Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available
NTC Student GPO
Data collected on: 16/07/2008 08:38:27
General
Details
Domainnorthfleet.int
OwnerNORTHFLEET\Domain Admins
Created27/06/2008 18:39:24
Modified15/07/2008 09:54:46
User Revisions352 (AD), 352 (sysvol)
Computer Revisions0 (AD), 0 (sysvol)
Unique ID{C365BD08-21E1-4A8E-8AEA-D6D89B153F90}
GPO StatusComputer settings disabled
Links
LocationEnforcedLink StatusPath
StudentsYesEnablednorthfleet.int/Students

This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:
Name
NT AUTHORITY\Authenticated Users
WMI Filtering
WMI Filter NameNone
DescriptionNot applicable
Delegation
These groups and users have the specified permission for this GPO
NameAllowed PermissionsInherited
NORTHFLEET\Domain AdminsEdit settings, delete, modify securityNo
NORTHFLEET\Enterprise AdminsEdit settings, delete, modify securityNo
NT AUTHORITY\Authenticated UsersRead (from Security Filtering)No
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERSReadNo
NT AUTHORITY\SYSTEMEdit settings, delete, modify securityNo
Computer Configuration (Disabled)
No settings defined.
User Configuration (Enabled)
Windows Settings
Security Settings
Public Key Policies/Autoenrollment Settings
PolicySetting
Enroll certificates automaticallyEnabled
Renew expired certificates, update pending certificates, and remove revoked certificatesDisabled
Update certificates that use certificate templatesDisabled
Software Restriction Policies
Enforcement
PolicySetting
Apply software restriction policies toAll software files except libraries (such as DLLs)
Apply software restriction policies to the following usersAll users
Designated File Types
File ExtensionFile Type
ADEMicrosoft Office Access Project Extension
ADPMicrosoft Office Access Project
BASBAS File
BATMS-DOS Batch File
CHMCompiled HTML Help file
CMDWindows NT Command Script
COMMS-DOS Application
CPLControl Panel extension
CRTSecurity Certificate
EXEApplication
HLPHelp File
HTAHTML Application
INFSetup Information
INSInternet Communication Settings
ISPInternet Communication Settings
LNKShortcut
MDBMicrosoft Office Access Database
MDEMicrosoft Office Access MDE Database
MSCMicrosoft Common Console Document
MSIWindows Installer Package
MSPWindows Installer Patch
MSTMST File
OCXActiveX Control
PCDPCD File
PIFShortcut to MS-DOS Program
REGRegistration Entries
SCRScreen Saver
SHSScrap object
URLInternet Shortcut
VBVB File
WSCWindows Script Component
Trusted Publishers
Allow the following users to select trusted publishersEnd users
Before trusting a publisher, check the following to determine if the certificate is revokedNone
Software Restriction Policies/Security Levels
PolicySetting
Default Security LevelUnrestricted
Software Restriction Policies/Additional Rules
Path Rules
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%
Security LevelUnrestricted
Description
Date last modified02/07/2008 14:43:57
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%*.exe
Security LevelUnrestricted
Description
Date last modified02/07/2008 14:43:57
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%System32\*.exe
Security LevelUnrestricted
Description
Date last modified02/07/2008 14:43:57
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir%
Security LevelUnrestricted
Description
Date last modified02/07/2008 14:43:57
\\northfleet\netlogon
Security LevelUnrestricted
Description
Date last modified02/07/2008 14:44:58
\\northfleet\sysvol
Security LevelUnrestricted
Description
Date last modified02/07/2008 14:45:08
\\poweredge\inspiration
Security LevelUnrestricted
Description
Date last modified02/07/2008 14:46:09
\\primary\applications
Security LevelUnrestricted
Description
Date last modified02/07/2008 14:45:20
\\primary\sme
Security LevelUnrestricted
Description
Date last modified02/07/2008 14:45:31
c:\
Security LevelUnrestricted
