Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available
Student PC Lock Down
Data collected on: 24/07/2009 08:41:09
General
Details
DomainChildDomain.ParentDomain.local
OwnerChildDomain\Domain Admins
Created29/10/2008 15:57:06
Modified18/06/2009 07:17:34
User Revisions392 (AD), 392 (sysvol)
Computer Revisions18 (AD), 18 (sysvol)
Unique ID{25C98955-F8C3-4697-870B-664687CD2342}
GPO StatusEnabled
Links
LocationEnforcedLink StatusPath
School StudentsNoEnabledChildDomain.ParentDomain.local/School Students

This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:
Name
NT AUTHORITY\Authenticated Users
ChildDomain\All School Students
WMI Filtering
WMI Filter NameNone
DescriptionNot applicable
Delegation
These groups and users have the specified permission for this GPO
NameAllowed PermissionsInherited
ParentDomain\Enterprise AdminsEdit settings, delete, modify securityNo
NT AUTHORITY\Authenticated UsersRead (from Security Filtering)No
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERSReadNo
NT AUTHORITY\SYSTEMEdit settings, delete, modify securityNo
ChildDomain\All School StudentsRead (from Security Filtering)No
ChildDomain\Domain AdminsEdit settings, delete, modify securityNo
Computer Configuration (Enabled)
Policies
Administrative Templates
Policy definitions (ADMX files) retrieved from the local machine.
System/Group Policy
PolicySettingComment
Startup policy processing wait timeEnabled
Amount of time to wait (in seconds):490
PolicySettingComment
User Group Policy loopback processing modeEnabled
Mode:Merge
System/User Profiles
PolicySettingComment
Add the Administrators security group to roaming user profilesEnabled
Delete cached copies of roaming profilesDisabled
Delete user profiles older than a specified number of days on system restartEnabled
Delete user profiles older than (days)28
PolicySettingComment
Do not log users on with temporary profilesEnabled
Wait for remote user profileEnabled
User Configuration (Enabled)
Policies
Administrative Templates
Policy definitions (ADMX files) retrieved from the local machine.
Control Panel
PolicySettingComment
Prohibit access to the Control PanelEnabled
Control Panel/Add or Remove Programs
PolicySettingComment
Go directly to Components WizardDisabled
Hide Add New Programs pageEnabled
Hide Add/Remove Windows Components pageEnabled
Hide Change or Remove Programs pageEnabled
Hide the "Add a program from CD-ROM or floppy disk" optionEnabled
Hide the "Add programs from Microsoft" optionEnabled
Hide the "Add programs from your network" optionEnabled
Hide the Set Program Access and Defaults pageEnabled
Remove Add or Remove ProgramsEnabled
Remove Support InformationEnabled
Control Panel/Printers
PolicySettingComment
Package Point and print - Approved serversEnabled
Enter fully qualified server names
DomainAppsServer01.ChildDomain.ParentDomain.local
PolicySettingComment
Prevent deletion of printersEnabled
Control Panel/Programs
PolicySettingComment
Hide "Get Programs" pageEnabled
Hide "Installed Updates" pageEnabled
Hide "Programs and Features" pageEnabled
Hide "Set Program Access and Computer Defaults" pageEnabled
Hide "Windows Features"Enabled
Hide "Windows Marketplace"Enabled
Hide the Programs Control PanelEnabled
Network/Network Connections
PolicySettingComment
Ability to change properties of an all user remote access connectionEnabled
Ability to delete all user remote access connectionsDisabled
Ability to Enable/Disable a LAN connectionDisabled
Ability to rename all user remote access connectionsDisabled
Ability to rename LAN connectionsDisabled
Ability to rename LAN connections or remote access connections available to all usersDisabled
Prohibit access to properties of a LAN connectionEnabled
Prohibit access to properties of components of a LAN connectionEnabled
Prohibit access to properties of components of a remote access connectionEnabled
Prohibit access to the Advanced Settings item on the Advanced menuEnabled
Prohibit access to the New Connection WizardEnabled
Prohibit access to the Remote Access Preferences item on the Advanced menuEnabled
Prohibit adding and removing components for a LAN or remote access connectionEnabled
Prohibit changing properties of a private remote access connectionEnabled
Prohibit connecting and disconnecting a remote access connectionEnabled
Prohibit deletion of remote access connectionsEnabled
Prohibit Enabling/Disabling components of a LAN connectionEnabled
Prohibit renaming private remote access connectionsEnabled
Prohibit TCP/IP advanced configurationEnabled
Prohibit viewing of status for an active connectionEnabled
Turn off notifications when a connection has only limited or no connectivityEnabled
Network/Offline Files
PolicySettingComment
Initial reminder balloon lifetimeDisabled
