Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available
Students
Data collected on: 21/08/2008 14:24:17
General
Details
DomainChildDomainName.ParentDomainName.Local
OwnerChildDomainName\Domain Admins
Created21/08/2008 08:24:48
Modified21/08/2008 14:18:02
User Revisions331 (AD), 331 (sysvol)
Computer Revisions30 (AD), 30 (sysvol)
Unique ID{ActiveDirectoryUniqueIdentifier}
GPO StatusEnabled
Links
LocationEnforcedLink StatusPath
School Name StudentsNoEnabledChildDomainName.ParentDomainName.Local/School Name Students

This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:
Name
NT AUTHORITY\Authenticated Users
WMI Filtering
WMI Filter NameNone
DescriptionNot applicable
Delegation
These groups and users have the specified permission for this GPO
NameAllowed PermissionsInherited
BEAUSANDVER\Enterprise AdminsEdit settings, delete, modify securityNo
NT AUTHORITY\Authenticated UsersRead (from Security Filtering)No
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERSReadNo
NT AUTHORITY\SYSTEMEdit settings, delete, modify securityNo
ChildDomainName\Domain AdminsEdit settings, delete, modify securityNo
Computer Configuration (Enabled)
Policies
Administrative Templates
Policy definitions (ADMX files) retrieved from the local machine.
System/User Profiles
PolicySettingComment
Add the Administrators security group to roaming user profilesEnabled
Delete user profiles older than a specified number of days on system restartEnabled
Delete user profiles older than (days)60
User Configuration (Enabled)
Policies
Windows Settings
Security Settings
Software Restriction Policies
Enforcement
PolicySetting
Apply software restriction policies to the followingAll software files except libraries (such as DLLs)
Apply software restriction policies to the following usersAll users
When applying software restriction policiesIgnore certificate rules
Designated File Types
File ExtensionFile Type
ADEADE File
ADPADP File
BASBAS File
BATWindows Batch File
CHMCompiled HTML Help file
CMDWindows Command Script
COMMS-DOS Application
CPLControl Panel Item
CRTSecurity Certificate
EXEApplication
HLPHelp File
HTAHTML Application
INFSetup Information
INSINS File
ISPISP File
LNKShortcut
MDBMDB File
MDEMDE File
MSCMicrosoft Common Console Document
MSIWindows Installer Package
MSPWindows Installer Patch
MSTMST File
OCXActiveX Control
PCDPCD File
PIFShortcut to MS-DOS Program
REGRegistration Entries
SCRScreen Saver
SHSSHS File
URLInternet Shortcut
VBVB File
WSCWindows Script Component
Trusted Publishers
Trusted publisher managementAllow all administrators and users to manage user's own Trusted Publishers
Certificate verificationNone
Software Restriction Policies/Security Levels
PolicySetting
Default Security LevelUnrestricted
Software Restriction Policies/Additional Rules
Internet Zone Rules
Local computer
Security LevelDisallowed
DescriptionThis zone contains Web sites that are on your local computer.
