny logoff of an administrator logged in to the console session

Configure keep-alive connection interval

Use the specified Terminal Server license servers

Display notifications about TS Licensing problems that affect the Terminal Server

Set the Terminal Server licensing mode

Limit number of connections

Remove "Disconnect" option from Shut Down dialog

Remove Windows Security item from Start menu

Set rules for remote control of Terminal Services user sessions

Set rules for remote control of Terminal Services user sessions

Restrict Terminal Services users to a single remote session

Start a program on connection

Start a program on connection

Do not allow local administrators to customize permissions

Always show desktop on connection

Set TS User Home Directory

Set path for TS Roaming Profiles

License Server Security Group

Prevent License Upgrade

Allow audio redirection

Do not allow clipboard redirection

Do not allow COM port redirection

Do not set default client printer to be default printer in a session

Do not allow drive redirection

Do not allow LPT port redirection

Do not allow supported Plug and Play device redirection

Do not allow client printer redirection

Terminal Server Fallback Printer Driver Behavior

Do not allow smart card device redirection

Allow time zone redirection

Require secure RPC communication

Join Session Directory

Session Directory Cluster Name

Terminal Server IP Address Redirection

Session Directory Server

Terminate session when time limits are reached

Terminate session when time limits are reached

Set time limit for disconnected sessions

Set time limit for disconnected sessions

Set time limit for active but idle Terminal Services sessions

Set time limit for active but idle Terminal Services sessions

Set time limit for active Terminal Services sessions

Set time limit for active Terminal Services sessions

Allow reconnection from original client only

Allow reconnection from original client only

Do not delete temp folder upon exit

Do not use temporary folders per session

Turn off the display of thumbnails and only display icons.

Turn off the display of thumbnails and only display icons on network folders

Turn off Tablet PC touch input

Turn off Tablet PC touch input

Turn on TPM backup to Active Directory Domain Services

Configure the list of blocked TPM commands

Ignore the default list of blocked TPM commands

Ignore the local list of blocked TPM commands

Prevent the user from running the Backup Status and Configuration program

Prevent the user from running the Backup Status and Configuration program

Prevent backing up to local disks

Prevent backing up to local disks

Prevent backing up to network shared folder

Prevent backing up to network shared folder

Prevent backing up to optical media (CD/DVD)

Prevent backing up to optical media (CD/DVD)

Turn off backup configuration

Turn off backup configuration

Turn off restore functionality

Turn off restore functionality

Turn off Complete PC Backup functionality

Turn off Complete PC Backup functionality

Add the Administrators security group to roaming user profiles

Do not check for user ownership of Roaming Profile Folders

Connect home directory to root of the share

Delete cached copies of roaming profiles

Do not detect slow network connections

Prompt user when a slow network connection is detected

Exclude directories in roaming profile

Leave Windows Installer and Group Policy Software Installation Data

Limit profile size

Only allow local user profiles

Timeout for dialog boxes

Do not log users on with temporary profiles

Maximum retries to unload and update user profile

Prevent Roaming Profile changes from propagating to the server

Wait for remote user profile

Slow network connection timeout for user profiles

Delete user profiles older than a specified number of days on system restart

Network directories to sync at Logon/Logoff time only

Do not forcefully unload the users registry at user logoff

Set maximum wait time for the network if a user has a roaming user profile or remote home directory

Set roaming profile path for all users logging onto this computer

Turn on BitLocker backup to Active Directory Domain Services

Control Panel Setup: Enable advanced startup options

Control Panel Setup: Configure recovery options

Control Panel Setup: Configure recovery folder

Configure encryption method

Configure TPM platform validation profile

Prevent memory overwrite on restart

Global Configuration Settings

Configure Windows NTP Client

Enable Windows NTP Client

Enable Windows NTP Server

Diagnostics: Configure scenario retention

Diagnostics: Configure scenario execution level

Turn off Windows Calendar

Turn off Windows Calendar

Allow only system backup

Disallow locally attached storage as backup target

Disallow network as backup target

Disallow optical media as backup target

Disallow run-once backups

Turn off Windows Meeting Space

Turn off Windows Meeting Space

Turn on Windows Meeting Space auditing

Turn on Windows Meeting Space auditing

Prohibit installing or uninstalling color profiles

Prohibit installing or uninstalling color profiles

Prohibit Access of the Windows Connect Now wizards

Prohibit Access of the Windows Connect Now wizards

Configuration of wireless settings using Windows Connect Now

Check for New Signatures Before Scheduled Scans

Turn off Windows Defender

Enable Logging Known Good Detections

Enable Logging Unknown Detection

Turn off Real-Time Protection Prompts for Unknown Detection

Download Entire Signature Set

Configure Microsoft SpyNet Reporting

Turn on definition updates through both WSUS and Windows Update

Hide the common dialog back button

Hide the dropdown list of recent files

Hide the common dialog places bar

Items displayed in Places Bar

Turn on Classic Shell

Display confirmation dialog when deleting files

Allow only per user or approved shell extensions

Do not track Shell shortcuts during roaming

Maximum number of recent documents

Turn off caching of thumbnail pictures

Remove CD Burning features

Remove UI to change menu animation setting

Remove UI to change keyboard navigation indicator setting

Remove DFS tab

Hide these specified drives in My Computer

No Entire Network in Network Locations

Remove File menu from Windows Explorer

Removes the Folder Options menu item from the Tools menu

Remove Hardware tab

Hides the Manage item on the Windows Explorer context menu

Remove Shared Documents from My Computer

Remove "Map Network Drive" and "Disconnect Network Drive"

Do not move deleted files to the Recycle Bin

Do not request alternate credentials

Remove Security tab

Remove Search button from Windows Explorer

Remove Windows Explorer's default context menu

Prevent access to drives from My Computer

Turn off Windows+X hotkeys

No Computers Near Me in Network Locations

Request credentials for network installations

Maximum allowed Recycle Bin size

Turn off shell protocol protected mode

Turn off shell protocol protected mode

Specify Windows File Protection cache location

Limit Windows File Protection cache size

Set Windows File Protection scanning

Hide the file scan progress window

Windows Firewall: Allow authenticated IPSec bypass

Windows Firewall: Define inbound program exceptions

Windows Firewall: Allow local program exceptions

Windows Firewall: Protect all network connections

Windows Firewall: Do not allow exceptions

Windows Firewall: Allow inbound file and printer sharing exception

Windows Firewall: Allow ICMP exceptions

Windows Firewall: Allow logging

Windows Firewall: Prohibit notifications

Windows Firewall: Define inbound port exceptions

Windows Firewall: Allow local port exceptions

Windows Firewall: Allow inbound remote administration exception

Windows Firewall: Allow inbound Remote Desktop exceptions

Windows Firewall: Prohibit unicast response to multicast or broadcast requests

Windows Firewall: Allow inbound UPnP framework exceptions

Windows Firewall: Define inbound program exceptions

Windows Firewall: Allow local program exceptions

Windows Firewall: Protect all network connections

Windows Firewall: Do not allow exceptions

Windows Firewall: Allow inbound file and printer sharing exception

Windows Firewall: Allow ICMP exceptions

Windows Firewall: Allow logging

Windows Firewall: Prohibit notifications

Windows Firewall: Define inbound port exceptions

Windows Firewall: Allow local port exceptions

Windows Firewall: Allow inbound remote administration exception

Windows Firewall: Allow inbound Remote Desktop exceptions

Windows Firewall: Prohibit unicast response to multicast or broadcast requests

Windows Firewall: Allow inbound UPnP framework exceptions

Turn off Windows Mail application

Turn off Windows Mail application

Turn off the communities features

Turn off the communities features

Prevent Windows Media DRM Internet Access

Prevent Automatic Updates

Do Not Show First Use Dialog Boxes

Prevent Video Smoothing

Prevent CD and DVD Media Information Retrieval

Prevent Media Sharing

Prevent Music File Media Information Retrieval

Prevent Quick Launch Toolbar Shortcut Creation

Prevent Radio Station Preset Retrieval

Prevent Desktop Shortcut Creation

Allow Screen Saver

Prevent Codec Download

Do Not Show Anchor

Hide Privacy Tab

Hide Security Tab

Set and Lock Skin

Configure HTTP Proxy

Configure MMS Proxy

Configure RTSP Proxy

Hide Network Tab

Configure Network Buffering

Streaming Media Protocols

Do not automatically start Windows Messenger initially

Do not automatically start Windows Messenger initially

Do not allow Windows Messenger to be run

Do not allow Windows Messenger to be run

Allow Basic authentication

Allow unencrypted traffic

Disallow Digest authentication

Disallow Negotiate authentication

Disallow Kerberos authentication

Trusted Hosts

Allow automatic configuration of listeners

Allow Basic authentication

Allow unencrypted traffic

Disallow Negotiate authentication

Disallow Kerberos authentication

Allow Remote Shell Access

Specify idle Timeout

MaxConcurrentUsers

Specify maximum amount of memory in MB per Shell

Specify maximum number of processes per Shell

Specify Shell Timeout

Specify maximum number of remote shells per user

Windows Automatic Updates

Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog box

Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog box

Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box

Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box

Remove access to use all Windows Update features

Configure Automatic Updates

Specify intranet Microsoft update service location

Automatic Updates detection frequency

Allow non-administrators to receive update notifications

Allow Automatic Updates immediate installation

Turn on recommended updates via Automatic Updates

Enabling Windows Update Power Management to automatically wake up the system to install scheduled updates

No auto-restart for scheduled Automatic Updates installations

Re-prompt for restart with scheduled installations

Delay Restart for scheduled installations

Reschedule Automatic Updates scheduled installations

Enable client-side targeting

Turn off legacy remote shutdown interface

Timeout for hung logon sessions during shutdown

Display information about previous logons during user logon

Remove logon hours expiration warnings

Set action to take when logon hours expire

Disable or enable software Secure Attention Sequence

Report when logon server was not available during user logon

Report when logon server was not available during user logon

Custom User Interface

Turn off automatic termination of applications that block or cancel shutdown

Custom Instant Search Internet search provider

Supported on

At least Windows Vista

Microsoft Windows Server 2003, Windows XP, and Windows 2000 operating systems only











At least Microsoft Windows XP Professional with SP1 or Windows Server 2003 family

At least Microsoft Windows Server 2003






At least Microsoft Windows XP Professional with SP2












At least Microsoft Windows 2000



Windows XP or Windows Server 2003, or computers with BITS 1.5 installed.


Windows XP SP2 or Windows Server 2003 SP1, or computers with BITS 2.0 installed.

















at least Windows NetMeeting v3.0



































At least Microsoft Windows XP Professional or Windows Server 2003 family








At least Microsoft Windows 2000 Service Pack 1










































Microsoft Windows 2000 only




Microsoft Windows Server 2003 and Windows XP operating systems only

















































Microsoft Windows XP Professional only


























Microsoft Windows Server 2003 and Windows XP only



















































At least Internet Explorer 6 Service Pack 1












At least Microsoft Windows XP Professional with SP2 or Windows Server 2003 family with SP1












At least Microsoft Windows 2000 Service Pack 3, Microsoft Windows XP Professional Service Pack 1 or Microsoft Windows Ser













Microsoft Windows Server 2003 only

At least Internet Explorer 5.0












At least Internet Explorer 6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1


At least Internet Explorer 6.0 in Windows 2003 Service Pack 1










Only Internet Explorer 6.0 in Windows 2003 Service Pack 1




At least Internet Explorer 6.0 in Windows 2003 Service Pack 1. Not supported on Windows Vista

At least Internet Explorer 6.0 in Windows 2003 Service Pack 1. Not supported on Windows Vista
















Only Internet Explorer 4.0







Only Internet Explorer 5.0 and Internet Explorer 6.0






































At least Internet Explorer 7.0. Not supported on Windows Vista



























At least Internet Explorer 7.0 in Windows Vista
















































































































Windows Installer v4.0














Microsoft Windows XP or Windows 2000 with Windows Installer v2.0



































Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only









Microsoft Windows XP Professional with SP2 and Windows Server 2003 family only











Windows 2000 or later, running IIS. Not supported on Windows Server 2003













































































































At least Microsoft Windows Vista, or an earlier version with Windows Search






























At least Microsoft Windows 2000 Service Pack 3 or Microsoft Windows XP Professional Service Pack 1












Microsoft Windows Server 2003 and Windows XP operating systems only












































































At least Microsoft Windows XP


At least Microsoft Windows Vista










At least Microsoft Windows XP and Windows Server 2003 only


At least Microsoft Windows Server 2003 with SP1




At least Microsoft Windows 2000 Terminal Services

At least Microsoft Windows 2000 Terminal Services
























Microsoft Windows Server 2003, Enterprise Edition
















































Windows Media Player 9 Series and later.




Windows Media Player 11 for Windows XP or Windows Media Player 11 for Windows Vista or later.






Windows Media Player for Windows XP and later.



























Explain Text

The ActiveX Installer Service is the solution to delegate the install of per-machine ActiveX controls to a Standard User in the enter

Specifies the category of programs that appears when users open the "Add New Programs" page. If you enable this setting, onl

Removes the "Add a program from CD-ROM or floppy disk" section from the Add New Programs page. This prevents users from using

Removes the "Add programs from Microsoft" section from the Add New Programs page. This setting prevents users from using Add o

Prevents users from viewing or installing published programs. This setting removes the "Add programs from your network" sectio

Removes the Add New Programs button from the Add or Remove Programs bar. As a result, users cannot view or change the attached

Prevents users from using Add or Remove Programs. This setting removes Add or Remove Programs from Control Panel and remove

Removes the Set Program Access and Defaults button from the Add or Remove Programs bar. As a result, users cannot view or cha

Removes the Change or Remove Programs button from the Add or Remove Programs bar. As a result, users cannot view or change th

Prevents users from using Add or Remove Programs to configure installed services. This setting removes the "Set up service

Removes links to the Support Info dialog box from programs on the Change or Remove Programs page. Programs listed on the Chan

Removes the Add/Remove Windows Components button from the Add or Remove Programs bar. As a result, users cannot view or ch

Specifies whether to prevent the MS-DOS subsystem (ntvdm.exe) from running for all users. This setting affects the launching of

Specifies whether to prevent the MS-DOS subsystem (ntvdm.exe) from running on this computer. This setting affects the launching

This policy controls the visibility of the Program Compatibility property page shell extension. This shell extension is visible on

This policy controls the state of the application compatibility engine in the system. The engine is part of the loader and look

This policy controls the state of the Program Compatibility Wizard. When enabled, this policy disables the start page of the wiza

This policy controls the state of the Program Compatibility Assistant in the system. The PCA monitors user initiated prog

This policy controls the state of the Program Compatibility Assistant in the system. The PCA monitors user initiated prog

This policy setting allows you to manage the behavior for notifying registered antivirus programs. If multiple programs are regist

This policy setting allows you to configure the logic that Windows uses to determine the risk for file attachments. Preferring the

This policy setting allows you to manage whether Windows marks file attachments with information about their zone of origin (i.e.

This policy setting allows you to manage whether users can manually remove the zone information from saved file attachments by

This policy setting allows you to manage the default risk level for file types. To fully customize the risk level for file attachments

This policy setting allows you to configure the list of high risk file types. If the file attachment is in the list of high risk file ty

This policy setting allows you to configure the list of low risk file types. If the attachment is in the list of low risk file types, W

This policy setting allows you to configure the list of moderate risk file types. If the attachment is in the list of moderate risk fil

Sets the default behavior for Autorun commands. Autorun commands are generally stored in autorun.inf files. They often launc

Sets the default behavior for Autorun commands. Autorun commands are generally stored in autorun.inf files. They often launc

If this policy is enabled, the "Always do this..." checkbox in Autoplay dialog will not be set by default when the dialog is shown.

If this policy is enabled, the "Always do this..." checkbox in Autoplay dialog will not be set by default when the dialog is shown.

Turns off the Autoplay feature. Autoplay begins reading from a drive as soon as you insert media in the drive. As a result, the

Turns off the Autoplay feature. Autoplay begins reading from a drive as soon as you insert media in the drive. As a result, the

This setting determines if the BITS Peer-caching feature is enabled on a specific computer. By default, the files in a BITS job ar

This setting specifies the number of days a pending BITS job can remain inactive before the job is considered abandoned. By defau

This setting limits the amount of time that BITS will take to download the files in a BITS job. The time limit applies only to th

This setting limits the network bandwidth that BITS uses for background transfers (this setting does not affect foreground transfer

This setting specifies the maximum age of files in the Peercache. In order to make the most efficient use of disk space, by defaul

This setting specifies the maximum amount of disk space that can be used for the BITS Peercache, as a percentage of the total syst

This setting specifies whether the computer will act as a BITS peercaching client. By default, when BITS peercaching is enabled, t

This setting specifies whether the computer will act as a BITS peercaching server. By default, when BITS peercaching is enabled, th

This setting limits the network bandwidth that BITS uses for peercache transfers (this setting does not affect transfers from t

This setting specifies the maximum number of BITS jobs that can be created for all users of the computer. By default, BITS limits

This setting specifies the maximum number of BITS jobs that can be created by a user. By default, BITS limits the total number o

This setting specifies the maximum number of files that a BITS job can contain. By default, a BITS job is limited to 200 files. You

This setting specifies the maximum number of ranges that can be added to a file in a BITS job. By default, files in a BITS job are

Specifies whether Import Video can run. Import Video is a feature of Windows Vista that can be used to import video from a digit

Specifies whether Import Video can run. Import Video is a feature of Windows Vista that can be used to import video from a digit

If you enable this setting all Customer Experience Improvement Program uploads are redirected to Microsoft Operations Manager se

This policy setting will enable tagging of Windows Customer Experience Improvement data when a study is being conducted. If you

Determines the cipher suites used by the Secure Socket Layer (SSL). If this setting is enabled, SSL cipher su

Directs the system to search Active Directory for missing Component Object Model (COM) components that a program requires. Man

Directs the system to search Active Directory for missing Component Object Model (COM) components that a program requires. Man

Disables the application sharing feature of NetMeeting completely. Users will not be able to host or view shared applications.

Prevents users from allowing others in a conference to control what they have shared. This enforces a read-only mode; the othe

Prevents users from sharing anything themselves. They will still be able to view shared applications/desktops from others.

Prevents users from sharing command prompts. This prevents users from inadvertently sharing out applications, since comman

Prevents users from sharing the whole desktop. They will still be able to share individual applications.

Prevents users from sharing Explorer windows. This prevents users from inadvertently sharing out applications, since Explorer

Prevents users from sharing applications in true color. True color sharing uses more bandwidth in a conference.

Disables the audio feature of NetMeeting. Users will not be able to send or receive audio.

Prevents user from changing the DirectSound audio setting. DirectSound provides much better audio quality, but older audio ha

Disables full duplex mode audio. Users will not be able to listen to incoming audio while speaking into the microphone. Older

Prevents users from receiving video. Users will still be able to send video provided they have the hardware."

Prevents users from sending video if they have the hardware. Users will still be able to receive video from others.

Limits the bandwidth audio and video will consume when in a conference. This setting will guide NetMeeting to choose the right

Make the automatic acceptance of incoming calls persistent.

Disables the Chat feature of NetMeeting.

Disables the T.126 whiteboard feature of NetMeeting.

Disables the 2.x whiteboard feature of NetMeeting. The 2.x whiteboard is available for compatibility with older versions of Net

Disables the remote desktop sharing feature of NetMeeting. Users will not be able to set it up or use it for controlling their com

Configures NetMeeting to download settings for users each time it starts. The settings are downloaded from the URL listed in

Prevents users from adding directory (ILS) servers to the list of those they can use for placing calls.

Prevents users from turning on automatic acceptance of incoming calls. This ensures that others cannot call and connect to

Prevents users from changing the way calls are placed, either directly or via a gatekeeper server.

Disables the directory feature of NetMeeting. Users will not logon to a directory (ILS) server when NetMeeting starts. Users wi

Prevents users from receiving files from others in a conference.

Prevents users from sending files to others in a conference.

Prevents users from viewing directories as Web pages in a browser.

Limits the size of files users can send to others in a conference.

Sets the URL NetMeeting will display when the user chooses the Help Online Support command.

Sets the level of security for both outgoing and incoming NetMeeting calls.

Disables the Advanced Calling button on the General Options page. Users will not then be able to change the call placement m

Hides the Audio page of the Tools Options dialog. Users will not then be able to change audio settings.

Hides the General page of the Tools Options dialog. Users will not then be able to change personal identification and bandwidth

Hides the Security page of the Tools Options dialog. Users will not then be able to change call security and authentication setti

Hides the Video page of the Tools Options dialog. Users will not then be able to change video settings.

Hides specified Control Panel items. This setting removes Control Panel items (such as "Mouse", "System" or "Programs and Fea

This setting affects the visual style and presentation of the Control Panel. It allows you to disable the new categorized Contro

Disables all Control Panel programs. This setting prevents Control.exe, the program file for Control Panel, from starting. As a

Hides all Control Panel items and folders except those specified in this setting. This setting removes all Control Panel items

Disables Display in Control Panel. If you enable this setting, Display in Control Panel does not run. When users try to start

Removes the Appearance and Themes tabs from Display in Control Panel. When this setting is enabled, it removes the desktop co

Removes the Desktop tab from Display in Control Panel. This setting prevents users from using Control Panel to change the p

Removes the Screen Saver tab from Display in Control Panel. This setting prevents users from using Control Panel to add, co

Removes the Settings tab from Display in Control Panel. This setting prevents users from using Control Panel to add, configur

Enables desktop screen savers. If you disable this setting, screen savers do not run. Also, this setting disables the Screen Sav

Specifies the screen saver for the user's desktop. If you enable this setting, the system displays the specified screen saver on t

Determines whether screen savers used on the computer are password protected. If you enable this setting, all screen savers a

Specifies how much user idle time must elapse before the screen saver is launched. When configured, this idle time can be set fr

Prevents users from adding or changing the background design of the desktop. By default, users can use the Desktop tab of Disp

This setting forces the theme color to be the default color scheme. If you enable this setting, a user cannot change the color

This setting effects the Themes tab that controls the overall appearance of windows. It is accessed through the Display icon in C

Prevents users from changing the visual style of the windows and buttons displayed on their screens. When enabled, this settin

This setting allows you to load a specific visual style file by entering the path (location) of the visual style file. This can be

Prevents users from changing the size of the font in the windows and buttons displayed on their screens. If this setting is enabl

This policy setting allows an administrator to standardize the logon pictures for all users on a system to the default user pictu

This policy setting specifies a default logon domain which may be a different domain than the machine joined domain. Without thi

This policy setting allows the administrator to exclude the specified credential providers from use during authentication. Note: c

This policy setting applies to applications using the Cred SSP component (for example: Terminal Server). If you enable this









By default administrator accounts are not displayed when attempting to elevate a running application. If you enable this policy

This policy setting requires the user to enter Microsoft Windows credentials using a trusted path, to prevent a Trojan horse or o

Prevents users from changing their Windows password on demand. This setting disables the "Change Password" button on the

Prevents users from locking the system. While locked, the desktop is hidden and the system cannot be used. Only the user who

Prevents users from starting Task Manager (Taskmgr.exe). If this setting is enabled and users try to start Task Manager, a m

This setting disables or removes all menu items and buttons that log the user off the system. Also, see the "Remove Logoff on

Allows you to specify that local computer administrators can supplement the "Define Activation Security Check exemptions" list. I

Allows you to view and change a list of DCOM server application ids (appids) which are exempted from the DCOM Activation security

Enables Active Desktop and prevents users from disabling it. This setting prevents users from trying to enable or disable Active

Disables Active Desktop and prevents users from enabling it. This setting prevents users from trying to enable or disable Active

Prevents the user from enabling or disabling Active Desktop or changing the Active Desktop configuration. This is a comprehens

Adds and deletes specified Web content items. You can use the "Add" box in this setting to add particular Web-based items or sho

Prevents users from adding Web content to their Active Desktop. This setting removes the "New" button from Web tab in Display

Prevents users from removing Web content from their Active Desktop. In Active Desktop, you can add items to the desktop but c

Prevents users from deleting Web content from their Active Desktop. This setting removes the Delete button from the Web tab in

Prevents users from changing the properties of Web content items on their Active Desktop. This setting disables the Properties

Removes Active Desktop content and prevents users from adding Active Desktop content. This setting removes all Active Deskto

Permits only bitmap images for wallpaper. This setting limits the desktop background ("wallpaper") to bitmap (.bmp) files. If

Specifies the desktop background ("wallpaper") displayed on all users' desktops. This setting lets you specify the wallpaper on

Displays the filter bar above the results of an Active Directory search. The filter bar consists of buttons for applying additional f

Hides the Active Directory folder in Network Locations. The Active Directory folder displays Active Directory objects in a browse

Specifies the maximum number of objects the system displays in response to a command to browse or search Active Directory. This

Prevents users from changing the path to their profile folders. By default, a user can change the location of their individual prof

Removes icons, shortcuts, and other default and user-defined items from the desktop, including Briefcase, Recycle Bin, Compu

Prevents users from using the Desktop Cleanup Wizard. If you enable this setting, the Desktop Cleanup wizard does not automat

Removes the Internet Explorer icon from the desktop and from the Quick Launch bar on the taskbar. This setting does not preve

This setting hides Computer from the desktop and from the new Start menu. It also hides links to Computer in the Web view of all E

Removes most occurrences of the My Documents icon. This setting removes the My Documents icon from the desktop, from Wind

Removes the Network Locations icon from the desktop. This setting only affects the desktop icon. It does not prevent users fr

This setting hides Properties on the context menu for Computer. If you enable this setting, the Properties option will not be p

This setting hides Properties for the context menu on the Documents icon. Note: In operating systems earlier than Microsoft Win

Remote shared folders are not added to Network Locations whenever you open a document in the shared folder. If you disable t

Removes most occurrences of the Recycle Bin icon. This setting removes the Recycle Bin icon from the desktop, from Windows E

Removes the Properties option from the Recycle Bin context menu. If you enable this setting, the Properties option will not be p

Prevents users from saving certain changes to the desktop. If you enable this setting, users can change the desktop, but som

Prevents users from manipulating desktop toolbars. If you enable this setting, users cannot add or remove toolbars from the deskt

Prevents users from adjusting the length of desktop toolbars. Also, users cannot reposition items or toolbars on docked toolbars.

When selecting which driver to install, do not distinguish between drivers that are signed by a Microsoft Windows Publisher certific

Do not display "Found New Hardware" balloons during device installation. If you enable this setting, "Found New Hardware" ballo

Specifies the number of seconds the system will wait for a device installation task to complete. If the task is not complete within t

Specifies whether or not a system restore point is created when a new device driver is installed on your machine. If you enable t

Specifies whether or not remote access to the Plug and Play interface is allowed. If you enable this setting, remote connections

Specifies whether or not to send a Windows Error Report when a generic driver is installed on a device. If you enable this settin

Allows members of the Administrators group to install and update the drivers for any device, regardless of other policy settings. I

Specifies a list of device setup class GUIDs describing devices that can be installed. This setting is intended to be used only wh

Specifies a list of Plug and Play device setup class GUIDs for devices that cannot be installed. If you enable this setting, new d

Specifies a list of Plug and Play hardware IDs and compatible IDs that describe devices that can be installed. This setting is int

Specifies a list of Plug and Play hardware IDs and compatible IDs for devices that cannot be installed. If you enable this setting

Prevents removable devices from being installed. If you enable this setting, removable devices may not be installed, and existin

This setting controls the installation policy for devices that are not specifically described by any other policy. If you enable th

Specifies a custom message that is displayed to the user in the title of the notification balloon when policy prevents the installati

Specifies a custom message that is displayed to the user in the text of the notification balloon when policy prevents the installat

Specifies a list of device setup class GUIDs describing device drivers that non-administrator members of the built-in Users group

This setting configures the location that Windows searches for drivers when a new piece of hardware is found. By default, Wi

Specifies whether the administrator will be prompted about going to Windows Update to search for device drivers using the Intern

Specifies whether the administrator will be prompted about going to Windows Update to search for device drivers using the Intern

Determines how the system responds when a user tries to install device driver files that are not digitally signed. This setting es

Allows you to configure how often a Distributed File System (DFS) client attempts to discover domain controllers on their network.

Specifies whether Digital Locker can run. Digital Locker is a dedicated download manager associated with Windows Marketplace a

Specifies whether Digital Locker can run. Digital Locker is a dedicated download manager associated with Windows Marketplace a

Substitutes custom alert text in the disk diagnostic message shown to users when a disk reports a S.M.A.R.T. fault. If you enabl

Determines the execution level for S.M.A.R.T.-based disk diagnostics. Self-Monitoring And Reporting Technology (S.M.A.R.T.) is a

Turns off the boot and resume optimizations for the hybrid hard disks in the system. If you enable this policy setting, the sy

Turns off the power save mode on the hybrid hard disks in the system. If you enable this policy, the disks will not be put into

Turns off all support for the non-volatile (NV) cache on all hybrid hard disks in the system. To check if you have hybrid hard d

Turns off the solid state mode for the hybrid hard disks. If you enable this policy setting, frequently written files such as th

Enables and disables disk quota management on all NTFS volumes of the computer, and prevents users from changing the setting.

Determines whether disk quota limits are enforced and prevents users from changing the setting. If you enable this setting, dis

Specifies the default disk quota limit and warning level for new users of the volume. This setting determines how much disk spac

Determines whether the system records an event in the local Application log when users reach their disk quota limit on a volume, a

Determines whether the system records an event in the Application log when users reach their disk quota warning level on a volume

Extends the disk quota policies in this folder to NTFS file system volumes on removable media. If you disable this setting or do

Specifies that Distributed Link Tracking clients in this domain may use the Distributed Link Tracking (DLT) server, which runs

Specifies a connection-specific DNS suffix. This setting supersedes the connection-specific DNS suffixes set on the computers to w

Defines the DNS servers to which a computer sends queries when it attempts to resolve names. Warning: The list of the DNS serve

Specifies the primary Domain Name System (DNS) suffix for all affected computers. The primary DNS suffix is used in DNS name reg

Determines if a computer performing dynamic registration may register A and PTR resource records with a concatenation of its C

Determines whether the registration of PTR resource records is enabled for the computers to which this policy is applied. By d

Determines if dynamic update is enabled. Computers configured for dynamic update automatically register and update their DNS re

Determines whether a DNS client that attempts to register its A resource record should overwrite an existing A resource record o

Specifies the Registration Refresh Interval of A and PTR resource records for computers to which this setting is applied. This s

Specifies the value for the Time-To-Live (TTL) field in A and PTR resource records registered by the computers to which this settin

Determines the DNS suffixes to attach to an unqualified single-label name before submission of a DNS query for that name. An un

Specifies whether the computers to which this setting is applied use secure dynamic update or standard dynamic update for regis

Specifies whether the computers to which this setting is applied may send dynamic updates to the zones named with a single label

Determines whether the DNS client performs primary DNS suffix devolution in a name resolution process. When a user submits a q

Local Link Multicast Name Resolution (LLMNR) is a secondary name resolution protocol. Queries are sent over the Local Link, a si

Specifies whether the computers to which this setting is applied may attach suffixes to an unqualified multi-label name before sen

This policy setting controls the appearance of window animations such as those found when restoring, minimizing, and maximizing w

This policy setting controls the appearance of window animations such as those found when restoring, minimizing, and maximizing w

This policy setting controls how some graphics are rendered and facilitates other features, including Flip, Flip3D, and Taskbar Thum

This policy setting controls how some graphics are rendered and facilitates other features, including Flip, Flip3D, and Taskbar Thum

Flip3D is a 3D window switcher. If you enable this setting, Flip3D will be inaccessible. If you disable or do not configure this p

Flip3D is a 3D window switcher. If you enable this setting, Flip3D will be inaccessible. If you disable or do not configure this p

This policy setting controls the default color for window frames when the user does not specify a color. If you enable this policy

This policy setting controls the default color for window frames when the user does not specify a color. If you enable this policy

This policy setting controls the ability to change the color of window frames. If you enable this policy setting, you prevent use

This policy setting controls the ability to change the color of window frames. If you enable this policy setting, you prevent use

Prevents Windows Explorer from encrypting files that are moved to an encrypted folder. If you disable this setting or do not con

Configures how errors are reported and what information is sent when Error Reporting is enabled. This Policy will not enable or d

Use this setting to control whether or not a user is given the choice to report an error. When Display Error Notification is enable

If this setting is enabled, Windows Error Reporting will not send any problem information to Microsoft. Additionally, solution inf

If this setting is enabled, Windows Error Reporting will not send any problem information to Microsoft. Additionally, solution inf

If this setting is enabled Windows Error Reporting events will not be logged to the system event log.

If this setting is enabled Windows Error Reporting events will not be logged to the system event log.

If this setting is enabled any additional data requests from Microsoft in response to a Windows Error Reporting event will be auto

If this setting is enabled any additional data requests from Microsoft in response to a Windows Error Reporting event will be auto

This setting controls whether or not errors in general applications are included when error reporting is enabled. When this setting

This setting controls error reporting for errors in general applications when error reporting is enabled. The "Default" dropdown lis

This setting specifies the applications that are always included in error reporting. When this setting is enabled, You can create a

This setting controls whether or not errors in the operating system are included when error reporting is enabled. When this setting

This setting controls the behavior of the Windows Error Reporting archive. If Archive behavior is set to "Store all", all data col

This setting controls the behavior of the Windows Error Reporting archive. If Archive behavior is set to "Store all", all data col

This setting determines the corporate server to which Windows Error Reporting will send reports (instead of sending reports to

This setting determines the behavior of the error reporting exclusion list. Windows will not send reports for any process added to

This setting determines the behavior of the error reporting exclusion list. Windows will not send reports for any process added to

This setting determines the behavior of the Windows Error Reporting queue. If Queuing behavior is set to "Default", Windows w

This setting determines the behavior of the Windows Error Reporting queue. If Queuing behavior is set to "Default", Windows wi

This policy setting determines the consent behavior of Windows Error Reporting for specific event types. If this policy setting i

This policy setting determines the consent behavior of Windows Error Reporting for specific event types. If this policy setting i

This setting determines the behavior of the default consent setting in relation to custom consent settings. If this setting is enabl

This setting determines the behavior of the default consent setting in relation to custom consent settings. If this setting is enabl

This setting determines the consent behavior of Windows Error Reporting. If Consent level is set to "Always ask before sending d

This setting determines the consent behavior of Windows Error Reporting. If Consent level is set to "Always ask before sending d

This policy setting controls Event Log behavior when the log file reaches its maximum size and takes effect only if the ΓÇ£Retain

This policy setting specifies to use the security descriptor for the log using the Security Descriptor Definition Language (SDDL) str

This policy setting controls Event Log behavior when the log file reaches its maximum size. When this policy setting is enabled

This policy setting controls the location of the log file. The location of the file must be writable by the Event Log service and sho

This policy setting specifies the maximum size of the log file in kilobytes. If you enable this policy setting, you can configure


This policy setting specifies to use the security descriptor for the log using the Security Descriptor Definition Language (SDDL) st





This policy setting specifies to use the security descriptor for the log using the Security Descriptor Definition Language (SDDL) str


This policy setting turns on logging. If you enable or do not configure this policy setting, then events can be written to this log.




