Windows Server 2008 and Windows Vista SP1 Group Policy Settings

Group Policy Settings Reference
Windows Server® 2008 and Windows Vista SP1
This spreadsheet lists the policy settings for computer and user configurations included in the administrative template files (admx/adml) delive
Windows Vista (RTM build 6000). The policy settings included in this spreadsheet cover Windows Server 2008, Windows Vista SP1, Windows
and Windows 2000. These files are used to expose policy settings when you edit Group Policy objects (GPOs) using Group Policy Object Edi
You can use the filtering capabilities included in this spreadsheet to view a specific subset of data based on one value or a combination of valu
in one or more of the columns. In addition, you can click Custom in the drop-down list of any of the column headings to add additional filtering
To view a specific subset of data, click the drop-down arrow in the column heading of cells that contain the value or combination of values on w
and then click the desired value in the drop-down list. For example, to view a subset of policy settings that are available for Windows Server 2
click the drop-down arrow next to Supported On, and then click At least Microsoft Windows Server 2008.
What's New
The spreadsheet contains three new columns. These columns provide more information about each policy setting's behavior regarding reboot
and schema extensions.These columns are:
Reboot Required: A "Yes" in this column means Windows requires a restart before it applies the described policy setting.
Logoff Required: A "Yes" in this column means Windows requires the user to log off and log on again before it applies the described polic
Active Directory Schema or Domain Requirements: A "Yes" in this column means you extend your Active Directory Schema before dep
(detailed documentation for schema changes will be available online after Microsoft releases Windows Server 2008).
Legal Notice
The information contained in this document represents the current view of Microsoft Corporation on the issues discussed as of the date of publication.
Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot
guarantee the accuracy of any information presented after the date of publication.
The information contained in this document relates to a prerelease software product, which may be substantially modified before its first commercial release.
Accordingly, the information may not accurately describe or reflect the software product when first commercially released.
This document is provided for informational purposes only, and Microsoft makes no warranties, express or implied, with respect to this document or the informa
This is a preliminary document and may be changed substantially prior to final commercial release of the software described herein.
This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, AS TO THE INFORMATION IN THIS DO
Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reprod
or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording or otherwise), or for
any purpose, without the express written permission of Microsoft Corp.
Microsoft may have patents, patent applications, trademarks, copyrights or other intellectual property rights covering subject matter in this document.
Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these
patents, trademarks, copyrights or other intellectual property
Unless otherwise noted, the example companies, organizations, products, domain names, e-mail addresses, logos, people, places and events depicted herein
no association with any real company, organization, product, domain name, e-mail address, logo, person, place or event is intended or should be inferred
© 2008 Microsoft Corp. All rights reserved.
Microsoft, the Windows logo, Windows, Windows Media, Active Directory and Windows NT are either registered trademarks or trademarks of Microsoft Corp. in
The names of actual companies and products mentioned herein may be the trademarks of their respective owners.
ndows XP Professional,
File name
ActiveXInstallService.admx
AddRemovePrograms.admx
adfs.admx
AppCompat.admx
AppCompat.admx
AppCompat.admx
AppCompat.admx
AppCompat.admx
AppCompat.admx
AppCompat.admx
AttachmentManager.admx
AutoPlay.admx
AutoPlay.admx
AutoPlay.admx
AutoPlay.admx
AutoPlay.admx
AutoPlay.admx
Bits.admx
Bits.admx
Bits.admx
Bits.admx
Bits.admx
Bits.admx
Bits.admx
Bits.admx
Bits.admx
Bits.admx
Bits.admx
Bits.admx
Bits.admx
CaptureWizard.admx
CaptureWizard.admx
CEIPEnable.admx
CEIPEnable.admx
CipherSuiteOrder.admx
COM.admx
COM.admx
Conf.admx
Conf.admx
Conf.admx
Conf.admx
Conf.admx
Conf.admx
Conf.admx
Conf.admx
Conf.admx
Conf.admx
Conf.admx
Conf.admx
Conf.admx
Conf.admx
Conf.admx
Conf.admx
Conf.admx
Conf.admx
Conf.admx
Conf.admx
Conf.admx
Conf.admx
Conf.admx
Conf.admx
Conf.admx
Conf.admx
Conf.admx
Conf.admx
Conf.admx
Conf.admx
Conf.admx
Conf.admx
Conf.admx
Conf.admx
ControlPanel.admx
ControlPanel.admx
ControlPanel.admx
ControlPanel.admx
ControlPanelDisplay.admx
Cpls.admx
CredentialProviders.admx
CredentialProviders.admx
CredSsp.admx
CredSsp.admx
CredSsp.admx
CredSsp.admx
CredSsp.admx
CredSsp.admx
CredSsp.admx
CredSsp.admx
CredSsp.admx
CredUI.admx
CredUI.admx
CtrlAltDel.admx
CtrlAltDel.admx
CtrlAltDel.admx
CtrlAltDel.admx
DCOM.admx
DCOM.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
DeviceInstallation.admx
DFS.admx
DigitalLocker.admx
DigitalLocker.admx
DiskDiagnostic.admx
DiskDiagnostic.admx
DiskNVCache.admx
DiskNVCache.admx
DiskNVCache.admx
DiskNVCache.admx
DiskQuota.admx
DiskQuota.admx
DiskQuota.admx
DiskQuota.admx
DiskQuota.admx
DiskQuota.admx
DistributedLinkTracking.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DWM.admx
DWM.admx
DWM.admx
DWM.admx
DWM.admx
DWM.admx
DWM.admx
DWM.admx
DWM.admx
DWM.admx
EncryptFilesonMove.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
EventForwarding.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventViewer.admx
EventViewer.admx
EventViewer.admx
Explorer.admx
Explorer.admx
Explorer.admx
Explorer.admx
FileRecovery.admx
FileSys.admx
FolderRedirection.admx
FramePanes.admx
FramePanes.admx
GameExplorer.admx
GameExplorer.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
GroupPolicy.admx
GroupPolicy.admx
GroupPolicy.admx
GroupPolicy.admx
GroupPolicy.admx
GroupPolicy.admx
GroupPolicy.admx
GroupPolicy.admx
GroupPolicy.admx
GroupPolicy.admx
GroupPolicy.admx
GroupPolicy.admx
GroupPolicy.admx
GroupPolicy.admx
GroupPolicy.admx
GroupPolicy.admx
GroupPolicy.admx
GroupPolicy.admx
GroupPolicy.admx
GroupPolicy.admx
GroupPolicy.admx
GroupPolicy.admx
GroupPolicy.admx
GroupPolicy.admx
GroupPolicy.admx
GroupPolicy.admx
GroupPolicy.admx
GroupPolicy.admx
GroupPolicy.admx
GroupPolicy.admx
GroupPolicy.admx
GroupPolicyPreferences.admx
GroupPolicy-Server.admx
Help.admx
Help.admx
Help.admx
HelpAndSupport.admx
HelpAndSupport.admx
HelpAndSupport.admx
HelpAndSupport.admx
HelpAndSupport.admx
HotStart.admx
HotStart.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
IIS.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
InkWatson.admx
InkWatson.admx
InputPersonalization.admx
iSCSI.admx
iSCSI.admx
iSCSI.admx
iSCSI.admx
iSCSI.admx
iSCSI.admx
iSCSI.admx
iSCSI.admx
iSCSI.admx
iSCSI.admx
kdc.admx
Kerberos.admx
Kerberos.admx
Kerberos.admx
LeakDiagnostic.admx
LinkLayerTopologyDiscovery.admx
LinkLayerTopologyDiscovery.admx
Logon.admx
Logon.admx
Logon.admx
Logon.admx
Logon.admx
Logon.admx
Logon.admx
Logon.admx
Logon.admx
Logon.admx
Logon.admx
Logon.admx
Logon.admx
Logon.admx
MediaCenter.admx
MediaCenter.admx
MMC.admx
MMC.admx
MMC.admx
MMC.admx
MMC.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapIns2.admx
MMCSnapIns2.admx
MMCSnapIns2.admx
MMCSnapIns2.admx
MMCSnapIns2.admx
MMCSnapIns2.admx
MMCSnapIns2.admx
MMCSnapIns2.admx
MMCSnapIns2.admx
MMCSnapIns2.admx
MMCSnapIns2.admx
MobilePCMobilityCenter.admx
MobilePCMobilityCenter.admx
MobilePCPresentationSettings.admx
MobilePCPresentationSettings.admx
MovieMaker.admx
MovieMaker.admx
MovieMaker.admx
MovieMaker.admx
MovieMaker.admx
MovieMaker.admx
MovieMaker.admx
MovieMaker.admx
MSDT.admx
MSDT.admx
MSI.admx
MSI.admx
MSI.admx
MSI.admx
MSI.admx
MSI.admx
MSI.admx
MSI.admx
MSI.admx
MSI.admx
MSI.admx
MSI.admx
MSI.admx
MSI.admx
MSI.admx
MSI.admx
MSI.admx
MSI.admx
MSI.admx
MSI.admx
MSI.admx
MSI.admx
MSI.admx
MSI.admx
MSI.admx
MSI.admx
NAPXPQec.admx
Netlogon.admx
Netlogon.admx
Netlogon.admx
Netlogon.admx
Netlogon.admx
Netlogon.admx
Netlogon.admx
Netlogon.admx
Netlogon.admx
Netlogon.admx
Netlogon.admx
Netlogon.admx
Netlogon.admx
Netlogon.admx
Netlogon.admx
Netlogon.admx
Netlogon.admx
Netlogon.admx
Netlogon.admx
Netlogon.admx
Netlogon.admx
Netlogon.admx
Netlogon.admx
Netlogon.admx
Netlogon.admx
Netlogon.admx
Netlogon.admx
Netlogon.admx
Netlogon.admx
Netlogon.admx
NetworkConnections.admx
NetworkProjection.admx
NetworkProjection.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
P2P-pnrp.admx
P2P-pnrp.admx
P2P-pnrp.admx
P2P-pnrp.admx
P2P-pnrp.admx
P2P-pnrp.admx
P2P-pnrp.admx
P2P-pnrp.admx
P2P-pnrp.admx
P2P-pnrp.admx
P2P-pnrp.admx
P2P-pnrp.admx
P2P-pnrp.admx
P2P-pnrp.admx
ParentalControls.admx
pca.admx
pca.admx
pca.admx
pca.admx
pca.admx
PenTraining.admx
PenTraining.admx
PerfCenterCPL.admx
PerfCenterCPL.admx
PerfCenterCPL.admx
PerfCenterCPL.admx
PerfCenterCPL.admx
PerfCenterCPL.admx
PerformanceDiagnostics.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
PreviousVersions.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Programs.admx
Programs.admx
Programs.admx
Programs.admx
Programs.admx
Programs.admx
Programs.admx
PswdSync.admx
PswdSync.admx
PswdSync.admx
PswdSync.admx
QOS.admx
QOS.admx
QOS.admx
QOS.admx
QOS.admx
QOS.admx
QOS.admx
QOS.admx
QOS.admx
QOS.admx
QOS.admx
QOS.admx
QOS.admx
QOS.admx
QOS.admx
QOS.admx
QOS.admx
QOS.admx
QOS.admx
Radar.admx
Reliability.admx
Reliability.admx
Reliability.admx
Reliability.admx
RemoteAssistance.admx
RemovableStorage.admx
RPC.admx
RPC.admx
RPC.admx
RPC.admx
RPC.admx
RPC.admx
Scripts.admx
Scripts.admx
Scripts.admx
Scripts.admx
Scripts.admx
Scripts.admx
Scripts.admx
Scripts.admx
Scripts.admx
Scripts.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Securitycenter.admx
ServerManager.admx
ServerManager.admx
ServerManager.admx
ServerManager.admx
Setup.admx
Setup.admx
SharedFolders.admx
SharedFolders.admx
Sharing.admx
Shell-CommandPrompt-RegEditTools.admx
ShellWelcomeCenter.admx
Sidebar.admx
Sidebar.admx
Sidebar.admx
Sidebar.admx
Sidebar.admx
Sidebar.admx
Sidebar.admx
Sidebar.admx
Sideshow.admx
Sideshow.admx
Sideshow.admx
Sideshow.admx
Sideshow.admx
Sideshow.admx
Sideshow.admx
Sideshow.admx
Smartcard.admx
Smartcard.admx
Smartcard.admx
Smartcard.admx
Smartcard.admx
Smartcard.admx
Smartcard.admx
Smartcard.admx
Smartcard.admx
Smartcard.admx
Smartcard.admx
Smartcard.admx
Smartcard.admx
Snis.admx
Snis.admx
Snmp.admx
Snmp.admx
Snmp.admx
SoundRec.admx
SoundRec.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
SystemResourceManager.admx
SystemRestore.admx
SystemRestore.admx
TabletPCInputPanel.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
Taskbar.admx
Taskbar.admx
Taskbar.admx
Taskbar.admx
Taskbar.admx
Taskbar.admx
Taskbar.admx
Taskbar.admx
Taskbar.admx
Taskbar.admx
TaskScheduler.admx
TaskScheduler.admx
TaskScheduler.admx
TaskScheduler.admx
TaskScheduler.admx
TaskScheduler.admx
TaskScheduler.admx
TaskScheduler.admx
TaskScheduler.admx
TaskScheduler.admx
TaskScheduler.admx
TaskScheduler.admx
TaskScheduler.admx
TaskScheduler.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer-Server.admx
Thumbnails.admx
Thumbnails.admx
Thumbnails.admx
TouchInput.admx
TouchInput.admx
TPM.admx
TPM.admx
TPM.admx
TPM.admx
UserDataBackup.admx
UserDataBackup.admx
UserDataBackup.admx
UserDataBackup.admx
UserDataBackup.admx
UserDataBackup.admx
UserDataBackup.admx
UserDataBackup.admx
UserDataBackup.admx
UserDataBackup.admx
UserDataBackup.admx
UserDataBackup.admx
UserDataBackup.admx
UserDataBackup.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
VolumeEncryption.admx
W32Time.admx
W32Time.admx
W32Time.admx
W32Time.admx
WDI.admx
WDI.admx
WinCal.admx
WinCal.admx
WindowsBackup.admx
WindowsBackup.admx
WindowsBackup.admx
WindowsBackup.admx
WindowsBackup.admx
WindowsCollaboration.admx
WindowsColorSystem.admx
WindowsColorSystem.admx
WindowsConnectNow.admx
WindowsDefender.admx
WindowsExplorer.admx
WindowsFileProtection.admx
WindowsFirewall.admx
WindowsMail.admx
WindowsMail.admx
WindowsMail.admx
WindowsMail.admx
WindowsMediaDRM.admx
WindowsMediaPlayer.admx
WindowsMessenger.admx
WindowsRemoteManagement.admx
WindowsRemoteShell.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WinInit.admx
WinInit.admx
WinLogon.admx
WinLogon.admx
WinLogon.admx
WinLogon.admx
WinLogon.admx
WinLogon.admx
WinLogon.admx
Winsrv.admx
WordWheel.admx
Policy Setting name Scope
Approved Installation Sites for ActiveX Controls Machine
Go directly to Components Wizard User
Hide Add New Programs page User
Hide Add/Remove Windows Components page User
Hide Change or Remove Programs page User
Hide the "Add a program from CD-ROM or floppy disk" option User
Hide the "Add programs from Microsoft" option User
Hide the "Add programs from your network" option User
Hide the Set Program Access and Defaults page User
Remove Add or Remove Programs User
Remove Support Information User
Specify default category for Add New Programs User
Turn off Federation Service Machine
Prevent access to 16-bit applications Machine
Prevent access to 16-bit applications User
Remove Program Compatibility Property Page Machine
Turn Off Application Compatibility Engine Machine
Turn Off Program Compatibility Assistant Machine
Turn Off Program Compatibility Assistant User
Turn Off Program Compatibility Wizard Machine
Default risk level for file attachments User
Do not preserve zone information in file attachments User
Hide mechanisms to remove zone information User
Inclusion list for high risk file types User
Inclusion list for low file types User
Inclusion list for moderate risk file types User
Notify antivirus programs when opening attachments User
Trust logic for file attachments User
Default behavior for AutoRun machine
Default behavior for AutoRun user
Don't set the always do this checkbox machine
Don't set the always do this checkbox user
Turn off Autoplay machine
Turn off Autoplay user
Allow BITS Peercaching Machine
Do not allow the computer to act as a BITS Peercaching client Machine
Do not allow the computer to act as a BITS Peercaching server Machine
Limit age of items in the BITS Peercache Machine
Limit the BITS Peercache size Machine
Maximum BITS job download time Machine
Maximum network bandwidth for BITS background transfers Machine
Maximum network bandwidth used for Peercaching Machine
Maximum number of BITS jobs for each user Machine
Maximum number of BITS jobs for this computer Machine
Maximum number of files allowed in a BITS job Machine
Maximum number of ranges that can be added to the file in a BITS job Machine
Timeout for inactive BITS jobs Machine
Do not allow Import Video to run Machine
Do not allow Import Video to run User
Allow Corporate redirection of Customer Experience Improvement uploads Machine
Tag Windows Customer Experience Improvement data with Study Identifier Machine
SSL Cipher Suite Order Machine
Download missing COM components Machine
Download missing COM components User
Allow persisting automatic acceptance of Calls User
Disable application Sharing User
Disable Audio User
Disable Chat User
Disable Directory services User
Disable full duplex Audio User
Disable NetMeeting 2.x Whiteboard User
Disable remote Desktop Sharing Machine
Disable the Advanced Calling button User
Disable Whiteboard User
Enable Automatic Configuration User
Hide the Audio page User
Hide the General page User
Hide the Security page User
Hide the Video page User
Limit the bandwidth of Audio and Video User
Limit the size of sent files User
Prevent adding Directory servers User
Prevent Application Sharing in true color User
Prevent automatic acceptance of Calls User
Prevent changing Call placement method User
Prevent changing DirectSound Audio setting User
Prevent Control User
Prevent Desktop Sharing User
Prevent receiving files User
Prevent receiving Video User
Prevent sending files User
Prevent sending Video User
Prevent Sharing User
Prevent Sharing Command Prompts User
Prevent Sharing Explorer windows User
Prevent viewing Web directory User
Set Call Security options User
Set the intranet support Web page User
Force classic Control Panel view User
Hide specified Control Panel items User
Prohibit access to the Control Panel User
Show only specified Control Panel items User
Hide Appearance and Themes tab User
Hide Desktop tab User
Hide Screen Saver tab User
Hide Settings tab User
Load a specific visual style file or force Windows Classic User
Password protect the screen saver User
Prevent changing wallpaper User
Prevent selection of windows and buttons styles User
Prohibit selection of font size User
Prohibit Theme color selection User
Remove Display in Control Panel User
Remove Theme option User
Screen Saver User
Screen Saver executable name User
Screen Saver timeout User
Apply the default user logon picture to all users Machine
Assign a default domain for logon Machine
Exclude credential providers Machine
Allow Default Credentials with NTLM-only Server Authentication Machine
Allow Delegating Default Credentials Machine
Allow Delegating Fresh Credentials Machine
Allow Delegating Saved Credentials Machine
Allow Fresh Credentials with NTLM-only Server Authentication Machine
Allow Saved Credentials with NTLM-only Server Authentication Machine
Deny Delegating Default Credentials Machine
Deny Delegating Fresh Credentials Machine
Deny Delegating Saved Credentials Machine
Enumerate administrator accounts on elevation Machine
Require trusted path for credential entry. Machine
Remove Change Password User
Remove Lock Computer User
Remove Logoff User
Remove Task Manager User
Allow local activation security check exemptions Machine
Define Activation Security Check exemptions Machine
Add/Delete items User
Allow only bitmapped wallpaper User
Desktop Wallpaper User
Disable Active Desktop User
Disable all items User
Do not add shares of recently opened documents to Network Locations User
Don't save settings at exit User
Enable Active Desktop User
Enable filter in Find dialog box User
Hide Active Directory folder User
Hide and disable all items on the desktop User
Hide Internet Explorer icon on desktop User
Hide Network Locations icon on desktop User
Maximum size of Active Directory searches User
Prevent adding, dragging, dropping and closing the Taskbar's toolbars User
Prohibit adding items User
Prohibit adjusting desktop toolbars User
Prohibit changes User
Prohibit closing items User
Prohibit deleting items User
Prohibit editing items User
Prohibit User from manually redirecting Profile Folders User
Remove Computer icon on the desktop User
Remove My Documents icon on the desktop User
Remove Properties from the Computer icon context menu User
Remove Properties from the Documents icon context menu User
Remove Properties from the Recycle Bin context menu User
Remove Recycle Bin icon from desktop User
Remove the Desktop Cleanup Wizard User
Allow administrators to override Device Installation Restriction policies Machine
Allow installation of devices that match any of these device IDs Machine
Allow installation of devices using drivers that match these device setup classes Machine
Allow non-administrators to install drivers for these device setup classes Machine
Allow remote access to the PnP interface Machine
Code signing for device drivers User
Configure device installation timeout Machine
Configure driver search locations User
Display a custom message when installation is prevented by policy (balloon text) Machine
Display a custom message when installation is prevented by policy (balloon title) Machine
Do not create system restore point when new device driver installed Machine
Do not send a Windows Error Report when a generic driver is installed on a device Machine
Prevent installation of devices not described by other policy settings Machine
Prevent installation of devices that match any of these device IDs Machine
Prevent installation of devices using drivers that match these device setup classes Machine
Prevent installation of removable devices Machine
Treat all digitally signed drivers equally in the driver ranking and selection process Machine
Turn off "Found New Hardware" balloons during device installation Machine
Turn off Windows Update device driver search prompt Machine
Turn off Windows Update device driver search prompt User
Sets how often a DFS Client discovers DC's Machine
Do not allow Digital Locker to run Machine
Do not allow Digital Locker to run User
Disk Diagnostic: Configure custom alert text Machine
Disk Diagnostic: Configure execution level Machine
Turn Off Boot and Resume Optimizations Machine
Turn Off Cache Power Mode Machine
Turn Off Non Volatile Cache Feature Machine
Turn Off Solid State Mode Machine
Apply policy to removable media Machine
Default quota limit and warning level Machine
Enable disk quotas Machine
Enforce disk quota limit Machine
Log event when quota limit exceeded Machine
Log event when quota warning level exceeded Machine
Allow Distributed Link Tracking clients to use domain resources Machine
Allow DNS Suffix Appending to Unqualified Multi-Label Name Queries Machine
Connection-Specific DNS Suffix Machine
DNS Servers Machine
DNS Suffix Search List Machine
Dynamic Update Machine
Primary DNS Suffix Machine
Primary DNS Suffix Devolution Machine
Register DNS records with connection-specific DNS suffix Machine
Register PTR Records Machine
Registration Refresh Interval Machine
Replace Addresses In Conflicts Machine
TTL Set in the A and PTR records Machine
Turn off Multicast Name Resolution Machine
Update Security Level Machine
Update Top Level Domain Zones Machine
Do not allow color changes Machine
Do not allow color changes User
Do not allow desktop composition Machine
Do not allow desktop composition User
Do not allow Flip3D invocation Machine
Do not allow Flip3D invocation User
Do not allow window animations Machine
Do not allow window animations User
Specify a default color Machine
Specify a default color User
Do not automatically encrypt files moved to encrypted folders Machine
Configure Corporate Windows Error Reporting Machine
Configure Default consent Machine
Configure Default consent User
Configure Error Reporting Machine
Configure Report Archive Machine
Configure Report Archive User
Configure Report Queue Machine
Configure Report Queue User
Customize consent settings Machine
Customize consent settings User
Default application reporting settings Machine
Disable Logging Machine
Disable Logging User
Disable Windows Error Reporting Machine
Disable Windows Error Reporting User
Display Error Notification Machine
Do not send additional data Machine
Do not send additional data User
Ignore custom consent settings Machine
Ignore custom consent settings User
List of applications to always report errors for Machine
List of applications to be excluded Machine
List of applications to be excluded User
List of applications to never report errors for Machine
Prevent display of the user interface for critical errors Machine
Report operating system errors Machine
Configure the server address, refresh interval, and issuer certificate authority of a target Subscription Manager Machine
Backup log automatically when full Machine
Log Access Machine
Log Access Machine
Log Access Machine
Log Access Machine
Log File Path Machine
Maximum Log Size (KB) Machine
Retain old events Machine
Turn on logging Machine
Events.asp program Machine
Events.asp program command line parameters Machine
Events.asp URL Machine
Display the menu bar in Windows Explorer User
Prevent users from adding files to the root of their Users Files folder. User
Turn off common control and window animations User
Turn off heap termination on corruption Machine
Configure Corrupted File Recovery Behavior Machine
Selectively allow the evaluation of a symbolic link. Machine
Do not automatically make redirected folders available offline User
Use localized subfolder names when redirecting Start and My Documents Machine
Use localized subfolder names when redirecting Start and My Documents User
Turn off Details Pane User
Turn off Preview Pane User
Turn off downloading of game information Machine
Turn off tracking of last play time of games in the Games folder Machine
Century interpretation for Year 2000 User
Disallow changing of geographic location Machine
Disallow changing of geographic location User
Disallow selection of Custom Locales Machine
Disallow selection of Custom Locales User
Disallow user override of locale settings Machine
Disallow user override of locale settings User
Force selected system UI language to overwrite the user UI language Machine
Hide Regional and Language Options administrative options User
Hide the geographic location option User
Hide the select language group options User
Hide user locale selection and customization options User
Restrict selection of Windows menus and dialogs language User
Restrict system locales Machine
Restrict user locales Machine
Restrict user locales User
Restricts the UI language Windows uses for all logged users Machine
Restricts the UI languages Windows should use for the selected user User
Allow Cross-Forest User Policy and Roaming User Profiles Machine
Always use local ADM files for Group Policy Object Editor Machine
Create new Group Policy object links disabled by default User
Default name for new Group Policy objects User
Disallow Interactive Users from generating Resultant Set of Policy data Machine
Disallow Interactive Users from generating Resultant Set of Policy data User
Disk Quota policy processing Machine
EFS recovery policy processing Machine
Enforce Show Policies Only User
Folder Redirection policy processing Machine
Group Policy domain controller selection User
Group Policy refresh interval for computers Machine
Group Policy refresh interval for domain controllers Machine
Group Policy refresh interval for users User
Group Policy slow link detection Machine
Group Policy slow link detection User
Internet Explorer Maintenance policy processing Machine
IP Security policy processing Machine
Registry policy processing Machine
Remove users ability to invoke machine policy refresh Machine
Scripts policy processing Machine
Security policy processing Machine
Software Installation policy processing Machine
Startup policy processing wait time Machine
Turn off automatic update of ADM files User
Turn off background refresh of Group Policy Machine
Turn off Local Group Policy objects processing Machine
Turn off Resultant Set of Policy logging Machine
User Group Policy loopback processing mode Machine
Wired policy processing Machine
Wireless policy processing Machine
Applications Policy Processing Machine
Applications Policy Processing Machine
Computer Control Panel (GPOE) User
Data Sources (GPOE) User
Data Sources Policy Processing Machine
Data Sources Policy Processing Machine
Devices (GPOE) User
Devices Policy Processing Machine
Devices Policy Processing Machine
Drive Maps (GPOE) User
Drive Maps Policy Processing Machine
Drive Maps Policy Processing Machine
Environment (GPOE) User
Environment Policy Processing Machine
Environment Policy Processing Machine
Files (GPOE) User
Files Policy Processing Machine
Files Policy Processing Machine
Folder Options (GPOE) User
Folder Options Policy Processing Machine
Folder Options Policy Processing Machine
Folders (GPOE) User
Folders Policy Processing Machine
Folders Policy Processing Machine
Ini Files (GPOE) User
Ini Files Policy Processing Machine
Ini Files Policy Processing Machine
Internet Settings (GPOE) User
Internet Settings Policy Processing Machine
Internet Settings Policy Processing Machine
Local Users and Groups (GPOE) User
Local Users and Groups Policy Processing Machine
Local Users and Groups Policy Processing Machine
Network Options (GPOE) User
Network Options Policy Processing Machine
Network Options Policy Processing Machine
Network Shares (GPOE) User
Network Shares Policy Processing Machine
Network Shares Policy Processing Machine
Power Options (GPOE) User
Power Options Policy Processing Machine
Power Options Policy Processing Machine
Preference Application Plugins User
Preference Applications (GPOE) User
Preference View Extension - Application Extension (GPOE) User
Preference View Extension (GPOE) User
Printers (GPOE) User
Printers Policy Processing Machine
Printers Policy Processing Machine
Regional Options (GPOE) User
Regional Options Policy Processing Machine
Regional Options Policy Processing Machine
Registry (GPOE) User
Registry Policy Processing Machine
Registry Policy Processing Machine
Scheduled Tasks (GPOE) User
Scheduled Tasks Policy Processing Machine
Scheduled Tasks Policy Processing Machine
Services (GPOE) User
Services Policy Processing Machine
Services Policy Processing Machine
Shortcuts (GPOE) User
Shortcuts Policy Processing Machine
Shortcuts Policy Processing Machine
Start Menu (GPOE) User
Start Menu Policy Processing Machine
Start Menu Policy Processing Machine
User Control Panel (GPOE) User
Allow asynchronous user Group Policy processing when logging on through Terminal Services Machine
Restrict potentially unsafe HTML Help functions to specified folders Machine
Restrict these programs from being launched from Help Machine
Restrict these programs from being launched from Help User
Turn off Active Help Machine
Turn off Help Experience Improvement Program User
Turn off Help Ratings User
Turn off Untrusted Content Machine
Turn off Windows Online User
Turn off Windows HotStart Machine
Turn off Windows HotStart User
Restrict Internet communication Machine
Restrict Internet communication User
Turn off access to all Windows Update features Machine
Turn off Automatic Root Certificates Update Machine
Turn off downloading of print drivers over HTTP Machine
Turn off downloading of print drivers over HTTP User
Turn off Event Viewer "Events.asp" links Machine
Turn off Help and Support Center "Did you know?" content Machine
Turn off Help and Support Center Microsoft Knowledge Base search Machine
Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com Machine
Turn off Internet download for Web publishing and online ordering wizards Machine
Turn off Internet download for Web publishing and online ordering wizards User
Turn off Internet File Association service Machine
Turn off Internet File Association service User
Turn off printing over HTTP Machine
Turn off printing over HTTP User
Turn off Registration if URL connection is referring to Microsoft.com Machine
Turn off Search Companion content file updates Machine
Turn off the "Order Prints" picture task Machine
Turn off the "Order Prints" picture task User
Turn off the "Publish to Web" task for files and folders Machine
Turn off the "Publish to Web" task for files and folders User
Turn off the Windows Messenger Customer Experience Improvement Program Machine
Turn off the Windows Messenger Customer Experience Improvement Program User
Turn off Windows Customer Experience Improvement Program Machine
Turn off Windows Error Reporting Machine
Turn off Windows Network Connectivity Status Indicator active tests Machine
Turn off Windows Update device driver searching Machine
Prevent IIS installation Machine
Access data sources across domains Machine
Access data sources across domains User
Add a specific list of search providers to the user's search provider list Machine
Add a specific list of search providers to the user's search provider list User
Add-on List Machine
Add-on List User
Admin-approved behaviors Machine
Admin-approved behaviors User
All Processes Machine
All Processes User
All Processes User
All Processes User
All Processes User
All Processes User
All Processes User
All Processes User
All Processes User
All Processes User
All Processes User
All Processes User
All Processes User
All Processes User
All Processes User
Allow active content from CDs to run on user machines Machine
Allow active content from CDs to run on user machines User
Allow active content over restricted protocols to access my computer Machine
Allow active content over restricted protocols to access my computer User
Allow active scripting Machine
Allow active scripting User
Allow binary and script behaviors Machine
Allow binary and script behaviors User
Allow cut, copy or paste operations from the clipboard via script Machine
Allow cut, copy or paste operations from the clipboard via script User
Allow drag and drop or copy and paste files Machine
Allow drag and drop or copy and paste files User
Allow file downloads Machine
Allow file downloads User
Allow font downloads Machine
Allow font downloads User
Allow Install On Demand (except Internet Explorer) Machine
Allow Install On Demand (except Internet Explorer) User
Allow Install On Demand (Internet Explorer) Machine
Allow Install On Demand (Internet Explorer) User
Allow installation of desktop items Machine
Allow installation of desktop items User
Allow META REFRESH Machine
Allow META REFRESH User
Allow scripting of Internet Explorer web browser control Machine
Allow scripting of Internet Explorer web browser control User
Allow script-initiated windows without size or position constraints Machine
Allow script-initiated windows without size or position constraints User
Allow Scriptlets Machine
Allow Scriptlets User
Allow software to run or install even if the signature is invalid Machine
Allow software to run or install even if the signature is invalid User
Allow status bar updates via script Machine
Allow status bar updates via script User
Allow the display of image download placeholders User
Allow the printing of background colors and images User
Allow third-party browser extensions Machine
Allow third-party browser extensions User
Allow video and animation on a webpage that does not use external media player (through dynsrc attribute) Machine
Allow video and animation on a webpage that does not use external media player (through dynsrc attribute) User
Allow websites to open windows without address or status bars Machine
Allow websites to open windows without address or status bars User
Allow websites to prompt for information using scripted windows Machine
Allow websites to prompt for information using scripted windows User
Audio/Video Player User
Automatic prompting for ActiveX controls Machine
Automatic prompting for ActiveX controls User
Automatic prompting for file downloads Machine
Automatic prompting for file downloads User
Automatically check for Internet Explorer updates Machine
Automatically check for Internet Explorer updates User
Carpoint User
Check for server certificate revocation Machine
Check for server certificate revocation User
Check for signatures on downloaded programs Machine
Check for signatures on downloaded programs User
Configure Media Explorer Bar User
Configure Outlook Express User
Configure Toolbar Buttons User
Customize User Agent String Machine
Customize User Agent String User
Deny all add-ons unless specifically allowed in the Add-on List Machine
Deny all add-ons unless specifically allowed in the Add-on List User
DHTML Edit Control User
Disable "Configuring History" Machine
Disable "Configuring History" User
Disable adding channels User
Disable adding schedules for offline pages User
Disable all scheduled offline pages User
Disable AutoComplete for forms User
Disable Automatic Install of Internet Explorer components Machine
Disable caching of Auto-Proxy scripts User
Disable changing accessibility settings User
Disable changing Advanced page settings User
Disable changing Automatic Configuration settings Machine
Disable changing Automatic Configuration settings User
Disable changing Calendar and Contact settings User
Disable changing certificate settings User
Disable changing color settings User
Disable changing connection settings Machine
Disable changing connection settings User
Disable changing default browser check User
Disable changing font settings User
Disable changing home page settings User
Disable changing language settings User
Disable changing link color settings User
Disable changing Messaging settings User
Disable changing Profile Assistant settings User
Disable changing proxy settings Machine
Disable changing proxy settings User
Disable changing ratings settings User
Disable changing Temporary Internet files settings User
Disable channel user interface completely User
Disable Context menu User
Disable customizing browser toolbar buttons User
Disable customizing browser toolbars User
Disable downloading of site subscription content User
Disable editing and creating of schedule groups User
Disable editing schedules for offline pages User
Disable external branding of Internet Explorer User
Disable importing and exporting of favorites and feeds User
Disable Internet Connection wizard User
Disable offline page hit logging User
Disable Open in New Window menu option User
Disable Periodic Check for Internet Explorer software updates Machine
Disable removing channels User
Disable removing schedules for offline pages User
Disable Save this program to disk option User
Disable showing the splash screen Machine
Disable software update shell notifications on program launch Machine
Disable the Advanced page Machine
Disable the Advanced page User
Disable the Connections page Machine
Disable the Connections page User
Disable the Content page Machine
Disable the Content page User
Disable the General page Machine
Disable the General page User
Disable the Privacy page Machine
Disable the Privacy page User
Disable the Programs page Machine
Disable the Programs page User
Disable the Reset Web Settings feature User
Disable the Security page Machine
Disable the Security page User
Disable WinFX Runtime Components Setup Machine
Disable WinFX Runtime Components Setup User
Display error message on proxy script download failure User
Display mixed content Machine
Display mixed content User
Do not allow resetting Internet Explorer settings Machine
Do not allow resetting Internet Explorer settings User
Do not allow users to enable or disable add-ons Machine
Do not allow users to enable or disable add-ons User
Do not prompt for client certificate selection when no certificates or only one certificate exists. Machine
Do not prompt for client certificate selection when no certificates or only one certificate exists. User
Do not save encrypted pages to disk Machine
Do not save encrypted pages to disk User
Download signed ActiveX controls Machine
Download signed ActiveX controls User
Download unsigned ActiveX controls Machine
Download unsigned ActiveX controls User
Empty Temporary Internet Files folder when browser is closed Machine
Empty Temporary Internet Files folder when browser is closed User
Enable Native XMLHttp Support Machine
Enable Native XMLHttp Support User
Enforce Full Screen Mode Machine
Enforce Full Screen Mode User
File menu: Disable closing the browser and Explorer windows User
File menu: Disable New menu option User
File menu: Disable Open menu option User
File menu: Disable Save As Web Page Complete User
File menu: Disable Save As... menu option User
File size limits for Internet zone User
File size limits for Intranet zone User
File size limits for Local Machine zone User
File size limits for Restricted Sites zone User
File size limits for Trusted Sites zone User
Help menu: Remove 'For Netscape Users' menu option User
Help menu: Remove 'Send Feedback' menu option User
Help menu: Remove 'Tip of the Day' menu option User
Help menu: Remove 'Tour' menu option User
Hide Favorites menu User
Identity Manager: Prevent users from using Identities User
Include local directory path when uploading files to a server Machine
Include local directory path when uploading files to a server User
Initialize and script ActiveX controls not marked as safe Machine
Initialize and script ActiveX controls not marked as safe User
Internet Explorer Processes Machine
Internet Explorer Processes User
Internet Zone Restricted Protocols Machine
Internet Zone Restricted Protocols User
Internet Zone Template Machine
Internet Zone Template User
Intranet Sites: Include all local (intranet) sites not listed in other zones Machine
Intranet Sites: Include all local (intranet) sites not listed in other zones User
Intranet Sites: Include all network paths (UNCs) Machine
Intranet Sites: Include all network paths (UNCs) User
Intranet Sites: Include all sites that bypass the proxy server Machine
Intranet Sites: Include all sites that bypass the proxy server User
Intranet Zone Restricted Protocols Machine
Intranet Zone Restricted Protocols User
Intranet Zone Template Machine
Intranet Zone Template User
Investor User
Java permissions Machine
Java permissions User
Launching applications and files in an IFRAME Machine
Launching applications and files in an IFRAME User
Launching programs and unsafe files Machine
Launching programs and unsafe files User
Local Machine Zone Restricted Protocols Machine
Local Machine Zone Restricted Protocols User
Local Machine Zone Template Machine
Local Machine Zone Template User
Locked-Down Internet Zone Template Machine
Locked-Down Internet Zone Template User
Locked-Down Intranet Zone Template Machine
Locked-Down Intranet Zone Template User
Locked-Down Local Machine Zone Template Machine
Locked-Down Local Machine Zone Template User
Locked-Down Restricted Sites Zone Template Machine
Locked-Down Restricted Sites Zone Template User
Locked-Down Trusted Sites Zone Template Machine
Locked-Down Trusted Sites Zone Template User
Logon options Machine
Logon options User
Logon options User
Logon options User
Logon options User
Logon options User
Logon options User
Logon options User
Logon options User
Logon options User
Logon options User
Loose or un-compiled XAML files Machine
Loose or un-compiled XAML files User
Make proxy settings per-machine (rather than per-user) Machine
Menu Controls User
Microsoft Agent User
Microsoft Chat User
Microsoft Scriptlet Component User
Microsoft Survey Control User
Moving the menu bar above the navigation bar User
MSNBC User
Navigate sub-frames across different domains Machine
Navigate sub-frames across different domains User
NetShow File Transfer Control User
Open files based on content, not file extension Machine
Open files based on content, not file extension User
Play animations in web pages Machine
Play animations in web pages User
Play sounds in web pages Machine
Play sounds in web pages User
Play videos in web pages Machine
Play videos in web pages User
Pop-up allow list Machine
Pop-up allow list User
Prevent "Fix settings" functionality Machine
Prevent "Fix settings" functionality User
Prevent configuration of search from the Address bar User
Prevent ignoring certificate errors Machine
Prevent ignoring certificate errors User
Prevent participation in the Customer Experience Improvement Program Machine
Prevent participation in the Customer Experience Improvement Program User
Prevent performance of First Run Customize settings Machine
Prevent performance of First Run Customize settings User
Prevent setting of the code download path for each machine Machine
Prevent the configuration of cipher strength update information URLs Machine
Prevent the deletion of temporary Internet files and cookies Machine
Prevent the deletion of temporary Internet files and cookies User
Prevent the Internet Explorer search box from displaying Machine
Prevent the Internet Explorer search box from displaying User
Prevent the use of Windows colors User
Prevent users from choosing default text size User
Prevent users from configuring background color User
Prevent users from configuring text color User
Prevent users from configuring the color of links that have already been clicked User
Prevent users from configuring the color of links that have not yet been clicked User
Prevent users from configuring the hover color User
Process List Machine
Process List User
Process List User
Process List User
Process List User
Process List User
Process List User
Process List User
Process List User
Process List User
Process List User
Process List User
Process List User
Process List User
Process List User
Restrict changing the default search provider Machine
Restrict changing the default search provider User
Restrict search providers to a specific list of providers Machine
Restrict search providers to a specific list of providers User
Restricted Sites Zone Restricted Protocols Machine
Restricted Sites Zone Restricted Protocols User
Restricted Sites Zone Template Machine
Restricted Sites Zone Template User
Run .NET Framework-reliant components not signed with Authenticode Machine
Run .NET Framework-reliant components not signed with Authenticode User
Run .NET Framework-reliant components signed with Authenticode Machine
Run .NET Framework-reliant components signed with Authenticode User
Run ActiveX controls and plugins Machine
Run ActiveX controls and plugins User
Script ActiveX controls marked safe for scripting Machine
Script ActiveX controls marked safe for scripting User
Scripting of Java applets Machine
Scripting of Java applets User
Search: Disable Find Files via F3 within the browser User
Search: Disable Search Customization User
Security Zones: Do not allow users to add/delete sites Machine
Security Zones: Do not allow users to change policies Machine
Security Zones: Use only machine settings Machine
Send internationalized domain names Machine
Send internationalized domain names User
Shockwave Flash User
Site to Zone Assignment List Machine
Site to Zone Assignment List User
Software channel permissions Machine
Software channel permissions User
Submit non-encrypted form data Machine
Submit non-encrypted form data User
Subscription Limits User
Tools menu: Disable Internet Options... menu option User
Trusted Sites Zone Restricted Protocols Machine
Trusted Sites Zone Restricted Protocols User
Trusted Sites Zone Template Machine
Trusted Sites Zone Template User
Turn off "Delete Browsing History" functionality Machine
Turn off "Delete Browsing History" functionality User
Turn off "Delete Forms" functionality Machine
Turn off "Delete Forms" functionality User
Turn off "Delete Passwords" functionality Machine
Turn off "Delete Passwords" functionality User
Turn off addition and removal of feeds Machine
Turn off addition and removal of feeds User
Turn off automatic image resizing User
Turn off background sync for feeds Machine
Turn off background sync for feeds User
Turn off changing the URL to be displayed for checking updates to Internet Explorer and Internet Tools Machine
Turn off ClearType Machine
Turn off ClearType User
Turn off configuration of default behavior of new tab creation Machine
Turn off configuration of default behavior of new tab creation User
Turn off configuration of tabbed browsing pop-up behavior Machine
Turn off configuration of tabbed browsing pop-up behavior User
Turn off configuration of window reuse Machine
Turn off configuration of window reuse User
Turn off configuring the update check interval (in days) Machine
Turn off configuring underline links User
Turn off Crash Detection Machine
Turn off Crash Detection User
Turn off displaying the Internet Explorer Help Menu Machine
Turn off displaying the Internet Explorer Help Menu User
Turn off downloading of enclosures Machine
Turn off downloading of enclosures User
Turn off feed discovery Machine
Turn off feed discovery User
Turn Off First-Run Opt-In Machine
Turn Off First-Run Opt-In User
Turn off friendly http error messages User
Turn off inline AutoComplete in Windows Explorer User
Turn off Managing Phishing filter Machine
Turn off Managing Phishing filter User
Turn off Managing Pop-up Allow list Machine
Turn off Managing Pop-up Allow list User
Turn off managing Pop-up filter level Machine
Turn off managing Pop-up filter level User
Turn off page transitions User
Turn off page zooming functionality Machine
Turn off page zooming functionality User
Turn off picture display User
Turn off pop-up management Machine
Turn off pop-up management User
Turn off Profile Assistant Machine
Turn off Profile Assistant User
Turn off Quick Tabs functionality Machine
Turn off Quick Tabs functionality User
Turn off sending URLs as UTF-8(requires restart) User
Turn off smart image dithering User
Turn off smooth scrolling User
Turn off tabbed browsing Machine
Turn off tabbed browsing User
Turn off the auto-complete feature for web addresses User
Turn off the feed list Machine
Turn off the feed list User
Turn off the Security Settings Check feature Machine
Turn off the Security Settings Check feature User
Turn off toolbar upgrade tool Machine
Turn off toolbar upgrade tool User
Turn on automatic detection of the intranet Machine
Turn on automatic detection of the intranet User
Turn on Automatic Signup User
Turn on Compatibility Logging Machine
Turn on Compatibility Logging User
Turn on Information bar notification for intranet content Machine
Turn on Information bar notification for intranet content User
Turn on inline AutoComplete for Web addresses User
Turn on menu bar by default Machine
Turn on menu bar by default User
Turn on Protected Mode Machine
Turn on Protected Mode User
Turn on script debugging User
Turn on the auto-complete feature for user names and passwords on forms User
Turn on the display of a notification about every script error User
Turn on the hover color option User
Turn on the Internet Connection Wizard Auto Detect User
Use Automatic Detection for dial-up connections User
Use phishing filter Machine
Use phishing filter User
Use Pop-up Blocker Machine
Use Pop-up Blocker User
Use UTF-8 for mailto links Machine
Use UTF-8 for mailto links User
Userdata persistence Machine
Userdata persistence User
View menu: Disable Full Screen menu option User
View menu: Disable Source menu option User
Web Browser Applications Machine
Web Browser Applications User
Web sites in less privileged Web content zones can navigate into this zone Machine
Web sites in less privileged Web content zones can navigate into this zone User
XPS files Machine
XPS files Machine
XPS files Machine
XPS files Machine
XPS files Machine
XPS files Machine
XPS files Machine
XPS files Machine
XPS files Machine
XPS files Machine
XPS files User
XPS files User
XPS files User
XPS files User
XPS files User
XPS files User
XPS files User
XPS files User
XPS files User
XPS files User
Turn off handwriting recognition error reporting Machine
Turn off handwriting recognition error reporting User
Turn off automatic learning Machine
Turn off automatic learning User
Turn off handwriting personalization Machine
Turn off handwriting personalization User
Do not allow adding new targets via manual configuration Machine
Do not allow additional session logins Machine
Do not allow changes to initiator CHAP secret Machine
Do not allow changes to initiator iqn name Machine
Do not allow connections without IPSec Machine
Do not allow manual configuration of discovered targets Machine
Do not allow manual configuration of iSNS servers Machine
Do not allow manual configuration of target portals Machine
Do not allow sessions without mutual CHAP Machine
Do not allow sessions without one way CHAP Machine
Provide information about previous logons to client computers Machine
Define host name-to-Kerberos realm mappings Machine
Define interoperable Kerberos V5 realm settings Machine
Require strict KDC validation Machine
Configure Scenario Execution Level Machine
Turn on Mapper I/O (LLTDIO) driver Machine
Turn on Responder (RSPNDR) driver Machine
Always use classic logon Machine
Always wait for the network at computer startup and logon Machine
Do not process the legacy run list Machine
Do not process the legacy run list User
Do not process the run once list Machine
Do not process the run once list User
Don't display the Getting Started welcome screen at logon Machine
Don't display the Getting Started welcome screen at logon User
Hide entry points for Fast User Switching Machine
Remove Boot / Shutdown / Logon / Logoff status messages Machine
Run these programs at user logon Machine
Run these programs at user logon User
Turn off Windows Startup Sound Machine
Verbose vs normal status messages Machine
Do not allow Windows Media Center to run Machine
Do not allow Windows Media Center to run User
ActiveX Control User
Extended View (Web View) User
Link to Web Address User
Restrict the user from entering author mode User
Restrict users to the explicitly permitted list of snap-ins User
.Net Framework Configuration User
Active Directory Domains and Trusts User
Active Directory Sites and Services User
Active Directory Users and Computers User
Administrative Templates (Computers) User
Administrative Templates (Computers) User
Administrative Templates (Users) User
Administrative Templates (Users) User
ADSI Edit User
AppleTalk Routing User
Authorization Manager User
Certificate Templates User
Certificates User
Certification Authority User
Certification Authority Policy Settings User
Component Services User
Computer Management User
Connection Sharing (NAT) User
DCOM Configuration Extension User
Device Manager User
Device Manager User
DHCP Relay Management User
Disk Defragmenter User
Disk Management User
Distributed File System User
Enterprise PKI User
Event Viewer User
Event Viewer User
Event Viewer (Windows Vista) User
Event Viewer (Windows Vista) User
Failover Clusters Manager User
FAX Service User
Folder Redirection User
Folder Redirection User
FrontPage Server Extensions User
Group Policy Management User
Group Policy Object Editor User
Group Policy tab for Active Directory Tools User
Health Registration Authority (HRA) User
IAS Logging User
IGMP Routing User
Indexing Service User
Internet Authentication Service (IAS) User
Internet Explorer Maintenance User
Internet Explorer Maintenance User
Internet Information Services User
IP Routing User
IP Security Monitor User
IP Security Policy Management User
IP Security Policy Management User
IPX RIP Routing User
IPX Routing User
IPX SAP Routing User
Local Users and Groups User
Logical and Mapped Drives User
NAP Client Configuration User
NAP Client Configuration User
Network Policy Server (NPS) User
Online Responder User
OSPF Routing User
Performance Logs and Alerts User
Public Key Policies User
QoS Admission Control User
RAS Dialin - User Node User
Remote Access User
Remote Desktops User
Remote Installation Services User
Removable Storage User
Removable Storage Management User
Resultant Set of Policy snap-in User
RIP Routing User
Routing User
Routing and Remote Access User
Scripts (Logon/Logoff) User
Scripts (Logon/Logoff) User
Scripts (Startup/Shutdown) User
Scripts (Startup/Shutdown) User
Security Configuration and Analysis User
Security Settings User
Security Settings User
Security Templates User
Send Console Message User
Server Manager User
Service Dependencies User
Services User
Shared Folders User
Shared Folders Ext User
SMTP Protocol User
SNMP User
Software Installation (Computers) User
Software Installation (Computers) User
Software Installation (Users) User
Software Installation (Users) User
System Information User
System Properties User
Telephony User
Terminal Services Configuration User
TPM Management User
Windows Firewall with Advanced Security User
Windows Firewall with Advanced Security User
Wired Network (IEEE 802.3) Policies User
Wireless Monitor User
Wireless Network (IEEE 802.11) Policies User
WMI Control User
DFS Management User
DFS Management Extension User
Disk Management Extension User
File Server Resource Manager User
File Server Resource Manager Extension User
Group Policy Management Editor User
Group Policy Starter GPO Editor User
Share and Storage Management User
Share and Storage Management Extension User
Storage Manager for SANs User
Storage Manager for SANS Extension User
Turn off Windows Mobility Center Machine
Turn off Windows Mobility Center User
Turn off Windows presentation settings Machine
Turn off Windows presentation settings User
Do not allow Windows Movie Maker to run Machine
Do not allow Windows Movie Maker to run User
Turn off Windows Movie Maker automatic codec downloads machine
Turn off Windows Movie Maker automatic codec downloads user
Turn off Windows Movie Maker online Web links Machine
Turn off Windows Movie Maker online Web links User
Turn off Windows Movie Maker saving to online video hosting provider machine
Turn off Windows Movie Maker saving to online video hosting provider user
Microsoft Support Diagnostic Tool: Configure execution level Machine
Microsoft Support Diagnostic Tool: Restrict tool download Machine
Allow admin to install from Terminal Services session Machine
Always install with elevated privileges Machine
Always install with elevated privileges User
Baseline file cache maximum size Machine
Cache transforms in secure location on workstation Machine
Disable IE security prompt for Windows Installer scripts Machine
Disable logging via package settings Machine
Disable Windows Installer Machine
Enable user control over installs Machine
Enable user to browse for source while elevated Machine
Enable user to patch elevated products Machine
Enable user to use media source while elevated Machine
Enforce upgrade component rules Machine
Logging Machine
Prevent removable media source for any install User
Prohibit Flyweight Patching Machine
Prohibit non-administrators from applying vendor signed updates Machine
Prohibit patching Machine
Prohibit removal of updates Machine
Prohibit rollback Machine
Prohibit rollback User
Prohibit Use of Restart Manager Machine
Prohibit User Installs Machine
Remove browse dialog box for new source Machine
Search order User
Turn off creation of System Restore Checkpoints Machine
Allow the Network Access Protection client to support the 802.1x Enforcement Client component Machine
Allow cryptography algorithms compatible with Windows NT 4.0 Machine
Automated Site Coverage by the DC Locator DNS SRV Records Machine
Contact PDC on logon failure Machine
DC Locator DNS records not registered by the DCs Machine
Do not process incoming mailslot messages used for domain controller location based on NetBIOS domain names Machine
Domain Controller Address Type Returned Machine
Dynamic Registration of the DC Locator DNS Records Machine
Expected dial-up delay on logon Machine
Final DC Discovery Retry Setting for Background Callers Machine
Force Rediscovery Interval Machine
Initial DC Discovery Retry Setting for Background Callers Machine
Location of the DCs hosting a domain with single label DNS name Machine
Log File Debug Output Level Machine
Maximum DC Discovery Retry Interval Setting for Background Callers Machine
Maximum Log File Size Machine
Negative DC Discovery Cache Setting Machine
Netlogon share compatibility Machine
Positive Periodic DC Cache Refresh for Background Callers Machine
Positive Periodic DC Cache Refresh for Non-Background Callers Machine
Priority Set in the DC Locator DNS SRV Records Machine
Refresh Interval of the DC Locator DNS Records Machine
Scavenge Interval Machine
Site Name Machine
Sites Covered by the Application Directory Partition Locator DNS SRV Records Machine
Sites Covered by the DC Locator DNS SRV Records Machine
Sites Covered by the GC Locator DNS SRV Records Machine
Sysvol share compatibility Machine
Try Next Closest Site Machine
TTL Set in the DC Locator DNS Records Machine
Weight Set in the DC Locator DNS SRV Records Machine
Ability to change properties of an all user remote access connection User
Ability to delete all user remote access connections User
Ability to Enable/Disable a LAN connection User
Ability to rename all user remote access connections User
Ability to rename LAN connections User
Ability to rename LAN connections or remote access connections available to all users User
Enable Windows 2000 Network Connections settings for Administrators User
Prohibit access to properties of a LAN connection User
Prohibit access to properties of components of a LAN connection User
Prohibit access to properties of components of a remote access connection User
Prohibit access to the Advanced Settings item on the Advanced menu User
Prohibit access to the New Connection Wizard User
Prohibit access to the Remote Access Preferences item on the Advanced menu User
Prohibit adding and removing components for a LAN or remote access connection User
Prohibit changing properties of a private remote access connection User
Prohibit connecting and disconnecting a remote access connection User
Prohibit deletion of remote access connections User
Prohibit Enabling/Disabling components of a LAN connection User
Prohibit installation and configuration of Network Bridge on your DNS domain network Machine
Prohibit renaming private remote access connections User
Prohibit TCP/IP advanced configuration User
Prohibit use of Internet Connection Firewall on your DNS domain network Machine
Prohibit use of Internet Connection Sharing on your DNS domain network Machine
Prohibit viewing of status for an active connection User
Turn off notifications when a connection has only limited or no connectivity User
Turn off Connect to a Network Projector Machine
Turn off Connect to a Network Projector User
Action on server disconnect Machine
Action on server disconnect User
Administratively assigned offline files Machine
Administratively assigned offline files User
Allow or Disallow use of the Offline Files feature Machine
At logoff, delete local copy of user’s offline files Machine
Configure Slow link speed Machine
Configure slow-link mode Machine
Default cache size Machine
Encrypt the Offline Files cache Machine
Event logging level Machine
Event logging level User
Files not cached Machine
Initial reminder balloon lifetime Machine
Initial reminder balloon lifetime User
Limit disk space used by offline files Machine
Non-default server disconnect actions Machine
Non-default server disconnect actions User
Prevent use of Offline Files folder Machine
Prevent use of Offline Files folder User
Prohibit 'Make Available Offline' for these file and folders Machine
Prohibit 'Make Available Offline' for these file and folders User
Prohibit user configuration of Offline Files Machine
Prohibit user configuration of Offline Files User
Reminder balloon frequency Machine
Reminder balloon frequency User
Reminder balloon lifetime Machine
Reminder balloon lifetime User
Remove 'Make Available Offline' Machine
Remove 'Make Available Offline' User
Subfolders always available offline Machine
Synchronize all offline files before logging off Machine
Synchronize all offline files before logging off User
Synchronize all offline files when logging on Machine
Synchronize all offline files when logging on User
Synchronize offline files before suspend Machine
Synchronize offline files before suspend User
Turn off reminder balloons Machine
Turn off reminder balloons User
Turn on economical application of administratively assigned Offline Files Machine
Disable password strength validation for Peer Grouping Machine
Set PNRP cloud to resolve only Machine
Set the Seed Server Machine
Turn off Microsoft Peer-to-Peer Networking Services Machine
Turn off Multicast Bootstrap Machine
Turn off PNRP cloud creation Machine
Make Parental Controls control panel visible on a Domain Machine
Detect application failures caused by deprecated Windows DLLs or COM objects Machine
Detect application install failures Machine
Detect application installers that need to be run as administrator Machine
Detect applications unable to launch installers under UAC Machine
Notify blocked drivers Machine
Turn off Tablet PC Pen Training Machine
Turn off Tablet PC Pen Training User
Turn off access to the OEM and Microsoft branding section machine
Turn off access to the OEM and Microsoft branding section user
Turn off access to the performance center core section machine
Turn off access to the performance center core section user
Turn off access to the solutions to performance problems section machine
Turn off access to the solutions to performance problems section user
Allow Standby States (S1-S3) When Sleeping (On Battery) Machine
Allow Standby States (S1-S3) When Sleeping (Plugged In) Machine
Critical Battery Notification Action Machine
Critical Battery Notification Level Machine
Do not turn off system power after a Windows system shutdown has occurred. Machine
Low Battery Notification Action Machine
Low Battery Notification Level Machine
Prompt for password on resume from hibernate / suspend User
Require a Password When a Computer Wakes (On Battery) Machine
Require a Password When a Computer Wakes (Plugged In) Machine
Select an Active Power Plan Machine
Select the Lid Switch Action (On Battery) Machine
Select the Lid Switch Action (Plugged In) Machine
Select the Power Button Action (On Battery) Machine
Select the Power Button Action (Plugged In) Machine
Select the Sleep Button Action (On Battery) Machine
Select the Sleep Button Action (Plugged In) Machine
Select the Start Menu Power Button Action (On Battery) Machine
Select the Start Menu Power Button Action (Plugged In) Machine
Specify a Custom Active Power Plan Machine
Specify the System Hibernate Timeout (On Battery) Machine
Specify the System Hibernate Timeout (Plugged In) Machine
Specify the System Sleep Timeout (On Battery) Machine
Specify the System Sleep Timeout (Plugged In) Machine
Turn Off Adaptive Display Timeout (On Battery) Machine
Turn Off Adaptive Display Timeout (Plugged In) Machine
Turn Off Hybrid Sleep (On Battery) Machine
Turn Off Hybrid Sleep (Plugged In) Machine
Turn Off Low Battery User Notification Machine
Turn Off the Display (On Battery) Machine
Turn Off the Display (Plugged In) Machine
Turn Off the Hard Disk (On Battery) Machine
Turn Off the Hard Disk (Plugged In) Machine
Turn on Applications to Prevent Sleep Transitions (On Battery) Machine
Turn on Applications to Prevent Sleep Transitions (Plugged In) Machine
Hide previous versions list for local files Machine
Hide previous versions list for local files User
Hide previous versions list for remote files Machine
Hide previous versions list for remote files User
Hide previous versions of files on backup location Machine
Hide previous versions of files on backup location User
Prevent restoring local previous versions Machine
Prevent restoring local previous versions User
Prevent restoring previous versions from backups Machine
Prevent restoring previous versions from backups User
Prevent restoring remote previous versions Machine
Prevent restoring remote previous versions User
Add Printer wizard - Network scan page (Managed network) Machine
Add Printer wizard - Network scan page (Unmanaged network) Machine
Allow Print Spooler to accept client connections Machine
Allow printers to be published Machine
Allow pruning of published printers Machine
Always render print jobs on the server Machine
Automatically publish new printers in Active Directory Machine
Browse a common web site to find printers User
Browse the network to find printers User
Check published state Machine
Computer location Machine
Custom support URL in the Printers folder's left pane Machine
Default Active Directory path when searching for printers User
Directory pruning interval Machine
Directory pruning priority Machine
Directory pruning retry Machine
Disallow installation of printers using kernel-mode drivers Machine
Log directory pruning retry events Machine
Only use Package Point and print User
Package Point and print - Approved servers User
Point and Print Restrictions User
Pre-populate printer search location text Machine
Prevent addition of printers User
Prevent deletion of printers User
Printer browsing Machine
Prune printers that are not automatically republished Machine
Web-based printing Machine
Hide "Get Programs" page User
Hide "Installed Updates" page User
Hide "Programs and Features" page User
Hide "Set Program Access and Computer Defaults" page User
Hide "Windows Features" User
Hide "Windows Marketplace" User
Hide the Programs Control Panel User
Set the number of retries for Password sync Servers Machine
Set the retry interval for Password sync Servers Machine
Turn On Extensive logging for Password sync Servers Machine
Turn on the Windows to NIS password sync for migrated users for Password sync Servers Machine
Best effort service type Machine
Controlled load service type Machine
Guaranteed service type Machine
Limit outstanding packets Machine
Limit reservable bandwidth Machine
Network control service type Machine
Non-conforming packets Machine
Qualitative service type Machine
Set timer resolution Machine
Activate Shutdown Event Tracker System State Data feature Machine
Display Shutdown Event Tracker Machine
Enable Persistent Time Stamp Machine
Report unplanned shutdown events Machine
Allow only Vista or later connections Machine
Customize Warning Messages Machine
Offer Remote Assistance Machine
Solicited Remote Assistance Machine
Turn on bandwidth optimization Machine
Turn on session logging Machine
All Removable Storage classes: Deny all access Machine
All Removable Storage classes: Deny all access User
All Removable Storage: Allow direct access in remote sessions Machine
CD and DVD: Deny read access Machine
CD and DVD: Deny read access User
CD and DVD: Deny write access Machine
CD and DVD: Deny write access User
Custom Classes: Deny read access Machine
Custom Classes: Deny read access User
Custom Classes: Deny write access Machine
Custom Classes: Deny write access User
Floppy Drives: Deny read access Machine
Floppy Drives: Deny read access User
Floppy Drives: Deny write access Machine
Floppy Drives: Deny write access User
Removable Disks: Deny read access Machine
Removable Disks: Deny read access User
Removable Disks: Deny write access Machine
Removable Disks: Deny write access User
Tape Drives: Deny read access Machine
Tape Drives: Deny read access User
Tape Drives: Deny write access Machine