Description
Date last modified02/07/2008 14:44:17
d:\
Security LevelUnrestricted
Description
Date last modified02/07/2008 14:44:26
m:\
Security LevelUnrestricted
Description
Date last modified02/07/2008 14:44:36
p:\
Security LevelUnrestricted
Description
Date last modified02/07/2008 14:44:43
Folder Redirection
Desktop
Setting: Basic (Redirect everyone's folder to the same location)
Path: \\northfleet\sysvol\northfleet.int\Profiles\StudentRedirection\Desktop
Options
Grant user exclusive rights to DesktopDisabled
Move the contents of Desktop to the new locationDisabled
Policy Removal BehaviorLeave contents
My Documents
Setting: Basic (Redirect everyone's folder to the same location)
Path: \\%HOMESHARE%%HOMEPATH%
Options
Grant user exclusive rights to My DocumentsDisabled
Move the contents of My Documents to the new locationDisabled
Policy Removal BehaviorLeave contents
Start Menu
Setting: Basic (Redirect everyone's folder to the same location)
Path: \\northfleet\sysvol\northfleet.int\Profiles\StudentRedirection\Start
Options
Grant user exclusive rights to Start MenuDisabled
Move the contents of Start Menu to the new locationDisabled
Policy Removal BehaviorLeave contents
Internet Explorer Maintenance
Browser User Interface/Customized Title Bar
Title Bar Text
Northfleet Tehnology College
Connection/Proxy Settings
Enable proxy settings
ProtocolServerPort
HTTPinet1-54568080
Secureinet1-54568080
FTPinet1-54568080
Gopherinet1-54568080
Socksinet1-54568080
Exceptions:Do not use proxy server for addresses beginning with
Do not use proxy server for local (intranet) addressesEnabled
URLs/Important URLs
NameURL
Home page URLhttp://intranet/aup.html
Search bar URLNot configured
Online support page URLNot configured
Security/Security Zones and Content Ratings
Security Zones and Privacy
These settings will not apply to users that log on to computers that have the Internet Explorer Enhanced Security Configuration (ESC) enabled. To create settings for users on computers that have ESC enabled, create a new GPO and edit that GPO on a computer where ESC is enabled.
Internet (Security Level: Medium)
.NET Framework-reliant components
Run components not signed with AuthenticodeEnable
Run components signed with AuthenticodeEnable
ActiveX controls and plug-ins
Download signed ActiveX controlsPrompt
Download unsigned ActiveX controlsDisable
Initialize and script ActiveX controls not marked as safeDisable
Run ActiveX controls and plug-insEnable
Script ActiveX controls marked safe for scriptingEnable
Downloads
File downloadEnable
Font downloadEnable
Microsoft VM
Java permissionsHigh safety
Miscellaneous
Access data sources across domainsDisable
Allow META REFRESHEnable
Display mixed contentPrompt
Don't prompt for client certificate selection when no certificates or only one certificate existsDisable
Drag and drop or copy and paste filesEnable
Installation of desktop itemsPrompt
Launching applications and unsafe filesPrompt
Launching programs and files in an IFRAMEPrompt
Navigate sub-frames across different domainsDisable
Software channel permissionsMedium safety
Submit nonencrypted form dataEnable
Userdata persistenceEnable
Scripting
Active scriptingEnable
Allow paste operations via scriptPrompt
Scripting of Java appletsEnable
User Authentication
LogonAutomatic logon only in Intranet zone
Local intranet (Security Level: Custom)
.NET Framework-reliant components
Run components not signed with AuthenticodeEnable
Run components signed with AuthenticodeEnable
ActiveX controls and plug-ins
Download signed ActiveX controlsEnable
Download unsigned ActiveX controlsEnable
Initialize and script ActiveX controls not marked as safeEnable
Run ActiveX controls and plug-insEnable
Script ActiveX controls marked safe for scriptingEnable
Downloads
File downloadEnable
Font downloadEnable
Microsoft VM
Java permissionsMedium safety