Date last modified21/08/2008 08:59:33
Path Rules
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%
Security LevelUnrestricted
Description
Date last modified21/08/2008 08:53:39
%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir%
Security LevelUnrestricted
Description
Date last modified21/08/2008 08:53:39
U:\*.bat
Security LevelDisallowed
Description
Date last modified21/08/2008 08:58:37
U:\*.exe
Security LevelDisallowed
Description
Date last modified21/08/2008 08:58:25
Folder Redirection
Desktop
Setting: Basic (Redirect everyone's folder to the same location)
Path: \\DomainControllerName\commonfolders$\Desktops\Students
Options
Grant user exclusive rights to DesktopDisabled
Move the contents of Desktop to the new locationDisabled
Also apply redirection policy to Windows 2000, Windows 2000 server, Windows XP, and Windows Server 2003 operating systemsEnabled
Policy Removal BehaviorLeave contents
Start Menu
Setting: Basic (Redirect everyone's folder to the same location)
Path: \\DomainControllerName\commonfolders$\Start Menus\Students
Options
Grant user exclusive rights to Start MenuDisabled
Move the contents of Start Menu to the new locationDisabled
Also apply redirection policy to Windows 2000, Windows 2000 server, Windows XP, and Windows Server 2003 operating systemsEnabled
Policy Removal BehaviorLeave contents
Internet Explorer Maintenance
Browser User Interface/Customized Title Bar
Title Bar Text
School Name
Connection/Automatic Browser Configuration
PolicySetting
Automatically detect configuration settingsDisabled
Automatic Browser ConfigurationNot configured
Connection/Proxy Settings
Enable proxy settings
ProtocolServerPort
HTTPISAServer.Domain.LocalPort
SecureISAServer.Domain.LocalPort
FTPISAServer.Domain.LocalPort
GopherISAServer.Domain.LocalPort
SocksISAServer.Domain.LocalPort
Exceptions:Do not use proxy server for addresses beginning withAddress 1, Address 2, Address 3, Address 4, Address 5,
Do not use proxy server for local (intranet) addressesEnabled
URLs/Important URLs
NameURL
Home page URLhttp:\\intranet.ChildDomainNamechool
Search bar URLNot configured
Online support page URLNot configured
URLs/Favorites and Links
PolicySetting
Place favorites and links at the top of the list in the order specified belowNot configured
Delete existing Favorites and Links, if presentEnabled
Only delete the favorites created by the administratorNot configured
Delete existing channels, if presentNot configured
Favorites
NameURL
School Homepagehttp://www.ChildDomainNamechool
Student E-Mailhttps://LEAGridWebMail
Google Search Enginehttp://www.google.co.uk
UCAShttp://www.ucas.com
Security/Security Zones and Content Ratings
Security Zones and Privacy (Enhanced Security Configuration Enabled)
These settings will only apply to users when they log on to computers that have the Internet Explorer Enhanced Security Configuration enabled.
Internet (Security Level: Custom)
.NET Framework-reliant components
Run components not signed with AuthenticodeDisable
Run components signed with AuthenticodeDisable
ActiveX controls and plug-ins
Download signed ActiveX controlsEnable
Download unsigned ActiveX controlsEnable
Initialize and script ActiveX controls not marked as safePrompt
Run ActiveX controls and plug-insEnable
Script ActiveX controls marked safe for scriptingEnable
Downloads
File downloadEnable
Font downloadEnable
Microsoft VM
Java permissionsMedium safety
Miscellaneous
Access data sources across domainsEnable
Allow META REFRESHEnable
Display mixed contentPrompt
Don't prompt for client certificate selection when no certificates or only one certificate existsEnable
Drag and drop or copy and paste filesEnable
Installation of desktop itemsEnable
Launching applications and unsafe filesEnable
Launching programs and files in an IFRAMEEnable
Navigate sub-frames across different domainsEnable
Software channel permissionsLow safety
Submit nonencrypted form dataEnable
Userdata persistenceEnable
Scripting
Active scriptingEnable
Allow paste operations via scriptEnable
Scripting of Java appletsEnable
User Authentication
LogonAutomatic logon with current username and password
Local intranet (Security Level: Custom)
.NET Framework-reliant components
Run components not signed with AuthenticodeDisable
Run components signed with AuthenticodeDisable
ActiveX controls and plug-ins
Download signed ActiveX controlsEnable
Download unsigned ActiveX controlsEnable
Initialize and script ActiveX controls not marked as safePrompt
Run ActiveX controls and plug-insEnable