Tape Drives: Deny write access User
Time (in seconds) to force reboot Machine
Time (in seconds) to force reboot User
WPD Devices: Deny read access Machine
WPD Devices: Deny read access User
WPD Devices: Deny write access Machine
WPD Devices: Deny write access User
Ignore Delegation Failure Machine
Minimum Idle Connection Timeout for RPC/HTTP connections Machine
Propagation of extended error information Machine
Restrictions for Unauthenticated RPC clients Machine
RPC Endpoint Mapper Client Authentication Machine
RPC Troubleshooting State Information Machine
Allow logon scripts when NetBIOS or WINS is disabled Machine
Maximum wait time for Group Policy scripts Machine
Run legacy logon scripts hidden User
Run logoff scripts visible User
Run logon scripts synchronously Machine
Run logon scripts synchronously User
Run logon scripts visible User
Run shutdown scripts visible Machine
Run startup scripts asynchronously Machine
Run startup scripts visible Machine
Allow indexing of encrypted files Machine
Allow using diacritics Machine
Indexer data location Machine
Prevent displaying advanced indexing options in the Control Panel Machine
Prevent indexing e-mail attachments Machine
Prevent indexing files in Offline Files cache Machine
Prevent indexing Microsoft Office Outlook Machine
Prevent indexing public folders Machine
Prevent indexing uncached Exchange folders Machine
Turn on Security Center (Domain PCs only) Machine
Configure the refresh interval for Server Manager Machine
Do not display Initial Configuration Tasks window automatically at logon Machine
Do not display Manage Your Server page at logon Machine
Do not display Server Manager automatically at logon Machine
Specify Windows installation file location Machine
Specify Windows Service Pack installation file location Machine
Allow DFS roots to be published User
Allow shared folders to be published User
Prevent users from sharing files within their profile. User
Don't run specified Windows applications User
Prevent access to registry editing tools User
Prevent access to the command prompt User
Run only specified Windows applications User
Do not display the Welcome Center at user logon User
Disable unpacking and installation of gadgets that are not digitally signed. Machine
Disable unpacking and installation of gadgets that are not digitally signed. User
Override the More Gadgets Link Machine
Override the More Gadgets Link User
Turn Off User Installed Windows Sidebar Gadgets Machine
Turn Off User Installed Windows Sidebar Gadgets User
Turn off Windows Sidebar Machine
Turn off Windows Sidebar User
Delete data from devices running Microsoft firmware when a user logs off from the computer. Machine
Delete data from devices running Microsoft firmware when a user logs off from the computer. User
Require a PIN to access data on devices running Microsoft firmware Machine
Require a PIN to access data on devices running Microsoft firmware User
Turn off automatic wake Machine
Turn off automatic wake User
Turn off Windows SideShow Machine
Turn off Windows SideShow User
Allow certificates with no extended key usage certificate attribute Machine
Allow Integrated Unblock screen to be displayed at the time of logon Machine
Allow signature keys valid for Logon Machine
Allow time invalid certificates Machine
Allow user name hint Machine
Configure root certificate clean up Machine
Display string when smart card is blocked Machine
Filter duplicate logon certificates Machine
Force the reading of all certificates from the smart card Machine
Prevent plaintext PINs from being returned by Credential Manager Machine
Reverse the subject name stored in a certificate when displaying Machine
Turn on certificate propagation from smart card Machine
Turn on root certificate propagation from smart card Machine
Set update interval for NIS subordinate servers Machine
Turn on extensive logging for domain controllers running Server for NIS Machine
Communities Machine
Permitted Managers Machine
Traps for public community Machine
Do not allow Sound Recorder to run Machine
Do not allow Sound Recorder to run User
Add "Run in Separate Memory Space" check box to Run dialog box User
Add Logoff to the Start Menu User
Add the Run command to the Start Menu User
Clear history of recently opened documents on exit User
Clear the recent programs list for new users User
Do not display any custom toolbars in the taskbar User
Do not keep history of recently opened documents User
Do not search communications User
Do not search files User
Do not search Internet User
Do not search programs User
Do not use the search-based method when resolving shell shortcuts User
Do not use the tracking-based method when resolving shell shortcuts User
Force classic Start Menu User
Gray unavailable Windows Installer programs Start Menu shortcuts User
Hide the notification area User
Lock the Taskbar User
Prevent changes to Taskbar and Start Menu Settings User
Prevent grouping of taskbar items User
Remove access to the context menus for the taskbar User
Remove All Programs list from the Start menu User
Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commands User
Remove Balloon Tips on Start Menu items User
Remove Clock from the system notification area User
Remove common program groups from Start Menu User
Remove Default Programs link from the Start menu. User
Remove Documents icon from Start Menu User
Remove Drag-and-drop context menus on the Start Menu User
Remove Favorites menu from Start Menu User
Remove frequent programs list from the Start Menu User
Remove Games link from Start Menu User
Remove Help menu from Start Menu User
Remove links and access to Windows Update User
Remove Logoff on the Start Menu User
Remove Music icon from Start Menu User
Remove Network Connections from Start Menu User
Remove Network icon from Start Menu User
Remove Pictures icon from Start Menu User
Remove pinned programs list from the Start Menu User
Remove programs on Settings menu User
Remove Recent Items menu from Start Menu User
Remove Run menu from Start Menu User
Remove Search Computer link User
Remove Search link from Start Menu User
Remove the "Undock PC" button from the Start Menu User
Remove user folder link from Start Menu User
Remove user name from Start Menu User
Remove user's folders from the Start Menu User
Show QuickLaunch on Taskbar User
Turn off notification area cleanup User
Turn off personalized menus User
Turn off user tracking User
Use folders instead of library User
Set the Email IDs to which notifications are to be sent Machine
Set the SMTP Server used to send notifications Machine
Set the Time interval in minutes for logging accounting data Machine
Turn on Accounting for WSRM Machine
Turn off Configuration Machine
Turn off System Restore Machine
For tablet pen input, don’t show the Input Panel icon Machine
For tablet pen input, don’t show the Input Panel icon User
For touch input, don’t show the Input Panel icon Machine
For touch input, don’t show the Input Panel icon User
Include rarely used Chinese, Kanji, or Hanja characters Machine
Include rarely used Chinese, Kanji, or Hanja characters User
Prevent Input Panel tab from appearing Machine
Prevent Input Panel tab from appearing User
Switch to the Simplified Chinese (PRC) gestures Machine
Switch to the Simplified Chinese (PRC) gestures User
Turn off AutoComplete integration with Input Panel Machine
Turn off AutoComplete integration with Input Panel User
Turn off password security in Input Panel Machine
Turn off password security in Input Panel User
Turn off tolerant and Z-shaped scratch-out gestures Machine
Turn off tolerant and Z-shaped scratch-out gestures User
Do not allow Inkball to run Machine
Do not allow Inkball to run User
Do not allow printing to Journal Note Writer Machine
Do not allow printing to Journal Note Writer User
Do not allow Snipping Tool to run Machine
Do not allow Snipping Tool to run User
Do not allow Sticky Notes to be run Machine
Do not allow Sticky Notes to be run User
Do not allow Windows Journal to be run Machine
Do not allow Windows Journal to be run User
Prevent Back-ESC mapping Machine
Prevent Back-ESC mapping User
Prevent flicks Machine
Prevent flicks User
Prevent Flicks Learning Mode Machine
Prevent Flicks Learning Mode User
Prevent launch an application Machine
Prevent launch an application User
Prevent press and hold Machine
Prevent press and hold User
Turn off hardware buttons Machine
Turn off hardware buttons User
Turn off pen feedback Machine
Turn off pen feedback User
Lock all taskbar settings User
Prevent users from adding or removing toolbars User
Prevent users from moving taskbar to another screen dock location User
Prevent users from rearranging toolbars User
Prevent users from resizing the taskbar User
Remove the battery meter User
Remove the networking icon User
Remove the volume control icon User
Turn off all balloon notifications User
Turn off taskbar thumbnails User
Hide Advanced Properties Checkbox in Add Scheduled Task Wizard Machine
Hide Advanced Properties Checkbox in Add Scheduled Task Wizard User
Hide Property Pages Machine
Hide Property Pages User
Prevent Task Run or End Machine
Prevent Task Run or End User
Prohibit Browse Machine
Prohibit Browse User
Prohibit Drag-and-Drop Machine
Prohibit Drag-and-Drop User
Prohibit New Task Creation Machine
Prohibit New Task Creation User
Prohibit Task Deletion Machine
Prohibit Task Deletion User
Allow .rdp files from unknown publishers Machine
Allow .rdp files from unknown publishers User
Allow .rdp files from valid publishers and user's default .rdp settings Machine
Allow .rdp files from valid publishers and user's default .rdp settings User
Allow audio redirection Machine
Allow time zone redirection Machine
Allow users to connect remotely using Terminal Services Machine
Always prompt for password upon connection Machine
Always show desktop on connection Machine
Automatic reconnection Machine
Configure keep-alive connection interval Machine
Configure server authentication for client Machine
Configure TS Session Broker farm name Machine
Configure TS Session Broker server name Machine
Deny logoff of an administrator logged in to the console session Machine
Do not allow client printer redirection Machine
Do not allow clipboard redirection Machine
Do not allow COM port redirection Machine
Do not allow drive redirection Machine
Do not allow local administrators to customize permissions Machine
Do not allow LPT port redirection Machine
Do not allow passwords to be saved Machine
Do not allow passwords to be saved User
Do not allow smart card device redirection Machine
Do not allow supported Plug and Play device redirection Machine
Do not delete temp folder upon exit Machine
Do not set default client printer to be default printer in a session Machine
Do not use temporary folders per session Machine
Enable connection through TS Gateway User
Enforce Removal of Remote Desktop Wallpaper Machine
Hide notifications about TS Licensing problems that affect the terminal server Machine
Join TS Session Broker Machine
License server security group Machine
Limit maximum color depth Machine
Limit number of connections Machine
Prevent license upgrade Machine
Prompt for credentials on the client computer Machine
Remove "Disconnect" option from Shut Down dialog Machine
Remove Windows Security item from Start menu Machine
Require secure RPC communication Machine
Require use of specific security layer for remote (RDP) connections Machine
Require user authentication for remote connections by using Network Level Authentication Machine
Restrict Terminal Services users to a single remote session Machine
Server Authentication Certificate Template Machine
Set client connection encryption level Machine
Set compression algorithm for RDP data Machine
Set path for TS Roaming User Profile Machine
Set rules for remote control of Terminal Services user sessions Machine
Set rules for remote control of Terminal Services user sessions User
Set the Terminal Services licensing mode Machine
Set time limit for active but idle Terminal Services sessions Machine
Set time limit for active but idle Terminal Services sessions User
Set time limit for active Terminal Services sessions Machine
Set time limit for active Terminal Services sessions User
Set time limit for disconnected sessions Machine
Set time limit for disconnected sessions User
Set TS Gateway authentication method User
Set TS Gateway server address User
Set TS User Home Directory Machine
Specify SHA1 thumbprints of certificates representing trusted .rdp publishers Machine
Specify SHA1 thumbprints of certificates representing trusted .rdp publishers User
Specify terminal server fallback printer driver behavior Machine
Start a program on connection Machine
Start a program on connection User
Terminate session when time limits are reached Machine
Terminate session when time limits are reached User
Use IP Address Redirection Machine
Use mandatory profiles on the terminal server Machine
Use the specified Terminal Services license servers Machine
Allow remote start of unlisted programs Machine
Allow time zone redirection User
Always show desktop on connection User
Do not allow clipboard redirection User
Redirect only the default client printer Machine
Redirect only the default client printer User
Remove remote desktop wallpaper User
Set time limit for logoff of RemoteApp sessions Machine
Set time limit for logoff of RemoteApp sessions User
Use Terminal Services Easy Print printer driver first Machine
Use Terminal Services Easy Print printer driver first User
Use TS Session Broker load balancing Machine
Turn off the caching of thumbnails in hidden thumbs.db files User
Turn off the display of thumbnails and only display icons on network folders User
Turn off the display of thumbnails and only display icons. User
Turn off Tablet PC touch input Machine
Turn off Tablet PC touch input User
Configure the list of blocked TPM commands Machine
Ignore the default list of blocked TPM commands Machine
Ignore the local list of blocked TPM commands Machine
Turn on TPM backup to Active Directory Domain Services Machine
Prevent backing up to local disks Machine
Prevent backing up to local disks User
Prevent backing up to network shared folder Machine
Prevent backing up to network shared folder User
Prevent backing up to optical media (CD/DVD) Machine
Prevent backing up to optical media (CD/DVD) User
Prevent the user from running the Backup Status and Configuration program Machine
Prevent the user from running the Backup Status and Configuration program User
Turn off backup configuration Machine
Turn off backup configuration User
Turn off Complete PC Backup functionality Machine
Turn off Complete PC Backup functionality User
Turn off restore functionality Machine
Turn off restore functionality User
Add the Administrators security group to roaming user profiles Machine
Connect home directory to root of the share User
Delete cached copies of roaming profiles Machine
Delete user profiles older than a specified number of days on system restart Machine
Do not check for user ownership of Roaming Profile Folders Machine
Do not detect slow network connections Machine
Do not forcefully unload the users registry at user logoff Machine
Do not log users on with temporary profiles Machine
Exclude directories in roaming profile User
Leave Windows Installer and Group Policy Software Installation Data Machine
Limit profile size User
Maximum retries to unload and update user profile Machine
Network directories to sync at Logon/Logoff time only User
Only allow local user profiles Machine
Prevent Roaming Profile changes from propagating to the server Machine
Prompt user when a slow network connection is detected Machine
Set maximum wait time for the network if a user has a roaming user profile or remote home directory Machine
Set roaming profile path for all users logging onto this computer Machine
Slow network connection timeout for user profiles Machine
Timeout for dialog boxes Machine
Wait for remote user profile Machine
Configure encryption method Machine
Configure TPM platform validation profile Machine
Control Panel Setup: Configure recovery folder Machine
Control Panel Setup: Configure recovery options Machine
Control Panel Setup: Enable advanced startup options Machine
Prevent memory overwrite on restart Machine
Turn on BitLocker backup to Active Directory Domain Services Machine
Configure Windows NTP Client Machine
Enable Windows NTP Client Machine
Enable Windows NTP Server Machine
Global Configuration Settings Machine
Diagnostics: Configure scenario execution level Machine
Diagnostics: Configure scenario retention Machine
Turn off Windows Calendar Machine
Turn off Windows Calendar User
Allow only system backup Machine
Disallow locally attached storage as backup target Machine
Disallow network as backup target Machine
Disallow optical media as backup target Machine
Disallow run-once backups Machine
Turn off Windows Meeting Space Machine
Turn off Windows Meeting Space User
Turn on Windows Meeting Space auditing Machine
Turn on Windows Meeting Space auditing User
Prohibit installing or uninstalling color profiles Machine
Prohibit installing or uninstalling color profiles User
Configuration of wireless settings using Windows Connect Now Machine
Prohibit Access of the Windows Connect Now wizards Machine
Prohibit Access of the Windows Connect Now wizards User
Check for New Signatures Before Scheduled Scans Machine
Configure Microsoft SpyNet Reporting Machine
Download Entire Signature Set Machine
Enable Logging Known Good Detections Machine
Enable Logging Unknown Detection Machine
Turn off Real-Time Protection Prompts for Unknown Detection Machine
Turn off Windows Defender Machine
Turn on definition updates through both WSUS and Windows Update Machine
Allow only per user or approved shell extensions User
Display confirmation dialog when deleting files User
Do not move deleted files to the Recycle Bin User
Do not request alternate credentials User
Do not track Shell shortcuts during roaming User
Hide the common dialog back button User
Hide the common dialog places bar User
Hide the dropdown list of recent files User
Hide these specified drives in My Computer User
Hides the Manage item on the Windows Explorer context menu User
Items displayed in Places Bar User
Maximum allowed Recycle Bin size User
Maximum number of recent documents User
No Computers Near Me in Network Locations User
No Entire Network in Network Locations User
Prevent access to drives from My Computer User
Remove "Map Network Drive" and "Disconnect Network Drive" User
Remove CD Burning features User
Remove DFS tab User
Remove File menu from Windows Explorer User
Remove Hardware tab User
Remove Search button from Windows Explorer User
Remove Security tab User
Remove Shared Documents from My Computer User
Remove UI to change keyboard navigation indicator setting User
Remove UI to change menu animation setting User
Remove Windows Explorer's default context menu User
Removes the Folder Options menu item from the Tools menu User
Request credentials for network installations User
Turn off caching of thumbnail pictures User
Turn off shell protocol protected mode Machine
Turn off shell protocol protected mode User
Turn off Windows+X hotkeys User
Turn on Classic Shell User
Hide the file scan progress window Machine
Limit Windows File Protection cache size Machine
Set Windows File Protection scanning Machine
Specify Windows File Protection cache location Machine
Windows Firewall: Allow authenticated IPSec bypass Machine
Windows Firewall: Allow ICMP exceptions Machine
Windows Firewall: Allow ICMP exceptions Machine
Windows Firewall: Allow inbound file and printer sharing exception Machine
Windows Firewall: Allow inbound file and printer sharing exception Machine
Windows Firewall: Allow inbound remote administration exception Machine
Windows Firewall: Allow inbound remote administration exception Machine
Windows Firewall: Allow inbound Remote Desktop exceptions Machine
Windows Firewall: Allow inbound Remote Desktop exceptions Machine
Windows Firewall: Allow inbound UPnP framework exceptions Machine
Windows Firewall: Allow inbound UPnP framework exceptions Machine
Windows Firewall: Allow local port exceptions Machine
Windows Firewall: Allow local port exceptions Machine
Windows Firewall: Allow local program exceptions Machine
Windows Firewall: Allow local program exceptions Machine
Windows Firewall: Allow logging Machine
Windows Firewall: Allow logging Machine
Windows Firewall: Define inbound port exceptions Machine
Windows Firewall: Define inbound port exceptions Machine
Windows Firewall: Define inbound program exceptions Machine
Windows Firewall: Define inbound program exceptions Machine
Windows Firewall: Do not allow exceptions Machine
Windows Firewall: Do not allow exceptions Machine
Windows Firewall: Prohibit notifications Machine
Windows Firewall: Prohibit notifications Machine
Windows Firewall: Prohibit unicast response to multicast or broadcast requests Machine
Windows Firewall: Prohibit unicast response to multicast or broadcast requests Machine
Windows Firewall: Protect all network connections Machine
Windows Firewall: Protect all network connections Machine
Turn off the communities features Machine
Turn off the communities features User
Turn off Windows Mail application Machine
Turn off Windows Mail application User
Prevent Windows Media DRM Internet Access Machine
Allow Screen Saver User
Configure HTTP Proxy User
Configure MMS Proxy User
Configure Network Buffering User
Configure RTSP Proxy User
Do Not Show Anchor User
Do Not Show First Use Dialog Boxes Machine
Hide Network Tab User
Hide Privacy Tab User
Hide Security Tab User
Prevent Automatic Updates Machine
Prevent CD and DVD Media Information Retrieval User
Prevent Codec Download User
Prevent Desktop Shortcut Creation Machine
Prevent Media Sharing Machine
Prevent Music File Media Information Retrieval User
Prevent Quick Launch Toolbar Shortcut Creation Machine
Prevent Radio Station Preset Retrieval User
Prevent Video Smoothing Machine
Set and Lock Skin User
Streaming Media Protocols User
Do not allow Windows Messenger to be run Machine
Do not allow Windows Messenger to be run User
Do not automatically start Windows Messenger initially Machine
Do not automatically start Windows Messenger initially User
Allow automatic configuration of listeners Machine
Allow Basic authentication Machine
Allow Basic authentication Machine
Allow unencrypted traffic Machine
Allow unencrypted traffic Machine
Disallow Digest authentication Machine
Disallow Kerberos authentication Machine
Disallow Kerberos authentication Machine
Disallow Negotiate authentication Machine
Disallow Negotiate authentication Machine
Trusted Hosts Machine
Allow Remote Shell Access Machine
MaxConcurrentUsers Machine
Specify idle Timeout Machine
Specify maximum amount of memory in MB per Shell Machine
Specify maximum number of processes per Shell Machine
Specify maximum number of remote shells per user Machine
Specify Shell Timeout Machine
Allow Automatic Updates immediate installation Machine
Allow non-administrators to receive update notifications Machine
Allow signed updates from an intranet Microsoft update service location Machine
Automatic Updates detection frequency Machine
Configure Automatic Updates Machine
Delay Restart for scheduled installations Machine
Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box Machine
Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box User
Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog box machine
Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog box user
Enable client-side targeting Machine
Enabling Windows Update Power Management to automatically wake up the system to install scheduled updates Machine
No auto-restart for scheduled Automatic Updates installations Machine
Remove access to use all Windows Update features User
Re-prompt for restart with scheduled installations Machine
Reschedule Automatic Updates scheduled installations Machine
Specify intranet Microsoft update service location Machine
Turn on recommended updates via Automatic Updates Machine
Windows Automatic Updates User
Timeout for hung logon sessions during shutdown Machine
Turn off legacy remote shutdown interface Machine
Custom User Interface User
Disable or enable software Secure Attention Sequence Machine
Display information about previous logons during user logon Machine
Remove logon hours expiration warnings User
Report when logon server was not available during user logon machine
Report when logon server was not available during user logon user
Set action to take when logon hours expire User
Turn off automatic termination of applications that block or cancel shutdown Machine
Custom Instant Search Internet search provider User
Policy Path
Windows Components\ActiveX Installer Service
Control Panel\Add or Remove Programs
ADFS
Windows Components\Application Compatibility
Windows Components\Attachment Manager
Windows Components\AutoPlay Policies
Network\Background Intelligent Transfer Service (BITS)
Windows Components\Import Video
Windows Components\Import Video
Windows Components\Windows Customer Experience Improvement Program
Windows Components\Windows Customer Experience Improvement Program
Network\SSL Configuration Settings
System
System
Windows Components\NetMeeting
Windows Components\NetMeeting\Application Sharing
Windows Components\NetMeeting\Audio & Video
Windows Components\NetMeeting\Options Page
Control Panel
Control Panel
Control Panel
Control Panel
Control Panel\Display
Control Panel\Display\Desktop Themes
Control Panel\User Accounts
Logon
Logon
System\Credentials Delegation
Windows Components\Credential User Interface
Windows Components\Credential User Interface
System\Ctrl+Alt+Del Options
System\Distributed COM\Application Compatibility Settings
System\Distributed COM\Application Compatibility Settings
Desktop\Desktop
Desktop\Desktop
Desktop\Desktop
Desktop\Desktop
Desktop\Desktop
Desktop
Desktop
Desktop\Desktop
Desktop\Active Directory
Desktop
Desktop
Desktop
Desktop
Desktop\Desktop
Desktop
Desktop\Desktop
Desktop\Desktop
Desktop\Desktop
Desktop\Desktop
Desktop
Desktop
Desktop
Desktop
Desktop
Desktop
Desktop
Desktop
System\Device Installation\Device Installation Restrictions
System\Driver Installation
System\Device Installation
Network
Windows Components\Digital Locker
Windows Components\Digital Locker
Troubleshooting and Diagnostics\Disk Diagnostic
Troubleshooting and Diagnostics\Disk Diagnostic
System\Disk NV Cache
System\Disk Quotas
System\Disk Quotas
System\Disk Quotas
System\Disk Quotas
System\Disk Quotas
System\Disk Quotas
System
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Network\DNS Client
Windows Components\Desktop Window Manager\Window Frame Coloring
Windows Components\Desktop Window Manager
System
Windows Components\Windows Error Reporting\Advanced Error Reporting Settin
Windows Components\Windows Error Reporting\Consent
Windows Components\Windows Error Reporting
Windows Components\Event Forwarding
Windows Components\Event Log Service\Application
Windows Components\Event Log Service\Security
Windows Components\Event Log Service\Setup
Windows Components\Event Log Service\System
Windows Components\Event Viewer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Troubleshooting and Diagnostics\Corrupted File Recovery
System\NTFS Filesystem
System\Folder Redirection
Windows Explorer\Explorer Frame Pane
Windows Explorer\Explorer Frame Pane
Windows Components\Game Explorer
Windows Components\Game Explorer
System
System\Locale Services
Control Panel\Regional and Language Options
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
System\Group Policy
GroupPolicy:PolicyPolicies
\Logging and tracing
\MMC_Preferences
\MMC_Preferences
\MMC_Preferences
\MMC_Preferences
\MMC_Preferences
\MMC_Preferences
\MMC_Preferences
\MMC_Preferences
\MMC_Preferences
\MMC_Preferences
\MMC_Preferences
\MMC_Preferences
\MMC_Preferences
\MMC_Preferences
\Plugins
\MMC_Preferences
\MMC_Preferences
\MMC_Preferences
\MMC_Preferences
\MMC_Preferences
\MMC_Preferences
\MMC_Preferences
\MMC_Preferences
\MMC_Preferences
\MMC_Preferences
\MMC_Preferences
Group Policy
System
System
System
Windows Components\Online Assistance
Internet Communication settings
Windows Components\Online Assistance
System\Windows HotStart
System\Windows HotStart
Internet Communication Management
Internet Communication Management
Windows Components\Internet Information Services
Windows Components\Internet Explorer\Internet Control Panel\Security Page\Inte
Windows Components\Internet Explorer\Internet Control Panel\Security Page\Loc
Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intr
Windows Components\Internet Explorer\Internet Control Panel\Security Page\Lo
Windows Components\Internet Explorer\Internet Control Panel\Security Page\Rest
Windows Components\Internet Explorer\Internet Control Panel\Security Page\Trus
Windows Components\Internet Explorer
Windows Components\Internet Explorer\Security Features\Add-on Management
Windows Components\Internet Explorer\Security Features\Binary Behavior Security
Windows Components\Internet Explorer\Security Features\Consistent Mime Handl
Windows Components\Internet Explorer\Security Features\Information Bar
Windows Components\Internet Explorer\Security Features\Local Machine Zone Lo
Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Fe
Windows Components\Internet Explorer\Security Features\MK Protocol Security Re
Windows Components\Internet Explorer\Security Features\Network Protocol Lock
Windows Components\Internet Explorer\Security Features\Object Caching Protect
Windows Components\Internet Explorer\Security Features\Protection From Zone E
Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install
Windows Components\Internet Explorer\Security Features\Restrict File Download
Windows Components\Internet Explorer\Security Features\Scripted Window Securit
Windows Components\Internet Explorer\Application Compatibility\Enable cut, co
Windows Components\Internet Explorer\Internet Control Panel\Advanced Page
Windows Components\Internet Explorer\Internet Control Panel\Advanced settings\
Windows Components\Internet Explorer\Internet Control Panel\Advanced settings\P
Windows Components\Internet Explorer\Administrator Approved Controls
Windows Components\Internet Explorer\Toolbars
Windows Components\Internet Explorer\Offline Pages
Windows Components\Internet Explorer\Browser menus
Windows Components\Internet Explorer\Internet Control Panel
Windows Components\Internet Explorer\Security Features
Windows Components\Internet Explorer\Security Features
Windows Components\Internet Explorer\Persistence Behavior
Windows Components\Internet Explorer\Security Features\Network Protocol Lockd
Windows Components\Internet Explorer\Internet Control Panel\Security Page
Windows Components\Internet Explorer\Internet Control Panel\Advanced settings
Windows Components\Internet Explorer\Corporate Settings\Code Download
Windows Components\Internet Explorer\Internet Settings\Component Updates\Help
Windows Components\Internet Explorer\Internet Settings\Display settings\General
Windows Components\Internet Explorer\Internet Settings\Display settings
Windows Components\Internet Explorer\Internet Settings\Display settings\Link Col
Windows Components\RSS Feeds
Windows Components\Internet Explorer\Internet Settings\Component Updates\Period
Windows Components\Internet Explorer\Internet Settings\Component Updates\Period
Windows Components\Internet Explorer\Internet Settings\AutoComplete
Windows Components\Internet Explorer\Internet Settings\URL Encoding
Windows Components\Internet Explorer\Internet Settings\AutoComplete
Tablet PC\Handwriting personalization
System\iSCSI\iSCSI Target Discovery
System\iSCSI\General iSCSI
System\iSCSI\iSCSI Security
System\iSCSI\General iSCSI
System\KDC
System\Kerberos
System\Kerberos
System\Kerberos
Troubleshooting and Diagnostics\Windows Memory Leak Diagnosis
Network\Link-Layer Topology Discovery
Network\Link-Layer Topology Discovery
System\Logon
System\Logon
System\Logon
System\Logon
System\Logon
System\Logon
System\Logon
System
System\Logon
System
System\Logon
System\Logon
System\Logon
System
Windows Components\Windows Media Center
Windows Components\Windows Media Center
Windows Components\Microsoft Management Console\Restricted/Permitted snap-
Windows Components\Microsoft Management Console\Restricted/Permitted snap-i
Windows Components\Microsoft Management Console\Restricted/Permitted snap-
Windows Components\Microsoft Management Console
Windows Components\Microsoft Management Console
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
\Group Policy\Group Policy snap-in extensions
\Group Policy\Resultant Set of Policy snap-in extensions
mmc:MMC_RESTRICT
mmc:MMC_ExtensionSnapins
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
\Group Policy
\Group Policy
\Group Policy
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
\Group Policy
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
mmcsnapins:MMC_GroupPolicy
mmcsnapins:MMC_GroupPolicy
mmc:MMC_RESTRICT
mmc:MMC_RESTRICT
Windows Components\Windows Mobility Center
Windows Components\Windows Mobility Center
Windows Components\Presentation Settings
Windows Components\Presentation Settings
Windows Components\Windows Movie Maker
Windows Components\Windows Movie Maker
Troubleshooting and Diagnostics\Microsoft Support Diagnostic Tool
Troubleshooting and Diagnostics\Microsoft Support Diagnostic Tool
Windows Components\Windows Installer
Windows Components\Network Access Protection
System\Net Logon
System\Net Logon\DC Locator DNS Records
System\Net Logon
System\Net Logon
System\Net Logon
System\Net Logon
System\Net Logon
System\Net Logon
System\Net Logon
System\Net Logon
System\Net Logon
System\Net Logon
System\Net Logon
System\Net Logon
System\Net Logon
System\Net Logon
Network\Network Connections
Windows Components\Network Projector
Windows Components\Network Projector
Network\Offline Files
Network\Microsoft Peer-to-Peer Networking Services
Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Proto
Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protoc
Network\Microsoft Peer-to-Peer Networking Services
Windows Components\Parental Controls
Troubleshooting and Diagnostics\Application Compatibility Diagnostics
Tablet PC\Tablet PC Pen Training
Tablet PC\Tablet PC Pen Training
System\Performance Control Panel
Troubleshooting and Diagnostics\Windows Boot Performance Diagnostics
Troubleshooting and Diagnostics\Windows Standby/Resume Performance Diagnos
Troubleshooting and Diagnostics\Windows System Responsiveness Performance
Troubleshooting and Diagnostics\Windows Shutdown Performance Diagnostics
System\Power Management\Sleep Settings
System\Power Management\Notification Settings
System
System\Power Management
System\Power Management\Button Settings
System\Power Management\Video and Display Settings
System\Power Management\Hard Disk Settings
System\Power Management\Hard Disk Settings
Windows Explorer\Previous Versions
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Control Panel\Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Printers
Control Panel\Programs
Windows Components\Password Synchronization
Network\QoS Packet Scheduler\DSCP value of conforming packets
Network\QoS Packet Scheduler\DSCP value of non-conforming packets
Network\QoS Packet Scheduler\Layer-2 priority value
Network\QoS Packet Scheduler
Troubleshooting and Diagnostics\Windows Resource Exhaustion Detection and Re
System
System
System
wer:CAT_WindowsErrorReportingAdvanced
System\Remote Assistance
System\Removable Storage Access
System\Remote Procedure Call
System\Scripts
System\Scripts
System\Scripts
System\Scripts
System\Scripts
System\Scripts
System\Scripts
System\Scripts
System\Scripts
System\Scripts
Windows Components\Search
Windows Components\Security Center
System\Server Manager
System
System
System
Shared Folders
Shared Folders
Windows Components\Network Sharing
System
System
System
System
Windows Explorer
Windows Components\Windows Sidebar
Windows Components\Windows SideShow
Windows Components\Smart Card
Windows Components\Server for NIS
Windows Components\Server for NIS
Network\SNMP
Network\SNMP
Network\SNMP
Windows Components\Sound Recorder
Windows Components\Sound Recorder
Start Menu and Taskbar
Windows Components\Windows System Resource Manager
System\System Restore
System\System Restore
Tablet PC\Input Panel
Tablet PC\Accessories
Tablet PC\Hardware Buttons
Tablet PC\Pen UX Behaviors
Tablet PC\Pen UX Behaviors
Tablet PC\Pen Flicks Learning
Tablet PC\Pen Flicks Learning
Tablet PC\Cursors
Tablet PC\Cursors
Windows Components\Task Scheduler
Windows Components\Terminal Services\Remote Desktop Connection Client
Windows Components\Terminal Services\Terminal Server\Device and Resource Re
Windows Components\Terminal Services\Terminal Server\Connections
Windows Components\Terminal Services\Terminal Server\Security
Windows Components\Terminal Services\Terminal Server\Remote Session Enviro
Windows Components\Terminal Services\Terminal Server\TS Session Broker
Windows Components\Terminal Services\Terminal Server\Printer Redirection
Windows Components\Terminal Services\Terminal Server\Temporary folders
Windows Components\Terminal Services\Terminal Server\Temporary folders
Windows Components\Terminal Services\TS Gateway
Windows Components\Terminal Services\Terminal Server\Licensing
Windows Components\Terminal Services\TS Licensing
Windows Components\Terminal Services\TS Licensing
Windows Components\Terminal Services\Terminal Server\Profiles
Windows Components\Terminal Services\Terminal Server\Session Time Limits
terminalserver:TS_CONNECTIONS
terminalserver:TS_REDIRECTION
terminalserver:TS_SESSIONS
terminalserver:TS_REDIRECTION
terminalserver:TS_PRINT_REDIRECTION
terminalserver:TS_SESSIONS
terminalserver:TS_SESSION_TIME_LIMITS
terminalserver:TS_SESSION_TIME_LIMITS
terminalserver:TS_SD_Node
Windows Explorer
Windows Explorer
Windows Explorer
Tablet PC\Touch Input
Tablet PC\Touch Input
System\Trusted Platform Module Services
Windows Components\Backup\Client
System\User Profiles
Windows Components\BitLocker Drive Encryption
System\Windows Time Service\Time Providers
System\Windows Time Service
Troubleshooting and Diagnostics
Troubleshooting and Diagnostics
Windows Components\Windows Calendar
Windows Components\Windows Calendar
Backup\Server
Backup\Server
Backup\Server
Backup\Server
Backup\Server
Windows Components\Windows Meeting Space
Windows Components\Windows Color System
Windows Components\Windows Color System
Network\Windows Connect Now
Windows Components\Windows Defender
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer\Common Open File Dialog
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
Windows Explorer
System\Windows File Protection
\Windows Firewall
\Windows Firewall\Domain Profile
\Windows Firewall\Standard Profile
Windows Components\Windows Mail
Windows Components\Windows Media Digital Rights Management
Windows Components\Windows Media Player\Playback
Windows Components\Windows Media Player\Networking
Windows Components\Windows Media Player\User Interface
Windows Components\Windows Media Player
Windows Components\Windows Media Player\Playback
Windows Components\Windows Messenger
Windows Components\Windows Remote Management (WinRM)\WinRM Service
Windows Components\Windows Remote Management (WinRM)\WinRM Client
Windows Components\Windows Remote Shell
Windows Components\Windows Update
System
Windows Components\Shutdown Options
Windows Components\Shutdown Options
System
Windows Components\Windows Logon Options
System\Shutdown Options
Windows Components\Instant Search
Registry information
HKLM\SOFTWARE\Policies\Microsoft\Windows\AxInstaller!ApprovedList, HKLM\SOFTWARE\Policies\Microsoft\Windows\AxInst
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoServices
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoWindowsSetupPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoRemovePage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddFromCDorFloppy
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddFromInternet
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddFromNetwork
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoChooseProgramsPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddRemovePrograms
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoSupportInfo
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!DefaultCategory
HKLM\Software\Policies\Microsoft\Windows\ADFS!DisallowFederationService
HKLM\Software\Policies\Microsoft\Windows\AppCompat!VDMDisallowed
HKCU\Software\Policies\Microsoft\Windows\AppCompat!VDMDisallowed
HKLM\Software\Policies\Microsoft\Windows\AppCompat!DisablePropPage
HKLM\Software\Policies\Microsoft\Windows\AppCompat!DisableEngine
HKLM\Software\Policies\Microsoft\Windows\AppCompat!DisablePCA
HKCU\Software\Policies\Microsoft\Windows\AppCompat!DisablePCA
HKLM\Software\Policies\Microsoft\Windows\AppCompat!DisableWizard
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!DefaultFileTypeRisk
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!SaveZoneInformation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!HideZoneInfoOnProperties
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!HighRiskFileTypes
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!LowRiskFileTypes
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!ModRiskFileTypes
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!ScanWithAntiVirus
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!UseTrustedHandlers
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoAutorun
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoAutorun
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DontSetAutoplayCheckbox
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DontSetAutoplayCheckbox
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDriveTypeAutoRun
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDriveTypeAutoRun
HKLM\Software\Policies\Microsoft\Windows\BITS!EnablePeercaching
HKLM\Software\Policies\Microsoft\Windows\BITS!DisablePeerCachingClient
HKLM\Software\Policies\Microsoft\Windows\BITS!DisablePeerCachingServer
HKLM\Software\Policies\Microsoft\Windows\BITS!MaxContentAge
HKLM\Software\Policies\Microsoft\Windows\BITS!MaxCacheSize
HKLM\Software\Policies\Microsoft\Windows\BITS!MaxDownloadTime
HKLM\Software\Policies\Microsoft\Windows\BITS!EnableBITSMaxBandwidth, HKLM\Software\Policies\Microsoft\Windows\BI
HKLM\Software\Policies\Microsoft\Windows\BITS!MaxBandwidthServed
HKLM\Software\Policies\Microsoft\Windows\BITS!MaxJobsPerUser
HKLM\Software\Policies\Microsoft\Windows\BITS!MaxJobsPerMachine
HKLM\Software\Policies\Microsoft\Windows\BITS!MaxFilesPerJob
HKLM\Software\Policies\Microsoft\Windows\BITS!MaxRangesPerFile
HKLM\Software\Policies\Microsoft\Windows\BITS!JobInactivityTimeout
HKLM\SOFTWARE\Policies\Microsoft\CaptureWizard!VidCap
HKCU\SOFTWARE\Policies\Microsoft\CaptureWizard!VidCap
HKLM\Software\Policies\Microsoft\SQMClient!CorporateSQMURL, HKLM\Software\Policies\Microsoft\SQMClient!Corporat
HKLM\Software\Policies\Microsoft\SQMClient\Windows!StudyId, HKLM\Software\Policies\Microsoft\SQMClient\Windows!Stud
HKLM\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002!Functions
HKLM\Software\Policies\Microsoft\Windows\App Management!COMClassStore
HKCU\Software\Policies\Microsoft\Windows\App Management!COMClassStore
HKCU\Software\Policies\Microsoft\Conferencing!PersistAutoAcceptCalls
HKCU\Software\Policies\Microsoft\Conferencing!NoAppSharing
HKCU\Software\Policies\Microsoft\Conferencing!NoAudio
HKCU\Software\Policies\Microsoft\Conferencing!NoChat
HKCU\Software\Policies\Microsoft\Conferencing!NoDirectoryServices
HKCU\Software\Policies\Microsoft\Conferencing!NoFullDuplex
HKCU\Software\Policies\Microsoft\Conferencing!NoOldWhiteBoard
HKLM\Software\Policies\Microsoft\Conferencing!NoRDS
HKCU\Software\Policies\Microsoft\Conferencing!NoAdvancedCalling
HKCU\Software\Policies\Microsoft\Conferencing!NoNewWhiteBoard
HKCU\Software\Policies\Microsoft\Conferencing!Use AutoConfig, HKCU\Software\Policies\Microsoft\Conferencing!ConfigFile
HKCU\Software\Policies\Microsoft\Conferencing!NoAudioPage
HKCU\Software\Policies\Microsoft\Conferencing!NoGeneralPage
HKCU\Software\Policies\Microsoft\Conferencing!NoSecurityPage
HKCU\Software\Policies\Microsoft\Conferencing!NoVideoPage
HKCU\Software\Policies\Microsoft\Conferencing!MaximumBandwidth
HKCU\Software\Policies\Microsoft\Conferencing!MaxFileSendSize
HKCU\Software\Policies\Microsoft\Conferencing!NoAddingDirectoryServers
HKCU\Software\Policies\Microsoft\Conferencing!NoTrueColorSharing
HKCU\Software\Policies\Microsoft\Conferencing!NoAutoAcceptCalls
HKCU\Software\Policies\Microsoft\Conferencing!NoChangingCallMode
HKCU\Software\Policies\Microsoft\Conferencing!NoChangeDirectSound
HKCU\Software\Policies\Microsoft\Conferencing!NoAllowControl
HKCU\Software\Policies\Microsoft\Conferencing!NoSharingDesktop
HKCU\Software\Policies\Microsoft\Conferencing!NoReceivingFiles
HKCU\Software\Policies\Microsoft\Conferencing!NoReceivingVideo
HKCU\Software\Policies\Microsoft\Conferencing!NoSendingFiles
HKCU\Software\Policies\Microsoft\Conferencing!NoSendingVideo
HKCU\Software\Policies\Microsoft\Conferencing!NoSharing
HKCU\Software\Policies\Microsoft\Conferencing!NoSharingDosWindows
HKCU\Software\Policies\Microsoft\Conferencing!NoSharingExplorer
HKCU\Software\Policies\Microsoft\Conferencing!NoWebDirectory
HKCU\Software\Policies\Microsoft\Conferencing!CallSecurity
HKCU\Software\Policies\Microsoft\Conferencing!IntranetSupportURL
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ForceClassicControlPanel
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisallowCpl, HKCU\Software\Microsoft\Windows\CurrentV
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoControlPanel
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!RestrictCpl, HKCU\Software\Microsoft\Windows\CurrentVe
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoDispAppearancePage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoDispBackgroundPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoDispScrSavPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoDispSettingsPage
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!SetVisualStyle
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!ScreenSaverIsSecure
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoChangingWallPaper
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoVisualStyleChoice
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoSizeChoice
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoColorChoice
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoDispCPL
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoThemesTab
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!ScreenSaveActive
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!SCRNSAVE.EXE
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!ScreenSaveTimeOut
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!UseDefaultTile
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DefaultLogonDomain
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!ExcludedCredentialProviders
HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!AllowDefCredentialsWhenNTLMOnly, HKLM\Software\Poli
HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!AllowDefaultCredentials, HKLM\Software\Policies\Microso
HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!AllowFreshCredentials, HKLM\Software\Policies\Microsof
HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!AllowSavedCredentials, HKLM\Software\Policies\Microso
HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!AllowFreshCredentialsWhenNTLMOnly, HKLM\Software\Po
HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!AllowSavedCredentialsWhenNTLMOnly, HKLM\Software\P
HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!DenyDefaultCredentials, HKLM\Software\Policies\Microso
HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!DenyFreshCredentials, HKLM\Software\Policies\Microsof
HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!DenySavedCredentials, HKLM\Software\Policies\Microso
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\CredUI!EnumerateAdministrators
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\CredUI!EnableSecureCredentialPrompting
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableChangePassword
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableLockWorkstation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoLogoff
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableTaskMgr
HKLM\Software\Policies\Microsoft\Windows NT\DCOM\AppCompat!AllowLocalActivationSecurityCheckExemptionList
HKLM\Software\Policies\Microsoft\Windows NT\DCOM\AppCompat!ListBox_Support_ActivationSecurityCheckExemptionList,
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop\AdminComponent!Add, HKCU\Software\Microsoft
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoHTMLWallPaper
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!Wallpaper, HKCU\Software\Microsoft\Windows\CurrentVer
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoActiveDesktop
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoComponents
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRecentDocsNetHood
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSaveSettings
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ForceActiveDesktopOn
HKCU\Software\Policies\Microsoft\Windows\Directory UI!EnableFilter
HKCU\Software\Policies\Microsoft\Windows\Directory UI!HideDirectoryFolder
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDesktop
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetIcon
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNetHood
HKCU\Software\Policies\Microsoft\Windows\Directory UI!QueryLimit
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoCloseDragDropBands
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoAddingComponents
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoMovingBands
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoActiveDesktopChanges
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoClosingComponents
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoDeletingComponents
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoEditingComponents
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisablePersonalDirChange
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum!{20D04FE0-3AEA-1069-A2D8-08002B30309D}
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum!{450D8FBA-AD25-11D0-98A8-0800361B1103}
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPropertiesMyComputer
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPropertiesMyDocuments
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPropertiesRecycleBin
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum!{645FF040-5081-101B-9F08-00AA002F954E}
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDesktopCleanupWizard
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions!AllowAdminInstall
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions!AllowDeviceIDs, HKLM\Software\Policies\Microsoft\Win
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions!AllowDeviceClasses, HKLM\Software\Policies\Microsof
HKLM\Software\Policies\Microsoft\Windows\DriverInstall\Restrictions!AllowUserDeviceClasses, HKLM\Software\Policies\Micro
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Settings!AllowRemoteRPC
HKCU\Software\Policies\Microsoft\Windows NT\Driver Signing!BehaviorOnFailedVerify
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Settings!InstallTimeout
HKCU\Software\Policies\Microsoft\Windows\DriverSearching!DontSearchFloppies, HKCU\Software\Policies\Microsoft\Wind
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DeniedPolicy!DetailText
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DeniedPolicy!SimpleText
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Settings!DisableSystemRestore
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Settings!DisableSendGenericDriverNotFoundToWER
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions!DenyUnspecified
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions!DenyDeviceIDs, HKLM\Software\Policies\Microsoft\Win
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions!DenyDeviceClasses, HKLM\Software\Policies\Microsof
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions!DenyRemovableDevices
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Settings!AllSigningEqual
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Settings!DisableBalloonTips
HKLM\Software\Policies\Microsoft\Windows\DriverSearching!DontPromptForWindowsUpdate
HKCU\Software\Policies\Microsoft\Windows\DriverSearching!DontPromptForWindowsUpdate
HKLM\Software\Policies\Microsoft\System\DFSClient!DfsDcNameDelay
HKLM\SOFTWARE\Policies\Microsoft\Windows\Digital Locker!DoNotRunDigitalLocker
HKCU\SOFTWARE\Policies\Microsoft\Windows\Digital Locker!DoNotRunDigitalLocker
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{29689E29-2CE9-4751-B4FC-8EFF5066E3FD}!DfdAlertTextOverride
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{29689E29-2CE9-4751-B4FC-8EFF5066E3FD}!ScenarioExecutionEnabl
HKLM\Software\Policies\Microsoft\Windows\NvCache!OptimizeBootAndResume
HKLM\Software\Policies\Microsoft\Windows\NvCache!EnablePowerModeState
HKLM\Software\Policies\Microsoft\Windows\NvCache!EnableNvCache
HKLM\Software\Policies\Microsoft\Windows\NvCache!EnableSolidStateMode
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!ApplyToRemovableMedia
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!Limit, HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!L
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!Enable
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!Enforce
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!LogEventOverLimit
HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!LogEventOverThreshold
HKLM\Software\Policies\Microsoft\Windows\System!DLT_AllowDomainMode
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!AppendToMultiLabelName
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!AdapterDomainName
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!NameServer
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!SearchList
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationEnabled
HKLM\Software\Policies\Microsoft\System\DNSClient!NV PrimaryDnsSuffix
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!UseDomainNameDevolution
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegisterAdapterName
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegisterReverseLookup
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationRefreshInterval
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationOverwritesInConflict
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationTtl
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!EnableMulticast
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!UpdateSecurityLevel
HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!UpdateTopLevelDomainZones
HKLM\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowColorizationColorChanges
HKCU\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowColorizationColorChanges
HKLM\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowComposition
HKCU\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowComposition
HKLM\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowFlip3d
HKCU\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowFlip3d
HKLM\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowAnimations
HKCU\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowAnimations
HKLM\SOFTWARE\Policies\Microsoft\Windows\DWM!DefaultColorizationColorState, HKLM\SOFTWARE\Policies\Microsoft\W
HKCU\SOFTWARE\Policies\Microsoft\Windows\DWM!DefaultColorizationColorState, HKCU\SOFTWARE\Policies\Microsoft\W
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoEncryptOnMove
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!CorporateWerServer, HKLM\SOFTWARE\Policies\M
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\Consent!DefaultConsent
HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\Consent!DefaultConsent
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWNoExternalURL, HKLM\Software\Policies\Microsoft\PCHe
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!DisableArchive, HKLM\SOFTWARE\Policies\Microso
HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!DisableArchive, HKCU\SOFTWARE\Policies\Microso
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!DisableQueue, HKLM\SOFTWARE\Policies\Microsof
HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!DisableQueue, HKCU\SOFTWARE\Policies\Microsof
HKLM\
HKCU\
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!AllOrNone, HKLM\Software\Policies\Microsoft\PCHealth\ErrorRe
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!LoggingDisabled
HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!LoggingDisabled
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!Disabled
HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!Disabled
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!ShowUI, HKLM\Software\Policies\Microsoft\PCHealth\ErrorRep
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!DontSendAdditionalData
HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!DontSendAdditionalData
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\Consent!DefaultOverrideBehavior
HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\Consent!DefaultOverrideBehavior
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\InclusionList
HKLM\Software\Policies\Microsoft\Windows\Windows Error Reporting\ExcludedApplications
HKCU\Software\Policies\Microsoft\Windows\Windows Error Reporting\ExcludedApplications
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\ExclusionList
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!DoNotShowUI
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!IncludeKernelFaults
HKLM\Software\Policies\Microsoft\Windows\EventLog\EventForwarding\SubscriptionManager
HKLM\Software\Policies\Microsoft\Windows\EventLog\Application!AutoBackupLogFiles
HKLM\Software\Policies\Microsoft\Windows\EventLog\Security!AutoBackupLogFiles
HKLM\Software\Policies\Microsoft\Windows\EventLog\Setup!AutoBackupLogFiles
HKLM\Software\Policies\Microsoft\Windows\EventLog\System!AutoBackupLogFiles
HKLM\Software\Policies\Microsoft\Windows\EventLog\Application!ChannelAccess
HKLM\Software\Policies\Microsoft\Windows\EventLog\Security!ChannelAccess
HKLM\Software\Policies\Microsoft\Windows\EventLog\Setup!ChannelAccess
HKLM\Software\Policies\Microsoft\Windows\EventLog\System!ChannelAccess
HKLM\Software\Policies\Microsoft\Windows\EventLog\Application!File
HKLM\Software\Policies\Microsoft\Windows\EventLog\Security!File
HKLM\Software\Policies\Microsoft\Windows\EventLog\Setup!File
HKLM\Software\Policies\Microsoft\Windows\EventLog\System!File
HKLM\Software\Policies\Microsoft\Windows\EventLog\Application!MaxSize
HKLM\Software\Policies\Microsoft\Windows\EventLog\Security!MaxSize
HKLM\Software\Policies\Microsoft\Windows\EventLog\Setup!MaxSize
HKLM\Software\Policies\Microsoft\Windows\EventLog\System!MaxSize
HKLM\Software\Policies\Microsoft\Windows\EventLog\Application!Retention
HKLM\Software\Policies\Microsoft\Windows\EventLog\Security!Retention
HKLM\Software\Policies\Microsoft\Windows\EventLog\Setup!Retention
HKLM\Software\Policies\Microsoft\Windows\EventLog\System!Retention
HKLM\Software\Policies\Microsoft\Windows\EventLog\Setup!Enabled
HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftRedirectionProgram
HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftRedirectionProgramCommandLineParameters
HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftRedirectionURL
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!AlwaysShowClassicMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!PreventItemCreationInUsersFilesFolder
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TurnOffSPIAnimations
HKLM\Software\Policies\Microsoft\Windows\Explorer!NoHeapTerminationOnCorruption
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{8519d925-541e-4a2b-8b1e-8059d16082f2}!ScenarioExecutionEnabled,
HKLM\Software\Policies\Microsoft\Windows\Filesystems\NTFS!SymLinkState, HKLM\Software\Policies\Microsoft\Windows\F
HKCU\Software\Policies\Microsoft\Windows\NetCache!DisableFRAdminPin
HKLM\Software\Policies\Microsoft\Windows\System\Fdeploy!LocalizeXPRelativePaths
HKCU\Software\Policies\Microsoft\Windows\System\Fdeploy!LocalizeXPRelativePaths
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPreviewPane
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoReadingPane
HKLM\Software\Policies\Microsoft\Windows\GameUX!DownloadGameInfo
HKLM\Software\Policies\Microsoft\Windows\GameUX!ListRecentlyPlayed
HKCU\Software\Policies\Microsoft\Control Panel\International\Calendars\TwoDigitYearMax!1
HKLM\Software\Policies\Microsoft\Control Panel\International!PreventGeoIdChange
HKCU\Software\Policies\Microsoft\Control Panel\International!PreventGeoIdChange
HKLM\Software\Policies\Microsoft\Control Panel\International!CustomLocalesNoSelect
HKCU\Software\Policies\Microsoft\Control Panel\International!CustomLocalesNoSelect
HKLM\Software\Policies\Microsoft\Control Panel\International!PreventUserOverrides
HKCU\Software\Policies\Microsoft\Control Panel\International!PreventUserOverrides
HKLM\Software\Policies\Microsoft\MUI\Settings!MachineUILock
HKCU\Software\Policies\Microsoft\Control Panel\International!HideAdminOptions
HKCU\Software\Policies\Microsoft\Control Panel\International!HideCurrentLocation
HKCU\Software\Policies\Microsoft\Control Panel\International!HideLanguageSelection
HKCU\Software\Policies\Microsoft\Control Panel\International!HideLocaleSelectAndCustomize
HKCU\Software\Policies\Microsoft\Control Panel\Desktop!MultiUILanguageID
HKLM\Software\Policies\Microsoft\Control Panel\International!RestrictSystemLocales, HKLM\Software\Policies\Microsoft\Cont
HKLM\Software\Policies\Microsoft\Control Panel\International!RestrictUserLocales, HKLM\Software\Policies\Microsoft\Control
HKCU\Software\Policies\Microsoft\Control Panel\International!RestrictUserLocales, HKCU\Software\Policies\Microsoft\Control
HKLM\Software\Policies\Microsoft\MUI\Settings!PreferredUILanguages
HKCU\Software\Policies\Microsoft\Control Panel\Desktop!PreferredUILanguages
HKLM\Software\Policies\Microsoft\Windows\System!AllowX-ForestPolicy-and-RUP
HKLM\Software\Policies\Microsoft\Windows\Group Policy!OnlyUseLocalAdminFiles
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!NewGPOLinksDisabled
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!GPODisplayName
HKLM\Software\Policies\Microsoft\Windows\System!DenyRsopToInteractiveUser
HKCU\Software\Policies\Microsoft\Windows\System!DenyRsopToInteractiveUser
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}!NoSlowLink, HKLM\Sof
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}!NoSlowLink, HKLM
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!ShowPoliciesOnly
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{25537BA6-77A8-11D2-9B6C-0000F8080861}!NoSlowLink, HKLM\
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!DCOption
HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTime, HKLM\Software\Policies\Microsoft\Windows\S
HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTimeDC, HKLM\Software\Policies\Microsoft\Window
HKCU\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTime, HKCU\Software\Policies\Microsoft\Windows\S
HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyMinTransferRate
HKCU\Software\Policies\Microsoft\Windows\System!GroupPolicyMinTransferRate
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}!NoSlowLink, HKLM
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{e437bc1c-aa7d-11d2-a382-00c04f991e27}!NoSlowLink, HKLM\Sof
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!NoBackgroundPoli
HKLM\Software\Policies\Microsoft\Windows\System!DenyUsersFromMachGP
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{42B5FAAE-6536-11d2-AE5A-0000F87571E3}!NoSlowLink, HKLM\
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}!NoBackgroundPoli
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{c6dc5466-785a-11d2-84d0-00c04fb169f7}!NoSlowLink, HKLM\Sof
HKLM\Software\Policies\Microsoft\Windows\System!GpNetworkStartTimeoutPolicyValue
HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!DisableAutoADMUpdate
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableBkGndGroupPolicy
HKLM\Software\Policies\Microsoft\Windows\System!DisableLGPOProcessing
HKLM\Software\Policies\Microsoft\Windows\System!RSoPLogging
HKLM\Software\Policies\Microsoft\Windows\System!UserPolicyMode
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{B587E2B1-4D59-4e7e-AED9-22B9DF11D053}!NoSlowLink, HKLM
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}!NoSlowLink, HKL
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{F9C77450-3A41-477e-9310-9ACD617BD9E3}!NoSlowLink, HKLM\
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{F9C77450-3A41-477e-9310-9ACD617BD9E3}!LogLevel, HKLM\Sof
HKCU\Software\Policies\Microsoft\MMC\{17C6249E-BA57-4F69-AE93-4FB3D25CD9D7}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{085A3BC4-FB62-4360-90C1-726A9A00DCA3}!Restrict_Run
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{728EE579-943C-4519-9EF7-AB56765798ED}!NoSlowLink, HKLM\
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{728EE579-943C-4519-9EF7-AB56765798ED}!LogLevel, HKLM\Sof
HKCU\Software\Policies\Microsoft\MMC\{EB21163A-3F08-44c4-B40F-F67FC97D6F44}!Restrict_Run
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{1A6364EB-776B-4120-ADE1-B63A406A76B5}!NoSlowLink, HKLM\
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{1A6364EB-776B-4120-ADE1-B63A406A76B5}!LogLevel, HKLM\Sof
HKCU\Software\Policies\Microsoft\MMC\{F780A62E-DDE3-45b7-9DA6-38CFC25154BA}!Restrict_Run
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{5794DAFD-BE60-433f-88A2-1A31939AC01F}!NoSlowLink, HKLM\
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{5794DAFD-BE60-433f-88A2-1A31939AC01F}!LogLevel, HKLM\Sof
HKCU\Software\Policies\Microsoft\MMC\{35141B6B-498A-4cc7-AD59-CEF93D89B2CE}!Restrict_Run
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{0E28E245-9368-4853-AD84-6DA3BA35BB75}!NoSlowLink, HKLM\
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{0E28E245-9368-4853-AD84-6DA3BA35BB75}!LogLevel, HKLM\Sof
HKCU\Software\Policies\Microsoft\MMC\{3BAE7E51-E3F4-41D0-853D-9BB9FD47605F}!Restrict_Run
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{7150F9BF-48AD-4da4-A49C-29EF4A8369BA}!NoSlowLink, HKLM\
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{7150F9BF-48AD-4da4-A49C-29EF4A8369BA}!LogLevel, HKLM\Sof
HKCU\Software\Policies\Microsoft\MMC\{4F4F5452-92B8-4e4d-AFBB-EBB3BC1F40E3}!Restrict_Run
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{A3F3E39B-5D83-4940-B954-28315B82F0A8}!NoSlowLink, HKLM\S
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{A3F3E39B-5D83-4940-B954-28315B82F0A8}!LogLevel, HKLM\Sof
HKCU\Software\Policies\Microsoft\MMC\{3EC4E9D3-714D-471F-88DC-4DD4471AAB47}!Restrict_Run
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{6232C319-91AC-4931-9385-E70C2B099F0E}!NoSlowLink, HKLM\
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{6232C319-91AC-4931-9385-E70C2B099F0E}!LogLevel, HKLM\Sof
HKCU\Software\Policies\Microsoft\MMC\{516FC620-5D34-4B08-8165-6A06B623EDEB}!Restrict_Run
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{74EE6C03-5363-4554-B161-627540339CAB}!NoSlowLink, HKLM\S
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{74EE6C03-5363-4554-B161-627540339CAB}!LogLevel, HKLM\Sof
HKCU\Software\Policies\Microsoft\MMC\{5C935941-A954-4F7C-B507-885941ECE5C4}!Restrict_Run
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{E47248BA-94CC-49c4-BBB5-9EB7F05183D0}!NoSlowLink, HKLM\
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{E47248BA-94CC-49c4-BBB5-9EB7F05183D0}!LogLevel, HKLM\Sof
HKCU\Software\Policies\Microsoft\MMC\{294C9265-50C9-476c-BB18-12069D9FA538}!Restrict_Run
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{17D89FEC-5C44-4972-B12D-241CAEF74509}!NoSlowLink, HKLM\
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{17D89FEC-5C44-4972-B12D-241CAEF74509}!LogLevel, HKLM\So
HKCU\Software\Policies\Microsoft\MMC\{8A84720A-9AE0-4e74-81D5-B78F85C2867C}!Restrict_Run
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{3A0DBA37-F8B2-4356-83DE-3E90BD5C261F}!NoSlowLink, HKLM
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{3A0DBA37-F8B2-4356-83DE-3E90BD5C261F}!LogLevel, HKLM\So
HKCU\Software\Policies\Microsoft\MMC\{BFCBBEB0-9DF4-4c0c-A728-434EA66A0373}!Restrict_Run
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{6A4C88C6-C502-4f74-8F60-2CB23EDC24E2}!NoSlowLink, HKLM\
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{6A4C88C6-C502-4f74-8F60-2CB23EDC24E2}!LogLevel, HKLM\Sof
HKCU\Software\Policies\Microsoft\MMC\{D08D61AC-6A7A-4945-9A14-A3BB64403607}!Restrict_Run
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{E62688F0-25FD-4c90-BFF5-F508B9D2E31F}!NoSlowLink, HKLM\
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{E62688F0-25FD-4c90-BFF5-F508B9D2E31F}!LogLevel, HKLM\Sof
HKCU\Software\Policies\Microsoft\MMC\{6A712058-33C6-4046-BCF9-0EA3A8808EDC}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{0DA274B5-EB93-47A7-AAFB-65BA532D3FE6}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{06F18E4A-47DE-43c3-B0E8-17FDC76C76D4}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{45B01F1C-5AC2-458c-9457-42A81B34A26D}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{A8C42CEA-CDB8-4388-97F4-5831F933DA84}!Restrict_Run
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{BC75B1ED-5833-4858-9BB8-CBF0B166DF9D}!NoSlowLink, HKLM