Miscellaneous
Access data sources across domainsEnable
Allow META REFRESHEnable
Display mixed contentEnable
Don't prompt for client certificate selection when no certificates or only one certificate existsEnable
Drag and drop or copy and paste filesEnable
Installation of desktop itemsEnable
Launching applications and unsafe filesEnable
Launching programs and files in an IFRAMEEnable
Navigate sub-frames across different domainsEnable
Software channel permissionsLow safety
Submit nonencrypted form dataEnable
Userdata persistenceEnable
Scripting
Active scriptingEnable
Allow paste operations via scriptEnable
Scripting of Java appletsEnable
User Authentication
LogonAutomatic logon with current username and password
Sites
Require server verification (https:) for all sites in this zoneDisabled
Include all local (intranet) sites not listed in other zonesEnabled
Include all sites that bypass the proxy serverEnabled
Include all network paths (UNCs)Enabled
Sites in this zone
file://*.northfleet.int/
file://northfleet/
http://home.samlearning.com/
http://www.ntc.kent.sch.uk/
http://www.samlearning.co.uk/
intranet
Trusted sites (Security Level: Custom)
.NET Framework-reliant components
Run components not signed with AuthenticodeEnable
Run components signed with AuthenticodeEnable
ActiveX controls and plug-ins
Download signed ActiveX controlsPrompt
Download unsigned ActiveX controlsDisable
Initialize and script ActiveX controls not marked as safeDisable
Run ActiveX controls and plug-insEnable
Script ActiveX controls marked safe for scriptingEnable
Downloads
File downloadEnable
Font downloadEnable
Microsoft VM
Java permissionsHigh safety
Miscellaneous
Access data sources across domainsDisable
Allow META REFRESHEnable
Display mixed contentPrompt
Don't prompt for client certificate selection when no certificates or only one certificate existsDisable
Drag and drop or copy and paste filesEnable
Installation of desktop itemsPrompt
Launching applications and unsafe filesPrompt
Launching programs and files in an IFRAMEPrompt
Navigate sub-frames across different domainsDisable
Software channel permissionsMedium safety
Submit nonencrypted form dataEnable
Userdata persistenceEnable
Scripting
Active scriptingEnable
Allow paste operations via scriptPrompt
Scripting of Java appletsEnable
User Authentication
LogonAutomatic logon only in Intranet zone
Sites
Require server verification (https:) for all sites in this zoneDisabled
Sites in this zone
http://dida.edexcel.org.uk/
Restricted sites (Security Level: Custom)
.NET Framework-reliant components
Run components not signed with AuthenticodeDisable
Run components signed with AuthenticodeDisable
ActiveX controls and plug-ins
Download signed ActiveX controlsDisable
Download unsigned ActiveX controlsDisable
Initialize and script ActiveX controls not marked as safeDisable
Run ActiveX controls and plug-insDisable
Script ActiveX controls marked safe for scriptingDisable
Downloads
File downloadDisable
Font downloadPrompt
Microsoft VM
Java permissionsDisable Java
Miscellaneous
Access data sources across domainsDisable
Allow META REFRESHDisable
Display mixed contentPrompt
Don't prompt for client certificate selection when no certificates or only one certificate existsDisable
Drag and drop or copy and paste filesPrompt
Installation of desktop itemsDisable
Launching applications and unsafe filesDisable
Launching programs and files in an IFRAMEDisable
Navigate sub-frames across different domainsDisable
Software channel permissionsHigh safety
Submit nonencrypted form dataPrompt
Userdata persistenceDisable
Scripting
Active scriptingDisable
Allow paste operations via scriptDisable
Scripting of Java appletsDisable
User Authentication
LogonPrompt for user name and password
Sites
Sites in this zone
None
Privacy
Privacy LevelMedium
Web Sites
Always allowNone
Always blockNone