This policy setting specifies to use the security descriptor for the log using the Security Descriptor Definition Language (SDDL) st




This is the program that will be invoked when the user clicks the events.asp link.

This specifies the command line parameters that will be passed to the events.asp program

This is the URL that will be passed to the Description area in the Event Properties dialog box. Change this value if you want to

This policy setting configures Windows Explorer to always display the menu bar. Note: By default, the menu bar is not displayed

This policy setting allows administrators to prevent users from adding new items such as files or folders to the root of their Users

This policy is similar to settings directly available to computer users. Disabling animations can improve usability for users with

Disabling heap termination on corruption can allow certain legacy plug-in applications to function without terminating Explorer i

This policy setting allows you to configure the recovery behavior for corrupted files to one of three states: Regular: Detection,

Symbolic links can introduce vulnerabilities in certain applications. To mitigate this issue, you can selectively enable or disabl

This policy setting allows the administrator to define whether Folder Redirection should use localized names for the All Program

All redirected shell folders, such as Contacts, Documents, Desktop, Favorites, Music, Pictures, Videos, Start Menu, and AppData\Roam

This policy setting allows the administrator to define whether Folder Redirection should use localized names for the All Program

Hides the Details Pane in Windows Explorer. If you enable this policy setting, the Details Pane in Windows Explorer is hidden an

Hides the Preview Pane in Windows Explorer. If you enable this policy setting, the Preview Pane in Windows Explorer is hidden a

Manages download of game box art and ratings from the Windows Metadata Services. If you enable this setting, game informatio

Tracks the last play time of games in the Games folder. If you enable this setting the last played time of games will not be record

This policy prevents a user from selecting a supplemental custom locale as their user locale. The user is restricted to the set of lo

This policy prevents a user from selecting a supplemental custom locale as their user locale. The user is restricted to the set of lo

This policy restricts the permitted system locales to the specified list. If the list is empty, it locks the system locale to its c

This policy restricts users on a machine to the specified list of user locales. If the list is empty, it locks all user locales to th

This policy restricts users on a machine to the specified list of user locales. If the list is empty, it locks all user locales to th

This policy prevents users from changing their user geographical location (GeoID). If this policy is Enabled, then the user cannot

This policy prevents users from changing their user geographical location (GeoID). If this policy is Enabled, then the user cannot

This policy prevents the user from customizing their locale by changing their user overrides. Any existing overrides in place when

This policy prevents the user from customizing their locale by changing their user overrides. Any existing overrides in place when

This policy removes the Administrative options from the Regional and Language Options control panel. Administrative options inclu

This policy removes the option to change the user's geographical location (GeoID) from the Language and Regional Options control

This policy removes the option to change the user's menus and dialogs (UI) language from the Language and Regional Options contr

This policy removes the regional formats interface from the Regional and Language Options control panel. This does not, however,

This is a setting for computers with more than one UI language installed. If you enable this setting the UI language of Windows m

This is a setting for computers with more than one UI language installed. If you enable this setting the UI language of Windows

This is a setting for computers with more than one UI language installed. If you enable this setting, the UI language of Window

This setting restricts users to the specified language by disabling the menus and dialog box controls in the Regional and Languag

Determines how programs interpret two-digit years. This setting specifies the largest two-digit year interpreted as being preced

This policy setting prevents Local Group Policy objects (Local GPOs) from being applied. By default, the policy settings in Lo

This policy setting specifies how long Group Policy should wait for network availability notifications during startup policy proce

Allows user-based policy processing, roaming user profiles, and user object logon scripts for interactive logons across forests.

Determines when software installation policies are updated. This setting affects all policies that use the software installatio

Determines when disk quota policies are updated. This setting affects all policies that use the disk quota component of Group

Determines when encryption policies are updated. This setting affects all policies that use the encryption component of Group

Determines when folder redirection policies are updated. This setting affects all policies that use the folder redirection com

Determines when Internet Explorer Maintenance policies are updated. This setting affects all policies that use the Internet E

Determines when IP security policies are updated. This setting affects all policies that use the IP security component of Grou

Determines when registry policies are updated. This setting affects all policies in the Administrative Templates folder and any

Determines when policies that assign shared scripts are updated. This setting affects all policies that use the scripts compon

Determines when security policies are updated. This setting affects all policies that use the security component of Group Poli

Determines when policies that assign wireless network settings are updated. This setting affects all policies that use the wi

Determines when policies that assign wired network settings are updated. This setting affects all policies that use the wired

This setting controls the ability of users to view their Resultant Set of Policy (RSoP) data. By default, interactively logged

This setting controls the ability of users to view their Resultant Set of Policy (RSoP) data. By default, interactively logged

Prevents the system from updating the Administrative Templates source files automatically when you open the Group Policy Object

Prevents Group Policy from being updated while the computer is in use. This setting applies to Group Policy for computers, users,

This setting allows you to control a user's ability to invoke a computer policy refresh. If you enable this setting, users may not

Prevents administrators from viewing or using Group Policy preferences. A Group Policy administration (.adm) file can contain b

Determines which domain controller the Group Policy Object Editor snap-in uses. -- "Use the Primary Domain Controller" indic

Defines a slow connection for purposes of applying and updating Group Policy. If the rate at which data is transferred from the

Defines a slow connection for purposes of applying and updating Group Policy. If the rate at which data is transferred from the

Specifies how often Group Policy for computers is updated while the computer is in use (in the background). This setting specifie

Specifies how often Group Policy is updated on domain controllers while they are running (in the background). The updates specifi

Specifies how often Group Policy for users is updated while the computer is in use (in the background). This setting specifies a

Sets the default display name for new Group Policy objects. This setting allows you to specify the default name for new Grou

Creates new Group Policy object links in the disabled state. This setting creates all new Group Policy object links in the disab

Always use local ADM files for the Group Policy snap-in. By default, when you edit a Group Policy object (GPO) using the Group

This setting allows you to enable or disable Resultant Set of Policy (RSoP) logging on a client computer. RSoP logs informatio

Applies alternate user settings when a user logs on to a computer affected by this setting. This setting directs the system to a

With this policy, you can restrict certain HTML Help commands to function only in HTML Help (.chm) files within specified folders

Allows you to restrict programs from being run from online Help. If you enable this setting, you can prevent programs that you sp

Allows you to restrict programs from being run from online Help. If you enable this setting, you can prevent programs that you sp

Specifies whether active content links in trusted assistance content are rendered. By default, the Help viewer renders trusted ass

Specifies whether untrusted content is rendered. By default, the Help viewer renders untrusted assistance content pages with the e

Specifies whether users can provide ratings for Help content. If this setting is enabled, this policy setting prevents ratings con

Specifies whether users can participate in the Help Experience Improvement program. The Help Experience Improvement program co

Specifies whether users can search and view content from Windows Online in Help and Support. Windows Online provides the most

This policy setting allows you to manage whether HotStart buttons can be used to launch applications. If you enable this policy

This policy setting allows you to manage whether HotStart buttons can be used to launch applications. If you enable this policy

Specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. If this setting is enabled, al

Specifies whether Windows can access the Internet to accomplish tasks that require Internet resources. If this setting is enabled, al

Specifies whether to automatically update root certificates using the Windows Update Web site. Typically, a certificate is used

Specifies whether to allow printing over HTTP from this client. Printing over HTTP allows a client to print to printers on the intr

Specifies whether to allow printing over HTTP from this client. Printing over HTTP allows a client to print to printers on the intr

Specifies whether to allow this client to download print driver packages over HTTP. To set up HTTP printing, non-inbox drivers ne

Specifies whether to allow this client to download print driver packages over HTTP. To set up HTTP printing, non-inbox drivers ne

This policy specifies whether Windows searches Windows Update for device drivers when no local drivers for a device are present

Specifies whether "Events.asp" hyperlinks are available for events within the Event Viewer application. The Event Viewer norma

Specifies whether to show the "Did you know?" section of Help and Support Center. This content is dynamically updated when use

Specifies whether users can perform a Microsoft Knowledge Base search from the Help and Support Center. The Knowledge Base is

Specifies whether the Internet Connection Wizard can connect to Microsoft to download a list of Internet Service Providers (ISPs).

Specifies whether the Windows Registration Wizard connects to Microsoft.com for online registration. If you enable this setting

Controls whether or not errors are reported to Microsoft. Error Reporting is used to report information about a system or applic

This setting allows you to remove access to Windows Update. If you enable this setting, all Windows Update features are remo

Specifies whether Search Companion should automatically download content updates during local and Internet searches. When the

Specifies whether to use the Microsoft Web service for finding an application to open a file with an unhandled file association.

Specifies whether to use the Microsoft Web service for finding an application to open a file with an unhandled file association.

Specifies whether Windows should download a list of providers for the Web publishing and online ordering wizards. These wizards

Specifies whether Windows should download a list of providers for the Web publishing and online ordering wizards. These wizards

Specifies whether the "Order Prints Online" task is available from Picture Tasks in Windows folders. The "Order Prints Online" Wi

Specifies whether the "Order Prints Online" task is available from Picture Tasks in Windows folders. The "Order Prints Online" Wi

Specifies whether the tasks "Publish this file to the Web," "Publish this folder to the Web," and "Publish the selected items to t

Specifies whether the tasks "Publish this file to the Web," "Publish this folder to the Web," and "Publish the selected items to t

Specifies whether Windows Messenger collects anonymous information about how Windows Messenger software and service is used.

Specifies whether Windows Messenger collects anonymous information about how Windows Messenger software and service is used.

The Windows Customer Experience Improvement Program will collect information about your hardware configuration and how you use

When you enable this setting, it will prevent Internet Information Services (IIS) from being installed, and you will not be able to

Designates the Audio/Video Player ActiveX control as administrator-approved. This control is used for playing sounds, videos, an

Designates the Microsoft Network (MSN) Carpoint automatic pricing control as administrator-approved. This control enables enhan

This ActiveX control enables users to edit HTML text and see a faithful rendition of how the text would look in the browser. There a

Designates Shockwave flash as an administrator approved control. If you enable this policy, this control can be run in security

Designates a set of Microsoft Network (MSN) Investor controls as administrator-approved. These controls enable users to view up

Designates a set of Microsoft ActiveX controls used to manipulate pop-up menus in the browser as administrator-approved. If y

Designates the Microsoft Agent ActiveX control as administrator-approved. Microsoft Agent is a set of software services that sup

Designates the Microsoft Chat ActiveX control as administrator-approved. This control is used by Web authors to build text-base

Designates a set of MSNBC controls as administrator-approved. These controls enable enhanced browsing of news reports on the M

Designates NetShow File Transfer Control as an administrator approved control. If you enable this policy, this control can be r

Designates Microsoft Scriptlet Component as an administrator approved control. It is an Active X control which is used to render

Designates Microsoft Survey Control as an administrator approved control. If you enable this policy, this control can be run in

This policy setting allows you to manage whether users receive a dialog requesting permission for active content on a CD to run.

This policy setting allows you to manage whether users receive a dialog requesting permission for active content on a CD to run.

This policy setting allows you to manage whether Internet Explorer will check revocation status of servers' certificates. Certificat

This policy setting allows you to manage whether Internet Explorer will check revocation status of servers' certificates. Certificat

This policy setting prevents the text on the screen from being rendered using the ClearType technology that enhances the readabil

This policy setting prevents the text on the screen from being rendered using the ClearType technology that enhances the readabil

This policy setting prevents users from using the Reset Internet Explorer Settings feature. Reset Internet Explorer Settings will all

This policy setting prevents users from using the Reset Internet Explorer Settings feature. Reset Internet Explorer Settings will all

This policy setting allows you to manage whether Internet Explorer checks for digital signatures (which identifies the publisher o

This policy setting allows you to manage whether Internet Explorer checks for digital signatures (which identifies the publisher o

This policy setting allows you to manage whether Internet Explorer will launch COM add-ons known as browser helper objects, such a

This policy setting allows you to manage whether Internet Explorer will launch COM add-ons known as browser helper objects, such a

This policy setting allows you to manage whether users can automatically download and install Web components (such as fonts) t

This policy setting allows you to manage whether users can automatically download and install Web components (such as fonts) t

This policy setting allows you to manage whether users can download and install self-installing program files (non-Internet Explo

This policy setting allows you to manage whether users can download and install self-installing program files (non-Internet Explo

This policy setting allows you to manage whether Internet Explorer checks the Internet for newer versions. When Internet Explorer

This policy setting allows you to manage whether Internet Explorer checks the Internet for newer versions. When Internet Explorer

This policy setting allows you to manage whether software, such as ActiveX controls and file downloads, can be installed or run by the

This policy setting allows you to manage whether software, such as ActiveX controls and file downloads, can be installed or run by the

This policy setting allows you to manage whether Internet Explorer will display animated pictures found in Web content. Generally o

This policy setting allows you to manage whether Internet Explorer will display animated pictures found in Web content. Generally o

This policy setting allows you to manage whether Internet Explorer will play sounds found in web content. Generally only sound file

This policy setting allows you to manage whether Internet Explorer will play sounds found in web content. Generally only sound file

This policy setting allows you to manage whether Internet Explorer will display videos found in Web content. Generally only embedded

This policy setting allows you to manage whether Internet Explorer will display videos found in Web content. Generally only embedded

This policy setting specifies whether you will accept requests from Web sites for Profile Assistant information. If you enable thi

This policy setting specifies whether you will accept requests from Web sites for Profile Assistant information. If you enable thi

This policy setting allows you to manage whether Internet Explorer will save encrypted pages that contain secure (HTTPS) informa

This policy setting allows you to manage whether Internet Explorer will save encrypted pages that contain secure (HTTPS) informa

This policy setting allows you to manage whether Internet Explorer deletes the contents of the Temporary Internet Files folder afte

This policy setting allows you to manage whether Internet Explorer deletes the contents of the Temporary Internet Files folder afte

This policy setting lets you turn on inline AutoComplete for Web addresses. The AutoComplete feature provides suggestions for wha

This policy setting let you turn off Inline AutoComplete in Windows Explorer. Inline AutoComplete provides suggestions for what yo

This policy setting allows you to turn on your script debugger, if one is installed. Script debuggers are used by Web site develope

This policy setting specifies whether, when there is a problem connecting with an Internet server, to provide a detailed description

This policy setting specifies if, as you move from one Web page to another, Internet Explorer fades out of the page you are leaving

This policy setting specifies whether to display script errors when a page does not appear properly because of problems with its scr

This policy setting specifies whether smooth scrolling is used to display content at a predefined speed. If you enable this policy

This policy setting specifies how you want links on Web pages to be underlined. Select one of the following settings: ΓÇó To unde

Restricts the amount of information downloaded for offline viewing. If you enable this policy, you can set limits to the size

Prevents users from adding channels to Internet Explorer. Channels are Web sites that are updated automatically on your comput

Prevents users from specifying that Web pages can be downloaded for viewing offline. When users make Web pages available for off

Prevents channel providers from recording information about when their channel pages are viewed by users who are working offline.

Prevents users from viewing the Channel bar interface. Channels are Web sites that are automatically updated on their computer ac

Prevents users from adding, editing, or removing schedules for offline viewing of Web pages and groups of Web pages that users h

Prevents users from editing an existing schedule for downloading Web pages for offline viewing. When users make Web pages avail

Prevents users from disabling channel synchronization in Microsoft Internet Explorer. Channels are Web sites that are automatic

Prevents users from clearing the preconfigured settings for Web pages to be downloaded for offline viewing. When users make We

Disables existing schedules for downloading Web pages for offline viewing. When users make Web pages available for offline vie

Prevents content from being downloaded from Web sites that users have subscribed to. When users make Web pages available for o

This policy setting prevents the setting of the code download path for each machine. The Internet Component Download service expo

This policy setting allows the user to choose the default text size in Internet Explorer. If you enable this policy setting, a us

Removes the Advanced tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented

Removes the Advanced tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented

Removes the Connections tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevent

Removes the Connections tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevent

If you enable this policy setting, users are prevented from seeing and changing ratings, certificates, AutoComplete, Wallet, and Pr

If you enable this policy setting, users are prevented from seeing and changing ratings, certificates, AutoComplete, Wallet, and Pr

Removes the General tab from the interface in the Internet Options dialog box. If you enable this policy, users are unable to s

Removes the General tab from the interface in the Internet Options dialog box. If you enable this policy, users are unable to s

Removes the Privacy tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented fro

Removes the Privacy tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented fro

Removes the Programs tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented

Removes the Programs tab from the interface in the Internet Options dialog box. If you enable this policy, users are prevented

Removes the Security tab from the interface in the Internet Options dialog box. If you enable this policy, it prevents users from

Removes the Security tab from the interface in the Internet Options dialog box. If you enable this policy, it prevents users from

This policy setting allows you to manage whether Internet Explorer converts Unicode domain names to IDN format (Punycode) befo

This policy setting allows you to manage whether Internet Explorer converts Unicode domain names to IDN format (Punycode) befo

This policy setting allows you to manage whether Internet Explorer uses UTF-8 for mailto links. If you enable this policy settin

This policy setting allows you to manage whether Internet Explorer uses UTF-8 for mailto links. If you enable this policy settin

Internet Explorer treats as fatal any Secure Socket Layer/Transport Layer Security (SSL/TLS) certificate errors that interrupt naviga

Internet Explorer treats as fatal any Secure Socket Layer/Transport Layer Security (SSL/TLS) certificate errors that interrupt naviga

This policy setting specifies whether to use UTF-8, a standard that defines characters so they are readable in any language. Usi

This policy setting prevents users from configuring the background color in Internet Explorer. If you enable this policy setting

This policy setting allows you to manage whether users can choose text color in Internet Explorer. If you enable this policy setti

This policy setting prevents users from using Windows colors as a part of the display settings. By default, this functionality is tur

This policy setting prevents the configuration of cipher strength update information URLs. When you log on to secure pages, acces

This policy setting determines if the Internet Connection Wizard was completed. If it was not completed, it launches the Internet

This policy setting allows you to manage a list of add-ons to be allowed or denied by Internet Explorer. This list can be used w

This policy setting allows you to manage a list of add-ons to be allowed or denied by Internet Explorer. This list can be used w

This policy setting allows you to ensure that any Internet Explorer add-ons not listed in the 'Add-on List' policy setting are denie

This policy setting allows you to ensure that any Internet Explorer add-ons not listed in the 'Add-on List' policy setting are denie

This policy setting allows you to manage whether processes respect add-on management user preferences (as reflected by Add-on Ma

This policy setting allows you to manage whether processes respect add-on management user preferences (as reflected by Add-on Ma

This policy setting allows you to manage whether the listed processes respect add-on management user preferences (as entered int

This policy setting allows you to manage whether the listed processes respect add-on management user preferences (as entered int

For each zone, the Binary and Scripted Behavior security restrictions may be configured to allow only a list of admin-approved beha

For each zone, the Binary and Scripted Behavior security restrictions may be configured to allow only a list of admin-approved beha

Internet Explorer contains dynamic binary behaviors: components that encapsulate specific functionality for the HTML elements to w

Internet Explorer contains dynamic binary behaviors: components that encapsulate specific functionality for the HTML elements to w

Internet Explorer contains dynamic binary behaviors: components that encapsulate specific functionality for the HTML elements to

Internet Explorer contains dynamic binary behaviors: components that encapsulate specific functionality for the HTML elements to

Internet Explorer contains dynamic binary behaviors: components that encapsulate specific functionality for the HTML elements to wh

Internet Explorer contains dynamic binary behaviors: components that encapsulate specific functionality for the HTML elements to wh

Internet Explorer uses Multipurpose Internet Mail Extensions (MIME) data to determine file handling procedures for files received t

Internet Explorer uses Multipurpose Internet Mail Extensions (MIME) data to determine file handling procedures for files received t

Internet Explorer uses Multipurpose Internet Mail Extensions (MIME) data to determine file handling procedures for files received thr

Internet Explorer uses Multipurpose Internet Mail Extensions (MIME) data to determine file handling procedures for files received thr

Internet Explorer uses Multipurpose Internet Mail Extensions (MIME) data to determine file handling procedures for files received th

Internet Explorer uses Multipurpose Internet Mail Extensions (MIME) data to determine file handling procedures for files received th

This policy setting allows you to manage whether the Information Bar is displayed for processes other than the Internet Explorer proc

This policy setting allows you to manage whether the Information Bar is displayed for processes other than the Internet Explorer proc

This policy setting allows you to manage whether the Information Bar is displayed for Internet Explorer processes when file or code i

This policy setting allows you to manage whether the Information Bar is displayed for Internet Explorer processes when file or code i

This policy setting allows you to manage whether the Information Bar is displayed for specific processes when file or code installs

This policy setting allows you to manage whether the Information Bar is displayed for specific processes when file or code installs

Internet Explorer places zone restrictions on each Web page it opens, which are dependent upon the location of the Web page (Inter






This policy setting determines whether Internet Explorer MIME sniffing will prevent promotion of a file of one type to a more danger


This policy setting determines whether Internet Explorer MIME sniffing will prevent promotion of a file of one type to a more dangero

This policy setting determines whether Internet Explorer MIME sniffing will prevent promotion of a file of one type to a more dangero



The MK Protocol Security Restriction policy setting reduces attack surface area by preventing the MK protocol. Resources hosted on

The MK Protocol Security Restriction policy setting reduces attack surface area by preventing the MK protocol. Resources hosted on

The MK Protocol Security Restriction policy setting reduces attack surface area by preventing the MK protocol. Resources hosted o

The MK Protocol Security Restriction policy setting reduces attack surface area by preventing the MK protocol. Resources hosted o

The MK Protocol Security Restriction policy setting reduces attack surface area by preventing the MK protocol. Resources hosted on t

The MK Protocol Security Restriction policy setting reduces attack surface area by preventing the MK protocol. Resources hosted on t

Internet Explorer may be configured to prevent active content obtained through restricted protocols from running in an unsafe manne


Windows Explorer and Internet Explorer may be configured to prevent active content obtained through restricted protocols from runn

Windows Explorer and Internet Explorer may be configured to prevent active content obtained through restricted protocols from runn



This policy setting defines whether a reference to an object is accessible when the user navigates within the same domain or to a




This policy setting defines whether a reference to an object is accessible when the user navigates within the same domain or to a ne

This policy setting defines whether a reference to an object is accessible when the user navigates within the same domain or to a ne

Internet Explorer places restrictions on each Web page it opens. The restrictions are dependent upon the location of the Web page






This policy setting enables applications hosting the Web Browser Control to block automatic prompting of ActiveX control installatio


This policy setting enables blocking of ActiveX control installation prompts for Internet Explorer processes. If you enable this pol

This policy setting enables blocking of ActiveX control installation prompts for Internet Explorer processes. If you enable this pol



This policy setting enables applications hosting the Web Browser Control to block automatic prompting of file downloads that are not


This policy setting enables blocking of file download prompts that are not user initiated. If you enable this policy setting, file d

This policy setting enables blocking of file download prompts that are not user initiated. If you enable this policy setting, file d



Internet Explorer allows scripts to programmatically open, resize, and reposition windows of various types. The Window Restrictions


Internet Explorer allows scripts to programmatically open, resize, and reposition windows of various types. The Window Restrictio

Internet Explorer allows scripts to programmatically open, resize, and reposition windows of various types. The Window Restrictio



For each zone, the Network Protocol Lockdown security restriction may be configured to prevent active content obtained through restr










This policy setting allows you to manage the crash detection feature of add-on Management. If you enable this policy setting, a

This policy setting allows you to manage the crash detection feature of add-on Management. If you enable this policy setting, a

This policy setting allows you to manage whether users have the ability to allow or deny add-ons through Add-On Manager. If yo

This policy setting allows you to manage whether users have the ability to allow or deny add-ons through Add-On Manager. If yo

This policy setting allows you to add a specific set of search providers to the user's default search provider list. Normally, sear

This policy setting allows you to add a specific set of search providers to the user's default search provider list. Normally, sear

This policy setting allows you to turn on or turn off the legacy "File, Edit, View, etc. ..." menus in Internet Explorer. If you enab

This policy setting allows you to turn on or turn off the legacy "File, Edit, View, etc. ..." menus in Internet Explorer. If you enab

Prevents automatic proxy scripts, which interact with a server to automatically configure users' proxy settings, from being stored i

Prevents branding of Internet programs, such as customization of Internet Explorer and Outlook Express logos and title bars, by ano

Prevents users from changing settings on the Advanced tab in the Internet Options dialog box. If you enable this policy, users

This policy setting allows you to customize the Internet Explorer version string as reported to Web servers in the HTTP User Agent

This policy setting allows you to customize the Internet Explorer version string as reported to Web servers in the HTTP User Agent

Specifies that Automatic Detection will be used to configure dial-up settings for users. Automatic Detection uses a DHCP (Dynamic

This policy setting prevents users from performing the "Fix settings" functionality related to Security Settings Check. If you enable

This policy setting prevents users from performing the "Fix settings" functionality related to Security Settings Check. If you enable

This policy setting allows the user to enable a phishing filter that will warn if the Web site being visited is known for fraudulent

This policy setting allows the user to enable a phishing filter that will warn if the Web site being visited is known for fraudulent

This policy setting turns off the Security Settings Check feature, which checks Internet Explorer security settings to determine when

This policy setting turns off the Security Settings Check feature, which checks Internet Explorer security settings to determine when

The navigation bar contains icons for a variety of features including navigating among web pages, searching the web using a selec

You can block or allow pop-ups based on three filter levels: High ΓÇô Block All Pop-ups Medium ΓÇô Block most Automatic p

You can block or allow pop-ups based on three filter levels: High ΓÇô Block All Pop-ups Medium ΓÇô Block most Automatic p

Specifies that error messages will be displayed to users if problems occur with proxy scripts. If you enable this policy, error m

This policy setting logs information that is blocked by new features in Internet Explorer. The logged data is displayed in the Windo

This policy setting logs information that is blocked by new features in Internet Explorer. The logged data is displayed in the Windo

The Navigation bar includes features for navigating among Web pages, searching the Web using a selection of search tools, viewi

The Navigation bar includes features for navigating among Web pages, searching the Web using a selection of search tools, viewi

Prevents users from exporting or importing favorite links and feeds by using the Import/Export Wizard. If you enable this policy,

This policy setting prevents the user from zooming into or out of a page to better see the content. If you enable this policy set

This policy setting prevents the user from zooming into or out of a page to better see the content. If you enable this policy set

Prevents users from configuring unique identities by using Identity Manager. Identity Manager enables users to create multiple a

Allows Administrators to enable and disable the Media Explorer Bar and set the auto-play default. The Media Explorer Bar plays m

This policy setting prevents users from performing the "Delete Browsing History" action in Internet Explorer. If you enable this p

This policy setting prevents users from performing the "Delete Browsing History" action in Internet Explorer. If you enable this p

This policy setting prevents the user from clearing forms. This is available as "Delete Forms" option in the "Delete Browsing Histo

This policy setting prevents the user from clearing forms. This is available as "Delete Forms" option in the "Delete Browsing Histo

This policy setting prevents the user from clearing passwords. This option is available as "Delete Passwords" option in the "Delet

This policy setting prevents the user from clearing passwords. This option is available as "Delete Passwords" option in the "Delet

This policy setting prevents performance of the First Run Customize settings ability and controls what the user will see when they

This policy setting prevents performance of the First Run Customize settings ability and controls what the user will see when they

This policy setting allows you to turn off the Help menu in Internet Explorer. If you enable this policy setting, users will not be

This policy setting allows you to turn off the Help menu in Internet Explorer. If you enable this policy setting, users will not be

This policy setting allows you to disable the Internet Explorer search box, which includes a drop-down list of all installed search pr

This policy setting allows you to disable the Internet Explorer search box, which includes a drop-down list of all installed search pr

Prevents Internet Explorer from automatically installing components. If you enable this policy, it prevents Internet Explorer f

This policy setting allows you to turn off the Quick Tabs functionality in Internet Explorer. If you enable this policy setting, the

This policy setting allows you to turn off the Quick Tabs functionality in Internet Explorer. If you enable this policy setting, the

This policy setting prevents you from setting the default search provider for the address bar and the Toolbar Search Box. If you e

This policy setting prevents you from setting the default search provider for the address bar and the Toolbar Search Box. If you e

Prevents the Internet Explorer splash screen from appearing when users start the browser. If you enable this policy, the splash

This policy setting allows you to turn off tabbed browsing and related entry points from the Internet Explorer user interface. If y

This policy setting allows you to turn off tabbed browsing and related entry points from the Internet Explorer user interface. If y

This policy setting allows you to define the user experience related to pop-up windows and tabbed browsing in Internet Explorer.

This policy setting allows you to define the user experience related to pop-up windows and tabbed browsing in Internet Explorer.

Prevents Internet Explorer from checking whether a new version of the browser is available. If you enable this policy, it prevents

This policy setting allows you to configure the behavior of new windows in Internet Explorer. If you enable this policy setting,

This policy setting allows you to configure the behavior of new windows in Internet Explorer. If you enable this policy setting,

Allows Administrators to enable and disable the ability for Outlook Express users to save or open attachments that can potentially

This policy setting allows you to specify a list of web sites that will be allowed to open pop-up windows regardless of the Intern

This policy setting allows you to specify a list of web sites that will be allowed to open pop-up windows regardless of the Intern

If you enable this policy, the user cannot modify the Accessibility options. All options in the "Accessibility" window on the Gen

This setting specifies to automatically detect the proxy server settings used to connect to the Internet and customize Internet Exp

This setting specifies to automatically detect the proxy server settings used to connect to the Internet and customize Internet Exp

Prevents users from changing the browser cache settings, such as the location and amount of disk space to use for the Temporary

Prevents users from changing the default programs for managing schedules and contacts. If you enable this policy, the Calenda

Prevents users from changing certificate settings in Internet Explorer. Certificates are used to verify the identity of software pu

Prevents Microsoft Internet Explorer from checking to see whether it is the default browser. If you enable this policy, the Int

Prevents users from changing the default Web page colors. If you enable this policy, the color settings for Web pages appear d

Prevents users from changing dial-up settings. If you enable this policy, the Settings button on the Connections tab in the Int

Prevents users from changing dial-up settings. If you enable this policy, the Settings button on the Connections tab in the Int

Prevents users from running the Internet Connection Wizard. If you enable this policy, the Setup button on the Connections ta

Prevents users from changing font settings. If you enable this policy, users will not be able to change font settings for viewin

This AutoComplete feature suggests possible matches when users are filling up forms. If you enable this setting, the user is not

This AutoComplete feature can remember and suggest User names and passwords on Forms. If you enable this setting, the user

This setting specifies the number of days that Internet Explorer keeps track of the pages viewed in the History List. The delete B

This setting specifies the number of days that Internet Explorer keeps track of the pages viewed in the History List. The delete B

The Home page in the Internet Options Settings is the default web page that internet explorer loads whenever it is run. If yo

Prevents users from changing language preference settings. If you enable this policy, users will not be able to set language p

Prevents users from changing the colors of links on Web pages. If you enable this policy, the color settings for links appear d

Prevents users from changing the default programs for messaging tasks. If you enable this policy, the E-mail, Newsgroups, and

You can allow Pop-ups from specific websites by adding the site to the exceptions list. If you enable this policy, users will not

You can allow Pop-ups from specific websites by adding the site to the exceptions list. If you enable this policy, users will not

This policy setting allows you to manage pop-up management functionality in Internet Explorer. If you enable this policy settin

This policy setting allows you to manage pop-up management functionality in Internet Explorer. If you enable this policy settin

Prevents users from changing Profile Assistant settings. If you enable this policy, the My Profile button appears dimmed in the

This setting specifies to connect to the internet using the proxy server settings specified. A proxy server acts as an intermediar

This setting specifies to connect to the internet using the proxy server settings specified. A proxy server acts as an intermediar

Prevents users from changing ratings that help control the type of Internet content that can be viewed. If you enable this polic

Prevents users from restoring default settings for home and search pages. If you enable this policy, the Reset Web Settings bu

This policy setting is used to manage temporary Internet files and cookies associated with your Internet browsing history, available

This policy setting is used to manage temporary Internet files and cookies associated with your Internet browsing history, available

This AutoComplete feature suggests possible matches when users are entering Web addresses in the browser address bar. If you

Disables using the F3 key to search in Internet Explorer and Windows Explorer. If you enable this policy, the search functional

Makes the Customize button in the Search Assistant appear dimmed. The Search Assistant is a tool that appears in the Search bar

Applies security zone information to all users of the same computer. A security zone is a group of Web sites with the same security

Prevents users from changing security zone settings. A security zone is a group of Web sites with the same security level. If yo

Prevents users from adding or removing sites from security zones. A security zone is a group of Web sites with the same security l

Specifies that programs using the Microsoft Software Distribution Channel will not notify users when they install new components.