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{BC75B1ED-5833-4858-9BB8-CBF0B166DF9D}!LogLevel, HKLM\So
HKCU\Software\Policies\Microsoft\MMC\{ABC77E89-745D-41da-B21D-346D1B9A3F13}!Restrict_Run
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{E5094040-C46C-4115-B030-04FB2E545B00}!NoSlowLink, HKLM\S
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{E5094040-C46C-4115-B030-04FB2E545B00}!LogLevel, HKLM\Soft
HKCU\Software\Policies\Microsoft\MMC\{BEE07A6A-EC9F-4659-B8C9-0B1937907C83}!Restrict_Run
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{B087BE9D-ED37-454f-AF9C-04291E351182}!NoSlowLink, HKLM\S
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{B087BE9D-ED37-454f-AF9C-04291E351182}!LogLevel, HKLM\Soft
HKCU\Software\Policies\Microsoft\MMC\{770933BF-A9EF-46a7-BCB0-EF67B7B6C191}!Restrict_Run
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{AADCED64-746C-4633-A97C-D61349046527}!NoSlowLink, HKLM\
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{AADCED64-746C-4633-A97C-D61349046527}!LogLevel, HKLM\So
HKCU\Software\Policies\Microsoft\MMC\{CC5746A9-9B74-4be5-AE2E-64379C86E0E4}!Restrict_Run
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{91FBB303-0CD5-4055-BF42-E512A681B325}!NoSlowLink, HKLM\
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{91FBB303-0CD5-4055-BF42-E512A681B325}!LogLevel, HKLM\Sof
HKCU\Software\Policies\Microsoft\MMC\{CEFFA6E2-E3BD-421B-852C-6F6A79A59BC1}!Restrict_Run
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}!NoSlowLink, HKLM
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}!LogLevel, HKLM\So
HKCU\Software\Policies\Microsoft\MMC\{E235F4FA-246B-4233-9200-60CF020696F1}!Restrict_Run
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{E4F48E54-F38D-4884-BFB9-D4D2E5729C18}!NoSlowLink, HKLM\
HKLM\Software\Policies\Microsoft\Windows\Group Policy\{E4F48E54-F38D-4884-BFB9-D4D2E5729C18}!LogLevel, HKLM\Sof
HKCU\Software\Policies\Microsoft\MMC\{127537A8-C1ED-40BC-9AE5-C5891DF6B2D4}!Restrict_Run
HKLM\Software\Policies\Microsoft\Windows\System!ProcessTSUserLogonAsync
HKLM\Software\Policies\Microsoft\Windows\System!HelpQualifiedRootDir
HKLM\Software\Policies\Microsoft\Windows\System!DisableInHelp
HKCU\Software\Policies\Microsoft\Windows\System!DisableInHelp
HKLM\Software\Policies\Microsoft\Assistance\Client\1.0!NoActiveHelp
HKCU\Software\Policies\Microsoft\Assistance\Client\1.0!NoImplicitFeedback
HKCU\Software\Policies\Microsoft\Assistance\Client\1.0!NoExplicitFeedback
HKLM\Software\Policies\Microsoft\Assistance\Client\1.0!NoUntrustedContent
HKCU\Software\Policies\Microsoft\Assistance\Client\1.0!NoOnlineAssist
HKLM\Software\policies\Microsoft\System\HotStart!NoHotStart
HKCU\Software\policies\Microsoft\System\HotStart!NoHotStart
HKLM\Software\Policies\Microsoft\InternetManagement!RestrictCommunication, HKLM\Software\Microsoft\Windows\CurrentV
HKCU\Software\Policies\Microsoft\InternetManagement!RestrictCommunication, HKCU\Software\Microsoft\Windows\CurrentVe
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!DisableWindowsUpdateAccess
HKLM\Software\Policies\Microsoft\SystemCertificates\AuthRoot!DisableRootAutoUpdate
HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload
HKCU\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload
HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftEventVwrDisableLinks
HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!Headlines
HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!MicrosoftKBSearch
HKLM\Software\Policies\Microsoft\Windows\Internet Connection Wizard!ExitOnMSICW
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith
HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting
HKCU\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting
HKLM\Software\Policies\Microsoft\Windows\Registration Wizard Control!NoRegistration
HKLM\Software\Policies\Microsoft\SearchCompanion!DisableContentFileUpdates
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPublishingWizard
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPublishingWizard
HKLM\Software\Policies\Microsoft\Messenger\Client!CEIP
HKCU\Software\Policies\Microsoft\Messenger\Client!CEIP
HKLM\Software\Policies\Microsoft\SQMClient\Windows!CEIPEnable
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!DoReport, HKLM\Software\Policies\Microsoft\Windows\Windows
HKLM\Software\Policies\Microsoft\Windows\NetworkConnectivityStatusIndicator!NoActiveProbe
HKLM\Software\Policies\Microsoft\Windows\DriverSearching!DontSearchWindowsUpdate
HKLM\Software\Policies\Microsoft\Windows NT\IIS!PreventIISInstall
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1406
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1406
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1406
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1406
HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!AddPolicySearchProviders
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!AddPolicySearchProviders
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!ListBox_Support_CLSID, HKLM\Software\Microsoft\Windows\C
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!ListBox_Support_CLSID, HKCU\Software\Microsoft\Windows\
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_AllowedBehaviors, HKLM\Softw
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_AllowedBehaviors, HKCU\Softw
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!*
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\Feature_Enable_Script_Paste_URLAction_If_Promp
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!*
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\Feature_Enable_Script_Paste_URLAction_If_Promp
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\Set
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\Set
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!NoWebJITSetup
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!NoWebJITSetup
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!NoJITSetup
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!NoJITSetup
HKLM\Software\Policies\Microsoft\Internet Explorer\Download!RunInvalidSignatures
HKCU\Software\Policies\Microsoft\Internet Explorer\Download!RunInvalidSignatures
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Show image placeholders
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Print_Background
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Enable Browser Extensions
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Enable Browser Extensions
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!120A
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!120A
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!120A
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!120A
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{05589FA1-C356-11CE-BF01
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!NoUpdateCheck
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!NoUpdateCheck
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{DED22F57-FEE2-11D0-95
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!CertificateRevocation
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!CertificateRevocation
HKLM\Software\Policies\Microsoft\Internet Explorer\Download!CheckExeSignatures
HKCU\Software\Policies\Microsoft\Internet Explorer\Download!CheckExeSignatures
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!No_LaunchMediaBar, HKCU\Software\Microsoft\Internet Exp
HKCU\Software\Microsoft\Outlook Express!BlockExeAttachments
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!SpecifyDefaultButtons, HKCU\Software\Microsoft\Window
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent!Version
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent!Version
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!RestrictToList
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!RestrictToList
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{2D360201-FFF5-11D1-8D0
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!History, HKLM\Software\Policies\Microsoft\Windows\Curren
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!History, HKCU\Software\Policies\Microsoft\Windows\Curren
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoAddingChannels
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoAddingSubscriptions
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoScheduledUpdates
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Use FormSuggest, HKCU\Software\Policies\Microsoft\Internet Expl
HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoJITSetup
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!EnableAutoProxyResultCache
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Accessibility
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Advanced
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!Autoconfig
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Autoconfig
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!CalendarContact
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Certificates
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Colors
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!Connection Settings, HKLM\Software\Policies\Microsoft\In
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Connection Settings
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Check_If_Default
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Fonts
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!HomePage, HKCU\Software\Policies\Microsoft\Internet Exp
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Languages
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!links
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Messaging
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Profiles
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!Proxy
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Proxy
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Ratings
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Cache
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoChannelUI
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoBrowserContextMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoToolbarCustomize
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoBandCustomize
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSubscriptionContent
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoEditingScheduleGroups
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoEditingSubscriptions
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoExternalBranding
HKCU\Software\Policies\Microsoft\Internet Explorer!DisableImportExportFavorites
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Connwiz Admin Lock
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoChannelLogging
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoOpeninNewWnd
HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoUpdateCheck
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoRemovingChannels
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoRemovingSubscriptions
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoSelectDownloadDir
HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSplash
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoMSAppLogo5ChannelNotify
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!AdvancedTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!AdvancedTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!ConnectionsTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!ConnectionsTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!ContentTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!ContentTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!GeneralTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!GeneralTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!PrivacyTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!PrivacyTab
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!ProgramsTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!ProgramsTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!ResetWebSettings
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!SecurityTab
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!SecurityTab
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DisplayScriptDownloadFailureUI
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableRIED
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableRIED
HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoExtensionManagement
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoExtensionManagement
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1A04
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A04
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1A04
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A04
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DisableCachingOfSSLPages
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DisableCachingOfSSLPages
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Cache!Persistent
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Cache!Persistent
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!XMLHTTP
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!XMLHTTP
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!AlwaysShowMenus, HKLM\Software\Policies\Microsoft\Internet Expl
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!AlwaysShowMenus, HKCU\Software\Policies\Microsoft\Internet Expl
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoBrowserClose
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoFileNew
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoFileOpen
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoBrowserSaveWebComplete
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoBrowserSaveAs
HKCU\Software\Policies\Microsoft\Internet Explorer\Persistence\3!DomainLimit, HKCU\Software\Policies\Microsoft\Internet E
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemNetscapeHelp
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemSendFeedback
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemTipOfTheDay
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemTutorial
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoFavorites
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Identities!Locked Down
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!(Reserved), HKLM\Software\
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!(Reserved), HKLM\Sof
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!(Reserved), HKLM\Soft
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!(Reserve
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!(Reserved), HKLM\Soft
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!(Reserved),
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!(Reserved), H
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!(Reserved), HKLM\So
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!(Reserved), HKLM\So
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!(Reserved
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!(Reserved)
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!(Reserved),
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\Feature_Enable_Script_Paste_URLAction_If_Prompt
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!(Reserved), HKCU\Software
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!(Reserved), HKCU\Sof
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!(Reserved), HKCU\Soft
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!(Reserve
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!(Reserved), HKCU\Soft
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!(Reserved),
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!(Reserved), H
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!(Reserved), HKCU\S
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!(Reserved), HKCU\So
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!(Reserved
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!(Reserved
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!(Reserved),
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\Feature_Enable_Script_Paste_URLAction_If_Prompt
HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\RestrictedProtocols!ListBox_Support_3, HKL
HKCU\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\RestrictedProtocols!ListBox_Support_3, HKC
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Template Policies!InternetZoneTemplate, HKLM\So
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Template Policies!InternetZoneTemplate, HKCU\So
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!IntranetName
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!IntranetName
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!UNCAsIntranet
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!UNCAsIntranet
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!ProxyByPass
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!ProxyByPass
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Settings\Template Policies!IntranetZoneTemplate, HKLM\So
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Settings\Template Policies!IntranetZoneTemplate, HKCU\So
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{9276B91A-E780-11d2-8A8D
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1C00
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1C00
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1C00
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1C00
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Settings\Template Policies!LocalMachineZon
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Settings\Template Policies!LocalMachineZon
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Lockdown Settings\Template Policies!InternetZoneLockd
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Lockdown Settings\Template Policies!InternetZoneLockd
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Lockdown Settings\Template Policies!IntranetZoneLockd
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Lockdown Settings\Template Policies!IntranetZoneLockd
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Lockdown Settings\Template Policies!Loca
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Lockdown Settings\Template Policies!Loc
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Lockdown Settings\Template Policies!Restricte
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Lockdown Settings\Template Policies!Restricte
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Lockdown Settings\Template Policies!TrustedSite
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Lockdown Settings\Template Policies!TrustedSite
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ProxySettingsPerUser
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{275E2FE0-7486-11D0-89D6
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{D45FD31B-5C6E-11D1-9E
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{D6526FE0-E651-11CF-99C
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{AE24FDAE-03C6-11D1-8B7
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{BD1F006E-174F-11D2-95C
HKCU\Software\Policies\Microsoft\Internet Explorer\Toolbar\WebBrowser!ITBar7Position
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{2FF18E10-DE11-11D1-816
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{26F24A93-1DA2-11D0-A33
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Play_Animations
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Play_Animations
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Play_Background_Sounds
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Play_Background_Sounds
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Display Inline Videos
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Display Inline Videos
HKLM\Software\Policies\Microsoft\Internet Explorer\New Windows!ListBox_Support_Allow, HKLM\Software\Policies\Microsoft
HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows!ListBox_Support_Allow, HKCU\Software\Policies\Microsoft
HKLM\Software\Policies\Microsoft\Internet Explorer\Security!DisableFixSecuritySettings
HKCU\Software\Policies\Microsoft\Internet Explorer\Security!DisableFixSecuritySettings
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!AutoSearch
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!PreventIgnoreCertErrors
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!PreventIgnoreCertErrors
HKLM\Software\Policies\Microsoft\Internet Explorer\SQM!DisableCustomerImprovementProgram
HKCU\Software\Policies\Microsoft\Internet Explorer\SQM!DisableCustomerImprovementProgram
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!DisableFirstRunCustomize
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!DisableFirstRunCustomize
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!CodeBaseSearchPath
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion!IEAKUpdateUrl
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!Settings
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Settings
HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSearchBox
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSearchBox
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Use_DlgBox_Colors
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoDefaultTextSize, HKCU\Software\Policies\Microsoft\Inte
HKCU\Software\Policies\Microsoft\Internet Explorer\Settings!Background Color
HKCU\Software\Policies\Microsoft\Internet Explorer\Settings!Text Color
HKCU\Software\Policies\Microsoft\Internet Explorer\Settings!Anchor Color Visited
HKCU\Software\Policies\Microsoft\Internet Explorer\Settings!Anchor Color
HKCU\Software\Policies\Microsoft\Internet Explorer\Settings!Anchor Color Hover
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ADDON_MANAGEME
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_BEHAVIORS, HKLM\So
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_HANDLING, HK
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_SECURITYBAND, HKL
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_LOCALMACHINE_
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_SNIFFING, HKL
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_DISABLE_MK_PROT
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_PROTOCOL_LOCK
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_OBJECT_CACHING,
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ZONE_ELEVATION, H
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_ACTIVEX
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_FILED
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_WINDOW_RESTRICT
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_Feature_Enable_Script_Paste_UR
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ADDON_MANAGEME
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_BEHAVIORS, HKCU\So
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_HANDLING, HK
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_SECURITYBAND, HKC
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_LOCALMACHINE_
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_SNIFFING, HKC
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_DISABLE_MK_PRO
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_PROTOCOL_LOCK
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_OBJECT_CACHING,
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ZONE_ELEVATION, H
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_ACTIVEX
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_FILED
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_WINDOW_RESTRICT
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_Feature_Enable_Script_Paste_UR
HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoChangeDefaultSearchProvider
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoChangeDefaultSearchProvider
HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!UsePolicySearchProvidersOnly
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!UsePolicySearchProvidersOnly
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Settings\Template Policies!RestrictedSitesZoneTe
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Settings\Template Policies!RestrictedSitesZoneTe
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoFindFiles
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSearchCustomization
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Security_zones_map_edit
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Security_options_edit
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Security_HKLM_only
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!EnablePunyCode
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!EnablePunyCode
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{D27CDB6E-AE6D-11CF-96B
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_ZoneMapKey, HKLM\Software\
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_ZoneMapKey, HKCU\Software\
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1E05
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1E05
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1E05
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1E05
HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!MaxSubscriptionSize, HKCU\Software\Policies\Mi
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoBrowserOptions
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Settings\Template Policies!TrustedSitesZoneTemplat
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Settings\Template Policies!TrustedSitesZoneTemplat
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableDeleteBrowsingHistory
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableDeleteBrowsingHistory
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableDeleteForms
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableDeleteForms
HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableDeletePasswords
HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableDeletePasswords
HKLM\Software\Policies\Microsoft\Internet Explorer\Feeds!DisableAddRemove
HKCU\Software\Policies\Microsoft\Internet Explorer\Feeds!DisableAddRemove
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Enable AutoImageResize
HKLM\Software\Policies\Microsoft\Internet Explorer\Feeds!BackgroundSyncStatus
HKCU\Software\Policies\Microsoft\Internet Explorer\Feeds!BackgroundSyncStatus
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Update_Check_Page
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!UseClearType
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!UseClearType
HKLM\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!OpenInForeground
HKCU\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!OpenInForeground
HKLM\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!PopupsUseNewWindow
HKCU\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!PopupsUseNewWindow
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!AllowWindowReuse
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!AllowWindowReuse
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Update_Check_Interval
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Anchor Underline
HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoCrashDetection
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoCrashDetection
HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpMenu
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpMenu
HKLM\Software\Policies\Microsoft\Internet Explorer\Feeds!DisableEnclosureDownload
HKCU\Software\Policies\Microsoft\Internet Explorer\Feeds!DisableEnclosureDownload
HKLM\Software\Policies\Microsoft\Internet Explorer\Feed Discovery!Enabled
HKCU\Software\Policies\Microsoft\Internet Explorer\Feed Discovery!Enabled
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Friendly http errors
HKCU\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete!Use AutoComplete
HKLM\Software\Policies\Microsoft\Internet Explorer\PhishingFilter!Enabled
HKCU\Software\Policies\Microsoft\Internet Explorer\PhishingFilter!Enabled
HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!RestrictPopupExceptionList
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!RestrictPopupExceptionList
HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!DisablePopupFilterLevel
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!DisablePopupFilterLevel
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Page_Transitions
HKLM\Software\Policies\Microsoft\Internet Explorer\ZOOM!ZoomDisabled
HKCU\Software\Policies\Microsoft\Internet Explorer\ZOOM!ZoomDisabled
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Display Inline Images
HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoPopupManagement
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoPopupManagement
HKLM\Software\Policies\Microsoft\Internet Explorer\Security\P3Global!Enabled
HKCU\Software\Policies\Microsoft\Internet Explorer\Security\P3Global!Enabled
HKLM\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!QuickTabsThreshold
HKCU\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!QuickTabsThreshold
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!UrlEncoding
HKCU\SOFTWARE\Policies\Microsoft\Internet Explorer!SmartDithering
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!SmoothScroll
HKLM\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!Enabled
HKCU\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!Enabled
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete!AutoSuggest
HKLM\Software\Policies\Microsoft\Internet Explorer\Feeds!DisableFeedPane
HKCU\Software\Policies\Microsoft\Internet Explorer\Feeds!DisableFeedPane
HKLM\Software\Policies\Microsoft\Internet Explorer\Security!DisableSecuritySettingsCheck
HKCU\Software\Policies\Microsoft\Internet Explorer\Security!DisableSecuritySettingsCheck
HKLM\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions!DisableToolbarUpgrader
HKCU\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions!DisableToolbarUpgrader
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!AutoDetect
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!AutoDetect
HKCU\Software\Policies\Microsoft\IEAK!NoAutomaticSignup
HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\Feature_Enable_Compat_logging!iexplore.exe
HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\Feature_Enable_Compat_logging!iexplore.exe
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!WarnOnIntranet
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!WarnOnIntranet
HKCU\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete!Append Completion
HKLM\Software\Policies\Microsoft\Internet Explorer\Main!AlwaysShowMenus
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!AlwaysShowMenus
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Disable Script Debugger
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!FormSuggest Passwords, HKCU\Software\Policies\Microsoft\Intern
HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Error Dlg Displayed On Every Error
HKCU\Software\Policies\Microsoft\Internet Explorer\Settings!Use Anchor Hover Color
HKCU\Software\Policies\Microsoft\Internet Connection Wizard!DisableICW
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DialupAutodetect
HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Protocols\Mailto!UTF8Encoding
HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Protocols\Mailto!UTF8Encoding
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoTheaterMode
HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoViewSource
HKLM\Software\Policies\Microsoft\Windows\HandwritingErrorReports!PreventHandwritingErrorReports
HKCU\Software\Policies\Microsoft\Windows\HandwritingErrorReports!PreventHandwritingErrorReports
HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization!RestrictImplicitTextCollection, HKLM\SOFTWARE\Policies\Microsoft\I
HKCU\SOFTWARE\Policies\Microsoft\InputPersonalization!RestrictImplicitTextCollection, HKCU\SOFTWARE\Policies\Microsoft\I
HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization!DisablePersonalization
HKCU\SOFTWARE\Policies\Microsoft\InputPersonalization!DisablePersonalization
HKLM\Software\Policies\Microsoft\Windows\iSCSI!NewStaticTargets
HKLM\Software\Policies\Microsoft\Windows\iSCSI!RestrictAdditionalLogins
HKLM\Software\Policies\Microsoft\Windows\iSCSI!ChangeCHAPSecret
HKLM\Software\Policies\Microsoft\Windows\iSCSI!ChangeIQNName
HKLM\Software\Policies\Microsoft\Windows\iSCSI!RequireIPSec
HKLM\Software\Policies\Microsoft\Windows\iSCSI!ConfigureTargets
HKLM\Software\Policies\Microsoft\Windows\iSCSI!ConfigureiSNSServers
HKLM\Software\Policies\Microsoft\Windows\iSCSI!ConfigureTargetPortals
HKLM\Software\Policies\Microsoft\Windows\iSCSI!RequireMutualCHAP
HKLM\Software\Policies\Microsoft\Windows\iSCSI!RequireOneWayCHAP
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\KDC\Parameters!EmitLILI
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos!domain_realm_Enabled, HKLM\Software\Micros
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos!MitRealms_Enabled, HKLM\Software\Microsoft
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters!KdcValidation
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{180b3a99-8c39-4f12-b631-2031998efe45}!ScenarioExecutionEnabled,
HKLM\Software\Policies\Microsoft\Windows\LLTD!EnableLLTDIO, HKLM\Software\Policies\Microsoft\Windows\LLTD!AllowLL
HKLM\Software\Policies\Microsoft\Windows\LLTD!EnableRspndr, HKLM\Software\Policies\Microsoft\Windows\LLTD!AllowRs
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!LogonType
HKLM\Software\Policies\Microsoft\Windows NT\CurrentVersion\Winlogon!SyncForegroundPolicy
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableLocalMachineRun
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableCurrentUserRun
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableLocalMachineRunOnce
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableCurrentUserRunOnce
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWelcomeScreen
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWelcomeScreen
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideFastUserSwitching
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableStatusMessages
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableStartupSound
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!VerboseStatus
HKLM\Software\Policies\Microsoft\WindowsMediaCenter!MediaCenter
HKCU\Software\Policies\Microsoft\WindowsMediaCenter!MediaCenter
HKCU\Software\Policies\Microsoft\MMC\{C96401CF-0E17-11D3-885B-00C04F72C717}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B708457E-DB61-4C55-A92F-0D4B5E9B1224}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C96401D1-0E17-11D3-885B-00C04F72C717}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC!RestrictAuthorMode
HKCU\Software\Policies\Microsoft\MMC!RestrictToPermittedSnapins
HKCU\Software\Policies\Microsoft\MMC\{18BA7139-D98B-43c2-94DA-2604E34E175D}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{EBC53A38-A23F-11D0-B09B-00C04FD8DCA6}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{D967F824-9968-11D0-B936-00C04FD8D5B0}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{E355E538-1C2E-11D0-8C37-00C04FD8FE93}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{0F6B957D-509E-11D1-A7CC-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B6F9C8AE-EF3A-41C8-A911-37370C331DD4}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{0F6B957E-509E-11D1-A7CC-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B6F9C8AF-EF3A-41C8-A911-37370C331DD4}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1C5DACFA-16BA-11D2-81D0-0000F87A7AA3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1AA7F83C-C7F5-11D0-A376-00C04FC9DA04}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1F5EEC01-1214-4D94-80C5-4BDCD2014DDD}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{A994E107-6854-4F3D-917C-E6F01670F6D3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{53D6AB1D-2488-11D1-A28C-00C04FB94F17}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{de751566-4cc6-11d1-8ca0-00c04fc297eb}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{3F276EB4-70EE-11D1-8A0F-00C04FB93753}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C9BC92DF-5B9A-11D1-8F00-00C04FC2C17B}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{58221C67-EA27-11CF-ADCF-00AA00A80033}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C2FE450B-D6C2-11D0-A37B-00C04FC9DA04}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{9EC88934-C774-11d1-87F4-00C04FC2C17B}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{90087284-d6d6-11d0-8353-00a0c90640bf}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{74246bfc-4c96-11d0-abef-0020af6b0b7a}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C2FE4502-D6C2-11D0-A37B-00C04FC9DA04}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{43668E21-2636-11D1-A1CE-0080C88593A5}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{8EAD3A12-B2C1-11d0-83AA-00A0C92C9D5D}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{677A2D94-28D9-11D1-A95B-008048918FB1}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{634BDE40-E5E1-49A1-B2CD-140FFFC830F9}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{394C052E-B830-11D0-9A86-00C04FD8DBF7}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{975797FC-4E2A-11D0-B702-00C04FD8DBF7}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\FX:{b05566ae-fe9c-4363-be05-7a4cbb7cb510}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\FX:{b05566ad-fe9c-4363-be05-7a4cbb7cb510}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\FX:{D2779945-405B-4ACE-8618-508F3E3054AC}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{753EDB4D-2E1B-11D1-9064-00A0C90AB504}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{88E729D6-BDC1-11D1-BD2A-00C04FB9603F}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{c40d66a0-e90c-46c6-aa3b-473e38c72bf2}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{FF5903A8-78D6-11D1-92F6-006097B01056}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{E12BBB5D-D59D-4E61-947A-301D25AE8C23}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{8FC0B734-A0E1-11D1-A7D3-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{D70A2BEA-A63E-11D1-A7D4-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\FX:{89cc9588-7628-4d29-8e4a-6550d0087059}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{2E19B602-48EB-11d2-83CA-00104BCA42CF}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{95AD72F0-44CE-11D0-AE29-00AA004B9986}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{8F8F8DC0-5713-11D1-9551-0060B0576642}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{FC715823-C5FB-11D1-9EEF-00A0C90347FF}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{d524927d-6c08-46bf-86af-391534d779d3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{A841B6C2-7577-11D0-BB1F-00A0C922E79C}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{57C596D0-9370-40C0-BA0D-AB491B63255D}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{DEA8AFA0-CC85-11d0-9CE2-0080C7221EBD}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{DEA8AFA2-CC85-11d0-9CE2-0080C7221EBD}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{90810502-38F1-11D1-9345-00C04FC9DA04}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5D6179C8-17EC-11D1-9AA9-00C04FD8FE93}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{6E8E0081-19CD-11D1-AD91-00AA00B8E05A}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\FX:{a1bc4ecb-66b2-44e8-9915-be02e84438ba}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\FX:{a1bc4eca-66b2-44e8-9915-be02e84438ba}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\FX:{6630f2d7-bd52-4072-bfa7-863f3d0c5da0}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\FX:{6d8880af-e518-43a8-986c-1ad21c4c976e}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{7478EF61-8C46-11d1-8D99-00A0C913CAD4}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{34AB8E82-C27E-11D1-A6C0-00C04FB94F17}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{FD57D297-4FD9-11D1-854E-00C04FC31FD3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B52C1E50-1DD2-11D1-BC43-00C04FC31FD3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5880CD5C-8EC0-11d1-9570-0060B0576642}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{3D5D035E-7721-4B83-A645-6C07A3D403B7}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{3060E8CE-7020-11D2-842D-00C04FA372D4}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{243E20B0-48ED-11D2-97DA-00A024D77700}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{3CB6973D-3E6F-11D0-95DB-00A024D77700}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{6DC3804B-7212-458D-ADB0-9A07E2AE1FA2}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{DAB1A262-4FD7-11D1-842C-00C04FB6C218}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1AA7F839-C7F5-11D0-A376-00C04FC9DA04}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{40B66650-4972-11D1-A7CA-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{40B66661-4972-11d1-A7CA-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{40B6664F-4972-11D1-A7CA-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{40B66660-4972-11d1-A7CA-0000F87571E3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{011BE22D-E453-11D1-945A-00C04FB984F9}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{fe883157-cebd-4570-b7a2-e4fe06abe626}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5ADF5BF6-E452-11D1-945A-00C04FB984F9}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B1AFF7D0-0C49-11D1-BB12-00C04FC9A3A3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\FX:{18ea3f92-d6aa-41d9-a205-2023400c8fbb}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{BD95BA60-2E26-AAD1-AD99-00AA00B8E05A}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{03f1f940-a0f2-11d0-bb77-00aa00a1eab7}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{7AF60DD3-4979-11D1-8A6C-00C04FC33566}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{942A8E4F-A261-11D1-A760-00C04FB9603F}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{7E45546F-6D52-4D10-B702-9C2E67232E62}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{BACF5C8A-A3C7-11D1-A760-00C04FB9603F}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{1BC972D6-555C-4FF7-BE2C-C584021A0A6A}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{45ac8c63-23e2-11d1-a696-00c04fd58bc3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{0F3621F1-23C6-11D1-AD97-00AA00B88E5A}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{E26D02A0-4C1F-11D1-9AA1-00C04FC3357A}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{B91B6008-32D2-11D2-9888-00A0C925F917}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\FX:{7d3830aa-e69e-4e17-8bd1-1b87b97099da}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{0E752416-F29E-4195-A9DD-7F0D4D5A9D71}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\FX:{b05566ac-fe9c-4368-be02-7a4cbb7cbe11}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{06993B16-A5C7-47EB-B61C-B1CB7EE600AC}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{23DC5869-BD9F-46fd-AADD-1F869BA64FC3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{2DA6AA7F-8C88-4194-A558-0D36E7FD3E64}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{5C659257-E236-11D2-8899-00104B2AFB46}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\FX:{671ee405-c969-4af9-ad1b-65e96b3b9a10}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\FX:{f78fbadd-c21a-4e0a-b53d-c879a9c8f002}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{dbfca500-8c31-11d0-aa2c-00a0c92749a3}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\FX:{f8abd46c-1297-4474-9cdf-831ebb245f49}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\FX:{f8abd46e-1297-4474-9cdf-831ebb245f49}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{C11D2F3B-E2F4-4e5b-824B-84A87AB0F666}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\{9FE24B92-C23D-451c-8045-73038D99E620}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\FX:{813C1B01-6624-4922-9C6C-03C315646584}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\FX:{f9f63d92-6225-410b-bb02-26239b8f1f59}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\FX:{317cdc35-c09e-486f-ab09-90dd2e3fdd7d}!Restrict_Run
HKCU\Software\Policies\Microsoft\MMC\FX:{317cdc37-c09e-486f-ab09-90dd2e3fdd7d}!Restrict_Run
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\MobilityCenter!NoMobilityCenter
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\MobilityCenter!NoMobilityCenter
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\PresentationSettings!NoPresentationSettings
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\PresentationSettings!NoPresentationSettings
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!MovieMaker
HKCU\Software\Policies\Microsoft\WindowsMovieMaker!MovieMaker
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!CodecDownload
HKCU\Software\Policies\Microsoft\WindowsMovieMaker!CodecDownload
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp
HKCU\Software\Policies\Microsoft\WindowsMovieMaker!WebHelp
HKLM\Software\Policies\Microsoft\WindowsMovieMaker!WebPublish
HKCU\Software\Policies\Microsoft\WindowsMovieMaker!WebPublish
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{C295FBBA-FD47-46ac-8BEE-B1715EC634E5}!ScenarioExecutionEnab
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{C295FBBA-FD47-46ac-8BEE-B1715EC634E5}!DownloadToolsEnabled
HKLM\Software\Policies\Microsoft\Windows\Installer!EnableAdminTSRemote
HKLM\Software\Policies\Microsoft\Windows\Installer!AlwaysInstallElevated
HKCU\Software\Policies\Microsoft\Windows\Installer!AlwaysInstallElevated
HKLM\Software\Policies\Microsoft\Windows\Installer!MaxPatchCacheSize
HKLM\Software\Policies\Microsoft\Windows\Installer!TransformsSecure
HKLM\Software\Policies\Microsoft\Windows\Installer!SafeForScripting
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableLoggingFromPackage
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableMSI
HKLM\Software\Policies\Microsoft\Windows\Installer!EnableUserControl
HKLM\Software\Policies\Microsoft\Windows\Installer!AllowLockdownBrowse
HKLM\Software\Policies\Microsoft\Windows\Installer!AllowLockdownPatch
HKLM\Software\Policies\Microsoft\Windows\Installer!AllowLockdownMedia
HKLM\Software\Policies\Microsoft\Windows\Installer!EnforceUpgradeComponentRules
HKLM\Software\Policies\Microsoft\Windows\Installer!Logging
HKCU\Software\Policies\Microsoft\Windows\Installer!DisableMedia
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableFlyweightPatching
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableLUAPatching
HKLM\Software\Policies\Microsoft\Windows\Installer!DisablePatch
HKLM\Software\Policies\Microsoft\Windows\Installer!DisablePatchUninstall
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableRollback
HKCU\Software\Policies\Microsoft\Windows\Installer!DisableRollback
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableAutomaticApplicationShutdown
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableUserInstalls
HKLM\Software\Policies\Microsoft\Windows\Installer!DisableBrowse
HKCU\Software\Policies\Microsoft\Windows\Installer!SearchOrder
HKLM\Software\Policies\Microsoft\Windows\Installer!LimitSystemRestoreCheckpointing
HKLM\SOFTWARE\Policies\Microsoft\NetworkAccessProtection\ClientConfig\Qecs\79620!Enabled
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AllowNT4Crypto
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AutoSiteCoverage
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AvoidPdcOnWan
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!DnsAvoidRegisterRecords
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!IgnoreIncomingMailslotMessages
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AddressTypeReturned
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!UseDynamicDns
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!ExpectedDialupDelay
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!BackgroundRetryQuitTime
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!ForceRediscoveryInterval
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!BackgroundRetryInitialPeriod
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AllowSingleLabelDnsDomain
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!dbFlag
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!BackgroundRetryMaximumPeriod
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!MaximumLogFileSize
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!NegativeCachePeriod
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AllowExclusiveScriptsShareAccess
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!BackgroundSuccessfulRefreshPeriod
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!NonBackgroundSuccessfulRefreshPeriod
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!LdapSrvPriority
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!DnsRefreshInterval
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!ScavengeInterval
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!SiteName
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!NdncSiteCoverage
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!SiteCoverage
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!GcSiteCoverage
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AllowExclusiveSysvolShareAccess
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!TryNextClosestSite
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!DnsTtl
HKLM\Software\Policies\Microsoft\Netlogon\Parameters!LdapSrvWeight
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RasAllUserProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_DeleteAllUserConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_LanConnect
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RenameAllUserRasConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RenameLanConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RenameConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_EnableAdminProhibits
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_LanProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_LanChangeProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RasChangeProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_AdvancedSettings
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_NewConnectionWizard
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_DialupPrefs
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_AddRemoveComponents
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RasMyProperties
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RasConnect
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_DeleteConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_ChangeBindState
HKLM\Software\Policies\Microsoft\Windows\Network Connections!NC_AllowNetBridge_NLA
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RenameMyRasConnection
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_AllowAdvancedTCPIPConfig
HKLM\Software\Policies\Microsoft\Windows\Network Connections!NC_PersonalFirewallConfig
HKLM\Software\Policies\Microsoft\Windows\Network Connections!NC_ShowSharedAccessUI
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_Statistics
HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_IpStateChecking
HKLM\Software\Policies\Microsoft\NetworkProjector!DisableNetworkProjector
HKCU\Software\Policies\Microsoft\NetworkProjector!DisableNetworkProjector
HKLM\Software\Policies\Microsoft\Windows\NetCache!GoOfflineAction
HKCU\Software\Policies\Microsoft\Windows\NetCache!GoOfflineAction
HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders
HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders
HKLM\Software\Policies\Microsoft\Windows\NetCache!Enabled
HKLM\Software\Policies\Microsoft\Windows\NetCache!PurgeAtLogoff, HKLM\Software\Policies\Microsoft\Windows\NetCach
HKLM\Software\Policies\Microsoft\Windows\NetCache!SlowLinkSpeed
HKLM\Software\Policies\Microsoft\Windows\NetCache!SlowLinkEnabled, HKLM\Software\Policies\Microsoft\Windows\NetCa
HKLM\Software\Policies\Microsoft\Windows\NetCache!DefCacheSize
HKLM\Software\Policies\Microsoft\Windows\NetCache!EncryptCache
HKLM\Software\Policies\Microsoft\Windows\NetCache!EventLoggingLevel
HKCU\Software\Policies\Microsoft\Windows\NetCache!EventLoggingLevel
HKLM\Software\Policies\Microsoft\Windows\NetCache!ExcludeExtensions
HKLM\Software\Policies\Microsoft\Windows\NetCache!InitialBalloonTimeoutSeconds
HKCU\Software\Policies\Microsoft\Windows\NetCache!InitialBalloonTimeoutSeconds
HKLM\Software\Policies\Microsoft\Windows\NetCache!CacheQuotaLimit, HKLM\Software\Policies\Microsoft\Windows\NetC
HKLM\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions
HKCU\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions
HKLM\Software\Policies\Microsoft\Windows\NetCache!NoCacheViewer
HKCU\Software\Policies\Microsoft\Windows\NetCache!NoCacheViewer
HKLM\Software\Policies\Microsoft\Windows\NetCache\NoMakeAvailableOfflineList
HKCU\Software\Policies\Microsoft\Windows\NetCache\NoMakeAvailableOfflineList
HKLM\Software\Policies\Microsoft\Windows\NetCache!NoConfigCache
HKCU\Software\Policies\Microsoft\Windows\NetCache!NoConfigCache
HKLM\Software\Policies\Microsoft\Windows\NetCache!ReminderFreqMinutes
HKCU\Software\Policies\Microsoft\Windows\NetCache!ReminderFreqMinutes
HKLM\Software\Policies\Microsoft\Windows\NetCache!ReminderBalloonTimeoutSeconds
HKCU\Software\Policies\Microsoft\Windows\NetCache!ReminderBalloonTimeoutSeconds
HKLM\Software\Policies\Microsoft\Windows\NetCache!NoMakeAvailableOffline
HKCU\Software\Policies\Microsoft\Windows\NetCache!NoMakeAvailableOffline
HKLM\Software\Policies\Microsoft\Windows\NetCache!AlwaysPinSubFolders
HKLM\Software\Policies\Microsoft\Windows\NetCache!SyncAtLogoff
HKCU\Software\Policies\Microsoft\Windows\NetCache!SyncAtLogoff
HKLM\Software\Policies\Microsoft\Windows\NetCache!SyncAtLogon
HKCU\Software\Policies\Microsoft\Windows\NetCache!SyncAtLogon
HKLM\Software\Policies\Microsoft\Windows\NetCache!SyncAtSuspend
HKCU\Software\Policies\Microsoft\Windows\NetCache!SyncAtSuspend
HKLM\Software\Policies\Microsoft\Windows\NetCache!NoReminders
HKCU\Software\Policies\Microsoft\Windows\NetCache!NoReminders
HKLM\Software\Policies\Microsoft\Windows\NetCache!EconomicalAdminPinning
HKLM\Software\policies\Microsoft\Peernet!IgnoreDomainPasswordPolicyForNewGroups
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-Global!SearchOnly
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-LinkLocal!SearchOnly
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-SiteLocal!SearchOnly
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-Global!SeedServer, HKLM\Software\policies\Microsoft\Peernet\Pnrp\IP
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-LinkLocal!SeedServer
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-SiteLocal!SeedServer
HKLM\Software\policies\Microsoft\Peernet!Disabled
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-Global!DisableMulticastBootstrap
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-LinkLocal!DisableMulticastBootstrap
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-SiteLocal!DisableMulticastBootstrap
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-Global!Disabled
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-LinkLocal!Disabled
HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-SiteLocal!Disabled
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\ParentalControls!WPCEnableOnDomain
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{659F08FB-2FAB-42a7-BD4F-566CFA528769}!ScenarioExecutionEnabl
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{acfd1ca6-18b6-4ccf-9c07-580cdb6eded4}!ScenarioExecutionEnabled,
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{D113E4AA-2D07-41b1-8D9B-C065194A791D}!ScenarioExecutionEnabl
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{081D3213-48AA-4533-9284-D98F01BDC8E6}!ScenarioExecutionEnabl
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{affc81e2-612a-4f70-6fb2-916ff5c7e3f8}!ScenarioExecutionEnabled, HK
HKLM\SOFTWARE\Policies\Microsoft\PenTraining!DisablePenTraining
HKCU\SOFTWARE\Policies\Microsoft\PenTraining!DisablePenTraining
HKLM\Software\Policies\Microsoft\Windows\Control Panel\Performance Control Panel!UpsellEnabled
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Performance Control Panel!UpsellEnabled
HKLM\Software\Policies\Microsoft\Windows\Control Panel\Performance Control Panel!PerfCplEnabled
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Performance Control Panel!PerfCplEnabled
HKLM\Software\Policies\Microsoft\Windows\Control Panel\Performance Control Panel!SolutionsEnabled
HKCU\Software\Policies\Microsoft\Windows\Control Panel\Performance Control Panel!SolutionsEnabled
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{67144949-5132-4859-8036-a737b43825d8}!ScenarioExecutionEnabled
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{ffc42108-4920-4acf-a4fc-8abdcc68ada4}!ScenarioExecutionEnabled, H
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{a7a5847a-7511-4e4e-90b1-45ad2a002f51}!ScenarioExecutionEnabled,
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{2698178D-FDAD-40AE-9D3C-1371703ADC5B}!ScenarioExecutionEnab
HKLM\Software\Policies\Microsoft\Power\PowerSettings\abfc2519-3608-4c2a-94ea-171b0ed546ab!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\abfc2519-3608-4c2a-94ea-171b0ed546ab!ACSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\637EA02F-BBCB-4015-8E2C-A1C7B9C0B546!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\9A66D8D7-4FF7-4EF9-B5A2-5A326CA2A469!DCSettingIndex
HKLM\Software\Policies\Microsoft\Windows NT!DontPowerOffAfterShutdown
HKLM\Software\Policies\Microsoft\Power\PowerSettings\d8742dcb-3e6a-4b3c-b3fe-374623cdcf06!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\8183ba9a-e910-48da-8769-14ae6dc1170a!DCSettingIndex
HKCU\Software\Policies\Microsoft\Windows\System\Power!PromptPasswordOnResume
HKLM\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51!ACSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings!ActivePowerScheme
HKLM\Software\Policies\Microsoft\Power\PowerSettings\5CA83367-6E45-459F-A27B-476B1D01C936!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\5CA83367-6E45-459F-A27B-476B1D01C936!ACSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\7648EFA3-DD9C-4E3E-B566-50F929386280!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\7648EFA3-DD9C-4E3E-B566-50F929386280!ACSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\96996BC0-AD50-47EC-923B-6F41874DD9EB!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\96996BC0-AD50-47EC-923B-6F41874DD9EB!ACSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\A7066653-8D6C-40A8-910E-A1F54B84C7E5!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\A7066653-8D6C-40A8-910E-A1F54B84C7E5!ACSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings!ActivePowerScheme
HKLM\Software\Policies\Microsoft\Power\PowerSettings\9D7815A6-7EE4-497E-8888-515A05F02364!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\9D7815A6-7EE4-497E-8888-515A05F02364!ACSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\29F6C1DB-86DA-48C5-9FDB-F2B67B1F44DA!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\29F6C1DB-86DA-48C5-9FDB-F2B67B1F44DA!ACSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\90959D22-D6A1-49B9-AF93-BCE885AD335B!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\90959D22-D6A1-49B9-AF93-BCE885AD335B!ACSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\94ac6d29-73ce-41a6-809f-6363ba21b47e!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\94ac6d29-73ce-41a6-809f-6363ba21b47e!ACSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\bcded951-187b-4d05-bccc-f7e51960c258!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\3C0BC021-C8A8-4E07-A973-6B14CBCB2B7E!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\3C0BC021-C8A8-4E07-A973-6B14CBCB2B7E!ACSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\6738E2C4-E8A5-4A42-B16A-E040E769756E!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\6738E2C4-E8A5-4A42-B16A-E040E769756E!ACSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\B7A27025-E569-46c2-A504-2B96CAD225A1!DCSettingIndex
HKLM\Software\Policies\Microsoft\Power\PowerSettings\B7A27025-E569-46c2-A504-2B96CAD225A1!ACSettingIndex
HKLM\Software\Policies\Microsoft\PreviousVersions!DisableLocalPage
HKCU\Software\Policies\Microsoft\PreviousVersions!DisableLocalPage
HKLM\Software\Policies\Microsoft\PreviousVersions!DisableRemotePage
HKCU\Software\Policies\Microsoft\PreviousVersions!DisableRemotePage
HKLM\Software\Policies\Microsoft\PreviousVersions!HideBackupEntries
HKCU\Software\Policies\Microsoft\PreviousVersions!HideBackupEntries
HKLM\Software\Policies\Microsoft\PreviousVersions!DisableLocalRestore
HKCU\Software\Policies\Microsoft\PreviousVersions!DisableLocalRestore
HKLM\Software\Policies\Microsoft\PreviousVersions!DisableBackupRestore
HKCU\Software\Policies\Microsoft\PreviousVersions!DisableBackupRestore
HKLM\Software\Policies\Microsoft\PreviousVersions!DisableRemoteRestore
HKCU\Software\Policies\Microsoft\PreviousVersions!DisableRemoteRestore
HKLM\Software\Policies\Microsoft\Windows NT\Printers\Wizard!DomainDisplayPrinters_State, HKLM\Software\Policies\Micro
HKLM\Software\Policies\Microsoft\Windows NT\Printers\Wizard!NonDomainDisplayPrinters_State, HKLM\Software\Policies\M
HKLM\Software\Policies\Microsoft\Windows NT\Printers!RegisterSpoolerRemoteRpcEndPoint
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PublishPrinters
HKLM\Software\Policies\Microsoft\Windows NT\Printers!Immortal
HKLM\Software\Policies\Microsoft\Windows NT\Printers!ForceCSREMFDespooling
HKLM\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Auto Publishing
HKCU\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Printers Page URL
HKCU\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Downlevel Browse
HKLM\Software\Policies\Microsoft\Windows NT\Printers!VerifyPublishedState
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PhysicalLocation
HKLM\Software\Policies\Microsoft\Windows NT\Printers!SupportLink
HKCU\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Default Search Scope
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningInterval
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningPriority
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningRetries
HKLM\Software\Policies\Microsoft\Windows NT\Printers!KMPrintersAreBlocked
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningRetryLog
HKCU\Software\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint!PackagePointAndPrintOnly
HKCU\Software\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint!PackagePointAndPrintServerList, HKCU\Softwa
HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint!Restricted, HKCU\Software\Policies\Microsoft\Windows
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PhysicalLocationSupport
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoAddPrinter
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDeletePrinter
HKLM\Software\Policies\Microsoft\Windows NT\Printers!ServerThread
HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruneDownlevel
HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPrinting
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Programs!NoGetPrograms
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Programs!NoInstalledUpdates
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Programs!NoProgramsAndFeatures
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Programs!NoDefaultPrograms
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Programs!NoWindowsFeatures
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Programs!NoWindowsMarketplace
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Programs!NoProgramsCPL
HKLM\Software\Policies\Microsoft\Windows\PswdSync!MaxRetries_state, HKLM\Software\Policies\Microsoft\Windows\Pswd
HKLM\Software\Policies\Microsoft\Windows\PswdSync!UpdateRetryInterval_state, HKLM\Software\Policies\Microsoft\Window
HKLM\Software\Policies\Microsoft\Windows\PswdSync!LoggingLevel
HKLM\Software\Policies\Microsoft\Windows\PswdSync!SNISPasswordSyncEnable
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeBestEffort
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeBestEffort
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeBestEffort
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeControlledLoad
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeControlledLoad
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeControlledLoad
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeGuaranteed
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeGuaranteed
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeGuaranteed
HKLM\Software\Policies\Microsoft\Windows\Psched!MaxOutstandingSends
HKLM\Software\Policies\Microsoft\Windows\Psched!NonBestEffortLimit
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeNetworkControl
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeNetworkControl
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeNetworkControl
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeNonConforming
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeQualitative
HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeQualitative
HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeQualitative
HKLM\Software\Policies\Microsoft\Windows\Psched!TimerResolution
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{739FF6CF-5033-428c-9E2F-582096482DD5}!ScenarioExecutionEnable
HKLM\Software\Policies\Microsoft\Windows NT\Reliability!SnapShot
HKLM\Software\Policies\Microsoft\Windows NT\Reliability!ShutdownReasonOn, HKLM\Software\Policies\Microsoft\Windows
HKLM\Software\Policies\Microsoft\Windows NT\Reliability!TimeStampEnabled, HKLM\Software\Policies\Microsoft\Windows NT
HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!IncludeShutdownErrs
HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!CreateEncryptedOnlyTickets
HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!UseCustomMessages, HKLM\Software\policies\Microsoft\
HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!fAllowUnsolicited, HKLM\Software\policies\Microsoft\Windo
HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!fAllowToGetHelp, HKLM\Software\policies\Microsoft\Window
HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!UseBandwidthOptimization, HKLM\Software\policies\Micro
HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!LoggingEnabled
HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices!Deny_All
HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices!Deny_All
HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices!AllowRemoteDASD
HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56308-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Re
HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56308-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Re
HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56308-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Wri
HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56308-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Wri
HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\Custom\Deny_Read!Deny_Read, HKLM\Software\Pol
HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\Custom\Deny_Read!Deny_Read, HKCU\Software\Pol
HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\Custom\Deny_Write!Deny_Write, HKLM\Software\Pol
HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\Custom\Deny_Write!Deny_Write, HKCU\Software\Pol
HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56311-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Re
HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56311-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Re
HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56311-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Writ
HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56311-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Wri
HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Re
HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Re
HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Wri
HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Wri
HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630b-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Re
HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630b-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Re
HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630b-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Wri
HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630b-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Wri
HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices!RebootTimeinSeconds_state, HKLM\Software\Polic
HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices!RebootTimeinSeconds_state, HKCU\Software\Polic
HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{6AC27878-A6FA-4155-BA85-F98F491D4F33}!Den
HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{6AC27878-A6FA-4155-BA85-F98F491D4F33}!Den
HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{6AC27878-A6FA-4155-BA85-F98F491D4F33}!Deny
HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{6AC27878-A6FA-4155-BA85-F98F491D4F33}!Deny
HKLM\Software\Policies\Microsoft\Windows NT\Rpc\IgnoreDelegationFailure!IgnoreDelegationFailure
HKLM\Software\Policies\Microsoft\Windows NT\Rpc\MinimumConnectionTimeout!MinimumConnectionTimeout
HKLM\Software\Policies\Microsoft\Windows NT\Rpc!ExtErrorInformation, HKLM\Software\Policies\Microsoft\Windows NT\Rpc!
HKLM\Software\Policies\Microsoft\Windows NT\Rpc!RestrictRemoteClients