Script ActiveX controls marked safe for scriptingEnable
Downloads
File downloadEnable
Font downloadEnable
Microsoft VM
Java permissionsMedium safety
Miscellaneous
Access data sources across domainsEnable
Allow META REFRESHEnable
Display mixed contentPrompt
Don't prompt for client certificate selection when no certificates or only one certificate existsEnable
Drag and drop or copy and paste filesEnable
Installation of desktop itemsEnable
Launching applications and unsafe filesEnable
Launching programs and files in an IFRAMEEnable
Navigate sub-frames across different domainsEnable
Software channel permissionsLow safety
Submit nonencrypted form dataEnable
Userdata persistenceEnable
Scripting
Active scriptingEnable
Allow paste operations via scriptEnable
Scripting of Java appletsEnable
User Authentication
LogonAutomatic logon with current username and password
Sites
Require server verification (https:) for all sites in this zoneDisabled
Include all local (intranet) sites not listed in other zonesDisabled
Include all sites that bypass the proxy serverDisabled
Include all network paths (UNCs)Disabled
Sites in this zone
hcp:////system/
http://localhost/
https://localhost/
Trusted sites (Security Level: Custom)
.NET Framework-reliant components
Run components not signed with AuthenticodeDisable
Run components signed with AuthenticodeDisable
ActiveX controls and plug-ins
Download signed ActiveX controlsEnable
Download unsigned ActiveX controlsEnable
Initialize and script ActiveX controls not marked as safePrompt
Run ActiveX controls and plug-insEnable
Script ActiveX controls marked safe for scriptingEnable
Downloads
File downloadEnable
Font downloadEnable
Microsoft VM
Java permissionsMedium safety
Miscellaneous
Access data sources across domainsEnable
Allow META REFRESHEnable
Display mixed contentPrompt
Don't prompt for client certificate selection when no certificates or only one certificate existsEnable
Drag and drop or copy and paste filesEnable
Installation of desktop itemsEnable
Launching applications and unsafe filesEnable
Launching programs and files in an IFRAMEEnable
Navigate sub-frames across different domainsEnable
Software channel permissionsLow safety
Submit nonencrypted form dataEnable
Userdata persistenceEnable
Scripting
Active scriptingEnable
Allow paste operations via scriptEnable
Scripting of Java appletsEnable
User Authentication
LogonAutomatic logon with current username and password
Sites
Require server verification (https:) for all sites in this zoneDisabled
Sites in this zone
about://*.security_mmc.exe/
http://*.update.microsoft.com/
http://*.windowsupdate.com/
http://*.windowsupdate.microsoft.com/
http://go.microsoft.com/
http://msdn.microsoft.com/
http://oca.microsoft.com/
http://runonce.msn.com/
http://support.microsoft.com/
http://technet.microsoft.com/
http://update.microsoft.com/
http://windowsupdate.microsoft.com/
http://www.microsoft.com/
https://*.update.microsoft.com/
https://*.windowsupdate.microsoft.com/
https://oca.microsoft.com/
https://update.microsoft.com/
https://windowsupdate.microsoft.com/
Restricted sites (Security Level: Custom)
.NET Framework-reliant components
Run components not signed with AuthenticodeDisable
Run components signed with AuthenticodeDisable
ActiveX controls and plug-ins
Download signed ActiveX controlsEnable
Download unsigned ActiveX controlsEnable
Initialize and script ActiveX controls not marked as safePrompt
Run ActiveX controls and plug-insEnable
Script ActiveX controls marked safe for scriptingEnable
Downloads
File downloadEnable
Font downloadEnable
Microsoft VM
Java permissionsMedium safety
Miscellaneous
Access data sources across domainsEnable
Allow META REFRESHEnable
Display mixed contentPrompt
Don't prompt for client certificate selection when no certificates or only one certificate existsEnable
Drag and drop or copy and paste filesEnable
Installation of desktop itemsEnable
Launching applications and unsafe filesEnable
Launching programs and files in an IFRAMEEnable
Navigate sub-frames across different domainsEnable
Software channel permissionsLow safety
Submit nonencrypted form dataEnable
Userdata persistenceEnable
Scripting
Active scriptingEnable
Allow paste operations via scriptEnable
Scripting of Java appletsEnable
User Authentication
LogonAutomatic logon with current username and password
Sites
Sites in this zone
None
Privacy
Privacy LevelMedium
Web Sites
Always allowNone
Always blockNone
Administrative Templates
Policy definitions (ADMX files) retrieved from the local machine.