Administrative Templates
Control Panel
PolicySetting
Force classic Control Panel StyleEnabled
Prohibit access to the Control PanelEnabled
Control Panel/Add or Remove Programs
PolicySetting
Go directly to Components WizardEnabled
Hide Add New Programs pageEnabled
Hide Add/Remove Windows Components pageEnabled
Hide Change or Remove Programs pageEnabled
Hide the "Add a program from CD-ROM or floppy disk" optionEnabled
Hide the "Add programs from Microsoft" optionEnabled
Hide the "Add programs from your network" optionEnabled
Hide the Set Program Access and Defaults pageEnabled
Remove Add or Remove ProgramsEnabled
Remove Support InformationEnabled
Control Panel/Display
PolicySetting
Hide Appearance and Themes tabEnabled
Hide Desktop tabEnabled
Hide Screen Saver tabEnabled
Hide Settings tabEnabled
Remove Display in Control PanelEnabled
Screen SaverEnabled
Control Panel/Display/Desktop Themes
PolicySetting
Prevent selection of windows and buttons stylesEnabled
Prohibit selection of font sizeEnabled
Prohibit Theme color selectionEnabled
Remove Theme optionEnabled
Control Panel/Printers
PolicySetting
Browse a common web site to find printersDisabled
Browse the network to find printersDisabled
Control Panel/Regional and Language Options
PolicySetting
Restrict selection of Windows menus and dialogs languageEnabled
Restrict users to the following language:English
Desktop
PolicySetting
Do not add shares of recently opened documents to My Network PlacesEnabled
Hide Internet Explorer icon on desktopDisabled
Hide My Network Places icon on desktopEnabled
Prevent adding, dragging, dropping and closing the Taskbar's toolbarsEnabled
Prohibit adjusting desktop toolbarsEnabled
Prohibit user from changing My Documents pathEnabled
Remove My Computer icon on the desktopEnabled
Remove My Documents icon on the desktopDisabled
Remove Properties from the My Computer context menuEnabled
Remove Properties from the My Documents context menuEnabled
Remove Properties from the Recycle Bin context menuEnabled
Remove Recycle Bin icon from desktopDisabled
Remove the Desktop Cleanup WizardEnabled
Desktop/Active Directory
PolicySetting
Hide Active Directory folderEnabled
Network/Network Connections
PolicySetting
Ability to change properties of an all user remote access connectionDisabled
Ability to delete all user remote access connectionsDisabled
Ability to Enable/Disable a LAN connectionDisabled
Ability to rename all user remote access connectionsDisabled
Ability to rename LAN connectionsDisabled
Ability to rename LAN connections or remote access connections available to all usersDisabled
Enable Windows 2000 Network Connections settings for AdministratorsEnabled
Prohibit access to properties of a LAN connectionEnabled
Prohibit access to properties of components of a LAN connectionEnabled
Prohibit access to properties of components of a remote access connectionEnabled
Prohibit access to the Advanced Settings item on the Advanced menuEnabled
Prohibit access to the New Connection WizardEnabled
Prohibit access to the Remote Access Preferences item on the Advanced menuEnabled
Prohibit adding and removing components for a LAN or remote access connectionEnabled
Prohibit changing properties of a private remote access connectionEnabled
Prohibit connecting and disconnecting a remote access connectionEnabled
Prohibit deletion of remote access connectionsEnabled
Prohibit Enabling/Disabling components of a LAN connectionEnabled
Prohibit renaming private remote access connectionsEnabled
Prohibit TCP/IP advanced configurationEnabled
Prohibit viewing of status for an active connectionEnabled
Turn off notifications when a connection has only limited or no connectivityDisabled
Network/Offline Files
PolicySetting
Action on server disconnectEnabled
Specify how the system is to respond when a network server
becomes unavailable.