HKLM\Software\Policies\Microsoft\Windows NT\Rpc!EnableAuthEpResolution
HKLM\Software\Policies\Microsoft\Windows NT\Rpc!StateInformation
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!Allow-LogonScript-NetbiosDisabled
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!MaxGPOScriptWait
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideLegacyLogonScripts
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideLogoffScripts
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!RunLogonScriptSync
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!RunLogonScriptSync
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideLogonScripts
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideShutdownScripts
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!RunStartupScriptSync
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideStartupScripts
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search!AllowIndexingEncryptedStoresOrItems
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search!AllowUsingDiacritics
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search!DataDirectory
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search!PreventUsingAdvancedIndexingOptions
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search!PreventIndexingEmailAttachments
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search!PreventIndexingOfflineFiles
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search!PreventIndexingOutlook
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search!PreventIndexingPublicFolders
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search!PreventIndexingUncachedExchangeFolders
HKLM\Software\Policies\Microsoft\Windows NT\Security Center!SecurityCenterInDomain
HKLM\Software\Policies\Microsoft\Windows\Server\ServerManager!RefreshIntervalEnabled, HKLM\Software\Policies\Microso
HKLM\Software\Policies\Microsoft\Windows\Server\InitialConfigurationTasks!DoNotOpenAtLogon
HKLM\Software\Policies\Microsoft\Windows NT\CurrentVersion\MYS!DisableShowAtLogon
HKLM\Software\Policies\Microsoft\Windows\Server\ServerManager!DoNotOpenAtLogon
HKLM\Software\Policies\Microsoft\Windows NT\Setup!SourcePath
HKLM\Software\Policies\Microsoft\Windows NT\Setup!ServicePackSourcePath
HKCU\Software\Policies\Microsoft\Windows NT\SharedFolders!PublishDfsRoots
HKCU\Software\Policies\Microsoft\Windows NT\SharedFolders!PublishSharedFolders
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInplaceSharing
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisallowRun, HKCU\Software\Microsoft\Windows\Current
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableRegistryTools
HKCU\Software\Policies\Microsoft\Windows\System!DisableCMD
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!RestrictRun, HKCU\Software\Microsoft\Windows\CurrentV
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!RestrictWelcomeCenter
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!TurnOffUnsignedGadgets
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!TurnOffUnsignedGadgets
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!OverrideMoreGadgetsLink
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!OverrideMoreGadgetsLink
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!TurnOffUserInstalledGadgets
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!TurnOffUserInstalledGadgets
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!TurnOffSidebar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!TurnOffSidebar
HKLM\Software\Policies\Microsoft\Windows\SideShow!DeleteDataOnLogoff
HKCU\Software\Policies\Microsoft\Windows\SideShow!DeleteDataOnLogoff
HKLM\Software\Policies\Microsoft\Windows\SideShow!SetPIN, HKLM\Software\Policies\Microsoft\Windows\SideShow!PIN, H
HKCU\Software\Policies\Microsoft\Windows\SideShow!SetPIN, HKCU\Software\Policies\Microsoft\Windows\SideShow!PIN,
HKLM\Software\Policies\Microsoft\Windows\SideShow!AutoWakeDisabled
HKCU\Software\Policies\Microsoft\Windows\SideShow!AutoWakeDisabled
HKLM\Software\Policies\Microsoft\Windows\SideShow!Disabled
HKCU\Software\Policies\Microsoft\Windows\SideShow!Disabled
HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!AllowCertificatesWithNoEKU
HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!AllowIntegratedUnblock
HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!AllowSignatureOnlyKeys
HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!AllowTimeInvalidCertificates
HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!X509HintsNeeded
HKLM\SOFTWARE\Policies\Microsoft\Windows\CertProp!RootCertificateCleanupOption
HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!IntegratedUnblockPromptString
HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!FilterDuplicateCerts
HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!ForceReadingAllCertificates
HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!DisallowPlaintextPin
HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!ReverseSubject
HKLM\SOFTWARE\Policies\Microsoft\Windows\CertProp!CertPropEnabled
HKLM\SOFTWARE\Policies\Microsoft\Windows\CertProp!EnableRootCertificatePropagation
HKLM\Software\Policies\Microsoft\Windows\Server for NIS!PushInterval_state, HKLM\Software\Policies\Microsoft\Windows\Se
HKLM\Software\Policies\Microsoft\Windows\Server for NIS!LoggingLevel
HKLM\Software\Policies\SNMP\Parameters\ValidCommunities
HKLM\Software\Policies\SNMP\Parameters\PermittedManagers
HKLM\Software\Policies\SNMP\Parameters\TrapConfiguration\public
HKLM\SOFTWARE\Policies\Microsoft\SoundRecorder!Soundrec
HKCU\SOFTWARE\Policies\Microsoft\SoundRecorder!Soundrec
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!MemCheckBoxInRunDlg
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ForceStartMenuLogOff
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ForceRunOnStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ClearRecentDocsOnExit
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ClearRecentProgForNewUserInStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoToolbarsOnTaskbar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRecentDocsHistory
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSearchCommInStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSearchFilesInStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSearchInternetInStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSearchProgramsInStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoResolveSearch
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoResolveTrack
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSimpleStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!GreyMSIAds
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoTrayItemsDisplay
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!LockTaskbar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSetTaskbar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoTaskGrouping
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoTrayContextMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuMorePrograms
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoClose
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMBalloonTip
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!HideClock
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoCommonGroups
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMConfigurePrograms
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMMyDocs
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoChangeStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFavoritesMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuMFUprogramsList
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuMyGames
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMHelp
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWindowsUpdate
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!StartMenuLogOff
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuMyMusic
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNetworkConnections
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuNetworkPlaces
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMMyPictures
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuPinnedList
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSetFolders
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRecentDocsMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRun
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSearchComputerLinkInStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFind
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuEjectPC
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoUserFolderInStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoUserNameInStartMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuSubFolders
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!QuickLaunchEnabled
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoAutoTrayNotify
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Intellimenus
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInstrumentation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!UseFoldersInStartMenu
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\WSRM!EmailIds
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\WSRM!SMTPServer
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\WSRM!RecordWriteInterval
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\WSRM!AccountingEnabled
HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore!DisableConfig
HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore!DisableSR
HKLM\software\policies\microsoft\TabletTip\1.7!HideIPTIPTarget
HKCU\software\policies\microsoft\TabletTip\1.7!HideIPTIPTarget
HKLM\software\policies\microsoft\TabletTip\1.7!HideIPTIPTouchTarget
HKCU\software\policies\microsoft\TabletTip\1.7!HideIPTIPTouchTarget
HKLM\software\policies\microsoft\TabletTip\1.7!IncludeRareChar
HKCU\software\policies\microsoft\TabletTip\1.7!IncludeRareChar
HKLM\software\policies\microsoft\TabletTip\1.7!DisableEdgeTarget
HKCU\software\policies\microsoft\TabletTip\1.7!DisableEdgeTarget
HKLM\software\policies\microsoft\TabletTip\1.7!PRCGesture
HKCU\software\policies\microsoft\TabletTip\1.7!PRCGesture
HKLM\software\policies\microsoft\TabletTip\1.7!DisableACIntegration
HKCU\software\policies\microsoft\TabletTip\1.7!DisableACIntegration
HKLM\software\policies\microsoft\TabletTip\1.7!PasswordSecurityState, HKLM\software\policies\microsoft\TabletTip\1.7!Pass
HKCU\software\policies\microsoft\TabletTip\1.7!PasswordSecurityState, HKCU\software\policies\microsoft\TabletTip\1.7!Pass
HKLM\software\policies\microsoft\TabletTip\1.7!ScratchOutState, HKLM\software\policies\microsoft\TabletTip\1.7!ScratchOut
HKCU\software\policies\microsoft\TabletTip\1.7!ScratchOutState, HKCU\software\policies\microsoft\TabletTip\1.7!ScratchOut
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!DisableInkball
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!DisableInkball
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!DisableNoteWriterPrinting
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!DisableNoteWriterPrinting
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!DisableSnippingTool
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!DisableSnippingTool
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!DisableStickyNotes
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!DisableStickyNotes
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!DisableJournal
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!DisableJournal
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!PreventButtonBackEscapeMapping
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!PreventButtonBackEscapeMapping
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!PreventFlicks
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!PreventFlicks
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!PreventFlicksLearningMode
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!PreventFlicksLearningMode
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!PreventButtonApplicationLaunch
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!PreventButtonApplicationLaunch
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!PreventButtonPressAndHold
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!PreventButtonPressAndHold
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!TurnOffButtons
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!TurnOffButtons
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!TurnOffPenFeedback
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!TurnOffPenFeedback
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TaskbarLockAll
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TaskbarNoAddRemoveToolbar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TaskbarNoRedock
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TaskbarNoDragToolbar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TaskbarNoResize
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!HideSCABattery
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!HideSCANetwork
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!HideSCAVolume
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TaskbarNoNotification
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TaskbarNoThumbnail
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Disable Advanced
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Disable Advanced
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Property Pages
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Property Pages
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Execution
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Execution
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Allow Browse
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Allow Browse
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!DragAndDrop
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!DragAndDrop
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Creation
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Creation
HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Deletion
HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Deletion
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!AllowUnsignedFiles
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!AllowUnsignedFiles
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!AllowSignedFiles
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!AllowSignedFiles
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCam
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fEnableTimeZoneRedirection
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDenyTSConnections
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fPromptForPassword
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fTurnOffSingleAppMode
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableAutoReconnect
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!KeepAliveEnable, HKLM\SOFTWARE\Policies\Microsoft\
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!AuthenticationLevel
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryClusterName
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryLocation
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableForcibleLogoff
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCpm
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableClip
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCcm
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCdm
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fWritableTSCCPermTab
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableLPT
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!DisablePasswordSaving
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!DisablePasswordSaving
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fEnableSmartCard
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisablePNPRedir
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!DeleteTempDirsOnExit
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fForceClientLptDef
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!PerSessionTempDir
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!UseProxy, HKCU\SOFTWARE\Policies\Microsoft\Windows
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fNoRemoteDesktopWallpaper
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableTerminalServerTooltip
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryActive
HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services!fSecureLicensing
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!ColorDepth
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxInstanceCount
HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services!fPreventLicenseUpgrade
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!PromptForCredsOnClient
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDisconnect
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNTSecurity
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fEncryptRPCTraffic
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SecurityLayer
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!UserAuthentication
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fSingleSessionPerUser
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!CertTemplateName
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MinEncryptionLevel
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxCompressionLevel
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!WFProfilePath
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!Shadow
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!Shadow
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!LicensingMode
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxIdleTime
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxIdleTime
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxConnectionTime
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxConnectionTime
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxDisconnectionTime
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxDisconnectionTime
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!AllowExplicitLogonMethod, HKCU\SOFTWARE\Policies\
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!AllowExplicitProxyName, HKCU\SOFTWARE\Policies\M
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!WFHomeDirUNC, HKLM\SOFTWARE\Policies\Microsoft
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!TrustedCertThumbprints
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!TrustedCertThumbprints
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fPolicyFallbackPrintDriver, HKLM\SOFTWARE\Policies\Mi
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!InitialProgram, HKLM\SOFTWARE\Policies\Microsoft\Wi
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fInheritInitialProgram, HKCU\SOFTWARE\Policies\Micro
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fResetBroken
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fResetBroken
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryExposeServerIP
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!WFDontAppendUserNameToProfile
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!LicenseServers
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fAllowUnlistedRemotePrograms
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fEnableTimeZoneRedirection
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fTurnOffSingleAppMode
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableClip
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!RedirectOnlyDefaultClientPrinter
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!RedirectOnlyDefaultClientPrinter
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fNoRemoteDesktopWallpaper
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!RemoteAppLogoffTimeLimit
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!RemoteAppLogoffTimeLimit
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!UseUniversalPrinterDriverFirst
HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!UseUniversalPrinterDriverFirst
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!ParticipateInLoadBalancing
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableThumbsDBOnNetworkFolders
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableThumbnailsOnNetworkFolders
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableThumbnails
HKLM\SOFTWARE\Policies\Microsoft\TabletPC!TurnOffTouchInput
HKCU\SOFTWARE\Policies\Microsoft\TabletPC!TurnOffTouchInput
HKLM\SOFTWARE\Policies\Microsoft\Tpm\BlockedCommands!Enabled, HKLM\SOFTWARE\Policies\Microsoft\Tpm\Blocked
HKLM\Software\Policies\Microsoft\TPM\BlockedCommands!IgnoreDefaultList
HKLM\Software\Policies\Microsoft\TPM\BlockedCommands!IgnoreLocalList
HKLM\Software\Policies\Microsoft\TPM!ActiveDirectoryBackup, HKLM\Software\Policies\Microsoft\TPM!RequireActiveDirect
HKLM\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupToDisk
HKCU\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupToDisk
HKLM\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupToNetwork
HKCU\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupToNetwork
HKLM\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupToOptical
HKCU\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupToOptical
HKLM\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupLauncher
HKCU\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupLauncher
HKLM\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupUI
HKCU\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupUI
HKLM\Software\Policies\Microsoft\Windows\Backup\Client!DisableSystemBackupUI
HKCU\Software\Policies\Microsoft\Windows\Backup\Client!DisableSystemBackupUI
HKLM\Software\Policies\Microsoft\Windows\Backup\Client!DisableRestoreUI
HKCU\Software\Policies\Microsoft\Windows\Backup\Client!DisableRestoreUI
HKLM\Software\Policies\Microsoft\Windows\System!AddAdminGroupToRUP
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!ConnectHomeDirToRoot
HKLM\Software\Policies\Microsoft\Windows\System!DeleteRoamingCache
HKLM\Software\Policies\Microsoft\Windows\System!CleanupProfiles
HKLM\Software\Policies\Microsoft\Windows\System!CompatibleRUPSecurity
HKLM\Software\Policies\Microsoft\Windows\System!SlowLinkDetectEnabled
HKLM\Software\Policies\Microsoft\Windows\System!DisableForceUnload
HKLM\Software\Policies\Microsoft\Windows\System!ProfileErrorAction
HKCU\Software\Policies\Microsoft\Windows\System!ExcludeProfileDirs
HKLM\Software\Policies\Microsoft\Windows\System!LeaveAppMgmtData
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!EnableProfileQuota, HKCU\Software\Microsoft\Windows\
HKLM\Software\Policies\Microsoft\Windows\System!ProfileUnloadTimeout
HKCU\Software\Policies\Microsoft\Windows\System!CscSuspendDirs
HKLM\Software\Policies\Microsoft\Windows\System!LocalProfile
HKLM\Software\Policies\Microsoft\Windows\System!ReadOnlyProfile
HKLM\Software\Policies\Microsoft\Windows\System!SlowLinkUIEnabled
HKLM\Software\Policies\Microsoft\Windows\System!WaitForNetwork
HKLM\Software\Policies\Microsoft\Windows\System!MachineProfilePath
HKLM\Software\Policies\Microsoft\Windows\System!UserProfileMinTransferRate, HKLM\Software\Policies\Microsoft\Window
HKLM\Software\Policies\Microsoft\Windows\System!ProfileDlgTimeOut
HKLM\Software\Policies\Microsoft\Windows\System!SlowLinkProfileDefault
HKLM\SOFTWARE\Policies\Microsoft\FVE!EncryptionMethod
HKLM\SOFTWARE\Policies\Microsoft\FVE\PlatformValidation!Enabled, HKLM\SOFTWARE\Policies\Microsoft\FVE\PlatformVali
HKLM\SOFTWARE\Policies\Microsoft\FVE!DefaultRecoveryFolderPath
HKLM\SOFTWARE\Policies\Microsoft\FVE!UseRecoveryPassword, HKLM\SOFTWARE\Policies\Microsoft\FVE!UseRecoveryD
HKLM\SOFTWARE\Policies\Microsoft\FVE!EnableNonTPM, HKLM\SOFTWARE\Policies\Microsoft\FVE!UsePartialEncryption
HKLM\Software\Policies\Microsoft\FVE!MorBehavior
HKLM\Software\Policies\Microsoft\FVE!ActiveDirectoryBackup, HKLM\Software\Policies\Microsoft\FVE!RequireActiveDirector
HKLM\Software\Policies\Microsoft\W32time\Parameters!NtpServer, HKLM\Software\Policies\Microsoft\W32time\Parameters!Ty
HKLM\Software\Policies\Microsoft\W32time\TimeProviders\NtpClient!Enabled
HKLM\Software\Policies\Microsoft\W32Time\TimeProviders\NtpServer!Enabled
HKLM\Software\Policies\Microsoft\W32Time\Config!FrequencyCorrectRate, HKLM\Software\Policies\Microsoft\W32Time\Confi
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI!ScenarioExecutionEnabled, HKLM\SOFTWARE\Policies\Microsoft\Windo
HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI!DataRetentionBySizeEnabled, HKLM\SOFTWARE\Policies\Microsoft\Win
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Windows!TurnOffWinCal
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Windows!TurnOffWinCal
HKLM\Software\Policies\Microsoft\Windows\Backup\Server!OnlySystemBackup
HKLM\Software\Policies\Microsoft\Windows\Backup\Server!NoBackupToDisk
HKLM\Software\Policies\Microsoft\Windows\Backup\Server!NoBackupToNetwork
HKLM\Software\Policies\Microsoft\Windows\Backup\Server!NoBackupToOptical
HKLM\Software\Policies\Microsoft\Windows\Backup\Server!NoRunNowBackup
HKLM\Software\Policies\Microsoft\Windows\Windows Collaboration!TurnOffWindowsCollaboration
HKCU\Software\Policies\Microsoft\Windows\Windows Collaboration!TurnOffWindowsCollaboration
HKLM\Software\Policies\Microsoft\Windows\Windows Collaboration!TurnOnWindowsCollaborationAuditing
HKCU\Software\Policies\Microsoft\Windows\Windows Collaboration!TurnOnWindowsCollaborationAuditing
HKLM\Software\Policies\Microsoft\Windows\WindowsColorSystem!ProhibitInstallUninstall
HKCU\Software\Policies\Microsoft\Windows\WindowsColorSystem!ProhibitInstallUninstall
HKLM\Software\Policies\Microsoft\Windows\WCN\Registrars!EnableRegistrars, HKLM\Software\Policies\Microsoft\Windows
HKLM\Software\Policies\Microsoft\Windows\WCN\UI!DisableWcnUi
HKCU\Software\Policies\Microsoft\Windows\WCN\UI!DisableWcnUi
HKLM\Software\Policies\Microsoft\Windows Defender\Scan!CheckForSignaturesBeforeRunningScan
HKLM\Software\Policies\Microsoft\Windows Defender\SpyNet!SpyNetReporting, HKLM\Software\Policies\Microsoft\Windows
HKLM\Software\Policies\Microsoft\Windows Defender\Signature Updates!ForceFullUpdate
HKLM\Software\Policies\Microsoft\Windows Defender\Reporting!DisableLoggingForKnownGood
HKLM\Software\Policies\Microsoft\Windows Defender\Reporting!DisableLoggingForUnknown
HKLM\Software\Policies\Microsoft\Windows Defender\Real-Time Protection!EnableUnknownPrompts
HKLM\Software\Policies\Microsoft\Windows Defender!DisableAntiSpyware
HKLM\Software\Policies\Microsoft\Windows Defender\Signature Updates!CheckAlternateDownloadLocation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!EnforceShellExtensionSecurity
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ConfirmFileDelete
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRecycleFiles
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRunasInstallPrompt
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!LinkResolveIgnoreLinkInfo
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32!NoBackButton
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32!NoPlacesBar
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32!NoFileMru
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDrives
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoManageMyComputerVerb
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!Place0, HKCU\Software\Microsoft\Windows\C
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!RecycleBinSize
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!MaxRecentDocs
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoComputersNearMe
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!NoEntireNetwork
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoViewOnDrive
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNetConnectDisconnect
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoCDBurning
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDFSTab
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFileMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoHardwareTab
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoShellSearchButton
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSecurityTab
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSharedDocuments
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoChangeKeyboardNavigationIndicators
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoChangeAnimation
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoViewContextMenu
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFolderOptions
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!PromptRunasInstallNetPath
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoThumbnailCache
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!PreXPSP2ShellProtocolBehavior
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!PreXPSP2ShellProtocolBehavior
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWinKeys
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ClassicShell
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SfcShowProgress
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SfcQuota
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SfcScan
HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SFCDllCacheDir
HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\ICFv4!BypassFirewall
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowOutboundDestinationUnreachable,
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowOutboundDestinationUnreachable
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\FileAndPrint!Enabled, HKLM\SOFTWARE\Polic
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\FileAndPrint!Enabled, HKLM\SOFTWARE\Poli
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\RemoteAdminSettings!Enabled, HKLM\SOFTWARE\Poli
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\RemoteAdminSettings!Enabled, HKLM\SOFTWARE\Pol
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\RemoteDesktop!Enabled, HKLM\SOFTWARE\Po
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\RemoteDesktop!Enabled, HKLM\SOFTWARE\
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\UPnPFramework!Enabled, HKLM\SOFTWARE\P
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\UPnPFramework!Enabled, HKLM\SOFTWARE
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts!AllowUserPrefMerge
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\GloballyOpenPorts!AllowUserPrefMerge
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications!AllowUserPrefMerge
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedApplications!AllowUserPrefMerge
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging!LogDroppedPackets, HKLM\SOFTWARE\Policies
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging!LogDroppedPackets, HKLM\SOFTWARE\Policie
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts!Enabled, HKLM\SOFTWARE\Policies\
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\GloballyOpenPorts!Enabled, HKLM\SOFTWARE\Policies
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications!Enabled, HKLM\SOFTWARE\Polici
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedApplications!Enabled, HKLM\SOFTWARE\Polic
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile!DoNotAllowExceptions
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile!DoNotAllowExceptions
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile!DisableNotifications
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile!DisableNotifications
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile!DisableUnicastResponsesToMulticastBroadcast
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile!DisableUnicastResponsesToMulticastBroadcast
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile!EnableFirewall
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile!EnableFirewall
HKLM\SOFTWARE\Policies\Microsoft\Windows Mail!DisableCommunities
HKCU\SOFTWARE\Policies\Microsoft\Windows Mail!DisableCommunities
HKLM\SOFTWARE\Policies\Microsoft\Windows Mail!ManualLaunchAllowed
HKCU\SOFTWARE\Policies\Microsoft\Windows Mail!ManualLaunchAllowed
HKLM\Software\Policies\Microsoft\WMDRM!DisableOnline
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!EnableScreenSaver
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!ProxyPolicy, HKCU\Software\Policies\Microsoft\W
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!ProxyPolicy, HKCU\Software\Policies\Microsoft\Wi
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!NetworkBufferingPolicy, HKCU\Software\Policies\Microsoft\Windows
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!ProxyPolicy, HKCU\Software\Policies\Microsoft\W
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!DoNotShowAnchor
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!GroupPrivacyAcceptance
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!HideNetworkTab
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!HidePrivacyTab
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!HideSecurityTab
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!DisableAutoUpdate
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventCDDVDMetadataRetrieval
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventCodecDownload
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!DesktopShortcut
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!PreventLibrarySharing
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventMusicFileMetadataRetrieval
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!QuickLaunchShortcut
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventRadioPresetsRetrieval
HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!DontUseFrameInterpolation
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!SetAndLockSkin, HKCU\Software\Policies\Microsoft\WindowsMediaP
HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols!WindowsMediaStreamingProtocols, HKCU\Software\Policie
HKLM\Software\Policies\Microsoft\Messenger\Client!PreventRun
HKCU\Software\Policies\Microsoft\Messenger\Client!PreventRun
HKLM\Software\Policies\Microsoft\Messenger\Client!PreventAutoRun
HKCU\Software\Policies\Microsoft\Messenger\Client!PreventAutoRun
HKLM\Software\Policies\Microsoft\Windows\WinRM\Service!AllowAutoConfig, HKLM\Software\Policies\Microsoft\Windows\Win
HKLM\Software\Policies\Microsoft\Windows\WinRM\Client!AllowBasic
HKLM\Software\Policies\Microsoft\Windows\WinRM\Service!AllowBasic
HKLM\Software\Policies\Microsoft\Windows\WinRM\Client!AllowUnencryptedTraffic
HKLM\Software\Policies\Microsoft\Windows\WinRM\Service!AllowUnencryptedTraffic
HKLM\Software\Policies\Microsoft\Windows\WinRM\Client!AllowDigest
HKLM\Software\Policies\Microsoft\Windows\WinRM\Client!AllowKerberos
HKLM\Software\Policies\Microsoft\Windows\WinRM\Service!AllowKerberos
HKLM\Software\Policies\Microsoft\Windows\WinRM\Client!AllowNegotiate
HKLM\Software\Policies\Microsoft\Windows\WinRM\Service!AllowNegotiate
HKLM\Software\Policies\Microsoft\Windows\WinRM\Client!TrustedHosts, HKLM\Software\Policies\Microsoft\Windows\WinRM\C
HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS!AllowRemoteShellAccess
HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS!MaxConcurrentUsers
HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS!IdleTimeout, HKLM\
HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS!MaxMemoryPerShellMB
HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS!MaxProcessesPerShell
HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS!MaxShellsPerUser
HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS!ShellTimeOut
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!AutoInstallMinorUpdates
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!ElevateNonAdmins
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!AcceptTrustedPublisherCerts
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!DetectionFrequencyEnabled, HKLM\Software\Policies\Micr
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAutoUpdate, HKLM\Software\Policies\Microsoft\Windows
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!RebootWarningTimeoutEnabled, HKLM\Software\Policies\
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUAsDefaultShutdownOption
HKCU\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUAsDefaultShutdownOption
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUShutdownOption
HKCU\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUShutdownOption
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!TargetGroupEnabled, HKLM\Software\Policies\Microsoft\Wind
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!AUPowerManagement
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAutoRebootWithLoggedOnUsers
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate!DisableWindowsUpdateAccess
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!RebootRelaunchTimeoutEnabled, HKLM\Software\Policies
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!RescheduleWaitTimeEnabled, HKLM\Software\Policies\Mi
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!UseWUServer
HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!IncludeRecommendedUpdates
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoAutoUpdate
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!ShutdownSessionTimeout
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableShutdownNamedPipe
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!Shell
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!SoftwareSASGeneration
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisplayLastLogonInfo
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DontDisplayLogonHoursWarnings
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!ReportControllerMissing
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!ReportControllerMissing
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!LogonHoursAction
HKLM\Software\Policies\Microsoft\Windows\System!AllowBlockingAppsAtShutdown
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\SearchExtensions!InternetExtensionName, HKCU\Softwar
Requirements
At least Windows Vista
Microsoft Windows Server 2003, Windows XP, and Windows 2000 operating systems only
At least Microsoft Windows Server 2003
At least Microsoft Windows XP Professional with SP1 or Windows Server 2003 family
At least Microsoft Windows XP Professional with SP2
At least Microsoft Windows 2000
Windows XP SP2 or Windows Server 2003 SP1, or computers with BITS 2.0 installed.
Windows XP or Windows Server 2003, or computers with BITS 1.5 installed.
at least Windows NetMeeting v3.0
At least Microsoft Windows XP Professional or Windows Server 2003 family
At least Microsoft Windows 2000 Service Pack 1
Microsoft Windows 2000 only
Microsoft Windows Server 2003 and Windows XP operating systems only
Windows Codename Longhorn Server with Desktop Experience installed or Windows Vista
Windows Codename Longhorn Server with Desktop Experience installed or Windows Vista
Microsoft Windows XP Professional only
Microsoft Windows Server 2003 and Windows XP only
At least Internet Explorer 6 Service Pack 1
At least Microsoft Windows 2000 Service Pack 3, Microsoft Windows XP Professional Service Pack 1 or Microsoft Windows S
At least Microsoft Windows XP Professional with SP2 or Windows Server 2003 family with SP1
Microsoft Windows Server 2003 only
At least Internet Explorer 6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1
At least Internet Explorer 7.0
Only Internet Explorer 6.0 in Windows 2003 Service Pack 1
At least Internet Explorer 6.0 in Windows 2003 Service Pack 1
At least Internet Explorer 6.0 in Windows 2003 Service Pack 1. Not supported on Windows Vista
At least Internet Explorer 6.0 in Windows 2003 Service Pack 1. Not supported on Windows Vista
Only Internet Explorer 6.0
Only Internet Explorer 5.0 and Internet Explorer 6.0
At least Internet Explorer 5.0. Not supported on Windows Vista
At least Internet Explorer 7.0 in Windows Vista
At least Microsoft Windows Server 2003 R2
Windows Installer v3.0
Microsoft Windows XP or Windows 2000 with Windows Installer v2.0
Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only
Microsoft Windows XP Professional with SP2 and Windows Server 2003 family only
Windows 2000 or later, running IIS. Not supported on Windows Server 2003
At least Microsoft Windows Vista, or an earlier version with Windows Search
At least Microsoft Windows 2000 Service Pack 3 or Microsoft Windows XP Professional Service Pack 1
Microsoft Windows Server 2003 and Windows XP operating systems only
At least Windows Vista with Service Pack 1
At least Microsoft Windows Server 2003 with SP1
At least Microsoft Windows Server 2003, Enterprise Edition
Windows XP Professional or Windows Server 2003 family only
At least Microsoft Windows 2000 Terminal Services
At least Microsoft Windows 2000 Terminal Services
Microsoft Windows Server 2003 with Service Pack 1 only
At least Microsoft Windows Server 2003 with Service Pack 2
Windows Vista Service Pack 1
Windows Media Player 9 Series and later.
Windows Media Player for Windows XP and later.
Windows Media Player 11 for Windows XP or Windows Media Player 11 for Windows Vista or later.
Explain Text
The ActiveX Installer Service is the solution to delegate the install of per-machine ActiveX controls to a Standard User in the e
Prevents users from using Add or Remove Programs to configure installed services.\n\n\nThis setting removes the "Set up se
Removes the Add New Programs button from the Add or Remove Programs bar. As a result, users cannot view or change the attac
Removes the Add/Remove Windows Components button from the Add or Remove Programs bar. As a result, users cannot view or
Removes the Change or Remove Programs button from the Add or Remove Programs bar. As a result, users cannot view or change
Removes the "Add a program from CD-ROM or floppy disk" section from the Add New Programs page. This prevents users from usi
Removes the "Add programs from Microsoft" section from the Add New Programs page. This setting prevents users from using Ad
Prevents users from viewing or installing published programs.\n\n\nThis setting removes the "Add programs from your network" s
Removes the Set Program Access and Defaults button from the Add or Remove Programs bar. As a result, users cannot view or
Prevents users from using Add or Remove Programs.\n\n\nThis setting removes Add or Remove Programs from Control Panel and
Removes links to the Support Info dialog box from programs on the Change or Remove Programs page.\n\n\nPrograms listed on the
Specifies the category of programs that appears when users open the "Add New Programs" page.\n\n\nIf you enable this setting
This policy setting prevents a Federation Service in Active Directory Federation Services (AD FS) from being installed or run.\n
Specifies whether to prevent the MS-DOS subsystem (ntvdm.exe) from running on this computer. This setting affects the launchi
Specifies whether to prevent the MS-DOS subsystem (ntvdm.exe) from running for all users. This setting affects the launching o
This policy controls the visibility of the Program Compatibility property page shell extension. This shell extension is visible
This policy controls the state of the application compatibility engine in the system.\n\n\nThe engine is part of the loader and
This policy controls the state of the Program Compatibility Assistant in the system.\n \nThe PCA monitors user initiated
This policy controls the state of the Program Compatibility Assistant in the system.\n \nThe PCA monitors user initiated
This policy controls the state of the Program Compatibility Wizard.\n\n\nWhen enabled, this policy disables the start page of th
This policy setting allows you to manage the default risk level for file types. To fully customize the risk level for file attachme
This policy setting allows you to manage whether Windows marks file attachments with information about their zone of origin (i.
This policy setting allows you to manage whether users can manually remove the zone information from saved file attachments
This policy setting allows you to configure the list of high risk file types. If the file attachment is in the list of high risk file
This policy setting allows you to configure the list of low risk file types. If the attachment is in the list of low risk file types,
This policy setting allows you to configure the list of moderate risk file types. If the attachment is in the list of moderate risk
This policy setting allows you to manage the behavior for notifying registered antivirus programs. If multiple programs are reg
This policy setting allows you to configure the logic that Windows uses to determine the risk for file attachments.\n\n\nPreferrin
Sets the default behavior for Autorun commands.\n\n\nAutorun commands are generally stored in autorun.inf files. They often
Sets the default behavior for Autorun commands.\n\n\nAutorun commands are generally stored in autorun.inf files. They often
If this policy is enabled, the "Always do this..." checkbox in Autoplay dialog will not be set by default when the dialog is shown.
If this policy is enabled, the "Always do this..." checkbox in Autoplay dialog will not be set by default when the dialog is shown.
Turns off the Autoplay feature.\n\n\nAutoplay begins reading from a drive as soon as you insert media in the drive. As a resul
Turns off the Autoplay feature.\n\n\nAutoplay begins reading from a drive as soon as you insert media in the drive. As a resul
This setting determines if the BITS Peer-caching feature is enabled on a specific computer. By default, the files in a BITS job
This setting specifies whether the computer will act as a BITS peercaching client. By default, when BITS peercaching is enabled,
This setting specifies whether the computer will act as a BITS peercaching server. By default, when BITS peercaching is enabled,
This setting specifies the maximum age of files in the Peercache. In order to make the most efficient use of disk space, by def
This setting specifies the maximum amount of disk space that can be used for the BITS Peercache, as a percentage of the total s
This setting limits the amount of time that BITS will take to download the files in a BITS job.\nThe time limit applies only t
This setting limits the network bandwidth that BITS uses for background transfers (this setting does not affect foreground transf
This setting limits the network bandwidth that BITS uses for peercache transfers (this setting does not affect transfers from
This setting specifies the maximum number of BITS jobs that can be created by a user. By default, BITS limits the total number
This setting specifies the maximum number of BITS jobs that can be created for all users of the computer. By default, BITS limi
This setting specifies the maximum number of files that a BITS job can contain. By default, a BITS job is limited to 200 files.
This setting specifies the maximum number of ranges that can be added to a file in a BITS job. By default, files in a BITS job a
This setting specifies the number of days a pending BITS job can remain inactive before the job is considered abandoned. By def
Specifies whether Import Video can run.\n\n\nImport Video is a feature of Windows Vista that can be used to import video from a
Specifies whether Import Video can run.\n\n\nImport Video is a feature of Windows Vista that can be used to import video from a
If you enable this setting all Customer Experience Improvement Program uploads are redirected to Microsoft Operations Manager
This policy setting will enable tagging of Windows Customer Experience Improvement data when a study is being conducted.\n\n\n
Determines the cipher suites used by the Secure Socket Layer (SSL).\n\n\nIf this setting is enabled, SSL ciph
Directs the system to search Active Directory for missing Component Object Model (COM) components that a program requires.\n\
Directs the system to search Active Directory for missing Component Object Model (COM) components that a program requires.\n\
Make the automatic acceptance of incoming calls persistent.
Disables the application sharing feature of NetMeeting completely. Users will not be able to host or view shared applications.
Disables the audio feature of NetMeeting. Users will not be able to send or receive audio.
Disables the Chat feature of NetMeeting.
Disables the directory feature of NetMeeting.\n\n\nUsers will not logon to a directory (ILS) server when NetMeeting starts. Us
Disables full duplex mode audio. Users will not be able to listen to incoming audio while speaking into the microphone. Old
Disables the 2.x whiteboard feature of NetMeeting.\n\n\nThe 2.x whiteboard is available for compatibility with older versions
Disables the remote desktop sharing feature of NetMeeting. Users will not be able to set it up or use it for controlling their c
Disables the Advanced Calling button on the General Options page. Users will not then be able to change the call placemen
Disables the T.126 whiteboard feature of NetMeeting.
Configures NetMeeting to download settings for users each time it starts.\n\n\nThe settings are downloaded from the URL list
Hides the Audio page of the Tools Options dialog. Users will not then be able to change audio settings.
Hides the General page of the Tools Options dialog. Users will not then be able to change personal identification and bandwid
Hides the Security page of the Tools Options dialog. Users will not then be able to change call security and authentication set
Hides the Video page of the Tools Options dialog. Users will not then be able to change video settings.
Limits the bandwidth audio and video will consume when in a conference. This setting will guide NetMeeting to choose the rig
Limits the size of files users can send to others in a conference.
Prevents users from adding directory (ILS) servers to the list of those they can use for placing calls.
Prevents users from sharing applications in true color. True color sharing uses more bandwidth in a conference.
Prevents users from turning on automatic acceptance of incoming calls.\n\n\nThis ensures that others cannot call and conne
Prevents users from changing the way calls are placed, either directly or via a gatekeeper server.
Prevents user from changing the DirectSound audio setting. DirectSound provides much better audio quality, but older audio
Prevents users from allowing others in a conference to control what they have shared. This enforces a read-only mode; the ot
Prevents users from sharing the whole desktop. They will still be able to share individual applications.
Prevents users from receiving files from others in a conference.
Prevents users from receiving video. Users will still be able to send video provided they have the hardware."
Prevents users from sending files to others in a conference.
Prevents users from sending video if they have the hardware. Users will still be able to receive video from others.
Prevents users from sharing anything themselves. They will still be able to view shared applications/desktops from others.
Prevents users from sharing command prompts. This prevents users from inadvertently sharing out applications, since comm
Prevents users from sharing Explorer windows. This prevents users from inadvertently sharing out applications, since Explor
Prevents users from viewing directories as Web pages in a browser.
Sets the level of security for both outgoing and incoming NetMeeting calls.
Sets the URL NetMeeting will display when the user chooses the Help Online Support command.
This setting affects the visual style and presentation of the Control Panel.\n\n\nIt allows you to disable the new categorized
Hides specified Control Panel items.\n\n\nThis setting removes Control Panel items (such as "Mouse", "System" or "Programs a
Disables all Control Panel programs.\n\n\nThis setting prevents Control.exe, the program file for Control Panel, from starting
Hides all Control Panel items and folders except those specified in this setting.\n\n\nThis setting removes all Control Panel
Removes the Appearance and Themes tabs from Display in Control Panel.\n\n\nWhen this setting is enabled, it removes the desk
Removes the Desktop tab from Display in Control Panel.\n\n\nThis setting prevents users from using Control Panel to change
Removes the Screen Saver tab from Display in Control Panel.\n\n\nThis setting prevents users from using Control Panel to ad
Removes the Settings tab from Display in Control Panel.\n\n\nThis setting prevents users from using Control Panel to add, con
This setting allows you to load a specific visual style file by entering the path (location) of the visual style file.\n\n\nThis c
Determines whether screen savers used on the computer are password protected.\n\n\nIf you enable this setting, all screen sa
Prevents users from adding or changing the background design of the desktop.\n\n\nBy default, users can use the Desktop tab o
Prevents users from changing the visual style of the windows and buttons displayed on their screens. When enabled, this sett
Prevents users from changing the size of the font in the windows and buttons displayed on their screens.\n\n\nIf this setting is
This setting forces the theme color to be the default color scheme.\n\n\nIf you enable this setting, a user cannot change the
Disables Display in Control Panel.\n\n\nIf you enable this setting, Display in Control Panel does not run. When users try to
This setting effects the Themes tab that controls the overall appearance of windows.\n\n\nIt is accessed through the Display ico
Enables desktop screen savers.\n\n\nIf you disable this setting, screen savers do not run. Also, this setting disables the Scre
Specifies the screen saver for the user's desktop.\n\n\nIf you enable this setting, the system displays the specified screen save
Specifies how much user idle time must elapse before the screen saver is launched.\n\n\nWhen configured, this idle time can be
This policy setting allows an administrator to standardize the logon pictures for all users on a system to the default user pic
This policy setting specifies a default logon domain which may be a different domain than the machine joined domain. Without t
This policy setting allows the administrator to exclude the specified\ncredential providers from use during authentication.\n\n\
This policy setting applies to applications using the Cred SSP component (for example: Terminal Server).\n\n\nIf you enable
This policy setting applies to applications using the Cred SSP component (for example: Terminal Server).\n\n\nIf you enabl
By default administrator accounts are not displayed when attempting to elevate a running application. \n\n\nIf you enable this
This policy setting requires the user to enter Microsoft Windows credentials using a trusted path, to prevent a Trojan horse or
Prevents users from changing their Windows password on demand.\n\n\nThis setting disables the "Change Password" button o
Prevents users from locking the system.\n\n\nWhile locked, the desktop is hidden and the system cannot be used. Only the use
This setting disables or removes all menu items and buttons that log the user off the system.\n\n\nAlso, see the "Remove Logo
Prevents users from starting Task Manager (Taskmgr.exe).\n\n\nIf this setting is enabled and users try to start Task Manager
Allows you to specify that local computer administrators can supplement the "Define Activation Security Check exemptions" list.\n
Allows you to view and change a list of DCOM server application ids (appids) which are exempted from the DCOM Activation secur
Adds and deletes specified Web content items.\n\n\nYou can use the "Add" box in this setting to add particular Web-based items o
Permits only bitmap images for wallpaper. This setting limits the desktop background ("wallpaper") to bitmap (.bmp) files. I
Specifies the desktop background ("wallpaper") displayed on all users' desktops.\n\n\nThis setting lets you specify the wallpap
Disables Active Desktop and prevents users from enabling it.\n\n\nThis setting prevents users from trying to enable or disable
Removes Active Desktop content and prevents users from adding Active Desktop content. \n\n\nThis setting removes all Active D
Remote shared folders are not added to Network Locations whenever you open a document in the shared folder.\n\n\nIf you disa
Prevents users from saving certain changes to the desktop.\n\n\nIf you enable this setting, users can change the desktop, bu
Enables Active Desktop and prevents users from disabling it.\n\n\nThis setting prevents users from trying to enable or disable A
Displays the filter bar above the results of an Active Directory search. The filter bar consists of buttons for applying additional
Hides the Active Directory folder in Network Locations.\n\n\nThe Active Directory folder displays Active Directory objects in a b
Removes icons, shortcuts, and other default and user-defined items from the desktop, including Briefcase, Recycle Bin, Com
Removes the Internet Explorer icon from the desktop and from the Quick Launch bar on the taskbar.\n\n\nThis setting does not
Removes the Network Locations icon from the desktop.\n\n\nThis setting only affects the desktop icon. It does not prevent us
Specifies the maximum number of objects the system displays in response to a command to browse or search Active Directory. Thi
Prevents users from manipulating desktop toolbars.\n\n\nIf you enable this setting, users cannot add or remove toolbars from the
Prevents users from adding Web content to their Active Desktop.\n\n\nThis setting removes the "New" button from Web tab in Di
Prevents users from adjusting the length of desktop toolbars. Also, users cannot reposition items or toolbars on docked toolbar
Prevents the user from enabling or disabling Active Desktop or changing the Active Desktop configuration.\n\n\nThis is a compr
Prevents users from removing Web content from their Active Desktop.\n\n\nIn Active Desktop, you can add items to the desktop
Prevents users from deleting Web content from their Active Desktop.\n\n\nThis setting removes the Delete button from the Web t
Prevents users from changing the properties of Web content items on their Active Desktop.\n\n\nThis setting disables the Prope
Prevents users from changing the path to their profile folders.\n\n\nBy default, a user can change the location of their individua
This setting hides Computer from the desktop and from the new Start menu. It also hides links to Computer in the Web view of al
Removes most occurrences of the My Documents icon.\n\n\nThis setting removes the My Documents icon from the desktop, from
This setting hides Properties on the context menu for Computer.\n\n\nIf you enable this setting, the Properties option will not
This setting hides Properties for the context menu on the Documents icon.\n\n\nNote: In operating systems earlier than Microso
Removes the Properties option from the Recycle Bin context menu.\n\n\nIf you enable this setting, the Properties option will no
Removes most occurrences of the Recycle Bin icon.\n\n\nThis setting removes the Recycle Bin icon from the desktop, from Win
Prevents users from using the Desktop Cleanup Wizard.\n\n\nIf you enable this setting, the Desktop Cleanup wizard does not au
Allows members of the Administrators group to install and update the drivers for any device, regardless of other policy settings.\
Specifies a list of Plug and Play hardware IDs and compatible IDs that describe devices that can be installed.\n\n\nThis setting
Specifies a list of device setup class GUIDs describing devices that can be installed.\n\n\nThis setting is intended to be used o
Specifies a list of device setup class GUIDs describing device drivers that non-administrator members of the built-in Users gr
Specifies whether or not remote access to the Plug and Play interface is allowed. \n \nIf you enable this setting, remote connect
Determines how the system responds when a user tries to install device driver files that are not digitally signed.\n\n\nThis sett
Specifies the number of seconds the system will wait for a device installation task to complete. If the task is not complete withi
This setting configures the location that Windows searches for drivers when a new piece of hardware is found.\n\n\nBy defau
Specifies a custom message that is displayed to the user in the text of the notification balloon when policy prevents the install
Specifies a custom message that is displayed to the user in the title of the notification balloon when policy prevents the installa
Specifies whether or not a system restore point is created when a new device driver is installed on your machine.\n\n\nIf you ena
Specifies whether or not to send a Windows Error Report when a generic driver is installed on a device.\n\n\nIf you enable this
This setting controls the installation policy for devices that are not specifically described by any other policy.\n\n\nIf you enab
Specifies a list of Plug and Play hardware IDs and compatible IDs for devices that cannot be installed.\n\n\nIf you enable this se
Specifies a list of Plug and Play device setup class GUIDs for devices that cannot be installed.\n\n\nIf you enable this setting,
Prevents removable devices from being installed.\n\n\nIf you enable this setting, removable devices may not be installed, and ex
When selecting which driver to install, do not distinguish between drivers that are signed by a Microsoft Windows Publisher certi
Do not display "Found New Hardware" balloons during device installation.\n\n\nIf you enable this setting, "Found New Hardware"
Specifies whether the administrator will be prompted about going to Windows Update to search for device drivers using the Int
Specifies whether the administrator will be prompted about going to Windows Update to search for device drivers using the Int
Allows you to configure how often a Distributed File System (DFS) client attempts to discover domain controllers on their networ
Specifies whether Digital Locker can run.\n\n\nDigital Locker is a dedicated download manager associated with Windows Marketp
Specifies whether Digital Locker can run.\n\n\nDigital Locker is a dedicated download manager associated with Windows Marketp
Substitutes custom alert text in the disk diagnostic message shown to users when a disk reports a S.M.A.R.T. fault.\n\n\nIf you
Determines the execution level for S.M.A.R.T.-based disk diagnostics.\n\n\nSelf-Monitoring And Reporting Technology (S.M.A.R.T.)
Turns off the boot and resume optimizations for the hybrid hard disks in the system.\n\n\nIf you enable this policy setting, t
Turns off the power save mode on the hybrid hard disks in the system.\n\n\nIf you enable this policy, the disks will not be pu
Turns off all support for the non-volatile (NV) cache on all hybrid hard disks in the system. To check if you have hybrid hard
Turns off the solid state mode for the hybrid hard disks. \n\n\nIf you enable this policy setting, frequently written files such
Extends the disk quota policies in this folder to NTFS file system volumes on removable media.\n\n\nIf you disable this setting
Specifies the default disk quota limit and warning level for new users of the volume.\n\n\nThis setting determines how much disk
Enables and disables disk quota management on all NTFS volumes of the computer, and prevents users from changing the setting.
Determines whether disk quota limits are enforced and prevents users from changing the setting.\n\n\nIf you enable this setting
Determines whether the system records an event in the local Application log when users reach their disk quota limit on a volume
Determines whether the system records an event in the Application log when users reach their disk quota warning level on a vol
Specifies that Distributed Link Tracking clients in this domain may use the Distributed Link Tracking (DLT) server, which run
Specifies whether the computers to which this setting is applied may attach suffixes to an unqualified multi-label name before s
Specifies a connection-specific DNS suffix. This setting supersedes the connection-specific DNS suffixes set on the computers to
Defines the DNS servers to which a computer sends queries when it attempts to resolve names.\n\n\nWarning: The list of the DNS
Determines the DNS suffixes to attach to an unqualified single-label name before submission of a DNS query for that name.\n\n\n
Determines if dynamic update is enabled.\n\n\nComputers configured for dynamic update automatically register and update their
Specifies the primary Domain Name System (DNS) suffix for all affected computers. The primary DNS suffix is used in DNS name r
Determines whether the DNS client performs primary DNS suffix devolution in a name resolution process.\n\n\nWhen a user submit
Determines if a computer performing dynamic registration may register A and PTR resource records with a concatenation of its
Determines whether the registration of PTR resource records is enabled for the computers to which this policy is applied.\n\n\
Specifies the Registration Refresh Interval of A and PTR resource records for computers to which this setting is applied. Thi
Determines whether a DNS client that attempts to register its A resource record should overwrite an existing A resource record
Specifies the value for the Time-To-Live (TTL) field in A and PTR resource records registered by the computers to which this sett
Local Link Multicast Name Resolution (LLMNR) is a secondary name resolution protocol. Queries are sent over the Local Link, a
Specifies whether the computers to which this setting is applied use secure dynamic update or standard dynamic update for re
Specifies whether the computers to which this setting is applied may send dynamic updates to the zones named with a single lab
This policy setting controls the ability to change the color of window frames.\n\n\nIf you enable this policy setting, you preve
This policy setting controls the ability to change the color of window frames.\n\n\nIf you enable this policy setting, you preve
This policy setting controls how some graphics are rendered and facilitates other features, including Flip, Flip3D, and Taskbar T
This policy setting controls how some graphics are rendered and facilitates other features, including Flip, Flip3D, and Taskbar T
Flip3D is a 3D window switcher.\n\n\nIf you enable this setting, Flip3D will be inaccessible.\n\n\nIf you disable or do not configu
Flip3D is a 3D window switcher.\n\n\nIf you enable this setting, Flip3D will be inaccessible.\n\n\nIf you disable or do not configu
This policy setting controls the appearance of window animations such as those found when restoring, minimizing, and maximizin
This policy setting controls the appearance of window animations such as those found when restoring, minimizing, and maximizin
This policy setting controls the default color for window frames when the user does not specify a color.\n\n\nIf you enable this p
This policy setting controls the default color for window frames when the user does not specify a color.\n\n\nIf you enable this p
Prevents Windows Explorer from encrypting files that are moved to an encrypted folder.\n\n\nIf you disable this setting or do n
This setting determines the corporate server to which Windows Error Reporting will send reports (instead of sending reports t
This setting determines the consent behavior of Windows Error Reporting. If Consent level is set to "Always ask before sending
This setting determines the consent behavior of Windows Error Reporting. If Consent level is set to "Always ask before sending
Configures how errors are reported and what information is sent when Error Reporting is enabled.\n\n\nThis Policy will not enable
This setting controls the behavior of the Windows Error Reporting archive. If Archive behavior is set to "Store all", all data c
This setting controls the behavior of the Windows Error Reporting archive. If Archive behavior is set to "Store all", all data c
This setting determines the behavior of the Windows Error Reporting queue. If Queuing behavior is set to "Default", Windows
This setting determines the behavior of the Windows Error Reporting queue. If Queuing behavior is set to "Default", Windows
This policy setting determines the consent behavior of Windows Error Reporting for specific event types.\n\n\nIf this policy set
This policy setting determines the consent behavior of Windows Error Reporting for specific event types.\n\n\nIf this policy set
This setting controls whether or not errors in general applications are included when error reporting is enabled.\n\n\nWhen this s
If this setting is enabled Windows Error Reporting events will not be logged to the system event log.
If this setting is enabled Windows Error Reporting events will not be logged to the system event log.
If this setting is enabled, Windows Error Reporting will not send any problem information to Microsoft. Additionally, solution i
If this setting is enabled, Windows Error Reporting will not send any problem information to Microsoft. Additionally, solution i
Use this setting to control whether or not a user is given the choice to report an error.\n\n\nWhen Display Error Notification is
If this setting is enabled any additional data requests from Microsoft in response to a Windows Error Reporting event will be au
If this setting is enabled any additional data requests from Microsoft in response to a Windows Error Reporting event will be au
This setting determines the behavior of the default consent setting in relation to custom consent settings. If this setting is ena
This setting determines the behavior of the default consent setting in relation to custom consent settings. If this setting is ena