Prohibit 'Make Available Offline' for these file and foldersDisabled
Reminder balloon frequencyDisabled
Reminder balloon lifetimeDisabled
Remove 'Make Available Offline'Enabled
Synchronize all offline files before logging offDisabled
Synchronize all offline files when logging onDisabled
Synchronize offline files before suspendDisabled
Turn off reminder balloonsEnabled
Network/Windows Connect Now
PolicySettingComment
Prohibit Access of the Windows Connect Now wizardsEnabled
Shared Folders
PolicySettingComment
Allow DFS roots to be publishedDisabled
Allow shared folders to be publishedDisabled
Start Menu and Taskbar
PolicySettingComment
Add "Run in Separate Memory Space" check box to Run dialog boxDisabled
Add Logoff to the Start MenuEnabled
Add the Run command to the Start MenuDisabled
Clear history of recently opened documents on exitEnabled
Clear the recent programs list for new usersEnabled
Do not display any custom toolbars in the taskbarEnabled
Do not keep history of recently opened documentsEnabled
Do not search communicationsEnabled
Do not search filesEnabled
Do not search InternetEnabled
Do not search programsEnabled
Do not use the search-based method when resolving shell shortcutsEnabled
Do not use the tracking-based method when resolving shell shortcutsEnabled
Force classic Start MenuDisabled
Gray unavailable Windows Installer programs Start Menu shortcutsEnabled
Hide the notification areaEnabled
Lock all taskbar settingsEnabled
Lock the TaskbarEnabled
Prevent changes to Taskbar and Start Menu SettingsEnabled
Prevent grouping of taskbar itemsEnabled
Prevent users from adding or removing toolbarsEnabled
Prevent users from moving taskbar to another screen dock locationEnabled
Prevent users from rearranging toolbarsEnabled
Prevent users from resizing the taskbarEnabled
Remove access to the context menus for the taskbarEnabled
Remove All Programs list from the Start menuDisabled
Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commandsDisabled
Remove Balloon Tips on Start Menu itemsEnabled
Remove Clock from the system notification areaDisabled
Remove common program groups from Start MenuEnabled
Remove Default Programs link from the Start menu.Enabled
Remove Documents icon from Start MenuEnabled
Remove Drag-and-drop context menus on the Start MenuEnabled
Remove Favorites menu from Start MenuEnabled
Remove frequent programs list from the Start MenuEnabled
Remove Games link from Start MenuEnabled
Remove Help menu from Start MenuEnabled
Remove links and access to Windows UpdateEnabled
Remove Logoff on the Start MenuDisabled
Remove Music icon from Start MenuEnabled
Remove Network Connections from Start MenuEnabled
Remove Network icon from Start MenuEnabled
Remove Pictures icon from Start MenuEnabled
Remove pinned programs list from the Start MenuEnabled
Remove programs on Settings menuEnabled
Remove Recent Items menu from Start MenuEnabled
Remove Run menu from Start MenuEnabled
Remove Search Computer linkEnabled
Remove Search link from Start MenuEnabled
Remove the "Undock PC" button from the Start MenuDisabled
Remove the battery meterEnabled
Remove the networking iconEnabled
Remove the volume control iconDisabled
Remove user folder link from Start MenuEnabled
Remove user name from Start MenuDisabled
Remove user's folders from the Start MenuEnabled
Show QuickLaunch on TaskbarDisabled
Turn off all balloon notificationsEnabled
Turn off notification area cleanupEnabled
Turn off personalized menusEnabled
Turn off taskbar thumbnailsEnabled
Turn off user trackingEnabled
Use folders instead of libraryDisabled
System
PolicySettingComment
Don't display the Getting Started welcome screen at logonEnabled
Prevent access to the command promptEnabled
Disable the command prompt script processing also?No
PolicySettingComment
Restrict these programs from being launched from HelpEnabled
Enter executables separated by commas:calc.exe
Example: calc.exe,paint.exe
PolicySettingComment
Windows Automatic UpdatesEnabled
System/Ctrl+Alt+Del Options
PolicySettingComment
Remove Lock ComputerEnabled
Remove Task ManagerEnabled
System/Driver Installation
PolicySettingComment
Turn off Windows Update device driver search promptEnabled
System/Folder Redirection
PolicySettingComment
Do not automatically make redirected folders available offlineEnabled
System/Group Policy
PolicySettingComment
Disallow Interactive Users from generating Resultant Set of Policy dataEnabled
Group Policy domain controller selectionEnabled
When Group Policy Object Editor is selecting a domain controller to use, it should:Inherit from Active Directory Snap-ins
PolicySettingComment
Group Policy refresh interval for usersEnabled
This setting allows you to customize how often Group Policy is applied
to users. The range is 0 to 64800 minutes (45 days).