Action: Never go offline
Never go offline = Server's files are unavailable to local computer
Work offline = Server's files are available to local computer
PolicySetting
Do not automatically make redirected folders available offlineEnabled
Prevent use of Offline Files folderEnabled
Prohibit user configuration of Offline FilesEnabled
Prevents users from changing any cache configuration settings.
PolicySetting
Remove 'Make Available Offline'Enabled
Synchronize all offline files before logging offDisabled
Synchronize all offline files when logging onDisabled
Synchronize offline files before suspendDisabled
Turn off reminder balloonsEnabled
Shared Folders
PolicySetting
Allow shared folders to be publishedDisabled
Start Menu and Taskbar
PolicySetting
Add Logoff to the Start MenuEnabled
Do not display any custom toolbars in the taskbarEnabled
Force classic Start MenuEnabled
Gray unavailable Windows Installer programs Start Menu shortcutsEnabled
Lock the TaskbarEnabled
Prevent changes to Taskbar and Start Menu SettingsEnabled
Remove access to the context menus for the taskbarEnabled
Remove Balloon Tips on Start Menu itemsEnabled
Remove common program groups from Start MenuEnabled
Remove Drag-and-drop context menus on the Start MenuEnabled
Remove frequent programs list from the Start MenuEnabled
Remove Help menu from Start MenuEnabled
Remove links and access to Windows UpdateEnabled
Remove My Music icon from Start MenuEnabled
Remove My Network Places icon from Start MenuEnabled
Remove My Pictures icon from Start MenuEnabled
Remove Network Connections from Start MenuEnabled
Remove pinned programs list from the Start MenuEnabled
Remove Run menu from Start MenuEnabled
Remove Search menu from Start MenuEnabled
Remove Set Program Access and Defaults from Start menuEnabled
Remove the "Undock PC" button from the Start MenuEnabled
Turn off personalized menusEnabled
System
PolicySetting
Code signing for device driversEnabled
When Windows detects a driver file without a digital signature:Ignore
PolicySetting
Don't display the Getting Started welcome screen at logonEnabled
Don't run specified Windows applicationsEnabled
List of disallowed applications
,shearst.exe
freecell.exe
pinball.exe
sol.exe
spider.exe
winmine.exe
PolicySetting
Prevent access to registry editing toolsEnabled
Disable regedit from running silently?No
PolicySetting
Prevent access to the command promptEnabled
Disable the command prompt script processing also?No
PolicySetting
Turn off AutoplayDisabled
Windows Automatic UpdatesDisabled
System/Ctrl+Alt+Del Options
PolicySetting
Remove Change PasswordDisabled
Remove Lock ComputerEnabled
Remove LogoffDisabled
Remove Task ManagerEnabled
System/Internet Communication Management/Internet Communication settings
PolicySetting
Turn off Internet download for Web publishing and online ordering wizardsEnabled
Turn off the "Order Prints" picture taskEnabled
Turn off the "Publish to Web" task for files and foldersEnabled
Turn off the Windows Messenger Customer Experience Improvement ProgramEnabled
Turn off Windows Movie Maker online Web linksEnabled
System/Scripts
PolicySetting
Run legacy logon scripts hiddenEnabled
Run logoff scripts visibleDisabled
Run logon scripts visibleDisabled
Windows Components/Application Compatibility
PolicySetting
Prevent access to 16-bit applicationsDisabled
Windows Components/Attachment Manager
PolicySetting
Default risk level for file attachmentsEnabled
Set the default risk levelLow Risk
Windows Components/Internet Explorer
PolicySetting
Disable "Configuring History"Enabled
Days to keep pages in History 
PolicySetting
Disable changing accessibility settingsEnabled
Disable changing Advanced page settingsEnabled
Disable changing Automatic Configuration settingsEnabled