This policy setting allows you to restrict the search providers that will appear in the search box in Internet Explorer to a list d

This policy setting allows you to restrict the search providers that will appear in the search box in Internet Explorer to a list d

This policy setting prevents users from participating in the Customer Experience Improvement Program (CEIP). If you enable th

This policy setting prevents users from participating in the Customer Experience Improvement Program (CEIP). If you enable th

This policy setting allows you to configure the default behavior of new tab creation in Internet Explorer. If you enable this

This policy setting allows you to configure the default behavior of new tab creation in Internet Explorer. If you enable this

Applies proxy settings to all users of the same computer. If you enable this policy, users cannot set user-specific proxy setting

This policy setting allows you to play video and animation through the dynsrc/img tag in a specified zone. This means video and a


This policy setting allows you to manage whether scriptlets can be allowed. If you enable this policy setting, users will be able to r


This policy setting controls the First Run response that users see on a zone by zone basis. When a user encounters a new control th


This policy setting allows you to manage whether script is allowed to update the status bar within the zone. If you enable this polic


Protected mode protects Internet Explorer from exploited vulnerabilities by reducing the locations Internet Explorer can write to in t


These are browser-hosted, ClickOnce-deployed applications built using WinFX. These applications execute in a security sandbox and


This feature represents the setup of WinFX Runtime Components. WinFX is the next generation platform for Windows, utilizing t


These are eXtensible Application Markup Language (XAML) files. XAML is an XML-based declarative markup language commonly used for


These are files authored using the XML Paper Specification document format that contain a fixed-layout representation of its paginat


This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Micros


This policy setting allows you to manage whether script code on pages in the zone is run. If you enable this policy setting, scri


This policy setting allows you to manage whether a user's browser can be redirected to another Web page if the author of the Web


This policy setting allows you to manage whether scripts can perform a clipboard operation (for example, cut, copy, and paste) in a


This policy setting allows you to manage dynamic binary and script behaviors: components that encapsulate specific functionality


This policy setting allows you to manage whether unwanted pop-up windows appear. Pop-up windows that are opened when the end u


This policy setting allows you to manage whether users can display nonsecure items and manage whether users receive a security


This policy setting allows you to manage whether users may download signed ActiveX controls from a page in the zone. If you en


This policy setting allows you to manage whether users may download unsigned ActiveX controls from the zone. Such code is potenti


This policy setting allows you to manage whether users can drag files or copy and paste files from a source within the zone. If yo


This policy setting allows you to manage whether file downloads are permitted from the zone. This option is determined by the zone


This policy setting allows you to manage whether pages of the zone may download HTML fonts. If you enable this policy setting


This policy setting allows you to manage whether users can install Active Desktop items from this zone. The settings for this optio


This policy setting allows you to manage permissions for Java applets. If you enable this policy setting, you can choose options


This policy setting allows you to manage whether applications may be run and files may be downloaded from an IFRAME reference i


This policy setting allows you to manage settings for logon options. If you enable this policy setting, you can choose from t


This policy setting allows you to manage MIME sniffing for file promotion from one type to another based on a MIME sniff. A MIME snif


This policy setting allows you to manage the opening of sub-frames and access of applications across different domains. If yo


This policy setting allows you to manage whether a resource hosted on an admin-restricted protocol in the Intranet Zone can run ac


This policy setting allows you to manage whether users are prompted to select a certificate when no certificate or only one certifi


This policy setting manages whether users will be automatically prompted for ActiveX control installations. If you enable this poli


This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, use


This policy setting allows you to manage whether ActiveX controls and plug-ins can be run on pages from the specified zone. If yo


This policy setting allows you to manage whether an ActiveX control marked safe for scripting can interact with a script. If you en


This policy setting allows you to manage ActiveX controls not marked as safe. If you enable this policy setting, ActiveX control


This policy setting allows you to manage whether applets are exposed to scripts within the zone. If you enable this policy settin


This policy setting allows you to manage whether .NET Framework components that are signed with Authenticode can be executed


This policy setting allows you to manage software channel permissions. If you enable this policy setting, you can choose the f


This policy setting allows you to manage whether data on HTML forms on pages in the zone may be submitted. Forms sent with SSL


This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be execu


This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or


This policy setting allows you to manage restrictions on script-initiated pop-up windows and windows that include the title and stat


This policy setting allows you to manage whether Web sites from less privileged zones, such as Restricted Sites, can navigate into






















This policy setting allows you to manage whether script code on pages in the zone is run. If you enable this policy setting, scr




























































This policy setting allows you to manage whether Web sites from less privileged zones, such as Internet sites, can navigate into th






This policy setting controls the First Run response that users see on a zone by zone basis. When a user encounters a new control t
























This policy setting allows you to manage whether users can install Active Desktop items from this zone. The settings for this option
























This policy setting allows you to manage ActiveX controls not marked as safe. If you enable this policy setting, ActiveX controls












































































This policy setting allows you to manage whether users can drag files or copy and paste files from a source within the zone. If y
















This policy setting allows you to manage the opening of sub-frames and access of applications across different domains. If you


This policy setting allows you to manage whether a resource hosted on an admin-restricted protocol in the Trusted Sites Zone can r

This policy setting allows you to manage whether a resource hosted on an admin-restricted protocol in the Trusted Sites Zone can r









This policy setting allows you to manage whether an ActiveX control marked safe for scripting can interact with a script. If you ena










































This policy setting controls whether local sites which are not explicitly mapped into any Security Zone are forced into the local Intr

This policy setting controls whether local sites which are not explicitly mapped into any Security Zone are forced into the local Intr

This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for




















This policy setting controls whether sites which bypass the proxy server are mapped into the local Intranet security zone. If yo

This policy setting controls whether sites which bypass the proxy server are mapped into the local Intranet security zone. If yo

This policy setting controls whether URLs representing UNCs are mapped into the local Intranet security zone. If you enable thi

This policy setting controls whether URLs representing UNCs are mapped into the local Intranet security zone. If you enable thi

This policy setting allows you to manage a list of sites that you want to associate with a particular security zone. These zone nu

This policy setting allows you to manage a list of sites that you want to associate with a particular security zone. These zone nu

This policy setting enables intranet mapping rules to be applied automatically when the computer belongs to a domain. If you enab

This policy setting enables intranet mapping rules to be applied automatically when the computer belongs to a domain. If you enab

This policy setting allows an Information bar notification to be shown to the user when intranet content is loaded and the intranet

This policy setting allows an Information bar notification to be shown to the user when intranet content is loaded and the intranet



















































































This policy setting allows you to manage whether Web sites from less privileged zones, such as Restricted Sites, can navigate into t

This policy setting allows you to manage whether Web sites from less privileged zones, such as Restricted Sites, can navigate into t























This policy setting prevents users from specifying the color to which hyperlinks change when the mouse pointer pauses on them. I

This policy setting prevents users from changing the color of Web page links that they have not yet clicked. Appropriate color choi

This policy setting prevents users from changing the color of Web page links they have already clicked. Appropriate color choices

This policy setting is used to make hyperlinks change color when the mouse pointer pauses on them. If you enable this policy setting

Prevents users from closing Microsoft Internet Explorer and Windows Explorer. If you enable this policy, the Close command on t

Prevents users from saving Web pages from the browser File menu to their hard disk or to a network share. If you enable this p

Prevents users from saving the complete contents that are displayed on or run from a Web page, including the graphics, scripts,

Prevents users from opening a new browser window from the File menu. If this policy is enabled, users cannot open a new bro

Prevents users from opening a file or Web page from the File menu in Internet Explorer. If you enable this policy, the Open

Prevents users from sending feedback to Microsoft by clicking the Send Feedback command on the Help menu. If you enable this

Prevents users from displaying tips for users who are switching from Netscape. If you enable this policy, the For Netscape Us

Prevents users from viewing or changing the Tip of the Day interface in Microsoft Internet Explorer. If you enable this policy,

Prevents users from running the Internet Explorer Tour from the Help menu in Internet Explorer. If you enable this policy, the

Prevents the shortcut menu from appearing when users click the right mouse button while using the browser. If you enable this

Prevents users from adding, removing, editing or viewing the list of Favorite links. The Favorites list is a way to store popular

Prevents using the shortcut menu to open a link in a new browser window. If you enable this policy, users cannot point to a

Prevents users from saving a program or file that Microsoft Internet Explorer has downloaded to the hard disk. If you enable t

Prevents users from opening the Internet Options dialog box from the Tools menu in Microsoft Internet Explorer. If you enable

Prevents users from displaying the browser in full-screen (kiosk) mode, without the standard toolbar. If you enable this policy,

Prevents users from viewing the HTML source of Web pages by clicking the Source command on the View menu. If you enable th

This policy setting specifies that you want Internet Explorer to automatically resize large images so that they fit in the browser wi

This policy setting specifies whether graphical images should be included when pages are displayed. Sometimes, pages that conta

This policy setting specifies whether placeholders should be shown for graphical images while they are downloading. This allows i

This policy setting specifies whether you want Internet Explorer to smooth images, so they appear less jagged when displayed. If

Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Local Computer security zone

Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Local Intranet security zone.

Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Trusted Sites security zone.

Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Internet security zone. If

Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Restricted Sites security zon

This policy setting specifies whether you want Internet Explorer to print background colors and images when you print a Web page.

This policy setting controls whether to have background sync for feeds. If you enable the policy setting, the ability to sync feeds

This policy setting controls whether to have background sync for feeds. If you enable the policy setting, the ability to sync feeds

This policy setting prevents users from having enclosures (file attachments) downloaded from a feed to the user's computer.

This policy setting prevents users from having enclosures (file attachments) downloaded from a feed to the user's computer.

This policy setting prevents the users from subscribing to a feed or deleting a subscribed feed. If you enable this policy setti

This policy setting prevents the users from subscribing to a feed or deleting a subscribed feed. If you enable this policy setti

This policy setting prevents users from having Internet Explorer automatically detect if there is a feed available for an associated

This policy setting prevents users from having Internet Explorer automatically detect if there is a feed available for an associated

This policy setting prevents users from using Internet Explorer as a feed reader. This setting has no impact on the RSS Platform. I

This policy setting prevents users from using Internet Explorer as a feed reader. This setting has no impact on the RSS Platform. I

This policy setting allows this feature to be prevented or allowed for all processes running on the machine. If you enable this

This policy setting allows this feature to be prevented or allowed for all processes running on the machine. If you enable this

This policy setting allows you bypass prompting when scripts running within the Internet Explorer process attempt to perform a clip

This policy setting allows you bypass prompting when scripts running within the Internet Explorer process attempt to perform a clip

This policy setting allows administrators to define applications for which they want this feature to be prevented or allowed. Do no

This policy setting allows administrators to define applications for which they want this feature to be prevented or allowed. Do no

This policy setting specifies the action that will be performed when searching from the Address bar. There are two possible acti

This policy setting allows users to run natively implemented scriptable XMLHTTP. If you enable this policy setting, the users w

This policy setting allows users to run natively implemented scriptable XMLHTTP. If you enable this policy setting, the users w

This policy setting allows Internet Explorer to be launched automatically to complete the signup process after the branding is com

The toolbar upgrade tool will check to see if incompatible toolbars or browser helper objects are installed when Internet Explorer

The toolbar upgrade tool will check to see if incompatible toolbars or browser helper objects are installed when Internet Explorer

Prevents users from determining which toolbars are displayed in Microsoft Internet Explorer and Windows Explorer. If you enabl

Prevents users from determining which buttons appear on the Microsoft Internet Explorer and Windows Explorer standard toolbars

Specifies which buttons will be displayed on the standard toolbar in Microsoft Internet Explorer. If you enable this policy, you ca

This setting specifies the update check interval. The default value is 30 days. If you enable this policy setting, the user will no

This policy setting allows checking for updates for Internet Explorer from the specified URL, included by default in Internet Explo

Turns off the handwriting recognition error reporting tool. The handwriting recognition error reporting tool enables users to rep

Turns off the handwriting recognition error reporting tool. The handwriting recognition error reporting tool enables users to rep

Turns off the automatic learning component of handwriting recognition personalization. Automatic learning enables the collectio

Turns off the automatic learning component of handwriting recognition personalization. Automatic learning enables the collectio

Turns off handwriting recognition personalization so the handwriting recognition engine that ships with Windows VistaΓäó is used in

Turns off handwriting recognition personalization so the handwriting recognition engine that ships with Windows VistaΓäó is used in

If enabled then new iSNS servers may not be added and thus new targets discovered via those iSNS servers; existing iSNS se

If enabled then new target portals may not be added and thus new targets discovered on those portals; existing target portals

If enabled then discovered targets may not be manually configured. If disabled then discovered targets may be manually configu

If enabled then new targets may not be manually configured by entering the target name and target portal; already discovered

If enabled then do not allow the initiator iqn name to be changed. If disabled then the initiator iqn name may be changed.

If enabled then only those sessions that are established via a persistent login will be established and no new persistent logins m

If enabled then do not allow the initiator CHAP secret to be changed. If disabled then the initiator CHAP secret may be changed

If enabled then only those connections that are configured for IPSec may be established. If disabled then connections that are

If enabled then only those sessions that are configured for mutual CHAP may be established. If disabled then sessions that ar

If enabled then only those sessions that are configured for one-way CHAP may be established. If disabled then sessions that ar

This policy setting allows you to specify which DNS host names and which DNS suffixes are mapped to a Kerberos realm. If you e

This policy setting configures the Kerberos client so that it can authenticate with interoperable Kerberos V5 realms, as defined by

This policy setting controls the Kerberos client's behavior in validating the KDC certificate. If you enable this policy

This policy setting determines whether Diagnostic Policy Service (DPS) will diagnose memory leak problems. If you disable this po

This policy setting turns on the Mapper I/O network protocol driver. LLTDIO allows a computer to discover the topology of a netw

This policy setting turns on the Responder network protocol driver. The Responder allows a computer to participate in Link Layer

Ignores the customized run list. You can create a customized list of additional programs and documents that the system starts a

Ignores the customized run list. You can create a customized list of additional programs and documents that the system starts a

Ignores customized run-once lists. You can create a customized list of additional programs and documents that are started auto

Ignores customized run-once lists. You can create a customized list of additional programs and documents that are started auto

This setting forces the user to log on to the computer using the classic logon screen. By default, a workgroup is set to use the

Supresses the welcome screen. This setting hides the welcome screen that is displayed on Windows 2000 Professional each time

Specifies additional programs or documents that Windows starts automatically when a user logs on to the system. To use this sett

Specifies additional programs or documents that Windows starts automatically when a user logs on to the system. To use this sett

Determines whether Windows XP waits for the network during computer startup and user logon. By default, Windows XP does not wait

Suppresses system status messages. If you enable this setting, the system does not display a message reminding users to wait

Supresses the welcome screen. This setting hides the welcome screen that is displayed on Windows 2000 Professional each time

Directs the system to display highly detailed status messages. If you enable this setting, the system displays status messages th

By enabling the policy, Administrators hide the Switch user button in the Logon UI, the Start menu and the Task Manager.

Turn off the Windows Startup sound and prevent its customization in the Sound item of Control Panel. The Microsoft Windows Start

Specifies whether Windows Media Center can run. If you enable this setting, Windows Media Center will not run. If you disab

Specifies whether Windows Media Center can run. If you enable this setting, Windows Media Center will not run. If you disab

Prevents users from entering author mode. This setting prevents users from opening the Microsoft Management Console (MMC) i

Lets you selectively permit or prohibit the use of Microsoft Management Console (MMC) snap-ins. -- If you enable this setting, al

Permits or prohibits use of this snap-in. If you enable this setting, the snap-in is permitted. If you disable the setting, the snap-i


































Permits or prohibits use of the Group Policy tab in property sheets for the Active Directory Users and Computers and Active Directory




































































This policy setting turns off Windows Mobility Center. If you enable this policy setting, the user is unable to invoke Windows Mob

This policy setting turns off Windows Mobility Center. If you enable this policy setting, the user is unable to invoke Windows Mob

This policy setting turns off Windows presentation settings. If you enable this policy setting, Windows presentation settings ca

This policy setting turns off Windows presentation settings. If you enable this policy setting, Windows presentation settings ca

Specifies whether Windows Movie Maker can run. Windows Movie Maker is a feature of Windows Vista that can be used to edit an

Specifies whether Windows Movie Maker can run. Windows Movie Maker is a feature of Windows Vista that can be used to edit an

Specifies whether links to Web sites are available in Windows Movie Maker. These links include the "Windows Movie Maker on

Specifies whether links to Web sites are available in Windows Movie Maker. These links include the "Windows Movie Maker on

Note: Applies to Windows Movie Maker 2.1 only Specifies whether Windows Movie Maker automatically downloads codecs. Wind

Note: Applies to Windows Movie Maker 2.1 only Specifies whether Windows Movie Maker automatically downloads codecs. Wind

Note: Applies to Windows Movie Maker 2.1 only Specifies whether users can send a final movie to a video hosting provider

Note: Applies to Windows Movie Maker 2.1 only Specifies whether users can send a final movie to a video hosting provider

Determines the execution level for Microsoft Support Diagnostic Tool. Microsoft Support Diagnostic Tool (MSDT) gathers diagnostic

Restricts the tool download policy for Microsoft Support Diagnostic Tool. Microsoft Support Diagnostic Tool (MSDT) gathers diag

Allows users to search for installation files during privileged installations. This setting enables the Browse button in the "Use

Allows users to install programs from removable media, such as floppy disks and CD-ROMs, during privileged installations. This

Allows users to upgrade programs during privileged installations. This setting permits all users to install patches, even when t

Directs Windows Installer to use system permissions when it installs any program on the system. This setting extends elevated pr

Directs Windows Installer to use system permissions when it installs any program on the system. This setting extends elevated pr

The Restart Manager API can eliminate or reduce the number of system restarts that are required to complete an installation or upd

Prevents users from searching for installation files when they add features or components to an installed program. This setting d

This setting controls the ability to turn off all patch optimizations. If you turn on this policy setting (set to 1), all Patch Opti

The MsiLogging property in an installation package can be used to enable automatic logging of all install operations for the packa

Prevents users from installing programs from removable media. If a user tries to install a program from removable media, such

Disables or restricts the use of Windows Installer. This setting can prevent users from installing software on their systems or

Prevents users from using Windows Installer to install patches. Patches are updates or upgrades that replace only those program

Prohibits Windows Installer from generating and saving the files it needs to reverse an interrupted or unsuccessful installation.

Prohibits Windows Installer from generating and saving the files it needs to reverse an interrupted or unsuccessful installation.

Allows Terminal Services administrators to install and configure programs remotely. By default, system administrators can ins

Permits users to change installation options that typically are available only to system administrators. This setting bypasses so

This setting controls the ability of non-administrators to install updates that have been digitally signed by the application vendor

This setting controls the ability for users or administrators to remove Windows Installer based updates. This setting should

System Restore enables users, in the event of a problem, to restore their computers to a previous state without losing personal da

This setting allows you to configure user installs. To configure this setting, set it to enabled and use the drop-down list to select t

This setting causes the Windows Installer to enforce strict rules for component upgrades - setting this may cause some updates t

This policy controls the percentage of disk space available to the Windows Installer baseline file cache. The Windows Installer u

Specifies the types of events that Windows Installer records in its transaction log for each installation. The log, Msi.log, appears

Allows Web-based programs to install software on the computer without notifying the user. By default, when a script hosted by a

Specifies the order in which Windows Installer searches for installation files. By default, the Windows Installer searches the net

Saves copies of transform files in a secure location on the local computer. Transform files consist of instructions to modify or

Defines whether a domain controller (DC) should attempt to verify with the PDC the password provided by a client if the DC faile

When applications performing periodic searches for domain controllers (DC) are unable to find a DC, the value set in this setting

When applications performing periodic searches for Domain Controllers (DCs) are unable to find a DC, the value set in this setting

When applications performing periodic searches for domain controllers (DC) are unable to find a DC, the value set in this setting

Determines when a successful DC cache entry is refreshed. This setting is applied to caller programs that periodically attempt to

Specifies the level of debug output for the Net Logon service. The Net Logon service outputs debug information to the log file ne

Specifies the additional time for the computer to wait for the domain controllerΓÇÖs (DC) response when logging on to the network.

Specifies the maximum size in bytes of the log file netlogon.log in the directory %windir%\debug when logging is enabled. By defa

Specifies the amount of time (in seconds) the DC locator remembers that a domain controller (DC) could not be found in a domain. Wh

This setting controls whether or not the Netlogon share created by the Net Logon service on a domain controller (DC) should suppo

Determines when a successful DC cache entry is refreshed. This setting is applied to caller programs that do not periodically at

Determines the interval at which Netlogon performs the following scavenging operations: - Checks if a password on a secure ch

Specifies the Active Directory site to which computers belong. An Active Directory site is one or more well-connected TCP/IP subn

This setting controls whether or not the Sysvol share created by the Net Logon service on a domain controller (DC) should support

Specifies whether the computers to which this setting is applied attempt DNS name resolution of a single-label domain names. By

Determines whether domain controllers (DC) will dynamically register DC Locator site-specific SRV records for the closest sites w

Determines which Domain Controller (DC) Locator DNS records are not registered by the Netlogon service. To enable this se

Specifies the Refresh Interval of the domain controller (DC) Locator DNS resource records for DCs to which this setting is appli

Specifies the value for the Time-To-Live (TTL) field in Net Logon registered SRV resource records. These DNS records are dynamic

Specifies the sites for which the global catalogs (GC) should register site-specific GC locator DNS SRV resource records. These

Specifies the Priority field in the SRV resource records registered by domain controllers (DC) to which this setting is applied. T

Specifies the Weight field in the SRV resource records registered by the domain controllers (DC) to which this setting is applied

Specifies the sites for which the domain controllers (DC) housing application directory partition should register the site-specifi

Specifies the sites for which the domain controllers (DC) register the site-specific DC Locator DNS SRV resource records. These

Determines if Dynamic Registration of the domain controller (DC) locator DNS resource records is enabled. These DNS records are

The Domain Controller Locator (DC Locator) service is used by clients to find domain controllers for their Active Directory domain

The Domain Controller Locator (DC Locator) service is used by clients to find domain controllers for their Active Directory domai

The Domain Controller (DC) Locator APIs return IP address of the DC with the other part of the information. Before the support o

Determines whether administrators can add and remove network components for a LAN or remote access connection. This setting has

Determines whether the Advanced Settings item on the Advanced menu in Network Connections is enabled for administrators. The A

Determines whether users can configure advanced TCP/IP settings. If you enable this setting (and enable the "Enable Network C

Determines whether a user can install and configure the Network Bridge. Important: This settings is location aware. It only a

Determines whether administrators can enable and disable the components used by LAN connections. If you enable this setting (

Determines whether users can delete all user remote access connections. To create an all-user remote access connection, on the

Determines whether users can delete remote access connections. If you enable this setting (and enable the "Enable Network Conn

Determines whether the Remote Acccess Preferences item on the Advanced menu in Network Connections folder is enabled. The Rem

Determines whether settings that existed in Windows 2000 Server family will apply to Administrators. The set of Network Conne

This policy setting allows you to manage whether notifications are shown to the user when a DHCP-configured connection is unable

Determines whether Administrators and Network Configuration Operators can change the properties of components used by a LAN con

Determines whether users can enable/disable LAN connections. If you enable this setting, the Enable and Disable options for LA

Determines whether users can change the properties of a LAN connection. This setting determines whether the Properties menu ite

Determines whether users can use the New Connection Wizard, which creates new network connections. If you enable this setting

Prohibits use of Internet Connection Firewall on your DNS domain network. Determines whether users can enable the Internet Co

Determines whether a user can view and change the properties of remote access connections that are available to all users of the

Determines whether users can view and change the properties of components used by a private or all-user remote access connection

Determines whether users can connect and disconnect remote access connections. If you enable this setting (and enable the "Ena

Determines whether users can view and change the properties of their private remote access connections. Private connections ar

Determines whether nonadministrators can rename all-user remote access connections. To create an all-user connection, on the C

Determines whether users can rename LAN or all user remote access connections. If you enable this setting, the Rename option

Determines whether nonadministrators can rename a LAN connection. If you enable this setting, the Rename option is enabled fo

Determines whether users can rename their private remote access connections. Private connections are those that are available o

Determines whether administrators can enable and configure the Internet Connection Sharing (ICS) feature of an Internet connec

Determines whether users can view the status for an active connection. Connection status is available from the connection status

Disables the Connect to a Network Projector wizard so that users cannot connect to a network projector. If you enable this polic

Disables the Connect to a Network Projector wizard so that users cannot connect to a network projector. If you enable this polic

Makes subfolders available offline whenever their parent folder is made available offline. This setting automatically extends the

This policy setting lists network files and folders that are always available for offline use. This ensures that the the specified fil

This policy setting lists network files and folders that are always available for offline use. This ensures that the the specified fil

Determines how computers respond when they are disconnected from particular offline file servers. This setting overrides the defa

Determines how computers respond when they are disconnected from particular offline file servers. This setting overrides the defa

Limits the percentage of the computer's disk space that can be used to store automatically cached offline files. This setting als

Determines whether the Offline Files feature is enabled. This setting also disables the "Enable Offline Files" option on the Off

This setting determines whether offline files are encrypted. Offline files reside on a user's hard drive, not the network, and th

Determines which events the Offline Files feature records in the event log. Offline Files records events in the Application log

Determines which events the Offline Files feature records in the event log. Offline Files records events in the Application log

Lists types of files that cannot be used offline. This setting lets you exclude certain types of files from automatic and manual

Determines whether network files remain available if the computer is suddenly disconnected from the server hosting the files. This

Determines whether network files remain available if the computer is suddenly disconnected from the server hosting the files. This

Disables the Offline Files folder. This setting disables the "View Files" button on the Offline Files tab. As a result, users cann

Disables the Offline Files folder. This setting disables the "View Files" button on the Offline Files tab. As a result, users cann

Prevents users from enabling, disabling, or changing the configuration of Offline Files. This setting removes the Offline Files t

Prevents users from enabling, disabling, or changing the configuration of Offline Files. This setting removes the Offline Files t

Prevents users from making network files and folders available offline. This setting removes the "Make Available Offline" optio

Prevents users from making network files and folders available offline. This setting removes the "Make Available Offline" optio

This policy setting allows you to manage a list of files or folders for which you wish to prohibit the 'Make Available Offline' option.

This policy setting allows you to manage a list of files or folders for which you wish to prohibit the 'Make Available Offline' option.

Hides or displays reminder balloons, and prevents users from changing the setting. Reminder balloons appear above the Offline Fi

Hides or displays reminder balloons, and prevents users from changing the setting. Reminder balloons appear above the Offline Fi

Deletes local copies of the user's offline files when the user logs off. This setting specifies that automatically and manually cac

Determines how often reminder balloon updates appear. If you enable this setting, you can select how often reminder balloons u

Determines how often reminder balloon updates appear. If you enable this setting, you can select how often reminder balloons u

Determines how long the first reminder balloon for a network status change is displayed. Reminder balloons appear when the use

Determines how long the first reminder balloon for a network status change is displayed. Reminder balloons appear when the use

Determines how long updated reminder balloons are displayed. Reminder balloons appear when the user's connection to a network

Determines how long updated reminder balloons are displayed. Reminder balloons appear when the user's connection to a network

Configures the threshold value at which Offline Files considers a network connection to be "slow". Any network speed below this va

Determines whether offline files are fully synchronized when users log off. This setting also disables the "Synchronize all offlin

Determines whether offline files are fully synchronized when users log off. This setting also disables the "Synchronize all offlin

Determines whether offline files are fully synchronized when users log on. This setting also disables the "Synchronize all offli

Determines whether offline files are fully synchronized when users log on. This setting also disables the "Synchronize all offli

Determines whether offline files are synchonized before a computer is suspended. If you enable this setting, offline files are s

Determines whether offline files are synchonized before a computer is suspended. If you enable this setting, offline files are s

This policy setting allows you to turn on economical application of administratively assigned Offline Files. If you enable this poli

This policy setting allows you to enable and configure the slow-link mode of Offline Files. When Offline Files is operating in s

This policy limits the amount of the computer's disk space that can be used to store offline files. Using this setting you can conf

This setting turns off Microsoft Peer-to-Peer Networking Services in its entirety, and will cause all dependent applications to stop w

This setting disables PNRP protocol from advertising the computer or from searching other computers on the local subnet in the gl

This setting sets the seed server for the global cloud to a specified node in the enterprise. The Peer Name Resolution Protocol (

This setting disables PNRP protocol from advertising the computer or from searching other computers on the local subnet in the li

This setting sets the seed server for the link local cloud to a specified node in the enterprise. The Peer Name Resolution Protoc

This setting disables PNRP protocol from advertising the computer or from searching other computers on the local subnet in the si

This setting sets the seed server for the site local cloud to a specified node in the enterprise. The Peer Name Resolution Proto

By default, when a Peer Group is created that allows for password-authentication (or the password for such a Group is changed), Pe

Configure the Parental Controls feature. If you turn on this setting, the Parental Controls control panel will be visible on a doma

This policy setting configures the Program Compatibility Assistant (PCA) to diagnose failures with application installations. If

This policy setting configures the Program Compatibility Assistant (PCA) to diagnose failures with programs under User Account Co

This policy setting determines whether the Program Compatibility Assistant (PCA) will diagnose DLL load or COM object creation

This policy setting determines whether the Program Compatibility Assistant (PCA) will diagnose failures with application installers

This policy setting determines whether the Program Compatibility Assistant (PCA) will diagnose drivers blocked due to compatibility

Turns off Tablet PC Pen Training. If you enable this policy setting, users cannot open Tablet PC Pen Training. If you disable

Turns off Tablet PC Pen Training. If you enable this policy setting, users cannot open Tablet PC Pen Training. If you disable

Removes access to the performance center control panel page. If you enable this setting, some settings within the performance co

Removes access to the performance center control panel page. If you enable this setting, some settings within the performance co

Removes access to the performance center control panel solutions to performance problems. If you enable this setting, the soluti

Removes access to the performance center control panel solutions to performance problems. If you enable this setting, the soluti

Removes access to the performance center control panel OEM and Microsoft branding links. If you enable this setting, the OEM an

Removes access to the performance center control panel OEM and Microsoft branding links. If you enable this setting, the OEM an

Determines the execution level for Windows Boot Performance Diagnostics. If you enable this policy setting, you must select an

Determines the execution level for Windows Standby/Resume Performance Diagnostics. If you enable this policy setting, you mus

Determines the execution level for Windows System Responsiveness Diagnostics. If you enable this policy setting, you must sele

Determines the execution level for Windows Shutdown Performance Diagnostics. If you enable this policy setting, you must selec

Specifies the action that Windows takes when battery capacity reaches the critical battery notification level. Possible actions inc

Specifies the action that Windows takes when battery capacity reaches the low battery notification level. Possible actions include

Specifies the percentage of battery capacity remaining that triggers the critical battery notification action. If you enable this poli

Specifies the percentage of battery capacity remaining that triggers the low battery notification action. If you enable this policy,

Disables a user notification when the battery capacity remaining equals the low battery notification level. If you enable this polic

Specifies the action that Windows takes when a user presses the power button. Possible actions include: -Take no action -Sleep

Specifies the action that Windows takes when a user presses the sleep button. Possible actions include: -Take no action -Sleep

Specifies the action that Windows takes when a user closes the lid on a mobile PC. Possible actions include: -Take no action -S

Specifies the action that Windows takes when a user presses the user interface sleep button. Possible actions include: -Sleep -

Specifies the action that Windows takes when a user presses the power button. Possible actions include: -Take no action -Sleep

Specifies the action that Windows takes when a user presses the sleep button. Possible actions include: -Take no action -Sleep

Specifies the action that Windows takes when a user closes the lid on a mobile PC. Possible actions include: -Take no action -S

Specifies the action that Windows takes when a user presses the user interface sleep button. Possible actions include: -Sleep -

Specifies the period of inactivity before Windows turns off the hard disk. If you enable this policy, you must provide a value, i

Specifies the period of inactivity before Windows turns off the hard disk. If you enable this policy, you must provide a value, i

Specifies an active power plan when you enter a power planΓÇÖs GUID. Retrieve the custom power plan GUID by using powercf

Specifies the active power plan from a list of default Windows power plans. To specify a custom power plan, use the Custom Active

This settings allows you to configure client computers to always lock when resuming from a hibernate or suspend. If you enable t

Enables applications and services to prevent the system from sleeping. If you enable this policy setting, an application or servi

Specifies the period of inactivity before Windows transitions the system to hibernate. If you enable this policy setting, you mus

Specifies whether or not the user is prompted for a password when the system resumes from sleep. If you enable this policy, o

Specifies the period of inactivity before Windows transitions the system to sleep. If you enable this policy setting, you must pr

Disables Hybrid Sleep. If you enable this policy setting, a hiberfile is not generated when the system transitions to sleep (Stand

Enables applications and services to prevent the system from sleeping. If you enable this policy setting, an application or servi

Specifies the period of inactivity before Windows transitions the system to hibernate. If you enable this policy setting, you mus

Specifies whether or not the user is prompted for a password when the system resumes from sleep. If you enable this policy, o

Specifies the period of inactivity before Windows transitions the system to sleep. If you enable this policy setting, you must pr

Disables Hybrid Sleep. If you enable this policy setting, a hiberfile is not generated when the system transitions to sleep (Stand

Manages how Windows controls the setting that specifies how long a computer must be inactive before Windows turns off the com

Manages how Windows controls the setting that specifies how long a computer must be inactive before Windows turns off the com

Specifies the period of inactivity before Windows turns off the display. If you enable this policy, you must provide a value, in s

Specifies the period of inactivity before Windows turns off the display. If you enable this policy, you must provide a value, in s

Dictates whether or not Windows is allowed to use standby states when sleeping the computer. When this policy is enable

Dictates whether or not Windows is allowed to use standby states when sleeping the computer. When this policy is enable

This setting allows you to configure whether power is automatically turned off when Windows shutdown completes. This setting

This setting lets you suppress the Restore button in the previous versions property page when the user has selected a previous versi

This setting lets you suppress the Restore button in the previous versions property page when the user has selected a previous versi

This policy setting lets you hide the list or restore of previous versions of files that are on local disks. The previous versions could

This policy setting lets you hide the list or restore of previous versions of files that are on local disks. The previous versions could

This setting lets you suppress the Restore button in the previous versions property page when the user has selected a previous version


This policy setting lets you hide the list or restore of previous versions of files that are on file shares. The previous versions could c

This policy setting lets you hide the list or restore of previous versions of files that are on file shares. The previous versions could c



This setting lets you hide entries in the list of previous versions of a file in which the previous version is located on backup me

This setting lets you hide entries in the list of previous versions of a file in which the previous version is located on backup me

Determines whether Internet printing is activated on this server. Internet printing lets you display printers on Web pages so that

Determines whether the Add Printer Wizard automatically publishes the computer's shared printers in Active Directory. If you enabl

Adds a customized Web page link to the Printers folder. By default, the Printers folder includes a link to the Microsoft Suppor

This policy sets the maximum number of printers (of each type) that the Add Printer wizard will display on a computer on a managed n

Allows users to use the Add Printer Wizard to search the network for shared printers. If you enable this setting or do not confi

When printing through a print server, determines whether the print spooler on the client will process print jobs itself, or pass the

Determines whether the domain controller can prune (delete from Active Directory) the printers published by this computer. By d

Adds a link to an Internet or intranet Web page to the Add Printer Wizard. You can use this setting to direct users to a Web pa

Determines whether printers using kernel-mode drivers may be installed on the local computer. Kernel-mode drivers have access to

Prevents users from using familiar methods to add local and network printers. This setting removes the Add Printer option from the

Prevents users from deleting local and network printers. If a user tries to delete a printer, such as by using the Delete option

This policy sets the maximum number of printers (of each type) that the Add Printer wizard will display on a computer on an unmanag

This policy restricts clients computers to use package point and print only. If this setting is enabled, users will only be able to

Restricts package point and print to approved servers. If this setting is enabled, users will only be able to package point and pri

Specifies the default location criteria used when searching for printers. This setting is a component of the Location Tracking f

Enables the physical Location Tracking support feature of Windows printers. Location tracking lets you design a location scheme

This policy setting controls the servers that a client machine can connect to for point and print, and the security prompts for

Specifies the Active Directory location where searches for printers begin. The Add Printer Wizard gives users the option of search

Announces the presence of shared printers to print browse master servers for the domain. On domains with Active Directory, share

Determines whether the pruning service on a domain controller prunes printer objects that are not automatically republished when

Specifies how often the pruning service on a domain controller contacts computers to verify that their printers are operational.

Sets the priority of the pruning thread. The pruning thread, which runs only on domain controllers, deletes printer objects from

Specifies how many times the pruning service on a domain controller repeats its attempt to contact a computer before pruning the c

Specifies whether or not to log events when the pruning service on a domain controller attempts to contact a computer before pruning

Determines whether the computer's shared printers can be published in Active Directory. If you enable this setting or do not configu

This policy controls whether the print spooler will accept client connections. When the policy is unconfigured, the spooler will

Directs the system to periodically verify that the printers published by this computer still appear in Active Directory. This setting a

This setting prevents users from using the Programs Control Panel in Category View and Programs and Features in Classic View.