Control Panel
PolicySettingComment
Prohibit access to the Control PanelEnabled
Control Panel/Add or Remove Programs
PolicySettingComment
Remove Support InformationEnabled
Control Panel/Display
PolicySettingComment
Password protect the screen saverDisabled
Prevent changing wallpaperEnabled
Screen SaverDisabled
Screen Saver executable nameDisabled
Control Panel/Display/Desktop Themes
PolicySettingComment
Prevent selection of windows and buttons stylesEnabled
Prohibit selection of font sizeEnabled
Prohibit Theme color selectionEnabled
Remove Theme optionEnabled
Control Panel/Printers
PolicySettingComment
Browse a common web site to find printersDisabled
Browse the network to find printersDisabled
Default Active Directory path when searching for printersDisabled
Prevent addition of printersEnabled
Prevent deletion of printersEnabled
Control Panel/Regional and Language Options
PolicySettingComment
Restrict selection of Windows menus and dialogs languageEnabled
Restrict users to the following language:English
Desktop
PolicySettingComment
Do not add shares of recently opened documents to Network LocationsEnabled
Don't save settings at exitEnabled
Hide and disable all items on the desktopDisabled
Hide Internet Explorer icon on desktopEnabled
Hide Network Locations icon on desktopEnabled
Prevent adding, dragging, dropping and closing the Taskbar's toolbarsEnabled
Prohibit adjusting desktop toolbarsEnabled
Prohibit User from manually redirecting Profile FoldersEnabled
Remove My Documents icon on the desktopEnabled
Remove Properties from the Computer icon context menuEnabled
Remove Properties from the Documents icon context menuEnabled
Remove Properties from the Recycle Bin context menuEnabled
Remove Recycle Bin icon from desktopDisabled
Remove the Desktop Cleanup WizardEnabled
Desktop/Active Directory
PolicySettingComment
Enable filter in Find dialog boxDisabled
Hide Active Directory folderEnabled
Maximum size of Active Directory searchesEnabled
Number of objects returned: 0
Desktop/Desktop
PolicySettingComment
Desktop WallpaperEnabled
Wallpaper Name:\\DomainControllerName\commonfolders$\Wallpapers\Students\TestWallpaper.bmp
Example: Using a local path: C:\windows\web\wallpaper\home.jpg
Example: Using a UNC path: \\Server\Share\Corp.jpg
Wallpaper Style:Stretch
PolicySettingComment
Disable Active DesktopEnabled
Disallows HTML and Jpg Wallpaper
PolicySettingComment
Enable Active DesktopDisabled
Prohibit adding itemsEnabled
Prohibit changesEnabled
Prohibit deleting itemsEnabled
Prohibit editing itemsEnabled
Network/Network Connections
PolicySettingComment
Ability to change properties of an all user remote access connectionDisabled
Ability to delete all user remote access connectionsDisabled
Ability to Enable/Disable a LAN connectionDisabled
Ability to rename all user remote access connectionsDisabled
Ability to rename LAN connectionsDisabled
Ability to rename LAN connections or remote access connections available to all usersDisabled
Prohibit access to properties of a LAN connectionEnabled
Prohibit access to properties of components of a LAN connectionEnabled
Prohibit access to properties of components of a remote access connectionEnabled
Prohibit access to the Advanced Settings item on the Advanced menuEnabled
Prohibit access to the New Connection WizardEnabled
Prohibit access to the Remote Access Preferences item on the Advanced menuEnabled
Prohibit adding and removing components for a LAN or remote access connectionEnabled
Prohibit changing properties of a private remote access connectionEnabled
Prohibit connecting and disconnecting a remote access connectionEnabled
Prohibit deletion of remote access connectionsEnabled
Prohibit Enabling/Disabling components of a LAN connectionEnabled
Prohibit renaming private remote access connectionsEnabled