This setting specifies the applications that are always included in error reporting.\n\n\nWhen this setting is enabled, You can cr
This setting determines the behavior of the error reporting exclusion list. Windows will not send reports for any process added
This setting determines the behavior of the error reporting exclusion list. Windows will not send reports for any process added
This setting controls error reporting for errors in general applications when error reporting is enabled.\n\n\nThe "Default" dropdow
This policy setting prevents the display of the user interface for critical errors.\n\n\nIf you enable this policy setting, Windows E
This setting controls whether or not errors in the operating system are included when error reporting is enabled.\n\n\nWhen this s
This policy setting allows you to configure the server address, refresh interval, and issuer certificate authority (CA) of
This policy setting controls Event Log behavior when the log file reaches its maximum size and takes effect only if the “Retain o
This policy setting specifies to use the security descriptor for the log using the Security Descriptor Definition Language (SDDL)
This policy setting controls the location of the log file. The location of the file must be writable by the Event Log service and
This policy setting specifies the maximum size of the log file in kilobytes.\n\n\nIf you enable this policy setting, you can con
This policy setting controls Event Log behavior when the log file reaches its maximum size.\n\n\nWhen this policy setting is e
This policy setting turns on logging.\n\n\nIf you enable or do not configure this policy setting, then events can be written to th
This is the program that will be invoked when the user clicks the events.asp link.
This specifies the command line parameters that will be passed to the events.asp program
This is the URL that will be passed to the Description area in the Event Properties dialog box. Change this value if you want t
This policy setting configures Windows Explorer to always display the menu bar.\n\n\nNote: By default, the menu bar is not dis
This policy setting allows administrators to prevent users from adding new items such as files or folders to the root of their Use
This policy is similar to settings directly available to computer users. Disabling animations can improve usability for users wi
Disabling heap termination on corruption can allow certain legacy plug-in applications to function without terminating Explorer
This policy setting allows you to configure the recovery behavior for corrupted files to one of three states:\n\n\nRegular: Detec
Symbolic links can introduce vulnerabilities in certain applications. To mitigate this issue, you can selectively enable or dis
All redirected shell folders, such as Contacts, Documents, Desktop, Favorites, Music, Pictures, Videos, Start Menu, and AppData\Ro
This policy setting allows the administrator to define whether Folder Redirection should use localized names for the All Prog
This policy setting allows the administrator to define whether Folder Redirection should use localized names for the All Prog
Hides the Details Pane in Windows Explorer.\n\n\nIf you enable this policy setting, the Details Pane in Windows Explorer is hid
Hides the Preview Pane in Windows Explorer.\n\n\nIf you enable this policy setting, the Preview Pane in Windows Explorer is h
Manages download of game box art and ratings from the Windows Metadata Services.\n\n\nIf you enable this setting, game info
Tracks the last play time of games in the Games folder.\n\n\nIf you enable this setting the last played time of games will not be
Determines how programs interpret two-digit years.\n\n\nThis setting specifies the largest two-digit year interpreted as being
This policy prevents users from changing their user geographical location (GeoID).\n\n\nIf this policy is Enabled, then the user
This policy prevents users from changing their user geographical location (GeoID).\n\n\nIf this policy is Enabled, then the user
This policy prevents a user from selecting a supplemental custom locale as their user locale. The user is restricted to the set of
This policy prevents a user from selecting a supplemental custom locale as their user locale. The user is restricted to the set of
This policy prevents the user from customizing their locale by changing their user overrides.\n\n\nAny existing overrides in plac
This policy prevents the user from customizing their locale by changing their user overrides.\n\n\nAny existing overrides in plac
This is a setting for computers with more than one UI language installed. If you enable this setting, the UI language of Win
This policy removes the Administrative options from the Regional and Language Options control panel. Administrative options in
This policy removes the option to change the user's geographical location (GeoID) from the Language and Regional Options contr
This policy removes the option to change the user's menus and dialogs (UI) language from the Language and Regional Options co
This policy removes the regional formats interface from the Regional and Language Options control panel. This does not, howeve
This setting restricts users to the specified language by disabling the menus and dialog box controls in the Regional and Lang
This policy restricts the permitted system locales to the specified list. If the list is empty, it locks the system locale to its
This policy restricts users on a machine to the specified list of user locales. If the list is empty, it locks all user locales to
This policy restricts users on a machine to the specified list of user locales. If the list is empty, it locks all user locales to
This is a setting for computers with more than one UI language installed. If you enable this setting the UI language of Windows
This is a setting for computers with more than one UI language installed. If you enable this setting the UI language of Windo
Allows user-based policy processing, roaming user profiles, and user object logon scripts for interactive logons across forests
Always use local ADM files for the Group Policy snap-in.\n\n\nBy default, when you edit a Group Policy object (GPO) using the
Creates new Group Policy object links in the disabled state.\n\n\nThis setting creates all new Group Policy object links in the
Sets the default display name for new Group Policy objects.\n\n\nThis setting allows you to specify the default name for new
This setting controls the ability of users to view their Resultant Set of Policy (RSoP) data.\n\n\nBy default, interactively l
This setting controls the ability of users to view their Resultant Set of Policy (RSoP) data.\n\n\nBy default, interactively l
Determines when disk quota policies are updated.\n\n\nThis setting affects all policies that use the disk quota component of
Determines when encryption policies are updated.\n\n\nThis setting affects all policies that use the encryption component of
Prevents administrators from viewing or using Group Policy preferences.\n\n\nA Group Policy administration (.adm) file can cont
Determines when folder redirection policies are updated.\n\n\nThis setting affects all policies that use the folder redirectio
Determines which domain controller the Group Policy Object Editor snap-in uses.\n\n\n-- "Use the Primary Domain Controller"
Specifies how often Group Policy for computers is updated while the computer is in use (in the background). This setting speci
Specifies how often Group Policy is updated on domain controllers while they are running (in the background). The updates spec
Specifies how often Group Policy for users is updated while the computer is in use (in the background). This setting specifies
Defines a slow connection for purposes of applying and updating Group Policy.\n\n\nIf the rate at which data is transferred from
Defines a slow connection for purposes of applying and updating Group Policy.\n\n\nIf the rate at which data is transferred from
Determines when Internet Explorer Maintenance policies are updated.\n\n\nThis setting affects all policies that use the Inte
Determines when IP security policies are updated.\n\n\nThis setting affects all policies that use the IP security component o
Determines when registry policies are updated.\n\n\nThis setting affects all policies in the Administrative Templates folder a
This setting allows you to control a user's ability to invoke a computer policy refresh.\n\n\nIf you enable this setting, users ma
Determines when policies that assign shared scripts are updated.\n\n\nThis setting affects all policies that use the scripts
Determines when security policies are updated.\n\n\nThis setting affects all policies that use the security component of Grou
Determines when software installation policies are updated.\n\n\nThis setting affects all policies that use the software insta
This policy setting specifies how long Group Policy should wait for network availability notifications during startup policy pro
Prevents the system from updating the Administrative Templates source files automatically when you open the Group Policy Objec
Prevents Group Policy from being updated while the computer is in use. This setting applies to Group Policy for computers, user
This policy setting prevents Local Group Policy objects (Local GPOs) from being applied.\n\n\nBy default, the policy settings
This setting allows you to enable or disable Resultant Set of Policy (RSoP) logging on a client computer.\n\n\nRSoP logs info
Applies alternate user settings when a user logs on to a computer affected by this setting.\n\n\nThis setting directs the syste
Determines when policies that assign wired network settings are updated.\n\n\nThis setting affects all policies that use the
Determines when policies that assign wireless network settings are updated.\n\n\nThis setting affects all policies that use t
Applications Client-Side Extension (CSE) policy processing settings.
Applications Client-Side Extension (CSE) tracing and logging options.
Computer Control Panel settings configure options that are manually configurable via the Windows Control Panel and affect al
Data Sources policy allows an administrator to manage user and system data sources.
Data Sources Client-Side Extension (CSE) policy processing settings.
Data Sources Client-Side Extension (CSE) tracing and logging options.
Devices policy allows an administrator to enable and disable classes of devices.
Devices Policy Client-Side Extension (CSE) policy processing settings.
Devices Policy Client-Side Extension (CSE) tracing and logging options.
Drive Maps policy allows an administrator to manage drive letter mappings to network shares or subfolders, such as mapping t
Drive Maps Client-Side Extension (CSE) policy processing settings.
Drive Maps Client-Side Extension (CSE) tracing and logging options.
Environment variables policy allows an administrator to manage persistent user and computer environment variablers. Computer
Environment Client-Side Extension (CSE) policy processing settings.
Environment Client-Side Extension (CSE) tracing and logging options.
Files policy allows an administrator to copy files from one location to another or delete files, with the option to set attributes
Files Policy Client-Side Extension (CSE) policy processing settings.
Files Policy Client-Side Extension (CSE) tracing and logging options.
Folder Options policy allows an administrator to set option folder parameters include view options, offline files, file types and f
Folder Options Policy Client-Side Extension (CSE) policy processing settings.
Folder Options Policy Client-Side Extension (CSE) tracing and logging options.
Folders policy allows an administrator to create nested folders or to cascade delete folders and/or their contents, with the opti
Folders Policy Client-Side Extension (CSE) policy processing settings.
Folders Policy Client-Side Extension (CSE) tracing and logging options.
Ini File policy allows an administrator to configure ini file settings in any type of ini file. Ini files are widely used by softwar
Ini Files Client-Side Extension (CSE) policy processing settings.
Ini Files Client-Side Extension (CSE) tracing and logging options.
Internet Settings policy allows an administrator to manage settings that are available in the Internet Options Control Panel apple
Internet Settings Client-Side Extension (CSE) policy processing settings.
Internet Settings Client-Side Extension (CSE) tracing and logging options.
Local Users and Groups policy allows an administrator to create and configure local users and groups including group membe
Local Users and Groups Client-Side Extension (CSE) policy processing settings.
Local Users and Groups Client-Side Extension (CSE) tracing and logging options.
Network Options policy allows an administrator to set network options such as VPN connections.
Network Options Policy Client-Side Extension (CSE) policy processing settings.
Network Options Policy Client-Side Extension (CSE) tracing and logging options.
Network Shares policy allows an administrator to configure network shares.
Network Shares Client-Side Extension (CSE) policy processing settings.
Network Shares Client-Side Extension (CSE) tracing and logging options.
Power Options policy allows an administrator to set power scheme and global power options.
Power Options Policy Client-Side Extension (CSE) policy processing settings.
Power Options Policy Client-Side Extension (CSE) tracing and logging options.
Preferences implement a robust and standards-based application plugin system. The plugin architecture allows anyone to write a f
Application policy allows an administrator to manage settings that are provided by various application management plugins. Th
This view extension provides additional information when editing or viewing policy settings in the MMC. The view extension
This view extension provides additional information when editing or viewing policy settings in the MMC. The view extension
Printers policy allows an administrator to manage printer configurations for users and computers. Computer policy supports auto
Printers Client-Side Extension (CSE) policy processing settings.
Printers Client-Side Extension (CSE) tracing and logging options.
Regional Options policy allows an administrator to set default locale and language properties.
Regional Options Policy Client-Side Extension (CSE) policy processing settings.
Regional Options Policy Client-Side Extension (CSE) tracing and logging options.
Registry policy allows an administrator to configure registry settings of any type. This policy differs significantly from Admi
Registry Client-Side Extension (CSE) policy processing settings.
Registry Client-Side Extension (CSE) tracing and logging options.
Scheduled Tasks policy allows an administrator to configure Scheduled Tasks.
Scheduled Tasks Policy Client-Side Extension (CSE) policy processing settings.
Scheduled Tasks Policy Client-Side Extension (CSE) tracing and logging options.
Services policy allows an administrator to configure Windows NT services.
Services Policy Client-Side Extension (CSE) policy processing settings.
Services Policy Client-Side Extension (CSE) tracing and logging options.
Shortcuts policy allows an administrator to manage shortcuts of any type that can be configured manually on a computer, includ
Shortcuts Client-Side Extension (CSE) policy processing settings.
Shortcuts Client-Side Extension (CSE) tracing and logging options.
Start Menu policy allows an administrator to set start menu and task bar options.
Start Menu Policy Client-Side Extension (CSE) policy processing settings.
Start Menu Policy Client-Side Extension (CSE) tracing and logging options.
User Control Panel settings configure options that are manually configurable via the Windows Control Panel and affect only i
This policy setting allows Microsoft Windows to process user Group Policy settings asynchronously when logging on through T
With this policy, you can restrict certain HTML Help commands to function only in HTML Help (.chm) files within specified fold
Allows you to restrict programs from being run from online Help.\n\n\nIf you enable this setting, you can prevent programs that
Allows you to restrict programs from being run from online Help.\n\n\nIf you enable this setting, you can prevent programs that
Specifies whether active content links in trusted assistance content are rendered. By default, the Help viewer renders trusted
Specifies whether users can participate in the Help Experience Improvement program. The Help Experience Improvement program
Specifies whether users can provide ratings for Help content.\n\n\nIf this setting is enabled, this policy setting prevents ratin
Specifies whether untrusted content is rendered. By default, the Help viewer renders untrusted assistance content pages with th
Specifies whether users can search and view content from Windows Online in Help and Support. Windows Online provides the mos
This policy setting allows you to manage whether HotStart buttons can be used to launch applications.\n\n\nIf you enable this p
This policy setting allows you to manage whether HotStart buttons can be used to launch applications.\n\n\nIf you enable this p
Specifies whether Windows can access the Internet to accomplish tasks that require Internet resources.\n\n\nIf this setting is enabl
Specifies whether Windows can access the Internet to accomplish tasks that require Internet resources.\n\n\nIf this setting is enabl
This setting allows you to remove access to Windows Update.\n\n\nIf you enable this setting, all Windows Update features are
Specifies whether to automatically update root certificates using the Windows Update Web site. \n\n\nTypically, a certificate i
Specifies whether to allow this client to download print driver packages over HTTP.\n\n\nTo set up HTTP printing, non-inbox drive
Specifies whether to allow this client to download print driver packages over HTTP.\n\n\nTo set up HTTP printing, non-inbox drive
Specifies whether "Events.asp" hyperlinks are available for events within the Event Viewer application.\n\n\nThe Event Viewer
Specifies whether to show the "Did you know?" section of Help and Support Center.\n\n\nThis content is dynamically updated wh
Specifies whether users can perform a Microsoft Knowledge Base search from the Help and Support Center.\n\n\nThe Knowledge B
Specifies whether the Internet Connection Wizard can connect to Microsoft to download a list of Internet Service Providers (ISPs).
Specifies whether Windows should download a list of providers for the Web publishing and online ordering wizards.\n\n\nThese w
Specifies whether Windows should download a list of providers for the Web publishing and online ordering wizards.\n\n\nThese w
Specifies whether to use the Microsoft Web service for finding an application to open a file with an unhandled file association.
Specifies whether to use the Microsoft Web service for finding an application to open a file with an unhandled file association.
Specifies whether to allow printing over HTTP from this client.\n\n\nPrinting over HTTP allows a client to print to printers on th
Specifies whether to allow printing over HTTP from this client.\n\n\nPrinting over HTTP allows a client to print to printers on th
Specifies whether the Windows Registration Wizard connects to Microsoft.com for online registration.\n\n\nIf you enable this se
Specifies whether Search Companion should automatically download content updates during local and Internet searches.\n\n\nWh
Specifies whether the "Order Prints Online" task is available from Picture Tasks in Windows folders.\n\n\nThe "Order Prints Onli
Specifies whether the "Order Prints Online" task is available from Picture Tasks in Windows folders.\n\n\nThe "Order Prints Onli
Specifies whether the tasks "Publish this file to the Web," "Publish this folder to the Web," and "Publish the selected items t
Specifies whether the tasks "Publish this file to the Web," "Publish this folder to the Web," and "Publish the selected items t
Specifies whether Windows Messenger collects anonymous information about how Windows Messenger software and service is used.
Specifies whether Windows Messenger collects anonymous information about how Windows Messenger software and service is used.
The Windows Customer Experience Improvement Program will collect information about your hardware configuration and how you
Controls whether or not errors are reported to Microsoft.\n\n\nError Reporting is used to report information about a system or
This policy setting turns off the active tests performed by the Windows Network Connectivity Status Indicator (NCSI) to determ
This policy specifies whether Windows searches Windows Update for device drivers when no local drivers for a device are prese
When you enable this setting, it will prevent Internet Information Services (IIS) from being installed, and you will not be able
This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Micr
This policy setting allows you to add a specific set of search providers to the user's default search provider list. Normally, s
This policy setting allows you to add a specific set of search providers to the user's default search provider list. Normally, s
This policy setting allows you to manage a list of add-ons to be allowed or denied by Internet Explorer.\n\n\nThis list can be
This policy setting allows you to manage a list of add-ons to be allowed or denied by Internet Explorer.\n\n\nThis list can be
For each zone, the Binary and Scripted Behavior security restrictions may be configured to allow only a list of admin-approved b
For each zone, the Binary and Scripted Behavior security restrictions may be configured to allow only a list of admin-approved b
This policy setting allows you to manage whether processes respect add-on management user preferences (as reflected by Add-on
Internet Explorer contains dynamic binary behaviors: components that encapsulate specific functionality for the HTML elements t
Internet Explorer uses Multipurpose Internet Mail Extensions (MIME) data to determine file handling procedures for files received
This policy setting allows you to manage whether the Information Bar is displayed for processes other than the Internet Explorer p
Internet Explorer places zone restrictions on each Web page it opens, which are dependent upon the location of the Web page (In
This policy setting determines whether Internet Explorer MIME sniffing will prevent promotion of a file of one type to a more dan
The MK Protocol Security Restriction policy setting reduces attack surface area by preventing the MK protocol. Resources hosted
Internet Explorer may be configured to prevent active content obtained through restricted protocols from running in an unsafe ma
This policy setting defines whether a reference to an object is accessible when the user navigates within the same domain or to
Internet Explorer places restrictions on each Web page it opens. The restrictions are dependent upon the location of the Web p
This policy setting enables applications hosting the Web Browser Control to block automatic prompting of ActiveX control installa
This policy setting enables applications hosting the Web Browser Control to block automatic prompting of file downloads that are
Internet Explorer allows scripts to programmatically open, resize, and reposition windows of various types. The Window Restrictio
This policy setting allows this feature to be prevented or allowed for all processes running on the machine.\n\n\nIf you enable
This policy setting allows you to manage whether processes respect add-on management user preferences (as reflected by Add-on
Internet Explorer contains dynamic binary behaviors: components that encapsulate specific functionality for the HTML elements t
This policy setting allows you to manage whether the Information Bar is displayed for processes other than the Internet Explorer p
Internet Explorer may be configured to prevent active content obtained through restricted protocols from running in an unsafe ma
Internet Explorer places restrictions on each Web page it opens. The restrictions are dependent upon the location of the Web p
Internet Explorer allows scripts to programmatically open, resize, and reposition windows of various types. The Window Restrictio
This policy setting allows this feature to be prevented or allowed for all processes running on the machine.\n\n\nIf you enable
This policy setting allows you to manage whether users receive a dialog requesting permission for active content on a CD to run
This policy setting allows you to manage whether users receive a dialog requesting permission for active content on a CD to run
This policy setting allows you to manage whether a resource hosted on an admin-restricted protocol in the Intranet Zone can run
This policy setting allows you to manage whether a resource hosted on an admin-restricted protocol in the Trusted Sites Zone ca
This policy setting allows you to manage whether a resource hosted on an admin-restricted protocol in the Trusted Sites Zone ca
This policy setting allows you to manage whether script code on pages in the zone is run.\n\n\nIf you enable this policy setting
This policy setting allows you to manage whether script code on pages in the zone is run.\n\n\nIf you enable this policy settin
This policy setting allows you to manage dynamic binary and script behaviors: components that encapsulate specific functionalit
This policy setting allows you to manage dynamic binary and script behaviors: components that encapsulate specific functionali
This policy setting allows you to manage whether scripts can perform a clipboard operation (for example, cut, copy, and paste) in
This policy setting allows you to manage whether users can drag files or copy and paste files from a source within the zone.\n\n\
This policy setting allows you to manage whether file downloads are permitted from the zone. This option is determined by the z
This policy setting allows you to manage whether pages of the zone may download HTML fonts.\n\n\nIf you enable this policy s
This policy setting allows you to manage whether users can download and install self-installing program files (non-Internet Ex
This policy setting allows you to manage whether users can download and install self-installing program files (non-Internet Ex
This policy setting allows you to manage whether users can automatically download and install Web components (such as fonts
This policy setting allows you to manage whether users can automatically download and install Web components (such as fonts
This policy setting allows you to manage whether users can install Active Desktop items from this zone. The settings for this opt
This policy setting allows you to manage whether a user's browser can be redirected to another Web page if the author of the
This policy setting controls whether a page may control embedded WebBrowser Controls via script.\n\n\nIf you enable this polic
This policy setting allows you to manage restrictions on script-initiated pop-up windows and windows that include the title and s
This policy setting allows you to manage whether scriptlets can be allowed.\n\n\nIf you enable this policy setting, users will be ab
This policy setting allows you to manage whether software, such as ActiveX controls and file downloads, can be installed or run by
This policy setting allows you to manage whether software, such as ActiveX controls and file downloads, can be installed or run by
This policy setting allows you to manage whether script is allowed to update the status bar within the zone.\n\n\nIf you enable this
This policy setting specifies whether placeholders should be shown for graphical images while they are downloading. This allows
This policy setting specifies whether you want Internet Explorer to print background colors and images when you print a Web pag
This policy setting allows you to manage whether Internet Explorer will launch COM add-ons known as browser helper objects, suc
This policy setting allows you to manage whether Internet Explorer will launch COM add-ons known as browser helper objects, suc
This policy setting allows you to play video and animation through the dynsrc/img tag in a specified zone. This means video an
This policy setting controls whether websites can open new Internet Explorer Windows with no Status Bar or Address Bar.\n\n\
This policy setting determines whether script Prompt dialogs are automatically displayed.\n\n\nIf you enable this policy setting
Designates the Audio/Video Player ActiveX control as administrator-approved.\n\n\nThis control is used for playing sounds, vide
This policy setting manages whether users will be automatically prompted for ActiveX control installations.\n\n\nIf you enable thi
This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting,
This policy setting allows you to manage whether Internet Explorer checks the Internet for newer versions. When Internet Explor
This policy setting allows you to manage whether Internet Explorer checks the Internet for newer versions. When Internet Explor
Designates the Microsoft Network (MSN) Carpoint automatic pricing control as administrator-approved.\n\n\nThis control enables
This policy setting allows you to manage whether Internet Explorer will check revocation status of servers' certificates. Certific
This policy setting allows you to manage whether Internet Explorer will check revocation status of servers' certificates. Certific
This policy setting allows you to manage whether Internet Explorer checks for digital signatures (which identifies the publisher
This policy setting allows you to manage whether Internet Explorer checks for digital signatures (which identifies the publisher
Allows Administrators to enable and disable the Media Explorer Bar and set the auto-play default.\n\n\nThe Media Explorer Bar p
Allows Administrators to enable and disable the ability for Outlook Express users to save or open attachments that can potential
Specifies which buttons will be displayed on the standard toolbar in Microsoft Internet Explorer.\n\n\nIf you enable this policy,
This policy setting allows you to customize the Internet Explorer version string as reported to Web servers in the HTTP User Agen
This policy setting allows you to customize the Internet Explorer version string as reported to Web servers in the HTTP User Agen
This policy setting allows you to ensure that any Internet Explorer add-ons not listed in the 'Add-on List' policy setting are de
This policy setting allows you to ensure that any Internet Explorer add-ons not listed in the 'Add-on List' policy setting are de
This ActiveX control enables users to edit HTML text and see a faithful rendition of how the text would look in the browser. Ther
This setting specifies the number of days that Internet Explorer keeps track of the pages viewed in the History List. The delete
This setting specifies the number of days that Internet Explorer keeps track of the pages viewed in the History List. The delete
Prevents users from adding channels to Internet Explorer.\n\n\nChannels are Web sites that are updated automatically on your c
Prevents users from specifying that Web pages can be downloaded for viewing offline. When users make Web pages available for
Disables existing schedules for downloading Web pages for offline viewing.\n\n\nWhen users make Web pages available for offli
This AutoComplete feature suggests possible matches when users are filling up forms.\n\n\nIf you enable this setting, the user
Prevents Internet Explorer from automatically installing components.\n\n\nIf you enable this policy, it prevents Internet Expl
Prevents automatic proxy scripts, which interact with a server to automatically configure users' proxy settings, from being stored
If you enable this policy, the user cannot modify the Accessibility options. All options in the "Accessibility" window on the G
Prevents users from changing settings on the Advanced tab in the Internet Options dialog box.\n\n\nIf you enable this policy,
This setting specifies to automatically detect the proxy server settings used to connect to the Internet and customize Internet
This setting specifies to automatically detect the proxy server settings used to connect to the Internet and customize Internet
Prevents users from changing the default programs for managing schedules and contacts.\n\n\nIf you enable this policy, the Ca
Prevents users from changing certificate settings in Internet Explorer. Certificates are used to verify the identity of software
Prevents users from changing the default Web page colors.\n\n\nIf you enable this policy, the color settings for Web pages ap
Prevents users from changing dial-up settings.\n\n\nIf you enable this policy, the Settings button on the Connections tab in t
Prevents users from changing dial-up settings.\n\n\nIf you enable this policy, the Settings button on the Connections tab in t
Prevents Microsoft Internet Explorer from checking to see whether it is the default browser.\n\n\nIf you enable this policy, th
Prevents users from changing font settings.\n\n\nIf you enable this policy, users will not be able to change font settings for
The Home page in the Internet Options Settings is the default web page that internet explorer loads whenever it is run.\n\n\
Prevents users from changing language preference settings.\n\n\nIf you enable this policy, users will not be able to set langu
Prevents users from changing the colors of links on Web pages.\n\n\nIf you enable this policy, the color settings for links ap
Prevents users from changing the default programs for messaging tasks.\n\n\nIf you enable this policy, the E-mail, Newsgroups,
Prevents users from changing Profile Assistant settings.\n\n\nIf you enable this policy, the My Profile button appears dimmed i
This setting specifies to connect to the internet using the proxy server settings specified. A proxy server acts as an intermedi
This setting specifies to connect to the internet using the proxy server settings specified. A proxy server acts as an intermedi
Prevents users from changing ratings that help control the type of Internet content that can be viewed.\n\n\nIf you enable this
Prevents users from changing the browser cache settings, such as the location and amount of disk space to use for the Temporar
Prevents users from viewing the Channel bar interface. Channels are Web sites that are automatically updated on their computer
Prevents the shortcut menu from appearing when users click the right mouse button while using the browser.\n\n\nIf you enable
Prevents users from determining which buttons appear on the Microsoft Internet Explorer and Windows Explorer standard toolba
Prevents users from determining which toolbars are displayed in Microsoft Internet Explorer and Windows Explorer.\n\n\nIf you
Prevents content from being downloaded from Web sites that users have subscribed to.\n\n\nWhen users make Web pages available
Prevents users from adding, editing, or removing schedules for offline viewing of Web pages and groups of Web pages that users
Prevents users from editing an existing schedule for downloading Web pages for offline viewing.\n\n\nWhen users make Web pages
Prevents branding of Internet programs, such as customization of Internet Explorer and Outlook Express logos and title bars, by
Prevents users from exporting or importing favorite links and feeds by using the Import/Export Wizard.\n\n\nIf you enable this po
Prevents users from running the Internet Connection Wizard.\n\n\nIf you enable this policy, the Setup button on the Connectio
Prevents channel providers from recording information about when their channel pages are viewed by users who are working offlin
Prevents using the shortcut menu to open a link in a new browser window.\n\n\nIf you enable this policy, users cannot point
Prevents Internet Explorer from checking whether a new version of the browser is available.\n\n\nIf you enable this policy, it pr
Prevents users from disabling channel synchronization in Microsoft Internet Explorer.\n\n\nChannels are Web sites that are aut
Prevents users from clearing the preconfigured settings for Web pages to be downloaded for offline viewing.\n\n\nWhen users ma
Prevents users from saving a program or file that Microsoft Internet Explorer has downloaded to the hard disk.\n\n\nIf you ena
Prevents the Internet Explorer splash screen from appearing when users start the browser.\n\n\nIf you enable this policy, the sp
Specifies that programs using the Microsoft Software Distribution Channel will not notify users when they install new component
Removes the Advanced tab from the interface in the Internet Options dialog box.\n\n\nIf you enable this policy, users are pre
Removes the Advanced tab from the interface in the Internet Options dialog box.\n\n\nIf you enable this policy, users are pre
Removes the Connections tab from the interface in the Internet Options dialog box.\n\n\nIf you enable this policy, users are p
Removes the Connections tab from the interface in the Internet Options dialog box.\n\n\nIf you enable this policy, users are p
If you enable this policy setting, users are prevented from seeing and changing ratings, certificates, AutoComplete, Wallet, and
If you enable this policy setting, users are prevented from seeing and changing ratings, certificates, AutoComplete, Wallet, and
Removes the General tab from the interface in the Internet Options dialog box.\n\n\nIf you enable this policy, users are unabl
Removes the General tab from the interface in the Internet Options dialog box.\n\n\nIf you enable this policy, users are unabl
Removes the Privacy tab from the interface in the Internet Options dialog box.\n\n\nIf you enable this policy, users are prevent
Removes the Privacy tab from the interface in the Internet Options dialog box.\n\n\nIf you enable this policy, users are prevent
Removes the Programs tab from the interface in the Internet Options dialog box.\n\n\nIf you enable this policy, users are pre
Removes the Programs tab from the interface in the Internet Options dialog box.\n\n\nIf you enable this policy, users are pre
Prevents users from restoring default settings for home and search pages.\n\n\nIf you enable this policy, the Reset Web Settin
Removes the Security tab from the interface in the Internet Options dialog box.\n\n\nIf you enable this policy, it prevents user
Removes the Security tab from the interface in the Internet Options dialog box.\n\n\nIf you enable this policy, it prevents user
This feature represents the setup of WinFX Runtime Components. WinFX is the next generation platform for Windows, utilizing
Specifies that error messages will be displayed to users if problems occur with proxy scripts.\n\n\nIf you enable this policy, e
This policy setting allows you to manage whether users can display nonsecure items and manage whether users receive a securit
This policy setting prevents users from using the Reset Internet Explorer Settings feature. Reset Internet Explorer Settings will
This policy setting prevents users from using the Reset Internet Explorer Settings feature. Reset Internet Explorer Settings will
This policy setting allows you to manage whether users have the ability to allow or deny add-ons through Add-On Manager.\n\n\n
This policy setting allows you to manage whether users have the ability to allow or deny add-ons through Add-On Manager.\n\n\n
This policy setting allows you to manage whether users are prompted to select a certificate when no certificate or only one certi
This policy setting allows you to manage whether Internet Explorer will save encrypted pages that contain secure (HTTPS) info
This policy setting allows you to manage whether Internet Explorer will save encrypted pages that contain secure (HTTPS) info
This policy setting allows you to manage whether users may download signed ActiveX controls from a page in the zone.\n\n\nIf
This policy setting allows you to manage whether users may download signed ActiveX controls from a page in the zone.\n\n\nIf y
This policy setting allows you to manage whether users may download unsigned ActiveX controls from the zone. Such code is pote
This policy setting allows you to manage whether Internet Explorer deletes the contents of the Temporary Internet Files folder a
This policy setting allows you to manage whether Internet Explorer deletes the contents of the Temporary Internet Files folder a
This policy setting allows users to run natively implemented scriptable XMLHTTP.\n\n\nIf you enable this policy setting, the u
This policy setting allows users to run natively implemented scriptable XMLHTTP.\n\n\nIf you enable this policy setting, the u
The Navigation bar includes features for navigating among Web pages, searching the Web using a selection of search tools, vie
The Navigation bar includes features for navigating among Web pages, searching the Web using a selection of search tools, vie
Prevents users from closing Microsoft Internet Explorer and Windows Explorer.\n\n\nIf you enable this policy, the Close comman
Prevents users from opening a new browser window from the File menu.\n\n\nIf this policy is enabled, users cannot open a ne
Prevents users from opening a file or Web page from the File menu in Internet Explorer.\n\n\nIf you enable this policy, the
Prevents users from saving the complete contents that are displayed on or run from a Web page, including the graphics, script
Prevents users from saving Web pages from the browser File menu to their hard disk or to a network share.\n\n\nIf you enable
Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Internet security zone.\n\
Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Local Intranet security zo
Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Local Computer security z
Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Restricted Sites security
Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Trusted Sites security zon
Prevents users from displaying tips for users who are switching from Netscape.\n\n\nIf you enable this policy, the For Netsc
Prevents users from sending feedback to Microsoft by clicking the Send Feedback command on the Help menu.\n\n\nIf you enable
Prevents users from viewing or changing the Tip of the Day interface in Microsoft Internet Explorer.\n\n\nIf you enable this po
Prevents users from running the Internet Explorer Tour from the Help menu in Internet Explorer.\n\n\nIf you enable this policy
Prevents users from adding, removing, editing or viewing the list of Favorite links.\n\n\nThe Favorites list is a way to store p
Prevents users from configuring unique identities by using Identity Manager.\n\n\nIdentity Manager enables users to create mult
This policy setting controls whether or not the local path information will be sent when uploading a file via a HTML form. If th
This policy setting allows you to manage ActiveX controls not marked as safe.\n\n\nIf you enable this policy setting, ActiveX co
Internet Explorer contains dynamic binary behaviors: components that encapsulate specific functionality for the HTML elements
This policy setting allows you to manage whether the Information Bar is displayed for Internet Explorer processes when file or cod
This policy setting determines whether Internet Explorer MIME sniffing will prevent promotion of a file of one type to a more dang
Windows Explorer and Internet Explorer may be configured to prevent active content obtained through restricted protocols from r
Internet Explorer places restrictions on each Web page it opens. The restrictions are dependent upon the location of the Web pa
This policy setting enables blocking of ActiveX control installation prompts for Internet Explorer processes.\n\n\nIf you enable th
This policy setting enables blocking of file download prompts that are not user initiated.\n\n\nIf you enable this policy setting,
Internet Explorer allows scripts to programmatically open, resize, and reposition windows of various types. The Window Restric
This policy setting allows you bypass prompting when scripts running within the Internet Explorer process attempt to perform a cl
Internet Explorer contains dynamic binary behaviors: components that encapsulate specific functionality for the HTML elements
This policy setting allows you to manage whether the Information Bar is displayed for Internet Explorer processes when file or cod
This policy setting determines whether Internet Explorer MIME sniffing will prevent promotion of a file of one type to a more dang
Windows Explorer and Internet Explorer may be configured to prevent active content obtained through restricted protocols from r
Internet Explorer places restrictions on each Web page it opens. The restrictions are dependent upon the location of the Web pa
This policy setting enables blocking of ActiveX control installation prompts for Internet Explorer processes.\n\n\nIf you enable th
This policy setting enables blocking of file download prompts that are not user initiated.\n\n\nIf you enable this policy setting,
Internet Explorer allows scripts to programmatically open, resize, and reposition windows of various types. The Window Restric
This policy setting allows you bypass prompting when scripts running within the Internet Explorer process attempt to perform a cl
For each zone, the Network Protocol Lockdown security restriction may be configured to prevent active content obtained through res
This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, fo
This policy setting controls whether local sites which are not explicitly mapped into any Security Zone are forced into the local I
This policy setting controls whether local sites which are not explicitly mapped into any Security Zone are forced into the local I
This policy setting controls whether URLs representing UNCs are mapped into the local Intranet security zone.\n\n\nIf you enab
This policy setting controls whether URLs representing UNCs are mapped into the local Intranet security zone.\n\n\nIf you enab
This policy setting controls whether sites which bypass the proxy server are mapped into the local Intranet security zone.\n\n\
This policy setting controls whether sites which bypass the proxy server are mapped into the local Intranet security zone.\n\n\
Designates a set of Microsoft Network (MSN) Investor controls as administrator-approved.\n\n\nThese controls enable users to v
This policy setting allows you to manage permissions for Java applets.\n\n\nIf you enable this policy setting, you can choose o
This policy setting allows you to manage whether applications may be run and files may be downloaded from an IFRAME referenc
This policy setting allows you to manage whether applications may be run and files may be downloaded from an IFRAME reference
This policy setting controls whether or not the "Open File - Security Warning" prompt is shown when launching executables or oth
This policy setting allows you to manage settings for logon options.\n\n\nIf you enable this policy setting, you can choose
These are eXtensible Application Markup Language (XAML) files. XAML is an XML-based declarative markup language commonly used f
Applies proxy settings to all users of the same computer.\n\n\nIf you enable this policy, users cannot set user-specific proxy s
Designates a set of Microsoft ActiveX controls used to manipulate pop-up menus in the browser as administrator-approved.\n\n\
Designates the Microsoft Agent ActiveX control as administrator-approved.\n\n\nMicrosoft Agent is a set of software services th
Designates the Microsoft Chat ActiveX control as administrator-approved.\n\n\nThis control is used by Web authors to build text
Designates Microsoft Scriptlet Component as an administrator approved control. It is an Active X control which is used to rende
Designates Microsoft Survey Control as an administrator approved control.\n\n\nIf you enable this policy, this control can be r
The navigation bar contains icons for a variety of features including navigating among web pages, searching the web using a se
Designates a set of MSNBC controls as administrator-approved.\n\n\nThese controls enable enhanced browsing of news reports on
This policy setting allows you to manage the opening of sub-frames and access of applications across different domains.\n\n\
This policy setting allows you to manage the opening of sub-frames and access of applications across different domains.\n\n\n
Designates NetShow File Transfer Control as an administrator approved control.\n\n\nIf you enable this policy, this control can
This policy setting allows you to manage MIME sniffing for file promotion from one type to another based on a MIME sniff. A MIME s
This policy setting allows you to manage MIME sniffing for file promotion from one type to another based on a MIME sniff. A MIME sn
This policy setting allows you to manage whether Internet Explorer will display animated pictures found in Web content. Generall
This policy setting allows you to manage whether Internet Explorer will display animated pictures found in Web content. Generall
This policy setting allows you to manage whether Internet Explorer will play sounds found in web content. Generally only sound f
This policy setting allows you to manage whether Internet Explorer will play sounds found in web content. Generally only sound f
This policy setting allows you to manage whether Internet Explorer will display videos found in Web content. Generally only embed
This policy setting allows you to manage whether Internet Explorer will display videos found in Web content. Generally only embed
This policy setting allows you to specify a list of web sites that will be allowed to open pop-up windows regardless of the Inte
This policy setting allows you to specify a list of web sites that will be allowed to open pop-up windows regardless of the Inte
This policy setting prevents users from performing the "Fix settings" functionality related to Security Settings Check.\n\n\nIf you
This policy setting prevents users from performing the "Fix settings" functionality related to Security Settings Check.\n\n\nIf you
This policy setting specifies the action that will be performed when searching from the Address bar. There are two possible ac
Internet Explorer treats as fatal any Secure Socket Layer/Transport Layer Security (SSL/TLS) certificate errors that interrupt nav
Internet Explorer treats as fatal any Secure Socket Layer/Transport Layer Security (SSL/TLS) certificate errors that interrupt nav
This policy setting prevents users from participating in the Customer Experience Improvement Program (CEIP).\n\n\nIf you enab
This policy setting prevents users from participating in the Customer Experience Improvement Program (CEIP).\n\n\nIf you enab
This policy setting prevents performance of the First Run Customize settings ability and controls what the user will see when th
This policy setting prevents performance of the First Run Customize settings ability and controls what the user will see when th
This policy setting prevents the setting of the code download path for each machine. The Internet Component Download service e
This policy setting prevents the configuration of cipher strength update information URLs. When you log on to secure pages, ac
This policy setting is used to manage temporary Internet files and cookies associated with your Internet browsing history, availab
This policy setting is used to manage temporary Internet files and cookies associated with your Internet browsing history, availab
This policy setting allows you to disable the Internet Explorer search box, which includes a drop-down list of all installed search
This policy setting allows you to disable the Internet Explorer search box, which includes a drop-down list of all installed search
This policy setting prevents users from using Windows colors as a part of the display settings. By default, this functionality is
This policy setting allows the user to choose the default text size in Internet Explorer.\n\n\nIf you enable this policy setting, a
This policy setting prevents users from configuring the background color in Internet Explorer.\n\n\nIf you enable this policy s
This policy setting allows you to manage whether users can choose text color in Internet Explorer.\n\n\nIf you enable this policy
This policy setting prevents users from changing the color of Web page links they have already clicked. Appropriate color choice
This policy setting prevents users from changing the color of Web page links that they have not yet clicked. Appropriate color ch
This policy setting prevents users from specifying the color to which hyperlinks change when the mouse pointer pauses on them.\
This policy setting allows you to manage whether the listed processes respect add-on management user preferences (as entered i
Internet Explorer contains dynamic binary behaviors: components that encapsulate specific functionality for the HTML elements to
This policy setting allows you to manage whether the Information Bar is displayed for specific processes when file or code instal
The MK Protocol Security Restriction policy setting reduces attack surface area by preventing the MK protocol. Resources hosted o
Internet Explorer may be configured to prevent active content obtained through restricted protocols from running in an unsafe man
This policy setting defines whether a reference to an object is accessible when the user navigates within the same domain or to a
Internet Explorer places restrictions on each Web page it opens. The restrictions are dependent upon the location of the Web pag
Internet Explorer allows scripts to programmatically open, resize, and reposition windows of various types. The Window Restricti
This policy setting allows administrators to define applications for which they want this feature to be prevented or allowed.\n\n\
This policy setting allows you to manage whether the listed processes respect add-on management user preferences (as entered i
Internet Explorer contains dynamic binary behaviors: components that encapsulate specific functionality for the HTML elements to
This policy setting allows you to manage whether the Information Bar is displayed for specific processes when file or code instal
The MK Protocol Security Restriction policy setting reduces attack surface area by preventing the MK protocol. Resources hosted o
Internet Explorer may be configured to prevent active content obtained through restricted protocols from running in an unsafe man
This policy setting defines whether a reference to an object is accessible when the user navigates within the same domain or to a
Internet Explorer places restrictions on each Web page it opens. The restrictions are dependent upon the location of the Web pag
Internet Explorer allows scripts to programmatically open, resize, and reposition windows of various types. The Window Restricti
This policy setting allows administrators to define applications for which they want this feature to be prevented or allowed.\n\n\
This policy setting prevents you from setting the default search provider for the address bar and the Toolbar Search Box.\n\n\nIf
This policy setting prevents you from setting the default search provider for the address bar and the Toolbar Search Box.\n\n\nIf
This policy setting allows you to restrict the search providers that will appear in the search box in Internet Explorer to a list
This policy setting allows you to restrict the search providers that will appear in the search box in Internet Explorer to a list
This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be exe
This policy setting allows you to manage whether .NET Framework components that are signed with Authenticode can be execute
This policy setting allows you to manage whether ActiveX controls and plug-ins can be run on pages from the specified zone.\n\n\
This policy setting allows you to manage whether an ActiveX control marked safe for scripting can interact with a script.\n\n\nIf
This policy setting allows you to manage whether applets are exposed to scripts within the zone.\n\n\nIf you enable this policy
Disables using the F3 key to search in Internet Explorer and Windows Explorer.\n\n\nIf you enable this policy, the search func
Makes the Customize button in the Search Assistant appear dimmed.\n\n\nThe Search Assistant is a tool that appears in the Searc
Prevents users from adding or removing sites from security zones. A security zone is a group of Web sites with the same securit
Prevents users from changing security zone settings. A security zone is a group of Web sites with the same security level.\n\n\
Applies security zone information to all users of the same computer. A security zone is a group of Web sites with the same secur
This policy setting allows you to manage whether Internet Explorer converts Unicode domain names to IDN format (Punycode) b
This policy setting allows you to manage whether Internet Explorer converts Unicode domain names to IDN format (Punycode) b
Designates Shockwave flash as an administrator approved control.\n\n\nIf you enable this policy, this control can be run in sec
This policy setting allows you to manage a list of sites that you want to associate with a particular security zone. These zone numbers have associated security
This policy setting allows you to manage a list of sites that you want to associate with a particular security zone. These zone numbers have associated security
This policy setting allows you to manage software channel permissions.\n\n\nIf you enable this policy setting, you can choose
This policy setting allows you to manage whether data on HTML forms on pages in the zone may be submitted. Forms sent with S
Restricts the amount of information downloaded for offline viewing.\n\n\nIf you enable this policy, you can set limits to the
Prevents users from opening the Internet Options dialog box from the Tools menu in Microsoft Internet Explorer.\n\n\nIf you e
This policy setting prevents users from performing the "Delete Browsing History" action in Internet Explorer.\n\n\nIf you enable
This policy setting prevents users from performing the "Delete Browsing History" action in Internet Explorer.\n\n\nIf you enable
This policy setting prevents the user from clearing forms. This is available as "Delete Forms" option in the "Delete Browsing Hi
This policy setting prevents the user from clearing forms. This is available as "Delete Forms" option in the "Delete Browsing Hi
This policy setting prevents the user from clearing passwords. This option is available as "Delete Passwords" option in the "De
This policy setting prevents the user from clearing passwords. This option is available as "Delete Passwords" option in the "De
This policy setting prevents the users from subscribing to a feed or deleting a subscribed feed.\n\n\nIf you enable this policy
This policy setting prevents the users from subscribing to a feed or deleting a subscribed feed.\n\n\nIf you enable this policy
This policy setting specifies that you want Internet Explorer to automatically resize large images so that they fit in the browser
This policy setting controls whether to have background sync for feeds.\n\n\nIf you enable the policy setting, the ability to syn
This policy setting controls whether to have background sync for feeds.\n\n\nIf you enable the policy setting, the ability to syn
This policy setting allows checking for updates for Internet Explorer from the specified URL, included by default in Internet Ex
This policy setting prevents the text on the screen from being rendered using the ClearType technology that enhances the reada
This policy setting prevents the text on the screen from being rendered using the ClearType technology that enhances the reada
This policy setting allows you to configure the default behavior of new tab creation in Internet Explorer.\n\n\nIf you enable
This policy setting allows you to configure the default behavior of new tab creation in Internet Explorer.\n\n\nIf you enable
This policy setting allows you to define the user experience related to pop-up windows and tabbed browsing in Internet Explore
This policy setting allows you to define the user experience related to pop-up windows and tabbed browsing in Internet Explore
This policy setting allows you to configure the behavior of new windows in Internet Explorer.\n\n\nIf you enable this policy set
This policy setting allows you to configure the behavior of new windows in Internet Explorer.\n\n\nIf you enable this policy set
This setting specifies the update check interval. The default value is 30 days.\n\n\nIf you enable this policy setting, the user w
This policy setting specifies how you want links on Web pages to be underlined. Select one of the following settings:\n• To unde
This policy setting allows you to manage the crash detection feature of add-on Management.\n\n\nIf you enable this policy setti
This policy setting allows you to manage the crash detection feature of add-on Management.\n\n\nIf you enable this policy setti
This policy setting allows you to turn off the Help menu in Internet Explorer.\n\n\nIf you enable this policy setting, users will
This policy setting allows you to turn off the Help menu in Internet Explorer.\n\n\nIf you enable this policy setting, users will
This policy setting prevents users from having enclosures (file attachments) downloaded from a feed to the user's computer.\
This policy setting prevents users from having enclosures (file attachments) downloaded from a feed to the user's computer.\
This policy setting prevents users from having Internet Explorer automatically detect if there is a feed available for an associat
This policy setting prevents users from having Internet Explorer automatically detect if there is a feed available for an associat
This policy setting controls the First Run response that users see on a zone by zone basis. When a user encounters a new control
This policy setting controls the First Run response that users see on a zone by zone basis. When a user encounters a new contro
This policy setting specifies whether, when there is a problem connecting with an Internet server, to provide a detailed descript
This policy setting let you turn off Inline AutoComplete in Windows Explorer. Inline AutoComplete provides suggestions for what
This policy setting allows the user to enable a phishing filter that will warn if the Web site being visited is known for fraudule
This policy setting allows the user to enable a phishing filter that will warn if the Web site being visited is known for fraudule
You can allow Pop-ups from specific websites by adding the site to the exceptions list.\n\n\nIf you enable this policy, users wil
You can allow Pop-ups from specific websites by adding the site to the exceptions list.\n\n\nIf you enable this policy, users wil
You can block or allow pop-ups based on three filter levels:\n High – Block All Pop-ups\n Medium – Block most Automatic p
You can block or allow pop-ups based on three filter levels:\n High – Block All Pop-ups\n Medium – Block most Automatic p
This policy setting specifies if, as you move from one Web page to another, Internet Explorer fades out of the page you are leavi
This policy setting prevents the user from zooming into or out of a page to better see the content.\n\n\nIf you enable this poli
This policy setting prevents the user from zooming into or out of a page to better see the content.\n\n\nIf you enable this poli
This policy setting specifies whether graphical images should be included when pages are displayed.\n\n\nSometimes, pages that
This policy setting allows you to manage pop-up management functionality in Internet Explorer.\n\n\nIf you enable this policy
This policy setting allows you to manage pop-up management functionality in Internet Explorer.\n\n\nIf you enable this policy
This policy setting specifies whether you will accept requests from Web sites for Profile Assistant information.\n\n\nIf you enab
This policy setting specifies whether you will accept requests from Web sites for Profile Assistant information.\n\n\nIf you enab
This policy setting allows you to turn off the Quick Tabs functionality in Internet Explorer.\n\n\nIf you enable this policy setting
This policy setting allows you to turn off the Quick Tabs functionality in Internet Explorer.\n\n\nIf you enable this policy setting
This policy setting specifies whether to use UTF-8, a standard that defines characters so they are readable in any language.
This policy setting specifies whether you want Internet Explorer to smooth images, so they appear less jagged when displayed.\n\
This policy setting specifies whether smooth scrolling is used to display content at a predefined speed.\n\n\nIf you enable this p
This policy setting allows you to turn off tabbed browsing and related entry points from the Internet Explorer user interface.\n\n
This policy setting allows you to turn off tabbed browsing and related entry points from the Internet Explorer user interface.\n\n
This AutoComplete feature suggests possible matches when users are entering Web addresses in the browser address bar.\n\n\n
This policy setting prevents users from using Internet Explorer as a feed reader. This setting has no impact on the RSS Platform.\
This policy setting prevents users from using Internet Explorer as a feed reader. This setting has no impact on the RSS Platform.\
This policy setting turns off the Security Settings Check feature, which checks Internet Explorer security settings to determine wh
This policy setting turns off the Security Settings Check feature, which checks Internet Explorer security settings to determine wh
The toolbar upgrade tool will check to see if incompatible toolbars or browser helper objects are installed when Internet Explore
The toolbar upgrade tool will check to see if incompatible toolbars or browser helper objects are installed when Internet Explore
This policy setting enables intranet mapping rules to be applied automatically when the computer belongs to a domain.\n\n\nIf yo
This policy setting enables intranet mapping rules to be applied automatically when the computer belongs to a domain.\n\n\nIf yo
This policy setting allows Internet Explorer to be launched automatically to complete the signup process after the branding is c
This policy setting logs information that is blocked by new features in Internet Explorer. The logged data is displayed in the Wi
This policy setting logs information that is blocked by new features in Internet Explorer. The logged data is displayed in the Wi
This policy setting allows an Information bar notification to be shown to the user when intranet content is loaded and the intran
This policy setting allows an Information bar notification to be shown to the user when intranet content is loaded and the intran
This policy setting lets you turn on inline AutoComplete for Web addresses. The AutoComplete feature provides suggestions for w
This policy setting allows you to turn on or turn off the legacy "File, Edit, View, etc. ..." menus in Internet Explorer.\n\n\nIf yo
This policy setting allows you to turn on or turn off the legacy "File, Edit, View, etc. ..." menus in Internet Explorer.\n\n\nIf yo
Protected mode protects Internet Explorer from exploited vulnerabilities by reducing the locations Internet Explorer can write to i
This policy setting allows you to turn on your script debugger, if one is installed. Script debuggers are used by Web site devel
This AutoComplete feature can remember and suggest User names and passwords on Forms.\n\n\nIf you enable this setting, th
This policy setting specifies whether to display script errors when a page does not appear properly because of problems with its
This policy setting is used to make hyperlinks change color when the mouse pointer pauses on them.\n\n\nIf you enable this policy s
This policy setting determines if the Internet Connection Wizard was completed. If it was not completed, it launches the Intern
Specifies that Automatic Detection will be used to configure dial-up settings for users.\n\n\nAutomatic Detection uses a DHCP (Dy
This policy setting controls whether Phishing Filter scans pages in this zone for phishing.\n\n\nIf you enable this policy setting,
This policy setting allows you to manage whether unwanted pop-up windows appear. Pop-up windows that are opened when the en
This policy setting allows you to manage whether Internet Explorer uses UTF-8 for mailto links.\n\n\nIf you enable this policy s
This policy setting allows you to manage whether Internet Explorer uses UTF-8 for mailto links.\n\n\nIf you enable this policy s
This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store,
Prevents users from displaying the browser in full-screen (kiosk) mode, without the standard toolbar.\n\n\nIf you enable this p
Prevents users from viewing the HTML source of Web pages by clicking the Source command on the View menu.\n\n\nIf you ena
These are browser-hosted, ClickOnce-deployed applications built using WinFX. These applications execute in a security sandbox
This policy setting allows you to manage whether Web sites from less privileged zones, such as Restricted Sites, can navigate in
This policy setting allows you to manage whether Web sites from less privileged zones, such as Internet sites, can navigate into
This policy setting allows you to manage whether Web sites from less privileged zones, such as Restricted Sites, can navigate int
This policy setting allows you to manage whether Web sites from less privileged zones, such as Restricted Sites, can navigate int
These are files authored using the XML Paper Specification document format that contain a fixed-layout representation of its pagi
Turns off the handwriting recognition error reporting tool.\n\n\nThe handwriting recognition error reporting tool enables users