This setting prevents users from accessing "Programs and Features" to view, uninstall, change, or repair programs that are curre

This setting prevents users from accessing "Installed Updates" page from the "View installed updates" task. "Installed Updates"

This setting removes the Set Program Access and Defaults page from the Programs Control Panel. As a result, users cannot view

This setting prevents users from access the "Get new programs from Windows Marketplace" task from the Programs Control Panel in

Prevents users from viewing or installing published programs from the network. This setting prevents users from accessing the

This setting prevents users from accessing the "Turn Windows features on or off" task from the Programs Control Panel in Categor

Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Best Effort service type (Serv

Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Controlled Load service type

Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Guaranteed service type (Serv

Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Network Control service type

Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Qualitative service type (Serv

Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Best Effort service type (Serv

Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Controlled Load service type

Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Guaranteed service type (Serv

Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Network Control service type

Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Qualitative service type (Serv

Specifies the maximum number of outstanding packets permitted on the system. When the number of outstanding packets reaches this

Determines the percentage of connection bandwidth that the system can reserve. This value limits the combined bandwidth reservatio

Determines the smallest unit of time that the Packet Scheduler uses when scheduling packets for transmission. The Packet Scheduler

Specifies an alternate link layer (Layer-2) priority value for packets with the Best Effort service type (ServiceTypeBestEffort). The

Specifies an alternate link layer (Layer-2) priority value for packets with the Controlled Load service type (ServiceTypeControlledL

Specifies an alternate link layer (Layer-2) priority value for packets with the Guaranteed service type (ServiceTypeGuaranteed). The

Specifies an alternate link layer (Layer-2) priority value for packets with the Network Control service type (ServiceTypeNetworkCont

Specifies an alternate link layer (Layer-2) priority value for packets that do not conform to the flow specification. The Packet Sch

Specifies an alternate link layer (Layer-2) priority value for packets with the Qualitative service type (ServiceTypeQualitative). The

Determines the execution level for Windows Resource Exhaustion Detection and Resolution. If you enable this policy setting, you

The Persistent System Timestamp allows the system to detect the time of unexpected shutdowns by writing the current time to disk

This setting controls whether or not unplanned shutdown events can be reported when error reporting is enabled. When this setting

Defines when the Shutdown Event Tracker System State Data feature is activated. The system state data file contains information

The Shutdown Event Tracker can be displayed when you shut down a workstation or server. This is an extra set of questions t

This policy setting allows you to turn logging on or off. Log files are located in the user's Documents folder under Remote Assistance.

This policy setting enables Remote Assistance invitations to be generated with improved encryption so that only computers running

This policy setting allows you to improve performance in low bandwidth scenarios. This setting is incrementally scaled from "No opt

The "Display warning message before sharing control" policy setting allows you to specify a custom message to display before a us

This policy setting allows you to enable or disable Solicited (Ask for) Remote Assistance on this computer. If you enable thi

This policy setting allows you to turn on or turn off Offer (Unsolicited) Remote Assistance on this computer. If you enabl

Set the amount of time (in seconds) that the system will wait to reboot in order to enforce a change in access rights to removable st

Set the amount of time (in seconds) that the system will wait to reboot in order to enforce a change in access rights to removable st

This policy setting denies read access to the CD and DVD removable storage class. If you enable this policy setting, read access

This policy setting denies read access to the CD and DVD removable storage class. If you enable this policy setting, read access

This policy setting denies write access to the CD and DVD removable storage class. If you enable this policy setting, write acces

This policy setting denies write access to the CD and DVD removable storage class. If you enable this policy setting, write acces

This policy setting denies read access to custom removable storage classes. If you enable this policy setting, read access will

This policy setting denies read access to custom removable storage classes. If you enable this policy setting, read access will

This policy setting denies write access to custom removable storage classes. If you enable this policy setting, write access will

This policy setting denies write access to custom removable storage classes. If you enable this policy setting, write access will

This policy setting denies read access to the Floppy Drives removable storage class, including USB Floppy Drives. If you enable t

This policy setting denies read access to the Floppy Drives removable storage class, including USB Floppy Drives. If you enable t

This policy setting denies write access to the Floppy Drives removable storage class, including USB Floppy Drives. If you enable

This policy setting denies write access to the Floppy Drives removable storage class, including USB Floppy Drives. If you enable

This policy setting denies read access to removable disks. If you enable this policy setting, read access will be denied to this r

This policy setting denies read access to removable disks. If you enable this policy setting, read access will be denied to this r

This policy setting denies write access to removable disks. If you enable this policy setting, write access will be denied to this

This policy setting denies write access to removable disks. If you enable this policy setting, write access will be denied to this

Configure access to all removable storage classes. This policy setting takes precedence over any individual removable storage po

Configure access to all removable storage classes. This policy setting takes precedence over any individual removable storage po

This policy setting denies read access to the Tape Drive removable storage class. If you enable this policy setting, read access

This policy setting denies read access to the Tape Drive removable storage class. If you enable this policy setting, read access

This policy setting denies write access to the Tape Drive removable storage class. If you enable this policy setting, write access

This policy setting denies write access to the Tape Drive removable storage class. If you enable this policy setting, write access

This policy setting denies read access to removable disks, which may include media players, cellular phones, auxiliary displays, an

This policy setting denies read access to removable disks, which may include media players, cellular phones, auxiliary displays, an

This policy setting denies write access to removable disks, which may include media players, cellular phones, auxiliary displays, a

This policy setting denies write access to removable disks, which may include media players, cellular phones, auxiliary displays, a

This policy setting grants normal users direct access to removable storage devices in remote sessions. If you enable this polic

Enabling this setting directs RPC Clients that need to communicate with the Endpoint Mapper Service to authenticate as long as

Directs the RPC Runtime to generate extended error information when an error occurs. Extended error information includes the lo

Directs the RPC Runtime to ignore delegation failures if delegation was asked for. Windows Server 2003 family includes a ne

Directs the RPC Runtime to assume the specified timeout as the idle connection timeout even if the IIS server running the RPC H

If you enable this setting, it directs the RPC Runtime on an RPC server to restrict unauthenticated RPC clients connecting to RPC

Determines whether the RPC Runtime maintains RPC state information for the system, and how much information it maintains. B

Determines how long the system waits for scripts applied by Group Policy to run. This setting limits the total time allowed for

Hides the instructions in logon scripts written for Windows NT 4.0 and earlier. Logon scripts are batch files of instructions t

Displays the instructions in logoff scripts as they run. Logoff scripts are batch files of instructions that run when the user logs

Directs the system to wait for the logon scripts to finish running before it starts the Windows Explorer interface program and cre

Directs the system to wait for the logon scripts to finish running before it starts the Windows Explorer interface program and cre

Displays the instructions in logon scripts as they run. Logon scripts are batch files of instructions that run when the user logs o

Displays the instructions in shutdown scripts as they run. Shutdown scripts are batch files of instructions that run when the user

Lets the system run startup scripts simultaneously. Startup scripts are batch files that run before the user is invited to log on.

Displays the instructions in startup scripts as they run. Startup scripts are batch files of instructions that run before the user

This policy setting allows user logon scripts to run when the logon cross-forest, DNS suffixes are not configured and NetBIOS or WI

This policy setting allows encrypted items to be indexed. If you enable this policy setting, indexing disregards encryption flags (ac

This policy setting allows words that contain diacritic characters to be treated as separate words. If you enable this policy setting,

Store indexer database in this directory. This directory must be located on a local fixed drive.

Enable this policy setting to prevent the indexing of the content of e-mail attachments. If enabled, indexing service components (i

If enabled, files on network shares made available offline are not indexed. Otherwise they are indexed. This policy setting is not

Enable this policy setting to prevent indexing of any Microsoft Outlook items. The default behavior is to automatically index Outloo

Enable this policy setting to prevent indexing public folders in Microsoft Office Outlook. When this policy setting is disabled

Enabling this policy setting prevents indexing of mail items on a Microsoft Exchange server when Microsoft Outlook is run in unca

If enabled, Search and Indexing Options control panel applet does not allow opening the advanced options dialog. Otherwise it ca

This policy setting specifies whether Security Center is turned on or off for computers that are joined to an Active Directory dom

Specifies an alternate location for Windows Service Pack installation files. To enable this setting, enter the fully qualified p

Specifies an alternate location for Windows installation files. To enable this setting, and enter the fully qualified path to the

Determines whether the user can publish DFS roots in Active Directory. If you enable this setting or do not configure it, users ca

Determines whether the user can publish shared folders in Active Directory. If you enable this setting or do not configure it, use

By default users are allowed to share files within their profile to other users on their network once an administrator opts in the c

Prevents users from running the interactive command prompt, Cmd.exe. This setting also determines whether batch files (.cmd and

Disables the Windows registry editor Regedit.exe. If this setting is enabled and the user tries to start a registry editor, a mes

Limits the Windows programs that users have permission to run on the computer. If you enable this setting, users can only run

Prevents Windows from running the programs you specify in this setting. If you enable this setting, users cannot run programs

This policy setting prevents the display of the Welcome Center at user logon. If you enable this policy setting, the Welcome Ce

Windows Sidebar is a feature that allows the use of gadgets, which are small applets that may display information or utilities to t

Windows Sidebar is a feature that allows the use of gadgets, which are small applets that may display information or utilities to t

Sidebar gadgets can be deployed as compressed files, either digitally signed or unsigned. If you enable this setting, Windows Sid

Sidebar gadgets can be deployed as compressed files, either digitally signed or unsigned. If you enable this setting, Windows Sid

The Windows Sidebar will run gadgets that are located in the profile space of the user. Gadgets are small applets that are run by

The Windows Sidebar will run gadgets that are located in the profile space of the user. Gadgets are small applets that are run by

The Windows Sidebar contains a link to allow users to download more gadgets from a website. Microsoft hosts a default website whe

The Windows Sidebar contains a link to allow users to download more gadgets from a website. Microsoft hosts a default website whe

This policy setting deletes all data stored on Windows SideShow-compatible devices (running Microsoft firmware) when a user logs o

This policy setting deletes all data stored on Windows SideShow-compatible devices (running Microsoft firmware) when a user logs o

This policy setting turns off Windows SideShow. If you enable this policy setting, the Windows SideShow Control Panel will be

This policy setting turns off Windows SideShow. If you enable this policy setting, the Windows SideShow Control Panel will be

This policy setting turns off the option to periodically wake the computer to update information on Windows SideShow-compatible

This policy setting turns off the option to periodically wake the computer to update information on Windows SideShow-compatible

This policy setting requires users to enter a default personal identification number (PIN) to unlock and access data on the device

This policy setting requires users to enter a default personal identification number (PIN) to unlock and access data on the device

This policy setting lets you allow certificates without an Extended Key Usage (EKU) set to be used for logon. Under previous ver

This policy setting lets you determine whether the integrated unblock feature will be available in the logon User Interface (UI).

This policy settings lets you configure if all your valid logon certificates are displayed. During the certificate renewal period,

This policy setting allows you to manage the reading of all certificates from the smart card for logon. During logon Windows will b

This policy setting lets you allow signature key-based certificates to be enumerated and available for logon. If you enable this po

This policy setting permits those certificates to be displayed for logon that are either expired or not yet valid. Under previous ve

This policy setting allows you to manage the certificate propagation that occurs when a smart card is inserted. If you enable or do

This policy setting allows you to manage the clean up behavior of root certificates. If you enable this policy setting then root certi

This policy setting allows you to manage the root certificate propagation that occurs when a smart card is inserted. If you enable

This policy setting allows you to manage the displayed message when a smart card is blocked. If you enable this policy setting,

This policy setting lets you reverse the subject name from how it is stored in the certificate when displaying it during logon.

This policy setting lets you determine whether an optional field will be displayed during logon and elevation that allows a user to

Configures a list of the communities defined to the Simple Network Management Protocol (SNMP) service. SNMP is a protocol d

This setting determines the permitted list of hosts that can submit a query to the Simple Network Management (SNMP) agent runn

This setting allows Trap configuration for the Simple Network Management Protocol (SNMP) agent. Simple Network Management Pr

Specifies whether Sound Recorder can run. Sound Recorder is a feature of Microsoft Windows Vista that can be used to record s

Specifies whether Sound Recorder can run. Sound Recorder is a feature of Microsoft Windows Vista that can be used to record s

If you enable this policy setting, the recent programs list in the start menu will be blank for each new user. If you disable or d

If you enable this policy the start menu will not show a link to the Games folder. If you disable or do not configure this policy,

If you enable this policy, the "See all results" link will not be shown when the user performs a search in the start menu search bo

If you enable this policy the start menu search box will not search for files. If you disable or do not configure this policy, the st

If you enable this policy the start menu search box will not search for internet history or favorites. If you disable or do not confi

If you enable this policy the start menu search box will not search for programs. If you disable or do not configure this policy,

If you enable this policy the start menu search box will not search for communications. If you disable or do not configure this p

If you enable this policy the start menu will not show a link to the user's storage folder. If you disable or do not configure this p

User folders links launch a folder view of users files instead of a library view.

If you enable this setting, the Run command is added to the Start menu. If you disable or do not configure this setting, the R

This policy setting controls whether the QuickLaunch bar is displayed in the Taskbar. If you enable this policy setting, the Quick

Clear history of recently opened documents on exit. If you enable this setting, the system deletes shortcuts to recently used

This policy only applies to the classic version of the start menu and does not affect the new style start menu. Adds the "Log O

Displays Start menu shortcuts to partially installed programs in gray text. This setting makes it easier for users to distinguish b

Disables personalized menus. Windows personalizes long menus by moving recently used items to the top of the menu and hiding i

This setting affects the taskbar, which is used to switch between running applications. The taskbar includes the Start button, lis

Lets users run a 16-bit program in a dedicated (not shared) Virtual DOS Machine (VDM) process. All DOS and 16-bit programs

This setting affects the notification area, also called the "system tray." The notification area is located in the task bar, general

Hides pop-up text on the Start menu and in the notification area. When you hold the cursor over an item on the Start menu or in t

Prevents users from using the drag-and-drop method to reorder or remove items on the Start menu. Also, it removes context menu

This policy setting prevents users from performing the following commands from the Start menu or Windows Security screen: S

Removes items in the All Users profile from the Programs menu on the Start menu. By default, the Programs menu contains items

Prevents users from adding the Favorites menu to the Start menu or classic Start menu. If you enable this setting, the Display

Removes the Search link from the Start menu, and disables some Windows Explorer search elements. Note that this does not remo

If you enable this setting, the frequently used programs list is removed from the Start menu. If you disable this setting or do n

Removes the Help command from the Start menu. This setting only affects the Start menu. It does not remove the Help menu

Disables user tracking. This setting prevents the system from tracking the programs users run, the paths they navigate, and t

If you enable this setting, the "All Programs" item is removed from the simple Start menu. If you disable this setting or do not

Prevents users from running Network Connections. This setting prevents the Network Connections folder from opening. This set

If you enable this setting, the "Pinned Programs" list is removed from the Start menu, and the Internet and Email checkboxes are

Prevents the operating system and installed programs from creating and displaying shortcuts to recently opened documents. If y

Removes the Recent Items menu from the Start menu. Removes the Documents menu from the classic Start menu. The Recent Items

Prevents the system from conducting a comprehensive search of the target drive to resolve a shortcut. By default, when the system c

Prevents the system from using NTFS tracking features to resolve a shortcut. By default, when the system cannot find the target fil

Allows you to remove the Run command from the Start menu, Internet Explorer, and Task Manager. If you enable this setting, the

Prevents Control Panel, Printers, and Network Connections from running. This setting removes the Control Panel, Printers, an

Removes the Taskbar and Start Menu item from Settings on the Start menu. This setting also prevents the user from opening the Ta

Removes the Default Programs link from the Start menu. Clicking the Default Programs link from the Start menu opens the Defau

Removes the Documents icon from the Start menu and its submenus. This setting only removes the icon. It does not prevent the

Removes the Music icon from the Start Menu.

Removes the Network icon from the Start Menu.

Removes the Pictures icon from the Start Menu.

Hides all folders on the user-specific (top) section of the Start menu. Other items appear, but folders are hidden. This setting

This setting affects the presentation of the Start menu. The classic Start menu in Windows 2000 Professional allows users to

Prevents the clock in the system notification area from being displayed. If you enable this setting, the clock will not be displayed

This setting affects the taskbar buttons used to switch between running programs. Taskbar grouping consolidates similar applicat

This setting affects the taskbar. The taskbar includes the Start button, buttons for currently running tasks, custom toolbars,

Hides the menus that appear when you right-click the taskbar and items on the taskbar, such as the Start button, the clock, an

This setting affects the notification area (previously called the "system tray") on the taskbar. Description: The notification area i

Remove the user name label from the Start Menu. Note: This setting does not apply to Windows Vista. To remove the user nam

Prevents users from connecting to the Windows Update Web site. This setting blocks user access to the Windows Update Web s

If you enable this setting, the "Undock PC" button is removed from the simple Start Menu, and your PC cannot be undocked. If

Removes the "Log Off <username>" item from the Start menu and prevents users from restoring it. If you enable this setti

This setting turns the Accounting feature On or Off. If you enable this setting, Windows System Resource Manager (WSRM) will

This setting assigns the email address(es) to which notifications will be sent. Use a semicolon (;) to separate multiple email add

This setting directs the Accounting feature to log data on the accounting server at the specified time interval. If you enable

This setting assigns the address of the SMTP server that sends out notifications. If you enable this setting, Windows System Res

Allows you to turn off the Configuration Interface for System Restore. System Restore enables users, in the event of a problem, t

Determines whether System Restore is turned on or off. System Restore enables users, in the event of a problem, to restore their c

Turns off the integration of application auto complete lists with Tablet PC Input Panel in applications where this behavior is availa

Turns off the integration of application auto complete lists with Tablet PC Input Panel in applications where this behavior is availa

Prevents Input Panel tab from appearing on the edge of the Tablet PC screen. Tablet PC Input Panel is a Tablet PC accessory tha

Prevents Input Panel tab from appearing on the edge of the Tablet PC screen. Tablet PC Input Panel is a Tablet PC accessory tha

Prevents the Tablet PC Input Panel icon from appearing next to any text entry area in applications where this behavior is availabl

Prevents the Tablet PC Input Panel icon from appearing next to any text entry area in applications where this behavior is availabl

Prevents the Tablet PC Input Panel icon from appearing next to any text entry area in applications where this behavior is available.

Prevents the Tablet PC Input Panel icon from appearing next to any text entry area in applications where this behavior is available.

Adjusts password security settings in Tablet PC Input Panel. These settings include using the on-screen keyboard by default, pr

Adjusts password security settings in Tablet PC Input Panel. These settings include using the on-screen keyboard by default, pr

Switches the gesture set used for editing from the common handheld computer gestures to the Simplified Chinese (PRC) standard ges

Switches the gesture set used for editing from the common handheld computer gestures to the Simplified Chinese (PRC) standard ges

Includes rarely used Chinese, Kanji, and Hanja characters when handwriting is converted to typed text. This policy applies only

Includes rarely used Chinese, Kanji, and Hanja characters when handwriting is converted to typed text. This policy applies only

Turns off both the more tolerant scratch-out gestures that were added in Windows Vista and the Z-shaped scratch-out gesture that

Turns off both the more tolerant scratch-out gestures that were added in Windows Vista and the Z-shaped scratch-out gesture that

Prevents start of InkBall game. If you enable this policy, the InkBall game will not run. If you disable this policy, the InkBall ga

Prevents start of InkBall game. If you enable this policy, the InkBall game will not run. If you disable this policy, the InkBall ga

Prevents start of Windows Journal. If you enable this policy, the Windows Journal accessory will not run. If you disable this p

Prevents start of Windows Journal. If you enable this policy, the Windows Journal accessory will not run. If you disable this p

Prevents printing to Journal Note Writer. If you enable this policy, the Journal Note Writer printer driver will not allow printing to it.

Prevents printing to Journal Note Writer. If you enable this policy, the Journal Note Writer printer driver will not allow printing to it.

Prevents the snipping tool from running. If you enable this policy setting, the Snipping Tool will not run. If you disable this polic

Prevents the snipping tool from running. If you enable this policy setting, the Snipping Tool will not run. If you disable this polic

Prevents start of Sticky Notes. If you enable this policy, the Sticky Notes accessory will not run. If you disable this policy, the

Prevents start of Sticky Notes. If you enable this policy, the Sticky Notes accessory will not run. If you disable this policy, the

Disables visual pen action feedback, except for press and hold feedback. If you enable this policy, all visual pen action feedb

Disables visual pen action feedback, except for press and hold feedback. If you enable this policy, all visual pen action feedb

Removes the Back->ESC mapping that normally occurs when menus are visible, and for applications that subscribe to this behavi

Removes the Back->ESC mapping that normally occurs when menus are visible, and for applications that subscribe to this behavi

Prevents the user from launching an application from a Tablet PC hardware button. If you enable this policy, applications cann

Prevents the user from launching an application from a Tablet PC hardware button. If you enable this policy, applications cann

Prevents press and hold actions on hardware buttons, so that only one action is available per button. If you enable this policy, pr

Prevents press and hold actions on hardware buttons, so that only one action is available per button. If you enable this policy, pr

Turns off Tablet PC hardware buttons. If you enable this policy, no actions will occur when the buttons are pressed, and the bu

Turns off Tablet PC hardware buttons. If you enable this policy, no actions will occur when the buttons are pressed, and the bu

Makes pen flicks learning mode unavailable. If you enable this policy, pen flicks are still available but learning mode is not. Pen

Makes pen flicks learning mode unavailable. If you enable this policy, pen flicks are still available but learning mode is not. Pen

Makes pen flicks and all related features unavailable. If you enable this policy, pen flicks and all related features are unavailable.

Makes pen flicks and all related features unavailable. If you enable this policy, pen flicks and all related features are unavailable.

Prevents the battery meter in the system control area from being displayed. If you enable this setting, the battery meter will not b

Prevents the networking icon in the system control area from being displayed. If you enable this setting, the networking icon will n

Prevents the volume control icon in the system control area from being displayed. If you enable this setting, the volume control ico

Prevents the user from making any changes to the taskbar settings through the Taskbar Properties dialog. If you enable this setti

Prevents users from adding or removing toolbars. If you enable this policy setting the user will not be allowed to add or remove an

Prevents users from rearranging toolbars. If you enable this setting the user will not be able to drag or drop toolbars to the taskb

If you enable this setting no notification balloons will be shown to the user. If you disable or do not configure this setting balloon

Prevents users from moving taskbar to another screen dock location. If you enable this policy setting the user will not be able to

Prevent users from resizing the taskbar. If you enable this policy setting the user will not be able to resize their taskbar to be an

If you enable this setting the taskbar thumbnails will not be shown, and the system will use standard text for the tooltips. If you

Limits newly scheduled to items on the user's Start menu, and prevents the user from changing the scheduled program for existin

Limits newly scheduled to items on the user's Start menu, and prevents the user from changing the scheduled program for existin

This setting removes the "Open advanced properties for this task when I click Finish" checkbox from the last page of the Schedul

This setting removes the "Open advanced properties for this task when I click Finish" checkbox from the last page of the Schedul

Prevents users from adding or removing tasks by moving or copying programs in the Scheduled Tasks folder. This setting disab

Prevents users from adding or removing tasks by moving or copying programs in the Scheduled Tasks folder. This setting disab

Prevents users from starting and stopping tasks manually. This setting removes the Run and End Task items from the context men

Prevents users from starting and stopping tasks manually. This setting removes the Run and End Task items from the context men

Prevents users from viewing and changing the properties of an existing task. This setting removes the Properties item from the

Prevents users from viewing and changing the properties of an existing task. This setting removes the Properties item from the

Prevents users from creating new tasks. This setting removes the Add Scheduled Task item that starts the New Task Wizard. Al

Prevents users from creating new tasks. This setting removes the Add Scheduled Task item that starts the New Task Wizard. Al

Prevents users from deleting tasks from the Scheduled Tasks folder. This setting removes the Delete command from the Edit men

Prevents users from deleting tasks from the Scheduled Tasks folder. This setting removes the Delete command from the Edit men

Controls whether a user can save passwords using a Terminal Services client. If you enable this setting the password saving che

Controls whether passwords can be saved on this computer from Terminal Services clients. If you enable this setting the passwor

Specifies whether to require the use of a specific encryption level to secure communications between clients and terminal server

Specifies whether Terminal Services always prompts the client for a password upon connection. You can use this setting to enf

Specifies whether to require the use of a specific security layer to secure communications between clients and terminal servers

Specifies whether to require user authentication using Remote Desktop Protocol (RDP) version 6.0 before allowing remote connectio

This policy setting allows you to specify the name of the certificate template that determines which certificate is automatically sel

Specifies the authentication method that clients must use when attempting to connect to a terminal server through a TS Gateway serv

If you enable this policy setting, then clients must always connect to a terminal server through a TS Gateway over HTTPS, even wh

Specifies the address of the TS Gateway server that clients must use when attempting to connect to a terminal server. You can enf

Specifies whether to allow Remote Desktop Connection clients to automatically reconnect to Terminal Services sessions if their ne

This policy setting allows you to specify the maximum color resolution (color depth) for Terminal Services connections. You can

This policy setting allows you to configure remote access to computers using Terminal Services. If you enable this policy s

Specifies whether desktop wallpaper is displayed to remote clients connecting via Terminal Services. You can use this setting

This policy setting determines whether an administrator attempting to connect remotely to the console of a server can log off an

This policy setting allows you to enter a keep-alive interval to ensure that the session state on the terminal server is consistent w

Determines whether terminal servers must first attempt to locate Terminal Server license servers that are specified in this setting

Displays notifications on the terminal server when there are problems with TS Licensing that affect the terminal server. If you en

Determines the type of Terminal Server client access license (CAL) a device or user requires to connect to this Terminal Server.

Specifies whether Terminal Services limits the number of simultaneous connections to the server. You can use this setting to

This policy setting allows you to remove the ΓÇ£DisconnectΓÇ¥ option from the Shut Down Windows dialog box on Terminal Service

Specifies whether to remove the Windows Security item from the Settings menu on Terminal Services clients. You can use this se

This policy setting allows you to specify the level of remote control permitted in a Terminal Services session. You can use this

This policy setting allows you to specify the level of remote control permitted in a Terminal Services session. You can use this

This policy setting allows you to restrict users to a single remote Terminal Services session. If you enable this policy setting,

Configures Terminal Services to run a specified program automatically upon connection. You can use this setting to specify a pro

Configures Terminal Services to run a specified program automatically upon connection. You can use this setting to specify a pro

Specifies whether to disable the administrator rights to customize security permissions in the Terminal Services Configuration to

This policy setting determines whether the desktop is always displayed after a client connects to a remote computer or an initial p

Specifies whether Terminal Services uses the specified network share or local directory path as the root of the user's home direc

Specifies whether Terminal Services uses the specified network path for roaming user profiles. You can use this setting to spec

Specifies the terminal servers and license servers to which a Terminal Server License Server offers licenses. You can use thi

Determines the type of Terminal Server client access license (CAL) a device or user requires to connect to this Terminal Server.

Specifies whether users can choose where to play the remote computer's audio output during a Terminal Services session (audio re

Specifies whether to prevent the sharing of clipboard contents (clipboard redirection) between a remote computer and a client compu

Specifies whether to prevent the redirection of data to client COM ports from the remote computer in a Terminal Services session.

Specifies whether the client default printer is automatically set as the default printer in a Terminal Services session. By default

Specifies whether to prevent the mapping of client drives in a Terminal Services session (drive redirection). By default, Termina

Specifies whether to prevent the redirection of data to client LPT ports during a Terminal Services session. You can use this set

This policy setting allows you to control the redirection of supported Plug and Play devices, such as Windows Portable Devices,

Specifies whether to prevent the mapping of client printers in Terminal Services sessions. You can use this setting to prevent use

Specifies the Terminal Server fallback printer driver behavior. By default, Terminal Server fallback printer driver is disabled. If th

This policy setting allows you to control the redirection of smart card devices in a Terminal Services session. If you enable t

This policy setting determines whether the client computer redirects its time zone settings to the Terminal Services session. If

Specifies whether a Terminal Server requires secure RPC communication with all clients or allows unsecured communication. You

Specifies whether Terminal Services uses a Session Directory for tracking user sessions, allowing a group of terminal servers to

Specifies the Cluster Name for the terminal server, associating it with other servers in the same logical group. If the status is

Specifies how client devices are directed when reconnecting to an existing terminal server session. If the status is set to Enabl

Specifies whether to configure a server as a Session Directory Server for Terminal Services sessions on your network. A Session

Specifies whether to terminate a timed-out Terminal Services session instead of disconnecting it. You can use this setting to dir

Specifies whether to terminate a timed-out Terminal Services session instead of disconnecting it. You can use this setting to dir

This policy setting allows you to configure a time limit for disconnected Terminal Services sessions. You can use this policy s

This policy setting allows you to configure a time limit for disconnected Terminal Services sessions. You can use this policy s

This policy setting allows you to specify the maximum amount of time that an active Terminal Services session can be idle (witho

This policy setting allows you to specify the maximum amount of time that an active Terminal Services session can be idle (witho

This policy setting allows you to specify the maximum amount of time that a Terminal Services session can be active before it is

This policy setting allows you to specify the maximum amount of time that a Terminal Services session can be active before it is

Specifies whether to allow users to reconnect to a disconnected Terminal Services session using a computer other than the origina

Specifies whether to allow users to reconnect to a disconnected Terminal Services session using a computer other than the origina

Specifies whether Terminal Services retains a user's per-session temporary folders at logoff. You can use this setting to mainta

This policy setting allows you to prevent Terminal Services from creating session-specific temporary folders. You can use this

Disables the display of thumbnails in Windows Explorer. Windows Explorer displays thumbnails by default. If you enable this

Disables the display of thumbnails on network folders in Windows Explorer. Windows Explorer displays thumbnails on network fol

Turn off Tablet PC touch input Turns off touch input, which allows the user to interact with their computer using their finger. If

Turn off Tablet PC touch input Turns off touch input, which allows the user to interact with their computer using their finger. If

This policy setting allows you to manage the Active Directory Domain Services (AD DS) backup of Trusted Platform Module (TPM

This policy setting allows you to manage the Group Policy list of Trusted Platform Module (TPM) commands blocked by Window

This policy setting allows you to enforce or ignore the computer's default list of blocked Trusted Platform Module (TPM) comma

This policy setting allows you to enforce or ignore the computer's local list of blocked Trusted Platform Module (TPM) commands

This setting lets you disable the Backup Status and Configuration program, which links to the file backup, file restore, and Comp

This setting lets you disable the Backup Status and Configuration program, which links to the file backup, file restore, and Comp

This setting lets you prevent users from selecting a local disk (internal or external) for storing file backups. If this setting is en

This setting lets you prevent users from selecting a local disk (internal or external) for storing file backups. If this setting is en

This setting lets you prevent users from selecting a network shared folder for storing file backups. If this setting is enabled, us

This setting lets you prevent users from selecting a network shared folder for storing file backups. If this setting is enabled, us

This setting lets you prevent users from selecting optical media (CD/DVD) for storing file backups. If this setting is enabled, use

This setting lets you prevent users from selecting optical media (CD/DVD) for storing file backups. If this setting is enabled, use

This setting lets you disable file backup functionality. If this setting is enabled, the file backup program is disabled. If this s

This setting lets you disable file backup functionality. If this setting is enabled, the file backup program is disabled. If this s

This setting lets you disable file restore functionality. If this setting is enabled, the file restore program is disabled. If this se

This setting lets you disable file restore functionality. If this setting is enabled, the file restore program is disabled. If this se

This setting lets you disable Complete PC Backup functionality. If this setting is enabled, the Complete PC Backup progr

This setting lets you disable Complete PC Backup functionality. If this setting is enabled, the Complete PC Backup progr

This setting adds the Administrator security group to the roaming user profile share. Once an administrator has configured a users'

This setting disables the more secure default setting for the userΓÇÖs roaming user profile folder. Once an administrator has co

Restores the definitions of the %HOMESHARE% and %HOMEPATH% environment variables to those used in Windows NT 4.0 and earlier.

Determines whether the system saves a copy of a userΓÇÖs roaming profile on the local computer's hard drive when the user logs of

Disables the slow link detection feature. Slow link detection measures the speed of the connection between a user's computer and

This policy setting provides users with the ability to download their roaming profile, even when a slow network connection with th

Lets you add to the list of folders excluded from the user's roaming profile. This setting lets you exclude folders that are norma

Determines whether the system retains a roaming userΓÇÖs Windows Installer and Group Policy based software installation data on th

This policy setting sets the maximum size of each user profile and determines the system's response when a user profile reaches th

This setting determines if roaming user profiles are available on a particular computer. By default, when roaming profile users log

Determines how long the system waits for a user response before it uses a default value. The default value is applied when the

This policy will automatically log off a user when Windows cannot load their profile. If Windows cannot access the user profile fo

Determines how many times the system tries to unload and update the registry portion of a user profile. When the number of trials s

This setting determines if the changes a user makes to their roaming profile are merged with the server copy of their profile. By

Directs the system to wait for the remote copy of the roaming user profile to load, even when loading is slow. Also, the system wai

Defines a slow connection for roaming user profiles. If the server on which the user's roaming user profile resides takes longe

This policy setting allows an administrator to automatically delete user profiles on system restart that have not been used within a

This policy setting allows you to specify which network directories will be synchronized only at logon and logoff via Offline Files.