Minutes:90
This is a random time added to the refresh interval to prevent
all clients from requesting Group Policy at the same time.
The range is 0 to 1440 minutes (24 hours)
Minutes:30
System/Internet Communication Management
PolicySettingComment
Restrict Internet communicationEnabled
System/Internet Communication Management/Internet Communication settings
PolicySettingComment
Turn off downloading of print drivers over HTTPEnabled
Turn off handwriting recognition error reportingEnabled
Turn off Help Experience Improvement ProgramEnabled
Turn off Help RatingsEnabled
Turn off Internet download for Web publishing and online ordering wizardsEnabled
Turn off Internet File Association serviceEnabled
Turn off printing over HTTPEnabled
Turn off the "Order Prints" picture taskEnabled
Turn off the "Publish to Web" task for files and foldersEnabled
Turn off the Windows Messenger Customer Experience Improvement ProgramEnabled
Turn off Windows Movie Maker automatic codec downloadsEnabled
Turn off Windows Movie Maker online Web linksEnabled
Turn off Windows Movie Maker saving to online video hosting providerEnabled
Turn off Windows OnlineEnabled
System/Locale Services
PolicySettingComment
Disallow changing of geographic locationEnabled
Disallow selection of Custom LocalesEnabled
Disallow user override of locale settingsEnabled
Restrict user localesDisabled
System/Logon
PolicySettingComment
Do not process the legacy run listEnabled
Do not process the run once listEnabled
System/Performance Control Panel
PolicySettingComment
Turn off access to the OEM and Microsoft branding sectionEnabled
Turn off access to the performance center core sectionEnabled
Turn off access to the solutions to performance problems sectionEnabled
System/Power Management
PolicySettingComment
Prompt for password on resume from hibernate / suspendEnabled
System/Scripts
PolicySettingComment
Run legacy logon scripts hiddenEnabled
Run logoff scripts visibleDisabled
Run logon scripts synchronouslyDisabled
Run logon scripts visibleDisabled
System/User Profiles
PolicySettingComment
Connect home directory to root of the shareDisabled
Network directories to sync at Logon/Logoff time onlyDisabled
System/Windows HotStart
PolicySettingComment
Turn off Windows HotStartEnabled
Windows Components/Application Compatibility
PolicySettingComment
Turn Off Program Compatibility AssistantEnabled
Windows Components/Attachment Manager
PolicySettingComment
Notify antivirus programs when opening attachmentsEnabled
Windows Components/AutoPlay Policies
PolicySettingComment
Default behavior for AutoRunEnabled
Default AutoRun BehaviorDo not execute any autorun commands
PolicySettingComment
Don't set the always do this checkboxEnabled
Turn off AutoplayEnabled
Turn off Autoplay on:CD-ROM and removable media drives
Windows Components/Backup/Client
PolicySettingComment
Prevent the user from running the Backup Status and Configuration programEnabled
Turn off backup configurationEnabled
Turn off Complete PC Backup functionalityEnabled
Turn off restore functionalityEnabled
Windows Components/Internet Explorer
PolicySettingComment
Disable changing accessibility settingsEnabledPrevent School Students changing accessibility settings: High visibility etc.