Prohibit TCP/IP advanced configurationEnabled
Prohibit viewing of status for an active connectionEnabled
Network/Offline Files
PolicySettingComment
Initial reminder balloon lifetimeDisabled
Reminder balloon lifetimeDisabled
Remove 'Make Available Offline'Enabled
Synchronize all offline files before logging offDisabled
Synchronize all offline files when logging onDisabled
Synchronize offline files before suspendDisabled
Turn off reminder balloonsEnabled
Network/Windows Connect Now
PolicySettingComment
Prohibit Access of the Windows Connect Now wizardsEnabled
Shared Folders
PolicySettingComment
Allow DFS roots to be publishedDisabled
Allow shared folders to be publishedDisabled
Start Menu and Taskbar
PolicySettingComment
Add "Run in Separate Memory Space" check box to Run dialog boxDisabled
Add Logoff to the Start MenuEnabled
Add the Run command to the Start MenuDisabled
Clear history of recently opened documents on exitEnabled
Clear the recent programs list for new usersEnabled
Do not keep history of recently opened documentsEnabled
Do not search communicationsEnabled
Do not search filesEnabled
Do not use the search-based method when resolving shell shortcutsEnabled
Do not use the tracking-based method when resolving shell shortcutsEnabled
Force classic Start MenuDisabled
Lock all taskbar settingsEnabled
Lock the TaskbarEnabled
Prevent changes to Taskbar and Start Menu SettingsEnabled
Prevent grouping of taskbar itemsEnabled
Remove access to the context menus for the taskbarEnabled
Remove Balloon Tips on Start Menu itemsEnabled
Remove common program groups from Start MenuEnabled
Remove Default Programs link from the Start menu.Enabled
Remove Documents icon from Start MenuEnabled
Remove Drag-and-drop context menus on the Start MenuEnabled
Remove Favorites menu from Start MenuEnabled
Remove frequent programs list from the Start MenuEnabled
Remove Games link from Start MenuEnabled
Remove Help menu from Start MenuEnabled
Remove links and access to Windows UpdateEnabled
Remove Music icon from Start MenuEnabled
Remove Network Connections from Start MenuEnabled
Remove Network icon from Start MenuEnabled
Remove Pictures icon from Start MenuEnabled
Remove pinned programs list from the Start MenuEnabled
Remove programs on Settings menuEnabled
Remove Recent Items menu from Start MenuEnabled
Remove Run menu from Start MenuEnabled
Remove Search link from Start MenuEnabled
Remove the "Undock PC" button from the Start MenuEnabled
Remove the battery meterEnabled
Show QuickLaunch on TaskbarDisabled
Turn off all balloon notificationsEnabled
Turn off notification area cleanupEnabled
Turn off personalized menusEnabled
System
PolicySettingComment
Don't display the Getting Started welcome screen at logonEnabled
Prevent access to registry editing toolsEnabled
Disable regedit from running silently?Yes
PolicySettingComment
Prevent access to the command promptEnabled
Disable the command prompt script processing also?No
PolicySettingComment
Restrict these programs from being launched from HelpEnabled
Enter executables separated by commas:msinfo32.exe,msconfig.exe
Example: calc.exe,paint.exe
PolicySettingComment
Windows Automatic UpdatesDisabled
System/Ctrl+Alt+Del Options
PolicySettingComment
Remove Task ManagerEnabled
System/Driver Installation
PolicySettingComment
Turn off Windows Update device driver search promptEnabled
System/Folder Redirection
PolicySettingComment
Do not automatically make redirected folders available offlineEnabled
System/Group Policy
PolicySettingComment
Disallow Interactive Users from generating Resultant Set of Policy dataEnabled
System/Power Management
PolicySettingComment
Prompt for password on resume from hibernate / suspendDisabled
System/Scripts
PolicySettingComment
Run logoff scripts visibleDisabled