Disable changing Calendar and Contact settingsEnabled
Disable changing color settingsEnabled
Disable changing connection settingsEnabled
Disable changing home page settingsEnabled
Home Page 
PolicySetting
Disable changing link color settingsEnabled
Disable changing Messaging settingsEnabled
Disable changing proxy settingsEnabled
Disable changing ratings settingsEnabled
Disable changing Temporary Internet files settingsEnabled
Disable external branding of Internet ExplorerEnabled
Disable importing and exporting of favorites and feedsEnabled
Disable Internet Connection wizardEnabled
Disable the Reset Web Settings featureEnabled
Identity Manager: Prevent users from using IdentitiesEnabled
Search: Disable Find Files via F3 within the browserEnabled
Search: Disable Search CustomizationEnabled
Turn off Crash DetectionEnabled
Windows Components/Internet Explorer/Administrator Approved Controls
PolicySetting
InvestorDisabled
Microsoft ChatDisabled
Microsoft Survey ControlDisabled
MSNBCDisabled
Windows Components/Internet Explorer/Browser menus
PolicySetting
Disable Context menuEnabled
Disable Open in New Window menu optionEnabled
Disable Save this program to disk optionEnabled
File menu: Disable New menu optionEnabled
File menu: Disable Open menu optionEnabled
File menu: Disable Save As Web Page CompleteEnabled
File menu: Disable Save As... menu optionEnabled
Help menu: Remove 'For Netscape Users' menu optionEnabled
Help menu: Remove 'Send Feedback' menu optionEnabled
Help menu: Remove 'Tip of the Day' menu optionEnabled
Help menu: Remove 'Tour' menu optionEnabled
Tools menu: Disable Internet Options... menu optionEnabled
View menu: Disable Full Screen menu optionEnabled
View menu: Disable Source menu optionEnabled
Windows Components/Internet Explorer/Internet Control Panel
PolicySetting
Disable the Advanced pageEnabled
Disable the Connections pageEnabled
Disable the Content pageEnabled
Disable the General pageEnabled
Disable the Privacy pageEnabled
Disable the Programs pageEnabled
Disable the Security pageEnabled
Windows Components/Internet Explorer/Internet Control Panel/Advanced Page
PolicySetting
Allow active content from CDs to run on user machinesEnabled
Automatically check for Internet Explorer updatesDisabled
Empty Temporary Internet Files folder when browser is closedEnabled
Windows Components/Internet Explorer/Internet Control Panel/Security Page
PolicySetting
Intranet Sites: Include all local (intranet) sites not listed in other zonesEnabled
Intranet Sites: Include all network paths (UNCs)Enabled
Windows Components/Internet Explorer/Internet Control Panel/Security Page/Internet Zone
PolicySetting
Use Pop-up BlockerDisabled
Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone
PolicySetting
Access data sources across domainsEnabled
Access data sources across domainsEnable
PolicySetting
Allow active content over restricted protocols to access my computerEnabled
Allow active content over restricted protocols to access my computerEnable
PolicySetting
Allow active scriptingEnabled
Allow active scriptingEnable
PolicySetting
Allow binary and script behaviorsEnabled
Allow Binary and Script BehaviorsEnable
PolicySetting
Allow cut, copy or paste operations from the clipboard via scriptEnabled
Allow paste operations via scriptEnable
PolicySetting
Allow drag and drop or copy and paste filesEnabled
Allow drag and drop or copy and paste filesEnable
PolicySetting
Allow file downloadsEnabled
Allow file downloadsEnable
PolicySetting
Allow font downloadsEnabled
Allow font downloadsEnable
PolicySetting
Allow script-initiated windows without size or position constraintsEnabled
Allow script-initiated windows without size or position constraintsEnable