Turn off configuration of tabbed browsing pop-up behaviorEnabled
Select tabbed browsing pop-up behaviorForce pop-ups to open in a new window
PolicySettingComment
Turn off tabbed browsingEnabled
Windows Components/Internet Explorer/Application Compatibility/Enable cut, copy or paste operations from the clipboard if URLACTION_SCRIPT_PASTE is set to Prompt
PolicySettingComment
All ProcessesEnabled
Internet Explorer ProcessesEnabled
Windows Components/Internet Explorer/Browser menus
PolicySettingComment
Disable Context menuEnabled
Disable Open in New Window menu optionDisabled
Disable Save this program to disk optionDisabled
File menu: Disable New menu optionEnabled
File menu: Disable Open menu optionDisabled
File menu: Disable Save As Web Page CompleteEnabled
File menu: Disable Save As... menu optionEnabled
Help menu: Remove 'For Netscape Users' menu optionEnabled
Help menu: Remove 'Send Feedback' menu optionEnabled
Help menu: Remove 'Tip of the Day' menu optionEnabled
Help menu: Remove 'Tour' menu optionEnabled
Hide Favorites menuEnabled
Tools menu: Disable Internet Options... menu optionEnabled
View menu: Disable Full Screen menu optionEnabled
View menu: Disable Source menu optionEnabled
Windows Components/Internet Explorer/Internet Control Panel
PolicySettingComment
Disable the Advanced pageEnabled
Disable the Connections pageEnabled
Disable the Content pageEnabled
Disable the General pageEnabled
Disable the Privacy pageEnabled
Disable the Programs pageEnabled
Disable the Security pageEnabled
Prevent ignoring certificate errorsDisabled
Send internationalized domain namesDisabled
Use UTF-8 for mailto linksEnabled
Windows Components/Internet Explorer/Internet Control Panel/Advanced Page
PolicySettingComment
Allow active content from CDs to run on user machinesEnabled
Allow Install On Demand (except Internet Explorer)Enabled
Allow Install On Demand (Internet Explorer)Enabled
Allow software to run or install even if the signature is invalidEnabled
Allow third-party browser extensionsEnabled
Automatically check for Internet Explorer updatesDisabled
Check for signatures on downloaded programsEnabled
Do not allow resetting Internet Explorer settingsEnabled
Do not save encrypted pages to diskEnabled
Empty Temporary Internet Files folder when browser is closedEnabled
Play animations in web pagesEnabled
Play sounds in web pagesEnabled
Play videos in web pagesEnabled
Turn off ClearTypeEnabled
Turn off Profile AssistantEnabled
Windows Components/Internet Explorer/Offline Pages
PolicySettingComment
Disable adding channelsEnabled
Disable adding schedules for offline pagesEnabled
Disable all scheduled offline pagesEnabled
Disable channel user interface completelyEnabled
Disable downloading of site subscription contentEnabled
Disable editing and creating of schedule groupsEnabled
Disable editing schedules for offline pagesEnabled
Disable offline page hit loggingEnabled
Disable removing channelsEnabled
Disable removing schedules for offline pagesEnabled
Windows Components/Internet Explorer/Toolbars
PolicySettingComment
Configure Toolbar ButtonsEnabled
Show Back buttonEnabled
Show Forward buttonEnabled
Show Stop buttonEnabled
Show Refresh buttonEnabled
Show Home buttonEnabled
Show Search buttonDisabled
Show Favorites buttonDisabled
Show History buttonDisabled
Show Folders buttonDisabled
Show Fullscreen buttonDisabled
Show Tools buttonDisabled
Show Mail buttonDisabled
Show Font size buttonDisabled
Show Print buttonEnabled
Show Edit buttonDisabled
Show Discussions buttonDisabled
Show Cut buttonEnabled
Show Copy buttonEnabled
Show Paste buttonEnabled
Show Encoding buttonDisabled
PolicySettingComment
Disable customizing browser toolbar buttonsEnabled
Disable customizing browser toolbarsEnabled
Turn off toolbar upgrade toolEnabled
Windows Components/Microsoft Management Console
PolicySettingComment
Restrict the user from entering author modeEnabled
Windows Components/Network Sharing
PolicySettingComment
Prevent users from sharing files within their profile.Enabled
Windows Components/Task Scheduler
PolicySettingComment
Hide Advanced Properties Checkbox in Add Scheduled Task WizardEnabled
Hide Property PagesEnabled
Prevent Task Run or EndEnabled
Prohibit BrowseEnabled