Microsoft Windows will always unload the users registry, even if there are any open handles to the per-user registry keys at user l

If the user has a roaming user profile or remote home directory and the network is currently unavailable, Microsoft Windows waits

Specifies whether Microsoft Windows should use the specified network path as the roaming user profile path for all users logging on

This policy setting allows you to manage the Active Directory Domain Services (AD DS) backup of BitLocker Drive Encryption rec

This policy setting allows you to configure whether the BitLocker Drive Encryption setup wizard will ask the user to set up an ad

This policy setting allows you to configure whether the BitLocker Drive Encryption setup wizard will ask the user to save BitLock

This policy setting allows you to specify the default path that is displayed when the BitLocker Drive Encryption setup wizard prompt

This policy setting allows you to configure the algorithm and key size used by BitLocker Drive Encryption. This policy setting app

This policy setting allows you to configure how the computer's Trusted Platform Module (TPM) security hardware secures the BitL

This policy setting controls computer restart performance at the risk of exposing BitLocker secrets. BitLocker secrets include ke

Specifies a set of parameters for all time providers installed on your system. There are two sets of parameters: clock discipl

Specifies whether the Windows NTP Client synchronizes time from the domain hierarchy or a manually configured NTP server. Spe

Specifies whether the Windows NTP Client is enabled. Enabling the Windows NTP Client allows your computer to synchronize its

Specifies whether the Windows NTP Server is enabled. Enabling the Windows NTP Server allows your computer to service NTP

Determines the data retention limit for Diagnostic Policy Service (DPS) scenario data. If you enable this policy setting, you mus

Determines the execution level for Diagnostic Policy Service (DPS) scenarios. If you enable this policy setting, you must select

Windows Calendar is a feature that allows users to manage appointments and tasks by creating personal calendars, publishing them

Windows Calendar is a feature that allows users to manage appointments and tasks by creating personal calendars, publishing them

This policy setting allows you to manage whether backups of only system volumes is allowed or both OS and data volumes can b

This policy setting allows you to manage whether backups of a machine can run to locally attached storage or not. If you enable

This policy setting allows you to manage whether backups of a machine can run to a network share or not. If you enable this po

This policy setting allows you to manage whether backups of a machine can run to an optical media or not. If you enable this po

This policy setting allows you to manage whether run-once backups of a machine can be run or not. If you enable this policy s

Windows Meeting Space is a feature that enables quick, face-to-face collaboration for sharing programs and handouts and for pass

Windows Meeting Space is a feature that enables quick, face-to-face collaboration for sharing programs and handouts and for pass

Windows Meeting Space is a feature that enables quick, face-to-face collaboration for sharing programs and handouts and for passi

Windows Meeting Space is a feature that enables quick, face-to-face collaboration for sharing programs and handouts and for passi

This policy setting affects the ability of users to install or uninstall color profiles. If you enable this policy setting, users will not

This policy setting affects the ability of users to install or uninstall color profiles. If you enable this policy setting, users will not

This policy setting prohibits access to Windows Connect Now (WCN) wizards. If this policy setting is enabled, the wizards are di

This policy setting prohibits access to Windows Connect Now (WCN) wizards. If this policy setting is enabled, the wizards are di

This policy setting allows the configuration of wireless settings using Windows Connect Now (WCN). The WCN Registrar enables the

Checks for new signatures before running scheduled scans. If you enable this policy setting, the scheduled scan checks for new

Turns off Windows Defender Real-Time Protection, and no more scans are scheduled. If you enable this policy setting, Windows

Enables logging detection data during Real-time Protection when Windows Defender detects known good files. Logging detections pro

Enables logging detections during Real-time Protection when Windows Defender detects unknown files. Logging detections provides y

Turns off Real-Time Protection (RTP) prompts for unknown detection. If you enable this policy setting, Windows Defender does n

Downloads the full signature set, rather than only the signatures that have been updated since the last signature download. Downloa

Adjusts membership in Microsoft SpyNet. Microsoft SpyNet is the online community that helps you choose how to respond to pot

This policy setting allows you to configure Windows Defender to check and install definition updates from Windows Update when

Hide the Back button in the Open dialog box. This policy setting lets you remove new features added in Microsoft Windows 2000

Removes the list of most recently used files from the Open dialog box. If you disable this setting or do not configure it, the "

Removes the shortcut bar from the Open dialog box. This setting, and others in this folder, lets you remove new features adde

Configures the list of items displayed in the Places Bar in the Windows File/Open dialog. If enable this setting you can specify

This setting allows an administrator to revert specific Windows Shell behavior to classic Shell behavior. If you enable this s

Allows you to have Windows Explorer display a confirmation dialog whenever a file is deleted or moved to the Recycle Bin. If you

This setting is designed to ensure that shell extensions can operate on a per-user basis. If you enable this setting, Windows

Determines whether Windows traces shortcuts back to their sources when it cannot find the target on the user's system. Shortcut fil

Determines how many shortcuts the system can display in the Documents menu on the Start menu. The Documents menu contain

This settings controls whether the thumbnail views are cached. If you enable this setting, thumbnail views are not cached. I

Windows Explorer allows you to create and modify re-writable CDs if you have a CD writer connected to your PC. If you enable th

Prevents users from selecting the option to animate the movement of windows, menus, and lists. If you enable this setting, the

Disables the "Hide keyboard navigation indicators until I use the ALT key" option in Display in Control Panel. When this Displa

Removes the DFS tab from Windows Explorer. This setting removes the DFS tab from Windows Explorer and from other programs

Removes the icons representing selected hard drives from My Computer and Windows Explorer. Also, the drive letters representing th

Removes all computers outside of the user's workgroup or local domain from lists of network resources in Windows Explorer and

Removes the File menu from My Computer and Windows Explorer. This setting does not prevent users from using other method

Removes the Folder Options item from all Windows Explorer menus and removes the Folder Options item from Control Panel. As a re

Removes the Hardware tab. This setting removes the Hardware tab from Mouse, Keyboard, and Sounds and Audio Devices in Contro

Removes the Manage item from the Windows Explorer context menu. This context menu appears when you right-click Windows Ex

Removes the Shared Documents folder from My Computer. When a Windows client is in a workgroup, a Shared Documents icon appe

Prevents users from using Windows Explorer or Network Locations to map or disconnect network drives. If you enable this sett

When a file or folder is deleted in Windows Explorer, a copy of the file or folder is placed in the Recycle Bin. Using this setting,

Prevents users from submitting alternate logon credentials to install a program. This setting suppresses the "Install Program As

Removes the Security tab from Windows Explorer. If you enable this setting, users opening the Properties dialog box for all file sy

Removes the Search button from the Windows Explorer toolbar. This setting removes the Search button from the Standard But

Removes shortcut menus from the desktop and Windows Explorer. Shortcut menus appear when you right-click an item. If you e

Prevents users from using My Computer to gain access to the content of selected drives. If you enable this setting, users can b

Turn off Windows+X hotkeys. Keyboards with a Windows key provide users with shortcuts to common shell features. For exampl

Removes computers in the user's workgroup and domain from lists of network resources in Windows Explorer and Network Locatio

Prompts users for alternate logon credentials during network-based installations. This setting displays the "Install Program As O

Limits the percentage of a volume's disk space that can be used to store deleted files. If you enable this setting, the user has

This policy setting allows you to configure the amount of functionality that the shell protocol can have. When using the full function

This policy setting allows you to configure the amount of functionality that the shell protocol can have. When using the full function

Specifies an alternate location for the Windows File Protection cache. To enable this setting, enter the fully qualified local pa

Specifies the maximum amount of disk space that can be used for the Windows File Protection file cache. Windows File Protecti

Determines when Windows File Protection scans protected files. This setting directs Windows File Protection to enumerate and scan

Hides the file scan progress window. This window provides status information to sophisticated users, but it might confuse novices

Allows unsolicited incoming messages from specified systems that authenticate using the IPSec transport. If you enable this pol

Allows you to view and change the program exceptions list defined by Group Policy. Windows Firewall uses two program exception li

Allows administrators to use the Windows Firewall component in Control Panel to define a local program exceptions list. Windows Fi

Turns on Windows Firewall. If you enable this policy setting, Windows Firewall runs and ignores the "Computer Configuration\Ad

Specifies that Windows Firewall blocks all unsolicited incoming messages. This policy setting overrides all other Windows Firewal

Allows inbound file and printer sharing. To do this, Windows Firewall opens UDP ports 137 and 138, and TCP ports 139 and 445.

Defines the set of Internet Control Message Protocol (ICMP) message types that Windows Firewall allows. Utilities can use ICMP

Allows Windows Firewall to record information about the unsolicited incoming messages that it receives. If you enable this poli

Prevents Windows Firewall from displaying notifications to the user when a program requests that Windows Firewall add the program

Allows you to view and change the inbound port exceptions list defined by Group Policy. Windows Firewall uses two port exception l

Allows administrators to use the Windows Firewall component in Control Panel to define a local port exceptions list. Windows Firewa

Allows remote administration of this computer using administrative tools such as the Microsoft Management Console (MMC) and

Allows this computer to receive inbound Remote Desktop requests. To do this, Windows Firewall opens TCP port 3389. If you en

Prevents this computer from receiving unicast responses to its outgoing multicast or broadcast messages. If you enable this

Allows this computer to receive unsolicited inbound Plug and Play messages sent by network devices, such as routers with built

Allows you to view and change the program exceptions list defined by Group Policy. Windows Firewall uses two program exception li

Allows administrators to use the Windows Firewall component in Control Panel to define a local program exceptions list. Windows Fi

Turns on Windows Firewall. If you enable this policy setting, Windows Firewall runs and ignores the "Computer Configuration\Ad

Specifies that Windows Firewall blocks all unsolicited incoming messages. This policy setting overrides all other Windows Firewal

Allows inbound file and printer sharing. To do this, Windows Firewall opens UDP ports 137 and 138, and TCP ports 139 and 445.

Defines the set of Internet Control Message Protocol (ICMP) message types that Windows Firewall allows. Utilities can use ICMP

Allows Windows Firewall to record information about the unsolicited incoming messages that it receives. If you enable this poli

Prevents Windows Firewall from displaying notifications to the user when a program requests that Windows Firewall add the program

Allows you to view and change the inbound port exceptions list defined by Group Policy. Windows Firewall uses two port exception l

Allows administrators to use the Windows Firewall component in Control Panel to define a local port exceptions list. Windows Firewa

Allows remote administration of this computer using administrative tools such as the Microsoft Management Console (MMC) and

Allows this computer to receive inbound Remote Desktop requests. To do this, Windows Firewall opens TCP port 3389. If you en

Prevents this computer from receiving unicast responses to its outgoing multicast or broadcast messages. If you enable this

Allows this computer to receive unsolicited inbound Plug and Play messages sent by network devices, such as routers with built

Denies or allows access to the Windows Mail application. If you enable this setting, access to the Windows Mail application is de

Denies or allows access to the Windows Mail application. If you enable this setting, access to the Windows Mail application is de

Windows Mail will not check your newsgroup servers for Communities support.

Windows Mail will not check your newsgroup servers for Communities support.

Prevents Windows Media Digital Rights Management (DRM) from accessing the Internet (or intranet). When enabled, Windows Media

Prevents users from being prompted to update Windows Media Player. This policy prevents the Player from being updated and prev

Do Not Show First Use Dialog Boxes This policy prevents the Privacy Options and Installation Options dialog boxes from being di

Prevents video smoothing from occurring. This policy prevents video smoothing, which can improve video playback on computers

Prevents media information for CDs and DVDs from being retrieved from the Internet. This policy prevents the Player from auto

Prevents media sharing from Windows Media Player. This policy prevents any user on this computer from sharing digital medi

Prevents media information for music files from being retrieved from the Internet. This policy prevents the Player from automa

This policy prevents a shortcut for the Player from being added to the Quick Launch bar. When this policy is not configured or

Prevents radio station presets from being retrieved from the Internet. This policy prevents the Player from automatically retrievi

This policy prevents a shortcut icon for the Player from being added to the user's desktop. When this policy is not configured

Enables a screen saver to interrupt playback. This policy displays a screen saver during playback of digital media according t

Prevents Windows Media Player from downloading codecs. This policy prevents the Player from automatically downloading codec

Prevents the anchor window from being displayed when Windows Media Player is in skin mode. This policy hides the anchor windo

Hides the Privacy tab. This policy hides the Privacy tab in Windows Media Player. The default privacy settings are used for th

Hides the Security tab. This policy hides the Security tab in Windows Media Player. The default security settings for the option

Enables Windows Media Player to be shown only in skin mode, using a specified skin. This policy displays the Player only in ski

Specifies the HTTP proxy settings for Windows Media Player. This policy specifies the proxy settings for the HTTP protocol. Wh

Specifies the MMS proxy settings for Windows Media Player. This policy specifies the proxy settings for the MMS protocol. When

Specifies the RTSP proxy settings for Windows Media Player. This policy specifies the proxy settings for the RTSP protocol. Wh

Hides the Network tab. This policy hides the Network tab in Windows Media Player. The default network settings are used unless

Specifies whether network buffering uses the default or a specified number of seconds. This policy specifies that the default ne

Specifies that Windows Media Player can attempt to use selected protocols when receiving streaming media from a server running

Windows Messenger is automatically loaded and running when a user logs on to a Windows XP computer. You can use this setting

Windows Messenger is automatically loaded and running when a user logs on to a Windows XP computer. You can use this setting

Allows you to disable Windows Messenger. If you enable this setting, Windows Messenger will not run. If you disable or do

Allows you to disable Windows Messenger. If you enable this setting, Windows Messenger will not run. If you disable or do

This policy setting allows you to manage whether the Windows Remote Management (WinRM) client uses Basic authentication. If yo

This policy setting allows you to manage whether the Windows Remote Management (WinRM) client sends and receives unencrypted

This policy setting allows you to manage whether the Windows Remote Management (WinRM) client will not use Digest authentication.

This policy setting allows you to manage whether the Windows Remote Management (WinRM) client will not use Negotiate authenticati

This policy setting allows you to manage whether the Windows Remote Management (WinRM) client will not use Kerberos authenticati

This policy setting allows you to manage whether Windows Remote Management (WinRM) client uses the list specified in TrustedHostsL

This policy setting allows you to manage whether the Windows Remote Management (WinRM) service automatically listens on the netw

This policy setting allows you to manage whether the Windows Remote Management (WinRM) service accepts Basic authentication from

This policy setting allows you to manage whether the Windows Remote Management (WinRM) service sends and receives unencrypte

This policy setting allows you to manage whether the Windows Remote Management (WinRM) service will not accept Negotiate authent

This policy setting allows you to manage whether the Windows Remote Management (WinRM) service will not accept Kerberos credent

Configures access to remote shells. If you enable this policy setting and set it to False, new remote shell connections will be rej

Configures maximum time in milliseconds remote shell will stay open without any user activity until it is automatically deleted. A

Configures the maximum number of users able to concurrently perform remote operations on the same system using remote CMD shell.

Configures maximum total amount of memory that can be allocated by any active remote shell and all its child processes. Any val

Configures the maximum number of processes any shell operations are allowed to launch. Any number from 0 to 0x7FFFFFFF can be

Configures maximum time in milliseconds that the remote command or script will be allowed to execute. Any value from 0 to 0x7FF

Configures maximum number of concurrent shells any user can remotely open on the same system. Any number from 0 to 0x7FFFFFFF c

This setting controls automatic updates to a user's computer. Whenever a user connects to the Internet, Windows searches for

This policy setting allows you to manage whether the 'Install Updates and Shut Down' option is displayed in the Shut Down Window

This policy setting allows you to manage whether the 'Install Updates and Shut Down' option is displayed in the Shut Down Window

This policy setting allows you to manage whether the 'Install Updates and Shut Down' option is allowed to be the default choice i

This policy setting allows you to manage whether the 'Install Updates and Shut Down' option is allowed to be the default choice

This setting allows you to remove access to Windows Update. If you enable this setting, all Windows Update features are rem

Specifies whether this computer will receive security updates and other important downloads through the Windows automatic updatin

Specifies an intranet server to host updates from Microsoft Update. You can then use this update service to automatically update

Specifies the hours that Windows will use to determine how long to wait before checking for available updates. The exact wait time

Specifies whether, when logged on, non-administrative users will receive update notifications based on the configuration settings f

Specifies whether Automatic Updates should automatically install certain updates that neither interrupt Windows services nor resta

Specifies whether Automatic Updates will deliver both important as well as recommended updates from the Windows Update update

Specifies whether the Windows Update will use the Windows Power Management features to automatically wake up the system from hi

Specifies that to complete a scheduled installation, Automatic Updates will wait for the computer to be restarted by any user who i

Specifies the amount of time for Automatic Updates to wait before prompting again with a scheduled restart. If the status is set

Specifies the amount of time for Automatic Updates to wait before proceeding with a scheduled restart. If the status is set to Ena

Specifies the amount of time for Automatic Updates to wait, following system startup, before proceeding with a scheduled installatio

Specifies the target group name that should be used to receive updates from an intranet Microsoft update service. If the status is

This policy controls the legacy remote shutdown interface (named pipe). The named pipe remote shutdown interface is needed in

The number of minutes the system will wait for the hung logon sessions before proceeding with the system shutdown. If this setti

This policy setting controls whether or not the system displays information about previous logons and logon failures to the use

This policy controls whether the logged on user should be notified when his logon hours are about to expire. By default, a user i

This policy controls which action will be taken when the logon hours expire for the logged on user. The actions include lock the

This policy setting controls whether or not software can simulate the Secure Attention Sequence (SAS). If you enable this policy

This policy controls whether the logged on user should be notified if the logon server could not be contacted during logon and he

This policy controls whether the logged on user should be notified if the logon server could not be contacted during logon and he

Specifies an alternate user interface. The Explorer program (%windir%\explorer.exe) creates the familiar Windows interface, but yo

This policy setting specifies whether Windows will allow console applications and GUI applications without visible top-level wind

Set up the menu name and URL for the custom Internet search provider. If you enable this setting, the specified menu name and UR

Registry Settings

HKLM\SOFTWARE\Policies\Microsoft\Windows\AxInstaller!ApprovedList, HKLM\SOFTWARE\Policies\Microsoft\Windows\AxInstaller\ApprovedActiveXIn

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!DefaultCategory

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddFromCDorFloppy

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddFromInternet

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddFromNetwork

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddPage

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddRemovePrograms

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoChooseProgramsPage

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoRemovePage

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoServices

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoSupportInfo

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoWindowsSetupPage

HKCU\Software\Policies\Microsoft\Windows\AppCompat!VDMDisallowed

HKLM\Software\Policies\Microsoft\Windows\AppCompat!VDMDisallowed

HKLM\Software\Policies\Microsoft\Windows\AppCompat!DisablePropPage

HKLM\Software\Policies\Microsoft\Windows\AppCompat!DisableEngine

HKLM\Software\Policies\Microsoft\Windows\AppCompat!DisableWizard

HKCU\Software\Policies\Microsoft\Windows\AppCompat!DisablePCA

HKLM\Software\Policies\Microsoft\Windows\AppCompat!DisablePCA

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!ScanWithAntiVirus

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!UseTrustedHandlers

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!SaveZoneInformation

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!HideZoneInfoOnProperties

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!DefaultFileTypeRisk

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!HighRiskFileTypes

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!LowRiskFileTypes

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!ModRiskFileTypes

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoAutorun

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoAutorun

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DontSetAutoplayCheckbox

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DontSetAutoplayCheckbox

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDriveTypeAutoRun

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDriveTypeAutoRun

HKLM\Software\Policies\Microsoft\Windows\BITS!EnablePeercaching

HKLM\Software\Policies\Microsoft\Windows\BITS!JobInactivityTimeout

HKLM\Software\Policies\Microsoft\Windows\BITS!MaxDownloadTime

HKLM\Software\Policies\Microsoft\Windows\BITS!EnableBITSMaxBandwidth, HKLM\Software\Policies\Microsoft\Windows\BITS!MaxTransferRateOnSc

HKLM\Software\Policies\Microsoft\Windows\BITS!MaxContentAge

HKLM\Software\Policies\Microsoft\Windows\BITS!MaxCacheSize

HKLM\Software\Policies\Microsoft\Windows\BITS!DisablePeerCachingClient

HKLM\Software\Policies\Microsoft\Windows\BITS!DisablePeerCachingServer

HKLM\Software\Policies\Microsoft\Windows\BITS!MaxBandwidthServed

HKLM\Software\Policies\Microsoft\Windows\BITS!MaxJobsPerMachine

HKLM\Software\Policies\Microsoft\Windows\BITS!MaxJobsPerUser

HKLM\Software\Policies\Microsoft\Windows\BITS!MaxFilesPerJob

HKLM\Software\Policies\Microsoft\Windows\BITS!MaxRangesPerFile

HKCU\SOFTWARE\Policies\Microsoft\CaptureWizard!VidCap

HKLM\SOFTWARE\Policies\Microsoft\CaptureWizard!VidCap

HKLM\Software\Policies\Microsoft\SQMClient!CorporateSQMURL, HKLM\Software\Policies\Microsoft\SQMClient!CorporateSQMURL

HKLM\Software\Policies\Microsoft\SQMClient\Windows!StudyId, HKLM\Software\Policies\Microsoft\SQMClient\Windows!StudyId

HKLM\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002!Functions

HKCU\Software\Policies\Microsoft\Windows\App Management!COMClassStore

HKLM\Software\Policies\Microsoft\Windows\App Management!COMClassStore

HKCU\Software\Policies\Microsoft\Conferencing!NoAppSharing

HKCU\Software\Policies\Microsoft\Conferencing!NoAllowControl

HKCU\Software\Policies\Microsoft\Conferencing!NoSharing

HKCU\Software\Policies\Microsoft\Conferencing!NoSharingDosWindows

HKCU\Software\Policies\Microsoft\Conferencing!NoSharingDesktop

HKCU\Software\Policies\Microsoft\Conferencing!NoSharingExplorer

HKCU\Software\Policies\Microsoft\Conferencing!NoTrueColorSharing

HKCU\Software\Policies\Microsoft\Conferencing!NoAudio

HKCU\Software\Policies\Microsoft\Conferencing!NoChangeDirectSound

HKCU\Software\Policies\Microsoft\Conferencing!NoFullDuplex

HKCU\Software\Policies\Microsoft\Conferencing!NoReceivingVideo

HKCU\Software\Policies\Microsoft\Conferencing!NoSendingVideo

HKCU\Software\Policies\Microsoft\Conferencing!MaximumBandwidth

HKCU\Software\Policies\Microsoft\Conferencing!PersistAutoAcceptCalls

HKCU\Software\Policies\Microsoft\Conferencing!NoChat

HKCU\Software\Policies\Microsoft\Conferencing!NoNewWhiteBoard

HKCU\Software\Policies\Microsoft\Conferencing!NoOldWhiteBoard

HKLM\Software\Policies\Microsoft\Conferencing!NoRDS

HKCU\Software\Policies\Microsoft\Conferencing!Use AutoConfig, HKCU\Software\Policies\Microsoft\Conferencing!ConfigFile

HKCU\Software\Policies\Microsoft\Conferencing!NoAddingDirectoryServers

HKCU\Software\Policies\Microsoft\Conferencing!NoAutoAcceptCalls

HKCU\Software\Policies\Microsoft\Conferencing!NoChangingCallMode

HKCU\Software\Policies\Microsoft\Conferencing!NoDirectoryServices

HKCU\Software\Policies\Microsoft\Conferencing!NoReceivingFiles

HKCU\Software\Policies\Microsoft\Conferencing!NoSendingFiles

HKCU\Software\Policies\Microsoft\Conferencing!NoWebDirectory

HKCU\Software\Policies\Microsoft\Conferencing!MaxFileSendSize

HKCU\Software\Policies\Microsoft\Conferencing!IntranetSupportURL

HKCU\Software\Policies\Microsoft\Conferencing!CallSecurity

HKCU\Software\Policies\Microsoft\Conferencing!NoAdvancedCalling

HKCU\Software\Policies\Microsoft\Conferencing!NoAudioPage

HKCU\Software\Policies\Microsoft\Conferencing!NoGeneralPage

HKCU\Software\Policies\Microsoft\Conferencing!NoSecurityPage

HKCU\Software\Policies\Microsoft\Conferencing!NoVideoPage

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisallowCpl, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ForceClassicControlPanel

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoControlPanel

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!RestrictCpl, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoDispCPL

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoDispAppearancePage

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoDispBackgroundPage

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoDispScrSavPage

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoDispSettingsPage

HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!ScreenSaveActive

HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!SCRNSAVE.EXE

HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!ScreenSaverIsSecure

HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!ScreenSaveTimeOut

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoChangingWallPaper

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoColorChoice

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoThemesTab

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoVisualStyleChoice

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!SetVisualStyle

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoSizeChoice

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!UseDefaultTile

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DefaultLogonDomain

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!ExcludedCredentialProviders

HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!AllowDefaultCredentials, HKLM\Software\Policies\Microsoft\Windows\CredentialsDe

HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!AllowDefCredentialsWhenNTLMOnly, HKLM\Software\Policies\Microsoft\Windows\

HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!AllowFreshCredentials, HKLM\Software\Policies\Microsoft\Windows\CredentialsDel

HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!AllowFreshCredentialsWhenNTLMOnly, HKLM\Software\Policies\Microsoft\Window

HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!AllowSavedCredentials, HKLM\Software\Policies\Microsoft\Windows\CredentialsDe

HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!AllowSavedCredentialsWhenNTLMOnly, HKLM\Software\Policies\Microsoft\Windo

HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!DenyDefaultCredentials, HKLM\Software\Policies\Microsoft\Windows\CredentialsDe

HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!DenyFreshCredentials, HKLM\Software\Policies\Microsoft\Windows\CredentialsDel

HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!DenySavedCredentials, HKLM\Software\Policies\Microsoft\Windows\CredentialsDe

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\CredUI!EnumerateAdministrators

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\CredUI!EnableSecureCredentialPrompting

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableChangePassword

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableLockWorkstation

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableTaskMgr

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoLogoff

HKLM\Software\Policies\Microsoft\Windows NT\DCOM\AppCompat!AllowLocalActivationSecurityCheckExemptionList

HKLM\Software\Policies\Microsoft\Windows NT\DCOM\AppCompat!ListBox_Support_ActivationSecurityCheckExemptionList, HKLM\Software\Policies

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ForceActiveDesktopOn

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoActiveDesktop

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoActiveDesktopChanges

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop\AdminComponent!Add, HKCU\Software\Microsoft\Windows\CurrentVersion

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoAddingComponents

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoClosingComponents

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoDeletingComponents

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoEditingComponents

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoComponents

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoHTMLWallPaper

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!Wallpaper, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!Wa

HKCU\Software\Policies\Microsoft\Windows\Directory UI!EnableFilter

HKCU\Software\Policies\Microsoft\Windows\Directory UI!HideDirectoryFolder

HKCU\Software\Policies\Microsoft\Windows\Directory UI!QueryLimit

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisablePersonalDirChange

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDesktop

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDesktopCleanupWizard

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetIcon

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies onEnum!{20D04FE0-3AEA-1069-A2D8-08002B30309D}

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies onEnum!{450D8FBA-AD25-11D0-98A8-0800361B1103}

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNetHood

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPropertiesMyComputer

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPropertiesMyDocuments

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRecentDocsNetHood

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies onEnum!{645FF040-5081-101B-9F08-00AA002F954E}

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPropertiesRecycleBin

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSaveSettings

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoCloseDragDropBands

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoMovingBands

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Settings!AllSigningEqual

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Settings!DisableBalloonTips

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Settings!InstallTimeout

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Settings!DisableSystemRestore

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Settings!AllowRemoteRPC

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Settings!DisableSendGenericDriverNotFoundToWER

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions!AllowAdminInstall

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions!AllowDeviceClasses, HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions!DenyDeviceClasses, HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions!AllowDeviceIDs, HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restr

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions!DenyDeviceIDs, HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restr

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions!DenyRemovableDevices

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions!DenyUnspecified

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DeniedPolicy!SimpleText

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DeniedPolicy!DetailText

HKLM\Software\Policies\Microsoft\Windows\DriverInstall\Restrictions!AllowUserDeviceClasses, HKLM\Software\Policies\Microsoft\Windows\DriverInsta

HKCU\Software\Policies\Microsoft\Windows\DriverSearching!DontSearchFloppies, HKCU\Software\Policies\Microsoft\Windows\DriverSearching!Don

HKCU\Software\Policies\Microsoft\Windows\DriverSearching!DontPromptForWindowsUpdate

HKLM\Software\Policies\Microsoft\Windows\DriverSearching!DontPromptForWindowsUpdate

HKCU\Software\Policies\Microsoft\Windows NT\Driver Signing!BehaviorOnFailedVerify

HKLM\Software\Policies\Microsoft\System\DFSClient!DfsDcNameDelay

HKCU\SOFTWARE\Policies\Microsoft\Windows\Digital Locker!DoNotRunDigitalLocker

HKLM\SOFTWARE\Policies\Microsoft\Windows\Digital Locker!DoNotRunDigitalLocker

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{29689E29-2CE9-4751-B4FC-8EFF5066E3FD}!DfdAlertTextOverride

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{29689E29-2CE9-4751-B4FC-8EFF5066E3FD}!ScenarioExecutionEnabled, HKLM\SOFTWARE\Pol

HKLM\Software\Policies\Microsoft\Windows vCache!OptimizeBootAndResume

HKLM\Software\Policies\Microsoft\Windows vCache!EnablePowerModeState

HKLM\Software\Policies\Microsoft\Windows vCache!EnableNvCache

HKLM\Software\Policies\Microsoft\Windows vCache!EnableSolidStateMode

HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!Enable

HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!Enforce

HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!Limit, HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!LimitUnits, HKLM\Softwar

HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!LogEventOverLimit

HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!LogEventOverThreshold

HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!ApplyToRemovableMedia

HKLM\Software\Policies\Microsoft\Windows\System!DLT_AllowDomainMode

HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!AdapterDomainName

HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!NameServer

HKLM\Software\Policies\Microsoft\System\DNSClient!NV PrimaryDnsSuffix

HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegisterAdapterName

HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegisterReverseLookup

HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationEnabled

HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationOverwritesInConflict

HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationRefreshInterval

HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationTtl

HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!SearchList

HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!UpdateSecurityLevel

HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!UpdateTopLevelDomainZones

HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!UseDomainNameDevolution

HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!EnableMulticast

HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!AppendToMultiLabelName

HKCU\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowAnimations

HKLM\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowAnimations

HKCU\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowComposition

HKLM\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowComposition

HKCU\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowFlip3d

HKLM\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowFlip3d

HKCU\SOFTWARE\Policies\Microsoft\Windows\DWM!DefaultColorizationColorState, HKCU\SOFTWARE\Policies\Microsoft\Windows\DWM!DefaultColo

HKLM\SOFTWARE\Policies\Microsoft\Windows\DWM!DefaultColorizationColorState, HKLM\SOFTWARE\Policies\Microsoft\Windows\DWM!DefaultColo

HKCU\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowColorizationColorChanges

HKLM\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowColorizationColorChanges

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoEncryptOnMove

HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWNoExternalURL, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!

HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!ShowUI, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWAllowHeadle

HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!Disabled

HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!Disabled

HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!LoggingDisabled

HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!LoggingDisabled

HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!DontSendAdditionalData

HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!DontSendAdditionalData

HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!AllOrNone, HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!IncludeMicrosoft

HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\ExclusionList

HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\InclusionList

HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!IncludeKernelFaults

HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!DisableArchive, HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Err

HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!DisableArchive, HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Err

HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!CorporateWerServer, HKLM\SOFTWARE\Policies\Microsoft\Windows\Windo

HKCU\Software\Policies\Microsoft\Windows\Windows Error Reporting\ExcludedApplications

HKLM\Software\Policies\Microsoft\Windows\Windows Error Reporting\ExcludedApplications

HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!DisableQueue, HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Erro

HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!DisableQueue, HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Erro

HKCU\

HKLM\

HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\Consent!DefaultOverrideBehavior

HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\Consent!DefaultOverrideBehavior

HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\Consent!DefaultConsent

HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\Consent!DefaultConsent

HKLM\Software\Policies\Microsoft\Windows\EventLog\Application!AutoBackupLogFiles

HKLM\Software\Policies\Microsoft\Windows\EventLog\Application!ChannelAccess

HKLM\Software\Policies\Microsoft\Windows\EventLog\Application!Retention

HKLM\Software\Policies\Microsoft\Windows\EventLog\Application!File

HKLM\Software\Policies\Microsoft\Windows\EventLog\Application!MaxSize

HKLM\Software\Policies\Microsoft\Windows\EventLog\Security!AutoBackupLogFiles

HKLM\Software\Policies\Microsoft\Windows\EventLog\Security!ChannelAccess

HKLM\Software\Policies\Microsoft\Windows\EventLog\Security!Retention

HKLM\Software\Policies\Microsoft\Windows\EventLog\Security!File

HKLM\Software\Policies\Microsoft\Windows\EventLog\Security!MaxSize

HKLM\Software\Policies\Microsoft\Windows\EventLog\Setup!AutoBackupLogFiles

HKLM\Software\Policies\Microsoft\Windows\EventLog\Setup!ChannelAccess

HKLM\Software\Policies\Microsoft\Windows\EventLog\Setup!Retention

HKLM\Software\Policies\Microsoft\Windows\EventLog\Setup!Enabled

HKLM\Software\Policies\Microsoft\Windows\EventLog\Setup!File

HKLM\Software\Policies\Microsoft\Windows\EventLog\Setup!MaxSize

HKLM\Software\Policies\Microsoft\Windows\EventLog\System!AutoBackupLogFiles

HKLM\Software\Policies\Microsoft\Windows\EventLog\System!ChannelAccess

HKLM\Software\Policies\Microsoft\Windows\EventLog\System!Retention

HKLM\Software\Policies\Microsoft\Windows\EventLog\System!File

HKLM\Software\Policies\Microsoft\Windows\EventLog\System!MaxSize

HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftRedirectionProgram

HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftRedirectionProgramCommandLineParameters

HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftRedirectionURL

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!AlwaysShowClassicMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!PreventItemCreationInUsersFilesFolder

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TurnOffSPIAnimations

HKLM\Software\Policies\Microsoft\Windows\Explorer!NoHeapTerminationOnCorruption

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{8519d925-541e-4a2b-8b1e-8059d16082f2}!ScenarioExecutionEnabled, HKLM\SOFTWARE\Policie

HKLM\Software\Policies\Microsoft\Windows\Filesystems TFS!SymLinkState, HKLM\Software\Policies\Microsoft\Windows\Filesystems TFS!SymlinkLo

HKCU\Software\Policies\Microsoft\Windows\System\Fdeploy!LocalizeXPRelativePaths

HKCU\Software\Policies\Microsoft\Windows etCache!DisableFRAdminPin

HKLM\Software\Policies\Microsoft\Windows\System\Fdeploy!LocalizeXPRelativePaths

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPreviewPane

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoReadingPane

HKLM\Software\Policies\Microsoft\Windows\GameUX!DownloadGameInfo

HKLM\Software\Policies\Microsoft\Windows\GameUX!ListRecentlyPlayed

HKCU\Software\Policies\Microsoft\Control Panel\International!CustomLocalesNoSelect

HKLM\Software\Policies\Microsoft\Control Panel\International!CustomLocalesNoSelect

HKLM\Software\Policies\Microsoft\Control Panel\International!RestrictSystemLocales, HKLM\Software\Policies\Microsoft\Control Panel\International!