Run logon scripts synchronouslyEnabled
Run logon scripts visibleDisabled
System/User Profiles
PolicySettingComment
Exclude directories in roaming profileEnabled
Prevent the following directories from roaming with the profile:Local Settings;Temporary Internet Files;Temp
You can enter multiple directory names, semi-colon separated,
all relative to the root of the user's profile
Windows Components/AutoPlay Policies
PolicySettingComment
Turn off AutoplayEnabled
Turn off Autoplay on:All drives
Windows Components/Internet Explorer
PolicySettingComment
Disable AutoComplete for formsEnabled
Disable changing accessibility settingsEnabled
Disable changing Advanced page settingsEnabled
Disable changing Automatic Configuration settingsEnabled
Disable changing Calendar and Contact settingsEnabled
Disable changing certificate settingsEnabled
Disable changing color settingsEnabled
Disable changing connection settingsEnabled
Disable changing default browser checkEnabled
Disable changing font settingsEnabled
Disable changing home page settingsEnabled
Home Pagehttp://intranet.ChildDomainNamechool.net/
PolicySettingComment
Disable changing language settingsEnabled
Disable changing link color settingsEnabled
Disable changing Messaging settingsEnabled
Disable changing Profile Assistant settingsEnabled
Disable changing proxy settingsEnabled
Disable changing ratings settingsEnabled
Disable changing Temporary Internet files settingsEnabled
Disable external branding of Internet ExplorerEnabled
Disable importing and exporting of favorites and feedsEnabled
Disable Internet Connection wizardEnabled
Disable the Reset Web Settings featureEnabled
Display error message on proxy script download failureDisabled
Do not allow users to enable or disable add-onsEnabled
Identity Manager: Prevent users from using IdentitiesEnabled
Pop-up allow listDisabled
Prevent participation in the Customer Experience Improvement ProgramEnabled
Prevent performance of First Run Customize settingsEnabled
Select your choiceGo directly to "Welcome To IE" page
PolicySettingComment
Restrict changing the default search providerEnabled
Restrict search providers to a specific list of providersEnabled
Search: Disable Find Files via F3 within the browserEnabled
Search: Disable Search CustomizationEnabled
Turn off "Delete Browsing History" functionalityEnabled
Turn off "Delete Passwords" functionalityEnabled
Turn off configuration of default behavior of new tab creationEnabled
Select tab opening positionForeground
PolicySettingComment
Turn off configuration of tabbed browsing pop-up behaviorEnabled
Select tabbed browsing pop-up behaviorForce pop-ups to open in a new window
PolicySettingComment
Turn off configuration of window reuseEnabled
Select where to open linksOpen in a new Internet Explorer window
PolicySettingComment
Turn off Crash DetectionEnabled
Turn off displaying the Internet Explorer Help MenuEnabled
Turn off Managing Phishing filterEnabled
Select phishing filter modeOff
PolicySettingComment
Turn off Managing Pop-up Allow listEnabled
Turn off managing Pop-up filter levelEnabled
Turn off pop-up managementEnabled
Turn off tabbed browsingEnabled
Turn off the auto-complete feature for web addressesEnabled
Turn on menu bar by defaultDisabled
Turn on the auto-complete feature for user names and passwords on formsDisabled
Use Automatic Detection for dial-up connectionsDisabled
Windows Components/Internet Explorer/Administrator Approved Controls
PolicySettingComment
Menu ControlsEnabled
MCSiMenuDisabled
Popup Menu ObjectEnabled
Ikonic Menu ControlDisabled
Windows Components/Internet Explorer/Browser menus
PolicySettingComment
Disable Save this program to disk optionEnabled
File menu: Disable closing the browser and Explorer windowsDisabled