PolicySetting
Allow ScriptletsEnabled
ScriptletsEnable
PolicySetting
Automatic prompting for ActiveX controlsEnabled
Automatic prompting for ActiveX controlsEnable
PolicySetting
Automatic prompting for file downloadsEnabled
Automatic prompting for file downloadsEnable
PolicySetting
Display mixed contentEnabled
Display mixed contentEnable
PolicySetting
Do not prompt for client certificate selection when no certificates or only one certificate exists.Enabled
Do not prompt for client certificate selection when no certificates or only one certificate exists.Enable
PolicySetting
Download signed ActiveX controlsEnabled
Download signed ActiveX controlsEnable
PolicySetting
Download unsigned ActiveX controlsEnabled
Download unsigned ActiveX controlsEnable
PolicySetting
Initialize and script ActiveX controls not marked as safeEnabled
Initialize and script ActiveX controls not marked as safeEnable
PolicySetting
Java permissionsEnabled
Java permissionsLow safety
PolicySetting
Launching applications and files in an IFRAMEEnabled
Launching applications and files in an IFRAMEEnable
PolicySetting
Logon optionsEnabled
Logon optionsAutomatic logon with current username and password
PolicySetting
Navigate sub-frames across different domainsEnabled
Navigate sub-frames across different domainsEnable
PolicySetting
Run .NET Framework-reliant components not signed with AuthenticodeEnabled
Run .NET Framework-reliant components not signed with AuthenticodeEnable
PolicySetting
Run .NET Framework-reliant components signed with AuthenticodeEnabled
Run .NET Framework-reliant components signed with AuthenticodeEnable
PolicySetting
Run ActiveX controls and pluginsEnabled
Run ActiveX controls and pluginsEnable
PolicySetting
Script ActiveX controls marked safe for scriptingEnabled
Script ActiveX controls marked safe for scriptingEnable
PolicySetting
Scripting of Java appletsEnabled
Scripting of Java appletsEnable
PolicySetting
Submit non-encrypted form dataEnabled
Submit non-encrypted form dataEnable
PolicySetting
Use Pop-up BlockerEnabled
Use Pop-up BlockerDisable
Windows Components/Internet Explorer/Offline Pages
PolicySetting
Disable adding channelsEnabled
Disable adding schedules for offline pagesEnabled
Disable all scheduled offline pagesEnabled
Disable channel user interface completelyEnabled
Disable downloading of site subscription contentEnabled
Disable editing and creating of schedule groupsEnabled
Disable editing schedules for offline pagesEnabled
Disable offline page hit loggingEnabled
Disable removing channelsEnabled
Disable removing schedules for offline pagesEnabled
Windows Components/Internet Explorer/Toolbars
PolicySetting
Configure Toolbar ButtonsEnabled
Show Back buttonEnabled
Show Forward buttonEnabled
Show Stop buttonEnabled
Show Refresh buttonEnabled
Show Home buttonEnabled
Show Search buttonDisabled
Show Favorites buttonDisabled
Show History buttonDisabled
Show Folders buttonDisabled
Show Fullscreen buttonDisabled
Show Tools buttonDisabled
Show Mail buttonDisabled
Show Font size buttonEnabled
Show Print buttonEnabled
Show Edit buttonDisabled
Show Discussions buttonDisabled
Show Cut buttonEnabled
Show Copy buttonEnabled
Show Paste buttonEnabled
Show Encoding buttonDisabled
PolicySetting
Disable customizing browser toolbar buttonsEnabled
Disable customizing browser toolbarsEnabled
Windows Components/Microsoft Management Console
PolicySetting
Restrict the user from entering author modeEnabled
Restrict users to the explicitly permitted list of snap-insEnabled
Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins
PolicySetting
Active Directory Users and ComputersDisabled
Windows Components/NetMeeting
PolicySetting
Disable ChatEnabled
Disable Directory servicesEnabled