Turns off the handwriting recognition error reporting tool.\n\n\nThe handwriting recognition error reporting tool enables users
Turns off the automatic learning component of handwriting recognition personalization. \n\n\nAutomatic learning enables the col
Turns off the automatic learning component of handwriting recognition personalization. \n\n\nAutomatic learning enables the col
Turns off handwriting recognition personalization so the handwriting recognition engine that ships with Windows Vista™ is used i
Turns off handwriting recognition personalization so the handwriting recognition engine that ships with Windows Vista™ is used i
If enabled then new targets may not be manually configured by entering the target name and target portal; already discovere
If enabled then only those sessions that are established via a persistent login will be established and no new persistent login
If enabled then do not allow the initiator CHAP secret to be changed. If disabled then the initiator CHAP secret may be chang
If enabled then do not allow the initiator iqn name to be changed. If disabled then the initiator iqn name may be changed.
If enabled then only those connections that are configured for IPSec may be established. If disabled then connections that ar
If enabled then discovered targets may not be manually configured. If disabled then discovered targets may be manually conf
If enabled then new iSNS servers may not be added and thus new targets discovered via those iSNS servers; existing iSNS
If enabled then new target portals may not be added and thus new targets discovered on those portals; existing target portal
If enabled then only those sessions that are configured for mutual CHAP may be established. If disabled then sessions that
If enabled then only those sessions that are configured for one-way CHAP may be established. If disabled then sessions that
This policy setting controls whether the domain controller provides information about previous logons to client computers.\n\n
This policy setting allows you to specify which DNS host names and which DNS suffixes are mapped to a Kerberos realm.\n\n\nIf
This policy setting configures the Kerberos client so that it can authenticate with interoperable Kerberos V5 realms, as defined
This policy setting controls the Kerberos client's behavior in validating the KDC certificate. \n \nIf you enable this pol
This policy setting determines whether Diagnostic Policy Service (DPS) will diagnose memory leak problems. If you disable this
This policy setting turns on the Mapper I/O network protocol driver.\n\n\nLLTDIO allows a computer to discover the topology of
This policy setting turns on the Responder network protocol driver.\n\n\nThe Responder allows a computer to participate in Link
This setting forces the user to log on to the computer using the classic logon screen. By default, a workgroup is set to use t
Determines whether Windows XP waits for the network during computer startup and user logon. By default, Windows XP does not wa
Ignores the customized run list.\n\n\nYou can create a customized list of additional programs and documents that the system st
Ignores the customized run list.\n\n\nYou can create a customized list of additional programs and documents that the system st
Ignores customized run-once lists.\n\n\nYou can create a customized list of additional programs and documents that are started
Ignores customized run-once lists.\n\n\nYou can create a customized list of additional programs and documents that are started
Supresses the welcome screen.\n\n\nThis setting hides the welcome screen that is displayed on Windows 2000 Professional each
Supresses the welcome screen.\n\n\nThis setting hides the welcome screen that is displayed on Windows 2000 Professional each
By enabling the policy, Administrators hide the Switch user button in the Logon UI, the Start menu and the Task Manager.
Suppresses system status messages.\n\n\nIf you enable this setting, the system does not display a message reminding users to
Specifies additional programs or documents that Windows starts automatically when a user logs on to the system.\n\n\nTo use this
Specifies additional programs or documents that Windows starts automatically when a user logs on to the system.\n\n\nTo use this
Turn off the Windows Startup sound and prevent its customization in the Sound item of Control Panel.\n\n\nThe Microsoft Windows
Directs the system to display highly detailed status messages.\n\n\nIf you enable this setting, the system displays status messa
Specifies whether Windows Media Center can run.\n\n\nIf you enable this setting, Windows Media Center will not run.\n\n\nIf
Specifies whether Windows Media Center can run.\n\n\nIf you enable this setting, Windows Media Center will not run.\n\n\nIf
Permits or prohibits use of this snap-in.\n\n\nIf you enable this setting, the snap-in is permitted. If you disable the setting, the
Prevents users from entering author mode.\n\n\nThis setting prevents users from opening the Microsoft Management Console (
Lets you selectively permit or prohibit the use of Microsoft Management Console (MMC) snap-ins.\n\n\n-- If you enable this setti
Permits or prohibits use of the Group Policy tab in property sheets for the Active Directory Users and Computers and Active Directo
This policy setting turns off Windows Mobility Center.\n\n\nIf you enable this policy setting, the user is unable to invoke Windo
This policy setting turns off Windows Mobility Center.\n\n\nIf you enable this policy setting, the user is unable to invoke Windo
This policy setting turns off Windows presentation settings.\n\n\nIf you enable this policy setting, Windows presentation setti
This policy setting turns off Windows presentation settings.\n\n\nIf you enable this policy setting, Windows presentation setti
Specifies whether Windows Movie Maker can run.\n\n\nWindows Movie Maker is a feature of Windows Vista that can be used to e
Specifies whether Windows Movie Maker can run.\n\n\nWindows Movie Maker is a feature of Windows Vista that can be used to e
Note: Applies to Windows Movie Maker 2.1 only\n\n\nSpecifies whether Windows Movie Maker automatically downloads codecs.\
Note: Applies to Windows Movie Maker 2.1 only\n\n\nSpecifies whether Windows Movie Maker automatically downloads codecs.\
Specifies whether links to Web sites are available in Windows Movie Maker. These links include the "Windows Movie Maker o
Specifies whether links to Web sites are available in Windows Movie Maker. These links include the "Windows Movie Maker o
Note: Applies to Windows Movie Maker 2.1 only\n\n\nSpecifies whether users can send a final movie to a video hosting prov
Note: Applies to Windows Movie Maker 2.1 only\n\n\nSpecifies whether users can send a final movie to a video hosting prov
Determines the execution level for Microsoft Support Diagnostic Tool.\n\n\nMicrosoft Support Diagnostic Tool (MSDT) gathers diag
Restricts the tool download policy for Microsoft Support Diagnostic Tool.\n\n\nMicrosoft Support Diagnostic Tool (MSDT) gather
Allows Terminal Services administrators to install and configure programs remotely.\n\n\nBy default, system administrators ca
Directs Windows Installer to use system permissions when it installs any program on the system.\n\n\nThis setting extends eleva
Directs Windows Installer to use system permissions when it installs any program on the system.\n\n\nThis setting extends eleva
This policy controls the percentage of disk space available to the Windows Installer baseline file cache.\n\n\nThe Windows Insta
Saves copies of transform files in a secure location on the local computer.\n\n\nTransform files consist of instructions to modif
Allows Web-based programs to install software on the computer without notifying the user.\n\n\nBy default, when a script hosted
The MsiLogging property in an installation package can be used to enable automatic logging of all install operations for the pa
Disables or restricts the use of Windows Installer.\n\n\nThis setting can prevent users from installing software on their syst
Permits users to change installation options that typically are available only to system administrators.\n\n\nThis setting bypass
Allows users to search for installation files during privileged installations.\n\n\nThis setting enables the Browse button in th
Allows users to upgrade programs during privileged installations.\n\n\nThis setting permits all users to install patches, even w
Allows users to install programs from removable media, such as floppy disks and CD-ROMs, during privileged installations.\n\n\
This setting causes the Windows Installer to enforce strict rules for component upgrades - setting this may cause some updates
Specifies the types of events that Windows Installer records in its transaction log for each installation. The log, Msi.log, appe
Prevents users from installing programs from removable media.\n\n\nIf a user tries to install a program from removable media
This setting controls the ability to turn off all patch optimizations. \n\n\nIf you turn on this policy setting (set to 1), all Patc
This setting controls the ability of non-administrators to install updates that have been digitally signed by the application ven
Prevents users from using Windows Installer to install patches.\n\n\nPatches are updates or upgrades that replace only those p
This setting controls the ability for users or administrators to remove Windows Installer based updates. \n\n\nThis setting s
Prohibits Windows Installer from generating and saving the files it needs to reverse an interrupted or unsuccessful installation.
Prohibits Windows Installer from generating and saving the files it needs to reverse an interrupted or unsuccessful installation.
The Restart Manager API can eliminate or reduce the number of system restarts that are required to complete an installation or u
This setting allows you to configure user installs. To configure this setting, set it to enabled and use the drop-down list to selec
Prevents users from searching for installation files when they add features or components to an installed program.\n\n\nThis set
Specifies the order in which Windows Installer searches for installation files.\n\n\nBy default, the Windows Installer searches t
System Restore enables users, in the event of a problem, to restore their computers to a previous state without losing personal
This policy setting allows the Network Access Protection (NAP) client to support the Windows XP version of the 802.1x Enforce
This setting controls whether the Net Logon service will allow the use of older cryptography algorithms that are used in Win
Determines whether domain controllers (DC) will dynamically register DC Locator site-specific SRV records for the closest sites
Defines whether a domain controller (DC) should attempt to verify with the PDC the password provided by a client if the DC fai
Determines which Domain Controller (DC) Locator DNS records are not registered by the Netlogon service.\n\n\nTo enable th
This policy setting allows you to control the processing of incoming mailslot messages by a local domain controller (DC).\n\
The Domain Controller (DC) Locator APIs return IP address of the DC with the other part of the information. Before the support
Determines if Dynamic Registration of the domain controller (DC) locator DNS resource records is enabled. These DNS records a
Specifies the additional time for the computer to wait for the domain controller’s (DC) response when logging on to the network.
When applications performing periodic searches for domain controllers (DC) are unable to find a DC, the value set in this settin
The Domain Controller Locator (DC Locator) service is used by clients to find domain controllers for their Active Directory dom
When applications performing periodic searches for domain controllers (DC) are unable to find a DC, the value set in this setti
Specifies whether the computers to which this setting is applied attempt DNS name resolution of a single-label domain names.\n
Specifies the level of debug output for the Net Logon service.\n\n\nThe Net Logon service outputs debug information to the log
When applications performing periodic searches for Domain Controllers (DCs) are unable to find a DC, the value set in this settin
Specifies the maximum size in bytes of the log file netlogon.log in the directory %windir%\debug when logging is enabled.\n\n\nB
Specifies the amount of time (in seconds) the DC locator remembers that a domain controller (DC) could not be found in a domain.
This setting controls whether or not the Netlogon share created by the Net Logon service on a domain controller (DC) should sup
Determines when a successful DC cache entry is refreshed. This setting is applied to caller programs that periodically attempt t
Determines when a successful DC cache entry is refreshed. This setting is applied to caller programs that do not periodically
Specifies the Priority field in the SRV resource records registered by domain controllers (DC) to which this setting is applied.
Specifies the Refresh Interval of the domain controller (DC) Locator DNS resource records for DCs to which this setting is app
Determines the interval at which Netlogon performs the following scavenging operations:\n\n\n- Checks if a password on a secu
Specifies the Active Directory site to which computers belong.\n\n\nAn Active Directory site is one or more well-connected TCP/I
Specifies the sites for which the domain controllers (DC) housing application directory partition should register the site-speci
Specifies the sites for which the domain controllers (DC) register the site-specific DC Locator DNS SRV resource records. Thes
Specifies the sites for which the global catalogs (GC) should register site-specific GC locator DNS SRV resource records. Thes
This setting controls whether or not the Sysvol share created by the Net Logon service on a domain controller (DC) should suppo
The Domain Controller Locator (DC Locator) service is used by clients to find domain controllers for their Active Directory doma
Specifies the value for the Time-To-Live (TTL) field in Net Logon registered SRV resource records. These DNS records are dynam
Specifies the Weight field in the SRV resource records registered by the domain controllers (DC) to which this setting is appli
Determines whether a user can view and change the properties of remote access connections that are available to all users of t
Determines whether users can delete all user remote access connections.\n\n\nTo create an all-user remote access connection,
Determines whether users can enable/disable LAN connections.\n\n\nIf you enable this setting, the Enable and Disable options f
Determines whether nonadministrators can rename all-user remote access connections.\n\n\nTo create an all-user connection, on
Determines whether nonadministrators can rename a LAN connection.\n\n\nIf you enable this setting, the Rename option is enabl
Determines whether users can rename LAN or all user remote access connections.\n\n\nIf you enable this setting, the Rename op
Determines whether settings that existed in Windows 2000 Server family will apply to Administrators.\n\n\nThe set of Network
Determines whether users can change the properties of a LAN connection.\n\n\nThis setting determines whether the Properties me
Determines whether Administrators and Network Configuration Operators can change the properties of components used by a LAN
Determines whether users can view and change the properties of components used by a private or all-user remote access connect
Determines whether the Advanced Settings item on the Advanced menu in Network Connections is enabled for administrators.\n\n\
Determines whether users can use the New Connection Wizard, which creates new network connections.\n\n\nIf you enable this se
Determines whether the Remote Acccess Preferences item on the Advanced menu in Network Connections folder is enabled.\n\n\nTh
Determines whether administrators can add and remove network components for a LAN or remote access connection. This setting
Determines whether users can view and change the properties of their private remote access connections.\n\n\nPrivate connectio
Determines whether users can connect and disconnect remote access connections.\n\n\nIf you enable this setting (and enable the
Determines whether users can delete remote access connections.\n\n\nIf you enable this setting (and enable the "Enable Network
Determines whether administrators can enable and disable the components used by LAN connections.\n\n\nIf you enable this set
Determines whether a user can install and configure the Network Bridge.\n\n\nImportant: This settings is location aware. It
Determines whether users can rename their private remote access connections.\n\n\nPrivate connections are those that are availa
Determines whether users can configure advanced TCP/IP settings.\n\n\nIf you enable this setting (and enable the "Enable Netw
Prohibits use of Internet Connection Firewall on your DNS domain network.\n\n\nDetermines whether users can enable the Inter
Determines whether administrators can enable and configure the Internet Connection Sharing (ICS) feature of an Internet conn
Determines whether users can view the status for an active connection.\n\n\nConnection status is available from the connection
This policy setting allows you to manage whether notifications are shown to the user when a DHCP-configured connection is unab
Disables the Connect to a Network Projector wizard so that users cannot connect to a network projector.\n\n\nIf you enable this
Disables the Connect to a Network Projector wizard so that users cannot connect to a network projector.\n\n\nIf you enable this
Determines whether network files remain available if the computer is suddenly disconnected from the server hosting the files.\n\n
Determines whether network files remain available if the computer is suddenly disconnected from the server hosting the files.\n\n
This policy setting lists network files and folders that are always available for offline use. This ensures that the the specified
This policy setting lists network files and folders that are always available for offline use. This ensures that the the specified
Determines whether the Offline Files feature is enabled.\n\n\nThis setting also disables the "Enable Offline Files" option on th
Deletes local copies of the user's offline files when the user logs off.\n\n\nThis setting specifies that automatically and manual
Configures the threshold value at which Offline Files considers a network connection to be "slow". Any network speed below this
This policy setting allows you to enable and configure the slow-link mode of Offline Files.\n\n\nWhen Offline Files is operating
Limits the percentage of the computer's disk space that can be used to store automatically cached offline files.\n\n\nThis settin
This setting determines whether offline files are encrypted.\n\n\nOffline files reside on a user's hard drive, not the network, a
Determines which events the Offline Files feature records in the event log.\n\n\nOffline Files records events in the Application
Determines which events the Offline Files feature records in the event log.\n\n\nOffline Files records events in the Application
Lists types of files that cannot be used offline.\n\n\nThis setting lets you exclude certain types of files from automatic and m
Determines how long the first reminder balloon for a network status change is displayed.\n\n\nReminder balloons appear when th
Determines how long the first reminder balloon for a network status change is displayed.\n\n\nReminder balloons appear when th
This policy limits the amount of the computer's disk space that can be used to store offline files.\n\n\nUsing this setting you can
Determines how computers respond when they are disconnected from particular offline file servers. This setting overrides the de
Determines how computers respond when they are disconnected from particular offline file servers. This setting overrides the de
Disables the Offline Files folder.\n\n\nThis setting disables the "View Files" button on the Offline Files tab. As a result, users
Disables the Offline Files folder.\n\n\nThis setting disables the "View Files" button on the Offline Files tab. As a result, users
This policy setting allows you to manage a list of files or folders for which you wish to prohibit the 'Make Available Offline' opti
This policy setting allows you to manage a list of files or folders for which you wish to prohibit the 'Make Available Offline' opti
Prevents users from enabling, disabling, or changing the configuration of Offline Files.\n\n\nThis setting removes the Offline Fi
Prevents users from enabling, disabling, or changing the configuration of Offline Files.\n\n\nThis setting removes the Offline Fi
Determines how often reminder balloon updates appear.\n\n\nIf you enable this setting, you can select how often reminder ballo
Determines how often reminder balloon updates appear.\n\n\nIf you enable this setting, you can select how often reminder ballo
Determines how long updated reminder balloons are displayed.\n\n\nReminder balloons appear when the user's connection to a ne
Determines how long updated reminder balloons are displayed.\n\n\nReminder balloons appear when the user's connection to a ne
Prevents users from making network files and folders available offline.\n\n\nThis setting removes the "Make Available Offline"
Prevents users from making network files and folders available offline.\n\n\nThis setting removes the "Make Available Offline"
Makes subfolders available offline whenever their parent folder is made available offline.\n\n\nThis setting automatically extends
Determines whether offline files are fully synchronized when users log off.\n\n\nThis setting also disables the "Synchronize all
Determines whether offline files are fully synchronized when users log off.\n\n\nThis setting also disables the "Synchronize all
Determines whether offline files are fully synchronized when users log on.\n\n\nThis setting also disables the "Synchronize all
Determines whether offline files are fully synchronized when users log on.\n\n\nThis setting also disables the "Synchronize all
Determines whether offline files are synchonized before a computer is suspended.\n\n\nIf you enable this setting, offline files
Determines whether offline files are synchonized before a computer is suspended.\n\n\nIf you enable this setting, offline files
Hides or displays reminder balloons, and prevents users from changing the setting.\n\n\nReminder balloons appear above the Offl
Hides or displays reminder balloons, and prevents users from changing the setting.\n\n\nReminder balloons appear above the Offl
This policy setting allows you to turn on economical application of administratively assigned Offline Files.\n\n\nIf you enable th
By default, when a Peer Group is created that allows for password-authentication (or the password for such a Group is changed),
This policy setting limits a node to resolving, but not publishing, names in a specific Peer Name Resolution Protocol (PNRP)
This setting sets the seed server for the global cloud to a specified node in the enterprise. The Peer Name Resolution Protocol
This setting sets the seed server for the link local cloud to a specified node in the enterprise.\n\n\nThe Peer Name Resolution
This setting sets the seed server for the site local cloud to a specified node in the enterprise.\n\n\nThe Peer Name Resolution
This setting turns off Microsoft Peer-to-Peer Networking Services in its entirety, and will cause all dependent applications to sto
This setting disables PNRP protocol from advertising the computer or from searching other computers on the local subnet in the
This policy setting enables or disables PNRP cloud creation.\n\n\nPNRP is a distributed name resolution protocol allowing In
Configure the Parental Controls feature.\n\n\nIf you turn on this setting, the Parental Controls control panel will be visible on
This policy setting determines whether the Program Compatibility Assistant (PCA) will diagnose DLL load or COM object creatio
This policy setting configures the Program Compatibility Assistant (PCA) to diagnose failures with application installations. \n\
This policy setting determines whether the Program Compatibility Assistant (PCA) will diagnose failures with application install
This policy setting configures the Program Compatibility Assistant (PCA) to diagnose failures with programs under User Account
This policy setting determines whether the Program Compatibility Assistant (PCA) will diagnose drivers blocked due to compatibili
Turns off Tablet PC Pen Training.\n\n\nIf you enable this policy setting, users cannot open Tablet PC Pen Training.\n\n\nIf you
Turns off Tablet PC Pen Training.\n\n\nIf you enable this policy setting, users cannot open Tablet PC Pen Training.\n\n\nIf you
Removes access to the performance center control panel OEM and Microsoft branding links.\n\n\nIf you enable this setting, the
Removes access to the performance center control panel OEM and Microsoft branding links.\n\n\nIf you enable this setting, the
Removes access to the performance center control panel page. \n\n\nIf you enable this setting, some settings within the performa
Removes access to the performance center control panel page. \n\n\nIf you enable this setting, some settings within the performa
Removes access to the performance center control panel solutions to performance problems.\n\n\nIf you enable this setting, the
Removes access to the performance center control panel solutions to performance problems.\n\n\nIf you enable this setting, the
Determines the execution level for Windows Boot Performance Diagnostics.\n\n\nIf you enable this policy setting, you must sele
Determines the execution level for Windows Standby/Resume Performance Diagnostics.\n\n\nIf you enable this policy setting, yo
Determines the execution level for Windows System Responsiveness Diagnostics.\n\n\nIf you enable this policy setting, you mus
Determines the execution level for Windows Shutdown Performance Diagnostics.\n\n\nIf you enable this policy setting, you must
Dictates whether or not Windows is allowed to use standby states when sleeping the computer. \n \nWhen this policy is en
Dictates whether or not Windows is allowed to use standby states when sleeping the computer. \n \nWhen this policy is en
Specifies the action that Windows takes when battery capacity reaches the critical battery notification level.\n\n\nPossible acti
Specifies the percentage of battery capacity remaining that triggers the critical battery notification action.\n\n\nIf you enable thi
This setting allows you to configure whether power is automatically turned off when Windows shutdown completes. This setti
Specifies the action that Windows takes when battery capacity reaches the low battery notification level.\n\n\nPossible actions
Specifies the percentage of battery capacity remaining that triggers the low battery notification action.\n\n\nIf you enable this po
This settings allows you to configure client computers to always lock when resuming from a hibernate or suspend.\n\n\nIf you en
Specifies whether or not the user is prompted for a password when the system resumes from sleep. \n\n\nIf you enable this pol
Specifies whether or not the user is prompted for a password when the system resumes from sleep. \n\n\nIf you enable this pol
Specifies the active power plan from a list of default Windows power plans. To specify a custom power plan, use the Custom Act
Specifies the action that Windows takes when a user closes the lid on a mobile PC.\n\n\nPossible actions include:\n\n\n-Take no
Specifies the action that Windows takes when a user closes the lid on a mobile PC.\n\n\nPossible actions include:\n\n\n-Take no
Specifies the action that Windows takes when a user presses the power button.\n\n\nPossible actions include:\n\n\n-Take no acti
Specifies the action that Windows takes when a user presses the power button.\n\n\nPossible actions include:\n\n\n-Take no acti
Specifies the action that Windows takes when a user presses the sleep button.\n\n\nPossible actions include:\n\n\n-Take no acti
Specifies the action that Windows takes when a user presses the sleep button.\n\n\nPossible actions include:\n\n\n-Take no acti
Specifies the action that Windows takes when a user presses the user interface sleep button.\n\n\nPossible actions include:\n\n\
Specifies the action that Windows takes when a user presses the user interface sleep button.\n\n\nPossible actions include:\n\n\
Specifies an active power plan when you enter a power plan’s GUID.\n\n\nRetrieve the custom power plan GUID by using powe
Specifies the period of inactivity before Windows transitions the system to hibernate.\n\n\nIf you enable this policy setting, y
Specifies the period of inactivity before Windows transitions the system to hibernate.\n\n\nIf you enable this policy setting, y
Specifies the period of inactivity before Windows transitions the system to sleep.\n\n\nIf you enable this policy setting, you m
Specifies the period of inactivity before Windows transitions the system to sleep.\n\n\nIf you enable this policy setting, you m
Manages how Windows controls the setting that specifies how long a computer must be inactive before Windows turns off the co
Manages how Windows controls the setting that specifies how long a computer must be inactive before Windows turns off the co
Disables Hybrid Sleep.\n\n\nIf you enable this policy setting, a hiberfile is not generated when the system transitions to sleep
Disables Hybrid Sleep.\n\n\nIf you enable this policy setting, a hiberfile is not generated when the system transitions to sleep
Disables a user notification when the battery capacity remaining equals the low battery notification level.\n\n\nIf you enable this
Specifies the period of inactivity before Windows turns off the display.\n\n\nIf you enable this policy, you must provide a value
Specifies the period of inactivity before Windows turns off the display.\n\n\nIf you enable this policy, you must provide a value
Specifies the period of inactivity before Windows turns off the hard disk.\n\n\nIf you enable this policy, you must provide a va
Specifies the period of inactivity before Windows turns off the hard disk.\n\n\nIf you enable this policy, you must provide a va
Enables applications and services to prevent the system from sleeping.\n\n\nIf you enable this policy setting, an application or
Enables applications and services to prevent the system from sleeping.\n\n\nIf you enable this policy setting, an application or
This policy setting lets you hide the list or restore of previous versions of files that are on local disks. The previous versions cou
This policy setting lets you hide the list or restore of previous versions of files that are on local disks. The previous versions cou
This policy setting lets you hide the list or restore of previous versions of files that are on file shares. The previous versions coul
This policy setting lets you hide the list or restore of previous versions of files that are on file shares. The previous versions coul
This setting lets you hide entries in the list of previous versions of a file in which the previous version is located on backup
This setting lets you hide entries in the list of previous versions of a file in which the previous version is located on backup
This setting lets you suppress the Restore button in the previous versions property page when the user has selected a previous versi
This setting lets you suppress the Restore button in the previous versions property page when the user has selected a previous ve
This setting lets you suppress the Restore button in the previous versions property page when the user has selected a previous ve
This policy sets the maximum number of printers (of each type) that the Add Printer wizard will display on a computer on a manage
This policy sets the maximum number of printers (of each type) that the Add Printer wizard will display on a computer on an unma
This policy controls whether the print spooler will accept client connections. \n\n\nWhen the policy is unconfigured, the spoole
Determines whether the computer's shared printers can be published in Active Directory.\n\n\nIf you enable this setting or do not c
Determines whether the domain controller can prune (delete from Active Directory) the printers published by this computer.\n\n\
When printing through a print server, determines whether the print spooler on the client will process print jobs itself, or pass
Determines whether the Add Printer Wizard automatically publishes the computer's shared printers in Active Directory.\n\n\nIf you
Adds a link to an Internet or intranet Web page to the Add Printer Wizard.\n\n\nYou can use this setting to direct users to a
Allows users to use the Add Printer Wizard to search the network for shared printers.\n\n\nIf you enable this setting or do not
Directs the system to periodically verify that the printers published by this computer still appear in Active Directory. This settin
Specifies the default location criteria used when searching for printers.\n\n\nThis setting is a component of the Location Track
Adds a customized Web page link to the Printers folder.\n\n\nBy default, the Printers folder includes a link to the Microsoft S
Specifies the Active Directory location where searches for printers begin.\n\n\nThe Add Printer Wizard gives users the option of s
Specifies how often the pruning service on a domain controller contacts computers to verify that their printers are operational
Sets the priority of the pruning thread.\n\n\nThe pruning thread, which runs only on domain controllers, deletes printer objects
Specifies how many times the pruning service on a domain controller repeats its attempt to contact a computer before pruning the
Determines whether printers using kernel-mode drivers may be installed on the local computer. Kernel-mode drivers have access
Specifies whether or not to log events when the pruning service on a domain controller attempts to contact a computer before prun
This policy restricts clients computers to use package point and print only.\n\n\nIf this setting is enabled, users will only be a
Restricts package point and print to approved servers.\n\n\nIf this setting is enabled, users will only be able to package point a
This policy setting controls the servers that a client machine can connect to for point and print, and the security prompts
Enables the physical Location Tracking support feature of Windows printers.\n\n\nLocation tracking lets you design a location s
Prevents users from using familiar methods to add local and network printers.\n\n\nThis setting removes the Add Printer option fr
Prevents users from deleting local and network printers.\n\n\nIf a user tries to delete a printer, such as by using the Delete o
Announces the presence of shared printers to print browse master servers for the domain.\n\n\nOn domains with Active Directory,
Determines whether the pruning service on a domain controller prunes printer objects that are not automatically republished wh
Determines whether Internet printing is activated on this server.\n\n\nInternet printing lets you display printers on Web pages s
Prevents users from viewing or installing published programs from the network. \n\n\nThis setting prevents users from accessin
This setting prevents users from accessing "Installed Updates" page from the "View installed updates" task.\n\n\n"Installed Upd
This setting prevents users from accessing "Programs and Features" to view, uninstall, change, or repair programs that are cur
This setting removes the Set Program Access and Defaults page from the Programs Control Panel. As a result, users cannot vi
This setting prevents users from accessing the "Turn Windows features on or off" task from the Programs Control Panel in Cate
This setting prevents users from access the "Get new programs from Windows Marketplace" task from the Programs Control Panel
This setting prevents users from using the Programs Control Panel in Category View and Programs and Features in Classic View
This policy setting allows you to set the number of retries for synchronization on failure servers.\n\n\nIf you enable this policy
This policy setting allows you to set the interval in seconds between retries for synchronization failures.\n\n\nIf you enable thi
This policy setting allows you to manage the extensive logging feature for the Password Sync component.\n\n\nIf you enable this
This policy setting allows you to manage the Windows to Network Information Service(NIS) password sync feature (for Unix user
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Best Effort service type (Se
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Best Effort service type (Se
Specifies an alternate link layer (Layer-2) priority value for packets with the Best Effort service type (ServiceTypeBestEffort). T
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Controlled Load service typ
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Controlled Load service typ
Specifies an alternate link layer (Layer-2) priority value for packets with the Controlled Load service type (ServiceTypeControlle
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Guaranteed service type (S
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Guaranteed service type (S
Specifies an alternate link layer (Layer-2) priority value for packets with the Guaranteed service type (ServiceTypeGuaranteed).
Specifies the maximum number of outstanding packets permitted on the system. When the number of outstanding packets reaches th
Determines the percentage of connection bandwidth that the system can reserve. This value limits the combined bandwidth reserva
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Network Control service ty
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Network Control service typ
Specifies an alternate link layer (Layer-2) priority value for packets with the Network Control service type (ServiceTypeNetworkCo
Specifies an alternate link layer (Layer-2) priority value for packets that do not conform to the flow specification. The Packet S
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Qualitative service type (S
Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Qualitative service type (S
Specifies an alternate link layer (Layer-2) priority value for packets with the Qualitative service type (ServiceTypeQualitative).
Determines the smallest unit of time that the Packet Scheduler uses when scheduling packets for transmission. The Packet Schedul
Determines the execution level for Windows Resource Exhaustion Detection and Resolution.\n\n\nIf you enable this policy settin
Defines when the Shutdown Event Tracker System State Data feature is activated.\n\n\nThe system state data file contains infor
The Shutdown Event Tracker can be displayed when you shut down a workstation or server. This is an extra set of questions
The Persistent System Timestamp allows the system to detect the time of unexpected shutdowns by writing the current time to di
This setting controls whether or not unplanned shutdown events can be reported when error reporting is enabled.\n\n\nWhen this
This policy setting enables Remote Assistance invitations to be generated with improved encryption so that only computers runni
The "Display warning message before sharing control" policy setting allows you to specify a custom message to display before a
This policy setting allows you to turn on or turn off Offer (Unsolicited) Remote Assistance on this computer. \n\n\nIf you
This policy setting allows you to enable or disable Solicited (Ask for) Remote Assistance on this computer. \n\n\nIf you enabl
This policy setting allows you to improve performance in low bandwidth scenarios.\n\n\nThis setting is incrementally scaled from
This policy setting allows you to turn logging on or off. Log files are located in the user's Documents folder under Remote Assistan
Configure access to all removable storage classes.\n\n\nThis policy setting takes precedence over any individual removable stor
Configure access to all removable storage classes.\n\n\nThis policy setting takes precedence over any individual removable stor
This policy setting grants normal users direct access to removable storage devices in remote sessions.\n\n\nIf you enable this
This policy setting denies read access to the CD and DVD removable storage class.\n\n\nIf you enable this policy setting, read
This policy setting denies read access to the CD and DVD removable storage class.\n\n\nIf you enable this policy setting, read
This policy setting denies write access to the CD and DVD removable storage class.\n\n\nIf you enable this policy setting, write
This policy setting denies write access to the CD and DVD removable storage class.\n\n\nIf you enable this policy setting, write
This policy setting denies read access to custom removable storage classes.\n\n\nIf you enable this policy setting, read access
This policy setting denies read access to custom removable storage classes.\n\n\nIf you enable this policy setting, read access
This policy setting denies write access to custom removable storage classes.\n\n\nIf you enable this policy setting, write acces
This policy setting denies write access to custom removable storage classes.\n\n\nIf you enable this policy setting, write acces
This policy setting denies read access to the Floppy Drives removable storage class, including USB Floppy Drives.\n\n\nIf you en
This policy setting denies read access to the Floppy Drives removable storage class, including USB Floppy Drives.\n\n\nIf you en
This policy setting denies write access to the Floppy Drives removable storage class, including USB Floppy Drives.\n\n\nIf you en
This policy setting denies write access to the Floppy Drives removable storage class, including USB Floppy Drives.\n\n\nIf you en
This policy setting denies read access to removable disks.\n\n\nIf you enable this policy setting, read access will be denied to
This policy setting denies read access to removable disks.\n\n\nIf you enable this policy setting, read access will be denied to
This policy setting denies write access to removable disks.\n\n\nIf you enable this policy setting, write access will be denied to
This policy setting denies write access to removable disks.\n\n\nIf you enable this policy setting, write access will be denied to
This policy setting denies read access to the Tape Drive removable storage class.\n\n\nIf you enable this policy setting, read a
This policy setting denies read access to the Tape Drive removable storage class.\n\n\nIf you enable this policy setting, read a
This policy setting denies write access to the Tape Drive removable storage class.\n\n\nIf you enable this policy setting, write
This policy setting denies write access to the Tape Drive removable storage class.\n\n\nIf you enable this policy setting, write
Set the amount of time (in seconds) that the system will wait to reboot in order to enforce a change in access rights to removable
Set the amount of time (in seconds) that the system will wait to reboot in order to enforce a change in access rights to removable
This policy setting denies read access to removable disks, which may include media players, cellular phones, auxiliary displays,
This policy setting denies read access to removable disks, which may include media players, cellular phones, auxiliary displays,
This policy setting denies write access to removable disks, which may include media players, cellular phones, auxiliary displays,
This policy setting denies write access to removable disks, which may include media players, cellular phones, auxiliary displays,
Directs the RPC Runtime to ignore delegation failures if delegation was asked for.\n\n\nWindows Server 2003 family includes
Directs the RPC Runtime to assume the specified timeout as the idle connection timeout even if the IIS server running the RP
Directs the RPC Runtime to generate extended error information when an error occurs.\n\n\nExtended error information includes
If you enable this setting, it directs the RPC Runtime on an RPC server to restrict unauthenticated RPC clients connecting to R
Enabling this setting directs RPC Clients that need to communicate with the Endpoint Mapper Service to authenticate as long
\n\n\n\nDetermines whether the RPC Runtime maintains RPC state information for the system, and how much information it mainta
This policy setting allows user logon scripts to run when the logon cross-forest, DNS suffixes are not configured and NetBIOS or
Determines how long the system waits for scripts applied by Group Policy to run.\n\n\nThis setting limits the total time allowed
Hides the instructions in logon scripts written for Windows NT 4.0 and earlier.\n\n\nLogon scripts are batch files of instructi
Displays the instructions in logoff scripts as they run.\n\n\nLogoff scripts are batch files of instructions that run when the user
Directs the system to wait for the logon scripts to finish running before it starts the Windows Explorer interface program and
Directs the system to wait for the logon scripts to finish running before it starts the Windows Explorer interface program and
Displays the instructions in logon scripts as they run.\n\n\nLogon scripts are batch files of instructions that run when the user
Displays the instructions in shutdown scripts as they run.\n\n\nShutdown scripts are batch files of instructions that run when th
Lets the system run startup scripts simultaneously.\n\n\nStartup scripts are batch files that run before the user is invited to log
Displays the instructions in startup scripts as they run.\n\n\nStartup scripts are batch files of instructions that run before the
This policy setting allows encrypted items to be indexed. If you enable this policy setting, indexing disregards encryption flags
This policy setting allows words that contain diacritic characters to be treated as separate words. If you enable this policy settin
Store indexer database in this directory. This directory must be located on a local fixed drive.
If enabled, Search and Indexing Options control panel applet does not allow opening the advanced options dialog. Otherwise it
Enable this policy setting to prevent the indexing of the content of e-mail attachments. If enabled, indexing service components
If enabled, files on network shares made available offline are not indexed. Otherwise they are indexed. This policy setting is n
Enable this policy setting to prevent indexing of any Microsoft Outlook items. The default behavior is to automatically index Outl
Enable this policy setting to prevent indexing public folders in Microsoft Office Outlook. When this policy setting is disable
Enabling this policy setting prevents indexing of mail items on a Microsoft Exchange server when Microsoft Outlook is run in un
This policy setting specifies whether Security Center is turned on or off for computers that are joined to an Active Directory
This policy setting allows you to set the refresh interval for Server Manager. Each refresh provides Server Manager with update
This policy setting allows you to turn off the automatic display of the Initial Configuration Tasks window at logon. \n\n\nIf you
This policy setting allows you to turn off the automatic display of the Manage Your Server page. \n\n\nIf you enable this polic
This policy setting allows you to turn off the automatic display of Server Manager at logon.\n\n\nIf you enable this policy sett
Specifies an alternate location for Windows installation files.\n\n\nTo enable this setting, and enter the fully qualified path t
Specifies an alternate location for Windows Service Pack installation files.\n\n\nTo enable this setting, enter the fully quali
Determines whether the user can publish DFS roots in Active Directory.\n\n\nIf you enable this setting or do not configure it, use
Determines whether the user can publish shared folders in Active Directory.\n\n\nIf you enable this setting or do not configure it
By default users are allowed to share files within their profile to other users on their network once an administrator opts in the
Prevents Windows from running the programs you specify in this setting.\n\n\nIf you enable this setting, users cannot run pro
Disables the Windows registry editor Regedit.exe.\n\n\nIf this setting is enabled and the user tries to start a registry editor,
Prevents users from running the interactive command prompt, Cmd.exe. This setting also determines whether batch files (.cmd a
Limits the Windows programs that users have permission to run on the computer.\n\n\nIf you enable this setting, users can onl
This policy setting prevents the display of the Welcome Center at user logon. \n\n\nIf you enable this policy setting, the Welc
Sidebar gadgets can be deployed as compressed files, either digitally signed or unsigned.\nIf you enable this setting, Windows
Sidebar gadgets can be deployed as compressed files, either digitally signed or unsigned.\nIf you enable this setting, Windows
The Windows Sidebar contains a link to allow users to download more gadgets from a website. Microsoft hosts a default website w
The Windows Sidebar contains a link to allow users to download more gadgets from a website. Microsoft hosts a default website w
The Windows Sidebar will run gadgets that are located in the profile space of the user. Gadgets are small applets that are run
The Windows Sidebar will run gadgets that are located in the profile space of the user. Gadgets are small applets that are run
Windows Sidebar is a feature that allows the use of gadgets, which are small applets that may display information or utilities t
Windows Sidebar is a feature that allows the use of gadgets, which are small applets that may display information or utilities t
This policy setting deletes all data stored on Windows SideShow-compatible devices (running Microsoft firmware) when a user logs
This policy setting deletes all data stored on Windows SideShow-compatible devices (running Microsoft firmware) when a user logs
This policy setting requires users to enter a default personal identification number (PIN) to unlock and access data on the dev
This policy setting requires users to enter a default personal identification number (PIN) to unlock and access data on the dev
This policy setting turns off the option to periodically wake the computer to update information on Windows SideShow-compatib
This policy setting turns off the option to periodically wake the computer to update information on Windows SideShow-compatib
This policy setting turns off Windows SideShow.\n\n\nIf you enable this policy setting, the Windows SideShow Control Panel w
This policy setting turns off Windows SideShow.\n\n\nIf you enable this policy setting, the Windows SideShow Control Panel w
This policy setting lets you allow certificates without an Extended Key Usage (EKU) set to be used for logon.\n\n\nUnder previou
This policy setting lets you determine whether the integrated unblock feature will be available in the logon User Interface (UI).
This policy setting lets you allow signature key-based certificates to be enumerated and available for logon.\n\n\nIf you enable t
This policy setting permits those certificates to be displayed for logon that are either expired or not yet valid.\n\n\nUnder previ
This policy setting lets you determine whether an optional field will be displayed during logon and elevation that allows a user
This policy setting allows you to manage the clean up behavior of root certificates. If you enable this policy setting then root ce
This policy setting allows you to manage the displayed message when a smart card is blocked.\n\n\nIf you enable this policy set
This policy settings lets you configure if all your valid logon certificates are displayed.\n\n\nDuring the certificate renewal pe
This policy setting allows you to manage the reading of all certificates from the smart card for logon.\n\n\nDuring logon Windows w
This policy setting prevents plaintext PINs from being returned by Credential Manager. \n\n\nIf you enable this policy setting,
This policy setting lets you reverse the subject name from how it is stored in the certificate when displaying it during logon
This policy setting allows you to manage the certificate propagation that occurs when a smart card is inserted.\n\n\nIf you enable
This policy setting allows you to manage the root certificate propagation that occurs when a smart card is inserted.\n\n\nIf you e
This policy setting allows you to set an update interval for pushing Network Information Service (NIS) maps to NIS subordinate ser
This policy setting allows you to manage the Server for Network Information Service extensive logging feature.\n\n\nIf you enab
Configures a list of the communities defined to the Simple Network Management Protocol (SNMP) service.\n\n\nSNMP is a proto
This setting determines the permitted list of hosts that can submit a query to the Simple Network Management (SNMP) agent ru
This setting allows Trap configuration for the Simple Network Management Protocol (SNMP) agent.\n\n\nSimple Network Managem
Specifies whether Sound Recorder can run.\n\n\nSound Recorder is a feature of Microsoft Windows Vista that can be used to re
Specifies whether Sound Recorder can run.\n\n\nSound Recorder is a feature of Microsoft Windows Vista that can be used to re
Lets users run a 16-bit program in a dedicated (not shared) Virtual DOS Machine (VDM) process.\n\n\nAll DOS and 16-bit pro
This policy only applies to the classic version of the start menu and does not affect the new style start menu.\n\n\nAdds the
If you enable this setting, the Run command is added to the Start menu. If you disable or do not configure this setting, the
Clear history of recently opened documents on exit.\n\n\nIf you enable this setting, the system deletes shortcuts to recently
If you enable this policy setting, the recent programs list in the start menu will be blank for each new user.\n\n\nIf you disabl
This setting affects the taskbar.\n\n\nThe taskbar includes the Start button, buttons for currently running tasks, custom tool
Prevents the operating system and installed programs from creating and displaying shortcuts to recently opened documents.\n\n
If you enable this policy the start menu search box will not search for communications.\n\n\nIf you disable or do not configure
If you enable this policy the start menu search box will not search for files.\n\n\nIf you disable or do not configure this policy,
If you enable this policy the start menu search box will not search for internet history or favorites.\n\n\nIf you disable or do not
If you enable this policy the start menu search box will not search for programs.\n\n\nIf you disable or do not configure this po
Prevents the system from conducting a comprehensive search of the target drive to resolve a shortcut.\n\n\nBy default, when the sy
Prevents the system from using NTFS tracking features to resolve a shortcut.\n\n\nBy default, when the system cannot find the targ
This setting affects the presentation of the Start menu.\n\n\nThe classic Start menu in Windows 2000 Professional allows user
Displays Start menu shortcuts to partially installed programs in gray text.\n\n\nThis setting makes it easier for users to disting
This setting affects the notification area (previously called the "system tray") on the taskbar.\n\n\nDescription: The notification
This setting affects the taskbar, which is used to switch between running applications.\n\n\nThe taskbar includes the Start butto
Removes the Taskbar and Start Menu item from Settings on the Start menu. This setting also prevents the user from opening the
This setting affects the taskbar buttons used to switch between running programs.\n\n\nTaskbar grouping consolidates similar ap
Hides the menus that appear when you right-click the taskbar and items on the taskbar, such as the Start button, the clock,
If you enable this setting, the "All Programs" item is removed from the simple Start menu.\n\n\nIf you disable this setting or d
This policy setting prevents users from performing the following commands from the Start menu or Windows Security screen:
Hides pop-up text on the Start menu and in the notification area.\n\n\nWhen you hold the cursor over an item on the Start menu o
Prevents the clock in the system notification area from being displayed.\n\n\nIf you enable this setting, the clock will not be dis
Removes items in the All Users profile from the Programs menu on the Start menu.\n\n\nBy default, the Programs menu contains
Removes the Default Programs link from the Start menu.\n\n\nClicking the Default Programs link from the Start menu opens the
Removes the Documents icon from the Start menu and its submenus.\n\n\nThis setting only removes the icon. It does not preve
Prevents users from using the drag-and-drop method to reorder or remove items on the Start menu. Also, it removes context me
Prevents users from adding the Favorites menu to the Start menu or classic Start menu.\n\n\nIf you enable this setting, the D
If you enable this setting, the frequently used programs list is removed from the Start menu.\n\n\nIf you disable this setting or
If you enable this policy the start menu will not show a link to the Games folder.\n\n\nIf you disable or do not configure this po
Removes the Help command from the Start menu.\n\n\nThis setting only affects the Start menu. It does not remove the Help
Prevents users from connecting to the Windows Update Web site.\n\n\nThis setting blocks user access to the Windows Update
Removes the "Log Off <username>" item from the Start menu and prevents users from restoring it.\n\n\nIf you enable this
Removes the Music icon from the Start Menu.
Prevents users from running Network Connections.\n\n\nThis setting prevents the Network Connections folder from opening. Th
Removes the Network icon from the Start Menu.
Removes the Pictures icon from the Start Menu.
If you enable this setting, the "Pinned Programs" list is removed from the Start menu, and the Internet and Email checkboxes
Prevents Control Panel, Printers, and Network Connections from running.\n\n\nThis setting removes the Control Panel, Printer
Removes the Recent Items menu from the Start menu. Removes the Documents menu from the classic Start menu.\n\n\nThe Recent
Allows you to remove the Run command from the Start menu, Internet Explorer, and Task Manager.\n\n\nIf you enable this setting
If you enable this policy, the "See all results" link will not be shown when the user performs a search in the start menu search
Removes the Search link from the Start menu, and disables some Windows Explorer search elements. Note that this does not r
If you enable this setting, the "Undock PC" button is removed from the simple Start Menu, and your PC cannot be undocked.\n\
If you enable this policy the start menu will not show a link to the user's storage folder.\n\n\nIf you disable or do not configure
Remove the user name label from the Start Menu.\n\n\nNote: This setting does not apply to Windows Vista. To remove the use
Hides all folders on the user-specific (top) section of the Start menu. Other items appear, but folders are hidden.\n\n\nThis set
This policy setting controls whether the QuickLaunch bar is displayed in the Taskbar.\n\n\nIf you enable this policy setting, the
This setting affects the notification area, also called the "system tray."\n\n\nThe notification area is located in the task bar, g
Disables personalized menus.\n\n\nWindows personalizes long menus by moving recently used items to the top of the menu and hi
Disables user tracking.\n\n\nThis setting prevents the system from tracking the programs users run, the paths they navigate,
User folders links launch a folder view of users files instead of a library view.
This setting assigns the email address(es) to which notifications will be sent. Use a semicolon (;) to separate multiple email a
This setting assigns the address of the SMTP server that sends out notifications.\n\n\nIf you enable this setting, Windows Syst
This setting directs the Accounting feature to log data on the accounting server at the specified time interval.\n\n\nIf you e
This setting turns the Accounting feature On or Off.\n\n\nIf you enable this setting, Windows System Resource Manager (WSRM)
Allows you to turn off the Configuration Interface for System Restore.\n\n\nSystem Restore enables users, in the event of a probl
Determines whether System Restore is turned on or off.\n\n\nSystem Restore enables users, in the event of a problem, to restore t
Prevents the Tablet PC Input Panel icon from appearing next to any text entry area in applications where this behavior is availa
Prevents the Tablet PC Input Panel icon from appearing next to any text entry area in applications where this behavior is availa
Prevents the Tablet PC Input Panel icon from appearing next to any text entry area in applications where this behavior is availab
Prevents the Tablet PC Input Panel icon from appearing next to any text entry area in applications where this behavior is availab
\n\nIncludes rarely used Chinese, Kanji, and Hanja characters when handwriting is converted to typed text. This policy applies o
\n\nIncludes rarely used Chinese, Kanji, and Hanja characters when handwriting is converted to typed text. This policy applies o
Prevents Input Panel tab from appearing on the edge of the Tablet PC screen.\n\n\nTablet PC Input Panel is a Tablet PC accessor
Prevents Input Panel tab from appearing on the edge of the Tablet PC screen.\n\n\nTablet PC Input Panel is a Tablet PC accessor
Switches the gesture set used for editing from the common handheld computer gestures to the Simplified Chinese (PRC) standard g
Switches the gesture set used for editing from the common handheld computer gestures to the Simplified Chinese (PRC) standard g
Turns off the integration of application auto complete lists with Tablet PC Input Panel in applications where this behavior is ava
Turns off the integration of application auto complete lists with Tablet PC Input Panel in applications where this behavior is ava
Adjusts password security settings in Tablet PC Input Panel. These settings include using the on-screen keyboard by default, p
Adjusts password security settings in Tablet PC Input Panel. These settings include using the on-screen keyboard by default, p
Turns off both the more tolerant scratch-out gestures that were added in Windows Vista and the Z-shaped scratch-out gesture tha
Turns off both the more tolerant scratch-out gestures that were added in Windows Vista and the Z-shaped scratch-out gesture tha
Prevents start of InkBall game.\n\n\nIf you enable this policy, the InkBall game will not run.\n\n\nIf you disable this policy, the I
Prevents start of InkBall game.\n\n\nIf you enable this policy, the InkBall game will not run.\n\n\nIf you disable this policy, the I
Prevents printing to Journal Note Writer.\n\n\nIf you enable this policy, the Journal Note Writer printer driver will not allow printing
Prevents printing to Journal Note Writer.\n\n\nIf you enable this policy, the Journal Note Writer printer driver will not allow printing
Prevents the snipping tool from running.\n\n\nIf you enable this policy setting, the Snipping Tool will not run.\n\n\nIf you disable
Prevents the snipping tool from running.\n\n\nIf you enable this policy setting, the Snipping Tool will not run.\n\n\nIf you disable
Prevents start of Sticky Notes.\n\n\nIf you enable this policy, the Sticky Notes accessory will not run.\n\n\nIf you disable this po
Prevents start of Sticky Notes.\n\n\nIf you enable this policy, the Sticky Notes accessory will not run.\n\n\nIf you disable this po
Prevents start of Windows Journal.\n\n\nIf you enable this policy, the Windows Journal accessory will not run.\n\n\nIf you disab
Prevents start of Windows Journal.\n\n\nIf you enable this policy, the Windows Journal accessory will not run.\n\n\nIf you disab
Removes the Back->ESC mapping that normally occurs when menus are visible, and for applications that subscribe to this beh
Removes the Back->ESC mapping that normally occurs when menus are visible, and for applications that subscribe to this beh
Makes pen flicks and all related features unavailable.\n\n\nIf you enable this policy, pen flicks and all related features are unavai
Makes pen flicks and all related features unavailable.\n\n\nIf you enable this policy, pen flicks and all related features are unavai
Makes pen flicks learning mode unavailable.\n\n\nIf you enable this policy, pen flicks are still available but learning mode is not
Makes pen flicks learning mode unavailable.\n\n\nIf you enable this policy, pen flicks are still available but learning mode is not
Prevents the user from launching an application from a Tablet PC hardware button.\n\n\nIf you enable this policy, application
Prevents the user from launching an application from a Tablet PC hardware button.\n\n\nIf you enable this policy, application
Prevents press and hold actions on hardware buttons, so that only one action is available per button.\n\n\nIf you enable this poli
Prevents press and hold actions on hardware buttons, so that only one action is available per button.\n\n\nIf you enable this poli
Turns off Tablet PC hardware buttons.\n\n\nIf you enable this policy, no actions will occur when the buttons are pressed, and
Turns off Tablet PC hardware buttons.\n\n\nIf you enable this policy, no actions will occur when the buttons are pressed, and
Disables visual pen action feedback, except for press and hold feedback.\n\n\nIf you enable this policy, all visual pen action
Disables visual pen action feedback, except for press and hold feedback.\n\n\nIf you enable this policy, all visual pen action
Prevents the user from making any changes to the taskbar settings through the Taskbar Properties dialog.\n\n\nIf you enable this
Prevents users from adding or removing toolbars.\n\n\nIf you enable this policy setting the user will not be allowed to add or rem
Prevents users from moving taskbar to another screen dock location.\n\n\nIf you enable this policy setting the user will not be a
Prevents users from rearranging toolbars.\n\n\nIf you enable this setting the user will not be able to drag or drop toolbars to the
Prevent users from resizing the taskbar.\n\n\nIf you enable this policy setting the user will not be able to resize their taskbar to
Prevents the battery meter in the system control area from being displayed. If you enable this setting, the battery meter will not
Prevents the networking icon in the system control area from being displayed. If you enable this setting, the networking icon will
Prevents the volume control icon in the system control area from being displayed. If you enable this setting, the volume control i
If you enable this setting no notification balloons will be shown to the user.\n\n\nIf you disable or do not configure this setting b
If you enable this setting the taskbar thumbnails will not be shown, and the system will use standard text for the tooltips.\n\n\n
This setting removes the "Open advanced properties for this task when I click Finish" checkbox from the last page of the Sched
This setting removes the "Open advanced properties for this task when I click Finish" checkbox from the last page of the Sched
Prevents users from viewing and changing the properties of an existing task.\n\n\nThis setting removes the Properties item fr
Prevents users from viewing and changing the properties of an existing task.\n\n\nThis setting removes the Properties item fr
Prevents users from starting and stopping tasks manually.\n\n\nThis setting removes the Run and End Task items from the conte
Prevents users from starting and stopping tasks manually.\n\n\nThis setting removes the Run and End Task items from the conte
Limits newly scheduled to items on the user's Start menu, and prevents the user from changing the scheduled program for exist
Limits newly scheduled to items on the user's Start menu, and prevents the user from changing the scheduled program for exist
Prevents users from adding or removing tasks by moving or copying programs in the Scheduled Tasks folder.\n\n\nThis setting
Prevents users from adding or removing tasks by moving or copying programs in the Scheduled Tasks folder.\n\n\nThis setting
Prevents users from creating new tasks.\n\n\nThis setting removes the Add Scheduled Task item that starts the New Task Wizar
Prevents users from creating new tasks.\n\n\nThis setting removes the Add Scheduled Task item that starts the New Task Wizar
Prevents users from deleting tasks from the Scheduled Tasks folder.\n\n\nThis setting removes the Delete command from the Edi
Prevents users from deleting tasks from the Scheduled Tasks folder.\n\n\nThis setting removes the Delete command from the Edi
This policy setting allows you to specify whether users can run unsigned Remote Desktop Protocol (.rdp) files and .rdp files f
This policy setting allows you to specify whether users can run unsigned Remote Desktop Protocol (.rdp) files and .rdp files f
This policy setting allows you to specify whether users can run Remote Desktop Protocol (.rdp) files from a publisher that signed
This policy setting allows you to specify whether users can run Remote Desktop Protocol (.rdp) files from a publisher that signed
Specifies whether users can choose where to play the remote computer's audio output during a Terminal Services session (audio
This policy setting determines whether the client computer redirects its time zone settings to the Terminal Services session.\n\