HKCU\Software\Policies\Microsoft\Control Panel\International!RestrictUserLocales, HKCU\Software\Policies\Microsoft\Control Panel\International!All

HKLM\Software\Policies\Microsoft\Control Panel\International!RestrictUserLocales, HKLM\Software\Policies\Microsoft\Control Panel\International!All

HKCU\Software\Policies\Microsoft\Control Panel\International!PreventGeoIdChange

HKLM\Software\Policies\Microsoft\Control Panel\International!PreventGeoIdChange

HKCU\Software\Policies\Microsoft\Control Panel\International!PreventUserOverrides

HKLM\Software\Policies\Microsoft\Control Panel\International!PreventUserOverrides

HKCU\Software\Policies\Microsoft\Control Panel\International!HideAdminOptions

HKCU\Software\Policies\Microsoft\Control Panel\International!HideCurrentLocation

HKCU\Software\Policies\Microsoft\Control Panel\International!HideLanguageSelection

HKCU\Software\Policies\Microsoft\Control Panel\International!HideLocaleSelectAndCustomize

HKLM\Software\Policies\Microsoft\MUI\Settings!PreferredUILanguages

HKCU\Software\Policies\Microsoft\Control Panel\Desktop!PreferredUILanguages

HKLM\Software\Policies\Microsoft\MUI\Settings!MachineUILock

HKCU\Software\Policies\Microsoft\Control Panel\Desktop!MultiUILanguageID

HKCU\Software\Policies\Microsoft\Control Panel\International\Calendars\TwoDigitYearMax!1

HKLM\Software\Policies\Microsoft\Windows\System!DisableLGPOProcessing

HKLM\Software\Policies\Microsoft\Windows\System!GpNetworkStartTimeoutPolicyValue

HKLM\Software\Policies\Microsoft\Windows\System!AllowX-ForestPolicy-and-RUP

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{c6dc5466-785a-11d2-84d0-00c04fb169f7}!NoSlowLink, HKLM\Software\Policies\Microsof

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}!NoSlowLink, HKLM\Software\Policies\Microsoft

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}!NoSlowLink, HKLM\Software\Policies\Mi

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{25537BA6-77A8-11D2-9B6C-0000F8080861}!NoSlowLink, HKLM\Software\Policies\Micr

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}!NoSlowLink, HKLM\Software\Policies\Mi

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{e437bc1c-aa7d-11d2-a382-00c04f991e27}!NoSlowLink, HKLM\Software\Policies\Microsof

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!NoBackgroundPolicy, HKLM\Software\Pol

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{42B5FAAE-6536-11d2-AE5A-0000F87571E3}!NoSlowLink, HKLM\Software\Policies\Micr

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}!NoBackgroundPolicy, HKLM\Software\Poli

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}!NoSlowLink, HKLM\Software\Policies\Mi

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{B587E2B1-4D59-4e7e-AED9-22B9DF11D053}!NoSlowLink, HKLM\Software\Policies\Mic

HKCU\Software\Policies\Microsoft\Windows\System!DenyRsopToInteractiveUser

HKLM\Software\Policies\Microsoft\Windows\System!DenyRsopToInteractiveUser

HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!DisableAutoADMUpdate

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableBkGndGroupPolicy

HKLM\Software\Policies\Microsoft\Windows\System!DenyUsersFromMachGP

HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!ShowPoliciesOnly

HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!DCOption

HKCU\Software\Policies\Microsoft\Windows\System!GroupPolicyMinTransferRate

HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyMinTransferRate

HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTime, HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyRefres

HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTimeDC, HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyRe

HKCU\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTime, HKCU\Software\Policies\Microsoft\Windows\System!GroupPolicyRefres

HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!GPODisplayName

HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!NewGPOLinksDisabled

HKLM\Software\Policies\Microsoft\Windows\Group Policy!OnlyUseLocalAdminFiles

HKLM\Software\Policies\Microsoft\Windows\System!RSoPLogging

HKLM\Software\Policies\Microsoft\Windows\System!UserPolicyMode

HKLM\Software\Policies\Microsoft\Windows\System!HelpQualifiedRootDir

HKCU\Software\Policies\Microsoft\Windows\System!DisableInHelp

HKLM\Software\Policies\Microsoft\Windows\System!DisableInHelp

HKLM\Software\Policies\Microsoft\Assistance\Client\1.0!NoActiveHelp

HKLM\Software\Policies\Microsoft\Assistance\Client\1.0!NoUntrustedContent

HKCU\Software\Policies\Microsoft\Assistance\Client\1.0!NoExplicitFeedback

HKCU\Software\Policies\Microsoft\Assistance\Client\1.0!NoImplicitFeedback

HKCU\Software\Policies\Microsoft\Assistance\Client\1.0!NoOnlineAssist

HKCU\Software\policies\Microsoft\System\HotStart!NoHotStart

HKLM\Software\policies\Microsoft\System\HotStart!NoHotStart

HKCU\Software\Policies\Microsoft\InternetManagement!RestrictCommunication, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!

HKLM\Software\Policies\Microsoft\InternetManagement!RestrictCommunication, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

HKLM\Software\Policies\Microsoft\SystemCertificates\AuthRoot!DisableRootAutoUpdate

HKCU\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting

HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting

HKCU\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload

HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload

HKLM\Software\Policies\Microsoft\Windows\DriverSearching!DontSearchWindowsUpdate

HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftEventVwrDisableLinks

HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!Headlines

HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!MicrosoftKBSearch

HKLM\Software\Policies\Microsoft\Windows\Internet Connection Wizard!ExitOnMSICW

HKLM\Software\Policies\Microsoft\Windows\Registration Wizard Control!NoRegistration

HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!DoReport, HKLM\Software\Policies\Microsoft\Windows\Windows Error Reporting!Disabled

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!DisableWindowsUpdateAccess

HKLM\Software\Policies\Microsoft\SearchCompanion!DisableContentFileUpdates

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPublishingWizard

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPublishingWizard

HKCU\Software\Policies\Microsoft\Messenger\Client!CEIP

HKLM\Software\Policies\Microsoft\Messenger\Client!CEIP

HKLM\Software\Policies\Microsoft\SQMClient\Windows!CEIPEnable

HKLM\Software\Policies\Microsoft\Windows NT\IIS!PreventIISInstall

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{05589FA1-C356-11CE-BF01-00AA0055595A}, HKCU\So

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{DED22F57-FEE2-11D0-953B-00C04FD9152D}

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{2D360201-FFF5-11D1-8D03-00A0C959BC0A}

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{D27CDB6E-AE6D-11CF-96B8-444553540000}

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{9276B91A-E780-11d2-8A8D-00C04FA31D93}, HKCU\So

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{275E2FE0-7486-11D0-89D6-00A0C90C9B67}, HKCU\So

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{D45FD31B-5C6E-11D1-9EC1-00C04FD7081F}

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{D6526FE0-E651-11CF-99CB-00C04FD64497}

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{2FF18E10-DE11-11D1-8161-00A0C90DD90C}

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{26F24A93-1DA2-11D0-A334-00AA004A5FC5}

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{AE24FDAE-03C6-11D1-8B76-0080C744F389}

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{BD1F006E-174F-11D2-95C0-00C04F9A8CFA}

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\Settings!LOCALMACHINE_C

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\Settings!LOCALMACHINE_C

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!CertificateRevocation

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!CertificateRevocation

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!UseClearType

HKLM\Software\Policies\Microsoft\Internet Explorer\Main!UseClearType

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableRIED

HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableRIED

HKCU\Software\Policies\Microsoft\Internet Explorer\Download!CheckExeSignatures

HKLM\Software\Policies\Microsoft\Internet Explorer\Download!CheckExeSignatures

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Enable Browser Extensions

HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Enable Browser Extensions

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!NoJITSetup

HKLM\Software\Policies\Microsoft\Internet Explorer\Main!NoJITSetup

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!NoWebJITSetup

HKLM\Software\Policies\Microsoft\Internet Explorer\Main!NoWebJITSetup

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!NoUpdateCheck

HKLM\Software\Policies\Microsoft\Internet Explorer\Main!NoUpdateCheck

HKCU\Software\Policies\Microsoft\Internet Explorer\Download!RunInvalidSignatures

HKLM\Software\Policies\Microsoft\Internet Explorer\Download!RunInvalidSignatures

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Play_Animations

HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Play_Animations

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Play_Background_Sounds

HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Play_Background_Sounds

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Display Inline Videos

HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Display Inline Videos

HKCU\Software\Policies\Microsoft\Internet Explorer\Security\P3Global!Enabled

HKLM\Software\Policies\Microsoft\Internet Explorer\Security\P3Global!Enabled

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DisableCachingOfSSLPages

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DisableCachingOfSSLPages

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Cache!Persistent

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Cache!Persistent

HKCU\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete!Append Completion

HKCU\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete!Use AutoComplete

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Disable Script Debugger

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Friendly http errors

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Page_Transitions

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Error Dlg Displayed On Every Error

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!SmoothScroll

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Anchor Underline

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!MaxSubscriptionSize, HKCU\Software\Policies\Microsoft\Internet Explorer

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoAddingChannels

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoAddingSubscriptions

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoChannelLogging

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoChannelUI

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoEditingScheduleGroups

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoEditingSubscriptions

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoRemovingChannels

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoRemovingSubscriptions

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoScheduledUpdates

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSubscriptionContent

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!CodeBaseSearchPath

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoDefaultTextSize, HKCU\Software\Policies\Microsoft\Internet Explorer\Zoom!Reset

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!AdvancedTab

HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!AdvancedTab

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!ConnectionsTab

HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!ConnectionsTab

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!ContentTab

HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!ContentTab

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!GeneralTab

HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!GeneralTab

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!PrivacyTab

HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!PrivacyTab

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!ProgramsTab

HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!ProgramsTab

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!SecurityTab

HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!SecurityTab

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!EnablePunyCode

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!EnablePunyCode

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Protocols\Mailto!UTF8Encoding

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Protocols\Mailto!UTF8Encoding

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!PreventIgnoreCertErrors

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!PreventIgnoreCertErrors

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!UrlEncoding

HKCU\Software\Policies\Microsoft\Internet Explorer\Settings!Background Color

HKCU\Software\Policies\Microsoft\Internet Explorer\Settings!Text Color

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Use_DlgBox_Colors

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion!IEAKUpdateUrl

HKCU\Software\Policies\Microsoft\Internet Connection Wizard!DisableICW

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!ListBox_Support_CLSID, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!ListBox_Support_CLSID, HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!RestrictToList

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!RestrictToList

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT!*

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT!*

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ADDON_MANAGEMENT, HKCU\Software\Pol

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ADDON_MANAGEMENT, HKLM\Software\Pol

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_AllowedBehaviors, HKCU\Software\Policies\Microsoft\W

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_AllowedBehaviors, HKLM\Software\Policies\Microsoft\W

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!*

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!*

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!(Reserved), HKLM\Software\Policies\Microsoft\Int

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!(Reserved), HKCU\Software\Policies\Microsoft\Int

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_BEHAVIORS, HKLM\Software\Policies\Microso

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_BEHAVIORS, HKCU\Software\Policies\Microso

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!*

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!*

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!(Reserved), HKLM\Software\Policies\Microsof

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!(Reserved), HKCU\Software\Policies\Microsof

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_HANDLING, HKLM\Software\Policies\M

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_HANDLING, HKCU\Software\Policies\M

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!*

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!*

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!(Reserved), HKCU\Software\Policies\Microsoft

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!(Reserved), HKLM\Software\Policies\Microsoft

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_SECURITYBAND, HKCU\Software\Policies\Mi

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_SECURITYBAND, HKLM\Software\Policies\Mi

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!*

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!*

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!(Reserved), HKLM\Software\Poli

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!(Reserved), HKCU\Software\Poli

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_LOCALMACHINE_LOCKDOWN, HKLM\Softwa

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_LOCALMACHINE_LOCKDOWN, HKCU\Softwa

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!*

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!*

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!(Reserved), HKLM\Software\Policies\Microsoft

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!(Reserved), HKCU\Software\Policies\Microsoft

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_SNIFFING, HKLM\Software\Policies\Mic

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_SNIFFING, HKCU\Software\Policies\Mi

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!*

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!*

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!(Reserved), HKLM\Software\Policies

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!(Reserved), HKCU\Software\Policies

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_DISABLE_MK_PROTOCOL, HKLM\Software\P

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_DISABLE_MK_PROTOCOL, HKCU\Software\P

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!*

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!*

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!(Reserved), HKCU\Software\Policies

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!(Reserved), HKLM\Software\Policies\

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_PROTOCOL_LOCKDOWN, HKCU\Software\Po

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_PROTOCOL_LOCKDOWN, HKLM\Software\Po

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!*

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!*

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!(Reserved), HKLM\Software\Policies\Micros

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!(Reserved), HKCU\Software\Policies\Micros

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_OBJECT_CACHING, HKLM\Software\Policies

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_OBJECT_CACHING, HKCU\Software\Policies

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!*

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!*

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!(Reserved), HKLM\Software\Policies\Microso

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!(Reserved), HKCU\Software\Policies\Micros

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ZONE_ELEVATION, HKLM\Software\Policies\

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ZONE_ELEVATION, HKCU\Software\Policies\

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!*

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!*

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!(Reserved), HKCU\Software\Polic

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!(Reserved), HKLM\Software\Polic

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_ACTIVEXINSTALL, HKCU\Software

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_ACTIVEXINSTALL, HKLM\Software

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!*

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!*

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!(Reserved), HKCU\Software\Polici

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!(Reserved), HKLM\Software\Polici

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_FILEDOWNLOAD, HKCU\Software

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_FILEDOWNLOAD, HKLM\Software

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!*

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!*

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!(Reserved), HKLM\Software\Policies

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!(Reserved), HKCU\Software\Policies

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_WINDOW_RESTRICTIONS, HKLM\Software\Po

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_WINDOW_RESTRICTIONS, HKCU\Software\P

HKCU\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\RestrictedProtocols!ListBox_Support_3, HKCU\SOFTWARE\Policies\Mic

HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\RestrictedProtocols!ListBox_Support_3, HKLM\SOFTWARE\Policies\Micr









HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoCrashDetection

HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoCrashDetection

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoExtensionManagement

HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoExtensionManagement

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!AddPolicySearchProviders

HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!AddPolicySearchProviders

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!AlwaysShowMenus

HKLM\Software\Policies\Microsoft\Internet Explorer\Main!AlwaysShowMenus

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!EnableAutoProxyResultCache

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoExternalBranding

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Advanced

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent!Version

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent!Version

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DialupAutodetect

HKCU\Software\Policies\Microsoft\Internet Explorer\Security!DisableFixSecuritySettings

HKLM\Software\Policies\Microsoft\Internet Explorer\Security!DisableFixSecuritySettings

HKCU\Software\Policies\Microsoft\Internet Explorer\PhishingFilter!Enabled

HKLM\Software\Policies\Microsoft\Internet Explorer\PhishingFilter!Enabled

HKCU\Software\Policies\Microsoft\Internet Explorer\Security!DisableSecuritySettingsCheck

HKLM\Software\Policies\Microsoft\Internet Explorer\Security!DisableSecuritySettingsCheck

HKCU\Software\Policies\Microsoft\Internet Explorer\Toolbar\WebBrowser!ITBar7Position

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!DisablePopupFilterLevel

HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!DisablePopupFilterLevel

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DisplayScriptDownloadFailureUI

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\Feature_Enable_Compat_logging!iexplore.exe

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\Feature_Enable_Compat_logging!iexplore.exe

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!AlwaysShowMenus, HKCU\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restricti

HKLM\Software\Policies\Microsoft\Internet Explorer\Main!AlwaysShowMenus, HKLM\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictio

HKCU\Software\Policies\Microsoft\Internet Explorer!DisableImportExportFavorites

HKCU\Software\Policies\Microsoft\Internet Explorer\ZOOM!ZoomDisabled

HKLM\Software\Policies\Microsoft\Internet Explorer\ZOOM!ZoomDisabled

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Identities!Locked Down

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!No_LaunchMediaBar, HKCU\Software\Microsoft\Internet Explorer\media!Autoplay

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableDeleteBrowsingHistory

HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableDeleteBrowsingHistory

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableDeleteForms

HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableDeleteForms

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableDeletePasswords

HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableDeletePasswords

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!DisableFirstRunCustomize

HKLM\Software\Policies\Microsoft\Internet Explorer\Main!DisableFirstRunCustomize

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpMenu

HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpMenu

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSearchBox

HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSearchBox

HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoJITSetup

HKCU\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!QuickTabsThreshold

HKLM\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!QuickTabsThreshold

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoChangeDefaultSearchProvider

HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoChangeDefaultSearchProvider

HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSplash

HKCU\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!Enabled

HKLM\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!Enabled

HKCU\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!PopupsUseNewWindow

HKLM\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!PopupsUseNewWindow

HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoUpdateCheck

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!AllowWindowReuse

HKLM\Software\Policies\Microsoft\Internet Explorer\Main!AllowWindowReuse

HKCU\Software\Microsoft\Outlook Express!BlockExeAttachments

HKCU\Software\Policies\Microsoft\Internet Explorer ew Windows!ListBox_Support_Allow, HKCU\Software\Policies\Microsoft\Internet Explorer ew Win

HKLM\Software\Policies\Microsoft\Internet Explorer ew Windows!ListBox_Support_Allow, HKLM\Software\Policies\Microsoft\Internet Explorer ew Wind

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Accessibility

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Autoconfig

HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!Autoconfig

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Cache

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!CalendarContact

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Certificates

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Check_If_Default

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Colors

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Connection Settings

HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!Connection Settings, HKLM\Software\Policies\Microsoft\Internet Explorer\Control

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Connwiz Admin Lock

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Fonts

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Use FormSuggest, HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!FormS

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!FormSuggest Passwords, HKCU\Software\Policies\Microsoft\Internet Explorer\Control Pan

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!History, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settin

HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!History, HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settin

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!HomePage, HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Start Page

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Languages

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!links

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Messaging

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!RestrictPopupExceptionList

HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!RestrictPopupExceptionList

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoPopupManagement

HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoPopupManagement

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Profiles

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Proxy

HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!Proxy

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Ratings

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!ResetWebSettings

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Settings

HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!Settings

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete!AutoSuggest

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoFindFiles

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSearchCustomization

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Security_HKLM_only

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Security_options_edit

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Security_zones_map_edit

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoMSAppLogo5ChannelNotify

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!UsePolicySearchProvidersOnly

HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!UsePolicySearchProvidersOnly

HKCU\Software\Policies\Microsoft\Internet Explorer\SQM!DisableCustomerImprovementProgram

HKLM\Software\Policies\Microsoft\Internet Explorer\SQM!DisableCustomerImprovementProgram

HKCU\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!OpenInForeground

HKLM\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!OpenInForeground

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ProxySettingsPerUser

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!120A

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!120A

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1209

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1209









































HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1C00

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1C00



HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1A00

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1A00























HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1E05

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1E05











HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!120A

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!120A

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1209

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1209









































HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1C00

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1C00



HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A00

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A00





















HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1E05

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1E05





























HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!IntranetName

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!IntranetName

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Lockdown Settings\Template Policies!InternetZoneLockdownTemplate, HKCU\Softw

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Lockdown Settings\Template Policies!InternetZoneLockdownTemplate, HKLM\Softw

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Template Policies!InternetZoneTemplate, HKCU\Software\Policies\Microsof

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Template Policies!InternetZoneTemplate, HKLM\Software\Policies\Microsof

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Lockdown Settings\Template Policies!IntranetZoneLockdownTemplate, HKCU\Softw

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Lockdown Settings\Template Policies!IntranetZoneLockdownTemplate, HKLM\Softw

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Settings\Template Policies!IntranetZoneTemplate, HKCU\Software\Policies\Microsof

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Settings\Template Policies!IntranetZoneTemplate, HKLM\Software\Policies\Microsof

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Lockdown Settings\Template Policies!LocalMachineZoneLockdownTem

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Lockdown Settings\Template Policies!LocalMachineZoneLockdownTem

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Settings\Template Policies!LocalMachineZoneTemplate, HKCU\Softwar

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Settings\Template Policies!LocalMachineZoneTemplate, HKLM\Softwar

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Lockdown Settings\Template Policies!RestrictedSitesZoneLockdownTempla

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Lockdown Settings\Template Policies!RestrictedSitesZoneLockdownTempla

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Settings\Template Policies!RestrictedSitesZoneTemplate, HKCU\Software\Po

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Settings\Template Policies!RestrictedSitesZoneTemplate, HKLM\Software\Po

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Lockdown Settings\Template Policies!TrustedSitesZoneLockdownTemplate,

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Lockdown Settings\Template Policies!TrustedSitesZoneLockdownTemplate,

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Settings\Template Policies!TrustedSitesZoneTemplate, HKCU\Software\Polici

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Settings\Template Policies!TrustedSitesZoneTemplate, HKLM\Software\Polici

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!ProxyByPass

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!ProxyByPass

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!UNCAsIntranet

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!UNCAsIntranet

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_ZoneMapKey, HKCU\Software\Policies\Microsoft\Windo

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_ZoneMapKey, HKLM\Software\Policies\Microsoft\Windo

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!AutoDetect

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!AutoDetect

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!WarnOnIntranet

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!WarnOnIntranet















































HKCU\Software\Policies\Microsoft\Internet Explorer\Settings!Anchor Color Hover

HKCU\Software\Policies\Microsoft\Internet Explorer\Settings!Anchor Color

HKCU\Software\Policies\Microsoft\Internet Explorer\Settings!Anchor Color Visited

HKCU\Software\Policies\Microsoft\Internet Explorer\Settings!Use Anchor Hover Color

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoBrowserClose

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoBrowserSaveAs

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoBrowserSaveWebComplete

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoFileNew

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoFileOpen

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemSendFeedback

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemNetscapeHelp

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemTipOfTheDay

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemTutorial

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoBrowserContextMenu

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoFavorites

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoOpeninNewWnd

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoSelectDownloadDir

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoBrowserOptions

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoTheaterMode

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoViewSource

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Enable AutoImageResize

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Display Inline Images

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Show image placeholders

HKCU\SOFTWARE\Policies\Microsoft\Internet Explorer!SmartDithering

HKCU\Software\Policies\Microsoft\Internet Explorer\Persistence\0!DomainLimit, HKCU\Software\Policies\Microsoft\Internet Explorer\Persistence\0!Do





HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Print_Background

HKCU\Software\Policies\Microsoft\Internet Explorer\Feeds!BackgroundSyncStatus

HKLM\Software\Policies\Microsoft\Internet Explorer\Feeds!BackgroundSyncStatus

HKCU\Software\Policies\Microsoft\Internet Explorer\Feeds!DisableEnclosureDownload

HKLM\Software\Policies\Microsoft\Internet Explorer\Feeds!DisableEnclosureDownload

HKCU\Software\Policies\Microsoft\Internet Explorer\Feeds!DisableAddRemove

HKLM\Software\Policies\Microsoft\Internet Explorer\Feeds!DisableAddRemove

HKCU\Software\Policies\Microsoft\Internet Explorer\Feed Discovery!Enabled

HKLM\Software\Policies\Microsoft\Internet Explorer\Feed Discovery!Enabled

HKCU\Software\Policies\Microsoft\Internet Explorer\Feeds!DisableFeedPane

HKLM\Software\Policies\Microsoft\Internet Explorer\Feeds!DisableFeedPane

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\Feature_Enable_Script_Paste_URLAction_If_Prompt!*

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\Feature_Enable_Script_Paste_URLAction_If_Prompt!*

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\Feature_Enable_Script_Paste_URLAction_If_Prompt!(Reserved), HKCU\Softwa

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\Feature_Enable_Script_Paste_URLAction_If_Prompt!(Reserved), HKLM\Softwa

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_Feature_Enable_Script_Paste_URLAction_If_Prompt, HKCU\

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_Feature_Enable_Script_Paste_URLAction_If_Prompt, HKLM\

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!AutoSearch

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!XMLHTTP

HKLM\Software\Policies\Microsoft\Internet Explorer\Main!XMLHTTP

HKCU\Software\Policies\Microsoft\IEAK!NoAutomaticSignup

HKCU\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions!DisableToolbarUpgrader

HKLM\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions!DisableToolbarUpgrader

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoBandCustomize

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoToolbarCustomize

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!SpecifyDefaultButtons, HKCU\Software\Microsoft\Windows\CurrentVersion\Polici

HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Update_Check_Interval

HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Update_Check_Page

HKCU\Software\Policies\Microsoft\Windows\HandwritingErrorReports!PreventHandwritingErrorReports

HKLM\Software\Policies\Microsoft\Windows\HandwritingErrorReports!PreventHandwritingErrorReports

HKCU\SOFTWARE\Policies\Microsoft\InputPersonalization!RestrictImplicitTextCollection, HKCU\SOFTWARE\Policies\Microsoft\InputPersonalization!Res

HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization!RestrictImplicitTextCollection, HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization!Rest

HKCU\SOFTWARE\Policies\Microsoft\InputPersonalization!DisablePersonalization

HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization!DisablePersonalization

HKLM\Software\Policies\Microsoft\Windows\iSCSI!ConfigureiSNSServers

HKLM\Software\Policies\Microsoft\Windows\iSCSI!ConfigureTargetPortals

HKLM\Software\Policies\Microsoft\Windows\iSCSI!ConfigureTargets

HKLM\Software\Policies\Microsoft\Windows\iSCSI!NewStaticTargets

HKLM\Software\Policies\Microsoft\Windows\iSCSI!ChangeIQNName

HKLM\Software\Policies\Microsoft\Windows\iSCSI!RestrictAdditionalLogins

HKLM\Software\Policies\Microsoft\Windows\iSCSI!ChangeCHAPSecret

HKLM\Software\Policies\Microsoft\Windows\iSCSI!RequireIPSec

HKLM\Software\Policies\Microsoft\Windows\iSCSI!RequireMutualCHAP

HKLM\Software\Policies\Microsoft\Windows\iSCSI!RequireOneWayCHAP

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos!domain_realm_Enabled, HKLM\Software\Microsoft\Windows\CurrentVers

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos!MitRealms_Enabled, HKLM\Software\Microsoft\Windows\CurrentVersion

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters!KdcValidation

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{180b3a99-8c39-4f12-b631-2031998efe45}!ScenarioExecutionEnabled, HKLM\SOFTWARE\Policies

HKLM\Software\Policies\Microsoft\Windows\LLTD!EnableLLTDIO, HKLM\Software\Policies\Microsoft\Windows\LLTD!AllowLLTDIOOnDomain, HKLM\Sof

HKLM\Software\Policies\Microsoft\Windows\LLTD!EnableRspndr, HKLM\Software\Policies\Microsoft\Windows\LLTD!AllowRspndrOnDomain, HKLM\Soft

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableCurrentUserRun

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableLocalMachineRun

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableCurrentUserRunOnce

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableLocalMachineRunOnce

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!LogonType

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWelcomeScreen

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

HKLM\Software\Policies\Microsoft\Windows NT\CurrentVersion\Winlogon!SyncForegroundPolicy

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableStatusMessages

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWelcomeScreen

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!VerboseStatus

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideFastUserSwitching

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableStartupSound

HKCU\Software\Policies\Microsoft\WindowsMediaCenter!MediaCenter

HKLM\Software\Policies\Microsoft\WindowsMediaCenter!MediaCenter

HKCU\Software\Policies\Microsoft\MMC!RestrictAuthorMode

HKCU\Software\Policies\Microsoft\MMC!RestrictToPermittedSnapins

HKCU\Software\Policies\Microsoft\MMC\{B708457E-DB61-4C55-A92F-0D4B5E9B1224}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{C96401CF-0E17-11D3-885B-00C04F72C717}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{C96401D1-0E17-11D3-885B-00C04F72C717}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{1AA7F83C-C7F5-11D0-A376-00C04FC9DA04}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{1F5EEC01-1214-4D94-80C5-4BDCD2014DDD}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{3F276EB4-70EE-11D1-8A0F-00C04FB93753}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{C2FE450B-D6C2-11D0-A37B-00C04FC9DA04}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{9EC88934-C774-11d1-87F4-00C04FC2C17B}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{90087284-d6d6-11d0-8353-00a0c90640bf}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{C2FE4502-D6C2-11D0-A37B-00C04FC9DA04}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{394C052E-B830-11D0-9A86-00C04FD8DBF7}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\FX:{b05566ae-fe9c-4363-be05-7a4cbb7cb510}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{2E19B602-48EB-11d2-83CA-00104BCA42CF}!Restrict_Run



HKCU\Software\Policies\Microsoft\MMC\{90810502-38F1-11D1-9345-00C04FC9DA04}!Restrict_Run



HKCU\Software\Policies\Microsoft\MMC\{6E8E0081-19CD-11D1-AD91-00AA00B8E05A}!Restrict_Run


HKCU\Software\Policies\Microsoft\MMC\{34AB8E82-C27E-11D1-A6C0-00C04FB94F17}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{B52C1E50-1DD2-11D1-BC43-00C04FC31FD3}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{5880CD5C-8EC0-11d1-9570-0060B0576642}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{243E20B0-48ED-11D2-97DA-00A024D77700}!Restrict_Run


HKCU\Software\Policies\Microsoft\MMC\{DAB1A262-4FD7-11D1-842C-00C04FB6C218}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{B1AFF7D0-0C49-11D1-BB12-00C04FC9A3A3}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{BD95BA60-2E26-AAD1-AD99-00AA00B8E05A}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{58221C69-EA27-11CF-ADCF-00AA00A80033}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{03f1f940-a0f2-11d0-bb77-00aa00a1eab7}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{7AF60DD3-4979-11D1-8A6C-00C04FC33566}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{0F3621F1-23C6-11D1-AD97-00AA00B88E5A}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{E12BBB5D-D59D-4E61-947A-301D25AE8C23}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{8FC0B734-A0E1-11D1-A7D3-0000F87571E3}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{D70A2BEA-A63E-11D1-A7D4-0000F87571E3}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{6DC3804B-7212-458D-ADB0-9A07E2AE1FA2}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{0F6B957D-509E-11D1-A7CC-0000F87571E3}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{0F6B957E-509E-11D1-A7CC-0000F87571E3}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{88E729D6-BDC1-11D1-BD2A-00C04FB9603F}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{FC715823-C5FB-11D1-9EEF-00A0C90347FF}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{DEA8AFA0-CC85-11d0-9CE2-0080C7221EBD}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{0E752416-F29E-4195-A9DD-7F0D4D5A9D71}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\FX:{a1bc4ecb-66b2-44e8-9915-be02e84438ba}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{3060E8CE-7020-11D2-842D-00C04FA372D4}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{40B6664F-4972-11D1-A7CA-0000F87571E3}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{40B66650-4972-11D1-A7CA-0000F87571E3}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{942A8E4F-A261-11D1-A760-00C04FB9603F}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{BACF5C8A-A3C7-11D1-A760-00C04FB9603F}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{06993B16-A5C7-47EB-B61C-B1CB7EE600AC}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{2DA6AA7F-8C88-4194-A558-0D36E7FD3E64}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{B6F9C8AE-EF3A-41C8-A911-37370C331DD4}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{B6F9C8AF-EF3A-41C8-A911-37370C331DD4}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{c40d66a0-e90c-46c6-aa3b-473e38c72bf2}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{d524927d-6c08-46bf-86af-391534d779d3}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{40B66660-4972-11d1-A7CA-0000F87571E3}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{40B66661-4972-11d1-A7CA-0000F87571E3}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{fe883157-cebd-4570-b7a2-e4fe06abe626}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{7E45546F-6D52-4D10-B702-9C2E67232E62}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{1BC972D6-555C-4FF7-BE2C-C584021A0A6A}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{EBC53A38-A23F-11D0-B09B-00C04FD8DCA6}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{D967F824-9968-11D0-B936-00C04FD8D5B0}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{E355E538-1C2E-11D0-8C37-00C04FD8FE93}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{1C5DACFA-16BA-11D2-81D0-0000F87A7AA3}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{de751566-4cc6-11d1-8ca0-00c04fc297eb}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{53D6AB1D-2488-11D1-A28C-00C04FB94F17}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{A994E107-6854-4F3D-917C-E6F01670F6D3}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{C9BC92DF-5B9A-11D1-8F00-00C04FC2C17B}!Restrict_Run


HKCU\Software\Policies\Microsoft\MMC\{74246bfc-4c96-11d0-abef-0020af6b0b7a}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{677A2D94-28D9-11D1-A95B-008048918FB1}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{43668E21-2636-11D1-A1CE-0080C88593A5}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{8EAD3A12-B2C1-11d0-83AA-00A0C92C9D5D}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{975797FC-4E2A-11D0-B702-00C04FD8DBF7}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\FX:{b05566ad-fe9c-4363-be05-7a4cbb7cb510}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\FX:{D2779945-405B-4ACE-8618-508F3E3054AC}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{753EDB4D-2E1B-11D1-9064-00A0C90AB504}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{FF5903A8-78D6-11D1-92F6-006097B01056}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{8F8F8DC0-5713-11D1-9551-0060B0576642}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{A841B6C2-7577-11D0-BB1F-00A0C922E79C}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{95AD72F0-44CE-11D0-AE29-00AA004B9986}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{DEA8AFA2-CC85-11d0-9CE2-0080C7221EBD}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{57C596D0-9370-40C0-BA0D-AB491B63255D}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{5D6179C8-17EC-11D1-9AA9-00C04FD8FE93}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\FX:{a1bc4eca-66b2-44e8-9915-be02e84438ba}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{18BA7139-D98B-43c2-94DA-2604E34E175D}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{7478EF61-8C46-11d1-8D99-00A0C913CAD4}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{FD57D297-4FD9-11D1-854E-00C04FC31FD3}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{3D5D035E-7721-4B83-A645-6C07A3D403B7}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{1AA7F839-C7F5-11D0-A376-00C04FC9DA04}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{3CB6973D-3E6F-11D0-95DB-00A024D77700}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{011BE22D-E453-11D1-945A-00C04FB984F9}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{5ADF5BF6-E452-11D1-945A-00C04FB984F9}!Restrict_Run



HKCU\Software\Policies\Microsoft\MMC\{45ac8c63-23e2-11d1-a696-00c04fd58bc3}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{E26D02A0-4C1F-11D1-9AA1-00C04FC3357A}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{B91B6008-32D2-11D2-9888-00A0C925F917}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\FX:{7d3830aa-e69e-4e17-8bd1-1b87b97099da}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\FX:{b05566ac-fe9c-4368-be02-7a4cbb7cbe11}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{23DC5869-BD9F-46fd-AADD-1F869BA64FC3}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{5C659257-E236-11D2-8899-00104B2AFB46}!Restrict_Run

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\MobilityCenter!NoMobilityCenter

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\MobilityCenter!NoMobilityCenter

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\PresentationSettings!NoPresentationSettings

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\PresentationSettings!NoPresentationSettings

HKCU\Software\Policies\Microsoft\WindowsMovieMaker!MovieMaker

HKLM\Software\Policies\Microsoft\WindowsMovieMaker!MovieMaker

HKCU\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp

HKLM\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp

HKLM\Software\Policies\Microsoft\WindowsMovieMaker!CodecDownload

HKCU\Software\Policies\Microsoft\WindowsMovieMaker!CodecDownload

HKLM\Software\Policies\Microsoft\WindowsMovieMaker!WebPublish

HKCU\Software\Policies\Microsoft\WindowsMovieMaker!WebPublish

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{C295FBBA-FD47-46ac-8BEE-B1715EC634E5}!ScenarioExecutionEnabled, HKLM\SOFTWARE\Pol

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{C295FBBA-FD47-46ac-8BEE-B1715EC634E5}!DownloadToolsEnabled, HKLM\SOFTWARE\Polic

HKLM\Software\Policies\Microsoft\Windows\Installer!AllowLockdownBrowse

HKLM\Software\Policies\Microsoft\Windows\Installer!AllowLockdownMedia

HKLM\Software\Policies\Microsoft\Windows\Installer!AllowLockdownPatch

HKCU\Software\Policies\Microsoft\Windows\Installer!AlwaysInstallElevated

HKLM\Software\Policies\Microsoft\Windows\Installer!AlwaysInstallElevated

HKLM\Software\Policies\Microsoft\Windows\Installer!DisableAutomaticApplicationShutdown