Prohibit Drag-and-DropEnabled
Prohibit New Task CreationEnabled
Prohibit Task DeletionEnabled
Windows Components/Windows Error Reporting
PolicySettingComment
Disable Windows Error ReportingEnabled
Windows Components/Windows Explorer
PolicySettingComment
Display the menu bar in Windows Explorer Enabled
Do not request alternate credentialsEnabled
Hides the Manage item on the Windows Explorer context menuEnabled
No Computers Near Me in Network LocationsEnabled
No Entire Network in Network LocationsEnabled
Remove "Map Network Drive" and "Disconnect Network Drive"Enabled
Remove CD Burning featuresEnabled
Remove File menu from Windows ExplorerEnabled
Remove Hardware tabEnabled
Remove Search button from Windows ExplorerEnabled
Remove Security tabEnabled
Remove Shared Documents from My ComputerEnabled
Removes the Folder Options menu item from the Tools menuEnabled
Request credentials for network installationsEnabled
Turn off common control and window animationsEnabled
Turn off Windows+X hotkeysEnabled
Windows Components/Windows Explorer/Common Open File Dialog
PolicySettingComment
Hide the common dialog back buttonEnabled
Hide the common dialog places barEnabled
Windows Components/Windows Explorer/Explorer Frame Pane
PolicySettingComment
Turn off Details PaneEnabled
Turn off Preview PaneEnabled
Windows Components/Windows Installer
PolicySettingComment
Prevent removable media source for any installEnabled
Windows Components/Windows Mail
PolicySettingComment
Turn off the communities featuresEnabled
Turn off Windows Mail applicationEnabled
Windows Components/Windows Media Center
PolicySettingComment
Do not allow Windows Media Center to runEnabled
Windows Components/Windows Media Player/Networking
PolicySettingComment
Configure HTTP ProxyEnabled
Proxy typeCustom
The following options apply only to custom proxies.
Proxy addressDomainISAServer01
Proxy port8080
Bypass proxy for local addressesEnabled
Do not use proxy server for addresses beginning with172.19.*.*;
PolicySettingComment
Configure MMS ProxyEnabled
Proxy typeCustom
The following options apply only to custom proxies.
Proxy addressDomainISAServer01
Proxy port8080
Bypass proxy for local addressesEnabled
Do not use proxy server for addresses beginning with172.19.*.*;
PolicySettingComment
Configure Network BufferingEnabled
Buffering TimeDefault
Everything below this line applies to Custom network buffering only.
Configure Network Buffering3
PolicySettingComment
Configure RTSP ProxyEnabled
Proxy typeCustom
The following options apply only to custom proxies.
Proxy addressDomainISAServer01
Proxy port8080
Bypass proxy for local addressesEnabled
Do not use proxy server for addresses beginning with172.19*.*
PolicySettingComment
Hide Network TabEnabled
Windows Components/Windows Media Player/Playback
PolicySettingComment
Allow Screen SaverDisabled
Prevent Codec DownloadEnabled
Windows Components/Windows Media Player/User Interface
PolicySettingComment
Do Not Show AnchorEnabled
Hide Privacy TabEnabled
Hide Security TabEnabled
Set and Lock SkinDisabled
Windows Components/Windows Meeting Space
PolicySettingComment
Turn off Windows Meeting SpaceEnabled
Turn on Windows Meeting Space auditingDisabled
Windows Components/Windows Messenger
PolicySettingComment
Do not allow Windows Messenger to be runEnabled
Do not automatically start Windows Messenger initiallyEnabled
Windows Components/Windows Mobility Center
PolicySettingComment
Turn off Windows Mobility CenterEnabled
Windows Components/Windows Sidebar
PolicySettingComment
Turn off Windows SidebarEnabled
Windows Components/Windows SideShow
PolicySettingComment
Turn off Windows SideShowEnabled
Windows Components/Windows Update
PolicySettingComment
Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog boxEnabled
Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog boxEnabled
Remove access to use all Windows Update featuresEnabled
Configure notifications:0 - Do not show any notifications
Preferences
Windows Settings
Folders
Folder (path: U:\My Trash Bin)
My Trash Bin (order: 1)
General
ActionUpdate
Attributes
Read-onlyDisabled
HiddenDisabled
ArchiveEnabled
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)Yes
Remove this item when it is no longer appliedNo
Apply once and do not reapplyYes