This policy setting allows you to configure remote access to computers using Terminal Services.\n\n\nIf you enable this poli
Specifies whether Terminal Services always prompts the client for a password upon connection. \n\n\nYou can use this setting
This policy setting determines whether the desktop is always displayed after a client connects to a remote computer or an initia
Specifies whether to allow Remote Desktop Connection clients to automatically reconnect to Terminal Services sessions if their
This policy setting allows you to enter a keep-alive interval to ensure that the session state on the terminal server is consisten
This policy setting allows you to specify whether the client will establish a connection to the terminal server when the client ca
This policy setting allows you to specify the name of a farm to join in TS Session Broker. TS Session Broker uses the farm n
This policy setting allows you to specify the TS Session Broker server that the terminal server uses to track and redirect us
This policy setting determines whether an administrator attempting to connect remotely to the console of a server can log off an
This policy setting allows you to specify whether to prevent the mapping of client printers in Terminal Services sessions. \n\n\nYo
Specifies whether to prevent the sharing of clipboard contents (clipboard redirection) between a remote computer and a client co
Specifies whether to prevent the redirection of data to client COM ports from the remote computer in a Terminal Services sessio
Specifies whether to prevent the mapping of client drives in a Terminal Services session (drive redirection). \n\n\nBy default, Te
Specifies whether to disable the administrator rights to customize security permissions in the Terminal Services Configuration
Specifies whether to prevent the redirection of data to client LPT ports during a Terminal Services session. \n\n\nYou can use th
Controls whether passwords can be saved on this computer from Terminal Services clients.\n\n\nIf you enable this setting the p
Controls whether a user can save passwords using a Terminal Services client.\n\n\nIf you enable this setting the password savin
This policy setting allows you to control the redirection of smart card devices in a Terminal Services session.\n\n\nIf you ena
This policy setting allows you to control the redirection of supported Plug and Play devices, such as Windows Portable Devices
Specifies whether Terminal Services retains a user's per-session temporary folders at logoff. \n\n\nYou can use this setting to m
This policy setting allows you to specify whether the client default printer is automatically set as the default printer in a Termi
This policy setting allows you to prevent Terminal Services from creating session-specific temporary folders.\n\n\nYou can use
If you enable this policy setting, when Terminal Services clients cannot connect directly to a remote computer (a terminal serv
Specifies whether desktop wallpaper is displayed to remote clients connecting via Terminal Services. \n\n\nYou can use this se
This policy setting determines whether notifications are displayed on a terminal server when there are problems with TS Licensing t
This policy setting allows you to specify whether the terminal server should join a farm in TS Session Broker. TS Session Broke
This policy setting allows you to specify the terminal servers to which a Terminal Services license server will offer Terminal
This policy setting allows you to specify the maximum color resolution (color depth) for Terminal Services connections.\n\n\nYo
Specifies whether Terminal Services limits the number of simultaneous connections to the server. \n\n\nYou can use this setti
This policy setting allows you to specify which version of Terminal Services client access license (TS CAL) a Terminal Service
This policy setting determines whether a user will be prompted on the client computer to provide credentials for a remote conne
This policy setting allows you to remove the "Disconnect" option from the Shut Down Windows dialog box on Terminal Services c
Specifies whether to remove the Windows Security item from the Settings menu on Terminal Services clients. You can use this
Specifies whether a Terminal Server requires secure RPC communication with all clients or allows unsecured communication.\n\n
Specifies whether to require the use of a specific security layer to secure communications between clients and terminal serve
This policy setting allows you to specify whether to require user authentication for remote connections to the terminal server
This policy setting allows you to restrict users to a single remote Terminal Services session.\n\n\nIf you enable this policy set
This policy setting allows you to specify the name of the certificate template that determines which certificate is automatically
Specifies whether to require the use of a specific encryption level to secure communications between clients and terminal serv
This policy setting allows you to specify which Remote Desktop Protocol (RDP) compression algorithm to use.\n\n\nBy default,
This policy setting allows you to specify the network path that Terminal Services uses for roaming user profiles.\n\n\nBy defau
This policy setting allows you to specify the level of remote control permitted in a Terminal Services session.\n\n\nYou can use
This policy setting allows you to specify the level of remote control permitted in a Terminal Services session.\n\n\nYou can use
This policy setting allows you to specify the type of Terminal Services client access license (TS CAL) that is required to conne
This policy setting allows you to specify the maximum amount of time that an active Terminal Services session can be idle (wit
This policy setting allows you to specify the maximum amount of time that an active Terminal Services session can be idle (wit
This policy setting allows you to specify the maximum amount of time that a Terminal Services session can be active before it
This policy setting allows you to specify the maximum amount of time that a Terminal Services session can be active before it
This policy setting allows you to configure a time limit for disconnected Terminal Services sessions.\n\n\nYou can use this pol
This policy setting allows you to configure a time limit for disconnected Terminal Services sessions.\n\n\nYou can use this pol
Specifies the authentication method that clients must use when attempting to connect to a terminal server through a TS Gateway se
Specifies the address of the TS Gateway server that clients must use when attempting to connect to a terminal server. You can e
Specifies whether Terminal Services uses the specified network share or local directory path as the root of the user's home dir
This policy setting allows you to specify a list of Secure Hash Algorithm 1 (SHA1) certificate thumbprints that represent trusted Re
This policy setting allows you to specify a list of Secure Hash Algorithm 1 (SHA1) certificate thumbprints that represent trusted Re
This policy setting allows you to specify the terminal server fallback printer driver behavior.\n\n\nBy default, the terminal server
Configures Terminal Services to run a specified program automatically upon connection.\n\n\nYou can use this setting to specify
Configures Terminal Services to run a specified program automatically upon connection.\n\n\nYou can use this setting to specify
Specifies whether to terminate a timed-out Terminal Services session instead of disconnecting it. \n\n\nYou can use this setting
Specifies whether to terminate a timed-out Terminal Services session instead of disconnecting it. \n\n\nYou can use this setting
This policy setting allows you to specify the redirection method to use when a client device reconnects to an existing Terminal
This policy setting allows you to specify whether Terminal Services uses a mandatory profile for all users connecting remotely to
This policy setting allows you to specify the order in which a terminal server attempts to locate Terminal Services license seve
This policy setting allows you to specify whether remote users can start any program on the terminal server when they start
This policy setting allows you to specify whether the client computer redirects its time zone settings to the Terminal Services
This policy setting allows you to specify whether the desktop is always displayed after a client connects to a remote computer o
This policy setting allows you to specify whether to prevent the sharing of clipboard contents (clipboard redirection) between a
This policy setting allows you to specify whether the default client printer is the only printer redirected in Terminal Services sess
This policy setting allows you to specify whether the default client printer is the only printer redirected in Terminal Services sess
This policy setting allows you to specify whether desktop wallpaper is displayed to clients when they are connected to a remote
This policy setting allows you to specify how long a user's RemoteApp session will remain in a disconnected state before the s
This policy setting allows you to specify how long a user's RemoteApp session will remain in a disconnected state before the s
This policy setting allows you to specify whether the Terminal Services Easy Print printer driver is used first to install all client
This policy setting allows you to specify whether the Terminal Services Easy Print printer driver is used first to install all client
This policy setting allows you to specify whether to use the TS Session Broker load balancing feature to balance the load betwe
Turns off the caching of thumbnails in hidden thumbs.db files.\n\n\nThis policy setting allows you to configure Windows Explorer
Disables the display of thumbnails on network folders in Windows Explorer.\n\n\nWindows Explorer displays thumbnails on netwo
Disables the display of thumbnails in Windows Explorer.\n\n\nWindows Explorer displays thumbnails by default.\n\n\nIf you ena
Turn off Tablet PC touch input\n\n\nTurns off touch input, which allows the user to interact with their computer using their finger
Turn off Tablet PC touch input\n\n\nTurns off touch input, which allows the user to interact with their computer using their finger
This policy setting allows you to manage the Group Policy list of Trusted Platform Module (TPM) commands blocked by Wind
This policy setting allows you to enforce or ignore the computer's default list of blocked Trusted Platform Module (TPM) com
This policy setting allows you to enforce or ignore the computer's local list of blocked Trusted Platform Module (TPM) comma
This policy setting allows you to manage the Active Directory Domain Services (AD DS) backup of Trusted Platform Module (T
This setting lets you prevent users from selecting a local disk (internal or external) for storing file backups.\n\n\nIf this setting
This setting lets you prevent users from selecting a local disk (internal or external) for storing file backups.\n\n\nIf this setting
This setting lets you prevent users from selecting a network shared folder for storing file backups.\n\n\nIf this setting is enabl
This setting lets you prevent users from selecting a network shared folder for storing file backups.\n\n\nIf this setting is enabl
This setting lets you prevent users from selecting optical media (CD/DVD) for storing file backups.\n\n\nIf this setting is enable
This setting lets you prevent users from selecting optical media (CD/DVD) for storing file backups.\n\n\nIf this setting is enable
This setting lets you disable the Backup Status and Configuration program, which links to the file backup, file restore, and C
This setting lets you disable the Backup Status and Configuration program, which links to the file backup, file restore, and C
This setting lets you disable file backup functionality.\n\n\nIf this setting is enabled, the file backup program is disabled.\n\n\
This setting lets you disable file backup functionality.\n\n\nIf this setting is enabled, the file backup program is disabled.\n\n\
This setting lets you disable Complete PC Backup functionality.\n \nIf this setting is enabled, the Complete PC Backup p
This setting lets you disable Complete PC Backup functionality.\n \nIf this setting is enabled, the Complete PC Backup p
This setting lets you disable file restore functionality.\n\n\nIf this setting is enabled, the file restore program is disabled.\n\n\n
This setting lets you disable file restore functionality.\n\n\nIf this setting is enabled, the file restore program is disabled.\n\n\n
This setting adds the Administrator security group to the roaming user profile share.\n\n\nOnce an administrator has configured a
Restores the definitions of the %HOMESHARE% and %HOMEPATH% environment variables to those used in Windows NT 4.0 and earli
Determines whether the system saves a copy of a user’s roaming profile on the local computer's hard drive when the user logs off
This policy setting allows an administrator to automatically delete user profiles on system restart that have not been used withi
This setting disables the more secure default setting for the user’s roaming user profile folder.\n\n\nOnce an administrator has
Disables the slow link detection feature.\n\n\nSlow link detection measures the speed of the connection between a user's comput
Microsoft Windows will always unload the users registry, even if there are any open handles to the per-user registry keys at user
This policy will automatically log off a user when Windows cannot load their profile.\n\n\nIf Windows cannot access the user prof
Lets you add to the list of folders excluded from the user's roaming profile.\n\n\nThis setting lets you exclude folders that are
Determines whether the system retains a roaming user’s Windows Installer and Group Policy based software installation data on th
This policy setting sets the maximum size of each user profile and determines the system's response when a user profile reaches
Determines how many times the system tries to unload and update the registry portion of a user profile. When the number of trial
This policy setting allows you to specify which network directories will be synchronized only at logon and logoff via Offline File
This setting determines if roaming user profiles are available on a particular computer. By default, when roaming profile users lo
This setting determines if the changes a user makes to their roaming profile are merged with the server copy of their profile.\n\
This policy setting provides users with the ability to download their roaming profile, even when a slow network connection with
If the user has a roaming user profile or remote home directory and the network is currently unavailable, Microsoft Windows wa
Specifies whether Microsoft Windows should use the specified network path as the roaming user profile path for all users logging
Defines a slow connection for roaming user profiles.\n\n\nIf the server on which the user's roaming user profile resides takes
Determines how long the system waits for a user response before it uses a default value.\n\n\nThe default value is applied whe
Directs the system to wait for the remote copy of the roaming user profile to load, even when loading is slow. Also, the system
This policy setting allows you to configure the algorithm and key size used by BitLocker Drive Encryption. This policy setting
This policy setting allows you to configure how the computer's Trusted Platform Module (TPM) security hardware secures the B
This policy setting allows you to specify the default path that is displayed when the BitLocker Drive Encryption setup wizard pro
This policy setting allows you to configure whether the BitLocker Drive Encryption setup wizard will ask the user to save BitLo
This policy setting allows you to configure whether the BitLocker Drive Encryption setup wizard will ask the user to set up an
This policy setting controls computer restart performance at the risk of exposing BitLocker secrets. BitLocker secrets include
This policy setting allows you to manage the Active Directory Domain Services (AD DS) backup of BitLocker Drive Encryption r
Specifies whether the Windows NTP Client synchronizes time from the domain hierarchy or a manually configured NTP server. S
Specifies whether the Windows NTP Client is enabled. Enabling the Windows NTP Client allows your computer to synchronize its
Specifies whether the Windows NTP Server is enabled. Enabling the Windows NTP Server allows your computer to service N
Specifies a set of parameters for all time providers installed on your system. There are two sets of parameters: clock disci
Determines the execution level for Diagnostic Policy Service (DPS) scenarios.\n\n\nIf you enable this policy setting, you must s
Determines the data retention limit for Diagnostic Policy Service (DPS) scenario data.\n\n\nIf you enable this policy setting, y
Windows Calendar is a feature that allows users to manage appointments and tasks by creating personal calendars, publishing t
Windows Calendar is a feature that allows users to manage appointments and tasks by creating personal calendars, publishing t
This policy setting allows you to manage whether backups of only system volumes is allowed or both OS and data volumes can
This policy setting allows you to manage whether backups of a machine can run to locally attached storage or not.\n\n\nIf you e
This policy setting allows you to manage whether backups of a machine can run to a network share or not.\n\n\nIf you enable t
This policy setting allows you to manage whether backups of a machine can run to an optical media or not.\n\n\nIf you enable t
This policy setting allows you to manage whether run-once backups of a machine can be run or not.\n\n\nIf you enable this po
Windows Meeting Space is a feature that enables quick, face-to-face collaboration for sharing programs and handouts and for p
Windows Meeting Space is a feature that enables quick, face-to-face collaboration for sharing programs and handouts and for p
Windows Meeting Space is a feature that enables quick, face-to-face collaboration for sharing programs and handouts and for pa
Windows Meeting Space is a feature that enables quick, face-to-face collaboration for sharing programs and handouts and for pa
This policy setting affects the ability of users to install or uninstall color profiles.\n\n\nIf you enable this policy setting, users wi
This policy setting affects the ability of users to install or uninstall color profiles.\n\n\nIf you enable this policy setting, users wi
This policy setting allows the configuration of wireless settings using Windows Connect Now (WCN). The WCN Registrar enables th
This policy setting prohibits access to Windows Connect Now (WCN) wizards. If this policy setting is enabled, the wizards are dis
This policy setting prohibits access to Windows Connect Now (WCN) wizards. If this policy setting is enabled, the wizards are dis
Checks for new signatures before running scheduled scans.\n\n\nIf you enable this policy setting, the scheduled scan checks f
Adjusts membership in Microsoft SpyNet. \n\n\nMicrosoft SpyNet is the online community that helps you choose how to respond t
Downloads the full signature set, rather than only the signatures that have been updated since the last signature download. Down
Enables logging detection data during Real-time Protection when Windows Defender detects known good files. Logging detections
Enables logging detections during Real-time Protection when Windows Defender detects unknown files. Logging detections provide
Turns off Real-Time Protection (RTP) prompts for unknown detection.\n\n\nIf you enable this policy setting, Windows Defender
Turns off Windows Defender Real-Time Protection, and no more scans are scheduled.\n\n\nIf you enable this policy setting, W
This policy setting allows you to configure Windows Defender to check and install definition updates from Windows Update wh
This setting is designed to ensure that shell extensions can operate on a per-user basis. If you enable this setting, Window
Allows you to have Windows Explorer display a confirmation dialog whenever a file is deleted or moved to the Recycle Bin.\n\n\n
When a file or folder is deleted in Windows Explorer, a copy of the file or folder is placed in the Recycle Bin. Using this setti
Prevents users from submitting alternate logon credentials to install a program.\n\n\nThis setting suppresses the "Install Progr
Determines whether Windows traces shortcuts back to their sources when it cannot find the target on the user's system.\n\n\nShortc
Hide the Back button in the Open dialog box.\n\n\nThis policy setting lets you remove new features added in Microsoft Windows
Removes the shortcut bar from the Open dialog box.\n\n\nThis setting, and others in this folder, lets you remove new features
Removes the list of most recently used files from the Open dialog box.\n\n\nIf you disable this setting or do not configure it,
Removes the icons representing selected hard drives from My Computer and Windows Explorer. Also, the drive letters representing
Removes the Manage item from the Windows Explorer context menu. This context menu appears when you right-click Windows
Configures the list of items displayed in the Places Bar in the Windows File/Open dialog. If enable this setting you can speci
Limits the percentage of a volume's disk space that can be used to store deleted files.\n\n\nIf you enable this setting, the us
Determines how many shortcuts the system can display in the Documents menu on the Start menu.\n\n\nThe Documents menu co
Removes computers in the user's workgroup and domain from lists of network resources in Windows Explorer and Network Loca
Removes all computers outside of the user's workgroup or local domain from lists of network resources in Windows Explorer a
Prevents users from using My Computer to gain access to the content of selected drives.\n\n\nIf you enable this setting, users
Prevents users from using Windows Explorer or Network Locations to map or disconnect network drives.\n\n\nIf you enable thi
Windows Explorer allows you to create and modify re-writable CDs if you have a CD writer connected to your PC.\n\n\nIf you ena
Removes the DFS tab from Windows Explorer.\n\n\nThis setting removes the DFS tab from Windows Explorer and from other prog
Removes the File menu from My Computer and Windows Explorer.\n\n\nThis setting does not prevent users from using other m
Removes the Hardware tab.\n\n\nThis setting removes the Hardware tab from Mouse, Keyboard, and Sounds and Audio Devices in C
Removes the Search button from the Windows Explorer toolbar.\n\n\nThis setting removes the Search button from the Standar
Removes the Security tab from Windows Explorer.\n\n\nIf you enable this setting, users opening the Properties dialog box for all fi
Removes the Shared Documents folder from My Computer.\n\n\nWhen a Windows client is in a workgroup, a Shared Documents ico
Disables the "Hide keyboard navigation indicators until I use the ALT key" option in Display in Control Panel.\n\n\nWhen this
Prevents users from selecting the option to animate the movement of windows, menus, and lists.\n\n\nIf you enable this setting
Removes shortcut menus from the desktop and Windows Explorer. Shortcut menus appear when you right-click an item.\n\n\nIf
Removes the Folder Options item from all Windows Explorer menus and removes the Folder Options item from Control Panel. As a
Prompts users for alternate logon credentials during network-based installations.\n\n\nThis setting displays the "Install Progra
This settings controls whether the thumbnail views are cached.\n\n\nIf you enable this setting, thumbnail views are not cache
This policy setting allows you to configure the amount of functionality that the shell protocol can have. When using the full funct
This policy setting allows you to configure the amount of functionality that the shell protocol can have. When using the full funct
Turn off Windows+X hotkeys.\n\n\nKeyboards with a Windows key provide users with shortcuts to common shell features. For e
This setting allows an administrator to revert specific Windows Shell behavior to classic Shell behavior.\n\n\nIf you enable t
Hides the file scan progress window.\n\n\nThis window provides status information to sophisticated users, but it might confuse n
Specifies the maximum amount of disk space that can be used for the Windows File Protection file cache.\n\n\nWindows File Pr
Determines when Windows File Protection scans protected files. This setting directs Windows File Protection to enumerate and sc
Specifies an alternate location for the Windows File Protection cache.\n\n\nTo enable this setting, enter the fully qualified lo
Allows unsolicited incoming messages from specified systems that authenticate using the IPSec transport.\n\n\nIf you enable th
Defines the set of Internet Control Message Protocol (ICMP) message types that Windows Firewall allows. Utilities can use IC
Defines the set of Internet Control Message Protocol (ICMP) message types that Windows Firewall allows. Utilities can use IC
Allows inbound file and printer sharing. To do this, Windows Firewall opens UDP ports 137 and 138, and TCP ports 139 and 445.
Allows inbound file and printer sharing. To do this, Windows Firewall opens UDP ports 137 and 138, and TCP ports 139 and 445.
Allows remote administration of this computer using administrative tools such as the Microsoft Management Console (MMC) an
Allows remote administration of this computer using administrative tools such as the Microsoft Management Console (MMC) an
Allows this computer to receive inbound Remote Desktop requests. To do this, Windows Firewall opens TCP port 3389.\n\n\nIf y
Allows this computer to receive inbound Remote Desktop requests. To do this, Windows Firewall opens TCP port 3389.\n\n\nIf y
Allows this computer to receive unsolicited inbound Plug and Play messages sent by network devices, such as routers with bui
Allows this computer to receive unsolicited inbound Plug and Play messages sent by network devices, such as routers with bui
Allows administrators to use the Windows Firewall component in Control Panel to define a local port exceptions list. Windows Fire
Allows administrators to use the Windows Firewall component in Control Panel to define a local port exceptions list. Windows Fire
Allows administrators to use the Windows Firewall component in Control Panel to define a local program exceptions list. Windows
Allows administrators to use the Windows Firewall component in Control Panel to define a local program exceptions list. Windows
Allows Windows Firewall to record information about the unsolicited incoming messages that it receives.\n\n\nIf you enable this
Allows Windows Firewall to record information about the unsolicited incoming messages that it receives.\n\n\nIf you enable this
Allows you to view and change the inbound port exceptions list defined by Group Policy. Windows Firewall uses two port exception
Allows you to view and change the inbound port exceptions list defined by Group Policy. Windows Firewall uses two port exception
Allows you to view and change the program exceptions list defined by Group Policy. Windows Firewall uses two program exception
Allows you to view and change the program exceptions list defined by Group Policy. Windows Firewall uses two program exception
Specifies that Windows Firewall blocks all unsolicited incoming messages. This policy setting overrides all other Windows Firew
Specifies that Windows Firewall blocks all unsolicited incoming messages. This policy setting overrides all other Windows Firew
Prevents Windows Firewall from displaying notifications to the user when a program requests that Windows Firewall add the prog
Prevents Windows Firewall from displaying notifications to the user when a program requests that Windows Firewall add the prog
Prevents this computer from receiving unicast responses to its outgoing multicast or broadcast messages.\n\n\nIf you enable
Prevents this computer from receiving unicast responses to its outgoing multicast or broadcast messages.\n\n\nIf you enable
Turns on Windows Firewall.\n\n\nIf you enable this policy setting, Windows Firewall runs and ignores the "Computer Configurat
Turns on Windows Firewall.\n\n\nIf you enable this policy setting, Windows Firewall runs and ignores the "Computer Configurat
Windows Mail will not check your newsgroup servers for Communities support.
Windows Mail will not check your newsgroup servers for Communities support.
Denies or allows access to the Windows Mail application.\n\n\nIf you enable this setting, access to the Windows Mail applicatio
Denies or allows access to the Windows Mail application.\n\n\nIf you enable this setting, access to the Windows Mail applicatio
Prevents Windows Media Digital Rights Management (DRM) from accessing the Internet (or intranet).\n\n\nWhen enabled, Windows
Enables a screen saver to interrupt playback.\n\n\nThis policy displays a screen saver during playback of digital media accord
Specifies the HTTP proxy settings for Windows Media Player.\n\n\nThis policy specifies the proxy settings for the HTTP protoc
Specifies the MMS proxy settings for Windows Media Player.\n\n\nThis policy specifies the proxy settings for the MMS protocol.
Specifies whether network buffering uses the default or a specified number of seconds.\n\n\nThis policy specifies that the defa
Specifies the RTSP proxy settings for Windows Media Player.\n\n\nThis policy specifies the proxy settings for the RTSP protoc
Prevents the anchor window from being displayed when Windows Media Player is in skin mode.\n\n\nThis policy hides the anchor
Do Not Show First Use Dialog Boxes\n\n\nThis policy prevents the Privacy Options and Installation Options dialog boxes from be
Hides the Network tab.\n\n\nThis policy hides the Network tab in Windows Media Player. The default network settings are used
Hides the Privacy tab.\n\n\nThis policy hides the Privacy tab in Windows Media Player. The default privacy settings are used f
Hides the Security tab.\n\n\nThis policy hides the Security tab in Windows Media Player. The default security settings for the
Prevents users from being prompted to update Windows Media Player.\n\n\nThis policy prevents the Player from being updated an
Prevents media information for CDs and DVDs from being retrieved from the Internet.\n\n\nThis policy prevents the Player from
Prevents Windows Media Player from downloading codecs.\n\n\nThis policy prevents the Player from automatically downloading
This policy prevents a shortcut icon for the Player from being added to the user's desktop.\n\n\nWhen this policy is not config
Prevents media sharing from Windows Media Player.\n\n\nThis policy prevents any user on this computer from sharing digital
Prevents media information for music files from being retrieved from the Internet.\n\n\nThis policy prevents the Player from
This policy prevents a shortcut for the Player from being added to the Quick Launch bar.\n\n\nWhen this policy is not configur
Prevents radio station presets from being retrieved from the Internet.\n\n\nThis policy prevents the Player from automatically re
Prevents video smoothing from occurring.\n\n\nThis policy prevents video smoothing, which can improve video playback on com
Enables Windows Media Player to be shown only in skin mode, using a specified skin.\n\n\nThis policy displays the Player only i
Specifies that Windows Media Player can attempt to use selected protocols when receiving streaming media from a server runni
Allows you to disable Windows Messenger.\n\n\nIf you enable this setting, Windows Messenger will not run.\n\n\nIf you disabl
Allows you to disable Windows Messenger.\n\n\nIf you enable this setting, Windows Messenger will not run.\n\n\nIf you disabl
Windows Messenger is automatically loaded and running when a user logs on to a Windows XP computer. You can use this settin
Windows Messenger is automatically loaded and running when a user logs on to a Windows XP computer. You can use this settin
This policy setting allows you to manage whether the Windows Remote Management (WinRM) service automatically listens on the n
This policy setting allows you to manage whether the Windows Remote Management (WinRM) client uses Basic authentication.\n\n\
This policy setting allows you to manage whether the Windows Remote Management (WinRM) service accepts Basic authentication f
This policy setting allows you to manage whether the Windows Remote Management (WinRM) client sends and receives unencryp
This policy setting allows you to manage whether the Windows Remote Management (WinRM) service sends and receives unencry
This policy setting allows you to manage whether the Windows Remote Management (WinRM) client will not use Digest authenticati
This policy setting allows you to manage whether the Windows Remote Management (WinRM) client will not use Kerberos authentic
This policy setting allows you to manage whether the Windows Remote Management (WinRM) service will not accept Kerberos crede
This policy setting allows you to manage whether the Windows Remote Management (WinRM) client will not use Negotiate authentic
This policy setting allows you to manage whether the Windows Remote Management (WinRM) service will not accept Negotiate auth
This policy setting allows you to manage whether Windows Remote Management (WinRM) client uses the list specified in TrustedHost
Configures access to remote shells.\n\n\nIf you enable this policy setting and set it to False, new remote shell connections will
Configures the maximum number of users able to concurrently perform remote operations on the same system using remote CMD shel
Configures maximum time in milliseconds remote shell will stay open without any user activity until it is automatically deleted.\
Configures maximum total amount of memory that can be allocated by any active remote shell and all its child processes.\n\n\nA
Configures the maximum number of processes any shell operations are allowed to launch.\n\n\nAny number from 0 to 0x7FFFFFFF c
Configures maximum number of concurrent shells any user can remotely open on the same system.\n\n\nAny number from 0 to 0x7FFF
Configures maximum time in milliseconds that the remote command or script will be allowed to execute.\n\n\n Any value fr
Specifies whether Automatic Updates should automatically install certain updates that neither interrupt Windows services nor res
Specifies whether, when logged on, non-administrative users will receive update notifications based on the configuration setting
This policy setting allows you to manage whether Automatic Updates accepts updates signed by entities other than Microsoft when
Specifies the hours that Windows will use to determine how long to wait before checking for available updates. The exact wait ti
Specifies whether this computer will receive security updates and other important downloads through the Windows automatic updat
Specifies the amount of time for Automatic Updates to wait before proceeding with a scheduled restart.\n\n\nIf the status is set
This policy setting allows you to manage whether the 'Install Updates and Shut Down' option is allowed to be the default choic
This policy setting allows you to manage whether the 'Install Updates and Shut Down' option is allowed to be the default choic
This policy setting allows you to manage whether the 'Install Updates and Shut Down' option is displayed in the Shut Down Wind
This policy setting allows you to manage whether the 'Install Updates and Shut Down' option is displayed in the Shut Down Wind
Specifies the target group name or names that should be used to receive updates from an intranet Microsoft update service.\n\n\n
Specifies whether the Windows Update will use the Windows Power Management features to automatically wake up the system from
Specifies that to complete a scheduled installation, Automatic Updates will wait for the computer to be restarted by any user who
This setting allows you to remove access to Windows Update.\n\n\nIf you enable this setting, all Windows Update features ar
Specifies the amount of time for Automatic Updates to wait before prompting again with a scheduled restart.\n\n\nIf the status i
Specifies the amount of time for Automatic Updates to wait, following system startup, before proceeding with a scheduled installa
Specifies an intranet server to host updates from Microsoft Update. You can then use this update service to automatically upda
Specifies whether Automatic Updates will deliver both important as well as recommended updates from the Windows Update upd
This setting controls automatic updates to a user's computer.\n\n\nWhenever a user connects to the Internet, Windows search
The number of minutes the system will wait for the hung logon sessions before proceeding with the system shutdown.\n\n\nIf this
This policy controls the legacy remote shutdown interface (named pipe). The named pipe remote shutdown interface is needed
Specifies an alternate user interface.\n\n\nThe Explorer program (%windir%\explorer.exe) creates the familiar Windows interface,
This policy setting controls whether or not software can simulate the Secure Attention Sequence (SAS).\n\n\nIf you enable this
This policy setting controls whether or not the system displays information about previous logons and logon failures to the u
This policy controls whether the logged on user should be notified when his logon hours are about to expire. By default, a user
This policy controls whether the logged on user should be notified if the logon server could not be contacted during logon and
This policy controls whether the logged on user should be notified if the logon server could not be contacted during logon and
This policy controls which action will be taken when the logon hours expire for the logged on user. The actions include lock th
This policy setting specifies whether Windows will allow console applications and GUI applications without visible top-level wi
Set up the menu name and URL for the custom Internet search provider.\n\n\nIf you enable this setting, the specified menu name
Reboot Required Logoff Required Active Directory Schema or Domain Requirements
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No Yes None
No Yes None
No Yes None
No Yes None
No Yes None
No Yes None
No Yes None
No Yes None
No Yes None
No Yes None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No Yes None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No no None
No No None
No No None
No No None
No No Yes
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No Yes
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No no None
No No None
No No None
No No None
No no None
No no None
No no None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No Yes None
No Yes None
No No None
No No None
No No None
No No Yes
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No Yes
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
Yes No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
No No None
Yes No None
No Yes None
No No None
No No None
No No None
No Yes None
No Yes None
No Yes None
No No None
No No None
Policy Path
Computer Configuration\Windows Settings\Account Policies\Password Policy
Computer Configuration\Windows Settings\Account Policies\Account Lockout Policy
Computer Configuration\Windows Settings\Local Policies\Kerberos Policy
Computer Configuration\Windows Settings\Local Policies\Audit Policy
Computer Configuration\Windows Settings\Local Policies\User Rights Assignment
Computer Configuration\Windows Settings\Local Policies\Security Options
Computer Configuration\Windows Settings\Security Settings\Event Log
Computer Configuration\Windows Settings\Security Settings\Restricted Groups
Computer Configuration\Windows Settings\Security Settings\System Services
Computer Configuration\Windows Settings\Security Settings\Registry
Computer Configuration\Windows Settings\Security Settings\File System
Full Policy Name
Enforce password history
Maximum password age
Minimum password age
Minimum password length
Password must meet complexity requirement
Store passwords using reversible encryption for all users in the domain
Account lockout duration
Account lockout threshold
Reset lockout counter after
Enforce user logon restrictions
Maximum lifetime for service ticket
Maximum lifetime for user ticket
Maximum lifetime for user ticket renewal
Maximum tolerance for computer clock synchronization
Audit account logon events
Audit account management
Audit directory service access
Audit logon events
Audit object access
Audit policy change
Audit privilege use
Audit process tracking
Audit system events
Access this computer from the network
Access Credential Manager as a trusted caller
Act as part of the operating system
Add workstations to a domain
Adjust memory quotas for a process
Allow log on locally
Allow log on through Terminal Services
Backup files and directories
Bypass traverse checking
Change the system time
Change the time zone
Create a pagefile
Create a token object
Create global objects
Create permanent shared objects
Create Symbolic Links
Debug programs
Deny access to this computer from the network
Deny log on as a batch job
Deny log on as a service
Deny log on locally
Deny log on through Terminal Services
Enable computer and user accounts to be trusted for delegation
Force shutdown from a remote system
Generate security audits
Impersonate a client after authentication
Increase a process working set
Increase scheduling authority
Load and unload device drivers
Lock pages in memory
Log on as a batch job
Log on as a service
Log on locally
Manage auditing and security log
Modify an object label
Modify firmware environment values
Perform volume maintenance tasks
Profile single process
Profile system performance
Remove computer from docking station
Replace a process level token
Restore files and directories
Shut down the system
Synchronize directory service data
Take ownership of files or other objects
Accounts: Administrator account status
Accounts: Guest account status
Accounts: Limit local account use of blank passwords to console logon only
Accounts: Rename administrator account
Accounts: Rename guest account
Audit: Audit the accesss of global system objects
Audit: Audit the use of Backup and Restore privilege
Audit: Audit the use of Backup and Restore privilege
Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings
Audit: Shut down system immediately if unable to log security audits
Audit: Shut down system immediately if unable to log security audits
DCOM: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) syntax
DCOM: Machine Launch Restrictions in Security Descriptor Definition Language (SDDL) syntax
Devices: Allow undock without having to log on
Devices: Allowed to format and eject removable media
Devices: Prevent users from installing printer drivers
Devices: Restrict CD-ROM access to locally logged-on user only
Devices: Restrict floppy access to locally logged-on user only
Devices: Unsigned driver installation behavior
Domain controller: Allow server operators to schedule tasks
Domain controller: LDAP server signing requirements
Domain controller: Refuse machine account password changes
Domain member: Digitally encrypt or sign secure channel data (always)
Domain member: Digitally encrypt secure channel data (when possible)
Domain member: Digitally sign secure channel data (when possible)
Domain member: Disable machine account password changes
Domain member: Maximum machine account password age
Domain member: Require strong (Windows 2000 or later) session key
Interactive logon: Do not display last user name
Interactive logon: Do not require CTRL+ALT+DELETE
Interactive logon: Message text for users attempting to logon
Interactive logon: Message title for users attempting to logon
Interactive logon: Number of previous logons to cache (in case domain controller is not available)
Interactive logon: Prompt user to change password before expiration
Interactive logon: Require Domain Controller authentication to unlock workstation
Interactive logon: Require smart card
Interactive logon: Smart card removal behavior
Microsoft network client: Digitally sign communications (always)
Microsoft network client: Digitally sign communications (if server agrees)
Microsoft network client: Send unencrypted password to third-party SMB servers
Microsoft network server: Amount of idle time required before suspending session
Microsoft network server: Digitally sign communications (always)
Microsoft network server: Digitally sign communications (if client agrees)
Microsoft network server: Disconnect clients when logon hours expire
Network access: Allow anonymous SID/Name translation
Network access: Do not allow anonymous enumeration of SAM accounts
Network access: Do not allow anonymous enumeration of SAM accounts and shares
Network access: Do not allow storage of credentials or .NET Passports for network authentication
Network access: Let Everyone permissions apply to anonymous users
Network access: Named Pipes that can be accessed anonymously
Network access: Remotely accessible registry paths
Network access: Remotely accessible registry paths and subpaths
Network access: Restrict anonymous access to Named Pipes and Shares
Network access: Shares that can be accessed anonymously
Network access: Sharing and security model for local accounts
Network security: Do not store LAN Manager hash value on next password change
Network security: Force logoff when logon hours expire
Network security: LAN Manager authentication level
Network security: LDAP client signing requirements
Network security: Minimum session security for NTLM SSP based (including secure RPC) clients
Network security: Minimum session security for NTLM SSP based (including secure RPC) servers
Recovery console: Allow automatic administrative logon
Recovery console: Allow floppy copy and access to all drives and all folders
Shutdown: Allow system to be shut down without having to log on
Shutdown: Clear virtual memory pagefile
System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing
System Cryptography: Force strong key protection for user keys stored on the computer
System objects: Default owner for objects created by members of the Administrators group
System objects: Require case insensitivity for non-Windows subsystems
System objects: Strengthen default permissions of internal system objects (e.g., Symbolic Links)
System settings: Optional subsystems
System settings: Use Certificate Rules on Windows Executables for Software Restriction Policies
Admin Approval Mode for the Built-in Administrator account
Behavior of the elevation prompt for administrators in Admin Approval Mode
Behavior of the elevation prompt for standard users
Detect application installations and prompt for elevation
Only elevate executables that are signed and validated
Only elevate UIAccess applications that are installed in secure locations
Run all administrators in Admin Approval Mode
Switch to the secure desktop when prompting for elevation
Virtualize file and registry write failures to per-user locations
Allow UIAccess applications to prompt for elevation without using the secure desktop.
Maximum application log size
Maximum security log size
Maximum system log size
Prevent local guests group from accessing application log
Prevent local guests group from accessing security log
Prevent local guests group from accessing system log
Retain application log
Retain security log
Retain system log
Retention method for application log
Retention method for security log
Retention method for system log
Restricted Groups
System Services
Registry
File System
Supported On
Windows XP SP2, Windows Server 2003
Windows Vista, Windows Server 2008
Windows Server 2003
Windows XP SP2
Windows Server 2003
Windows XP SP2
Windows Server 2003
Windows Server 2003
Windows Server 2003
Windows Server 2003
Windows Server 2003
Windows Server 2003
Windows Vista SP1, Windows Server 2008
Explain Text
Enforce password history
Maximum password age
This security setting determines the number of unique new passwords that have to be associated with a user account before an old password can be reused. T
Minimum password age
This security setting determines the period of time (in days) that a password can be used before the system requires the user to change it. You can set passwo
Minimum
This policypassword length
enables administrators to enhance security by ensuring that old passwords are not reused continually.
This security setting determines the period of time (in days) that a password must be used before the user can change it. You can set a value between 1 and 9
Password must
Note: It is a security best meet complexity
practicerequirementsto have passwords expire every 30 to 90 days, depending on your environment. This way, an attacker has a limited amount o
This security setting determines the least number of characters that a password for a user account may contain. You can set a value of between 1 and 14 char
Default:
Storeminimum
The passwords using reversible
password age mustencryption be less than the Maximum password age, unless the maximum password age is set to 0, indicating that passwords will neve
This security
Default: 42. setting determines whether passwords must meet complexity requirements.
Account
Default:
24 onsecuritylockout
domainsetting duration
controllers.
This
Configure the minimum determines
password whether
age to the operating
be more than system
0 if you stores want Enforce passwords using reversible
password history to be encryption.
effective. Without a minimum password age, users can cy
Account
0
If this lockout
on stand-alone
policy threshold
is enabled,servers. passwords must meet the following minimum requirements:
This security
7 on domain setting
controllers. determines the number of minutes a locked-out account remains locked out before automatically becoming unlocked. The available range
Reset
This account lockout counter after
policy provides support for applications that use protocols that require knowledge of the user's password for authentication purposes. Storing passwords u
Default:
0
Notoncontain
This
Note: stand-alone
security
By default,
thesetting servers.
member
user's determines
account computers the number
name follow
or parts ofoffailed
the logonfull
configuration
the user's attempts
ofnametheir that
domain
that causes
exceed a user
controllers.
two account tocharacters
consecutive be locked out. A locked-out account cannot be used until it i
Enforce
If user logon restrictions
Toan
Be
This
account
maintain
atpolicy
least six isthe
lockout
characters
thresholdofisthe
effectiveness in length
defined,
password the account do
number ofhistory,
lockout
not duration
allow must betogreater
passwords be changedthan or equal to the
immediately reset
after they time.were just changed by also enabling the Mi
1 on security
This
Maximum
Note:
Failed domain
By default,
password
setting
required
controllers.
lifetime for
member
attempts
determines
when
service using
ticket
computers
against
Challenge-Handshake
follow thefour
workstations
minutes that
configuration
or member
must
Authentication elapse
of theirthat
servers domain
after a failed
Protocol
have controllers.
(CHAP) logon attempt
authentication before the failed
through remote logon
been locked using either CTRL+ALT+DELETE or password-protected screen sav
attempt
access counter
or Internet is reset to 0 bad
Authentication Serv lo
Contain
This characters
security setting from three
determines of the
whether following
the Kerberos categories:
V5 Key Distribution Center (KDC) validates every request for a session ticket against the user rights pol
0 on
Maximumstand-alone
Default: None,
lifetime servers.
because for this
user ticket policy setting only has meaning when an Account lockout threshold is specified.
English
If uppercase
an account
Default: Disabled. lockout characters
threshold (Ais through
defined,Z) this reset time must be less than or equal to the Account lockout duration.
This security
Default:
English 0. lifetime
lowercase settingcharacters
determines the
(a renewal
through maximumz) amount of time (in minutes) that a granted session ticket can be used to access a particular service. The setting
Maximum
Default:
Note: By Enabled.
default, for user computers
member ticket follow theamount
configuration of(intheir domain controllers.
This security
Base 10 None,
Default: digits setting
(0 through
because determines
this9) policyclockthe maximum
setting only has meaning of timewhen hours)
an Account that a user's ticket-granting
lockout threshold is specified. ticket (TGT) may be used. When a user's TGT expires, a n
Maximum
If a client tolerance
presents an forexpired
computer session synchronization
ticket when it requests a connection to a server, the server returns an error message. The client must request a new ses
Non-alphabetic
This security setting charactersdetermines (for example,
the period !, $,
of #,
time%)(in days) during which a user's ticket-granting ticket (TGT) may be renewed.
Audit
Default: account
Complexity 10 hours. logon events
requirements are enforced when passwords are changed or created.
This security
Default: 600 minutessetting determines
(10 hours). the maximum time difference (in minutes) that Kerberos V5 tolerates between the time on the client clock and the time on the
Audit
Default: account
7 days. management
This security setting determines whether to audit each instance of a user logging on to or logging off from another computer in which this computer is used to v
Audit directory
To prevent "replay service access
attacks," Kerberos V5 uses time stamps as part of its protocol definition. For time stamps to work properly, the clocks of the client and the do
This security setting determines whether to audit each event of account management on a computer. Examples of account management events include:
Audit
If you logon
define events
this policy setting, you can specify whether to audit successes, audit failures, or not audit the event type at all. Success audits generate an audit e
Default:
This security setting determines whether to audit the event of a user accessing an Active Directory object that has its own system access control list (SACL) sp
Important
Audit
A userobject
account access or group is created, changed, or deleted.
This
Touser
setsecurity
this setting determines whether to audit dialog
each instance of apolicy
user logging
setting,on to orthe logging offthese
from policy
a computer.
A
Audit
Enabled
By
This settingonvalue
account
policy
default, change
domain
this istorenamed,
value
issetting
not
No auditing,
controllers.
is set to
persistent. Ifno
in
disabled,
you
the or
auditing
Properties
enabled.
configure in the thisDefault
setting
box for this
Domain
and then Controller
restart theGroup
select
Policy this
computer, object
Define
(GPO),
setting and to
reverts
settings check box and clear the Success and
it remains
the default undefined
value. for workstations and servers w
This
A security
password
Disabled is set
on stand-alone or determines
changed.
servers. whether to audit the event of a user accessing an objectùfor example, a file, folder, registry key, printer, and so forthùthat has i
Audit
Account
If privilege
success logonauditing use
events for are
account generated logon on domain
events is controllers
enabled on afor domain
domain account
controller, activity
an entry and
is on
logged local forcomputers
each user for
who local
is account activity.
validated against Ifthat
both account
domain logon a
controller,
If you
yousecurity
This
If define this
define this
setting policy
policy setting, you
determines
setting, you
whether can specify
can specify whether
to auditwhether to audit
every incident
to auditof successes,
a change audit
successes, audit
to user failures, or not
rights assignment
failures, or not audit
audit policies,
the event
the eventaudit type policies,
type at all.
at all. Success
Success
or trust audits
policies.
audits generate
generate an
an audit e
audit e
Default:
Audit
If you 5 minutes.
process
define tracking
this policy setting, you can specify whether to audit successes, audit failures, or not audit the event type at all. Success audits generate an audit e
Note:
This
If you By default,
security
define setting
this member
policy determines computers
setting, whether
you canfollow the whether
to audit
specify configuration
each instanceto auditof their
of domain
a user
successes, controllers.
exercising
audit a useror
failures, right.
not audit the event type at all. Success audits generate an audit e
Default:
Audit
Default:
If youthat Success.
system
define events
Note
This securityyouthis canpolicy
setting a setting,
setdetermines
SACL on you ancan
whether Activespecify
to Directory
whether
audit dialog
detailed
to audit
object by using
tracking
successes,
the Security audit tab
failures,
in that orobject's
not audit the eventdialog
Properties type at box.all.This
Success
is theaudits generate
sameduplication,
as Audit objectan auditacc e
To set
Access this
this value
computer to No auditing,
from the in
network the Properties box for thisinformation
policy setting, for events
select the such as program
Define these policyactivation,
settings process
checkexit,
boxhandle
and clear the Success and and
indir
If
To you
set define
this valuethis to policy
No setting, you
auditing, in thecanProperties
specify whetherdialog to audit
box for successes,
this policy audit failures,
setting, select the orDefine
not audit thesethispolicy
type of event at
settings all. Success
check box and audits
clear generate
the Success an and
aud
This
Success
To setsecurity
thisonvalue setting
domain to No determines
controllers.
auditing, in whether to audit dialog
the Properties when abox user forrestarts
this policy or shuts
setting, downselect the thecomputer
Define or when
these an event
policy occurs thatbox
affects eitherthe theSuccess
system secu
Default:
This
If setting is used by aCredential aManager during Backup/Restore. No accounts should have thisaudit
privilege, as itsettings
is only check
at assig
and clear and
Noyou
Note
This
To set
define
that
auditing
user
this
you
righton
value
this
can policy
member
to
set
determinesNo
setting,
SACL
servers.
auditing,which on you
in users
the
cansystem
file specify
and groups
Properties
whether
object are
dialog
usingto audit
allowed
box for to
successes,
the Security
this connect
policy
tabtoin audit
the
setting,
failures,
thatcomputer
object's
select the
or
over
not
Properties
Define the
the event
dialog
network.
these policy
box. type
Terminal
settings
all. Success audits generate an audit e
Services
check are
box not
and affected
clear the by this user
Success and rig
Default:
Act as
If you defineSuccess.
part of the operating
this policy system
setting, you can specify whether to audit successes, audit failures, or not audit the event type at all. Success audits generate an audit e
Default:
Success onvaluedomain controllers.
To set
Default:
Add this
Noworkstations
workstations auditing. to No
to domain auditing, in the Properties dialog box for this policy setting, select the Define these policy settings check box and clear the Success and
Default
Undefined
Default: on
No for aallows
auditing. member and
computer.servers:
This
To set
Successuser
thisonright
value
domain to No aauditing,
process
controllers. to the
in impersonate
Propertiesany dialog userboxwithoutfor this authentication.
policy setting,The select process can therefore
the Define these policy gain settings
access to the same
check box and local
clearresources
the Success as thatandus
Administrators
Adjust memory quotas for a process
Default:
This No auditing
security setting determines which groups or users can add workstations to a domain.
No auditing
Backup
Audits are noton
Operators member servers.
generated forprivilege
use of the following user rights, evenaccount, if success audits or failure auditsthis areprivilege,
specifiedrather for Audit
Allow
Processes
Default: log on that locally
require this should use the LocalSystem which already includes thanprivilege
using a use. Enabling
separate userauditing
accountof th
with
Usersprivilege determines who can change the maximum memory that can be consumed by a process.
This
Allow
This log
security
Everyone on through
setting Terminal Services
is valid only on domain controllers. By default, any authenticated user has this right and can create up to 10 computer accounts in the dom
Bypass
This
Cautionlogontraverse
right checking
determines which users can interactively log on to this computer. Logons initiated by pressing CTRL+ALT+DEL sequence on the attached keyb
Success
Back
This user on
upprograms
files
rightdomain
and controllers.
directories
is defined in the Default Domain Controller Group Policy object (GPO) and in the local security policy of workstations and servers.
Debug
This security setting determines which users or groups have permission to loginon as aDirectoryûbased
Terminal Services client.
No auditing
Adding
Default aon
Bypass a
on on
computer
domain
traverse member account servers.
controllers:
checking to the domain allows the computer to participate Active networking. For example, adding a workstation to a dom
Create
Default
Assigning token
this object
workstations
user right and can servers:
be ausers Administrators
security risk. Onlyfile assign this user right to trusted users.
This
Replaceuser
Administrators
Note: This right
privilege
process determines
levelis useful
token which
for system can
tuning,bypassbut it canandbe directory,
misused, registry,
for example, and otherin a persistent object attack.
denial-of-service permissions for the purposes of backing up the system
Backup Operators
Change
Default: the system time
Default:
userAuthenticated
Authenticated
This
Generate right
security Users
determines
audits Users whichon domainusers can controllers.
traverse directory trees even though the user may not have permissions on the traversed directory. This privilege d
Users.
Default:
Change None.
the Time Zone
Specifically,
Enterprise
Default:
Back up this
Domain
Administrators
files and user right is similar to granting the following permissions to the user or group in question on all files and folders on the system:
Controllers
directories
This
On
Note: user
workstation
Users right who determines
and have servers: which
theinCreate users
Administrators,
Computer and groups
Remote
Objects can change
Desktop
permission the time
Users. and date on thecomputers internal clock of the computer. Userscomputer
that are assigned this user right
Create
Everyone
Local
This
Restore
Default aonpagefile
Service
user right
filesdomainandis defined
directories
controllers: theAccount
Default Domain
Operators Controller Group on the Active
Policy object Directory
(GPO) and in the local container
securitycan policy also ofcreate
workstations andaccounts
servers. in the domain
On
This domain
user
Traverse
Pre-Windows controllers:
right determines
Folder/Execute Administrators.
Filewhich users and groups can change the time zone used by the computer for displaying the local time, which is the computer's syste
Network
Create
Administrators
This user right2000
a Service.
token isobject Compatible
defined in the Default Access Domain Controller Group Policy object (GPO) and in the local security policy of workstations and servers.
List Folder/Read
This
Default
Cautionuser on right
workstations Data andwhich
determines servers: users and groups can call an internal application programming interface (API) to create a page file. This user right is used inte
Backup
Create
Important
This user Operators
global
rightobjects
is defined in the Default Domain Controller Group Policy object (GPO) and in the local security policy of the workstations and servers.
Read Attributes
Administrators
This security setting determines which accounts can be used by processes to create a token that can then be used to get access to any local resources when
Print
Default
Create Operators
on workstations
permanent shared and servers:
Read
For
Backup Extended
information
Incorrectly Operators
editing Attributes
aboutthehave how objects
registry to specify a paging file sizeyour for asystem.
given drive, see To change the to size of the virtual memory paging upfile.
Server Operators.
Administrators
This user
setting
Default:
Read rightdoes is required
Administrators,
Permissions not Usersfor
any amay userseverely
effect account
on Windows damage
to create2000globalcomputers objects Before
during
that making
have Terminal changes
not been Services
updated the toregistry,
sessions.
Service you
Users
Pack should
can2. still backcreate any valued data on
session-specific the compute
objects without
Create
Usersuser
This
Local Symbolic
right is Links
Service used internally by the operating system. Unless it is necessary, do not assign this user right to a user, group, or process other than Local Syst
This user
Default:
Everyone right determines
Administrators. which accounts can be used by processes to create a directory object using the object manager.
Debug
Caution programs
Caution
This
Local
Cautionprivilege
Service determines if the user can create a symbolic link from the computer he is logged on to.
Default
Deny
This on
access
userServicedomain
right toisthis controllers:
used computer
internally from by the the network
operating system and is useful to kernel-mode components that extend the object namespace. Because components th
Network
This user right
Administrators
Assigning this determines
user right can which
be a users
security canrisk.
attach
Assign a debugger
this user toright
anyonly process or to the kernel. Developers who are debugging their own applications to not nee
Deny
Assigning
Default:
Assigninglog onthis as
Administrator
this a
user
user batchright
right job
can
can be
be a
a security
security risk.
risk. Since notthere
Doprevented assign is no thisway usertorightbetosuretrusted
that users.
a user is backing up data, stealing data, or to
copying datathe to be distributed,
Server
Default: Operators
This securityNone. setting determines which users are from accessing atocomputer
any user, group,
over theornetwork.
process that policy
This you dosetting not want take over
supersedes the Access system.
this compu
Deny
Default
Default:
Caution logon
Localsecurity
Default: on
None as
domain a service
controllers:
Servicesetting determines which accounts are prevented from being able to log on as a batch job. This policy setting supersedes the Log on as a batch j
This
Default
WARNING: on
Administrators workstations
This privilege and shouldservers: only Administrators
be given to trusted users. Symbolic links can expose security vulnerabilities in applications that arenÆt designed to hand
Deny
Default: logNone.
on locally
Backup
This
Authenticated
Assigning Operators.
security this setting
Users
user right determines
can be awhich
security service
risk. accounts
Only assign arethis prevented
user right fromto registering
trusted users. a process as a service. This policy setting supersedes the Log on as a
Administrators
Deny
Default: log on
None. through Terminal Services
Note
Everyone
This security setting determines which users are prevented from logging on at the computer. This policy setting supersedes the Allow log on locally policy settin
Local
Enable
Default Service
computer
on domain and user accounts
controllers:Administrators to be trusted for delegation
This
Note:
Local setting
Default: This
Service can be
security
Administrators used
setting indoesconjunction
not apply a symlink
to filesystem
the System, Local setting
Service, that or can be manipulated
Network Service accounts.with the command line utility to control the kinds of symlinks that a
Network
This Service
security
Backupshutdown
Operators setting determines which users and groups are prohibited from logging on as a Terminal Services client.
Force
Network
Important
Service Service from a remote system
This
Server security
Default:
Pre-WindowsOperators
None. setting
2000audits determinesAccess
Compatible which users can set the Trusted for Delegation setting on a user or computer object.
Generate
Default: None. security
This
If you security
apply setting
this security determines
policy to which users aregroup,
the Everyone allowed noto one shut willdown
be able a computer
to log onfrom locally.a remote location on the network. Misuse of this user right can result in
Impersonate
The user or object a client that after authentication
is granted this privilege must have write access to the account control flags on the user or computer object. A server process running on
This security
Important setting determines which accounts can be used by a process to add entries to the security log. The security log is used to trace unauthorized sys
Increase
This aright
userNone.
Default: process is defined working in the set Default Domain Controller Group Policy object (GPO) and in the local security policy of workstations and servers.
Assigning this
This userscheduling privilege
right is defined to in the Default Domain Controller Group Policy object (GPO) and in the alocal
a user allows programs running on behalf of that user to impersonate client. Requiring
security policythis user right for and
of workstations this kind of impersonation
servers.
Increase
Default:
This Local Servicenotpriority
This setting
privilege
Default:
doesdetermines havewhich any effect on Windows
user accounts can2000 increasecomputers or decrease that have the sizenot been updated to
of a process’s Serviceset.
working Pack 2.
Network
Load
Caution andService.
unload device drivers
Caution
Increase