Disable NetMeeting 2.x WhiteboardEnabled
Disable WhiteboardEnabled
Prevent adding Directory serversEnabled
Prevent automatic acceptance of CallsEnabled
Prevent changing Call placement methodEnabled
Prevent receiving filesEnabled
Prevent sending filesEnabled
Prevent viewing Web directoryEnabled
Windows Components/NetMeeting/Application Sharing
PolicySetting
Disable application SharingEnabled
Prevent Application Sharing in true colorEnabled
Prevent ControlEnabled
Prevent Desktop SharingEnabled
Prevent SharingEnabled
Prevent Sharing Command PromptsEnabled
Prevent Sharing Explorer windowsEnabled
Windows Components/NetMeeting/Audio & Video
PolicySetting
Disable AudioEnabled
Disable full duplex AudioEnabled
Prevent changing DirectSound Audio settingEnabled
Prevent receiving VideoEnabled
Prevent sending VideoEnabled
Windows Components/NetMeeting/Options Page
PolicySetting
Disable the Advanced Calling buttonEnabled
Hide the Audio pageEnabled
Hide the General pageEnabled
Hide the Security pageEnabled
Hide the Video pageEnabled
Windows Components/Task Scheduler
PolicySetting
Hide Advanced Properties Checkbox in Add Scheduled Task WizardEnabled
Hide Property PagesEnabled
Prevent Task Run or EndEnabled
Prohibit BrowseEnabled
Prohibit Drag-and-DropEnabled
Prohibit New Task CreationEnabled
Prohibit Task DeletionEnabled
Windows Components/Windows Explorer
PolicySetting
Display confirmation dialog when deleting filesEnabled
Hide these specified drives in My ComputerEnabled
Pick one of the following combinationsRestrict C drive only
PolicySetting
Hides the Manage item on the Windows Explorer context menuEnabled
No "Computers Near Me" in My Network PlacesEnabled
No "Entire Network" in My Network PlacesEnabled
Prevent access to drives from My ComputerEnabled
Pick one of the following combinationsRestrict C drive only
PolicySetting
Remove "Map Network Drive" and "Disconnect Network Drive"Enabled
Remove DFS tabEnabled
Remove Hardware tabEnabled
Remove Search button from Windows ExplorerEnabled
Remove Security tabEnabled
Remove Shared Documents from My ComputerEnabled
Remove UI to change keyboard navigation indicator settingEnabled
Remove UI to change menu animation settingEnabled
Remove Windows Explorer's default context menuEnabled
Removes the Folder Options menu item from the Tools menuEnabled
Turn off Windows+X hotkeysEnabled
Turn on Classic ShellEnabled
Windows Components/Windows Explorer/Common Open File Dialog
PolicySetting
Hide the common dialog places barEnabled
Windows Components/Windows Installer
PolicySetting
Prevent removable media source for any installEnabled
Windows Components/Windows Media Player
PolicySetting
Prevent Radio Station Preset RetrievalEnabled
Windows Components/Windows Media Player/Networking
PolicySetting
Hide Network TabEnabled
Windows Components/Windows Media Player/User Interface
PolicySetting
Hide Privacy TabEnabled
Hide Security TabEnabled
Windows Components/Windows Update
PolicySetting
Remove access to use all Windows Update featuresEnabled
Extra Registry Settings
Display names for some settings cannot be found. You might be able to resolve this issue by updating the .ADM files used by Group Policy Management.

SettingState
Software\Policies\Microsoft\Internet Explorer\New Windows\Allow\http://dida.edexcel.org.uk/home/spb/sept07/unit1/http://dida.edexcel.org.uk/home/spb/sept07/unit1/
Software\Policies\Microsoft\Internet Explorer\New Windows\Allow\http://www1.edexcel.org.uk/spbs2007/d201-test/html/SPB201Index.shtmhttp://www1.edexcel.org.uk/spbs2007/d201-test/html/SPB201Index.shtm
Software\Policies\Microsoft\Internet Explorer\New Windows\Allow\www.ntc.kent.sch.ukwww.ntc.kent.sch.uk
Software\Policies\Microsoft\Internet Explorer\New Windows\ListBox_Support_Allow1