HKLM\Software\Policies\Microsoft\Windows\Installer!DisableBrowse

HKLM\Software\Policies\Microsoft\Windows\Installer!DisableFlyweightPatching

HKLM\Software\Policies\Microsoft\Windows\Installer!DisableLoggingFromPackage

HKCU\Software\Policies\Microsoft\Windows\Installer!DisableMedia

HKLM\Software\Policies\Microsoft\Windows\Installer!DisableMSI

HKLM\Software\Policies\Microsoft\Windows\Installer!DisablePatch

HKCU\Software\Policies\Microsoft\Windows\Installer!DisableRollback

HKLM\Software\Policies\Microsoft\Windows\Installer!DisableRollback

HKLM\Software\Policies\Microsoft\Windows\Installer!EnableAdminTSRemote

HKLM\Software\Policies\Microsoft\Windows\Installer!EnableUserControl

HKLM\Software\Policies\Microsoft\Windows\Installer!DisableLUAPatching

HKLM\Software\Policies\Microsoft\Windows\Installer!DisablePatchUninstall

HKLM\Software\Policies\Microsoft\Windows\Installer!LimitSystemRestoreCheckpointing

HKLM\Software\Policies\Microsoft\Windows\Installer!DisableUserInstalls

HKLM\Software\Policies\Microsoft\Windows\Installer!EnforceUpgradeComponentRules

HKLM\Software\Policies\Microsoft\Windows\Installer!MaxPatchCacheSize

HKLM\Software\Policies\Microsoft\Windows\Installer!Logging

HKLM\Software\Policies\Microsoft\Windows\Installer!SafeForScripting

HKCU\Software\Policies\Microsoft\Windows\Installer!SearchOrder

HKLM\Software\Policies\Microsoft\Windows\Installer!TransformsSecure

HKLM\Software\Policies\Microsoft etlogon\Parameters!AvoidPdcOnWan

HKLM\Software\Policies\Microsoft etlogon\Parameters!BackgroundRetryInitialPeriod

HKLM\Software\Policies\Microsoft etlogon\Parameters!BackgroundRetryMaximumPeriod

HKLM\Software\Policies\Microsoft etlogon\Parameters!BackgroundRetryQuitTime

HKLM\Software\Policies\Microsoft etlogon\Parameters!BackgroundSuccessfulRefreshPeriod

HKLM\Software\Policies\Microsoft etlogon\Parameters!dbFlag

HKLM\Software\Policies\Microsoft etlogon\Parameters!ExpectedDialupDelay

HKLM\Software\Policies\Microsoft etlogon\Parameters!MaximumLogFileSize

HKLM\Software\Policies\Microsoft etlogon\Parameters!NegativeCachePeriod

HKLM\Software\Policies\Microsoft etlogon\Parameters!AllowExclusiveScriptsShareAccess

HKLM\Software\Policies\Microsoft etlogon\Parameters!NonBackgroundSuccessfulRefreshPeriod

HKLM\Software\Policies\Microsoft etlogon\Parameters!ScavengeInterval

HKLM\Software\Policies\Microsoft etlogon\Parameters!SiteName

HKLM\Software\Policies\Microsoft etlogon\Parameters!AllowExclusiveSysvolShareAccess

HKLM\Software\Policies\Microsoft etlogon\Parameters!AllowSingleLabelDnsDomain

HKLM\Software\Policies\Microsoft etlogon\Parameters!AutoSiteCoverage

HKLM\Software\Policies\Microsoft etlogon\Parameters!DnsAvoidRegisterRecords

HKLM\Software\Policies\Microsoft etlogon\Parameters!DnsRefreshInterval

HKLM\Software\Policies\Microsoft etlogon\Parameters!DnsTtl

HKLM\Software\Policies\Microsoft etlogon\Parameters!GcSiteCoverage

HKLM\Software\Policies\Microsoft etlogon\Parameters!LdapSrvPriority

HKLM\Software\Policies\Microsoft etlogon\Parameters!LdapSrvWeight

HKLM\Software\Policies\Microsoft etlogon\Parameters!NdncSiteCoverage

HKLM\Software\Policies\Microsoft etlogon\Parameters!SiteCoverage

HKLM\Software\Policies\Microsoft etlogon\Parameters!UseDynamicDns

HKLM\Software\Policies\Microsoft etlogon\Parameters!TryNextClosestSite

HKLM\Software\Policies\Microsoft etlogon\Parameters!ForceRediscoveryInterval

HKLM\Software\Policies\Microsoft etlogon\Parameters!AddressTypeReturned

HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_AddRemoveComponents

HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_AdvancedSettings

HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_AllowAdvancedTCPIPConfig

HKLM\Software\Policies\Microsoft\Windows etwork Connections!NC_AllowNetBridge_NLA

HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_ChangeBindState

HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_DeleteAllUserConnection

HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_DeleteConnection

HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_DialupPrefs

HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_EnableAdminProhibits

HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_IpStateChecking

HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_LanChangeProperties

HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_LanConnect

HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_LanProperties

HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_NewConnectionWizard

HKLM\Software\Policies\Microsoft\Windows etwork Connections!NC_PersonalFirewallConfig

HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_RasAllUserProperties

HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_RasChangeProperties

HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_RasConnect

HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_RasMyProperties

HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_RenameAllUserRasConnection

HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_RenameConnection

HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_RenameLanConnection

HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_RenameMyRasConnection

HKLM\Software\Policies\Microsoft\Windows etwork Connections!NC_ShowSharedAccessUI

HKCU\Software\Policies\Microsoft\Windows etwork Connections!NC_Statistics

HKCU\Software\Policies\Microsoft etworkProjector!DisableNetworkProjector

HKLM\Software\Policies\Microsoft etworkProjector!DisableNetworkProjector

HKLM\Software\Policies\Microsoft\Windows etCache!AlwaysPinSubFolders

HKCU\Software\Policies\Microsoft\Windows etCache\AssignedOfflineFolders

HKLM\Software\Policies\Microsoft\Windows etCache\AssignedOfflineFolders

HKCU\Software\Policies\Microsoft\Windows etCache\CustomGoOfflineActions

HKLM\Software\Policies\Microsoft\Windows etCache\CustomGoOfflineActions

HKLM\Software\Policies\Microsoft\Windows etCache!DefCacheSize

HKLM\Software\Policies\Microsoft\Windows etCache!Enabled

HKLM\Software\Policies\Microsoft\Windows etCache!EncryptCache

HKCU\Software\Policies\Microsoft\Windows etCache!EventLoggingLevel

HKLM\Software\Policies\Microsoft\Windows etCache!EventLoggingLevel

HKLM\Software\Policies\Microsoft\Windows etCache!ExcludeExtensions

HKCU\Software\Policies\Microsoft\Windows etCache!GoOfflineAction

HKLM\Software\Policies\Microsoft\Windows etCache!GoOfflineAction

HKCU\Software\Policies\Microsoft\Windows etCache!NoCacheViewer

HKLM\Software\Policies\Microsoft\Windows etCache!NoCacheViewer

HKCU\Software\Policies\Microsoft\Windows etCache!NoConfigCache

HKLM\Software\Policies\Microsoft\Windows etCache!NoConfigCache

HKCU\Software\Policies\Microsoft\Windows etCache!NoMakeAvailableOffline

HKLM\Software\Policies\Microsoft\Windows etCache!NoMakeAvailableOffline

HKCU\Software\Policies\Microsoft\Windows etCache oMakeAvailableOfflineList

HKLM\Software\Policies\Microsoft\Windows etCache oMakeAvailableOfflineList

HKCU\Software\Policies\Microsoft\Windows etCache!NoReminders

HKLM\Software\Policies\Microsoft\Windows etCache!NoReminders

HKLM\Software\Policies\Microsoft\Windows etCache!PurgeAtLogoff, HKLM\Software\Policies\Microsoft\Windows etCache!PurgeOnlyAutoCacheAtLogo

HKCU\Software\Policies\Microsoft\Windows etCache!ReminderFreqMinutes

HKLM\Software\Policies\Microsoft\Windows etCache!ReminderFreqMinutes

HKCU\Software\Policies\Microsoft\Windows etCache!InitialBalloonTimeoutSeconds

HKLM\Software\Policies\Microsoft\Windows etCache!InitialBalloonTimeoutSeconds

HKCU\Software\Policies\Microsoft\Windows etCache!ReminderBalloonTimeoutSeconds

HKLM\Software\Policies\Microsoft\Windows etCache!ReminderBalloonTimeoutSeconds

HKLM\Software\Policies\Microsoft\Windows etCache!SlowLinkSpeed

HKCU\Software\Policies\Microsoft\Windows etCache!SyncAtLogoff

HKLM\Software\Policies\Microsoft\Windows etCache!SyncAtLogoff

HKCU\Software\Policies\Microsoft\Windows etCache!SyncAtLogon

HKLM\Software\Policies\Microsoft\Windows etCache!SyncAtLogon

HKCU\Software\Policies\Microsoft\Windows etCache!SyncAtSuspend

HKLM\Software\Policies\Microsoft\Windows etCache!SyncAtSuspend

HKLM\Software\Policies\Microsoft\Windows etCache!EconomicalAdminPinning

HKLM\Software\Policies\Microsoft\Windows etCache!SlowLinkEnabled, HKLM\Software\Policies\Microsoft\Windows etCache\SlowLinkParams

HKLM\Software\Policies\Microsoft\Windows etCache!CacheQuotaLimit, HKLM\Software\Policies\Microsoft\Windows etCache!CacheQuotaLimitUnpinn

HKLM\Software\policies\Microsoft\Peernet!Disabled

HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-Global!DisableMulticastBootstrap

HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-Global!SeedServer, HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-Global!DontIncludeMic

HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-LinkLocal!DisableMulticastBootstrap

HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-LinkLocal!SeedServer

HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-SiteLocal!DisableMulticastBootstrap

HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-SiteLocal!SeedServer

HKLM\Software\policies\Microsoft\Peernet!IgnoreDomainPasswordPolicyForNewGroups

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\ParentalControls!WPCEnableOnDomain

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{acfd1ca6-18b6-4ccf-9c07-580cdb6eded4}!ScenarioExecutionEnabled, HKLM\SOFTWARE\Policies

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{081D3213-48AA-4533-9284-D98F01BDC8E6}!ScenarioExecutionEnabled, HKLM\SOFTWARE\Poli

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{659F08FB-2FAB-42a7-BD4F-566CFA528769}!ScenarioExecutionEnabled, HKLM\SOFTWARE\Poli

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{D113E4AA-2D07-41b1-8D9B-C065194A791D}!ScenarioExecutionEnabled, HKLM\SOFTWARE\Pol

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{affc81e2-612a-4f70-6fb2-916ff5c7e3f8}!ScenarioExecutionEnabled, HKLM\SOFTWARE\Policies\Mi

HKCU\SOFTWARE\Policies\Microsoft\PenTraining!DisablePenTraining

HKLM\SOFTWARE\Policies\Microsoft\PenTraining!DisablePenTraining

HKLM\Software\Policies\Microsoft\Windows\Control Panel\Performance Control Panel!PerfCplEnabled

HKCU\Software\Policies\Microsoft\Windows\Control Panel\Performance Control Panel!PerfCplEnabled

HKLM\Software\Policies\Microsoft\Windows\Control Panel\Performance Control Panel!SolutionsEnabled

HKCU\Software\Policies\Microsoft\Windows\Control Panel\Performance Control Panel!SolutionsEnabled

HKLM\Software\Policies\Microsoft\Windows\Control Panel\Performance Control Panel!UpsellEnabled

HKCU\Software\Policies\Microsoft\Windows\Control Panel\Performance Control Panel!UpsellEnabled

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{67144949-5132-4859-8036-a737b43825d8}!ScenarioExecutionEnabled, HKLM\SOFTWARE\Policie

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{ffc42108-4920-4acf-a4fc-8abdcc68ada4}!ScenarioExecutionEnabled, HKLM\SOFTWARE\Policies\

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{a7a5847a-7511-4e4e-90b1-45ad2a002f51}!ScenarioExecutionEnabled, HKLM\SOFTWARE\Policies

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{2698178D-FDAD-40AE-9D3C-1371703ADC5B}!ScenarioExecutionEnabled, HKLM\SOFTWARE\Po

HKLM\Software\Policies\Microsoft\Power\PowerSettings\637EA02F-BBCB-4015-8E2C-A1C7B9C0B546!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\d8742dcb-3e6a-4b3c-b3fe-374623cdcf06!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\9A66D8D7-4FF7-4EF9-B5A2-5A326CA2A469!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\8183ba9a-e910-48da-8769-14ae6dc1170a!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\bcded951-187b-4d05-bccc-f7e51960c258!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\7648EFA3-DD9C-4E3E-B566-50F929386280!ACSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\96996BC0-AD50-47EC-923B-6F41874DD9EB!ACSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\5CA83367-6E45-459F-A27B-476B1D01C936!ACSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\A7066653-8D6C-40A8-910E-A1F54B84C7E5!ACSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\7648EFA3-DD9C-4E3E-B566-50F929386280!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\96996BC0-AD50-47EC-923B-6F41874DD9EB!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\5CA83367-6E45-459F-A27B-476B1D01C936!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\A7066653-8D6C-40A8-910E-A1F54B84C7E5!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\6738E2C4-E8A5-4A42-B16A-E040E769756E!ACSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\6738E2C4-E8A5-4A42-B16A-E040E769756E!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings!ActivePowerScheme

HKLM\Software\Policies\Microsoft\Power\PowerSettings!ActivePowerScheme

HKCU\Software\Policies\Microsoft\Windows\System\Power!PromptPasswordOnResume

HKLM\Software\Policies\Microsoft\Power\PowerSettings\B7A27025-E569-46c2-A504-2B96CAD225A1!ACSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\9D7815A6-7EE4-497E-8888-515A05F02364!ACSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51!ACSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\29F6C1DB-86DA-48C5-9FDB-F2B67B1F44DA!ACSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\94ac6d29-73ce-41a6-809f-6363ba21b47e!ACSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\B7A27025-E569-46c2-A504-2B96CAD225A1!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\9D7815A6-7EE4-497E-8888-515A05F02364!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\29F6C1DB-86DA-48C5-9FDB-F2B67B1F44DA!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\94ac6d29-73ce-41a6-809f-6363ba21b47e!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\90959D22-D6A1-49B9-AF93-BCE885AD335B!ACSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\90959D22-D6A1-49B9-AF93-BCE885AD335B!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\3C0BC021-C8A8-4E07-A973-6B14CBCB2B7E!ACSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\3C0BC021-C8A8-4E07-A973-6B14CBCB2B7E!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\abfc2519-3608-4c2a-94ea-171b0ed546ab!ACSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\abfc2519-3608-4c2a-94ea-171b0ed546ab!DCSettingIndex

HKLM\Software\Policies\Microsoft\Windows NT!DontPowerOffAfterShutdown

HKCU\Software\Policies\Microsoft\PreviousVersions!DisableBackupRestore

HKLM\Software\Policies\Microsoft\PreviousVersions!DisableBackupRestore

HKCU\Software\Policies\Microsoft\PreviousVersions!DisableLocalPage

HKLM\Software\Policies\Microsoft\PreviousVersions!DisableLocalPage

HKCU\Software\Policies\Microsoft\PreviousVersions!DisableLocalRestore

HKLM\Software\Policies\Microsoft\PreviousVersions!DisableLocalRestore

HKCU\Software\Policies\Microsoft\PreviousVersions!DisableRemotePage

HKLM\Software\Policies\Microsoft\PreviousVersions!DisableRemotePage

HKCU\Software\Policies\Microsoft\PreviousVersions!DisableRemoteRestore

HKLM\Software\Policies\Microsoft\PreviousVersions!DisableRemoteRestore

HKCU\Software\Policies\Microsoft\PreviousVersions!HideBackupEntries

HKLM\Software\Policies\Microsoft\PreviousVersions!HideBackupEntries

HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPrinting

HKLM\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Auto Publishing

HKLM\Software\Policies\Microsoft\Windows NT\Printers!SupportLink

HKLM\Software\Policies\Microsoft\Windows NT\Printers\Wizard!DomainDisplayPrinters_State, HKLM\Software\Policies\Microsoft\Windows NT\Printer

HKCU\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Downlevel Browse

HKLM\Software\Policies\Microsoft\Windows NT\Printers!ForceCSREMFDespooling

HKLM\Software\Policies\Microsoft\Windows NT\Printers!Immortal

HKCU\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Printers Page URL

HKLM\Software\Policies\Microsoft\Windows NT\Printers!KMPrintersAreBlocked

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoAddPrinter

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDeletePrinter

HKLM\Software\Policies\Microsoft\Windows NT\Printers\Wizard!NonDomainDisplayPrinters_State, HKLM\Software\Policies\Microsoft\Windows NT\Pri

HKCU\Software\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint!PackagePointAndPrintOnly

HKCU\Software\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint!PackagePointAndPrintServerList, HKCU\Software\Policies\Microsoft\Wi

HKLM\Software\Policies\Microsoft\Windows NT\Printers!PhysicalLocation

HKLM\Software\Policies\Microsoft\Windows NT\Printers!PhysicalLocationSupport

HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint!Restricted, HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPr

HKCU\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Default Search Scope

HKLM\Software\Policies\Microsoft\Windows NT\Printers!ServerThread

HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruneDownlevel

HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningInterval

HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningPriority

HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningRetries

HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningRetryLog

HKLM\Software\Policies\Microsoft\Windows NT\Printers!PublishPrinters

HKLM\Software\Policies\Microsoft\Windows NT\Printers!RegisterSpoolerRemoteRpcEndPoint

HKLM\Software\Policies\Microsoft\Windows NT\Printers!VerifyPublishedState

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Programs!NoProgramsCPL

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Programs!NoProgramsAndFeatures

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Programs!NoInstalledUpdates

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Programs!NoDefaultPrograms

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Programs!NoWindowsMarketplace

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Programs!NoGetPrograms

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Programs!NoWindowsFeatures

HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeBestEffort

HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeControlledLoad

HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeGuaranteed

HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeNetworkControl

HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeQualitative

HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeBestEffort

HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeControlledLoad

HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeGuaranteed

HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeNetworkControl

HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeQualitative

HKLM\Software\Policies\Microsoft\Windows\Psched!MaxOutstandingSends

HKLM\Software\Policies\Microsoft\Windows\Psched!NonBestEffortLimit

HKLM\Software\Policies\Microsoft\Windows\Psched!TimerResolution

HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeBestEffort

HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeControlledLoad

HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeGuaranteed

HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeNetworkControl

HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeNonConforming

HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeQualitative

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{739FF6CF-5033-428c-9E2F-582096482DD5}!ScenarioExecutionEnabled, HKLM\SOFTWARE\Poli

HKLM\Software\Policies\Microsoft\Windows NT\Reliability!TimeStampEnabled, HKLM\Software\Policies\Microsoft\Windows NT\Reliability!TimeStampIn

HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!IncludeShutdownErrs

HKLM\Software\Policies\Microsoft\Windows NT\Reliability!SnapShot

HKLM\Software\Policies\Microsoft\Windows NT\Reliability!ShutdownReasonOn, HKLM\Software\Policies\Microsoft\Windows NT\Reliability!Shutdown

HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!LoggingEnabled

HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!CreateEncryptedOnlyTickets

HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!UseBandwidthOptimization, HKLM\Software\policies\Microsoft\Windows NT\Termina

HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!UseCustomMessages, HKLM\Software\policies\Microsoft\Windows NT\Terminal Ser

HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!fAllowToGetHelp, HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!

HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!fAllowUnsolicited, HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!

HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices!RebootTimeinSeconds_state, HKCU\Software\Policies\Microsoft\Windows\R

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices!RebootTimeinSeconds_state, HKLM\Software\Policies\Microsoft\Windows\R

HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56308-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Read

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56308-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Read

HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56308-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Write

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56308-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Write

HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\Custom\Deny_Read!Deny_Read, HKCU\Software\Policies\Microsoft\Window

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\Custom\Deny_Read!Deny_Read, HKLM\Software\Policies\Microsoft\Windows

HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\Custom\Deny_Write!Deny_Write, HKCU\Software\Policies\Microsoft\Windows

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\Custom\Deny_Write!Deny_Write, HKLM\Software\Policies\Microsoft\Windows

HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56311-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Read

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56311-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Read

HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56311-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Write

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56311-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Write

HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Read

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Read

HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Write

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Write

HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices!Deny_All

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices!Deny_All

HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630b-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Read

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630b-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Read

HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630b-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Write

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630b-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Write

HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{6AC27878-A6FA-4155-BA85-F98F491D4F33}!Deny_Read, HKCU\Software

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{6AC27878-A6FA-4155-BA85-F98F491D4F33}!Deny_Read, HKLM\Software

HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{6AC27878-A6FA-4155-BA85-F98F491D4F33}!Deny_Write, HKCU\Software\

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{6AC27878-A6FA-4155-BA85-F98F491D4F33}!Deny_Write, HKLM\Software\

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices!AllowRemoteDASD

HKLM\Software\Policies\Microsoft\Windows NT\Rpc!EnableAuthEpResolution

HKLM\Software\Policies\Microsoft\Windows NT\Rpc!ExtErrorInformation, HKLM\Software\Policies\Microsoft\Windows NT\Rpc!ExtErrorInfoExceptions

HKLM\Software\Policies\Microsoft\Windows NT\Rpc\IgnoreDelegationFailure!IgnoreDelegationFailure

HKLM\Software\Policies\Microsoft\Windows NT\Rpc\MinimumConnectionTimeout!MinimumConnectionTimeout

HKLM\Software\Policies\Microsoft\Windows NT\Rpc!RestrictRemoteClients

HKLM\Software\Policies\Microsoft\Windows NT\Rpc!StateInformation

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!MaxGPOScriptWait

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideLegacyLogonScripts

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideLogoffScripts

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!RunLogonScriptSync

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!RunLogonScriptSync

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideLogonScripts

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideShutdownScripts

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!RunStartupScriptSync

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideStartupScripts

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!Allow-LogonScript-NetbiosDisabled

HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search!AllowIndexingEncryptedStoresOrItems

HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search!AllowUsingDiacritics

HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search!DataDirectory

HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search!PreventIndexingEmailAttachments

HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search!PreventIndexingOfflineFiles

HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search!PreventIndexingOutlook

HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search!PreventIndexingPublicFolders

HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search!PreventIndexingUncachedExchangeFolders

HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search!PreventUsingAdvancedIndexingOptions

HKLM\Software\Policies\Microsoft\Windows NT\Security Center!SecurityCenterInDomain

HKLM\Software\Policies\Microsoft\Windows NT\Setup!ServicePackSourcePath

HKLM\Software\Policies\Microsoft\Windows NT\Setup!SourcePath

HKCU\Software\Policies\Microsoft\Windows NT\SharedFolders!PublishDfsRoots

HKCU\Software\Policies\Microsoft\Windows NT\SharedFolders!PublishSharedFolders

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInplaceSharing

HKCU\Software\Policies\Microsoft\Windows\System!DisableCMD

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableRegistryTools

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!RestrictRun, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisallowRun, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explor

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!RestrictWelcomeCenter

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!TurnOffSidebar

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!TurnOffSidebar

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!TurnOffUnsignedGadgets

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!TurnOffUnsignedGadgets

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!TurnOffUserInstalledGadgets

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!TurnOffUserInstalledGadgets

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!OverrideMoreGadgetsLink

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!OverrideMoreGadgetsLink

HKCU\Software\Policies\Microsoft\Windows\SideShow!DeleteDataOnLogoff

HKLM\Software\Policies\Microsoft\Windows\SideShow!DeleteDataOnLogoff

HKCU\Software\Policies\Microsoft\Windows\SideShow!Disabled

HKLM\Software\Policies\Microsoft\Windows\SideShow!Disabled

HKCU\Software\Policies\Microsoft\Windows\SideShow!AutoWakeDisabled

HKLM\Software\Policies\Microsoft\Windows\SideShow!AutoWakeDisabled

HKCU\Software\Policies\Microsoft\Windows\SideShow!SetPIN, HKCU\Software\Policies\Microsoft\Windows\SideShow!PIN, HKCU\Software\Policies\

HKLM\Software\Policies\Microsoft\Windows\SideShow!SetPIN, HKLM\Software\Policies\Microsoft\Windows\SideShow!PIN, HKLM\Software\Policies\

HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!AllowCertificatesWithNoEKU

HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!AllowIntegratedUnblock

HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!FilterDuplicateCerts

HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!ForceReadingAllCertificates

HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!AllowSignatureOnlyKeys

HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!AllowTimeInvalidCertificates

HKLM\SOFTWARE\Policies\Microsoft\Windows\CertProp!CertPropEnabled

HKLM\SOFTWARE\Policies\Microsoft\Windows\CertProp!RootCertificateCleanupOption

HKLM\SOFTWARE\Policies\Microsoft\Windows\CertProp!EnableRootCertificatePropagation

HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!IntegratedUnblockPromptString

HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!ReverseSubject

HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!X509HintsNeeded

HKLM\Software\Policies\SNMP\Parameters\ValidCommunities

HKLM\Software\Policies\SNMP\Parameters\PermittedManagers

HKLM\Software\Policies\SNMP\Parameters\TrapConfiguration\public

HKCU\SOFTWARE\Policies\Microsoft\SoundRecorder!Soundrec

HKLM\SOFTWARE\Policies\Microsoft\SoundRecorder!Soundrec

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ClearRecentProgForNewUserInStartMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuMyGames

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSearchComputerLinkInStartMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSearchFilesInStartMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSearchInternetInStartMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSearchProgramsInStartMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSearchCommInStartMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoUserFolderInStartMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!UseFoldersInStartMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ForceRunOnStartMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!QuickLaunchEnabled

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ClearRecentDocsOnExit

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ForceStartMenuLogOff

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!GreyMSIAds

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Intellimenus

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!LockTaskbar

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!MemCheckBoxInRunDlg

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoAutoTrayNotify

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMBalloonTip

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoChangeStartMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoClose

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoCommonGroups

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFavoritesMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFind

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuMFUprogramsList

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMHelp

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInstrumentation

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuMorePrograms

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNetworkConnections

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuPinnedList

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRecentDocsHistory

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRecentDocsMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoResolveSearch

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoResolveTrack

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRun

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSetFolders

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSetTaskbar

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMConfigurePrograms

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMMyDocs

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuMyMusic

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuNetworkPlaces

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMMyPictures

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuSubFolders

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSimpleStartMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!HideClock

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoTaskGrouping

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoToolbarsOnTaskbar

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoTrayContextMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoTrayItemsDisplay

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoUserNameInStartMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWindowsUpdate

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuEjectPC

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!StartMenuLogOff

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\WSRM!AccountingEnabled

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\WSRM!EmailIds

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\WSRM!RecordWriteInterval

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\WSRM!SMTPServer

HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore!DisableConfig

HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore!DisableSR

HKCU\software\policies\microsoft\TabletTip\1.7!DisableACIntegration

HKLM\software\policies\microsoft\TabletTip\1.7!DisableACIntegration

HKCU\software\policies\microsoft\TabletTip\1.7!DisableEdgeTarget

HKLM\software\policies\microsoft\TabletTip\1.7!DisableEdgeTarget

HKCU\software\policies\microsoft\TabletTip\1.7!HideIPTIPTarget

HKLM\software\policies\microsoft\TabletTip\1.7!HideIPTIPTarget

HKCU\software\policies\microsoft\TabletTip\1.7!HideIPTIPTouchTarget

HKLM\software\policies\microsoft\TabletTip\1.7!HideIPTIPTouchTarget

HKCU\software\policies\microsoft\TabletTip\1.7!PasswordSecurityState, HKCU\software\policies\microsoft\TabletTip\1.7!PasswordSecurity

HKLM\software\policies\microsoft\TabletTip\1.7!PasswordSecurityState, HKLM\software\policies\microsoft\TabletTip\1.7!PasswordSecurity

HKCU\software\policies\microsoft\TabletTip\1.7!PRCGesture

HKLM\software\policies\microsoft\TabletTip\1.7!PRCGesture

HKCU\software\policies\microsoft\TabletTip\1.7!IncludeRareChar

HKLM\software\policies\microsoft\TabletTip\1.7!IncludeRareChar

HKCU\software\policies\microsoft\TabletTip\1.7!ScratchOutState, HKCU\software\policies\microsoft\TabletTip\1.7!ScratchOut

HKLM\software\policies\microsoft\TabletTip\1.7!ScratchOutState, HKLM\software\policies\microsoft\TabletTip\1.7!ScratchOut

HKCU\SOFTWARE\Policies\Microsoft\TabletPC!DisableInkball

HKLM\SOFTWARE\Policies\Microsoft\TabletPC!DisableInkball

HKCU\SOFTWARE\Policies\Microsoft\TabletPC!DisableJournal

HKLM\SOFTWARE\Policies\Microsoft\TabletPC!DisableJournal

HKCU\SOFTWARE\Policies\Microsoft\TabletPC!DisableNoteWriterPrinting

HKLM\SOFTWARE\Policies\Microsoft\TabletPC!DisableNoteWriterPrinting

HKCU\SOFTWARE\Policies\Microsoft\TabletPC!DisableSnippingTool

HKLM\SOFTWARE\Policies\Microsoft\TabletPC!DisableSnippingTool

HKCU\SOFTWARE\Policies\Microsoft\TabletPC!DisableStickyNotes

HKLM\SOFTWARE\Policies\Microsoft\TabletPC!DisableStickyNotes

HKCU\SOFTWARE\Policies\Microsoft\TabletPC!TurnOffPenFeedback

HKLM\SOFTWARE\Policies\Microsoft\TabletPC!TurnOffPenFeedback

HKCU\SOFTWARE\Policies\Microsoft\TabletPC!PreventButtonBackEscapeMapping

HKLM\SOFTWARE\Policies\Microsoft\TabletPC!PreventButtonBackEscapeMapping

HKCU\SOFTWARE\Policies\Microsoft\TabletPC!PreventButtonApplicationLaunch

HKLM\SOFTWARE\Policies\Microsoft\TabletPC!PreventButtonApplicationLaunch

HKCU\SOFTWARE\Policies\Microsoft\TabletPC!PreventButtonPressAndHold

HKLM\SOFTWARE\Policies\Microsoft\TabletPC!PreventButtonPressAndHold

HKCU\SOFTWARE\Policies\Microsoft\TabletPC!TurnOffButtons

HKLM\SOFTWARE\Policies\Microsoft\TabletPC!TurnOffButtons

HKCU\SOFTWARE\Policies\Microsoft\TabletPC!PreventFlicksLearningMode

HKLM\SOFTWARE\Policies\Microsoft\TabletPC!PreventFlicksLearningMode

HKCU\SOFTWARE\Policies\Microsoft\TabletPC!PreventFlicks

HKLM\SOFTWARE\Policies\Microsoft\TabletPC!PreventFlicks

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!HideSCABattery

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!HideSCANetwork

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!HideSCAVolume

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TaskbarLockAll

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TaskbarNoAddRemoveToolbar

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TaskbarNoDragToolbar

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TaskbarNoNotification

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TaskbarNoRedock

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TaskbarNoResize

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TaskbarNoThumbnail

HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Allow Browse

HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Allow Browse

HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Disable Advanced

HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Disable Advanced

HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!DragAndDrop

HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!DragAndDrop

HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Execution

HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Execution

HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Property Pages

HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Property Pages

HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Creation

HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Creation

HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Deletion

HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Deletion

HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!DisablePasswordSaving

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!DisablePasswordSaving

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MinEncryptionLevel

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fPromptForPassword

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SecurityLayer

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!UserAuthentication

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!CertTemplateName

HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!AllowExplicitLogonMethod, HKCU\SOFTWARE\Policies\Microsoft\Windows NT\

HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!UseProxy, HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services

HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!AllowExplicitProxyName, HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Te

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableAutoReconnect

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!ColorDepth

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDenyTSConnections

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fNoRemoteDesktopWallpaper

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableForcibleLogoff

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!KeepAliveEnable, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Se

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!LicenseServers

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableTerminalServerTooltip

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!LicensingMode

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxInstanceCount

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDisconnect

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNTSecurity

HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!Shadow

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!Shadow

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fSingleSessionPerUser

HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fInheritInitialProgram, HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Termin

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!InitialProgram, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Serv

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fWritableTSCCPermTab

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fTurnOffSingleAppMode

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!WFHomeDirUNC, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!WFProfilePath, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal S

HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services!fSecureLicensing

HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services!fPreventLicenseUpgrade

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCam

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableClip

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCcm

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fForceClientLptDef

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCdm

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableLPT

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisablePNPRedir

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCpm

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fPolicyFallbackPrintDriver, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Ter

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fEnableSmartCard

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fEnableTimeZoneRedirection

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fEncryptRPCTraffic

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryActive

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryClusterName

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryExposeServerIP

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryLocation

HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fResetBroken

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fResetBroken

HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxDisconnectionTime

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxDisconnectionTime

HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxIdleTime

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxIdleTime

HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxConnectionTime

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxConnectionTime

HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fReconnectSame

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fReconnectSame

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!DeleteTempDirsOnExit

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!PerSessionTempDir

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableThumbnails

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableThumbnailsOnNetworkFolders

HKCU\SOFTWARE\Policies\Microsoft\TabletPC!TurnOffTouchInput

HKLM\SOFTWARE\Policies\Microsoft\TabletPC!TurnOffTouchInput

HKLM\Software\Policies\Microsoft\TPM!ActiveDirectoryBackup, HKLM\Software\Policies\Microsoft\TPM!RequireActiveDirectoryBackup

HKLM\SOFTWARE\Policies\Microsoft\Tpm\BlockedCommands!Enabled, HKLM\SOFTWARE\Policies\Microsoft\Tpm\BlockedCommands\List

HKLM\Software\Policies\Microsoft\TPM\BlockedCommands!IgnoreDefaultList

HKLM\Software\Policies\Microsoft\TPM\BlockedCommands!IgnoreLocalList

HKCU\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupLauncher

HKLM\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupLauncher

HKCU\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupToDisk

HKLM\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupToDisk

HKCU\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupToNetwork

HKLM\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupToNetwork

HKCU\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupToOptical

HKLM\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupToOptical

HKCU\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupUI

HKLM\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupUI

HKCU\Software\Policies\Microsoft\Windows\Backup\Client!DisableRestoreUI

HKLM\Software\Policies\Microsoft\Windows\Backup\Client!DisableRestoreUI

HKCU\Software\Policies\Microsoft\Windows\Backup\Client!DisableSystemBackupUI

HKLM\Software\Policies\Microsoft\Windows\Backup\Client!DisableSystemBackupUI

HKLM\Software\Policies\Microsoft\Windows\System!AddAdminGroupToRUP

HKLM\Software\Policies\Microsoft\Windows\System!CompatibleRUPSecurity

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!ConnectHomeDirToRoot

HKLM\Software\Policies\Microsoft\Windows\System!DeleteRoamingCache

HKLM\Software\Policies\Microsoft\Windows\System!SlowLinkDetectEnabled

HKLM\Software\Policies\Microsoft\Windows\System!SlowLinkUIEnabled

HKCU\Software\Policies\Microsoft\Windows\System!ExcludeProfileDirs

HKLM\Software\Policies\Microsoft\Windows\System!LeaveAppMgmtData

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!EnableProfileQuota, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies

HKLM\Software\Policies\Microsoft\Windows\System!LocalProfile

HKLM\Software\Policies\Microsoft\Windows\System!ProfileDlgTimeOut

HKLM\Software\Policies\Microsoft\Windows\System!ProfileErrorAction

HKLM\Software\Policies\Microsoft\Windows\System!ProfileUnloadTimeout

HKLM\Software\Policies\Microsoft\Windows\System!ReadOnlyProfile

HKLM\Software\Policies\Microsoft\Windows\System!SlowLinkProfileDefault

HKLM\Software\Policies\Microsoft\Windows\System!UserProfileMinTransferRate, HKLM\Software\Policies\Microsoft\Windows\System!SlowLinkTimeOu

HKLM\Software\Policies\Microsoft\Windows\System!CleanupProfiles

HKCU\Software\Policies\Microsoft\Windows\System!CscSuspendDirs

HKLM\Software\Policies\Microsoft\Windows\System!DisableForceUnload

HKLM\Software\Policies\Microsoft\Windows\System!WaitForNetwork

HKLM\Software\Policies\Microsoft\Windows\System!MachineProfilePath

HKLM\Software\Policies\Microsoft\FVE!ActiveDirectoryBackup, HKLM\Software\Policies\Microsoft\FVE!RequireActiveDirectoryBackup, HKLM\Software\P

HKLM\SOFTWARE\Policies\Microsoft\FVE!EnableNonTPM, HKLM\SOFTWARE\Policies\Microsoft\FVE!UsePartialEncryptionKey, HKLM\SOFTWARE\Po

HKLM\SOFTWARE\Policies\Microsoft\FVE!UseRecoveryPassword, HKLM\SOFTWARE\Policies\Microsoft\FVE!UseRecoveryDrive

HKLM\SOFTWARE\Policies\Microsoft\FVE!DefaultRecoveryFolderPath

HKLM\SOFTWARE\Policies\Microsoft\FVE!EncryptionMethod

HKLM\SOFTWARE\Policies\Microsoft\FVE\PlatformValidation!Enabled, HKLM\SOFTWARE\Policies\Microsoft\FVE\PlatformValidation!0, HKLM\SOFTWAR

HKLM\Software\Policies\Microsoft\FVE!MorBehavior

HKLM\Software\Policies\Microsoft\W32Time\Config!FrequencyCorrectRate, HKLM\Software\Policies\Microsoft\W32Time\Config!HoldPeriod, HKLM\Soft

HKLM\Software\Policies\Microsoft\W32time\Parameters!NtpServer, HKLM\Software\Policies\Microsoft\W32time\Parameters!Type, HKLM\Software\Polici

HKLM\Software\Policies\Microsoft\W32time\TimeProviders tpClient!Enabled

HKLM\Software\Policies\Microsoft\W32Time\TimeProviders tpServer!Enabled

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI!DataRetentionBySizeEnabled, HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI!DirSizeLimit

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI!ScenarioExecutionEnabled, HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI!EnabledScenari

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Windows!TurnOffWinCal

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Windows!TurnOffWinCal

HKLM\Software\Policies\Microsoft\Windows\Backup\Server!OnlySystemBackup

HKLM\Software\Policies\Microsoft\Windows\Backup\Server!NoBackupToDisk

HKLM\Software\Policies\Microsoft\Windows\Backup\Server!NoBackupToNetwork

HKLM\Software\Policies\Microsoft\Windows\Backup\Server!NoBackupToOptical

HKLM\Software\Policies\Microsoft\Windows\Backup\Server!NoRunNowBackup

HKCU\Software\Policies\Microsoft\Windows\Windows Collaboration!TurnOffWindowsCollaboration

HKLM\Software\Policies\Microsoft\Windows\Windows Collaboration!TurnOffWindowsCollaboration

HKCU\Software\Policies\Microsoft\Windows\Windows Collaboration!TurnOnWindowsCollaborationAuditing

HKLM\Software\Policies\Microsoft\Windows\Windows Collaboration!TurnOnWindowsCollaborationAuditing

HKCU\Software\Policies\Microsoft\Windows\WindowsColorSystem!ProhibitInstallUninstall

HKLM\Software\Policies\Microsoft\Windows\WindowsColorSystem!ProhibitInstallUninstall

HKCU\Software\Policies\Microsoft\Windows\WCN\UI!DisableWcnUi

HKLM\Software\Policies\Microsoft\Windows\WCN\UI!DisableWcnUi

HKLM\Software\Policies\Microsoft\Windows\WCN\Registrars!EnableRegistrars, HKLM\Software\Policies\Microsoft\Windows\WCN\Registrars!Disable

HKLM\Software\Policies\Microsoft\Windows Defender\Scan!CheckForSignaturesBeforeRunningScan

HKLM\Software\Policies\Microsoft\Windows Defender!DisableAntiSpyware

HKLM\Software\Policies\Microsoft\Windows Defender\Reporting!DisableLoggingForKnownGood

HKLM\Software\Policies\Microsoft\Windows Defender\Reporting!DisableLoggingForUnknown

HKLM\Software\Policies\Microsoft\Windows Defender\Real-Time Protection!EnableUnknownPrompts

HKLM\Software\Policies\Microsoft\Windows Defender\Signature Updates!ForceFullUpdate

HKLM\Software\Policies\Microsoft\Windows Defender\SpyNet!SpyNetReporting, HKLM\Software\Policies\Microsoft\Windows Defender\SpyNet!SpyNet

HKLM\Software\Policies\Microsoft\Windows Defender\Signature Updates!CheckAlternateDownloadLocation

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32!NoBackButton

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32!NoFileMru

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32!NoPlacesBar

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!Place0, HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ClassicShell

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ConfirmFileDelete

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!EnforceShellExtensionSecurity

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!LinkResolveIgnoreLinkInfo

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!MaxRecentDocs

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoThumbnailCache

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoCDBurning

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoChangeAnimation

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoChangeKeyboardNavigationIndicators

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDFSTab

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDrives

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies etwork!NoEntireNetwork

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFileMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFolderOptions

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoHardwareTab

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoManageMyComputerVerb

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSharedDocuments

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNetConnectDisconnect

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRecycleFiles

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRunasInstallPrompt

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSecurityTab

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoShellSearchButton

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoViewContextMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoViewOnDrive

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWinKeys

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoComputersNearMe

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!PromptRunasInstallNetPath

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!RecycleBinSize

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!PreXPSP2ShellProtocolBehavior

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!PreXPSP2ShellProtocolBehavior

HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SFCDllCacheDir

HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SfcQuota

HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SfcScan

HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SfcShowProgress

HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\ICFv4!BypassFirewall

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFir

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications!AllowUserPrefMerge

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile!EnableFirewall

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile!DoNotAllowExceptions

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\FileAndPrint!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFi

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowOutboundDestinationUnreachable, HKLM\SOFTWARE\Policies

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging!LogDroppedPackets, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirew

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile!DisableNotifications

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewa

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts!AllowUserPrefMerge

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\RemoteAdminSettings!Enabled, HKLM\SOFTWARE\Policies\Microsoft\Windows

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\RemoteDesktop!Enabled, HKLM\SOFTWARE\Policies\Microsoft\Windo

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile!DisableUnicastResponsesToMulticastBroadcast

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\UPnPFramework!Enabled, HKLM\SOFTWARE\Policies\Microsoft\Wind

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedApplications!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFi

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedApplications!AllowUserPrefMerge

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile!EnableFirewall

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile!DoNotAllowExceptions

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\FileAndPrint!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsF

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowOutboundDestinationUnreachable, HKLM\SOFTWARE\Policie

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging!LogDroppedPackets, HKLM\SOFTWARE\Policies\Microsoft\WindowsFire

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile!DisableNotifications

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\GloballyOpenPorts!Enabled, HKLM\SOFTWARE\Policies\Microsoft\WindowsFirew

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\GloballyOpenPorts!AllowUserPrefMerge

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\RemoteAdminSettings!Enabled, HKLM\SOFTWARE\Policies\Microsoft\Window

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\RemoteDesktop!Enabled, HKLM\SOFTWARE\Policies\Microsoft\Wind

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile!DisableUnicastResponsesToMulticastBroadcast

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\UPnPFramework!Enabled, HKLM\SOFTWARE\Policies\Microsoft\Win

HKCU\SOFTWARE\Policies\Microsoft\Windows Mail!ManualLaunchAllowed

HKLM\SOFTWARE\Policies\Microsoft\Windows Mail!ManualLaunchAllowed

HKCU\SOFTWARE\Policies\Microsoft\Windows Mail!DisableCommunities

HKLM\SOFTWARE\Policies\Microsoft\Windows Mail!DisableCommunities

HKLM\Software\Policies\Microsoft\WMDRM!DisableOnline

HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!DisableAutoUpdate

HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!GroupPrivacyAcceptance

HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!DontUseFrameInterpolation

HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventCDDVDMetadataRetrieval

HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!PreventLibrarySharing

HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventMusicFileMetadataRetrieval

HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!QuickLaunchShortcut

HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventRadioPresetsRetrieval

HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!DesktopShortcut

HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!EnableScreenSaver

HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventCodecDownload

HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!DoNotShowAnchor

HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!HidePrivacyTab

HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!HideSecurityTab

HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!SetAndLockSkin, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!DefaultSkin

HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!ProxyPolicy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Proto

HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!ProxyPolicy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Proto

HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!ProxyPolicy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Proto

HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!HideNetworkTab

HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!NetworkBufferingPolicy, HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!BufferingTy

HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols!WindowsMediaStreamingProtocols, HKCU\Software\Policies\Microsoft\WindowsMedi

HKLM\Software\Policies\Microsoft\Messenger\Client!PreventAutoRun

HKCU\Software\Policies\Microsoft\Messenger\Client!PreventAutoRun

HKLM\Software\Policies\Microsoft\Messenger\Client!PreventRun

HKCU\Software\Policies\Microsoft\Messenger\Client!PreventRun

HKLM\Software\Policies\Microsoft\Windows\WinRM\Client!AllowBasic

HKLM\Software\Policies\Microsoft\Windows\WinRM\Client!AllowUnencryptedTraffic

HKLM\Software\Policies\Microsoft\Windows\WinRM\Client!AllowDigest

HKLM\Software\Policies\Microsoft\Windows\WinRM\Client!AllowNegotiate

HKLM\Software\Policies\Microsoft\Windows\WinRM\Client!AllowKerberos

HKLM\Software\Policies\Microsoft\Windows\WinRM\Client!TrustedHosts, HKLM\Software\Policies\Microsoft\Windows\WinRM\Client!TrustedHostsList

HKLM\Software\Policies\Microsoft\Windows\WinRM\Service!AllowAutoConfig, HKLM\Software\Policies\Microsoft\Windows\WinRM\Service!IPv4Filter,

HKLM\Software\Policies\Microsoft\Windows\WinRM\Service!AllowBasic

HKLM\Software\Policies\Microsoft\Windows\WinRM\Service!AllowUnencryptedTraffic

HKLM\Software\Policies\Microsoft\Windows\WinRM\Service!AllowNegotiate

HKLM\Software\Policies\Microsoft\Windows\WinRM\Service!AllowKerberos

HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS!AllowRemoteShellAccess

HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS!IdleTimeout, HKLM\

HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS!MaxConcurrentUsers

HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS!MaxMemoryPerShellMB

HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS!MaxProcessesPerShell

HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS!ShellTimeOut

HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS!MaxShellsPerUser

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoAutoUpdate

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUShutdownOption

HKCU\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUShutdownOption

HKCU\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUAsDefaultShutdownOption

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUAsDefaultShutdownOption

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate!DisableWindowsUpdateAccess

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAutoUpdate, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!AUOpt

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!UseWUServer

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!DetectionFrequencyEnabled, HKLM\Software\Policies\Microsoft\Windows\WindowsU

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!ElevateNonAdmins

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!AutoInstallMinorUpdates

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!IncludeRecommendedUpdates

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!AUPowerManagement

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAutoRebootWithLoggedOnUsers

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!RebootRelaunchTimeoutEnabled, HKLM\Software\Policies\Microsoft\Windows\Win

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!RebootWarningTimeoutEnabled, HKLM\Software\Policies\Microsoft\Windows\Wind

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!RescheduleWaitTimeEnabled, HKLM\Software\Policies\Microsoft\Windows\Window

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!TargetGroupEnabled, HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!Targ

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableShutdownNamedPipe

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!ShutdownSessionTimeout

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisplayLastLogonInfo

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DontDisplayLogonHoursWarnings

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!LogonHoursAction

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!SoftwareSASGeneration

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!ReportControllerMissing

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!ReportControllerMissing

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!Shell

HKLM\Software\Policies\Microsoft\Windows\System!AllowBlockingAppsAtShutdown

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\SearchExtensions!InternetExtensionName, HKCU\Software\Microsoft\Windows\Curr

Reboot Required Logoff Required Active Directory Schema or Domain RequirementsNo No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No Yes None

No Yes None

No Yes None

No Yes None

No Yes None

No Yes None

No Yes None

No Yes None

No Yes None

No Yes None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No Yes None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No Yes None

No Yes None

No No Yes

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No Yes

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

Yes No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

Yes No None

No No None

No No None

No No None

No Yes None

No No None

No Yes None

No Yes None

No Yes None

No No None

No No None

Policy Path

Computer Configuration\Windows Settings\Account Policies\Password Policy






Computer Configuration\Windows Settings\Account Policies\Account Lockout Policy



Computer Configuration\Windows Settings\Local Policies\Kerberos Policy





Computer Configuration\Windows Settings\Local Policies\Audit Policy









Computer Configuration\Windows Settings\Local Policies\User Rights Assignment













































Computer Configuration\Windows Settings\Local Policies\Security Options


















































































Computer Configuration\Windows Settings\Security Settings\Event Log












Computer Configuration\Windows Settings\Security Settings\Restricted Groups

Computer Configuration\Windows Settings\Security Settings\System Services

Computer Configuration\Windows Settings\Security Settings\Registry

Computer Configuration\Windows Settings\Security Settings\File System

Policy Setting Name Supported on

Enforce password history Windows XP SP2, Windows Server 2003

Maximum password age Windows XP SP2, Windows Server 2003

Minimum password age Windows XP SP2, Windows Server 2003

Minimum password length Windows XP SP2, Windows Server 2003

Password must meet complexity requirement Windows XP SP2, Windows Server 2003

Store passwords using reversible encryption for all users in the domain Windows XP SP2, Windows Server 2003

Account lockout duration Windows XP SP2, Windows Server 2003

Account lockout threshold Windows XP SP2, Windows Server 2003

Reset lockout counter after Windows XP SP2, Windows Server 2003

Enforce user logon restrictions Windows XP SP2, Windows Server 2003

Maximum lifetime for service ticket Windows XP SP2, Windows Server 2003

Maximum lifetime for user ticket Windows XP SP2, Windows Server 2003

Maximum lifetime for user ticket renewal Windows XP SP2, Windows Server 2003

Maximum tolerance for computer clock synchronization Windows XP SP2, Windows Server 2003

Audit account logon events Windows XP SP2, Windows Server 2003

Audit account management Windows XP SP2, Windows Server 2003

Audit directory service access Windows XP SP2, Windows Server 2003

Audit logon events Windows XP SP2, Windows Server 2003

Audit object access Windows XP SP2, Windows Server 2003

Audit policy change Windows XP SP2, Windows Server 2003

Audit privilege use Windows XP SP2, Windows Server 2003

Audit process tracking Windows XP SP2, Windows Server 2003

Audit system events Windows XP SP2, Windows Server 2003

Access this computer from the network Windows XP SP2, Windows Server 2003

Access Credential Manager as a trusted caller Windows Vista, Longhorn

Act as part of the operating system Windows XP SP2, Windows Server 2003

Add workstations to a domain Windows XP SP2, Windows Server 2003

Adjust memory quotas for a process Windows XP SP2, Windows Server 2003

Allow log on locally Windows Server 2003

Allow log on through Terminal Services Windows XP SP2, Windows Server 2003

Backup files and directories Windows XP SP2, Windows Server 2003

Bypass traverse checking Windows XP SP2, Windows Server 2003

Change the system time Windows XP SP2, Windows Server 2003

Change the time zone Windows Vista, Longhorn

Create a pagefile Windows XP SP2, Windows Server 2003

Create a token object Windows XP SP2, Windows Server 2003

Create global objects Windows XP SP2, Windows Server 2003

Create permanent shared objects Windows XP SP2, Windows Server 2003

Create Symbolic Links Windows Vista, Longhorn

Debug programs Windows XP SP2, Windows Server 2003

Deny access to this computer from the network Windows XP SP2, Windows Server 2003

Deny log on as a batch job Windows XP SP2, Windows Server 2003

Deny log on as a service Windows XP SP2, Windows Server 2003

Deny log on locally Windows XP SP2, Windows Server 2003

Deny log on through Terminal Services Windows XP SP2, Windows Server 2003

Enable computer and user accounts to be trusted for delegation Windows XP SP2, Windows Server 2003

Force shutdown from a remote system Windows XP SP2, Windows Server 2003

Generate security audits Windows XP SP2, Windows Server 2003

Impersonate a client after authentication Windows XP SP2, Windows Server 2003

Increase a process working set Windows Vista, Longhorn

Increase scheduling authority Windows XP SP2, Windows Server 2003

Load and unload device drivers Windows XP SP2, Windows Server 2003

Lock pages in memory Windows XP SP2, Windows Server 2003

Log on as a batch job Windows XP SP2, Windows Server 2003

Log on as a service Windows XP SP2, Windows Server 2003

Log on locally Windows XP SP2

Manage auditing and security log Windows XP SP2, Windows Server 2003

Modify an object label Windows Vista, Longhorn

Modify firmware environment values Windows XP SP2, Windows Server 2003

Perform volume maintenance tasks Windows XP SP2, Windows Server 2003

Profile single process Windows XP SP2, Windows Server 2003

Profile system performance Windows XP SP2, Windows Server 2003

Remove computer from docking station Windows XP SP2, Windows Server 2003

Replace a process level token Windows XP SP2, Windows Server 2003

Restore files and directories Windows XP SP2, Windows Server 2003

Shut down the system Windows XP SP2, Windows Server 2003

Synchronize directory service data Windows XP SP2, Windows Server 2003

Take ownership of files or other objects Windows XP SP2, Windows Server 2003

Accounts: Administrator account status Windows XP SP2, Windows Server 2003

Accounts: Guest account status Windows XP SP2, Windows Server 2003

Accounts: Limit local account use of blank passwords to console logon only Windows XP SP2, Windows Server 2003

Accounts: Rename administrator account Windows XP SP2, Windows Server 2003

Accounts: Rename guest account Windows XP SP2, Windows Server 2003

Audit: Audit the accesss of global system objects Windows XP SP2, Windows Server 2003

Audit: Audit the use of Backup and Restore privilege Windows XP SP2, Windows Server 2003

Audit: Audit the use of Backup and Restore privilege Windows Vista, Longhorn

Audit: Force audit policy subcategory settings (Windows Vista or later) to override auWindows Vista, Longhorn

Audit: Shut down system immediately if unable to log security audits Windows XP SP2, Windows Server 2003

Audit: Shut down system immediately if unable to log security audits Windows Vista, Longhorn

DCOM: Machine Access Restrictions in Security Descriptor Definition Language (S Windows XP SP2, Windows Server 2003

DCOM: Machine Launch Restrictions in Security Descriptor Definition Language (S Windows XP SP2, Windows Server 2003

Devices: Allow undock without having to log on Windows XP SP2, Windows Server 2003

Devices: Allowed to format and eject removable media Windows XP SP2, Windows Server 2003

Devices: Prevent users from installing printer drivers Windows XP SP2, Windows Server 2003

Devices: Restrict CD-ROM access to locally logged-on user only Windows XP SP2, Windows Server 2003

Devices: Restrict floppy access to locally logged-on user only Windows XP SP2, Windows Server 2003

Devices: Unsigned driver installation behavior Windows XP SP2, Windows Server 2003

Domain controller: Allow server operators to schedule tasks Windows XP SP2, Windows Server 2003

Domain controller: LDAP server signing requirements Windows Server 2003?

Domain controller: Refuse machine account password changes Windows XP SP2, Windows Server 2003

Domain member: Digitally encrypt or sign secure channel data (always) Windows XP SP2, Windows Server 2003

Domain member: Digitally encrypt secure channel data (when possible) Windows XP SP2, Windows Server 2003

Domain member: Digitally sign secure channel data (when possible) Windows XP SP2, Windows Server 2003

Domain member: Disable machine account password changes Windows XP SP2, Windows Server 2003

Domain member: Maximum machine account password age Windows XP SP2, Windows Server 2003

Domain member: Require strong (Windows 2000 or later) session key Windows XP SP2, Windows Server 2003

Interactive logon: Do not display last user name Windows XP SP2, Windows Server 2003

Interactive logon: Do not require CTRL+ALT+DELETE Windows XP SP2, Windows Server 2003

Interactive logon: Message text for users attempting to logon Windows XP SP2, Windows Server 2003

Interactive logon: Message title for users attempting to logon Windows XP SP2, Windows Server 2003

Interactive logon: Number of previous logons to cache (in case domain controller is nWindows XP SP2, Windows Server 2003

Interactive logon: Prompt user to change password before expiration Windows XP SP2, Windows Server 2003

Interactive logon: Require Domain Controller authentication to unlock workstation Windows XP SP2, Windows Server 2003

Interactive logon: Require smart card Windows XP SP2, Windows Server 2003

Interactive logon: Smart card removal behavior Windows XP SP2, Windows Server 2003

Microsoft network client: Digitally sign communications (always) Windows XP SP2, Windows Server 2003

Microsoft network client: Digitally sign communications (if server agrees) Windows XP SP2, Windows Server 2003

Microsoft network client: Send unencrypted password to third-party SMB servers Windows XP SP2, Windows Server 2003

Microsoft network server: Amount of idle time required before suspending session Windows XP SP2, Windows Server 2003

Microsoft network server: Digitally sign communications (always) Windows XP SP2, Windows Server 2003

Microsoft network server: Digitally sign communications (if client agrees) Windows XP SP2, Windows Server 2003

Microsoft network server: Disconnect clients when logon hours expire Windows XP SP2, Windows Server 2003

Network access: Allow anonymous SID/Name translation Windows XP SP2, Windows Server 2003

Network access: Do not allow anonymous enumeration of SAM accounts Windows XP SP2, Windows Server 2003

Network access: Do not allow anonymous enumeration of SAM accounts and share Windows XP SP2, Windows Server 2003

Network access: Do not allow storage of credentials or .NET Passports for network aWindows XP SP2, Windows Server 2003

Network access: Let Everyone permissions apply to anonymous users Windows XP SP2, Windows Server 2003

Network access: Named Pipes that can be accessed anonymously Windows XP SP2, Windows Server 2003

Network access: Remotely accessible registry paths Windows XP SP2

Network access: Remotely accessible registry paths Windows Server 2003

Network access: Remotely accessible registry paths and subpaths Windows Server 2003

Network access: Restrict anonymous access to Named Pipes and Shares Windows Server 2003

Network access: Shares that can be accessed anonymously Windows XP SP2, Windows Server 2003

Network access: Sharing and security model for local accounts Windows XP SP2, Windows Server 2003

Network security: Do not store LAN Manager hash value on next password change Windows XP SP2, Windows Server 2003

Network security: Force logoff when logon hours expire Windows XP SP2, Windows Server 2003

Network security: LAN Manager authentication level Windows XP SP2, Windows Server 2003

Network security: LDAP client signing requirements Windows XP SP2, Windows Server 2003

Network security: Minimum session security for NTLM SSP based (including secure Windows XP SP2, Windows Server 2003

Network security: Minimum session security for NTLM SSP based (including secure Windows XP SP2, Windows Server 2003

Recovery console: Allow automatic administrative logon Windows XP SP2, Windows Server 2003

Recovery console: Allow floppy copy and access to all drives and all folders Windows XP SP2, Windows Server 2003

Shutdown: Allow system to be shut down without having to log on Windows XP SP2, Windows Server 2003

Shutdown: Clear virtual memory pagefile Windows XP SP2, Windows Server 2003

System cryptography: Use FIPS compliant algorithms for encryption, hashing, and s Windows XP SP2, Windows Server 2003

System Cryptography: Force strong key protection for user keys stored on the comp Windows Server 2003

System objects: Default owner for objects created by members of the Administrators Windows XP SP2, Windows Server 2003

System objects: Require case insensitivity for non-Windows subsystems Windows XP SP2, Windows Server 2003

System objects: Strengthen default permissions of internal system objects (e.g., SymWindows XP SP2, Windows Server 2003

System settings: Optional subsystems Windows Server 2003

System settings: Use Certificate Rules on Windows Executables for Software RestricWindows Server 2003

Admin Approval Mode for the Built-in Administrator account Windows Vista, Longhorn

Behavior of the elevation prompt for administrators in Admin Approval Mode Windows Vista, Longhorn

Behavior of the elevation prompt for standard users Windows Vista, Longhorn

Detect application installations and prompt for elevation Windows Vista, Longhorn

Only elevate executables that are signed and validated Windows Vista, Longhorn

Only elevate UIAccess applications that are installed in secure locations Windows Vista, Longhorn

Run all administrators in Admin Approval Mode Windows Vista, Longhorn

Switch to the secure desktop when prompting for elevation Windows Vista, Longhorn

Virtualize file and registry write failures to per-user locations Windows Vista, Longhorn

Maximum application log size Windows XP SP2, Windows Server 2003

Maximum security log size Windows XP SP2, Windows Server 2003

Maximum system log size Windows XP SP2, Windows Server 2003

Prevent local guests group from accessing application log Windows XP SP2, Windows Server 2003

Prevent local guests group from accessing security log Windows XP SP2, Windows Server 2003

Prevent local guests group from accessing system log Windows XP SP2, Windows Server 2003

Retain application log Windows XP SP2, Windows Server 2003

Retain security log Windows XP SP2, Windows Server 2003

Retain system log Windows XP SP2, Windows Server 2003

Retention method for application log Windows XP SP2, Windows Server 2003

Retention method for security log Windows XP SP2, Windows Server 2003

Retention method for system log Windows XP SP2, Windows Server 2003

Restricted Groups Windows XP SP2, Windows Server 2003

System Services Windows XP SP2, Windows Server 2003

Registry Windows XP SP2, Windows Server 2003

File System Windows XP SP2, Windows Server 2003

Explain Text Registry Settings Reboot Required

Password Policy security settings are not regi No






Account Lockout Policy security settings are n No



Kerberos Policy security settings are not regi No





Audit Policy security settings are not registry No









User Rights security settings are not registry NoThis setting is used by Credential Manager during Backup/ReUser Rights security settings are not registry No

User Rights security settings are not registry No







































Enforce password history

Maximum password age

Minimum password age

Minimum password length

Password must meet complexity requirements

Store passwords using reversible encryption

Account lockout duration

Account lockout threshold

Reset account lockout counter after

Enforce user logon restrictions

Maximum lifetime for service ticket

Maximum lifetime for user ticket

Maximum lifetime for user ticket renewal

Maximum tolerance for computer clock synchronization

Audit account logon events

Audit account management

Audit directory service access

Audit logon events

Audit object access

Audit policy change

Audit privilege use

Audit process tracking

Audit system events

Access this computer from the network

Act as part of the operating system

Add workstations to domain

Adjust memory quotas for a process

Allow log on locally

Allow log on through Terminal Services

Back up files and directories

Bypass traverse checking

Change the system time

Change the Time Zone

Create a pagefile

Create a token object

Create global objects

Create permanent shared objects

Create Symbolic Links

Debug programs

Deny access to this computer from the network

Deny log on as a batch job

Deny log on as a service

Deny log on locally

Deny log on through Terminal Services

Enable computer and user accounts to be trusted for delegation

Force shutdown from a remote system

Generate security audits

Impersonate a client after authentication

Increase a process working set

Increase scheduling priority

Load and unload device drivers

Lock pages in memory

Log on as a batch job

Log on as a service

Log on locally

Manage auditing and security log

Modify an object label

Modify firmware environment values

Perform volume maintenance tasks

Profile single process

Profile system performance

Remove computer from docking station

Replace a process level token





Not a registry key No


MACHINE\System\CurrentControlSet\Contro No



MACHINE\System\CurrentControlSet\Control Yes

MACHINE\System\CurrentControlSet\Control\L Yes

MACHINE\System\CurrentControlSet\Control\L No



MACHINE\System\CurrentControlSet\Control No

MACHINE\SOFTWARE\policies\Microsoft\wi No

MACHINE\SOFTWARE\policies\Microsoft\wi No

MACHINE\Software\Microsoft\Windows\Curre No

MACHINE\Software\Microsoft\Windows NT\C No

MACHINE\System\CurrentControlSet\Control\P No


MACHINE\Software\Microsoft\Windows NT\Cu No

MACHINE\Software\Microsoft\Driver Signing\ No


MACHINE\System\CurrentControlSet\Servic No


MACHINE\System\CurrentControlSet\Service No




MACHINE\System\CurrentControlSet\Servi No




MACHINE\Software\Microsoft\Windows\Curren No

MACHINE\Software\Microsoft\Windows\Curren No






MACHINE\System\CurrentControlSet\Service Yes


MACHINE\System\CurrentControlSet\Servic Yes

















MACHINE\System\CurrentControlSet\Contr No





Restore files and directories

Shut down the system

Synchronize directory service data

Take ownership of files or other objects

Accounts: Administrator account status

Accounts: Guest account status

Accounts: Limit local account use of blank passwords to console logon only

Accounts: Rename administrator account

Accounts: Rename guest account

Audit: Audit the access of global system objects

Audit: Audit the use of Backup and Restore privilege

Audit: Audit the use of Backup and Restore privilege

Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings.

Audit: Shut down system immediately if unable to log security audits

Audit: Shut down system immediately if unable to log security audits

DCOM: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) syntax

DCOM: Machine Launch Restrictions in Security Descriptor Definition Language (SDDL) syntax

Devices: Allow undock without having to log on

Devices: Allowed to format and eject removable media

Devices: Prevent users from installing printer drivers

Devices: Restrict CD-ROM access to locally logged-on user only

Devices: Restrict floppy access to locally logged-on user only

Devices: Unsigned driver installation behavior

Domain controller: Allow server operators to schedule tasks

Domain controller: LDAP server signing requirements

Domain controller: Refuse machine account password changes

Domain member: Digitally encrypt or sign secure channel data (always)

Domain member: Digitally encrypt secure channel data (when possible)

Domain member: Digitally sign secure channel data (when possible)

Domain member: Disable machine account password changes

Domain member: Maximum machine account password age

Domain member: Require strong (Windows 2000 or later) session key

Interactive logon: Do not display last user name

Interactive logon: Do not require CTRL+ALT+DEL

Interactive logon: Message text for users attempting to log on

Interactive logon: Message title for users attempting to log on

Interactive logon: Number of previous logons to cache (in case domain controller is not available)

Interactive logon: Prompt user to change password before expiration

Interactive logon: Require Domain Controller authentication to unlock

Interactive logon: Require smart card

Interactive logon: Smart card removal behavior

Microsoft network client: Digitally sign communications (always)

Microsoft network client: Digitally sign communications (if server agrees)

Microsoft network client: Send unencrypted password to connect to third-party SMB servers

Microsoft network server: Amount of idle time required before suspending a session

Microsoft network server: Digitally sign communications (always)

Microsoft network server: Digitally sign communications (if client agrees)

Microsoft network server: Disconnect clients when logon hours expire

Network access: Allow anonymous SID/name translation

Network access: Do not allow anonymous enumeration of SAM accounts

Network access: Do not allow anonymous enumeration of SAM accounts and shares

Network access: Do not allow storage of credentials or .NET Passports for network authentication

Network access: Let Everyone permissions apply to anonymous users

Network access: Named pipes that can be accessed anonymously

Network access: Remotely accessible registry paths

Network access: Remotely accessible registry paths

Network access: Remotely accessible registry paths and subpaths

Network access: Restrict anonymous access to Named Pipes and Shares

Network access: Shares that can be accessed anonymously

Network access: Sharing and security model for local accounts

Network security: Do not store LAN Manager hash value on next password change

Network security: Force logoff when logon hours expire

Network security: LAN Manager authentication level

Network security: LDAP client signing requirements

Network security: Minimum session security for NTLM SSP based (including secure RPC) clients


MACHINE\Software\Microsoft\Windows NT\Cu No



MACHINE\System\CurrentControlSet\Contro Yes


MACHINE\Software\Policies\Microsoft\Crypt Yes





MACHINE\Software\Policies\Microsoft\Windo No

GP Not reg setting No






GP Not reg setting Yes



Event Log security settings are not registry k No












Restricted Groups policy settings are not regi No

System Services policy settings are not regis No

not a registry key No

File System policy settings are not registry k No

Network security: Minimum session security for NTLM SSP based (including secure RPC) servers

Recovery console: Allow automatic administrative logon

Recovery console: Allow floppy copy and access to all drives and all folders

Shutdown: Allow system to be shut down without having to log on

Shutdown: Clear virtual memory pagefile

System cryptography: Use FIPS compliant algorithms for encryption, hashing and signing

System Cryptography: Force strong key protection for user keys stored on the computer

System objects: Default owner for objects created by members of the Administrators groupDescriptionSystem objects: Require case insensitivity for non-Windows subsystems

System objects: Strengthen default permissions of internal system objects (e.g., Symbolic Links)

System settings: Optional subsystems

System settings: Use Certificate Rules on Windows Executables for Software Restriction Policies

User Account Control: Admin Approval Mode for the Built-in Administrator account

User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode

User Account Control: Behavior of the elevation prompt for standard usersThis security setting determines the behavior of the elevation prompt for standard usersUser Account Control: Detect application installations and prompt for elevation

User Account Control: Only elevate executables that are signed and validated

User Account Control: Only elevate UIAccess applications that are installed in secure locations

User Account Control: Run all users, including administrators, as standard users.

User Account Control: Switch to the secure desktop when prompting for elevation

User Account Control: Virtualizes file and registry write failures to per-user locations

Maximum application log size

Maximum security log size

Maximum system log size

Prevent local guests group from accessing application log

Prevent local guests group from accessing security log

Prevent local guests group from accessing system log

Retain application log

Retain security log

Retain system log

Retention method for application log

Retention method for security log

Retention method for system log

Restricted Groups

System Services security settings

Registry security settings

File System security settings

Group Policy Settings - Vista

Documents

Transcript of Group Policy Settings - Vista