This security a process settingworking determines set which accounts can use a process with Write Property access to another process to increase the execution priority assigned to
Lock pages
On workstations in memory and servers: Administrators.
This user
Assigning right
this determines
userjob right can which
ofbe users
ausersecurity canfor dynamically
risk. Onlyincrease
assignload thisand unload
user right device thedrivers
to trusted orvulnerable
other codetoinsophisticated
to kernel mode. This using
user right does not programs
apply to Plug
Misuse
This
Log on
On domain
Default: of
privilege
as this user
determines
acontrollers:
batch
Administrators. right, orwhich
Administrators,the Trustedaccounts
Server Delegation
can
Operators. setting, could
or decrease makethe size of users.
network
a process’s working set. attacks Trojan horse that
This security setting determines which accounts can use a process to keep data in physical memory, which prevents the system from paging the data to virtual
Log
Cautionon
Default: as a service
Default:
This Administrators
Userssetting allows
security on domain a user to controllers.
be logged on by means of a batch-queue facility and is provided only for compatibility with older versions of Windows.
Log on locally
Default: None.
This security
Assigning
Administrators this setting
user determines
right can be awhich
security service
risk. accounts
Do not assign can register
this user a process
right to any as auser,service.group, or process that you do not want to take over the system.
Manage
The working
For example, auditing set
when ofand security
aaprocess
user islog
submits the aset jobofbymemory
meanspages of the currently
task scheduler, visible the to the taskprocess
scheduler in physical
logs that RAM usermemory.
on as a These batch user pages are resident
rather than as an and available use
interactive for
Determines
Local Service which users can log on to the computer.
Modify
Default:
Default an
on object
Network
workstations label
Service. and servers: Administrators.
Network
This
Warning: Service
security setting determines
Increasing the working which
set size users
for acan specify
process object access
decreases the amount auditing ofoptions
physicalfor individual
memory resources,
available to thesuch restas of files, Active Directory objects, and reg
the system.
Modify
Important
Service firmware environment values
Default:
This Administrators
privilege determines which user accounts can modify the integrity label of objects, such as files, registry keys, or processes owned by other users. Proces
Default
This on domain
security settingcontrollers:
does not allow a user to enable file and object access auditing in general. For such auditing to be enabled, the Audit object access setting
Backup
This Operators.
security setting determines who can modify firmware environment values. Firmware environment variables are settings stored insee
theComponent
nonvolatile RAM ofMo n
Administrators
Modifying
Note: ByNone this setting
default, services may that affect are compatibility
started by the withService
clients,Control
services, and applications.
Manager have the built-in For compatibility
Service group information
added toabout this setting,
their access tokens. Allow log onObject
locally (h
Default:
PrintcanOperators
You view audited events in the security log of the Event Viewer. A user with this privilege can also view and clear the security log.
On x86-based
Default:
In addition, a user computers,
can alsothe only firmware
impersonate environment
an access token value
if any that of the can be modified
following conditionsby assigning
exist. this user right is the Last Known Good Configuration setting,
On Itanium-based computers, boot information is stored in nonvolatile RAM. Users must be assigned this user right to run bootcfg.exe and to change the Defa
Default: Administrators.
On Onall
•The computers,
workstations
access token and this
that userservers:
is being rightAdministrators,
is required toisinstall
impersonated Backup
for this or Operators,
upgrade Windows.
user. Power Users, Users, and Guest.
•The
On user,
domain in this controllers:
logon session, Account Operators,
created Administrators,
the access token by Backup logging on Operators,
to the networkand Print withOperators.
explicit credentials.
Perform volume maintenance tasks
Profile single process
Description
Profile system performance
This security setting determines which users can use performance monitoring tools to monitor the performance of nonsystem processes.
Remove
This security computer settingfrom docking which
determines stationusers and groups can run maintenance tasks on a volume, such as remote defragmentation.
This security setting determines which users can use performance monitoring tools to monitor the performance of system processes.
Replace a process
Default: Administrators. level token
This
Use securitywhen
caution setting determines
assigning this whether
user right. a userUsers can with undockthis user a portable
right can computer
explore from disksits and docking
extendstation files inwithout to memory logging thaton. contains other data. When the exten
Restore files and directories
Default: Administrators.
This security setting determines which user accounts can call the CreateProcessAsUser() application programming interface (API) so that one service can star
Shut
If thisdown
Default: policy the system the user must log on before removing the portable computer from its docking station. If this policy is disabled, the user may remove the
is enabled,
Administrators
This security setting determines which users can bypass file, directory, registry, and other persistent objects permissions when restoring backed up files and di
Synchronize
Default: Network directoryService, service Local data Service.
This
Default: security setting determines which users who are logged on locally to the computer can shut down the operating system using the Shut Down command. M
Administrators.
Take ownership
Specifically, this of user files or other
right is similar objects to granting the following permissions to the user or group in question on all files and folders on the system:
This security setting determines which users and groups have the authority to synchronize all directory service data. This is also known as Active Directory syn
Accounts:
Default on Administrator
Workstations:account Administrators, status Backup Operators, Users.
This
Traverse security setting determines which users can take ownership of any securable object in the system, including Active Directory objects, files and folders, prin
Folder/Execute
Accounts:
Defaults: None. Guest account File status
Writesecurity
This
Default setting determines whether theOperators.
local Administrator account is enabled or disabled.
Accounts: Limit localAdministrators,
Caution
on Servers: account use ofBackup blank passwords to console logon only
This security setting determines if the Guest account is enabled or disabled.
Accounts:
Caution
Notes
Default Rename
on Domain administrator
controllers: account
Administrators, Backup Operators, Server Operators, Printcan Operators.
This
Assigningsecurity this setting
user right determines be awhether securitylocal risk.accounts that are not password protected be usedonly to logonthis from locations
right toother than the physical computer
Accounts:
Default: Rename
Disabled. guestcan account Since owners of objects have full control of them, assign user trusted users.
This
Assigningsecuritytothis setting determines whether a different account name is associated with the security identifier (SID) for the account Administrator. ofRenaming the w
If you try
Audit:
Default:
Default: Audit
Enabled.theuser
reenable
Administrators. access right
theofcan be asystem
Administrator
global security account risk. Since
objects after itusers has been with this disabled,user right and ifcan theoverwrite registry settings,
current Administrator password hide data, doesand not gainmeetownership
the password system
requirementsobjects
Disabling
This
Note: security
If the the Administrator
setting
Guest accountdetermines account
is whether
disabled can and become
a the
different a maintenance
security accountoption name
Networkissue under certain
is associated
Access: withcircumstances.
Sharing theand security
Security For
identifier
Model example,
(SID)
for forinthe
local a domain
accountsaccount environment,
is "Guest."
set to Guest ifOnly,
Renaming the secure chann
the well-kn
network log
Audit:
Default:
Under Audit the
Administrator.
Safe Mode useboot, of Backup and Restore
the Administrator privilege
account is always
This security setting determines whether to audit the accessenabled, of global regardlesssystem objects. of this setting.
Audit:
Default: Audit
Guest. the use of Backup and Restore privilege
Warning:
This security
Workstations setting
and determines
servers: whether toBackup
Administrators, audit the use of all user privileges, including Backup and Restore, when the Audit privilege use policy is in effect. E
Operators.
Default:
Audit:
If this policy Enabled.
Force audit
is policyitsubcategory
enabled, causes system settings objects, (Windows such asVistamutexes or later) (mutualto override
exclusive), auditevents, policy category semaphores settings. (locking mechanisms used inside resource manag
This
Domain security
controllers:settingAdministrators,
determines whether Backup to audit
Operators, the use of all Operators.
Server user privileges, including Backup and Restore, when the Audit privilege use policy is in effect. E
Audit:
Computers
If Shut down
you disable that thisaresystemnot inthen
policy, immediately
physically
use of secure the if unable
Backup toorlog
locations security
shouldprivilege
Restore audits enforce
always is not audited strong even password whenpolicies Audit privilegefor all local use useris enabled.accounts. Otherwise, anyone with physi
Windows
Note:
If When Vista and
configuring later this versionssecurity of Windows
setting, allow
changes audit no policy
will not take to bebe able
effect managed
untillog you in athrough
moreWindows.
restart precise way using audit policy subcategories. Setting audit policy at
If you
you apply
Audit: Shut down
disable thisthis security
policy, policy
system immediately
then to the
use of the Everyone
if unable
Backupto group,
orlog security
Restore one will
audits
privilege is nottoaudited on even when terminal services.
Audit privilege use is enabled.
This
Note:security
When setting determines
configuring this security whether setting, the changes
system shuts will not down takeif effect
it is unableuntil you to log security
restart Windows. events.
DCOM:
If the category
Default: Machine
Disabled. Access
level auditRestrictions
policy set here in Security
is not consistentDescriptor withDefinition
the events Languagethat are(SDDL) currently syntaxbeing generated, the cause might be that this registry key is set.
Notes
This
Default: security
Disabled. setting determines whether the system shuts down if it is unable to log security events.
DCOM:
If Machine
this security
Default: Disabled. Launch
setting Restrictions
is enabled, it causes in Security the system Descriptor to stop Definition
if a security Languageaudit cannot (SDDL) besyntax
logged for any reason. Typically, an event fails to be logged when the
This policy
Default: setting determines which users or groups can access DCOM application remotely or locally. This setting is used to control the attack surface of the
Disabled
Devices:
This
If thissetting Allow
security does undock
setting iswithout
not affect enabled, logons having
it that
causes touse logthe onsystem
domain accounts.
to stop if a security audit cannot be logged for any reason. Typically, an event fails to be logged when the
This
If
It the policy
security
is possible setting isdetermines
logapplications
for full andand an
thatwhich
existing
use usersentry
remote orcannot
groupsbe
interactive can launchtoorbypass
overwritten,
logons activate
and this this DCOM
security
setting. applications
option is enabled, remotely theorfollowing
locally. This Stopsetting is used to control the attack su
error appears:
Devices:
You can useAllowed this to
policy format setting toeject
specify removable access media
permissions to all the computers to particular users for DCOM applications in the enterprise. When you specif
This security
If the security setting
log users determines
is full and an whether
existingprinter a portable computer can be undocked without
entry cannot be overwritten, and this security option is enabled, the following Stop error appears: having to log on. If this policy is enabled, logon is not required and an e
Devices:
You
STOP: Prevent
canC0000244
use this setting
{Audit from
to grant
Failed} installing
access to all drivers the computers to users of DCOM applications. When you define this setting, and specify the users or groups that
This security
The registry setting
settings determines
that are who
created is allowed to format and eject removable NTFS media. This capability can be given to:
Devices:
An attempt
Default:
STOP: Restrict
to generate
Enabled.
C0000244 CD-ROM access
a security to as
audit locallya result of enabling the DCOM: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) synta
failed.logged-on user only
For
The aregistry
computer to {Audit
settings print that toFailed}
a network
are created printer,
as aarchivethe driver
result ofthe this for that network
policy printer must be installed this on the local computer. This security setting determines who is ao
To recover,
Devices:
An attempt
Administrators
The possible
an
Restrict
to administrator
floppy
generate
values determines a access must
security
for this policy to log
locallyon,
settingalogged-on
audit failed.
are:
log
user only take precedence
(optional), clear the log, overand the resetprevious registry
option as settings
desired. in this
Until area.
this Remote
security Procedure
setting is reset, Call noServices
users,
This
Caution security
To recover, setting
an administrator must whether
logbehavior CD-ROM is accessible to both local and remote users
on, archive the log (optional), clear the log, and reset this option as desired. Until this security setting is reset, no users, o simultaneously.
Administrators
Devices: onUnsigned and Interactive Users
Default
The
Note:possible
This When
security valuesdriver
servers:
configuring
setting
Enabled.
for this
determines
installation
this Group
security Policy
whether setting, setting
changes
removable are: will not take are effect until youto restart Windows.
ò Blank.
Default
Domain
If this This
on
controller:
policy is represents
workstations:
enabled, Allow itthe
Disabled
server
allowslocal security
operators
only the policy
to schedule
interactively wayfloppy oftasks
logged-on
media
deleting the policy
user
accessible
to accessenforcement both key.
removable
local
CD-ROM
andvalue
This remote
media.
usersthe
deletes simultaneously.
If this policypolicyisand then sets
enabled and itnoasone Notisdefinedlogged state.
onbutin
Disabling
Default:
This security thispolicy
Disabled.
This policyismay
setting not tempt
determines defined users
and to
what onlytry
happens and physically
Administrators
when an remove
have
attempt this
is the laptop
ability.
made to from
install itsdevice
a docking driverstation(by using
means methods
of Setup other
API)and than
thatthen the external
has not been hardware
tested byeject
the Win
ò Blank.
Domain
Default:
If this This
controller:
Disabled.
policy is represents
enabled, LDAP itthe
server
allowslocal onlysecurity
signing the policy
requirements
interactively way of deleting
logged-on the
user policy
to accessenforcementremovable key. This
floppy value
media. deletes
If this the
policy policy
is enabled and setsno it
oneto Not
is defined
logged on state.
intera
ò SDDL.
This
Default: Thispolicy
security
This is the is
setting Security
determines
not defined Descriptor
if and
Server Definition
CD-ROM Operators Language
access are is notrepresentation
allowed to submit
restricted to jobs
theof locally
the
by groups
means logged-on and
of theprivileges
AT
user. schedule you specifyfacility. when you enable this policy.
Domain
The controller:
options Refuse machine account password changes
Notes
ò SDDL.
This
Default: Thisare:
security
This is the is
setting
policy Security
determines
not definedDescriptor
whether
and Definition
floppy the disk
LDAP Language
driveserver access representation
requires is not signing
restricted toofbe the
to groups
negotiated
the locally and with privileges
logged-on LDAP user. you specify
clients, as follows: when you enable this policy.
Domain
ò Not This
Note: member:
Defined. security This Digitally
is the default
setting encrypt
only affects or sign
value. the secure
AT schedule channel data it(always)
facility; does not affect the Task Scheduler facility.
This
Silently
This security
succeed setting determines whether domain controllers will refuse requests from member computers to change computer account passwords. By default,
ò Notsetting
Default:
Domain
None: This
member:
Defined.
Data does
policy
This
signing not isaffect
is
Digitally not
the defined,
not the ability
encrypt
default
required which
secure
value. to add
in order means toabind
channel localthat dataprinter.
withthethe system
(when server. treats
If theit client
possible) as disabled. requests data signing, the server supports it.
Warn
This
Note but allow
security
setting does installation
setting not determines
affect whether all secure channel traffic initiated by the domain member must be signed or encrypted.
Administrators.
Require
Domain
If it signature:
member:
is administrator
enabled, Unless
thisDigitally
setting TLS\SSL
sign
does secure
not allowis being
channel used,
a access
domain datathe (when LDAP
controller data
possible)
to accept signing any option
changes musttobe negotiated.
a computer account's
Do
If the
This
Note not allow
security installation
settingisdetermines
denied permission
whether to a domain DCOM
memberapplications attempts todue to
negotiate the changes
encryption made for all tosecure
DCOMchannel in password.
Windows, trafficthe that administrator
it initiates. can use the DCOM:
Domain
Default:
When a member:
Warn
computer but Disable
allow
joins machineaaccount
installation.
a domain, computer password
account changes
is created. After that, when the system starts, it uses the computer account password to create a secure
If the
Default:
This administrator
This
security
Default: This policy
setting is
is denied
not
determines
policy is not defined, defined,access which
whether
whichto activate
has
a
means the
domain andsame launch
member effect DCOM
as
attempts None.
that the system treats it as Disabled. applications
to negotiate due to
signing the changes
for all secure made to
channel DCOM traffic in this
that version
it initiates. of Windows, this policy settin
Domain
When a member: computer Maximum joins a domain, machine account
a computer password
account isage created. After that, when the system starts, it uses the computer account password to create a secure
Determines
This setting whether a domain
determines whether member
or not periodically
all secure channelchanges its computer
traffic initiated by account
the domainpassword. member If this
meets setting minimum is enabled, security therequirements.
domain member does notitattempt
Specifically determin to
Domain
When a member:
Caution computer Require joins a domain, strong (Windows a computer 2000 account or later) sessionAfter
is created. key that, when the system starts, it uses the computer account password to create a secure
This
This
User security
setting
Account setting
determines
Control: determines
whether
Admin how
or
Approval not oftenthe
Mode a domain
domain
for the member
member
Built-in will attempt
attempts
Administrator to to change
negotiate
account its computer
encryption for account
all secure password.
channel traffic that it initiates. If enabled, the domain
Interactive
Default:
Domain logon: Do
Disabled.
member: Digitallynot displayencrypt lastsecureuser name channel data (whenispossible)
This
If yousecurity
This set the
setting setting
server
determines determines
to Require
whether whether
Signature,
or not the 128-bit
you
domain must key strength
also
member therequired
setattempts client. toNot forsetting
negotiate encrypted the client
signing secure allchannel
forresults secure in lossdata.
channel of connection
traffic thatwith the server.
it initiates. If enabled, the domain me
Interactive
Domain
Default:
Default: 30 logon:
member:days.
Enabled. Do
Digitallynot require
sign CTRL+ALT+DEL
secure channel data (when possible)
This
This
Notes security
security setting
setting determines
determines the
whether behavior the of
name Admin of theApproval
last user modeto log foron thetoBuilt-in
the computer Administrator is displayed account. in the Windows logon screen.
Interactive
When
Notes
Default: logon: Message
a Enabled.
computer joins a domain, text forausers computer attemptingaccount to is logcreated.
on After that, when the system starts, it uses the computer account password to create a secure
This
Default:
Important
Importantsecurity
Enabled. setting determines whether pressing CTRL+ALT+DEL is required before a user can log on.
Interactive
The
If
This policylogon:
thisoptions
security are:
is setting Message
enabled, should the titlename
not forof
be users
the last
enabled. attempting
Computer to account
user to successfully log on passwords log on is not displayed
arethey used toon. in the Log
establish On tochannel
secure Windows dialog box.
communications between members and doma
This
Depending
This security
setting on setting
does what not specifies
version
have any aWindows
text message
ofprevious
impact on isLDAP
runningthat isondisplayed
simple thebind domain
or to
LDAP users
controller when
simple that
bind the logdomain
through SSL. member No is communicating
Microsoft LDAP withthat andare theshipped
settingswith of the parameters
Notes:
Interactive
This
If this
Notes:
This setting
policy
setting logon:
should
is enabled
applies Number
not
to be
on
Windows of
used
a in
computer,2000 logons
an attempt a user
computers, to
to
is cache
support
not but (in
required
it is case
dual-boot
not to domain
press
available scenarios controller
CTRL+ALT+DEL
through that the is
use not the
Security available)
to same
log on. computer
Not
Configuration having account.to
Manager press Ifclients
you want
CTRL+ALT+DEL
tools on to dual-boot
these leaves
computers. twousers Windows
installations
susceptiblXPthaP
There
This
ò this
If Enabled:
signing is no
security
policy is known
The setting
required,
is disabled, reason
Built-in allows
then the for
the
Administrator
LDAPnamedisabling
specification
simple
of willthis
the logon
bind
last setting.
of
and
user aintitle
Admin
LDAP
to Besides
to appear
log Approval
simple
on isunnecessarily
in
bind the
displayed.Mode. title bar
through By reducing
of the
default
SSL the
any potential
window
requests that
operation
are confidentiality
contains
that requires
rejected. No the Microsoftlevel
Interactive
elevation of
LDAP the ofsecure
logon: privilege
clients channel,
Message will text
running promptdisabling
for users
Windows this
the Consent
XP settin
attempt
Profes A
Interactive
This
Domain text is logon:
member:often Prompt
used
Digitally for user
legal
encrypt to change
reasons,
or is sign forpassword
example,
secure before
channel to warn expiration
users
datachannel about the ramifications of misusing company information or to warn them that their actions
If
Allthe
If this policy
previous
policy Domain
users'
is disabled,
enabled,
member:
logon information
any
the
Digitally
user
policy is encrypt
cached
required
Domain to
member:
or sign
locally
press secure
so that,
CTRL+ALT+DEL
Digitally in(always)
sign the
secure
data
event before (always)
that
channel a domain
logging data
is on enabled,
(whencontroller
to Windows then
possible) is this
(unless
is
policy
unavailable
assumed
is during
they assumed
are
to beusing toa be
subsequent
enabled smart enabled
logon
card
regardless
regardless
attempts,
for Windows
of its
oflogon).
they
current
itsare
curra
setti
Interactive
Note:
Domain
Default:
ò Domain
Disabled:
Domain No logon:
member: message.
The
controllers Require
controllers
Digitally
Built-in
are Domain
are
encrypt
Administrator
also also domain
domain Controller
secure will logon
members members
channelauthentication
and in XP data and (when
compatible
establish to
establish
secureunlock secure
possible)
mode channelsand channels
runwith allotherwith domain
applicationsother domain by default
controllers controllers
with
in the fullin the same
administrative
same domain domain wellas
privilege. aswell as domain contro
Default:
Determines
If this policy
Default:
Some
Disabled.
orNoall how
is the
message.
of far
enabled, in advance
information thesmart policy
that(inDomain
days)
is transmittedusers
member: are over warned
Digitally
the secure that
sign their
secure
channelpassword channel
will be isencrypted.
about
data (when to expire.
This With this
possible)
policy advance
is assumed
setting determinestowarning,
be enabledwhethertheasuser has
regardless
or not
domain
time
128-bit of to itskey
controllers
construct
current
strength a in
setti p
Interactive
Windows
Defaultinformation logon:
cannot
on domain-computers: Require
connect
transmitted to a servercard
Disabled.
over theto confirm
secure your
channel logon is settings.
always You
encrypted have been
regardless logged of on
whether using previously
encryption of stored
ALL account
other secure information.
channel If you
traffic ischanged
negotiated youio
Logon
Default: Disabled must be provided to unlock a locked computer. For domain accounts, this security setting determines whether a domain controller must be c
Interactive
Default on
Default: logon:
14stand-alone
days. Smartcomputers:card removal behavior
Enabled.
If a
If this
This setting
security
domain is enabled,
setting
controller requires
is then users
unavailable the secure to
and logachannel
on to a logon
user's will not
computer beusing
established
information a issmart
not unless
card. 128-bit
cached, the userencryption
is prompted can be with performed.
this message: If this setting is disabled, then the key str
Microsoft
Default: Disabled.network client: Digitally sign communications (always)
This security setting determines what happens when the smart card for a logged-on user is removed from the smart card reader.
Microsoft
Default:
The
The network
Disabled.
options are: client: Digitally sign communications domain(ifis server agrees)
This system
Importantsecuritycannot settinglog you
determines on now whether because packet the signing <DOMAIN_NAME>
required by the SMB is not client available.
component.
Microsoft
The options network
are: client: Send unencrypted password to connect to third-party SMB servers
This
Important
Enabled:
In this securityUsers
policy setting
can
setting, determines
only
a value log on
of 0 whether
to the
disables the
computer logonSMB usingclient
caching. a attempts
smart
Any card.
value to negotiate
above 50 SMB
only packet 50
caches signing.
logon
Microsoft
The
This server
setting network
message
applies server: block
tolog Windows Amount
(SMB) 2000of idle
protocol time
computers, required
provides but the before
isbasis
itBlock not(SMB) suspending
for Microsoft
available throughafile
session
and
the print
Security sharing and attempts.
Configuration many Manager other networking tools on operations,
these computers. such as remote Windo
Disabled.
If this
ò No ActionsecurityUsers can
setting is on
enabled, to the computer
the Server using
Message any method. redirector is allowed to send plaintext passwords to non-Microsoft SMB servers that do not
Microsoft
The
In orderserverto network
message
take server:
advantage block Digitally
(SMB)
of this sign
protocol
policy communications
on provides
member the (always)
basis
workstations for Microsoft
and servers, file and
all print
domain sharing
controllers and many
that other
constitute networking
the member's operations,domain suchmust asbe remote Windo
Default:
Default:
ò Lock
This
If this
Disabled.
10 is
Workstation
security
setting setting determines the amount of continuous idle time that must withpass in a Server Message Block (SMB) sessionagrees before to theperform
session isrunning
suspended Win
Microsoft
In order
Sending
ò Force to take enabled,
network
unencrypted
Logoff server:
advantage the
passwords ofMicrosoft
Digitally
this is sign
policy network
communications
a securityon domain client will (if
risk. controllers,
not communicate
client allagrees)
domain controllers a Microsoft in the network same domain server asunlesswell as that allserver
trusted domains must run SMB Windowspacket200 sig
This
If thissecurity
Important setting setting
is enabled, determines
the whether
Microsoft packetclient
network signing will is ask required
theexpire
serverby the SMB server
to perform SMBcomponent.packet signing upon session setup. If packet signing has been enabled
Microsoft
ò Disconnect
Administrators
Default: network
Disabled. if a
can server:
remote
use Disconnect
Terminal
this policy Services
to clients
control when
session
when a logon
computer hours suspends an inactive SMB session. If client activity resumes, the session is automatically reesta
This security
Default: Disabled. setting determines whether the SMB server will negotiate SMB packet signing with clients that request it.
Network
The server access:
message Allow anonymous
block SID/name translation
Default:
This
If
Foryou
Enabled.
setting
security
click
this policy will
Lock apply
setting
Workstation
setting, to any(SMB)
determines
a value computers
inanonymous
ofthe
protocol
whetherProperties
0 means runningprovides
totodisconnect Windows
dialog
disconnect
the basis
box users
an 2000
for
forthrough
who
this
idle
Microsoft
are connected
policy,
session the
as
file andinprint registry,
changesworkstation
quickly toas the is is
sharing and
locallocked
reasonably but
computer
when
many
the the
possible.
other setting
security
outside smart The
networking
their
card user
maximum notoperations,
isisremoved,
account'sviewable
value valid
allowing
is 99999,
such asthe
through
logon users
which
remote
hours.
Windo
toisSecurity
Thisdays;
leave
208 Coa
setti
the
Important
Network
The server access:
message Do not block allow (SMB) protocol enumeration provides the basis of SAM foraccounts
Microsoft file and print sharing and many other networking operations, such as remote Windo
This
If security
this setting setting
is enabled, determines
the Microsoft if an anonymous
network user
server will can request security identifier (SID) attributes for another user.
Notes
Network
When
If you this
click
Default:This access:
policy
Force
policy Do
is
Logoff
is not
enabled,
not allow
in the
defined,it anonymous
causes
Properties
which client enumeration
sessions
dialog
means box
that for
the with ofnot
this
systemSAM
the
communicate
SMB
policy, accounts
Service
the asand
ituser
with
to packet
is
a Microsoft network client unless that client agrees to perform SMB packet sig
shares
be forcibly
automatically for disconnected
logged when
off undefined
when thesmart
the client's card logon hours expire.
is removed.
For
This
If this this policy
security
setting toenabled,
setting
is take effecttheon
determines computers
what
Microsoft additional
network running Windows
permissions
server will willtreats
2000,
negotiate beclient-side
granted
SMB
15
packet forminutes
anonymous
signing signing servers mustand
connections
as requested also bybe to
theenabled.
the for
computer.
client.
workstations.
To
That enable client-side
is, if packet signing SMB has packet
been signing,
enabled
Network
If this
Computers
Default: access:
policy is
that Do
enabled,
have not
this aallow
user
policy storage
with
set will of
knowledge not credentials
be of
able an toor .NET
administrator's
communicate Passports SID
with for
could network
computers contact authentication
that a computer
do not have that has
server-side this policy
packet enabled
signing and use
enabled. theBy SID to get
default, the admi
server-sid
Allthis
This
If Windows
security
policy isoperating
setting
disabled, systems
determines
an support
establishedwhether both
client asession
anonymous client-side is SMB component
enumeration
allowed to of
be SAM
maintained and a server-side
accounts after and the shares SMB
client's is component.
allowed.
logon hours To take
have advantage
expired. of SMB packet signing, both
you
Network
Server-side
Windows click Disconnect
access: packet
allows anonymousLet signing if
Everyonea remote
can users be Terminal
permissions
enabled
to perform Services
apply
on computersto session,
anonymous
certain activities, runningremoval users
such Windows of the
as enumerating smart
2000 andcard later
the disconnects
by setting the session
Microsoft without
network logging
server: the
Digitallyuser off.
sign This allows
communications the us (
Microsoft
Default:
This security network
Enabled setting client:
on domain Digitally
determines sign
controllers
whether communications
only.
Stored User (always)
Names and - Controls
Passwords whether
saves or notnames
passwords,
of domain
the client-side
credentials, SMB accounts
or component
.NET
and network
Passports requires for
shares.
packet
later use
This
signing.
when
is convenient,
it gains dom
fo
Default
Server-side
Disabled
Network
Microsoft on for workstations
access: packet
networkmember Namedsigning
client: and
servers.pipescan
Digitallymember besign
that can servers:
enabled be Disabled.
on certain
computers
accessed
communications anonymously
(if running
server Windows
agrees) - NT 4.0 Service
Controls whether Pack
or not3 theand lateraccounts
client-side by setting
SMB thenetwork
componentfollowing hasregistry
packet valuesigning to 1:enabledfo
Windows
Default
Default: on allows
This Windows
policy anonymous
is Vista: users
Enabled.
not defined, to
which performmeans permissionsthat theactivities,
system such as enumerating the names of domain and shares. This is convenient,
Default
This
Microsoft
Important
Network
on
security
security domain
network
access:
setting
option controllers:
determines
allows
server:
Remotely
Enabled.
additional
Digitally
accessible
what sign additional
HKLM\System\CurrentControlSet\Services\LanManServer\Parameters\EnableSecuritySignature
Enabled
This for domain controllers. restrictions
communications to be placed
(always) ontreats
are granted
anonymous
- Controls
it as forNo action.
anonymous
connections
whether or not connections
as
thefollows:
server-side to theSMB computer.
component requires packet signing.
Default
If on
it is enabled, Windows this XP: Disabled
setting prevents theregistry
Stored paths User Names and Passwords from storing passwords and credentials.
This security
MicrosoftDisabled.
Default: setting determines which communication sessions
network server: Digitally sign communications (if client agrees) - Controls whether or not the server-side (pipes) will have attributes and permissions that allow SMBanonymouscomponentaccess. has packet signing enabled
On Windows
Windows
Server-side
Notes
Enabled: allows
Do Vista
packet
not allowand
anonymous
signing above:
enumerationcannot In order
users to
be for this
ofperform
enabled
SAM setting
certain
on
accounts. computers to
This work,
activities, the
such
running
option Smartas
Windows
replaces Card
enumerating
EveryoneRemoval
95 or withthe
Windows
with Policy
names service
98.
Authenticated ofvalue
domain mustUsers be in
accounts started.
the and
security network shares.
permissions This isWindows
for resources. convenient, fo
If
Torserver-side
This Windows
security SMB
2000
setting signing
servers
determines is
to required,
negotiate
which a client
signing
registry
Note: When configuring this security setting, changes will not take effect until you restart Windows.will
with
paths not canbe
Windows able
be to
NT
accessed establish
4.0 clients,
over a session
thethe following
network, that server
registry
regardless unless
of the must it
users has
be or client-side
set to
groups 1 on SMB
the
listed insigning
server enabled.
running
the access control Bylist
default,
2000
(ACL
Disabled:
Default:
Similarly, No
None.
if additionalSMB
client-side restrictions.
signing isRely
required, on default that permissions.
client will not be able to establish a session with servers that do not have packet signing enabled. By defau
For
If this
Notes
All more
policy
Windows information
isoperating
enabled, about
systems Stored
theisEveryone support User SID Names
both is packet
added andtoPasswords,
a client-side the tokenSMB seeisStored
that
component created andUser for Names andSMB
anonymous
a server-side Passwords.
connections.
component. In SMB
this case,
To take anonymous
advantage of users
SMB packet are able to access
signing, both
If server-side
Notes
Default: SMB signing enabled, SMB signing will be negotiated with clients that have client-side signing enabled.
Microsoft
Default
Using onnetwork
SMB workstations:
packet client:
signing Digitally
Enabled.
can sign communications
degrade performance up (always)
to 15 - Controls
percent on whether
file service ortransactions.
not the client-side SMB component requires packet signing.
Default:
Default:
All Disabled.
Disabled.
All Windows
Microsoft
Default
Windows on network operating client:
server:Disabled.
operating systems
Digitallysupport
systems
System\\CurrentControlSet\\Control\\ProductOptions support both
both a
sign communications a client-side
client-side SMB
SMB component
(if server agrees) - Controls
component and
and a a server-side
whether orSMB
server-side SMBnot the component.
client-side
component. To
ToSMB take advantage
advantage of
takecomponent has
of SMB
SMBpacket packet
packet signing signing,
enabled
signing, both
both
Microsoft
Microsoft network network server: client:
client: Digitally
System\\CurrentControlSet\\Control\\Server Digitallysign
Digitally signcommunications
sign Applications(always)
communications
communications (always)-- -Controls
(always) Controlswhether
Controls whetheror
whether orornot notthe
not theclient-side
the server-side
client-side SMB
SMB SMB component
component
component requires
requires
requires packet
packet
packet signing.
signing.
signing.
Network access: Remotely accessible registry paths and subpaths
This security setting determines which registry paths can be accessed over the network, regardless of the users or groups listed in the access control list (ACL
Network access: Restrict anonymous access to Named Pipes and Shares
This security setting determines which registry paths and subpaths can be accessed over the network, regardless of the users or groups listed in the access co
Network
Default: access: Shares that can be accessed anonymously
When enabled, this security setting restricts anonymous access to shares and pipes to the settings for:
Network
Default: access: Sharing and security model for local accounts
This security setting determines which network shares can accessed by anonymous users.
System\\CurrentControlSet\\Control\\ProductOptions
Network
Network security:
access: Named Do not pipes store LAN that can Manager be accessed hash value on next password change
anonymously
System\\CurrentControlSet\\Control\\Server
This security setting determines how network
System\\CurrentControlSet\\Control\\Print\\Printers Applications
logons using local accounts are authenticated. If this setting is set to Classic, network logons that use local accou
Network
Default: access:
security:
None Shares
Force
specified. that can
logoff when be logonaccessed hours anonymously
expire
Software\\Microsoft\\Windows
If thissecurity
setting is set todetermines
Guest only,
System\\CurrentControlSet\\Services\\Eventlog
This setting NT\\CurrentVersion
if,network
at the next logons that use
password local accounts
change, the LANare automatically
Manager (LM) hash mapped valueto forthetheGuest account. By
new password using the
is stored. The Guest
LM hash model, you can hw
is relatively
Default:
Network Enabled.
security: LAN Manager authentication level
Software\\Microsoft\\OLAP
This security setting determines Server whether to disconnect users who are connected to the local computer outside their user account's valid logon hours. This setti
Caution
Default
Networkon domainLDAP
security:
Software\\Microsoft\\Windows omputers: clientClassic.
signing requirements
NT\\CurrentVersion\\Print
This
Default security
on setting
stand-alone
Software\\Microsoft\\Windows determines
computers: which Guest challenge/response
NT\\CurrentVersion\\Windows only authentication protocol is used for network logons. This choice affects the level of authentication pro
Default
Network
When on
this Windows
security:
policy Vista:
isMinimum
enabled, Enabled
session
it may
causes security for NTLMwith
client sessions SSPthe basedSMB(including
servermaking to secure
be forcibly RPC) clients
disconnected when the client's logon hoursvaluedexpire.
Incorrectly
This security editing
setting the registry
determines
System\\CurrentControlSet\\Control\\ContentIndex
Default on Windows XP: Disabled. theseverelylevel of data damage signing yourthat system. Before
is requested on behalf changes
of clients to the registry,
issuing LDAP you BINDshould back
requests, up asanyfollows: data on the compute
Network
Send
Note: LM
Thissecurity:
NTLMMinimum
& security responses:
setting issession
Clients
not security
available use LM onfor and NTLM
earlier NTLM SSP
versions based
authentication (including andThe secure
never useRPC) NTLMv2 servers session security; domain controllers accept LM, XP, NTLM, andacceNT
Important
System\\CurrentControlSet\\Control\\Terminal
This
If thissecurity
policy issetting
disabled, allows an a client
established to require
client Server
the
session negotiation
is allowed ofof128-bit
Windows.
to be maintainedencryption security
and/or
after
setting
theNTLMv2
that
client's logon
appears
session hours
on computers
security.
have These
expired.
runningare
values Windows
dependent "Network
on the LAN M
Send
Recovery
Default:
None: LM
The & NTLM
console:
LDAP -
BIND use
Allow
System\\CurrentControlSet\\Control\\Terminal NTLMv2
automatic
request is session
administrative
issued security
with the if negotiated:
logon
options
Server\\UserConfig that are Clients
specified use LM
by and
the NTLM
caller. authentication and use NTLMv2 session security if the server suppo
Important
This security setting allows a server to require the negotiation of 128-bit encryption and/or NTLMv2 session security. These values are dependent on the LAN M
Send NTLM
With the NTLMv2 Guest response
only only:
model, Clients
anyLayer user usewho NTLM authentication
can Server\\DefaultUserConfiguration
access your only and use NTLMv2 session security if the server supports it; domain controllers accept LM, NT
Negotiate
Recovery signing:
console: IfAllow
Transport
System\\CurrentControlSet\\Control\\Terminal
Require
Default: Enabled. session floppy
security: copy The Security/Secure
and access
connection towill fail ifcomputer
allSockets
drives Layer
and
NTLMv2 over
all (TLS\SSL)
folders
protocol the network
is has
not not (including
been started,
negotiated. anonymous the LDAP Internet
BINDusers) request can access your
is initiated with shared
the LDAP resources
data si
Send
This NTLMv2
security response
setting determines
System\CurrentControlSet\Control\ProductOptions
Require signature:
Software\\Microsoft\\Windows This is only:
the Clients
same if the as use
password NTLMv2
Negotiate
NT\\CurrentVersion\\Perflib for authentication
thecompatibility
signing. Administrator
However, onlyif the and
account LDAPuse must NTLMv2 be to
server's givensession before
intermediate security
access if to
thethe
saslBindInProgress server
system supports
is it; domain
granted.
response controllers
If thisnot
does option accept
is enabled,
indicate that LDA LM
th
Windows
Require
Shutdown:
Require 2000
128-bit
NTLMv2Allow Service
encryption:
system
sessionto Pack 2
The (SP2)
be shut The
security: connection
down and above
will
without
connection offer
fail if
having strong
willNTLMv2
failtoiflog encryption
on
message with authentication
(128-bit)
integrityonly is
is not not previous
negotiated.
negotiated. versions of Windows, such as Microsoft Windows NT 4.0.
Send NTLMv2 this response
System\CurrentControlSet\Control\Server
Note:
Enabling security option
System\\CurrentControlSet\\Services\\SysmonLog only\\refuse
makes LM:
the Clients
Applications
Recovery use
Console SET authentication
command available, and whichuse NTLMv2allows you session security
to setWindows
thepolicy.
followingif theRecovery
server supports Console it; environment
domain controller varia
This setting
Note: This can
security affect the
setting ability
behaves of computers
as an willrunning
account policy. Windows
For domain2000accounts,Server, Windows
there
is not can 2000 Professional, XP,
Theand the Windows Server 2003 family
Require
Shutdown:
Send
Default: 128-bit
NTLMv2
This Clear
policy
Software\Microsoft\Windows
Caution
encryption.
virtual
response is not
System\\CurrentControlSet\\Services\\CertSvc
memory The
only\\refuse
defined connection
pagefile
and
NT\CurrentVersion LM &
automatic NTLM: fail if strong
Clients
administrative use encryption
NTLMv2
logon is (128-bit)
authentication
not allowed. onlybe
negotiated. andonly use one account
NTLMv2 session security account
if thepolicy
servermust supportsbe definedit; domainin th
Default:
This No requirements.
security setting determines whether a computer can be shut down without having to log on to Windows.
System
This
AllowWildCards:cryptography:
setting does not Use
affect FIPS
interactive compliant logons algorithms
Enable wildcard support for some commands (such as the DEL command).
System\\CurrentControlSet\\Services\\Wins that are for encryption,
performed remotely hashing by and
using signing
such services as Telnet or Terminal Services
Default:
This Nowill requirements.
If yousecurity
Important
This policy
set
AllowAllPaths:
System
When the setting
Cryptography:
this policy have
server
Allow
determines
no
to
access
is enabled, impact
Require
Force to
the on
all
strong
whether
Shut computers
signature,
files key and
Down
theyou virtual
running
folders
protection muston
command
memory
for Windows
also
theis set
user
pagefile
the
computer.
keys
available 2000.
client.
stored
isNot
on the
cleared setting
onWindows
the
when the
computer
the
logonclient systemresults
screen.
is inshuta lossdown. of connection with the server.
This
When security
the
AllowRemovableMedia:
Caution setting is
computer determines
not Allow joined filesiftotheto a beTransport
domain,copied thisLayer
to setting
removableSecurity/Secure
also modifies
media, such Sockets
the Sharing
as a Layer
floppy and (TL/SS)
Security
disk. Security
tabs in Provider
the Windows supports only the
Explorer Transport Layer
to correspond to theSecurity
sharing (TL an
System
Virtual
This security objects:
memory
setting can Default
support
affect the owner
uses abilitya for
system objects created
pagefile to by
swap members
pages ofof the
memory Administrators
to disk when group they are not used. On a running XPsystem, this pagefile theisWindows
opened exclusi
Note:
This
When
DescriptionThis
NoCopyPrompt:
this setting
setting
policy Do
is does not not
prompt
determines
disabled, have
the ifof
whenany computers
users'
option impact
overwriting
to private
shut onrunning
downan existing
keys Windows
ldap_simple_bind
require
the computer file. 2000
a passwordordoes Server,
ldap_simple_bind_s.
to be
not
Windows
appearused.on the 2000 No Professional,
Microsoft
Windows logonLDAP Windows
clients
screen. In that
this
Professional,
are
case,shipped
users
and Windows
with
must be able toXP log
Serve
Profes
on to
System
For objects:File
Encrypting RequireSystem case Serviceinsensitivity (EFS), for non-Windows
itdamage
supports onlysystem.
the subsystems
Triple Data making Encryption Standard (DES) encryption algorithm forany encrypting file data supported b
Incorrectly
This
When security
this editing
setting
policy is the registry
determines
enabled, it may which
causes severely users
the systemand groups your
pagefile have
to be the Before
authority
cleared upon run changes
to clean volume
shutdown. to the
maintenance
If registry,
you enable youthis
tasks, should
such asback
security Disk upCleanup
option, thevalued
and Diskdata
hibernation onfilethe
Defragmenter. compute
(hiberfil.sys
Default:
System
Default:
The optionsobjects:
Negotiate
This Strengthen
policysigning.
are: is notEnabled. default permissions of internal
defined and the recover console SET command is not available. system objects (e.g., Symbolic Links)
Default
This on workstations:
security Services,
setting determines whether
For Terminal
System
Note: On settings:
Windows Optional
XP, itthissupports
subsystems
security only settingthecase Triple insensitivity
was called DES encryption is enforced
"Network access: algorithm for allfor
Remotely
subsystems.
encrypting
accessible
The Win32
terminal registry
subsystem
services
paths." network is case
If you configure
insensitive. For
communication. However, the kernel
this settinginformation
on a member about suppo
Term
of the W
Default
Default:
Default:
Sendsecurity
LM on servers:
Administrators
Disabled.
&is NTLM Disabled.
responses group (onserver.
on servers).
This
User input setting
not requireddetermines when the strength
new keys are ofstored
the defaultand discretionary access control list (DACL) for objects.
used
System
If this
Undefined
Default: settings:
setting is
onsetting
Disabled. Use
enabled,
workstations. Certificate
case Rules
insensitivity on Windows
is enforced Executables
for all directoryfor Software
objects, Restriction
symbolic Policies
links, and IO objects, including file objects. Disabling this setting does n
User security
This is prompted when the key iswhich
determines first used subsystems are used to support your applications. With this security setting, you can specify as many subsytems to sup
User
Active Account
Directory
User security
must enter Control:
maintains
a password Admin a Approval
global
each list
time they Mode
of shared for
use a key the
system Built-in Administrator
resources, such account
as DOS device names, mutexes, and semaphores. In this way, objects can be located
This
Default:
Note: The Enabled. setting
Federal determines
Information if digital
Processing certificates
Standard are
(FIPS) processed
140-1 iswhen a security a userimplementation
or process attempts designed to run forsoftware
certifyingwith an .exe filesoftware.
cryptographic name extension.FIPS 140-1 Thisvalid
sec
User
For more
Default: Account Control:
information,
POSIX. Behavior
see Public ofkey theinfrastructure.
elevation prompt for administrators in Admin Approval Mode
This security
If thisAccount setting
policy isControl: determines
enabled,Behavior the default the behavior
DACL of
is stronger, Admin Approval
allowing mode
users who for the Built-in Administrator account.
User
When certificate rules are enabled, of the elevation
software prompt
restriction for standard
policies will check usersare not administrators to read shared objects but not allowing these users to modify s
a certificate revocation list (CRL) to make sure the software's certificate and signatur
This
This security
Default: setting
This policy
security setting isdetermines
not
determines defined. the
the behavior
behavior of
of thethe elevation
elevation prompt
prompt for
for administrators
standard users
User
The
Default: Account
optionsEnabled.are:Control: Detect application installations and prompt for elevation
Default:
User Disabled.
Account Control: Only elevate executables that are signed and validated
The options
The options are:
are:
This
ò security
Enabled: The setting
Built-in determines
Administrator the behavior will logonof inapplication
Admin Approval installation detection for the entire system.
User Account Control: Only elevate UIAccess applications that areMode. installed Byindefault
secureany operation
locations that requires elevation of privilege will prompt the Consent A
This
ò security
Prompt for setting will
consent: An enforce
operation PKIthat signature
requires checks
elevation on any of interactive
privilege will application that requests elevation of privilege. Enterprise administrators can control t
ò Prompt
User Account forare:
credentials:
Control: Run Anall operation
users, including that requires elevation of asprivilege will prompt the user to enter to
prompt the Consent Admin anselect either Permit
administrative useror nameDeny. and If password.
the Consent If Admin
the user sele
e
The
This
options
ò Disabled:
securityThe Built-in
setting will Administrator
enforce the requirement will logonadministrators,
inthat
XP applications
compatible standard
mode
that request andusers.runexecution
all applications with a by default integrity
UIAccess with full administrative
level (via a marking privilege.
of UIAccess=true in thei
User
The
ò Account
options
Prompt forare: Control: Switch
credentials: to the secure
An operation that desktop elevation
requires when prompting for elevation
ò
This
ò Automatically
security
Enabled: denydetermines
setting
Application elevation
installation requests:
the behavior
packages This option
of
that all UAC
requireresults policiesinofanprivilege
an elevation access
for the ofentire
will
denied
privilege
prompt error
system. the
to install
Consentbeing
message Admin
will be heuristically
to entertotheir
returned detected
user name
the standard
and trigger user andwhen
password.
they tryIfelevation
the configured tothe user en
perform proa
Default:
User Disabled
Account Control:
- à\Program Files\, including subdirectories Virtualizes file and registry write failures to per-user locations
This
ò
ò security
Enabled:
Elevate setting
Enforces
without determines
the PKI whether
certificate the
chain elevation
validation request
of a given will prompt
executable on the
before interactive
it is users
permitted desktop
to run. or the Secure Desktop.
-Default:
User
The
ò
à\Windows\system32\
Account
options
Disabled: Prompt are: forprompting:
Control: Allow
credentials This
UIAccess
(home) option allows the to
applications
/ Automatically Consent
prompt
deny Admin
for
elevation to requests
elevation perform without an operation
using the that
(enterprise) secure requires
desktop. elevation without consent or credentials. Note: this sc
-This securityEnterprises
à\Program setting
Files enables
(x86)\,
running thestandard
including redirection
subdirectories
users of legacydesktops
for 64
that
application
bit versions
leverage
write delegated
failures
of Windows
installation
to defined locationstechnologies
in both the likeregistry
Group Policy and Software Install (GPSI) or SMS wi
Maximum
The
ò options
Disabled: application
are:
Does not log
enforce size PKI certificate chain validation before a given executable is permitted to run.
file system.
Default:
This Prompt
security This feature
for
setting consent
controls mitigates
whether those User applications
Interface that historically ran as administrator and wrote runtime application
ò Enabled:
Default:
Maximum Admin
Enabled
security Approval
(home)
log size Mode
/ Disabled and all other
(enterprise) UAC Accessibility
policies are dependent (UIAccess on or UIA) programs
this option being can automatically
enabled. Changing disable this setting requires a system reboot.
data
Note:
the back
Windows
secure todesktop
eitherenforces%ProgramFiles%,
for a PKIthe
elevation signature
prompts %Windir%;
check
being on
used%Windir%\system32
any interactive
a standardapplication
byapplication user. or HKLM\Software\....
that requests executionofwith UIAccess integrity level regardless of the state of thi
This
ò security
Enabled:
Default: Allsetting
Disabled elevation specifiesrequests maximum
by default will sizego ofto thethe secure desktop event log, which has a maximum 4 GB.
Maximum
ò Disabled: system log size
This securityAdmin
Virtualization
The setting
facilitates
Approval
specifies
theUIA
Modethe maximum
running
user type size
of pre-Vista
and of all the
(legacy)
relatedsecurity UACevent
applications
policies log,will
that whichbe disabled.
historically has failed
a maximum Note: the
to run size as
Security
of 4 GB.
Standard
Center will notify that the overall security of the op
User. An
If youoptions
Prevent
Notes enable
local are:
this
guests setting,
group from programs
accessing including
application Windows log Remote Assistance can automatically disable the secure
ò Disabled:
administrator All elevation
runningspecifies requests
only Windows will go
Vista to the interactive users desktop
This
desktopsecurity
Default:
Prevent
setting
for elevation
Enabled
local guests prompts.
group from
theUnless maximum
accessing youcompliant size also
have
security
of the applications
systemelevation
disabled
log
maylog,
event choose which
prompts, tohas disable
theaprompts this feature
maximum willsize as
appear of it4ison
GB.unnecessary.
the interactive
Notes
ò Enabled: Ansetting
application willsecure
only launch with UIAccess integrity if it resides in a secureevent location
user's
This
Log filedesktop
security
sizes instead
must be aofmultiple
determines the 64desktop.
ifofguests KB.are prevented
Ifsystem
you enter from accessing the application log.in the file system.
Default:
Prevent
The
Notes optionsEnabled
localare: guests group from accessing log a value that is not a multiple of 64 KB, Event Viewer will set the log file size to a multiple of 64 KB.
This
Log setting
security
file sizes does
setting
must not be appear
determines
a multiple in the Local
ifofguests
64 KB. Computer
are
If prevented
you enter Policy
a from object.
value accessing
that is not the
a securityofevent
multiple 64 KB, log.Event Viewer will set the log file size to a multiple of 64 KB.
Retain
ò
If you
Notes
Event application
Disabled:
disable
Log size dolog
Anorapplication
and not
log wrappingwill launch
configure should withbeUIAccess
this setting, the secure
defined integrity
to matchdesktop even
the canif it only
business doesbe not
and reside in
disabled
security by athesecure
requirements user location
of the in the file system.
youinteractive
determined when designing your enterprise security
This setting
security does
setting not appear
determines in the Local KB.Computer Policy object.
ò
LogEnabled:
file
desktop
Retain
Default:
Notes
sizes
or by
security
For
Facilitates
the
must
disabling
log
Windows
be the
a themultiple"Userifof
runtime
Server
guests
redirection
64
Account
2003
are
family,
If youprevented
of application
Control:16 MB;
enterSwitch
for
a from towrite
value
Windows
accessing
thethat failures
secure the
is notdesktop to system
defined
a multiple
XP Professional when event
user
of 64
Service
log.Event
locations
KB,
prompting Pack 1,
forViewer
for both the
8elevation"
willfile
MB;determined
set
for Windows
system
the log file size to a multiple of 64 KB.
setting. XP Professional, 512 KB.
Event
and
This Log
registry.
setting
security
Default: size
Enableddoes and
setting not log wrapping
appear
determines in the
theshouldLocal
number be defined
Computer
of days' to match
Policy
worth object.
of the
eventsbusiness to be and
retained security for requirements
the application you
log if the retention when designing
method for the your enterprise
application logsecurity
is By D
This setting
Retain system does not appear in the Local Computer Policy object.
Default:
Notes
Event Log Forsize thelog Windows
and log Server 2003
wrapping should family,
be 16 MB;
defined to for
match Windows the XP Professional
business and security Service Pack 1, 8 you
requirements MB;determined
for Windows XP Professional,
when designing 512 KB.
UIA programs
This
This security
setting arenot
setting
does designed
affects
determines
appear toininteract
only computers
the
the with
number
Local Windows
running
of days'Policy
Computer and application
Windows
worth object. 2000 and
of events programs
to Windows
be retained onXP. behalf
for theofsecurity a user. log Thisif setting
the retention allowsmethodUIA for the security log is By Security
your Enterprise Days.
Retention
ò
SetDisabled:
Default: For
this value
programs method
to Applications
the only
bypass for
Windows
if the
youapplication
that
Server
archive
secure write log
the
desktop data
2003 toto
atprotected
logfamily, 16 MB;locations
scheduled
increase for Windows
intervals will
and simply
XP fail assure
youProfessional
make they did the
Service
that in previous
Pack 1,versions
Maximum MB; forofto
8 application Windows.
Windows
log size XP
onis Professional,
large enough512 KB.
to accommodate the
Default:
This setting
This
Enabled.
security setting
does not affects
determines
appear only
inlog computers
the
the number
Local of days'usability
running
Computer Windows
worth object.
Policy ofinevents
certain
2000 andtocases,Windows
be but
retained allowing
XP. for the elevation
system logrequests if the retention appear method for the system log is By Days.
Retention
the
Set
A regular
this
user must method
value interactive
only
possess for
if yousecurity
desktop
the archive
Manage instead
the log
auditing of attheand secure
scheduled security desktop
intervals
log user increases
andright you to your
make
access security
surethe thatrisk.
the
security Maximum
log. security log size is large enough to accommodate the inte
This
Default
Notes security
: Enabled setting affects only computers running
determines the "wrapping" method for the application log. Windows 2000 and Windows XP.
Retention
Default:
Set
Default: method
Enabled.
this value
Enabled. only for if yousystem archive log the log at scheduled intervals and you make sure that the Maximum system log size is large enough to accommodate the inte
This
Since
Note: security
UIA
This setting
programs
setting does determines
must notbe able
appear the toin"wrapping"
respond
the LocaltoComputer method
promptsfor the security
regarding
Policy security
object. log. issues, such as the UAC elevation prompt, UIA
Restricted
If you
This do
settingnot Groups
archive
does not the
appear application
in the log, inComputer
Local the Properties Policy dialog
object. boxafor this policy, select the Define this policy setting check box, and then click Overwrite eve
programs
Default:
This
Note: This must
None.
security be
setting
settingsecurity highly
determines
does notsettings trusted.
appear in the Local Computer Policy object. program must be digitally signed. By default, UIA
the In order
"wrapping" to be considered
method for trusted,
the system UIA log.
System
A
If userdo
you
programs Services
must
notcan possess
archive
be run the
the
only Manage
security
from the auditing
log, in theand
following securitydialog
Properties
protected log user
paths: boxrightfor this to accesspolicy, the select security
the Define log. this policy setting check box, and then click Overwrite events
Default:
This
If None.
yousecurity
archive setting logallows
the settings at scheduled an administrator intervals, to in define two properties
the Properties dialog box for security-sensitive
for this policy, select groups ("restricted"
the Define groups).
this policy setting check box, and then click Overwrite
Default:
If you doNone.
Registry security
..\Program
not archive Files\
the (and subfolders)
system log, in the Properties dialog box for this policy, select the Define this policy setting check box, and then click Overwrite events
Allows
If you an ..\Program
archive administrator
the log at to define
scheduled
Files (x86)\ (and the startup
intervals,
subfolders, mode
in the in (manual,
Properties
64-bit automatic,
versionsdialog ofbox or
Windows disabled)
for this policy,
only) as well
select as the
the access
Define permissions
this policy setting(Start,
checkStop, box,or and
Pause)thenfor all system
click Overwrite se
File
The
If youSystem
twomust security
properties
retain allare settings
theMembersevents andthe Member Of. The Members dialoglist defines
for thiswho belongsselectand thewho does not belong to the restricted group. The Member Of list
Allows an administrator
..\Windows\System32\
If you archive the log at scheduled to defineinaccess log,permissions
intervals,
in the Properties
in the Properties (on discretionary box
dialog boxaccess
policy,
for thiscontrolpolicy,lists select (DACLs))Define
the Define andthis policy
audit
this
setting
settings
policy setting
check
(on system
check
box,access
and then
box, and then
click
control click
Do not
lists overw
(SACLs
Overwrite
Default:
If you must Undefined.
retain all theto events inaccess
the log,permissions
in the Properties dialog box for this policy, select (DACLs))the Define thisaudit policy setting(on check box,access
and then click Do not overw
Allows
When
Note: aan
This administrator
Restricted
settingtodoes Groups not define
Policy
appear isinenforced,
the Local any (on discretionary
current
Computer member of a access
restricted control
grouplists that is not onand the Members settings system
list is removed. Any user control
on thelists (SACLs
Members l
Default:
The
If you must Undefined.
requirement retain allbe theinevents a protected in thepath log, can in the be disabledPolicy
Properties by theobject.
dialog "User
box for Account
this policy, Control:select Only theelevate
Define this UIAccess
policy setting check box, and then click Do not overw
Notes
Note: This
applications setting
that aredoes not
installed appear
in secure in the Local
locations" Computer
setting. Policy object.
Default:
You can Undefined.
Default: use Restricted Groups policy to control group membership. Using the policy, you can specify what members are part of a group. Any members that are
None.
Note:
Note: This
This setting
setting does does not not appearappear in in thethe Local
Local Computer Computer Policy Policy object. object.
This setting
Default:
While thisNone. does applies
setting not appear in the
toappear
any UIAin Local
program, Computer itComputer Policy
willpolicy
be used object.
primarily in certain users Windows Remote Assistance scenarios.
Note:
For This
example, setting
you doescreate
can not a Restricted the Local Groups to Policy
only object.
allow specified
If you choose
The Windows to set system service startup to Automatic, perform adequate testing to (for verify example,
that the Alice services and can John) to without
start be members of the Administrators group
user intervention.
Default: None.Remote Assistance program in Windows Vista is a UIA program.
For performance optimization, set unnecessary or unused services to Manual.
There are two ways to apply Restricted Groups policy:
If a user requests remote assistance from an administrator and the remote assistance session is established, any elevation
prompts
Define the appear
policyon in the interactive
a security template, user'swhich secure will desktop
be applied and duringthe administrator's
configurationremote on your session is paused. To avoid
local computer.
pausing
Define the thesetting
remote onadministrator’s
a Group Policysession object (GPO) during directly,
elevationwhich requests, means ,the thatuser themay policy selectgoesthe into"Allow
effectITwith Expert every to respond
refresh of policy. The security settings are re
to User Account
Default: None specified. Control prompts" check box when setting up the remote assistance session. However, selecting this check
box itself requires that the interactive user respond to an elevation prompt on the secure desktop. If the interactive user is
a standard user, the user does not have the required credentials to allow elevation.
Caution
If
If you enable this
a Restricted setting,
Groups ("User
policy Account
is defined Control:
and GroupAllow
PolicyUIAccess applications
is refreshed, to prompt
any current memberfor not
elevation
on the without using
Restricted the policy members list is removed. This
Groups
secure desktop”), , requests for elevation are automatically sent to the interactive desktop (not the secure desktop) and
also appear on the remote administrator's view of the desktop during a Windows Remote Assistance session, and the
Notes
remote administrator is able to provide the appropriate credentials for elevation.
Restricted Groups should be used primarily to configure membership of local groups on workstation or member servers.
This setting
An empty does notlist
Members change
meansthe behavior
that of the UAC
the restricted groupelevation prompt foran
has no members; administrators.
empty Member Of list means that the groups to which the restricted group belong
Reboot Required
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
Yes
Yes
No
No
Yes
No
No
No
No
No
No
No
No
No
Yes
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
Yes
Yes
Yes
Yes
Yes
No
No
No
No
No
No
No
Yes
No
No
No
Yes
Yes
No
No
No
No
Yes
No
No
No
No
No
Yes
No
Yes
No
Yes
Yes
Yes
No
No
No
No
No
No
No
Yes
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No

Windows Server 2008 and Windows Vista SP1 Group Policy Settings

Transféré par

Informations du document

Titre original

Copyright

Formats disponibles

Partager ce document

Partager ou intégrer le document

Options de partage

Avez-vous trouvé ce document utile ?

Ce contenu est-il inapproprié ?

Droits d'auteur :

Formats disponibles

Windows Server 2008 and Windows Vista SP1 Group Policy Settings

Transféré par

Droits d'auteur :

Formats disponibles

Group Policy Settings Reference

Windows Server® 2008 and Windows Vista SP1

Vous aimerez peut-être aussi