File menu: Disable New menu optionEnabled
File menu: Disable Save As Web Page CompleteEnabled
File menu: Disable Save As... menu optionEnabled
Help menu: Remove 'For Netscape Users' menu optionEnabled
Help menu: Remove 'Send Feedback' menu optionEnabled
Help menu: Remove 'Tip of the Day' menu optionEnabled
Help menu: Remove 'Tour' menu optionEnabled
Tools menu: Disable Internet Options... menu optionEnabled
View menu: Disable Full Screen menu optionEnabled
Windows Components/Internet Explorer/Internet Control Panel/Advanced Page
PolicySettingComment
Allow third-party browser extensionsDisabled
Empty Temporary Internet Files folder when browser is closedEnabled
Windows Components/Internet Explorer/Internet Settings/AutoComplete
PolicySettingComment
Turn off inline AutoComplete in Windows ExplorerEnabled
Windows Components/Internet Explorer/Internet Settings/Display settings/General Colors
PolicySettingComment
Prevent the use of Windows colorsEnabled
Prevent users from configuring background colorEnabled
Background color192,192,192
PolicySettingComment
Prevent users from configuring text colorEnabled
Text color0,0,0
Windows Components/Internet Explorer/Internet Settings/Display settings/Link Colors
PolicySettingComment
Prevent users from configuring the color of links that have already been clickedEnabled
Visited link color96,100,32
PolicySettingComment
Prevent users from configuring the color of links that have not yet been clickedEnabled
Link color0,0,255
PolicySettingComment
Prevent users from configuring the hover colorEnabled
Hover color255,0,0
PolicySettingComment
Turn on the hover color optionEnabled
Windows Components/Internet Explorer/Offline Pages
PolicySettingComment
Disable adding channelsEnabled
Disable adding schedules for offline pagesEnabled
Disable all scheduled offline pagesEnabled
Disable channel user interface completelyEnabled
Disable downloading of site subscription contentEnabled
Disable editing and creating of schedule groupsEnabled
Disable editing schedules for offline pagesEnabled
Disable offline page hit loggingEnabled
Disable removing channelsEnabled
Disable removing schedules for offline pagesEnabled
Windows Components/Internet Explorer/Security Features/Add-on Management
PolicySettingComment
Add-on ListDisabled
Windows Components/Internet Explorer/Toolbars
PolicySettingComment
Configure Toolbar ButtonsEnabled
Show Back buttonEnabled
Show Forward buttonEnabled
Show Stop buttonEnabled
Show Refresh buttonEnabled
Show Home buttonEnabled
Show Search buttonDisabled
Show Favorites buttonEnabled
Show History buttonDisabled
Show Folders buttonDisabled
Show Fullscreen buttonDisabled
Show Tools buttonDisabled
Show Mail buttonDisabled
Show Font size buttonDisabled
Show Print buttonEnabled
Show Edit buttonDisabled
Show Discussions buttonDisabled
Show Cut buttonDisabled
Show Copy buttonDisabled
Show Paste buttonDisabled
Show Encoding buttonDisabled
PolicySettingComment
Disable customizing browser toolbar buttonsEnabled
Disable customizing browser toolbarsEnabled
Turn off toolbar upgrade toolEnabled
Windows Components/Microsoft Management Console
PolicySettingComment
Restrict the user from entering author modeEnabled
Restrict users to the explicitly permitted list of snap-insEnabled
Windows Components/RSS Feeds
PolicySettingComment
Turn off addition and removal of feedsEnabled
Turn off background sync for feedsEnabled
Turn off downloading of enclosuresEnabled
Turn off feed discoveryEnabled
Turn off the feed listEnabled
Windows Components/Sound Recorder
PolicySettingComment
Do not allow Sound Recorder to runEnabled
Windows Components/Task Scheduler
PolicySettingComment
Hide Advanced Properties Checkbox in Add Scheduled Task WizardEnabled
Hide Property PagesEnabled
Prevent Task Run or EndEnabled
Prohibit BrowseEnabled
Prohibit Drag-and-DropEnabled
Prohibit New Task CreationEnabled
Prohibit Task DeletionEnabled
Windows Components/Terminal Services/Terminal Server/Connections
PolicySettingComment
Set rules for remote control of Terminal Services user sessionsDisabled
Windows Components/Windows Explorer
PolicySettingComment
Display confirmation dialog when deleting filesEnabled
Do not display the Welcome Center at user logonEnabled
Do not request alternate credentialsEnabled
Do not track Shell shortcuts during roamingEnabled
Hide these specified drives in My ComputerEnabled
Pick one of the following combinationsRestrict all drives
PolicySettingComment
Hides the Manage item on the Windows Explorer context menuEnabled
Maximum number of recent documentsEnabled
Maximum number of recent documents5
PolicySettingComment
No Computers Near Me in Network LocationsEnabled
No Entire Network in Network LocationsEnabled
Prevent access to drives from My ComputerEnabled
Pick one of the following combinationsRestrict C drive only
PolicySettingComment
Remove "Map Network Drive" and "Disconnect Network Drive"Enabled
Remove CD Burning featuresEnabled
Remove DFS tabEnabled
Remove File menu from Windows ExplorerEnabled
Remove Hardware tabEnabled
Remove Search button from Windows ExplorerEnabled
Remove Security tabEnabled
Remove Shared Documents from My ComputerEnabled
Remove Windows Explorer's default context menuEnabled
Removes the Folder Options menu item from the Tools menuEnabled
Request credentials for network installationsEnabled
Turn off caching of thumbnail picturesEnabled
Turn off the caching of thumbnails in hidden thumbs.db filesEnabled
Turn off Windows+X hotkeysEnabled
Turn on Classic ShellEnabled
Windows Components/Windows Explorer/Common Open File Dialog
PolicySettingComment
Hide the dropdown list of recent filesEnabled
Windows Components/Windows Installer
PolicySettingComment
Prevent removable media source for any installEnabled
Windows Components/Windows Mail
PolicySettingComment
Turn off Windows Mail applicationEnabled
Windows Components/Windows Media Player
PolicySettingComment
Prevent CD and DVD Media Information RetrievalEnabled
Prevent Music File Media Information RetrievalEnabled
Prevent Radio Station Preset RetrievalEnabled
Windows Components/Windows Media Player/Networking
PolicySettingComment
Hide Network TabEnabled
Windows Components/Windows Media Player/Playback
PolicySettingComment
Allow Screen SaverDisabled
Prevent Codec DownloadEnabled
Windows Components/Windows Media Player/User Interface
PolicySettingComment
Hide Privacy TabEnabled
Hide Security TabEnabled
Set and Lock SkinEnabled
SkinSkin
Windows Components/Windows Messenger
PolicySettingComment
Do not allow Windows Messenger to be runEnabled
Do not automatically start Windows Messenger initiallyEnabled
Windows Components/Windows Update
PolicySettingComment
Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog boxEnabled
Remove access to use all Windows Update featuresEnabled
Preferences
Windows Settings
Drive Maps
Drive Map (drive: U)
U: (order: 1)
General
ActionReplace
Properties
Location\\FileServerName01\%username%cached$
ReconnectEnabled
Label asMy Documents
Use first availableDisabled
Hide/Show this driveShow
Hide/Show all drivesNo change
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Folders
Folder (path: C:\Documents and Settings\All Users\Start Menu\Test)
Test (order: 1)
General
ActionReplace
Attributes
Read-onlyDisabled
HiddenDisabled
ArchiveEnabled
Delete this folder (if emptied)Disabled
Recursively delete all subfolders (if emptied)Disabled
Delete all files in the folder(s)Disabled
Allow deletion of read-only files/foldersDisabled
Ignore errors for files/folders that cannot be deletedDisabled
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo