Windows 8.1 and Windows Server 2012 R2 GPEdit List

Group Policy Settings Reference
Windows Server 2012R2 and Windows 8.1
This spreadsheet lists the policy settings for computer and user configurations that are included in the Administrative template files (.admx and
Windows Server 2012. The policy settings included in this spreadsheet cover Windows Server 2012 R2, Windows Server 2012, Windows Ser
Windows 8.1, Windows 8, Windows 7, Windows Vista with SP1,Windows XP Professional with SP2 or earlier service packs, and Microsoft W
These files are used to expose policy settings when you use the Group Policy Management Console (GPMC) to edit Group Policy Objects (GP
You can use the filtering capabilities that are included in this spreadsheet to view a specific subset of data, based on one value or a combinati
in one or more of the columns. In addition, you can click Custom in the drop-down list of any of the column headings to add additional filtering
To view a specific subset of data, click the drop-down arrow in the column heading of cells that contain the value or combination of values on w
and then click the desired value in the drop-down list. For example, to view policy settings that are available for Windows Server 2012 or Wind
Administrative Template worksheet, click the drop-down arrow next to Supported On, and then click At least Microsoft Windows Server 2
Legal Notice
This document is provided as-is. Information and views expressed in this document, including URL and other Internet Web site references, may change witho
Some examples depicted herein are provided for illustration only and are fictitious.
This document does not provide you with any legal rights to any intellectual property in any Microsoft product. You may copy and use this document for your in
2013 Microsoft Corporation. All rights reserved.
Active Directory, Hyper-V, Microsoft, MS-DOS, Visual Basic, Visual Studio, Windows, Windows NT, Windows Server,
and Windows Vista are trademarks of the Microsoft group of companies.
All other trademarks are property of their respective owners.
nistrative template files (.admx and .adml) delivered with
ndows Server 2012, Windows Server 2008 R2, Windows Server 2008,Windows Server 2003 with SP2 or earlier service packs,
er service packs, and Microsoft Windows 2000 with SP5 or earlier service packs.
C) to edit Group Policy Objects (GPOs).
based on one value or a combination of values that are available
headings to add additional filtering criteria within that column.
alue or combination of values on which you want to filter,

for Windows Server 2012 or Windows 8, in the
ast Microsoft Windows Server 2012 or Windows 8.
Web site references, may change without notice.
opy and use this document for your internal, reference purposes.
File Name
ActiveXInstallService.admx
ActiveXInstallService.admx
AddRemovePrograms.admx
AppCompat.admx
AppCompat.admx
AppCompat.admx
AppCompat.admx
AppCompat.admx
AppCompat.admx
AppCompat.admx
AppCompat.admx
AppCompat.admx
AppxPackageManager.admx
AppXRuntime.admx
AppXRuntime.admx
AppXRuntime.admx
AppXRuntime.admx
AppXRuntime.admx
AppXRuntime.admx
AppXRuntime.admx
AttachmentManager.admx
AuditSettings.admx
AutoPlay.admx
AutoPlay.admx
AutoPlay.admx
Policy Setting Name

Scope
Approved Installation Sites Machine
Establish ActiveX installati Machine
Specify default category User
Hide the "Add a program f User
Hide the "Add programs froUser
Hide the "Add programs fr User
Hide Add New Programs paUser
Remove Add or Remove Pr User
Hide the Set Program Acce User
Hide Change or Remove Pr User
Go directly to Components User
Remove Support InformatioUser
Hide Add/Remove WindowsUser
Prevent access to 16-bit apMachine
Remove Program Compatibil
Machine
Turn off Application Teleme Machine
Turn off SwitchBack CompatMachine
Turn off Application CompatMachine
Turn off Program CompatibilUser
Turn off Program CompatibilMachine
Turn off Steps Recorder
Machine
Turn off Inventory Collector Machine
Allow all trusted apps to insMachine
Allow deployment operations
Machine
Allow development of Windo
Machine
Block launching desktop app
Machine
Block launching desktop app
User
Block launching desktop a Machine
Block launching desktop a User
Allow Microsoft accounts toMachine
Allow Microsoft accounts toUser
Turn on dynamic Content U Machine
Notify antivirus programs User
Trust logic for file attachm User
Do not preserve zone infor User
Hide mechanisms to removUser
Default risk level for file
User
Inclusion list for high risk f User
Inclusion list for low file ty User
Inclusion list for moderate rUser
Include command line in prMachine
Set the default behavior f Machine
Set the default behavior f User
Prevent AutoPlay from rem Machine
AutoPlay.admx
AutoPlay.admx
AutoPlay.admx
AutoPlay.admx
AutoPlay.admx
Biometrics.admx
Biometrics.admx
Biometrics.admx
Biometrics.admx
Bits.admx
Bits.admx
Bits.admx
Bits.admx
Bits.admx
Bits.admx
Bits.admx
Bits.admx
Bits.admx
Bits.admx
Bits.admx
Bits.admx
Bits.admx
Bits.admx
Bits.admx
Bits.admx
Bits.admx
CEIPEnable.admx
CEIPEnable.admx
CipherSuiteOrder.admx
COM.admx
COM.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
Prevent AutoPlay from rem User

Turn off Autoplay
Machine
Turn off Autoplay
User
Disallow Autoplay for non- Machine
Disallow Autoplay for non- User
Allow the use of biometrics Machine
Allow users to log on using Machine
Allow domain users to log Machine
Specify timeout for fast us Machine
Timeout for inactive BITS j Machine
Limit the maximum BITS jo Machine
Limit the maximum network
Machine
Set up a work schedule to Machine
Set up a maintenance scheMachine
Allow BITS Peercaching
Machine
Limit the age of files in t Machine
Limit the BITS Peercache si Machine
Do not allow the computer Machine
Do not allow the computer Machine
Limit the maximum networ Machine
Set default download behavMachine
Limit the maximum numberMachine
o
o
Do not allow the BITS clie Machine
Allow Corporate redirecti Machine
Tag Windows Customer Expe
Machine
SSL Cipher Suite Order
Machine
Download missing COM co User
Download missing COM co Machine
Disable application SharingUser
Prevent Control
User
Prevent Sharing
User
Prevent Sharing Command User
Prevent Desktop Sharing User
Prevent Sharing Explorer User
Prevent Application SharingUser
Disable Audio
User
Prevent changing DirectSo User
Disable full duplex Audio User
Prevent receiving Video
User
Prevent sending Video
User
Limit the bandwidth of Aud User
Allow persisting automatic User
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
conf.admx
ControlPanel.admx
ControlPanel.admx
ControlPanel.admx
ControlPanel.admx
ControlPanelDisplay.admx
Disable Chat
User
Disable Whiteboard
User
Disable NetMeeting 2.x WhUser
Disable remote Desktop ShMachine
Enable Automatic Configur User
Prevent adding Directory s User
Prevent automatic acceptanUser
Prevent changing Call pla User
Disable Directory services User
Prevent receiving files
User
Prevent sending files
User
Prevent viewing Web directUser
Limit the size of sent files User
Set the intranet support W User
Set Call Security options User
Disable the Advanced Calli User
Hide the Audio page
User
Hide the General page
User
Hide the Security page
User
Hide the Video page
User
Hide specified Control PaneUser
Always open All Control Pa User
Prohibit access to Control User
Show only specified Contro User
Disable the Display Control User
Hide Settings tab
User
Prevent changing color an User
Prevent changing screen s User
Enable screen saver
User
Force specific screen saver User
Password protect the scree User
Screen saver timeout
User
Prevent changing desktop User
Prevent changing sounds User
Prevent changing mouse poUser
Prevent changing desktop User
Prevent changing color sc User
Prevent changing theme User
Load a specific theme
User
Prevent changing visual st User
Force a specific visual styl User
Prohibit selection of visual User
Do not display the lock scr Machine
Prevent changing lock scr Machine
Prevent enabling lock scre Machine
Cpls.admx
CredentialProviders.admx
CredSsp.admx
CredSsp.admx
CredSsp.admx
CredSsp.admx
CredSsp.admx
CredSsp.admx
CredSsp.admx
CredSsp.admx
CredSsp.admx
CredSsp.admx
CredUI.admx
CredUI.admx
CredUI.admx
CredUI.admx
CtrlAltDel.admx
CtrlAltDel.admx
CtrlAltDel.admx
CtrlAltDel.admx
DCOM.admx
DCOM.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Prevent enabling lock scr Machine

Force a specific backgroun Machine
Force a specific Start back Machine
Prevent changing start me Machine
Force a specific default lo Machine
Apply the default account pMachine
Assign a default domain fo Machine
Exclude credential providerMachine
Turn on PIN sign-in
Machine
Turn off picture password s Machine
Allow users to select whe Machine
Allow delegating default cr Machine
Allow delegating default c Machine
Allow delegating fresh credMachine
Allow delegating fresh cre Machine
Allow delegating saved cre Machine
Allow delegating saved cre Machine
Deny delegating default cr Machine
Deny delegating fresh cred Machine
Deny delegating saved credMachine
Restrict delegation of cred Machine
Enumerate administrator a Machine
Require trusted path for cr Machine
Do not display the passwor Machine
Do not display the passwor User
Remove Change Password User
Remove Lock Computer
User
Remove Task Manager
User
Remove Logoff
User
Allow local activation secu Machine
Define Activation Security Machine
Enable Active Desktop
User
Disable Active Desktop
User
Prohibit changes
User
Add/Delete items
User
Prohibit adding items
User
Prohibit closing items
User
Prohibit deleting items
User
Prohibit editing items
User
Disable all items
User
Allow only bitmapped wall User
Desktop Wallpaper
User
Enable filter in Find dialog User
Hide Active Directory folde User
Maximum size of Active DirUser
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
Desktop.admx
DeviceCompat.admx
DeviceCompat.admx
DeviceInstallation.admx
DeviceRedirection.admx
DeviceRedirection.admx
DeviceSetup.admx
DeviceSetup.admx
DeviceSetup.admx
DeviceSetup.admx
DeviceSetup.admx
DeviceSetup.admx
DeviceSetup.admx
DeviceSetup.admx
DeviceSetup.admx
Prohibit User from manuallyUser

Hide and disable all items User
Remove the Desktop CleanUser
Hide Internet Explorer ico User
Remove Computer icon on User
Remove My Documents icon
User
Hide Network Locations ic User
Remove Properties from t User
Remove Properties from t User
Do not add shares of rece User
Remove Recycle Bin icon f User
Remove Properties from th User
Don't save settings at exit User
Prevent adding dragging drUser
Prohibit adjusting desktop User
Turn off Aero Shake windo User
Device compatibility settin Machine
Driver compatibility settingMachine
Prioritize all digitally sig
Machine
Configure device installati Machine
Prevent creation of a syste Machine
Allow remote access to the Machine
Allow administrators to overMachine
Allow installation of devic Machine
Prevent installation of dev Machine
Allow installation of devic Machine
Prevent installation of rem Machine
Time (in seconds) to force Machine
Display a custom message Machine
t
Display a custom message Machine
w
Allow non-administrators toMachine
Code signing for device dri User
Prevent redirection of USB Machine
Prevent redirection of devi Machine
Turn off "Found New Hardwa
Machine
Do not send a Windows erroMachine
Prevent Windows from sendi
Machine
Configure driver search loc User
Turn off Windows Update d User
Turn off Windows Update d Machine
Specify search order for de Machine
Specify the search server f Machine
Prevent device metadata reMachine
DFS.admx
DigitalLocker.admx
DigitalLocker.admx
DiskDiagnostic.admx
DiskDiagnostic.admx
DiskNVCache.admx
DiskNVCache.admx
DiskNVCache.admx
DiskNVCache.admx
DiskQuota.admx
DiskQuota.admx
DiskQuota.admx
DiskQuota.admx
DiskQuota.admx
DiskQuota.admx
DistributedLinkTracking.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DnsClient.admx
DWM.admx
DWM.admx
DWM.admx
DWM.admx
DWM.admx
DWM.admx
DWM.admx
Configure how often a DFS Machine

Do not allow Digital Locker User
Do not allow Digital Locker Machine
Disk Diagnostic: Configure Machine
Disk Diagnostic: Configure Machine
Turn off boot and resume o Machine
Turn off cache power mode Machine
Turn off non-volatile cache Machine
Turn off solid state mode Machine
Enable disk quotas
Machine
Enforce disk quota limit
Machine
Specify default quota limit Machine
Log event when quota limitMachine
Log event when quota warnMachine
Apply policy to removable Machine
Allow Distributed Link Trac Machine
Connection-specific DNS sufMachine
DNS servers
Machine
Primary DNS suffix
Machine
Register DNS records with Machine
Register PTR records
Machine
Dynamic update
Machine
Replace addresses in confli Machine
Registration refresh intervaMachine
TTL value for A and PTR re Machine
DNS suffix search list
Machine
Update security level
Machine
Update top level domain z Machine
Primary DNS suffix devolut Machine
Primary DNS suffix devolutiMachine
Turn off multicast name resMachine
Allow DNS suffix appendingMachine
Turn off smart multi-homedMachine
Turn off smart protocol reo Machine
Allow NetBT queries for fu Machine
Prefer link local response Machine
Turn off IDN encoding
Machine
IDN mapping
Machine
Do not allow window animaUser
Do not allow window animaMachine
Do not allow Flip3D invocatUser
Do not allow Flip3D invocatMachine
Use solid color for Start b Machine
Specify a default color
User
Specify a default color
Machine
DWM.admx
DWM.admx
EAIME.admx
EAIME.admx
EAIME.admx
EAIME.admx
EAIME.admx
EAIME.admx
EAIME.admx
EAIME.admx
EAIME.admx
EarlyLaunchAM.admx
EdgeUI.admx
EdgeUI.admx
EdgeUI.admx
EdgeUI.admx
EdgeUI.admx
EdgeUI.admx
EdgeUI.admx
EncryptFilesonMove.admx
EnhancedStorage.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
Do not allow color changes User

Do not allow color changes Machine
Turn on misconversion loggUser
Turn off saving auto-tuning User
Turn off history-based prediUser
Turn off Open Extended DicUser
Turn off Internet search int User
Turn off custom dictionary User
Restrict character code ra User
Do not include Non-Publish User
Turn on cloud candidate
User
Boot-Start Driver Initializat Machine
Turn off switching between User
Turn off tracking of app us User
Do not show recent apps wh
User
Search Share Start DevicesUser
Prevent users from replac User
Disable help tips
Machine
Disable help tips
User
Do not automatically encry Machine
Allow only USB root hub c Machine
Lock Enhanced Storage whe
Machine
Do not allow non-EnhancedMachine
Do not allow password aut Machine
Do not allow Windows to a Machine
Configure list of IEEE 1667 Machine
Configure list of Enhanced Machine
Configure Error Reporting Machine
Display Error Notification Machine
Disable Windows Error RepoUser
Disable Windows Error RepoMachine
Prevent display of the user Machine
Disable logging
User
Disable logging
Machine
Do not send additional dat User
Do not send additional dat Machine
Do not throttle additional d User
Do not throttle additional d Machine
Send additional data when User
Send additional data when Machine
Send data when on connectUser
Send data when on connectMachine
Automatically send memoryUser
Automatically send memoryMachine
Default application reporti Machine
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
ErrorReporting.admx
EventForwarding.admx
EventForwarding.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventLog.admx
EventViewer.admx
EventViewer.admx
EventViewer.admx
Explorer.admx
Explorer.admx
Explorer.admx
List of applications to neve Machine

List of applications to alwa Machine
Report operating system erMachine
Configure Report Archive User
Configure Report Archive Machine
Configure Corporate Windo Machine
List of applications to be e User
List of applications to be e Machine
Configure Report Queue
User
Configure Report Queue
Machine
Customize consent settingsUser
Customize consent settingsMachine
Ignore custom consent settUser
Ignore custom consent settMachine
Configure Default consent User
Configure Default consent Machine
Configure target Subscript Machine
Configure forwarder resour Machine
Back up log automatically Machine
Configure log access
Machine
Control Event Log behavior Machine
Control the location of the lMachine
Specify the maximum log fiMachine
Machine
Machine
Turn on logging
Machine
Machine
Events.asp program
Machine
Events.asp program commaMachine
Events.asp URL
Machine
Display the menu bar in Fil User
Prevent users from adding fi
User
Turn off common control a User
Explorer.admx
Explorer.admx
Explorer.admx
ExternalBoot.admx
ExternalBoot.admx
ExternalBoot.admx
FileHistory.admx
FileRecovery.admx
FileRevocation.admx
FileServerVSSAgent.admx
FileServerVSSProvider.admx
FileSys.admx
FileSys.admx
FileSys.admx
FileSys.admx
FileSys.admx
FileSys.admx
FileSys.admx
FolderRedirection.admx
FramePanes.admx
FramePanes.admx
fthsvc.admx
GameExplorer.admx
GameExplorer.admx
GameExplorer.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Turn off Data Execution Pre Machine

Turn off heap termination o Machine
Set a support web page lin Machine
Windows To Go Default Sta Machine
Allow hibernate (S4) when Machine
Disallow standby sleep st Machine
Turn off File History
Machine
Configure Corrupted File R Machine
Allow Windows Runtime appUser
Configure maximum age ofMachine
Allow or Disallow use of e Machine
Selectively allow the evalu Machine
Do not allow compression Machine
Do not allow encryption on Machine
Enable NTFS pagefile encryMachine
Short name creation optionMachine
Disable delete notification Machine
Enable / disable TXF depre Machine
Use localized subfolder n User
Do not automatically make User
a
Do not automatically make User
s
Use localized subfolder n Machine
Enable optimized move of cUser
Redirect folders on primar User
Redirect folders on primar Machine
Turn on or off details pane User
Turn off Preview Pane
User
Configure Scenario Executi Machine
Turn off downloading of ga Machine
Turn off tracking of last p Machine
Turn off game updates
Machine
Disallow selection of Cust User
Disallow selection of Cust Machine
Restrict system locales
Machine
Disallow copying of user i Machine
Restrict user locales
User
Restrict user locales
Machine
Disallow changing of geogr User
Disallow changing of geogr Machine
Disallow user override of loUser
Disallow user override of loMachine
Hide Regional and LanguagUser
Hide the geographic locati User
Hide the select language g User
Hide user locale selection User
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
Globalization.admx
GroupPolicy-Server.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
Restricts the UI language Machine

Restricts the UI languages User
Force selected system UI l Machine
Restrict selection of Win
User
Turn off offer text predictio User
Turn off insert a space afte User
Turn off autocorrect misspeUser
Turn off highlight misspell User
Block clean-up of unused Machine
Century interpretation for User
Turn off automatic learning User
Turn off automatic learning Machine
Allow asynchronous user G Machine
Configure Group Policy Cac Machine
Enable Group Policy CachinMachine
Configure Logon Script Del Machine
Enable AD/DFS domain contr
Machine
Turn off Group Policy Clien Machine
Configure Direct Access co Machine
Change Group Policy proce Machine
Turn off Local Group Policy Machine
Specify startup policy proc Machine
Allow cross-forest user pol Machine
Configure software Installa Machine
Configure disk quota polic Machine
Configure EFS recovery pol Machine
Configure folder redirectio Machine
Configure Internet Explore Machine
Configure IP security polic Machine
Configure registry policy p Machine
Configure scripts policy pr Machine
Configure security policy p Machine
Configure wireless policy p Machine
Configure wired policy pro Machine
Determine if interactive us User
Determine if interactive us Machine
Turn off automatic update oUser
Turn off background refreshMachine
Remove users' ability to i Machine
Enforce Show Policies Only User
Configure Group Policy domUser
Configure Group Policy slowUser
Configure Group Policy slowMachine
Set Group Policy refresh in Machine
Set Group Policy refresh in Machine
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
grouppolicy.admx
GroupPolicyPreferences.admx
Set Group Policy refresh intUser

Set default name for new GUser
Create new Group Policy ObUser
Always use local ADM files Machine
Turn off Resultant Set of Po Machine
Configure user Group Poli Machine
Specify workplace connectiv
Machine
Configure Applications pre Machine
Configure Applications pre Machine
Configure Data Sources preMachine
Configure Data Sources preMachine
Configure Devices preferenMachine
Configure Devices preferenMachine
Configure Drive Maps prefeMachine
Configure Drive Maps prefeMachine
Configure Environment pre Machine
Configure Environment pre Machine
Configure Files preference Machine
Configure Files preference Machine
Configure Folder Options p Machine
Configure Folder Options p Machine
Configure Folders preferen Machine
Configure Folders preferen Machine
Configure Ini Files prefere Machine
Configure Ini Files prefere Machine
Configure Internet Setting Machine
Configure Internet Setting Machine
Configure Local Users and Machine
Configure Local Users and Machine
Configure Network Options Machine
Configure Network Options Machine
Configure Network Shares pMachine
Configure Network Shares pMachine
Configure Power Options prMachine
Configure Power Options prMachine
Configure Printers prefere Machine
Configure Printers prefere Machine
Configure Regional OptionsMachine
Configure Regional OptionsMachine
Configure Registry prefere Machine
Configure Registry prefere Machine
Configure Scheduled Tasks Machine
Configure Scheduled Tasks Machine
Configure Services prefere Machine
Configure Services prefere Machine
Help.admx
Help.admx
Help.admx
Help.admx
HelpAndSupport.admx
HelpAndSupport.admx
HelpAndSupport.admx
HelpAndSupport.admx
hotspotauth.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
Configure Shortcuts prefer Machine

Configure Shortcuts prefer Machine
Configure Start Menu prefe Machine
Configure Start Menu prefe Machine
Permit use of Application s User
Permit use of Applications User
Permit use of Control Pane User
Permit use of Data Sources User
Permit use of Devices pref User
Permit use of Drive Maps p User
Permit use of Environment User
Permit use of Files prefere User
Permit use of Folders pref User
Permit use of Folder Optio User
Permit use of Ini Files pre User
Permit use of Internet Sett User
Permit use of Local Users User
Permit use of Network Opti User
Permit use of Network SharUser
Permit use of Power Option User
Permit use of Printers pref User
Permit use of Regional Opt User
Permit use of Registry pre User
Permit use of Scheduled Ta User
Permit use of Services pre User
Permit use of Shortcuts pr User
Permit use of Start Menu p User
Permit use of Control Panel User
Permit use of Preferences t User
Restrict potentially unsafe Machine
Restrict these programs f User
Restrict these programs f Machine
Turn off Data Execution Pr Machine
Turn off Active Help
Machine
Turn off Help Ratings
User
Turn off Help Experience User
Turn off Windows Online
User
Enable Hotspot AuthenticatMachine
Restrict Internet communic User
Restrict Internet communic Machine
Turn off Automatic Root CerMachine
Turn off printing over HTTP User
Turn off printing over HTTP Machine
Turn off downloading of pri User
Turn off downloading of pri Machine
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
ICM.admx
IIS.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
Turn off Windows Update deMachine

Turn off Event Viewer "EvenMachine
Turn off Help and Support Machine
Turn off Help and Support Machine
Turn off Internet Connectio Machine
Turn off Registration if UR Machine
Turn off Windows Error Rep Machine
Turn off access to all Win Machine
Turn off Search Companion Machine
Turn off Internet File Assoc User
Turn off Internet File Assoc Machine
Turn off access to the StoreUser
Turn off access to the StoreMachine
Turn off Internet download User
Turn off Internet download Machine
Turn off the "Order Prints" User
Turn off the "Order Prints" Machine
Turn off the "Publish to WebUser
Turn off the "Publish to WebMachine
Turn off the Windows Mes User
Turn off the Windows Mes Machine
Turn off Windows Custome Machine
Turn off Windows Network CMachine
Prevent IIS installation
Machine
Audio/Video Player
User
Carpoint
User
DHTML Edit Control
User
Shockwave Flash
User
Investor
User
Menu Controls
User
Microsoft Agent
User
Microsoft Chat
User
MSNBC
User
NetShow File Transfer ContrUser
Microsoft Scriptlet Compon User
Microsoft Survey Control User
Turn off the flip ahead wit Machine
Turn off the flip ahead wit User
Turn off loading websites Machine
Turn off loading websites User
Allow active content from Machine
Allow active content from User
Check for server certificat Machine
Check for server certificat User
Turn off ClearType
Machine
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
Turn off ClearType

User
Turn on Caret Browsing supMachine
Turn on Caret Browsing supUser
Turn on Enhanced Protecte Machine
Turn on Enhanced Protecte User
Turn on 64-bit tab proces Machine
Turn on 64-bit tab proces User
Do not allow ActiveX cont Machine
Do not allow ActiveX cont User
Always send Do Not Track Machine
Always send Do Not Track User
Use HTTP 1.1
Machine
Use HTTP 1.1
User
Use HTTP 1.1 through prox Machine
Use HTTP 1.1 through prox User
Allow Internet Explorer to Machine
Allow Internet Explorer to User
Turn off encryption support Machine
Turn off encryption support User
Do not allow resetting Inte Machine
Do not allow resetting Inte User
Check for signatures on d Machine
Check for signatures on d User
Allow third-party browser Machine
Allow third-party browser User
Allow Install On Demand (I Machine
Allow Install On Demand (I User
Allow Install On Demand (eMachine
Allow Install On Demand (eUser
Automatically check for In Machine
Automatically check for In User
Allow software to run or insMachine
Allow software to run or insUser
Play animations in web pa Machine
Play animations in web pa User
Play sounds in web pages Machine
Play sounds in web pages User
Play videos in web pages Machine
Play videos in web pages User
Turn off Profile Assistant
Machine
Turn off Profile Assistant
User
Do not save encrypted page
Machine
Do not save encrypted page
User
Empty Temporary Internet FMachine
Empty Temporary Internet FUser
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
Show Content Advisor on InMachine

Show Content Advisor on InUser
Turn on inline AutoComplet User
Turn off inline AutoCompletUser
Go to an intranet site for Machine
Go to an intranet site for User
Turn on script debugging User
Turn off details in messag User
Turn off page transitions User
Turn on the display of scrip User
Turn off smooth scrolling User
Turn off configuring underli User
Turn off phone number det Machine
Turn off phone number det User
Subscription Limits
User
Disable adding channels User
Disable adding schedules foUser
Disable offline page hit log User
Disable channel user inter User
Disable editing and creati User
Disable editing schedules f User
Disable removing channels User
Disable removing schedulesUser
Disable all scheduled offli User
Disable downloading of sit User
Prevent specifying the co Machine
Prevent choosing default teUser
Disable the Advanced pageMachine
Disable the Advanced pageUser
Disable the Connections p Machine
Disable the Connections p User
Disable the Content page Machine
Disable the Content page User
Disable the General page Machine
Disable the General page User
Disable the Privacy page Machine
Disable the Privacy page User
Disable the Programs page Machine
Disable the Programs page User
Disable the Security page Machine
Disable the Security page User
Send internationalized do Machine
Send internationalized do User
Turn off sending UTF-8 querMachine
Turn off sending UTF-8 querUser
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
Use UTF-8 for mailto links Machine

Use UTF-8 for mailto links User
Prevent ignoring certificate Machine
Prevent ignoring certificate User
Turn off sending URL path User
Prevent specifying backgro User
Prevent specifying text col User
Prevent the use of WindowsUser
Prevent specifying cipher Machine
Start the Internet Connect User
Turn on ActiveX control log Machine
Turn on ActiveX control log User
Remove "Run this time" butMachine
Remove "Run this time" butUser
Turn off blocking of outdat Machine
Turn off blocking of outdat User
Turn off blocking of outdat Machine
Turn off blocking of outdat User
Add-on List
Machine
Add-on List
User
Deny all add-ons unless speMachine
Deny all add-ons unless speUser
All Processes
Machine
All Processes
User
Process List
Machine
Process List
User
Admin-approved behaviors Machine
Admin-approved behaviors User
Install binaries signed by Machine
Install binaries signed by User
All Processes
Machine
All Processes
User
Internet Explorer ProcessesMachine
Internet Explorer ProcessesUser
Process List
Machine
Process List
User
All Processes
Machine
All Processes
User
Process List
Machine
Process List
User
All Processes
Machine
All Processes
User
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
Internet Explorer
Process List
Process List
All Processes
All Processes
Internet Explorer
Internet Explorer
Process List
Process List
All Processes
All Processes
Internet Explorer
Internet Explorer
Process List
Process List
All Processes
All Processes
Internet Explorer
Internet Explorer
Process List
Process List
All Processes
All Processes
Internet Explorer
Internet Explorer
Process List
Process List
All Processes
All Processes
Internet Explorer
Internet Explorer
Process List
Process List
All Processes
All Processes
Internet Explorer
Internet Explorer
Process List
Process List
All Processes
All Processes
Internet Explorer
Internet Explorer
Process List
Process List
ProcessesUser
Machine
User
Machine
User
ProcessesMachine
ProcessesUser
Machine
User
Machine
User
ProcessesMachine
ProcessesUser
Machine
User
Machine
User
ProcessesMachine
ProcessesUser
Machine
User
Machine
User
ProcessesMachine
ProcessesUser
Machine
User
Machine
User
ProcessesMachine
ProcessesUser
Machine
User
Machine
User
ProcessesMachine
ProcessesUser
Machine
User
Machine
User
ProcessesMachine
ProcessesUser
Machine
User
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
All Processes
Machine
All Processes
User
Process List
Machine
Process List
User
All Processes
Machine
All Processes
User
Process List
Machine
Process List
User
Internet Zone Restricted Pr Machine
Internet Zone Restricted Pr User
Intranet Zone Restricted Pr Machine
Intranet Zone Restricted Pr User
Local Machine Zone RestricMachine
Local Machine Zone RestricUser
Restricted Sites Zone Restr Machine
Restricted Sites Zone Restr User
Trusted Sites Zone Restrict Machine
Trusted Sites Zone Restrict User
Turn off Crash Detection
Machine
Turn off Crash Detection
User
Allow Microsoft services t Machine
Allow Microsoft services t User
Turn off Automatic Crash R Machine
Turn off Automatic Crash R User
Turn off Reopen Last Brows Machine
Turn off Reopen Last Brows User
Do not allow users to enab Machine
Do not allow users to enab User
Add a specific list of searc Machine
Add a specific list of searc User
Turn on menu bar by defaulMachine
Turn on menu bar by defaulUser
Turn off Favorites bar
Machine
Turn off Favorites bar
User
Disable caching of Auto-ProUser
Disable external branding oUser
Disable changing AdvancedUser
Customize user agent strin Machine
Customize user agent strin User
Use Automatic Detection foUser
Prevent "Fix settings" functMachine
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
Prevent "Fix settings" functUser

Prevent managing the phishMachine
Prevent managing the phishUser
Turn off Managing SmartScre
Machine
Turn off Managing SmartScre
User
Prevent managing SmartScrMachine
Prevent managing SmartScrUser
Prevent bypassing SmartScrMachine
Prevent bypassing SmartScrUser
Prevent bypassing SmartScrMachine
Prevent bypassing SmartScrUser
Turn off the Security Setti Machine
Turn off the Security Setti User
Position the menu bar abovUser
Prevent changing pop-up filMachine
Prevent changing pop-up filUser
Display error message on pUser
Turn on compatibility loggi Machine
Turn on compatibility loggi User
Enforce full-screen mode Machine
Enforce full-screen mode User
Disable Import/Export Sett Machine
Disable Import/Export Sett User
Turn off browser geolocatio Machine
Turn off browser geolocatio User
Turn off Adobe Flash in Int Machine
Turn off Adobe Flash in Int User
Turn off page-zooming functMachine
Turn off page-zooming functUser
Identity Manager: Prevent uUser
Automatically activate newMachine
Automatically activate newUser
Turn off add-on performance
Machine
Turn off add-on performance
User
Turn on ActiveX Filtering
Machine
Turn on ActiveX Filtering
User
Configure Media Explorer BUser
Prevent access to Delete B Machine
Prevent access to Delete B User
Prevent deleting form data Machine
Prevent deleting form data User
Prevent deleting passwordsMachine
Prevent deleting passwordsUser
Prevent deleting cookies Machine
Prevent deleting cookies User
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
Prevent deleting websites tMachine

Prevent deleting websites tUser
Prevent deleting download Machine
Prevent deleting download User
Prevent deleting temporaryMachine
Prevent deleting temporaryUser
Prevent deleting InPrivate FMachine
Prevent deleting InPrivate FUser
Prevent deleting ActiveX Fi Machine
Prevent deleting ActiveX Fi User
Prevent deleting favorites Machine
Prevent deleting favorites User
Allow deleting browsing hisMachine
Allow deleting browsing hisUser
Prevent running First Run wMachine
Prevent running First Run wUser
Prevent access to Internet Machine
Prevent access to Internet User
Prevent Internet Explorer Machine
Prevent Internet Explorer User
Turn off suggestions for all Machine
Turn off suggestions for all User
Turn off the quick pick men Machine
Turn off the quick pick men User
Disable Automatic Install Machine
Set tab process growth
Machine
Set tab process growth
User
Allow Internet Explorer 8 Machine
Allow Internet Explorer 8 User
Specify default behavior fo Machine
Specify default behavior fo User
Turn off Tab Grouping
User
Turn off Quick Tabs functionMachine
Turn off Quick Tabs functionUser
Prevent changing the defauMachine
Prevent changing the defauUser
Disable showing the splashMachine
Turn off tabbed browsing Machine
Turn off tabbed browsing User
Turn off configuration of
Machine
Turn off configuration of
User
Disable Periodic Check for Machine
Prevent configuration of
Machine
Prevent configuration of
User
Configure Outlook Express User
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
Pop-up allow list

Machine
Pop-up allow list
User
Disable changing accessibilUser
Disable changing AutomaticMachine
Disable changing AutomaticUser
Disable changing Temporary
User
Disable changing Calendar User
Disable changing certificat User
Disable changing default b User
Notify users if Internet Ex User
Disable changing color settUser
Disable changing connectioUser
Disable changing connectioMachine
Disable Internet Connectio User
Disable changing font setti User
Disable AutoComplete for User
Turn on the auto-complete User
Disable "Configuring Histor Machine
Disable "Configuring Histor User
Disable changing home pagUser
Disable changing secondar Machine
Disable changing secondar User
Disable changing languageUser
Disable changing link color User
Disable changing MessaginUser
Prevent managing pop-up ex
Machine
Prevent managing pop-up ex
User
Turn off pop-up manageme Machine
Turn off pop-up manageme User
Disable changing Profile As User
Prevent changing proxy setMachine
Prevent changing proxy setUser
Disable changing ratings seUser
Disable the Reset Web SettUser
Prevent the deletion of temMachine
Prevent the deletion of temUser
Turn off the auto-complete Machine
Turn off the auto-complete User
Turn off Windows Search A Machine
Turn off Windows Search A User
Turn off URL Suggestions Machine
Turn off URL Suggestions User
Search: Disable Find Files User
Search: Disable Search Cu User
Security Zones: Use only mMachine
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
Security Zones: Do not all Machine

Security Zones: Do not allo Machine
Disable software update shMachine
Restrict search providers toMachine
Restrict search providers toUser
Prevent participation in
Machine
Prevent participation in
User
Prevent configuration of ne Machine
Prevent configuration of ne User
Make proxy settings per-maMachine
Allow websites to open win Machine
Allow websites to open win User
Allow video and animation Machine
Allow video and animation User
Allow scriptlets
Machine
Allow scriptlets
User
Turn off first-run prompt
Machine
User
Include local path when useMachine
Include local path when useUser
Turn on SmartScreen Filter Machine
Turn on SmartScreen Filter User
Allow websites to prompt f Machine
Allow websites to prompt f User
Allow updates to status barMachine
Allow updates to status barUser
Turn on Protected Mode
Machine
User
Show security warning for pMachine
Show security warning for pUser
Allow loading of XAML BrowMachine
Allow loading of XAML BrowUser
Allow scripting of Internet Machine
Allow scripting of Internet User
Turn off .NET Framework S Machine
Turn off .NET Framework S User
Allow loading of XAML files Machine
Allow loading of XAML files User
Allow loading of XPS files Machine
Allow loading of XPS files User
Access data sources acros Machine
Access data sources acros User
Allow active scripting
Machine
User
Allow only approved domai Machine
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
Allow only approved domai User

Allow META REFRESH
Machine
Allow META REFRESH
User
Allow cut copy or paste opeMachine
Allow cut copy or paste opeUser
Allow binary and script behMachine
Allow binary and script behUser
Use Pop-up Blocker
Machine
Use Pop-up Blocker
User
Display mixed content
Machine
User
Download signed ActiveX c Machine
Download signed ActiveX c User
Download unsigned ActiveXMachine
Download unsigned ActiveXUser
Allow drag and drop or copyMachine
Allow drag and drop or copyUser
Render legacy filters
Machine
User
Allow file downloads
Machine
User
Allow font downloads
Machine
User
Allow installation of deskt Machine
Allow installation of deskt User
Java permissions
Machine
Java permissions
User
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
Launching applications andMachine

Launching applications andUser
Logon options
Machine
Logon options
User
Enable MIME Sniffing
Machine
User
Enable dragging of contentMachine
Enable dragging of contentUser
Enable dragging of conten Machine
Enable dragging of conten User
Navigate windows and framMachine
Navigate windows and framUser
Allow active content over Machine
Allow active content over User
Do not prompt for client cerMachine
Do not prompt for client cerUser
Automatic prompting for AcMachine
Automatic prompting for AcUser
Automatic prompting for fi Machine
Automatic prompting for fi User
Run ActiveX controls and p Machine
Run ActiveX controls and p User
Script ActiveX controls mar Machine
Script ActiveX controls mar User
Don't run antimalware progMachine
Don't run antimalware progUser
Initialize and script Activ Machine
Initialize and script Activ User
Scripting of Java applets Machine
Scripting of Java applets User
Run .NET Framework-relian Machine
Run .NET Framework-relian User
Software channel permissi Machine
Software channel permissi User
Submit non-encrypted formMachine
Submit non-encrypted formUser
Turn on Cross-Site ScriptingMachine
Turn on Cross-Site ScriptingUser
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx

Userdata persistence
Machine
User
Allow script-initiated wind Machine
Allow script-initiated wind User
Web sites in less privileg Machine
Web sites in less privileg User
Allow scriptlets
Machine
Allow scriptlets
User
Machine
User
Machine
User
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx

Machine
User
Allow META REFRESH
Machine
Allow META REFRESH
User
Use Pop-up Blocker
Machine
Use Pop-up Blocker
User
Machine
User
Machine
User
Machine
User
Machine
User
Java permissions
Machine
Java permissions
User
Logon options
Machine
Logon options
User
Machine
User
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx

Machine
User
Allow scriptlets
Machine
Allow scriptlets
User
Machine
User
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx

Machine
User
Machine
User
Allow META REFRESH
Machine
Allow META REFRESH
User
Use Pop-up Blocker
Machine
Use Pop-up Blocker
User
Machine
User
Machine
User
Machine
User
Machine
User
Java permissions
Machine
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
Java permissions
User
Logon options
Machine
Logon options
User
Machine
User
Machine
User
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx

Allow scriptlets
Machine
Allow scriptlets
User
Machine
User
Machine
User
Machine
User
Allow META REFRESH
Machine
Allow META REFRESH
User
Use Pop-up Blocker
Machine
Use Pop-up Blocker
User
Machine
User
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx

Machine
User
Machine
User
Machine
User
Java permissions
Machine
Java permissions
User
Logon options
Machine
Logon options
User
Machine
User
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx

Machine
User
Allow scriptlets
Machine
Allow scriptlets
User
Machine
User
Machine
User
Machine
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx

User
Allow META REFRESH
Machine
Allow META REFRESH
User
Use Pop-up Blocker
Machine
Use Pop-up Blocker
User
Machine
User
Machine
User
Machine
User
Machine
User
Java permissions
Machine
Java permissions
User
Logon options
Machine
Logon options
User
Machine
User
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx

Machine
User
Allow scriptlets
Machine
Allow scriptlets
User
Machine
User
Machine
User
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx

Machine
User
Allow META REFRESH
Machine
Allow META REFRESH
User
Use Pop-up Blocker
Machine
Use Pop-up Blocker
User
Machine
User
Machine
User
Machine
User
Machine
User
Java permissions
Machine
Java permissions
User
Logon options
Machine
Logon options
User
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx

Machine
User
Machine
User
Allow scriptlets
Machine
Allow scriptlets
User
Machine
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx

User
Machine
User
Machine
User
Allow META REFRESH
Machine
Allow META REFRESH
User
Use Pop-up Blocker
Machine
Use Pop-up Blocker
User
Machine
User
Machine
User
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx

Machine
User
Machine
User
Java permissions
Machine
Java permissions
User
Logon options
Machine
Logon options
User
Machine
User
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx

Machine
User
Allow scriptlets
Machine
Allow scriptlets
User
Machine
User
Machine
User
Machine
User
Allow META REFRESH
Machine
Allow META REFRESH
User
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx

Use Pop-up Blocker
Machine
Use Pop-up Blocker
User
Machine
User
Machine
User
Machine
User
Machine
User
Java permissions
Machine
Java permissions
User
Logon options
Machine
Logon options
User
Machine
User
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx

Machine
User
Intranet Sites: Include all l Machine
Intranet Sites: Include all l User
Turn on certificate addres Machine
Turn on certificate addres User
Locked-Down Internet ZoneMachine
Locked-Down Internet ZoneUser
Internet Zone Template
Machine
Internet Zone Template
User
Locked-Down Intranet Zon Machine
Locked-Down Intranet Zon User
Intranet Zone Template
Machine
Intranet Zone Template
User
Locked-Down Local Machin Machine
Locked-Down Local Machin User
Local Machine Zone TemplaMachine
Local Machine Zone TemplaUser
Locked-Down Restricted Si Machine
Locked-Down Restricted Si User
Restricted Sites Zone TempMachine
Restricted Sites Zone TempUser
Locked-Down Trusted Sites Machine
Locked-Down Trusted Sites User
Trusted Sites Zone Templat Machine
Trusted Sites Zone Templat User
Intranet Sites: Include all Machine
Intranet Sites: Include all User
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
Intranet Sites: Include all Machine

Intranet Sites: Include all User
Site to Zone Assignment Li Machine
Site to Zone Assignment Li User
Turn on automatic detectionMachine
Turn on automatic detectionUser
Turn on Notification bar notMachine
Turn on Notification bar notUser
Allow scriptlets
Machine
Allow scriptlets
User
Machine
User
Machine
User
Machine
User
Allow META REFRESH
Machine
Allow META REFRESH
User
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx

Use Pop-up Blocker
Machine
Use Pop-up Blocker
User
Machine
User
Machine
User
Machine
User
Machine
User
Java permissions
Machine
Java permissions
User
Logon options
Machine
Logon options
User
Machine
User
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx

Machine
User
Allow scriptlets
Machine
Allow scriptlets
User
Machine
User
Machine
User
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx

Machine
User
Allow META REFRESH
Machine
Allow META REFRESH
User
Use Pop-up Blocker
Machine
Use Pop-up Blocker
User
Machine
User
Machine
User
Machine
User
Machine
User
Java permissions
Machine
Java permissions
User
Logon options
Machine
Logon options
User
Machine
User
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx

Machine
User
Prevent specifying the hoveUser
Prevent specifying the colo User
Prevent specifying the colo User
Turn on the hover color opt User
File menu: Disable closing User
File menu: Disable Save As User
File menu: Disable Save A User
File menu: Disable New meUser
File menu: Disable Open m User
Help menu: Remove 'Send User
Help menu: Remove 'For N User
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
Help menu: Remove 'Tip of User

Help menu: Remove 'Tour' User
Turn off Shortcut Menu
User
Hide Favorites menu
User
Disable Open in New Wind User
Disable Save this program User
Turn off Print Menu
Machine
Turn off Print Menu
User
Tools menu: Disable Intern User
Turn off the ability to lau Machine
Turn off the ability to lau User
View menu: Disable Full S User
View menu: Disable SourceUser
Turn off automatic image reUser
Turn off image display
User
Allow Internet Explorer to Machine
Allow Internet Explorer to User
Allow the display of image User
Turn off smart image ditherUser
File size limits for Local M User
File size limits for Intranet User
File size limits for Trusted User
File size limits for Internet User
File size limits for Restrict User
Turn on printing of backgr User
Turn off background synchr Machine
Turn off background synchr User
Prevent downloading of en Machine
Prevent downloading of en User
Prevent subscribing to or d Machine
Prevent subscribing to or d User
Prevent automatic discoverMachine
Prevent automatic discoverUser
Prevent access to feed list Machine
Prevent access to feed list User
Turn on Basic feed authent Machine
Turn on Basic feed authent User
Bypass prompting for Clipb Machine
Bypass prompting for Clipb User
Bypass prompting for Clipbo
Machine
Bypass prompting for Clipbo
User
Define applications and pr Machine
Define applications and pr User
Prevent configuration of s Machine
Prevent configuration of s User
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
Prevent configuration of to Machine

Prevent configuration of to User
Allow native XMLHTTP suppMachine
Allow native XMLHTTP suppUser
Turn off Data URI support Machine
Turn off Data URI support User
Turn off Data Execution Pr Machine
Do not display the reveal Machine
Do not display the reveal User
Change the maximum numbe
Machine
Change the maximum numbe
User
Maximum number of connect
Machine
Maximum number of connect
User
Turn off cross-document m Machine
Turn off cross-document m User
Turn off the XDomainRequeMachine
Turn off the XDomainRequeUser
Turn off the WebSocket Obj Machine
Turn off the WebSocket Obj User
Set the maximum number oMachine
Set the maximum number oUser
Turn on automatic signup User
Turn off toolbar upgrade to Machine
Turn off toolbar upgrade to User
Turn off Developer Tools
Machine
Turn off Developer Tools
User
Disable customizing browseUser
Disable customizing browseUser
Configure Toolbar Buttons User
Hide the Command bar
Machine
Hide the Command bar
User
Hide the status bar
Machine
Hide the status bar
User
Lock all toolbars
Machine
Lock all toolbars
User
Lock location of Stop and Machine
Lock location of Stop and User
Customize command labelsMachine
Customize command labelsUser
Use large icons for comma Machine
Use large icons for comma User
Display tabs on a separate Machine
Display tabs on a separate User
Prevent specifying the updaMachine
Prevent changing the URL fMachine
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
Turn off ActiveX Opt-In pro Machine

Turn off ActiveX Opt-In pro User
Prevent per-user installatio Machine
Prevent per-user installatio User
Specify use of ActiveX InstaMachine
Specify use of ActiveX InstaUser
Turn on Suggested Sites
Machine
Turn on Suggested Sites
User
Turn off InPrivate Browsing Machine
Turn off InPrivate Browsing User
Prevent the computer from Machine
Prevent the computer from User
Turn off collection of InPriv Machine
Turn off collection of InPriv User
Establish InPrivate Filterin Machine
Establish InPrivate Filterin User
Turn off InPrivate Filtering Machine
Turn off InPrivate Filtering User
Establish Tracking Protecti Machine
Establish Tracking Protecti User
Turn off Tracking Protection Machine
Turn off Tracking Protection User
Add non-default AcceleratoUser
Add non-default AcceleratoMachine
Add default Accelerators User
Add default Accelerators Machine
Turn off Accelerators
Machine
Turn off Accelerators
User
Restrict Accelerators to t Machine
Restrict Accelerators to t User
Turn on Internet Explorer Machine
Turn on Internet Explorer User
Turn off Compatibility View Machine
Turn off Compatibility View User
Turn on Internet Explorer S Machine
Turn on Internet Explorer S User
Turn off Compatibility View Machine
Turn off Compatibility View User
Use Policy List of Internet Machine
Use Policy List of Internet User
Use Policy List of Quirks M Machine
Use Policy List of Quirks M User
Include updated website lisMachine
Include updated website lisUser
Turn off ability to pin site Machine
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
inetres.admx
InkWatson.admx
InkWatson.admx
iSCSI.admx
iSCSI.admx
iSCSI.admx
iSCSI.admx
iSCSI.admx
iSCSI.admx
iSCSI.admx
iSCSI.admx
iSCSI.admx
iSCSI.admx
kdc.admx
Turn off ability to pin site User

Let users turn on and use Machine
Let users turn on and use User
Use the Enterprise Mode IE Machine
Use the Enterprise Mode IE User
Set default storage limits f Machine
Set default storage limits f User
Allow websites to store in Machine
Allow websites to store in User
Set indexed database storaMachine
Set indexed database storaUser
Set maximum indexed datab
Machine
Set maximum indexed datab
User
Allow websites to store ap Machine
Allow websites to store ap User
Set application cache stora Machine
Set application cache stora User
Set maximum application ca
Machine
User
Set application caches expiMachine
Set application caches expiUser
Machine
User
Machine
User
Start Internet Explorer wit Machine
Start Internet Explorer wit User
Open Internet Explorer tile Machine
Open Internet Explorer tile User
Set how links are opened inMachine
Set how links are opened inUser
Install new versions of Int Machine
Turn off handwriting recognUser
Turn off handwriting recognMachine
Do not allow manual configMachine
Do not allow manual configu
Machine
Do not allow manual configMachine
Do not allow adding new taMachine
Do not allow changes to in Machine
Do not allow additional ses Machine
Do not allow changes to ini Machine
Do not allow connections wMachine
Do not allow sessions wit Machine
Do not allow sessions wit Machine
Provide information about Machine
kdc.admx
kdc.admx
kdc.admx
kdc.admx
kerberos.admx
kerberos.admx
kerberos.admx
kerberos.admx
kerberos.admx
kerberos.admx
kerberos.admx
kerberos.admx
kerberos.admx
kerberos.admx
kerberos.admx
kerberos.admx
LanmanServer.admx
LanmanServer.admx
LeakDiagnostic.admx
LinkLayerTopologyDiscovery.admx
LinkLayerTopologyDiscovery.admx
LocationProviderAdm.admx
Logon.admx
Logon.admx
Logon.admx
Logon.admx
Logon.admx
Logon.admx
Logon.admx
Logon.admx
Logon.admx
Logon.admx
Logon.admx
Logon.admx
Logon.admx
Logon.admx
Logon.admx
Logon.admx
Logon.admx
Logon.admx
Logon.admx
Logon.admx
MediaCenter.admx
MediaCenter.admx
MMC.admx
Use forest search order

Machine
KDC support for claims co Machine
Warning for large Kerberos Machine
Request compound authentMachine
Define host name-to-Kerbe Machine
Define interoperable Kerbe Machine
Require strict KDC validati Machine
Use forest search order
Machine
Require strict target SPN Machine
Specify KDC proxy servers fMachine
Disable revocation checkingMachine
Fail authentication reques Machine
Support compound authentMachine
Set maximum Kerberos SSPI
Machine
Kerberos client support f Machine
Always send compound auth
Machine
Hash Publication for Bran Machine
Hash Version support for Machine
Turn on Mapper I/O (LLTDIO)Machine
Turn on Responder (RSPNDR
Machine
Turn off Windows Location Machine
Do not process the legacy rUser
Do not process the legacy rMachine
Do not process the run once
User
Do not process the run once
Machine
Always use classic logon Machine
Do not display the Getting Machine
Run these programs at use User
Run these programs at use Machine
Always wait for the networ Machine
Remove Boot / Shutdown / Machine
Do not display the Getting User
Display highly detailed st Machine
Hide entry points for Fast Machine
Turn off Windows Startup s Machine
Show first sign-in animatio Machine
Always use custom logon Machine
Do not display network seleMachine
Do not enumerate connect Machine
Enumerate local users on Machine
Turn off app notifications o Machine
Do not allow Windows MediUser
Do not allow Windows MediMachine
Restrict the user from ent User
MMC.admx
MMC.admx
MMC.admx
MMC.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
Restrict users to the explic User

Extended View (Web View) User
ActiveX Control
User
Link to Web Address
User
AppleTalk Routing
User
Authorization Manager
User
Certification Authority Poli User
Connection Sharing (NAT) User
DCOM Configuration ExtensUser
Device Manager
User
DHCP Relay Management User
Enterprise PKI
User
Event Viewer
User
Event Viewer (Windows Vis User
IAS Logging
User
IGMP Routing
User
IP Routing
User
IPX RIP Routing
User
IPX Routing
User
IPX SAP Routing
User
Logical and Mapped Drives User
Online Responder
User
OSPF Routing
User
Public Key Policies
User
RAS Dialin - User Node
User
Remote Access
User
Removable Storage
User
RIP Routing
User
Routing
User
Send Console Message
User
Service Dependencies
User
Shared Folders Ext
User
SMTP Protocol
User
SNMP
User
System Properties
User
Group Policy Management User
Group Policy Object Editor User
Group Policy tab for Active User
Resultant Set of Policy snapUser
Administrative Templates User
Administrative Templates ( User
Folder Redirection
User
Internet Explorer Maintena User
IP Security Policy Manage User
Windows Firewall with Adv User
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
NAP Client Configuration User

Remote Installation ServiceUser
Scripts (Startup/Shutdown) User
Scripts (Logon/Logoff)
User
Security Settings
User
Software Installation (Com User
Software Installation (UsersUser
Wired Network (IEEE 802.3)User
Wireless Network (IEEE 802User
Administrative Templates User
Administrative Templates ( User
Folder Redirection
User
Internet Explorer Maintena User
Scripts (Startup/Shutdown) User
Scripts (Logon/Logoff)
User
Security Settings
User
Software Installation (Com User
Software Installation (UsersUser
Active Directory Domains aUser
Active Directory Sites and User
Active Directory Users an User
ADSI Edit
User
Certification Authority
User
Certificates
User
Certificate Templates
User
Component Services
User
Computer Management
User
Device Manager
User
Distributed File System
User
Disk Defragmenter
User
Disk Management
User
Event Viewer
User
Event Viewer (Windows Vis User
Failover Clusters Manager User
FAX Service
User
FrontPage Server ExtensionUser
Health Registration Authori User
Internet Authentication Ser User
Internet Information Servic User
Indexing Service
User
IP Security Policy Manage User
IP Security Monitor
User
Local Users and Groups
User
NAP Client Configuration User
.Net Framework Configurat User
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapins.admx
MMCSnapIns2.admx
MMCSnapIns2.admx
MMCSnapIns2.admx
MMCSnapIns2.admx
MMCSnapIns2.admx
MMCSnapIns2.admx
MMCSnapIns2.admx
MMCSnapIns2.admx
MMCSnapIns2.admx
MMCSnapIns2.admx
MMCSnapIns2.admx
MobilePCMobilityCenter.admx
MobilePCMobilityCenter.admx
MobilePCPresentationSettings.admx
MobilePCPresentationSettings.admx
msched.admx
msched.admx
msched.admx
MSDT.admx
MSDT.admx
MSDT.admx
Msi-FileRecovery.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
Network Policy Server (NPSUser

Performance Logs and AlertUser
QoS Admission Control
User
Remote Desktops
User
Routing and Remote Acces User
Removable Storage Manag User
Security Configuration and User
Security Templates
User
Server Manager
User
Services
User
Shared Folders
User
System Information
User
Telephony
User
Remote Desktop Services CUser
TPM Management
User
Windows Firewall with Adv User
Wireless Monitor
User
WMI Control
User
Group Policy Starter GPO EdUser
Group Policy Management EUser
Storage Manager for SANs User
Storage Manager for SANS User
Disk Management ExtensioUser
Share and Storage Manag User
Share and Storage Manage User
DFS Management
User
DFS Management Extensio User
File Server Resource ManagUser
File Server Resource Mana User
Turn off Windows Mobility User
Turn off Windows Mobility Machine
Turn off Windows presentatUser
Turn off Windows presentatMachine
Automatic Maintenance ActMachine
Automatic Maintenance Ra Machine
Automatic Maintenance WaMachine
Microsoft Support DiagnostiMachine
Microsoft Support DiagnostiMachine
Microsoft Support Diagnost Machine
Configure MSI Corrupted Fi Machine
Allow users to browse for Machine
Allow users to use media s Machine
Allow users to patch eleva Machine
Always install with elevate User
Always install with elevate Machine
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
msi.admx
NAPXPQec.admx
nca.admx
nca.admx
nca.admx
nca.admx
nca.admx
nca.admx
nca.admx
nca.admx
NCSI.admx
NCSI.admx
NCSI.admx
NCSI.admx
NCSI.admx
NCSI.admx
NetLogon.admx
NetLogon.admx
NetLogon.admx
NetLogon.admx
NetLogon.admx
NetLogon.admx
NetLogon.admx
NetLogon.admx
Prohibit use of Restart Man Machine

Remove browse dialog box Machine
Prohibit flyweight patching Machine
Turn off logging via packag Machine
Prevent removable media so
User
Turn off Windows Installer Machine
Prevent users from using WMachine
Prohibit rollback
User
Prohibit rollback
Machine
Allow user control over instMachine
Prohibit non-administrator Machine
Prohibit removal of update Machine
Turn off creation of Syste Machine
Prohibit User Installs
Machine
Enforce upgrade component
Machine
Control maximum size of baMachine
Specify the types of eventsMachine
Prevent Internet Explorer s Machine
Specify the order in which User
Save copies of transform fi Machine
Turn off shared component Machine
Prevent embedded UI
Machine
Allow the Network Access PMachine
Support Email Address
Machine
Friendly Name
Machine
User Interface
Machine
Prefer Local Names Allowe Machine
DirectAccess Passive Mode Machine
Corporate Resources
Machine
IPsec Tunnel Endpoints
Machine
Custom Commands
Machine
Specify corporate Website Machine
Specify corporate DNS pro Machine
Specify corporate DNS pro Machine
Specify corporate site prefixMachine
Specify domain location d Machine
Specify passive polling
Machine
Contact PDC on logon failu Machine
Use initial DC discovery re Machine
Use maximum DC discoveryMachine
r
Use final DC discovery retr Machine
Use positive periodic DC c Machine
Specify log file debug outp Machine
Specify expected dial-up d Machine
Specify maximum log file s Machine
NetLogon.admx
NetLogon.admx
NetLogon.admx
NetLogon.admx
NetLogon.admx
NetLogon.admx
NetLogon.admx
NetLogon.admx
NetLogon.admx
NetLogon.admx
NetLogon.admx
NetLogon.admx
NetLogon.admx
NetLogon.admx
NetLogon.admx
NetLogon.admx
NetLogon.admx
NetLogon.admx
NetLogon.admx
NetLogon.admx
NetLogon.admx
NetLogon.admx
NetLogon.admx
NetLogon.admx
NetLogon.admx
NetLogon.admx
NetworkConnections.admx
Specify negative DC DiscovMachine

Set Netlogon share compatiMachine
Specify positive periodic Machine
Set scavenge interval
Machine
Specify site name
Machine
Set SYSVOL share compatibi
Machine
Use DNS name resolution wMachine
Use DNS name resolution wh
Machine
Use automated site covera Machine
Specify DC Locator DNS recMachine
Specify Refresh Interval o Machine
Set TTL in the DC Locator Machine
Specify sites covered by Machine
Set Priority in the DC Loc Machine
Set Weight in the DC Loca Machine
Specify sites covered by t Machine
Specify sites covered by t Machine
Specify dynamic registrati Machine
Try Next Closest Site
Machine
Force Rediscovery Interval Machine
Return domain controller a Machine
Allow cryptography algori Machine
Do not process incoming mMachine
Do not use NetBIOS-based d
Machine
Specify address lookup behMachine
Use urgent mode when ping
Machine
Prohibit adding and remov User
Prohibit access to the Ad User
Prohibit TCP/IP advanced c User
Prohibit installation and
Machine
Prohibit Enabling/Disablin User
Ability to delete all user
User
Prohibit deletion of remot User
Prohibit access to the Re User
Enable Windows 2000 Netwo
User
Turn off notifications when User
Prohibit access to propert User
Ability to Enable/Disable User
Prohibit access to properti User
Prohibit access to the New User
Prohibit use of Internet C Machine
Ability to change propertie User
Prohibit access to propert User
Prohibit connecting and di User
Prohibit changing properti User
NetworkIsolation.admx
NetworkProjection.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
Ability to rename all user User

Ability to rename LAN connUser
Ability to rename LAN connUser
Prohibit renaming private User
Prohibit use of Internet
Machine
Prohibit viewing of status User
Require domain users to el Machine
Do not show the "local acc Machine
Route all traffic through th Machine
Internet proxy servers for Machine
Intranet proxy servers for Machine
Private network ranges for Machine
Proxy definitions are authorMachine
Subnet definitions are auth Machine
Turn off Connect to a NetwoUser
Turn off Connect to a NetwoMachine
Network Projector Port Sett Machine
Subfolders always availableMachine
Specify administratively as User
Specify administratively as Machine
Non-default server disconn User
Non-default server disconn Machine
Default cache size
Machine
Allow or Disallow use of theMachine
Encrypt the Offline Files ca Machine
Event logging level
User
Event logging level
Machine
Files not cached
Machine
Action on server disconnec User
Action on server disconnec Machine
Prevent use of Offline Files User
Prevent use of Offline Files Machine
Prohibit user configuration o
User
Prohibit user configuration o
Machine
Remove "Make Available O User
Remove "Make Available O Machine
Remove "Make Available Offl
User
Remove "Make Available Offl
Machine
Turn off reminder balloons User
Turn off reminder balloons Machine
At logoff delete local copy Machine
Reminder balloon frequenc User
Reminder balloon frequenc Machine
Initial reminder balloon lif User
Initial reminder balloon lif Machine
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
OfflineFiles.admx
P2P-pnrp.admx
P2P-pnrp.admx
P2P-pnrp.admx
P2P-pnrp.admx
P2P-pnrp.admx
P2P-pnrp.admx
P2P-pnrp.admx
P2P-pnrp.admx
P2P-pnrp.admx
P2P-pnrp.admx
P2P-pnrp.admx
P2P-pnrp.admx
P2P-pnrp.admx
P2P-pnrp.admx
ParentalControls.admx
pca.admx
pca.admx
pca.admx
pca.admx
pca.admx
pca.admx
pca.admx
PeerToPeerCaching.admx
Reminder balloon lifetime User

Reminder balloon lifetime Machine
Configure Slow link speed Machine
Synchronize all offline file User
Synchronize all offline file Machine
Synchronize all offline fil User
Synchronize all offline fil Machine
Synchronize offline files b User
Synchronize offline files b Machine
Turn on economical applicatMachine
Configure slow-link mode Machine
Limit disk space used by OffMachine
Configure Background SyncMachine
Enable Transparent Cachin Machine
Enable file screens
Machine
Remove "Work offline" co User
Remove "Work offline" co Machine
Enable file synchronizatio Machine
Turn off Microsoft Peer-to- Machine
Turn off Multicast BootstrapMachine
Turn off PNRP cloud creatio Machine
Set PNRP cloud to resolve Machine
Set the Seed Server
Machine
Set the Seed Server
Machine
Set the Seed Server
Machine
Disable password strength Machine
Make Family Safety control Machine
Detect compatibility issues Machine
Detect application install faMachine
Detect applications unable Machine
Detect application failur
Machine
Detect application failure Machine
Detect application installe Machine
Notify blocked drivers
Machine
Turn on BranchCache
Machine
Set percentage of disk spa Machine
Set BranchCache Hosted Machine
Set BranchCache Distribu Machine
Configure BranchCache for Machine
PenTraining.admx
PenTraining.admx
PerformanceDiagnostics.admx
PerformancePerftrack.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Enable Automatic Hosted CMachine

Configure Client BranchCa Machine
Configure Hosted Cache SeMachine
Set age for segments in th Machine
Turn off Tablet PC Pen Train User
Turn off Tablet PC Pen Train Machine
Enable/Disable PerfTrack Machine
Critical battery notification Machine
Low battery notification ac Machine
Critical battery notification Machine
Low battery notification levMachine
Turn off low battery user noMachine
Select the Power button ac Machine
Select the Sleep button actMachine
Select the lid switch action Machine
Select the Start menu PoweMachine
Select the Power button actMachine
Select the Sleep button actMachine
Select the lid switch action Machine
Select the Start menu PoweMachine
Turn Off the hard disk (plu Machine
Turn Off the hard disk (on bMachine
Specify a custom active po Machine
Select an active power pla Machine
Prompt for password on re User
Turn on the ability for appl Machine
Specify the system hibernaMachine
Require a password when aMachine
Specify the system sleep t Machine
Turn off hybrid sleep (pluggMachine
Turn on the ability for appl Machine
Specify the system hibernaMachine
Require a password when aMachine
Specify the system sleep t Machine
Turn off hybrid sleep (on baMachine
Turn off adaptive display t Machine
Turn off adaptive display t Machine
Turn off the display (pluggeMachine
Turn off the display (on bat Machine
Allow standby states (S1-S Machine
Allow standby states (S1-S Machine
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
Power.admx
PowerShellExecutionPolicy.admx
PreviousVersions.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Do not turn off system po Machine

Allow automatic sleep with Machine
Allow automatic sleep with Machine
Reduce display brightness Machine
Reduce display brightness Machine
Specify the display dim bri Machine
Specify the display dim bri Machine
Turn on desktop backgroun Machine
Turn on desktop backgroun Machine
Specify the unattended sle Machine
Specify the unattended sle Machine
Allow applications to prev Machine
Allow applications to preve Machine
Reserve battery notificationMachine
Turn on Script Execution
Machine
Turn on Script Execution
User
Turn on Module Logging
Machine
Turn on Module Logging
User
Set the default source pat Machine
Set the default source pat User
Prevent restoring previous User
Prevent restoring previous Machine
Hide previous versions list fUser
Hide previous versions list fMachine
Prevent restoring local pre User
Prevent restoring local pre Machine
Hide previous versions list User
Hide previous versions list Machine
Prevent restoring remote p User
Prevent restoring remote p Machine
Hide previous versions of f User
Hide previous versions of f Machine
Activate Internet printing Machine
Isolate print drivers from a Machine
Custom support URL in the Machine
P
Add Printer wizard - Netw Machine
Browse the network to find User
Always render print jobs onMachine
Always rasterize content toMachine
Browse a common web siteUser
t
Disallow installation of pr Machine
Prevent addition of printersUser
Prevent deletion of printersUser
Add Printer wizard - Netw Machine
Only use Package Point andUser
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing.admx
Printing2.admx
Printing2.admx
Printing2.admx
Printing2.admx
Printing2.admx
Printing2.admx
Printing2.admx
Printing2.admx
Printing2.admx
Printing2.admx
Programs.admx
Programs.admx
Programs.admx
Programs.admx
Programs.admx
Programs.admx
Programs.admx
PswdSync.admx
PswdSync.admx
PswdSync.admx
PswdSync.admx
QOS.admx
QOS.admx
QOS.admx
QOS.admx
QOS.admx
QOS.admx
QOS.admx
QOS.admx
QOS.admx
Package Point and print - User

Only use Package Point andMachine
Package Point and print - Machine
Computer location
Machine
Pre-populate printer searchMachine
Point and Print Restrictions User
Point and Print Restrictions Machine
Default Active Directory pa User
Printer browsing
Machine
Execute print drivers in is Machine
Override print driver execu Machine
Extend Point and Print co Machine
Do not allow v4 printer dri Machine
Change Microsoft XPS DocuMachine
Allow job name in event lo Machine
Allow Print Spooler to acce Machine
Automatically publish new p
Machine
Prune printers that are not Machine
Directory pruning interval Machine
Directory pruning priority Machine
Directory pruning retry
Machine
Log directory pruning retry Machine
Allow printers to be publis Machine
Check published state
Machine
Allow pruning of published Machine
Hide the Programs Control User
Hide "Programs and Featur User
Hide "Installed Updates" p User
Hide "Set Program Access User
Hide "Windows Marketplac User
Hide "Get Programs" page User
Hide "Windows Features" User
Turn on extensive logging Machine
Set the number of synchronMachine
Turn on the Windows to NISMachine
Set the interval between s Machine
Best effort service type
Machine
Controlled load service typ Machine
Guaranteed service type Machine
Network control service ty Machine
Qualitative service type
Machine
Machine
QOS.admx
QOS.admx
QOS.admx
QOS.admx
QOS.admx
QOS.admx
QOS.admx
QOS.admx
QOS.admx
QOS.admx
RacWmiProv.admx
Radar.admx
ReAgent.admx
Reliability.admx
Reliability.admx
Reliability.admx
Reliability.admx
RemoteAssistance.admx
RemovableStorage.admx

Machine
Limit outstanding packets Machine
Limit reservable bandwidthMachine
Set timer resolution
Machine
Machine
Non-conforming packets Machine
Machine
Configure Reliability WMI P Machine
Allow restore of system to Machine
Enable Persistent Time St Machine
Report unplanned shutdow Machine
Activate Shutdown Event T Machine
Display Shutdown Event Tr Machine
Turn on session logging
Machine
Allow only Windows Vista o Machine
Turn on bandwidth optimizaMachine
Customize warning messagMachine
Configure Solicited Remote Machine
Configure Offer Remote As Machine
Set time (in seconds) to fo User
Set time (in seconds) to fo Machine
CD and DVD: Deny read ac User
CD and DVD: Deny read ac Machine
CD and DVD: Deny write acUser
CD and DVD: Deny write acMachine
CD and DVD: Deny executeMachine
Custom Classes: Deny readUser
Custom Classes: Deny readMachine
Custom Classes: Deny writ User
Custom Classes: Deny writ Machine
Floppy Drives: Deny read a User
Floppy Drives: Deny read a Machine
Floppy Drives: Deny write User
Floppy Drives: Deny write Machine
Floppy Drives: Deny execu Machine
Removable Disks: Deny reaUser
Removable Disks: Deny reaMachine
Removable Disks: Deny wriUser
Removable Disks: Deny wriMachine
Removable Disks: Deny exeMachine
All Removable Storage clasUser
rpc.admx
rpc.admx
rpc.admx
rpc.admx
rpc.admx
rpc.admx
scripts.admx
scripts.admx
scripts.admx
scripts.admx
scripts.admx
scripts.admx
scripts.admx
scripts.admx
scripts.admx
scripts.admx
scripts.admx
scripts.admx
scripts.admx
sdiageng.admx
sdiageng.admx
sdiageng.admx
sdiagschd.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
All Removable Storage clasMachine

Tape Drives: Deny read accUser
Tape Drives: Deny read accMachine
Tape Drives: Deny write ac User
Tape Drives: Deny write ac Machine
Tape Drives: Deny execute Machine
WPD Devices: Deny read a User
WPD Devices: Deny read a Machine
WPD Devices: Deny write aUser
WPD Devices: Deny write aMachine
All Removable Storage: All Machine
Enable RPC Endpoint Mappe
Machine
Propagate extended error i Machine
Ignore Delegation Failure Machine
Set Minimum Idle Connecti Machine
Restrict Unauthenticated R Machine
Maintain RPC Troubleshooti Machine
Specify maximum wait timeMachine
Run legacy logon scripts h User
Display instructions in logo User
Run logon scripts synchron User
Run logon scripts synchron Machine
Display instructions in logo User
Run Windows PowerShell scr
Machine
Run Windows PowerShell scri
Machine
Run Windows PowerShell scri
User
Display instructions in shu Machine
Run startup scripts asynch Machine
Display instructions in star Machine
Allow logon scripts when N Machine
Configure Security Policy f Machine
Troubleshooting: Allow use Machine
Troubleshooting: Allow use Machine
Configure Scheduled Maint Machine
Prevent adding UNC locatioMachine
Prevent adding UNC locatioUser
Allow indexing of encryptedMachine
Disable indexer backoff
Machine
Prevent clients from query Machine
Prevent indexing when run Machine
Prevent customization of inMachine
Prevent customization of inUser
Allow use of diacritics
Machine
Always use automatic lang Machine
Do not allow locations on r Machine
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
Search.admx
SearchOCR.admx
SearchOCR.admx
SecurityCenter.admx
Sensors.admx
Sensors.admx
Sensors.admx
Sensors.admx
Sensors.admx
Sensors.admx
ServerManager.admx
ServerManager.admx
ServerManager.admx
ServerManager.admx
Servicing.admx
Don't search the web or di Machine

Don't search the web or di Machine
Set what information is sh Machine
Set the SafeSearch setting Machine
Prevent automatically addi Machine
Prevent adding user-specifi Machine
Prevent the display of adv Machine
Prevent indexing files in offMachine
Enable indexing uncached Machine
Enable indexing of online Machine
Enable throttling for onlin Machine
Prevent indexing Microsoft Machine
Prevent indexing e-mail a Machine
Control rich previews for Machine
Prevent indexing public fol Machine
Indexer data location
Machine
Add primary intranet searc Machine
Add secondary intranet seaMachine
Preview pane location
Machine
Set large or small icon vie Machine
Stop indexing in the event Machine
Prevent unwanted iFilters Machine
Do not allow web search Machine
Prevent indexing certain p Machine
Prevent indexing certain p User
Default indexed paths
Machine
Default indexed paths
User
Default excluded paths
Machine
Default excluded paths
User
Prevent indexing of certain Machine
Turn off storage and displa User
Select OCR languages fromMachine
Force TIFF IFilter to perf
Machine
Turn on Security Center (D Machine
Turn off sensors
User
Turn off sensors
Machine
Turn off location
User
Turn off location
Machine
Turn off location scripting User
Turn off location scripting Machine
Do not display Server ManaMachine
Configure the refresh inter Machine
Do not display Initial Conf Machine
Do not display Manage You Machine
Specify settings for optio Machine
SettingSync.admx
SettingSync.admx
SettingSync.admx
SettingSync.admx
SettingSync.admx
SettingSync.admx
SettingSync.admx
SettingSync.admx
SettingSync.admx
SettingSync.admx
Setup.admx
Setup.admx
ShapeCollector.admx
ShapeCollector.admx
SharedFolders.admx
SharedFolders.admx
Sharing.admx
Sharing.admx
Shell-CommandPrompt-RegEditTools.admx
ShellWelcomeCenter.admx
Sidebar.admx
Sidebar.admx
Sidebar.admx
Sidebar.admx
Sidebar.admx
Sidebar.admx
SkyDrive.admx
SkyDrive.admx
SkyDrive.admx
SmartCard.admx
SmartCard.admx
SmartCard.admx
SmartCard.admx
SmartCard.admx
SmartCard.admx
SmartCard.admx
SmartCard.admx
SmartCard.admx
SmartCard.admx
SmartCard.admx
SmartCard.admx
SmartCard.admx
Do not sync
Machine
Do not sync app settings Machine
Do not sync passwords
Machine
Do not sync personalize
Machine
Do not sync Apps
Machine
Do not sync other WindowsMachine
Do not sync desktop personMachine
Do not sync browser settin Machine
Do not sync on metered co Machine
Do not sync start settings Machine
Specify Windows Service Pac
Machine
Specify Windows installation
Machine
Turn off handwriting personMachine
Turn off handwriting personUser
Allow DFS roots to be publ User
Allow shared folders to be User
Prevent users from sharing User
f
Prevent the computer from Machine
Prevent access to the co User
Prevent access to registry eUser
Run only specified WindowsUser
Don't run specified WindowUser
Do not display the WelcomeUser
Turn off desktop gadgets User
Turn off desktop gadgets Machine
Restrict unpacking and instUser
Restrict unpacking and instMachine
Turn Off user-installed des User
Turn Off user-installed des Machine
Prevent the usage of OneDri
Machine
Prevent OneDrive files fr Machine
Save documents to OneDrivMachine
Allow certificates with no Machine
Allow Integrated Unblock s Machine
Filter duplicate logon certif Machine
Force the reading of all ce Machine
Allow signature keys valid Machine
Allow time invalid certifica Machine
Turn on certificate propaga Machine
Configure root certificate c Machine
Turn on root certificate pr Machine
Display string when smart Machine
Reverse the subject name sMachine
Prevent plaintext PINs fro Machine
Allow user name hint
Machine
SmartCard.admx
SmartCard.admx
SmartCard.admx
Snis.admx
Snis.admx
Snmp.admx
Snmp.admx
Snmp.admx
SoundRec.admx
SoundRec.admx
srm-fci.admx
srm-fci.admx
srm-fci.admx
srm-fci.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
Turn on Smart Card Plug anMachine

Notify user of successful smMachine
Allow ECC certificates to b Machine
Turn on extensive logging Machine
Set the map update intervaMachine
Specify communities
Machine
Specify permitted managerMachine
Specify traps for public c Machine
Do not allow Sound RecordeUser
Do not allow Sound RecordeMachine
File Classification Infrastru Machine
File Classification Infrastru Machine
Customize message for AccMachine
Enable access-denied assistMachine
Clear the recent programs lUser
Remove Games link from S User
Remove Search Computer lUser
Remove See More Results / User
Add Search Internet link to User
Do not search for files
User
Do not search Internet
User
Do not search programs an User
Do not search communicat User
Remove user folder link fr User
Add the Run command to t User
Show QuickLaunch on Task User
Clear history of recently
User
Add Logoff to the Start Me User
Gray unavailable Windows User
Turn off personalized menu User
Lock the Taskbar
User
Add "Run in Separate MemoUser
Turn off notification area c User
Remove Balloon Tips on St User
Prevent users from customiUser
Clear history of tile notific User
Pin Apps to Start when inst Machine
Pin Apps to Start when inst User
Start Screen Layout
Machine
Start Screen Layout
User
Remove and prevent acces User
Remove common program g
User
Remove Favorites menu fr User
Remove Search link from S User
Remove frequent programsUser
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
StartMenu.admx
SystemRestore.admx
SystemRestore.admx
TabletPCInputPanel.admx
Remove Help menu from StUser

Turn off user tracking
User
Remove All Programs list f User
Remove Network ConnectioUser
Remove pinned programs liUser
Do not keep history of re User
Remove Recent Items menuUser
Do not use the search-bas User
Do not use the tracking-ba User
Remove Run menu from St User
Remove programs on Setti User
Prevent changes to TaskbarUser
Remove Default Programs lUser
Remove Documents icon fr User
Remove Music icon from St User
Remove Network icon from User
Remove Pictures icon from User
Remove user's folders fromUser
Force classic Start Menu
User
Remove Clock from the systUser
Prevent grouping of taskba User
Do not display any custom User
Remove access to the cont User
Hide the notification area User
Remove user name from StUser
Remove links and access User
Remove the "Undock PC" bu
User
Remove Logoff on the Star User
Remove Homegroup link fr User
Remove Downloads link fr User
Remove Recorded TV link f User
Remove Videos link from S User
Prevent users from uninstalUser
Change Start Menu power User
Show "Run as different us User
Go to the desktop instead oUser
Show the Apps view automa
User
Search just apps from the User
List desktop apps first in User
Show Start on the display User
Turn off Configuration
Machine
Turn off System Restore
Machine
Turn off AutoComplete inte User
Turn off AutoComplete inte Machine
Prevent Input Panel tab fr User
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
TabletShell.admx
Taskbar.admx
Taskbar.admx
Taskbar.admx
Taskbar.admx
Taskbar.admx
Taskbar.admx
Taskbar.admx
Taskbar.admx
Taskbar.admx
Taskbar.admx
Prevent Input Panel tab fr Machine

For tablet pen input don User
For tablet pen input don Machine
For touch input dont shUser
For touch input dont shMachine
Turn off password security User
Turn off password security Machine
Include rarely used Chines User
Include rarely used Chines Machine
Turn off tolerant and Z-sh User
Turn off tolerant and Z-sh Machine
Disable text prediction
User
Disable text prediction
Machine
Do not allow Inkball to run User
Do not allow Inkball to run Machine
Do not allow Windows JournUser
Do not allow Windows JournMachine
Do not allow printing to Jo User
Do not allow printing to Jo Machine
Do not allow Snipping Tool User
Do not allow Snipping Tool Machine
Turn off pen feedback
User
Turn off pen feedback
Machine
Prevent Back-ESC mapping User
Prevent Back-ESC mapping Machine
Prevent launch an applicat User
Prevent launch an applicat Machine
Prevent press and hold
User
Prevent press and hold
Machine
Turn off hardware buttons User
Turn off hardware buttons Machine
Prevent Flicks Learning Mo User
Prevent Flicks Learning Mo Machine
Prevent flicks
User
Prevent flicks
Machine
Remove the battery meter User
Remove the networking icoUser
Remove the volume controlUser
Remove the Action Center User
Lock all taskbar settings
User
Prevent users from adding User
Prevent users from rearran User
Turn off all balloon notifica User
Prevent users from moving User
Prevent users from resizingUser
Taskbar.admx
Taskbar.admx
Taskbar.admx
Taskbar.admx
Taskbar.admx
Taskbar.admx
Taskbar.admx
Taskbar.admx
Taskbar.admx
Taskbar.admx
TaskScheduler.admx
TaskScheduler.admx
TaskScheduler.admx
TaskScheduler.admx
TaskScheduler.admx
TaskScheduler.admx
TaskScheduler.admx
TaskScheduler.admx
TaskScheduler.admx
TaskScheduler.admx
TaskScheduler.admx
TaskScheduler.admx
TaskScheduler.admx
TaskScheduler.admx
tcpip.admx
tcpip.admx
tcpip.admx
tcpip.admx
tcpip.admx
tcpip.admx
tcpip.admx
tcpip.admx
tcpip.admx
tcpip.admx
tcpip.admx
tcpip.admx
tcpip.admx
Terminalserver-Server.admx
Turn off taskbar thumbnailsUser

Remove pinned programs f User
Turn off automatic promotioUser
Turn off feature advertisemUser
Do not display or track ite User
Do not allow pinning progr User
Do not allow pinning items User
Do not allow taskbars on mUser
Show Windows Store apps oUser
Do not allow pinning Store User
Prohibit Browse
User
Prohibit Browse
Machine
Hide Advanced Properties User
Hide Advanced Properties Machine
Prohibit Drag-and-Drop
User
Prohibit Drag-and-Drop
Machine
Prevent Task Run or End
User
Prevent Task Run or End
Machine
Hide Property Pages
User
Hide Property Pages
Machine
Prohibit New Task Creation User
Prohibit New Task Creation Machine
Prohibit Task Deletion
User
Prohibit Task Deletion
Machine
Set ISATAP State
Machine
Set ISATAP Router Name Machine
Set 6to4 State
Machine
Set 6to4 Relay Name
Machine
Set 6to4 Relay Name Resolu
Machine
Set Teredo State
Machine
Set Teredo Server Name
Machine
Set Teredo Refresh Rate
Machine
Set Teredo Client Port
Machine
Set Teredo Default Qualifie Machine
Set IP-HTTPS State
Machine
Set Window Scaling HeuristMachine
Set IP Stateless Autoconfig Machine
Allow time zone redirectionUser
Do not allow Clipboard redi User
Remove remote desktop waUser
Always show desktop on coUser
Allow remote start of unli Machine
Allow desktop composition Machine
Use RD Connection Broker Machine
Redirect only the default cl Machine
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
Redirect only the default cl User

Set time limit for logoff o User
Set time limit for logoff o Machine
Do not allow font smoothin Machine
Select the network adapterMachine
Do not use Remote DesktopMachine
Turn off Fair Share CPU Sch Machine
Turn off Windows Installer Machine
Turn on Remote Desktop IP Machine
Use the hardware default gMachine
Do not allow passwords to User
Do not allow passwords to Machine
Set client connection encryMachine
Always prompt for passwor Machine
Require use of specific sec Machine
Require user authenticatio Machine
Server authentication certi Machine
Set RD Gateway authentic User
Enable connection throug User
Set RD Gateway server addUser
Automatic reconnection
Machine
Limit maximum color depthMachine
Limit number of monitors Machine
Allow users to connect re Machine
Limit maximum display res Machine
Enforce Removal of Remot Machine
Deny logoff of an administrMachine
Configure keep-alive conneMachine
Use the specified Remote DMachine
Hide notifications about R Machine
Set the Remote Desktop li Machine
Limit number of connectionMachine
Remove "Disconnect" optioMachine
Remove Windows Security Machine
Suspend user sign-in to co Machine
Set rules for remote contr User
Set rules for remote contr Machine
Restrict Remote Desktop SeMachine
Start a program on connectUser
Start a program on connectMachine
Do not allow local adminis Machine
Always show desktop on coMachine
Set Remote Desktop ServicMachine
Set path for Remote DesktoMachine
Use mandatory profiles on Machine
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
Limit the size of the entir Machine

License server security gro Machine
Prevent license upgrade
Machine
Allow audio and video play Machine
Limit audio playback qualit Machine
Allow audio recording redir Machine
Do not allow Clipboard redi Machine
Do not allow COM port redi Machine
Do not set default client pr Machine
Use Remote Desktop Easy Pri
Machine
Use Remote Desktop Easy Pri
User
Do not allow drive redirect Machine
Do not allow LPT port redir Machine
Do not allow supported Plu Machine
Do not allow client printer Machine
Specify RD Session Host serMachine
Do not allow smart card devMachine
Allow time zone redirectionMachine
Require secure RPC commuMachine
Join RD Connection Broker Machine
Configure RD Connection Machine
Use IP Address Redirection Machine
Configure RD Connection B Machine
End session when time limiUser
End session when time limiMachine
Set time limit for disconne User
Set time limit for disconne Machine
Set time limit for active b User
Set time limit for active b Machine
Set time limit for active
User
Set time limit for active
Machine
Do not delete temp folders Machine
Do not use temporary foldeMachine
Allow .rdp files from unkn User
Allow .rdp files from unkn Machine
Allow .rdp files from valid User
Allow .rdp files from valid Machine
Specify SHA1 thumbprints of
Machine
Specify SHA1 thumbprints of
User
Prompt for credentials on Machine
Configure server authenticaMachine
Configure image quality f Machine
Configure RemoteFX AdaptiMachine
Configure compression for Machine
Use advanced RemoteFX grMachine
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
TerminalServer.admx
Thumbnails.admx
Thumbnails.admx
Thumbnails.admx
TouchInput.admx
TouchInput.admx
TouchInput.admx
TouchInput.admx
Tpm.admx
Tpm.admx
Tpm.admx
Tpm.admx
Tpm.admx
Tpm.admx
Tpm.admx
Tpm.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
Optimize visual experienc Machine

Allow RDP redirection of
Machine
Configure RemoteFX
Machine
Optimize visual experienc Machine
Enable RemoteFX encodingMachine
Specify default connection User
Select network detection o Machine
Select RDP transport protocMachine
Turn Off UDP On Client
Machine
Turn off the display of thu User
Turn off the display of thu User
Turn off the caching of thu User
Turn off Tablet PC touch inpUser
Turn off Tablet PC touch inpMachine
Turn off Touch Panning
User
Turn off Touch Panning
Machine
Turn on TPM backup to Act Machine
Configure the level of TPM Machine
Configure the list of blo
Machine
Ignore the default list of
Machine
Ignore the local list of b
Machine
Standard User Lockout Dur Machine
Standard User Individual L Machine
Standard User Total Lockou Machine
Add the Administrators sec Machine
Do not check for user owneMachine
Connect home directory to User
Delete cached copies of ro Machine
Disable detection of slow Machine
Prompt user when a slow n Machine
Exclude directories in roamUser
Leave Windows Installer anMachine
Limit profile size
User
Only allow local user profil Machine
Establish timeout value for Machine
Do not log users on with te Machine
Maximum retries to unload Machine
Prevent Roaming Profile ch Machine
Wait for remote user profileMachine
Control slow network conneMachine
Delete user profiles older Machine
Specify network directoriesUser
Do not forcefully unload theMachine
Set maximum wait time forMachine
Set roaming profile path fo Machine
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
UserProfiles.admx
VolumeEncryption.admx
Set the schedule for backgrMachine

User management of sharinMachine
Turn off the advertising ID Machine
Download roaming profiles Machine
Set user home folder
Machine
Store BitLocker recovery Machine
Choose how users can recoMachine
Choose default folder for Machine
Choose drive encryption Machine
Choose drive encryption m Machine
Prevent memory overwrite Machine
Allow enhanced PINs for st Machine
Configure use of passwordsMachine
Reset platform validation d Machine
Disallow standard users fr Machine
Provide the unique identifi Machine
Validate smart card certifi Machine
Use enhanced Boot Configur
Machine
Choose how BitLocker-prot Machine
Enforce drive encryption t Machine
Require additional authent Machine
Require additional authenti Machine
Allow network unlock at st Machine
Configure TPM platform va Machine
Configure TPM platform val Machine
Configure TPM platform valiMachine
Configure minimum PIN leng
Machine
Configure use of hardware- Machine
Enable use of BitLocker au Machine
Allow Secure Boot for integ Machine
Choose how BitLocker-proteMachine
Deny write access to fixed Machine
Allow access to BitLocker-p Machine
Configure use of smart cardMachine
Enforce drive encryption ty Machine
Choose how BitLocker-prot Machine
Control use of BitLocker o Machine
Deny write access to removMachine
Allow access to BitLocker- Machine
Configure use of smart car Machine
Enforce drive encryption t Machine
W32Time.admx
W32Time.admx
W32Time.admx
W32Time.admx
WCM.admx
WCM.admx
WCM.admx
WCM.admx
wdi.admx
wdi.admx
WinCal.admx
WinCal.admx
WindowsAnytimeUpgrade.admx
WindowsAnytimeUpgrade.admx
WindowsBackup.admx
WindowsBackup.admx
WindowsBackup.admx
WindowsBackup.admx
WindowsBackup.admx
WindowsColorSystem.admx
WindowsColorSystem.admx
WindowsConnectNow.admx
WindowsDefender.admx
Global Configuration Settin Machine

Configure Windows NTP Cli Machine
Enable Windows NTP ClientMachine
Enable Windows NTP ServeMachine
Prohibit connection to no Machine
Minimize the number of si Machine
Prohibit connection to ro Machine
Disable power managementMachine
Diagnostics: Configure scenMachine
Diagnostics: Configure scenMachine
Turn off Windows Calendar User
Turn off Windows Calendar Machine
Prevent the wizard from ru Machine
Prevent the wizard from ru User
Allow only system backup Machine
Disallow locally attached Machine
Disallow network as backupMachine
Disallow optical media as Machine
Disallow run-once backups Machine
Prohibit installing or uninst User
Prohibit installing or uninst Machine
Prohibit access of the Wi User
Prohibit access of the Wi Machine
Configuration of wireless Machine
Allow antimalware service tMachine
Turn off Windows Defender Machine
Configure local administrat Machine
Turn off routine remediatio Machine
Define addresses to bypassMachine
Define proxy server for co Machine
Randomize scheduled task Machine
Allow antimalware service Machine
Extension Exclusions
Machine
Path Exclusions
Machine
Process Exclusions
Machine
Turn on protocol recognitio Machine
Turn on definition retireme Machine
Define the rate of detectio Machine
IP address range Exclusion Machine
Port number Exclusions
Machine
Process Exclusions for outb Machine
Threat ID Exclusions
Machine
Specify additional definitio Machine
Configure local setting ove Machine
Configure removal of items Machine
Turn on behavior monitorin Machine

Turn on Information ProtectMachine
Turn on network protection Machine
Scan all downloaded files Machine
Monitor file and program a Machine
Turn on raw volume write no
Machine
Turn off real-time protectio Machine
Turn on process scanning wMachine
Define the maximum size oMachine
Configure local setting ov Machine
Configure monitoring for i Machine
Specify the day of the wee Machine
Specify the time of day to Machine
Configure time out for deteMachine
Configure time out for detec
Machine
Configure Watson events Machine
Configure time out for detec
Machine
Configure time out for deteMachine
Configure Windows softwarMachine
Configure WPP tracing leve Machine
Allow users to pause scan Machine
Specify the maximum depth
Machine
Specify the maximum size o
Machine
Specify the maximum percen
Machine
Check for the latest virus Machine
Scan archive files
Machine
Turn on catch-up full scan Machine
Turn on catch-up quick sca Machine
Turn on e-mail scanning
Machine
Turn on heuristics
Machine
Scan packed executables Machine
Scan removable drives
Machine
Turn on reparse point scan Machine
Create a system restore po Machine
Run full scan on mapped n Machine
Scan network files
Machine
Configure local setting ov Machine
WindowsExplorer.admx

Turn on removal of items fr Machine
Specify the interval to run Machine
Start the scheduled scan o Machine
Specify the scan type to u Machine
Specify the day of the wee Machine
Specify the time for a dail Machine
Specify the time of day to Machine
Define the number of days Machine
Define file shares for down Machine
Turn on scan after signatu Machine
Allow definition updates w Machine
Initiate definition update o Machine
Define the order of source Machine
Allow definition updates f Machine
Allow real-time definition Machine
Specify the day of the weekMachine
Specify the time to check f Machine
Allow notifications to disa Machine
Specify the interval to che Machine
Check for the latest virus Machine
Join Microsoft MAPS
Machine
Specify threats upon which Machine
Specify threat alert level Machine
Display notifications to cl Machine
Display additional text to Machine
Hide the common dialog baUser
Hide the dropdown list of reUser
Hide the common dialog pl User
Items displayed in Places BUser
Turn on Classic Shell
User
Display confirmation dialogUser
Allow only per user or app User
Do not track Shell shortcu User
Maximum number of recen User
Turn off caching of thumbnaUser
Remove CD Burning featur User
Remove UI to change menuUser
Remove UI to change keyboa
User
Remove DFS tab
User
Hide these specified drive User
No Entire Network in NetwoUser

Remove File menu from FileUser
Do not allow Folder Option User
Remove Hardware tab
User
Hides the Manage item on User
Remove Shared DocumentsUser
Remove "Map Network DrivUser
Do not move deleted files User
Do not request alternate cr User
Remove Security tab
User
Remove Search button fromUser
Remove File Explorer's def User
Prevent access to drives User
Turn off Windows+X hotkeyUser
No Computers Near Me in NUser
Request credentials for net User
Maximum allowed Recycle B
User
Turn off shell protocol pro User
Turn off shell protocol pro Machine
Remove the Search the InteUser
Pin Internet search sites t User
Pin Libraries or Search Co User
Verify old and new Folder RMachine
Disable Known Folders
User
Turn off the display of sni User
Turn off Windows Libraries User
Turn off display of recent s User
Disable binding directly to Machine
Disable binding directly to User
Turn off numerical sorting i Machine
Turn off numerical sorting i User
Allow OpenSearch queries iMachine
Allow OpenSearch queries iUser
WindowsFileProtection.admx
windowsfirewall.admx

Allow previewing and custoMachine
Allow previewing and custoUser
Location where all default LMachine
Location where all default LUser
Configure Windows SmartS Machine
Show lock in the user tile Machine
Show sleep in the power o Machine
Show hibernate in the pow Machine
Do not show the 'new applic
Machine
Start File Explorer with ri Machine
Start File Explorer with ri User
Set a default associations cMachine
Allow the use of remote patMachine
Specify Windows File Prote Machine
Limit Windows File Protecti Machine
Set Windows File Protectio Machine
Hide the file scan progres Machine
Windows Firewall: Allow au Machine
Windows Firewall: Define Machine
Windows Firewall: Allow lo Machine
Windows Firewall: Protect Machine
WindowsMail.admx
WindowsMail.admx
WindowsMail.admx
WindowsMail.admx
WindowsMediaDRM.admx
WindowsMediaPlayer.admx
Windows Firewall: Do not a Machine

Windows Firewall: Allow in Machine
Windows Firewall: Allow IC Machine
Windows Firewall: Prohibit nMachine
Windows Firewall: Define i Machine
Windows Firewall: Allow locMachine
Windows Firewall: Allow i Machine
Windows Firewall: Prohibit Machine
Windows Firewall: Define Machine
Windows Firewall: Protect Machine
Windows Firewall: Do not a Machine
Windows Firewall: Allow IC Machine
Windows Firewall: Prohibit nMachine
Windows Firewall: Define i Machine
Windows Firewall: Allow locMachine
Windows Firewall: Prohibit Machine
Turn off Windows Mail appliUser
Turn off Windows Mail appliMachine
Turn off the communities f User
Turn off the communities f Machine
Prevent Windows Media DRMachine
Prevent Automatic UpdatesMachine
Do Not Show First Use Dial Machine
Prevent Video Smoothing Machine
Prevent CD and DVD MediaUser
Prevent Media Sharing
Machine
Prevent Music File Media In User
Prevent Quick Launch ToolbMachine
Prevent Radio Station PreseUser
Prevent Desktop Shortcut CMachine
Allow Screen Saver
User
Prevent Codec Download User
Do Not Show Anchor
User
Hide Privacy Tab
User
Hide Security Tab
User
Set and Lock Skin
User
WindowsMessenger.admx
WindowsRemoteManagement.admx
WindowsRemoteShell.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
Configure HTTP Proxy

User
Configure MMS Proxy
User
Configure RTSP Proxy
User
Hide Network Tab
User
Configure Network Bufferin User
Streaming Media Protocols User
Do not automatically start Machine
Do not automatically start User
Do not allow Windows MessMachine
Do not allow Windows MessUser
Allow Basic authentication Machine
Allow unencrypted traffic Machine
Disallow Digest authenticatMachine
Disallow Negotiate authentMachine
Disallow Kerberos authenti Machine
Allow CredSSP authenticati Machine
Trusted Hosts
Machine
Allow remote server mana Machine
Turn On Compatibility HTTPMachine
Turn On Compatibility HTTPMachine
Allow Basic authentication Machine
Allow unencrypted traffic Machine
Disallow WinRM from storinMachine
Disallow Negotiate authentMachine
Disallow Kerberos authenti Machine
Allow CredSSP authenticati Machine
Specify channel binding to Machine
Allow Remote Shell Access Machine
Specify idle Timeout
Machine
MaxConcurrentUsers
Machine
Specify maximum amount oMachine
Specify maximum number of
Machine
Specify Shell Timeout
Machine
Specify maximum number of
Machine
Windows Automatic UpdateUser
Do not display 'Install Up Machine
Do not display 'Install Up User
Do not adjust default opti User
Do not adjust default opti Machine
Remove access to use all User
Configure Automatic Updat Machine
Specify intranet Microsoft Machine
Automatic Updates detecti Machine
Allow non-administrators toMachine
Allow Automatic Updates imMachine
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WindowsUpdate.admx
WinInit.admx
WinInit.admx
WinInit.admx
WinLogon.admx
WinLogon.admx
WinLogon.admx
WinLogon.admx
WinLogon.admx
WinLogon.admx
WinLogon.admx
WinLogon.admx
Winsrv.admx
WinStoreUI.admx
WinStoreUI.admx
WinStoreUI.admx
WinStoreUI.admx
WinStoreUI.admx
WinStoreUI.admx
wlansvc.admx
WordWheel.admx
WorkFolders-Client.admx
WorkFolders-Client.admx
WorkplaceJoin.admx
WPN.admx
WPN.admx
WPN.admx
WPN.admx
WPN.admx
WPN.admx
WPN.admx
WPN.admx
wwansvc.admx
wwansvc.admx
Turn on recommended updaMachine

Turn on Software Notificati Machine
Enabling Windows Update PMachine
No auto-restart with logge Machine
Always automatically resta Machine
Re-prompt for restart with Machine
Delay Restart for scheduledMachine
Reschedule Automatic UpdaMachine
Enable client-side targetin Machine
Allow signed updates from Machine
Do not connect to any Win Machine
Turn off legacy remote shu Machine
Timeout for hung logon se Machine
Require use of fast startup Machine
Display information about Machine
Remove logon hours expiraUser
Set action to take when lo User
Disable or enable softwar Machine
Report when logon server wMachine
Report when logon server wUser
Custom User Interface
User
Sign-in last interactive use Machine
Turn off automatic termina Machine
Turn off the Store applicati User
Turn off the Store applicati Machine
Turn off Automatic DownloaMachine
Turn off Automatic Downlo Machine
Turn off the offer to updat User
Turn off the offer to updat Machine
Set Cost
Machine
Custom Instant Search Inte User
Force automatic setup for aMachine
Specify Work Folders settin User
Automatically workplace jo Machine
Turn off tile notifications
User
Turn off toast notifications User
Turn off toast notifications User
Turn off notifications netw User
Turn off Quiet Hours
User
Set the time Quiet Hours b User
Set the time Quiet Hours User
Turn off calls during Quiet User
Set 3G Cost
Machine
Set 4G Cost
Machine
Policy Path Registry I Supported On

Help Text New in Update 1
Windows Co
HKLM\SOFTAt least Windows Vista
This polic
0
Windows Co
HKLM\SOFTAt least Windows Vista
This policy
0
Control P HKCU\SoftwWindows Server 2003 Windows XP and WindSpecifies
0
Control P HKCU\Soft Windows Server 2003 Windows XP and WindRemoves th
0
Control P HKCU\SoftwWindows Server 2003 Windows XP and WindRemoves th
0
Control P HKCU\Soft Windows Server 2003 Windows XP and WindPrevents u
0
Control P HKCU\SoftwWindows Server 2003 Windows XP and WindRemoves th
0
Control P HKCU\Soft Windows Server 2003 Windows XP and WindPrevents u
0
0
0
Control P HKCU\SoftwWindows Server 2003 Windows XP and WindPrevents u
0
Control P HKCU\SoftwWindows Server 2003 Windows XP and WindRemoves li
0
0
Windows CHKLM\Soft At least Windows Server 2003
Specifies
0
This polic
0
Windows CHKLM\Soft At least Windows Server 2008 R2 or WindowThe policy
0
Windows CHKLM\Soft At least Windows Server 2008 R2 or WindowThe policy
0
This poli
0
Windows CHKCU\Soft At least Windows Vista
This setti
0
Windows CHKLM\Soft At least Windows Vista
This polic
0
Windows CHKLM\Soft At least Windows Server 2008 R2 or WindowThis polic
0
0
Windows CHKLM\SoftwAt least Windows Server 2012 Windows 8 or This polic
0
0
Windows CHKLM\Soft At least Windows Server 2012 Windows 8 or
Al
0
0
Windows CHKCU\SoftwAt least Windows Server 2012 Windows 8 or This polic
0
0
0
Windows CHKLM\Soft At least Windows Server 2012 R2 Windows 8This polic
0
Windows CHKCU\Soft At least Windows Server 2012 R2 Windows 8This polic
0
Windows CHKLM\SoftwAt least Windows Server 2012 R2 Windows 8This polic
0
Windows CHKCU\Soft At least Windows XP Professional with SP2 This polic
0
0
0
0
Windows CHKCU\SoftwAt least Windows XP Professional with SP2 This polic
0
Windows CHKCU\SoftwAt least Windows XP Professional with SP2 This policy
0
Windows CHKCU\SoftwAt least Windows XP Professional with SP2 This policy
0
Windows CHKCU\SoftwAt least Windows XP Professional with SP2 This polic
0
System\Aud
HKLM\Soft At least Windows Server 2012 R2 Windows 8This polic
0
Windows CHKLM\SoftwAt least Windows Vista
This polic
0
Windows CHKCU\SoftwAt least Windows Vista
This polic
0
This polic
0

This polic
Windows CHKLM\Soft At least Windows 2000
This polic
Windows CHKCU\Soft At least Windows 2000
This polic
Windows CHKCU\Soft At least Windows Server 2008 R2 or WindowThis polic
Windows CHKLM\SOFTAt least Windows Server 2008 R2 or WindowThis polic
Windows CHKLM\SOFTW
At least Windows Server 2008 R2 or WindowThis polic
Network\BaHKLM\SoftwWindows XP or Windows Server 2003 or compu
This polic
Network\BaHKLM\Soft At least Windows Vista
This polic
Network\BaHKLM\Soft Windows XP SP2 or Windows Server 2003 SP1
This polic
Network\BaHKLM\Soft Windows 7 or computers with BITS 3.5 instalThis polic
Network\BaHKLM\Soft Windows 7 or computers with BITS 3.5 instalThis polic
This polic
This polic
This polic
Network\BaHKLM\SoftwAt least Windows Vista
This polic
This polic
This polic
Network\BaHKLM\SoftwWindows 8 or Windows Server 2012 or Window
This polic
This polic
Network\BaHKLM\SoftwAt least Windows Vista
This polic
This polic
Network\BaHKLM\Soft Windows 7 or computers with BITS 3.5 instalThis setti
If you ena
This polic
Network\SSHKLM\SOFTAt least Windows Vista
This poli
System
HKCU\Soft At least Windows 2000
This polic
System
HKLM\Soft At least Windows 2000
This polic
Windows CHKCU\Softwat least Windows NetMeeting v3.0
Disables t
Prevents u
Prevents u
Windows CHKCU\Soft at least Windows NetMeeting v3.0
Prevents u
Prevents u
Prevents u
Prevents u
Disables t
Prevents u
Disables f
Prevents u
Prevents u
Limits the
Make the a
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

Disables t
Disables t
Disables t
Windows CHKLM\Softwat least Windows NetMeeting v3.0
Disables t
Configures
Prevents u
Prevents u
Prevents u
Disables t
Prevents u
Prevents u
Prevents u
Limits the
Sets the
Sets the l
Disables t
Hides the
Hides the
Hides the
Hides the
Control Pa HKCU\SoftwAt least Windows 2000
This setti
Control Pa HKCU\SoftwAt least Windows Server 2003 operating sys This polic
Disables a
This polic
Control Pa HKCU\Soft At least Windows 2000
Disables t
Control Pa HKCU\Soft Windows Server 2003 Windows XP and WindRemoves th
Disables t
Prevents t
Control Pa HKCU\SoftwAt least Windows 2000 Service Pack 1
Enables de
Control Pa HKCU\Soft At least Windows 2000 Service Pack 1
Specifies
Control Pa HKCU\SoftwAt least Windows 2000 Service Pack 1
Determines
Control Pa HKCU\Soft At least Windows 2000 Service Pack 1
Specifies
Prevents u
Control Pa HKCU\Soft At least Windows Server 2008 R2 or WindowPrevents u
Control Pa HKCU\Soft At least Windows Server 2008 R2 or WindowPrevents u
Prevents u
Control Pa HKCU\Soft Windows Server 2008 Windows Server 2003 This setti
Control Pa HKCU\Soft At least Windows Server 2003 operating sys This setti
Control Pa HKCU\SoftwAt least Windows Server 2008 R2 or WindowSpecifies
Control Pa HKCU\Soft At least Windows Server 2003 operating sys Prevents u
Control Pa HKCU\SoftwAt least Windows Server 2003 operating sys This setti
Control Pa HKCU\Soft Windows Server 2003 Windows XP and WindPrevents u
Control Pa HKLM\SoftwAt least Windows Server 2012 Windows 8 or This polic
Control Pa HKLM\Soft At least Windows Server 2012 Windows 8 or Prevents u
Control Pa HKLM\Soft At least Windows Server 2012 R2 Windows 8Disables t
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Control Pa HKLM\Soft At least Windows Server 2012 R2 Windows 8Disables t

Control Pa HKLM\SoftwAt least Windows Server 2012 R2 Windows 8Forces Win
Control Pa HKLM\SoftwAt least Windows Server 2012 R2 Windows 8Forces the
Control Pa HKLM\Soft At least Windows Server 2012 Windows 8 or Prevents u
Control Pa HKLM\Soft At least Windows Server 2012 Windows 8 or This setti
Control Pa HKLM\SoftwAt least Windows Vista
This polic
System\Lo HKLM\Soft At least Windows Vista
This polic
System\Lo HKLM\SoftwAt least Windows Vista
This polic
System\Lo HKLM\Soft At least Windows Server 2012 Windows 8 or This polic
System\CreHKLM\SoftwAt least Windows Vista
This polic
System\CreHKLM\Soft At least Windows Vista
This polic
System\CreHKLM\SoftwAt least Windows Vista
This polic
This polic
This polic
This polic
This polic
This polic
This polic
System\CreHKLM\SoftwAt least Windows Server 2012 R2 Windows 8When runni
This polic
This polic
Windows CHKLM\Soft At least Windows Server 2012 Windows 8 or This polic
Windows CHKCU\Soft At least Windows Server 2012 Windows 8 or This polic
System\Ct HKCU\Soft At least Windows 2000
This polic
This polic
This polic
System\Ct HKCU\SoftwAt least Windows 2000
This polic
System\DisHKLM\Soft At least Windows XP Professional with SP2 Allows you
System\DisHKLM\Soft At least Windows XP Professional with SP2 Allows you
Desktop\D HKCU\SoftwWindows Server 2003 Windows XP and WindEnables Ac
Desktop\D HKCU\SoftwWindows Server 2003 Windows XP and WindDisables A
Desktop\D HKCU\Soft Windows Server 2003 Windows XP and WindPrevents t
Desktop\D HKCU\Soft Windows Server 2003 Windows XP and WindAdds and d
Desktop\D HKCU\Soft Windows Server 2003 Windows XP and WindPrevents u
Desktop\D HKCU\Soft Windows Server 2003 Windows XP and WindRemoves Ac
Desktop\D HKCU\Soft Windows Server 2003 Windows XP and WindPermits on
Desktop\D HKCU\Soft At least Windows 2000
Specifies
Desktop\AcHKCU\SoftwAt least Windows 2000
Displays t
Desktop\AcHKCU\SoftwWindows 2000 only
Hides the
Desktop\AcHKCU\SoftwAt least Windows 2000
Specifies
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Desktop HKCU\SoftwAt least Windows 2000

Prevents u
Removes ic
Desktop HKCU\Soft Windows Server 2003 and Windows XP only Prevents u
Removes th
Desktop HKCU\Soft At least Windows Server 2003 operating sys This setti
Desktop HKCU\Soft Windows Server 2003 Windows XP and WindRemoves mo
Desktop HKCU\Soft At least Windows 2000
Removes th
Desktop HKCU\Soft At least Windows 2000 Service Pack 3
This setti
Desktop HKCU\Soft Windows Server 2003 Windows XP and WindThis polic
Desktop HKCU\Soft Windows Server 2003 Windows XP and WindRemote sha
Desktop HKCU\Soft At least Windows Server 2003 operating sys Removes mo
Desktop HKCU\SoftwAt least Windows Server 2003 operating sys Removes th
Prevents u
Prevents u
Prevents u
Desktop HKCU\Soft At least Windows Server 2008 R2 or WindowPrevents w
Windows CHKLM\SysteAt least Windows Server 2012 Windows 8 or Changes be
Windows CHKLM\SysteAt least Windows Server 2012 Windows 8 or Changes be
System\Dev
HKLM\SoftwAt least Windows Vista
This polic
System\Dev
HKLM\SoftwAt least Windows Server 2008 R2 or WindowThis polic
System\Dev
This polic
System\Dev
HKLM\SoftwWindows Server 2008 Windows 7 and Window
This polic
System\Dev
This polic
System\Dev
This polic
System\Dev
This polic
System\Dev
This polic
System\Dev
This polic
System\Dev
This polic
System\Dev
This polic
System\Dev
System\Dev
This polic
System\Dev
This polic
System\DriHKLM\SoftwAt least Windows Vista
This polic
System\DriHKCU\SoftwWindows Server 2003 Windows XP and WindDetermines
System\Dev
System\Dev
System\Dev
This polic
System\Dev
HKLM\Soft At least Windows Vista
Windows ha
System\Dev
HKLM\Soft At least Windows Server 2008 R2 or WindowWindows ha
System\DriHKCU\Soft Windows Server 2008 Windows Server 2003 This setti
System\DriHKCU\Soft Windows Server 2008 Windows Server 2003 Specifies
System\DriHKLM\Soft Windows Server 2008 Windows Server 2003 Specifies
System\Dev
HKLM\Soft At least Windows Server 2008 R2 or WindowThis polic
System\Dev
System\Dev
HKLM\SOFTAt least Windows Server 2008 R2 or WindowThis polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Network HKLM\Soft At least Windows Server 2003 operating sys This polic
Windows CHKCU\SOFTAt least Windows Vista
Specifies
Windows CHKLM\SOFTAt least Windows Vista
Specifies
System\TroHKLM\SOFT
Windows Server 2008 with Desktop ExThis polic
System\TroHKLM\SOFT
Windows Server 2008 with Desktop ExThis polic
System\Di HKLM\Soft At least Windows Vista
This polic
This polic
This polic
This polic
System\Di HKLM\Soft At least Windows 2000
This polic
This polic
This polic
This polic
This polic
This polic
System
HKLM\Soft Windows Server 2003 Windows XP and WindSpecifies
Network\DN
HKLM\Soft Windows XP Professional only
Specifies
Network\DN
Defines th
Network\DN
HKLM\SoftwAt least Windows 2000
Specifies
Network\DN
HKLM\Soft At least Windows Server 2003 operating sys Specifies
Network\DN
Network\DN
HKLM\SoftwAt least Windows Server 2003 operating sys Specifies
Network\DN
HKLM\SoftwWindows XP Professional only
Specifies
Network\DN
Network\DN
Network\DN
Network\DN
Network\DN
Network\DN
Network\DN
Specifies
Network\DN
Specifies
Network\DN
Specifies
Network\DN
HKLM\Soft At least Windows Server 2012 Windows 8 or Specifies
Network\DN
Network\DN
Network\DN
Network\DN
Network\DN
This polic
This polic
Windows CHKCU\SOFTWindows Server 2008 Windows 7 and Window
This polic
Windows CHKLM\SOFTWindows Server 2008 Windows 7 and Window
This polic
Windows CHKLM\SOFTAt least Windows Server 2012 Windows 8 or This polic
This polic
This polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

This polic
This polic
Windows CHKCU\softwAt least Windows Server 2012 Windows 8 or This polic
Windows CHKCU\softwAt least Windows Server 2012 Windows 8 or This policy
Windows CHKCU\softwAt least Windows Server 2012 Windows 8 or This policy
Windows CHKCU\soft At least Windows Server 2012 Windows 8 or This polic
Windows CHKCU\SoftwAt least Windows Server 2012 R2 Windows 8This polic
System\Ea HKLM\SysteAt least Windows Server 2012 Windows 8 or This polic
Windows CHKCU\Soft At least Windows Server 2012 Windows 8 or If you ena
Windows CHKCU\Soft At least Windows Server 2012 Windows 8 or This polic
Windows CHKLM\SoftwAt least Windows Server 2012 R2 Windows 8Disables h
Windows CHKCU\SoftwAt least Windows Server 2012 R2 Windows 8Disables h
System
This polic
System\En HKLM\Soft At least Windows Server 2008 R2 or WindowThis polic
Windows CHKLM\Soft Windows Server 2003 and Windows XP only This polic
Windows CHKLM\SoftwWindows Server 2003 and Windows XP only This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
Windows CHKCU\SOFTAt least Windows Server 2008 R2 or WindowThis polic
Windows CHKCU\SOFTAt least Windows Server 2012 Windows 8 or This polic
Windows CHKCU\SOFTAt least Windows Server 2012 R2 Windows 8This polic
Windows CHKLM\SOFTAt least Windows Server 2012 R2 Windows 8This polic
Windows CHKLM\SoftwWindows Server 2003 and Windows XP only This polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
CHKLM\SoftwWindows Server 2003 and Windows XP only

CHKCU\SOFTAt least Windows Vista
CHKLM\SOFTAt least Windows Vista
CHKCU\SoftwAt least Windows Vista
CHKLM\SoftwAt least Windows Vista
CHKLM\Soft At least Windows Vista
CHKLM\SoftwAt least Windows XP Professional with SP2
CHKLM\Soft At least Windows XP Professional with SP2
CHKLM\SoftwAt least Windows XP Professional with SP2
CHKCU\Soft At least Windows Vista
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
is th
speci
is th
polic
polic
polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows CHKLM\Soft At
Windows CHKLM\SoftwAt
Windows CHKLM\SysteAt
Windows CHKLM\SysteAt
System\TroHKLM\SOFTAt
Windows CHKCU\SoftwAt
System\Fi HKLM\Soft At
System\Fi HKLM\SoftwAt
System\Fil HKLM\Soft At
System\Fi HKLM\Syst At
System\Fi HKLM\SysteAt
System\Fi HKLM\Syst At
System\Fil HKLM\SysteAt
System\FolHKCU\SoftwAt
System\FolHKCU\Soft At
System\FolHKLM\SoftwAt
System\FolHKLM\Soft At
Windows CHKCU\Soft At
System\TroHKLM\SOFTAt
System\LocHKCU\SoftwAt
System\LocHKLM\SoftwAt
Control Pa HKCU\SoftwAt
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Server
Vista
Server
Server
Server
Server
Server
Vista
Server
Server
Server
Vista
Server
Server
Server
Server
Server
Server
Vista
Server
Server
Vista
Server
Server
Server
Vista
Vista
Server
Vista
Vista
Vista
Vista
Vista
Vista
Server
Vista
Vista
Vista
Vista
Vista
Vista
Vista
Vista
Vista
Vista
2008 R2 or WindowDisabling
Disabling
2008 R2 or WindowSets the t
2012 Windows 8 or This polic
2012 Windows 8 or Specifies
2012 Windows 8 or Specifies
This polic
2012 R2 Windows 8Windows Ru
2012 Windows 8 or Determines
Symbolic l
2008 R2 or WindowCompressio
2008 R2 or WindowEncryption
2008 R2 or WindowEncrypting
2008 R2 or WindowThese sett
2008 R2 or WindowDelete noti
2012 Windows 8 or TXF deprec
This polic
2003 operating sys This polic
This polic
This polic
Hides the
2008 R2 or WindowThis polic
Manages do
Tracks the
Manages do
This polic
This polic
This polic
2012 Windows 8 or
Th
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

This polic
Control Pa HKCU\SoftwAt least Windows Vista
This polic
This polic
This polic
Th
Th
Th
Th
Control Pa HKLM\SoftwAt least Windows Server 2012 Windows 8 or
System
HKCU\SoftwAt least Windows 2000
This polic
Control Pa HKCU\SOFTW
At least Windows Vista
Th
Control Pa HKLM\SOFTW
Th
System\GroHKLM\Soft At least Windows Server 2008
This polic
System\GroHKLM\Soft At least Windows Server 2012 R2 Windows 8
Th
Th
Ent
System\GroHKLM\SoftwAt least Windows Server 2012 Windows 8 or Enabling t
System\GroHKLM\Soft At least Windows Server 2012 Windows 8 or This polic
System\GroHKLM\Soft At least Windows Server 2012 Windows 8 or This polic
System\GroHKLM\Soft At least Windows Vista
This polic
This polic
This polic
System\GroHKLM\SoftwAt least Windows Server 2003
This polic
System\GroHKLM\Soft At least Windows 2000
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
System\GroHKCU\Soft At least Windows Server 2003 operating sys This polic
System\GroHKLM\Soft At least Windows Server 2003 operating sys This polic
System\GroHKCU\Soft Windows Server 2003 Windows XP and WindPrevents t
This polic
System\GroHKLM\Soft At least Windows Server 2003 operating sys This polic
System\GroHKCU\SoftwAt least Windows 2000
This polic
System\GroHKCU\SoftwAt least Windows 2000
This polic
System\GroHKCU\Soft At least Windows 2000
This polic
This polic
This polic
This polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

This
This
This
System\GroHKLM\SoftwWindows Server 2003 and Windows XP only This
System\GroHKLM\Soft At least Windows Server 2003 operating sys This
This
System\GroHKLM\Soft At least Windows Server 2012 Windows 8 or This
polic
polic
polic
polic
setti
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
System\GroHKLM\Soft At
System
HKLM\SoftwAt
System
HKCU\Soft At
System
HKLM\Soft At
System
HKLM\Soft At
System\In HKCU\SoftwAt
Network\HoHKLM\SoftwAt
System\In HKCU\Soft At
System\In HKLM\Soft At
System\In HKLM\SoftwAt
System\In HKCU\Soft At
System\In HKLM\Soft At
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
Windows Server 2003 operating sys This

Internet Explorer 6 Service Pack 1 This
Windows Server 2003 operating sys
Windows Server 2003 operating sys
Windows Server 2008 R2 or WindowThis
Windows Vista
This
Windows Vista
This
Windows Vista
This
Windows Vista
This
Windows Server 2012 Windows 8 or This
Windows XP Professional with SP2 This
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
Th
Th
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
System\In HKLM\Soft Windows Server 2008 Windows Server 2003 This polic
System\In HKLM\SoftwAt least Windows Server 2003 operating sys This polic
System\In HKLM\Soft At least Windows Server 2003 operating sys This polic
System\In HKLM\Soft At least Windows Server 2003 operating sy This polic
System\In HKCU\SoftwWindows Server 2008 Windows Server 2003 This polic
System\In HKLM\Soft Windows Server 2008 Windows Server 2003 This polic
System\In HKCU\Soft At least Windows Server 2012 Windows 8 or This polic
System\In HKLM\Soft At least Windows Server 2012 Windows 8 or This polic
System\In HKCU\Soft At least Windows Server 2003 operating sys This polic
System\In HKCU\SoftwAt least Windows Server 2003 operating sys This polic
System\In HKLM\Soft At least Windows Vista
This polic
System\In HKLM\SoftwAt least Windows Vista
This polic
Windows CHKLM\SoftwWindows Server 2003 only
"This poli
Windows CHKCU\Soft At least Internet Explorer 5.0
Designates
Designates
This Activ
Designates
Designates
Designates
Designates
Designates
Designates
Designates
Designates
Designates
Windows CHKLM\SoftwAt least Internet Explorer 10.0 on Windows 8This polic
Windows CHKCU\SoftwAt least Internet Explorer 10.0 on Windows 8This polic
Windows CHKLM\SoftwAt least Internet Explorer 11.0
This polic
Windows CHKCU\SoftwAt least Internet Explorer 11.0
This polic
Windows CHKLM\Soft At least Internet Explorer 6.0 in Windows X This polic
Windows CHKCU\Soft At least Internet Explorer 6.0 in Windows X This polic
Windows CHKLM\SoftwAt least Internet Explorer 6.0 in Windows 20 This polic
Windows CHKCU\SoftwAt least Internet Explorer 6.0 in Windows 20 This polic
Windows CHKLM\SoftwAt least Internet Explorer 7.0
This polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
CHKCU\SoftwAt least Internet Explorer 7.0

This polic
CHKLM\SoftwAt least Internet Explorer 8.0
This polic
This polic
Enhanced P
Enhanced P
This polic
This polic
This polic
This polic
This polic
This polic
CHKLM\SOFTAt least Internet Explorer 8.0
This polic
CHKCU\SOFTAt least Internet Explorer 8.0
This polic
CHKLM\SOFTW
At least Internet Explorer 8.0
This polic
CHKCU\SOFTW
This polic
CHKLM\SOFTAt least Internet Explorer 11.0
This polic
This polic
This polic
This polic
This polic
This polic
CHKLM\SoftwAt least Internet Explorer 6.0 in Windows 20 This polic
CHKCU\SoftwAt least Internet Explorer 6.0 in Windows 20 This polic
CHKLM\SoftwOnly Internet Explorer 6.0 in Windows 2003 This polic
CHKCU\SoftwOnly Internet Explorer 6.0 in Windows 2003 This polic
CHKLM\SoftwAt least Internet Explorer 6.0 in Windows X This polic
CHKCU\SoftwAt least Internet Explorer 6.0 in Windows X This polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Co
HKLM\SoftwAt least Internet Explorer 10.0
This polic
Co
HKCU\SoftwAt least Internet Explorer 10.0
This polic
This polic
CHKCU\SOFTOnly Internet Explorer 4.0
This polic
Co
This policy
Co
This policy
Co
This polic
Co
This polic
Co
HKCU\SoftwOnly Internet Explorer 5.0 through Internet This polic
Co
This polic
Co
This polic
Co
This polic
Co
HKLM\Soft At least Internet Explorer 11.0
This polic
Co
HKCU\Soft At least Internet Explorer 11.0
This polic
Co
HKCU\SoftwOnly Internet Explorer 5.0 and Internet ExploRestricts
Co
HKCU\SoftwOnly Internet Explorer 5.0 and Internet ExploPrevents u
Co
Co
HKCU\SoftwOnly Internet Explorer 5.0 and Internet ExploPrevents c
Co
Co
Co
Co
Co
Co
HKCU\SoftwOnly Internet Explorer 5.0 and Internet ExploDisables e
Co
HKCU\SoftwOnly Internet Explorer 5.0 and Internet ExploPrevents c
This polic
Co
This polic
Co
Removes th
Co
Removes th
Co
Removes th
Co
Removes th
Co
If you ena
Co
If you ena
Co
Removes th
Co
Removes th
Co
Removes th
Co
Removes th
Co
Removes th
Co
Removes th
Co
Removes th
Co
Removes th
Co
This polic
Co
This polic
This polic
This polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
CHKCU\SoftwAt
Co
HKCU\SoftwAt
Co
HKCU\SoftwAt
Co
HKCU\SoftwAt
CHKLM\SoftwAt
Co
HKCU\SoftwAt
CHKLM\Soft At
CHKCU\Soft At
CHKLM\Soft At
CHKCU\Soft At
CHKLM\SoftwAt
CHKCU\SoftwAt
CHKLM\Soft At
CHKCU\Soft At
CHKLM\SoftwAt
CHKCU\SoftwAt
CHKLM\SoftwAt
CHKCU\SoftwAt
CHKLM\Soft At
CHKCU\Soft At
CHKLM\Soft At
CHKCU\Soft At
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\Soft At
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
CHKLM\Soft At
CHKCU\Soft At
CHKLM\Soft At
CHKCU\Soft At
CHKLM\Soft At
CHKCU\Soft At
Co
HKLM\Soft At
Co
HKCU\Soft At
Co
HKLM\Soft At
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0. Not supporte
8.0
8.0
8.0
8.0
8.0
8.0
8.0
8.0
6.0 in Windows X
6.0 in Windows X
6.0 in Windows X
6.0 in Windows X
6.0 in Windows X
6.0 in Windows X
6.0 in Windows X
6.0 in Windows X
6.0 in Windows X
6.0 in Windows X
9.0
9.0
6.0 in Windows X
6.0 in Windows X
6.0 in Windows X
6.0 in Windows X
6.0 in Windows X
6.0 in Windows X
6.0 in Windows X
6.0 in Windows X
6.0 in Windows X
6.0 in Windows X
6.0 in Windows X
6.0 in Windows X
6.0 in Windows X
6.0 in Windows X
6.0 in Windows X
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
For each z
For each z
This polic
This polic
Internet E
Internet E
Internet E
Internet E
Internet E
Internet E
Internet E
Internet E
Internet E
Internet E
Internet E
Internet E
This polic
This polic
This polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Co
HKCU\Soft At
Co
HKLM\Soft At
Co
HKCU\Soft At
CHKLM\Soft At
CHKCU\Soft At
CHKLM\Soft At
CHKCU\Soft At
CHKLM\Soft At
CHKCU\Soft At
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\Soft At
Co
HKLM\Soft At
Co
HKCU\Soft At
Co
HKLM\Soft At
Co
HKCU\Soft At
CHKLM\Soft At
CHKCU\Soft At
CHKLM\Soft At
CHKCU\Soft At
CHKLM\Soft At
CHKCU\Soft At
Co
HKLM\Soft At
Co
HKCU\Soft At
Co
HKLM\Soft At
Co
HKCU\Soft At
Co
HKLM\Soft At
Co
HKCU\Soft At
Co
HKLM\Soft At
Co
HKCU\Soft At
Co
HKLM\Soft At
Co
HKCU\Soft At
Co
HKLM\Soft At
Co
HKCU\Soft At
Co
HKLM\Soft At
Co
HKCU\Soft At
Co
HKLM\Soft At
Co
HKCU\Soft At
Co
HKLM\Soft At
Co
HKCU\Soft At
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
This polic
This polic
This polic
Internet E
Internet E
Internet E
Internet E
Internet E
Internet E
This polic
This polic
This polic
This polic
This polic
This polic
The MK Pro
The MK Pro
The MK Pro
The MK Pro
The MK Pro
The MK Pro
Internet E
Internet E
File Explo
File Explo
Internet E
Internet E
This polic
This polic
This polic
This polic
This polic
This polic
Internet E
Internet E
Internet E
Internet E
Internet E
Internet E
This polic
This polic
This polic
This polic
This polic
This polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Co
HKLM\Soft At least
Co
HKCU\Soft At least
Co
HKLM\Soft At least
Co
HKCU\Soft At least
Co
HKLM\Soft At least
Co
HKCU\Soft At least
Co
HKLM\Soft At least
Co
HKCU\Soft At least
Co
HKLM\Soft At least
Co
HKCU\Soft At least
Co
HKLM\Soft At least
Co
HKCU\Soft At least
Co
HKLM\SOFTW
At least
Co
HKCU\SOFTW
At least
Co
HKLM\SOFTW
At least
Co
HKCU\SOFTW
At least
Co
HKLM\SOFTW
At least
Co
HKCU\SOFTW
At least
Co
HKLM\SOFTW
At least
Co
HKCU\SOFTW
At least
Co
HKLM\SOFTW
At least
Co
HKCU\SOFTW
At least
CHKLM\SoftwAt least
CHKCU\SoftwAt least
CHKLM\SoftwAt least
CHKCU\SoftwAt least
CHKLM\SoftwAt least
CHKCU\SoftwAt least
CHKLM\SoftwAt least
CHKCU\SoftwAt least
CHKLM\SoftwAt least
CHKCU\SoftwAt least
CHKLM\SoftwAt least
CHKCU\SoftwAt least
CHKLM\SoftwAt least
CHKCU\SoftwAt least
CHKLM\SoftwAt least
CHKCU\SoftwAt least
CHKCU\SoftwAt least
CHKCU\SoftwAt least
CHKCU\SoftwAt least
CHKLM\SoftwAt least
CHKCU\SoftwAt least
CHKCU\SoftwAt least
CHKLM\SoftwAt least
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
11.0
11.0
8.0
8.0
8.0
8.0
6.0 in
6.0 in
7.0
7.0
7.0
7.0
8.0
8.0
5.0
5.0
5.0
7.0
7.0
5.0
7.0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
X
This polic
This polic
This polic
This polic
This polic
This polic
Internet E
Internet E
Internet E
Internet E
Internet E
Internet E
For each z
For each z
For each z
For each z
For each z
For each z
For each z
For each z
For each z
For each z
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
Windows X This polic
Windows X This polic
This polic
This polic
This polic
This polic
This polic
This polic
Prevents a
Prevents b
Prevents u
This polic
This polic
Specifies
This polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows

This polic
CHKLM\SoftwOnly Internet Explorer 7.0
This polic
CHKCU\SoftwOnly Internet Explorer 7.0
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
CHKCU\SoftwOnly Internet Explorer 7.0 and Internet ExploThis polic
This polic
This polic
Specifies
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
CHKLM\SoftwAt least Internet Explorer 10.0 on Windows 8This polic
CHKCU\SoftwAt least Internet Explorer 10.0 on Windows 8This polic
CHKLM\Soft At least Internet Explorer 7.0
This polic
CHKCU\Soft At least Internet Explorer 7.0
This polic
CHKCU\SoftwOnly Internet Explorer 5.0 and Internet ExploPrevents u
This polic
This polic
This polic
This polic
This polic
This polic
Allows Adm
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows

This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
In Interne
In Interne
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
CHKLM\SoftwOnly Internet Explorer 7.0 and Internet ExploThis polic
CHKCU\SoftwOnly Internet Explorer 7.0 and Internet ExploThis polic
This polic
This polic
This polic
This polic
CHKLM\SoftwOnly Internet Explorer 5.0 and Internet ExploPrevents I
This polic
This polic
This polic
This polic
This polic
This polic
This polic
CHKLM\SoftwInternet Explorer 7.0 to Internet Explorer 10 This polic
CHKCU\SoftwInternet Explorer 7.0 to Internet Explorer 10 This polic
This polic
This polic
Prevents t
This polic
This polic
CHKLM\SoftwOnly Internet Explorer 5.0 and Internet ExploPrevents I
This polic
This polic
CHKCU\Soft Only Internet Explorer 6.0
Allows Adm
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows

If you ena
This setti
This setti
Prevents u
CHKCU\SoftwAt least Internet Explorer 5.0. Not supporte Prevents u
Prevents u
CHKCU\SoftwOnly Internet Explorer 5.0 through Internet Prevents M
This polic
Prevents u
Prevents u
Prevents u
Prevents u
Prevents u
This AutoC
This AutoC
This setti
This setti
The Home p
Secondary
Secondary
Prevents u
Prevents u
CHKCU\SoftwAt least Internet Explorer 5.0. Not supporte Prevents u
You can al
You can al
This polic
This polic
Prevents u
CHKLM\SoftwOnly Internet Explorer 5.0 through Internet This polic
CHKCU\SoftwOnly Internet Explorer 5.0 through Internet This polic
This AutoC
This AutoC
This polic
This polic
This polic
This polic
CHKCU\SoftwOnly Internet Explorer 5.0 and Internet ExploDisables u
CHKCU\SoftwOnly Internet Explorer 5.0 and Internet ExploMakes the
Applies se
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows

Prevents u
Prevents u
CHKLM\Soft Only Internet Explorer 5.0 and Internet ExploSpecifies
This polic
This polic
CHKLM\Soft At least Internet Explorer 7.0. Not supporte This polic
CHKCU\Soft At least Internet Explorer 7.0. Not supporte This polic
This polic
This polic
Applies pr
Co
This polic
Co
This polic
Co
This polic
Co
This polic
Co
This polic
Co
This polic
Co
This polic
Co
This polic
Co
This polic
Co
This polic
Co
This polic
Co
This polic
Co
This polic
Co
This polic
Co
This polic
Co
This polic
Co
HKLM\SoftwAt least Internet Explorer 7.0 in Windows Vis This polic
Co
HKCU\SoftwAt least Internet Explorer 7.0 in Windows Vis This polic
Co
This polic
Co
This polic
Co
This polic
Co
This polic
Co
This polic
Co
This polic
Co
This polic
Co
This polic
Co
This polic
Co
This polic
Co
This polic
Co
This polic
Co
HKLM\SoftwAt least Internet Explorer 6.0 in Windows X This polic
Co
HKCU\SoftwAt least Internet Explorer 6.0 in Windows X This polic
Co
HKLM\SoftwAt least Internet Explorer 6.0 in Windows X This polic
Co
Co
This polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
This
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
HKLM\SoftwAt least Internet Explorer 6.0 in Windows X This
Co
HKCU\SoftwAt least Internet Explorer 6.0 in Windows X This
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
This
Co
This
Co
Co
Co
Co
Co
HKLM\SoftwOnly Internet Explorer 6.0 in Windows XP Se This
Co
HKCU\SoftwOnly Internet Explorer 6.0 in Windows XP Se This
Co
Co
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
This
Co
This
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
policy
policy
policy
policy
policy
policy
policy
policy
policy
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Co
HKCU\SoftwAt
CHKLM\Soft At
CHKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\Soft At
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\Soft At
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
8.0
8.0
8.0
8.0
8.0
8.0
8.0
8.0
8.0
8.0
8.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
in
in
in
in
in
in
in
in
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
in Windows
in Windows
This
This
This
This
This
This
This
This
This
This
This
X This
X This
X This
X This
X This
X This
X This
X This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
Vis This
Vis This
This
This
This
This
This
This
This
This
policy
policy
policy
policy
policy
policy
policy
policy
policy
policy
policy
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Co
This
Co
This
Co
This
Co
This
Co
HKLM\Soft At least Internet Explorer 6.0 in Windows X This
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
This
Co
This
Co
Co
Co
Co
Co
HKLM\Soft Only Internet Explorer 6.0 in Windows XP Se This
Co
Co
Co
HKCU\Soft At least Internet Explorer 6.0 in Windows X This
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
This
Co
This
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Co
This
Co
This
Co
HKLM\SoftwAt least Internet Explorer 7.0 in Windows Vis This
Co
HKCU\SoftwAt least Internet Explorer 7.0 in Windows Vis This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
This
Co
This
Co
Co
Co
Co
Co
Co
Co
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
This
Co
This
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\Soft At
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\Soft At
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
in Windows
in Windows
in
in
in
in
in
in
in
in
in
in
in
in
in
in
in
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
Vis This
Vis This
This
This
This
This
This
This
This
This
This
This
This
This
X This
X This
X This
X This
X This
X This
X This
X This
X This
X This
X This
X This
X This
X This
X This
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Co
Co
Co
Co
Co
Co
This
Co
This
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
This
Co
This
Co
Co
Co
Co
Co
Co
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
HKLM\SoftwAt least Internet Explorer 7.0 in Windows Vis This
Co
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
Co
Co
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
This
Co
This
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Co
Co
Co
Co
Co
Co
Co
This
Co
This
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
CHKLM\Soft At least Internet Explorer 7.0 in Windows Vis This
CHKCU\SoftwAt least Internet Explorer 7.0 in Windows Vis This
This
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows

This
This
This
This
This
This
This
This
This
This
This
CHKLM\Soft At least Internet Explorer 6.0 in Windows X This
CHKCU\SoftwAt least Internet Explorer 6.0 in Windows X This
This
This
CHKLM\Soft Only Internet Explorer 6.0 in Windows XP Se This
CHKCU\SoftwOnly Internet Explorer 6.0 in Windows XP Se This
CHKCU\Soft At least Internet Explorer 6.0 in Windows X This
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows

This
This
CHKLM\Soft Only Internet Explorer 6.0 in Windows XP Se This
CHKCU\SoftwOnly Internet Explorer 6.0 in Windows XP Se This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0 in
7.0 in
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
6.0 in
10.0
10.0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
This
This
This
This
This
This
This
This
This
Vis This
Vis This
This
This
This
This
This
This
This
This
This
This
This
This
X This
X This
X This
X This
X This
X This
X This
X This
X This
X This
X This
X This
X This
X This
X This
X This
X This
X This
X This
X This
This
This
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
This
Co
This
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\Soft At
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\Soft At
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
Co
HKLM\Soft At
Co
HKCU\SoftwAt
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
6.0
6.0
6.0
6.0
6.0
6.0
6.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
in
in
in
in
in
in
in
Windows
Windows
Windows
Windows
Windows
Windows
Windows
in Windows
in Windows
in
in
in
in
in
in
in
in
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
X
X
X
X
X
X
X
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
Vis This
Vis This
This
This
This
This
This
This
This
This
This
This
This
This
X This
X This
X This
X This
X This
X This
X This
X This
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
This
Co
This
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
This
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Co
This
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
This
Co
This
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
templ
templ
templ
templ
templ
templ
templ
templ
templ
templ
templ
templ
templ
templ
templ
templ
templ
templ
templ
templ
polic
polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
Co
HKCU\SoftwAt
Co
HKLM\SoftwAt
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Internet
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
Explorer
6.0
6.0
6.0
6.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
7.0
6.0
6.0
6.0
6.0
6.0
6.0
6.0
in
in
in
in
Windows
Windows
Windows
Windows
in Windows
in Windows
in
in
in
in
in
in
in
Windows
Windows
Windows
Windows
Windows
Windows
Windows
X
X
X
X
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
Vis This
Vis This
This
This
This
This
This
This
This
This
This
This
This
This
X This
X This
X This
X This
X This
X This
X This
polic
0
polic
0
policy setting allows
0 you to ma
policy setting allows
0 you to ma
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
polic
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
This
Co
This
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Co
Co
Co
This
Co
This
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
HKLM\Soft At least Internet Explorer 7.0 in Windows Vis This
Co
Co
This
Co
This
Co
This
Co
This
Co
This
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
This
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
This
Co
This
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Co
HKLM\Soft At least Internet Explorer 6.0 in Windows X This polic
Co
Co
Co
Co
Co
HKCU\Soft At least Internet Explorer 6.0 in Windows X This polic
Co
Co
Co
Co
Co
Co
Co
Co
Co
This polic
Co
This polic
Co
Co
Co
Co
Co
Co
Co
HKLM\Soft Only Internet Explorer 6.0 in Windows XP Se This polic
Co
HKCU\SoftwOnly Internet Explorer 6.0 in Windows XP Se This polic
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
Co
This polic
Co
This polic
Co
This polic
Co
This polic
Prevents u
Prevents u
Prevents u
Prevents u
Prevents u
Prevents u
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows

Prevents u
This polic
Prevents u
Prevents u
Prevents u
This polic
This polic
Prevents u
This polic
This polic
Prevents u
Prevents u
Co
This polic
Co
This polic
Co
This polic
Co
This polic
Co
This polic
Co
HKCU\SOFTW
This polic
Limits the
Limits the
Limits the
Limits the
Limits the
Co
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
Co
This polic
Co
This polic
Co
This polic
Co
This polic
Co
This polic
Co
This polic
Co
This polic
Co
This polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Co
This polic
Co
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
The WebSoc
The WebSoc
This polic
This polic
Co
This polic
This polic
This polic
This polic
This polic
Prevents u
Prevents u
CHKCU\SoftwOnly Internet Explorer 5.0 and Internet ExploSpecifies
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
Co
This polic
Co
This polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows

CHKLM\SoftwInternet Explorer 8.0 to Internet
CHKCU\SoftwInternet Explorer 8.0 to Internet
CHKLM\Soft Internet Explorer 8.0 to Internet
CHKCU\Soft Internet Explorer 8.0 to Internet
Explorer
Explorer
Explorer
Explorer
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This policy
This policy
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
10 This polic
10 This polic
This polic
This polic
This polic
This polic
10 This polic
10 This polic
This polic
This polic
Compatibil
Compatibil
This polic
This polic
This polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows Co
HKLM\Soft At
Windows Co
HKCU\Soft At
Windows Co
HKLM\Soft At
Windows Co
HKCU\Soft At
Windows Co
HKLM\Soft At
Windows Co
HKCU\Soft At
Windows Co
HKLM\SoftwAt
Windows Co
HKCU\SoftwAt
Windows Co
HKLM\Soft At
Windows Co
HKCU\Soft At
Windows Co
HKLM\Soft At
Windows Co
HKCU\Soft At
Windows Co
HKLM\SoftwAt
Windows Co
HKCU\SoftwAt
Windows Co
HKLM\Soft At
Windows Co
HKCU\Soft At
Windows Co
HKLM\Soft At
Windows Co
HKCU\Soft At
Windows Co
HKLM\Soft At
Windows Co
HKCU\Soft At
Windows Co
HKLM\SoftwAt
Windows Co
HKCU\SoftwAt
Windows Co
HKLM\SoftwAt
Windows Co
HKCU\SoftwAt
Windows Co
HKLM\SoftwAt
Windows Co
HKCU\SoftwAt
System\iSCHKLM\SoftwAt
System\iSCHKLM\Soft At
System\KDHKLM\Soft At
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
Internet Explorer
Internet Explorer
Internet Explorer
Internet Explorer
Internet Explorer
Internet Explorer
Internet Explorer
Internet Explorer
Internet Explorer
Internet Explorer
Internet Explorer
Internet Explorer
Internet Explorer
Internet Explorer
Internet Explorer
Internet Explorer
Internet Explorer
Internet Explorer
Internet Explorer
Internet Explorer
Internet Explorer
Internet Explorer
Internet Explorer
Internet Explorer
Internet Explorer
Internet Explorer
Internet Explorer
Internet Explorer
Internet Explorer
Internet Explorer
Internet Explorer
Internet Explorer
Windows Vista
Windows Vista
Windows Vista
Windows Vista
Windows Vista
Windows Vista
Windows Vista
Windows Vista
Windows Vista
Windows Vista
Windows Vista
Windows Vista
Windows Vista
9.0
11.0
11.0
11.0
11.0
10.0
10.0
10.0
10.0
10.0
10.0
10.0
10.0
10.0
10.0
10.0
10.0
10.0
10.0
10.0
10.0
10.0
10.0
10.0
10.0
10.0
10.0
10.0
10.0
10.0
10.0
10.0
on
on
on
on
Windows
Windows
Windows
Windows
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
8This polic
8This polic
8This polic
8This polic
This polic
Turns off
Turns off
If enabled
If enabled
If enabled
If enabled
If enabl
If enabled
If enable
If enabled
If enabled
If enabled
This polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
System\KDHKLM\Soft At least Windows Server 2008 R2 or WindowThis polic

System\KDHKLM\Soft At least Windows Server 2012 Windows 8 or This polic
System\KDHKLM\Soft At least Windows Server 2012 Windows 8 or This polic
System\KDHKLM\Soft At least Windows Server 2012 R2 Windows 8This polic
System\Ke HKLM\Soft At least Windows Vista
This polic
System\Ke HKLM\Soft At least Windows Vista
This polic
System\Ke HKLM\SoftwAt least Windows Vista
This polic
System\Ke HKLM\Soft At least Windows Server 2008 R2 or WindowThis polic
System\Ke HKLM\SoftwAt least Windows Server 2008 R2 or Window This poli
System\Ke HKLM\Soft At least Windows Server 2012 Windows 8 or This polic
System\Ke HKLM\Syst At least Windows Server 2003 operating sys This polic
System\Ke HKLM\Soft At least Windows Server 2012 R2 Windows 8This polic
Network\L HKLM\Soft At least Windows Server 2008 R2 or WindowThis polic
Network\L HKLM\Soft At least Windows Server 2012 Windows 8 or This polic
System\Tr HKLM\SOFTAt least Windows Vista
This polic
Network\Li HKLM\Soft At least Windows Vista
This polic
Network\Li HKLM\Soft At least Windows Vista
This polic
Windows CHKLM\Soft At least Windows Server 2012 Windows 8 or
Th
System\Lo HKCU\SoftwAt least Windows 2000
This polic
System\Lo HKLM\Soft At least Windows 2000
This polic
System\Lo HKCU\Soft At least Windows 2000
This polic
System\Lo HKLM\Soft At least Windows 2000
This polic
System\Lo HKLM\Soft At least Windows Server 2003 operating sys This polic
System\Lo HKLM\Soft Windows 2000 only
This polic
System\Lo HKCU\SoftwAt least Windows 2000
This polic
System\Lo HKLM\SoftwAt least Windows 2000
This polic
System\Lo HKLM\Soft At least Windows Server 2003 operating sys This polic
System
HKLM\Soft Windows Server 2003 Windows XP and WindThis polic
System
HKCU\Soft Windows 2000 only
This polic
System
This polic
This polic
This polic
System\Lo HKLM\Soft Windows Server 2008 R2 and Windows 7
This polic
This polic
This polic
Windows CHKCU\Soft At least Windows 2000
Prevents u
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
CHKCU\SoftwAt least Windows 2000

Lets you s
CHKCU\Soft At least Windows Server 2003 operating sys Permits or
CHKCU\Soft At least Windows 2000
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
CHKCU\Soft At least Windows Server 2003 operating sys This polic
This polic
CHKCU\Soft Windows Server 2003 Windows XP and WindPermits or
This polic
This polic
This polic
This polic
This polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft
Co
HKCU\Soft
Co
HKCU\Soft
Co
HKCU\Soft
Co
HKCU\Soft
Co
HKCU\Soft
Co
HKCU\Soft
Co
HKCU\Soft
Co
HKCU\Soft
Co
HKCU\Soft
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft
CHKCU\Soft

At least Windows 2000
At least Windows Server 2003
Windows Server 2003 only
operating
operating
operating
operating
operating
operating
operating
operating
operating
operating
operating
operating
operating
This
This
This
This
This
This
This
This
This
sys This
sys This
sys This
sys This
sys This
sys This
sys This
sys This
sys This
This
This
This
sys This
This
This
This
This
This
This
This
This
This
This
This
This
This
sys This
This
This
This
This
sys This
sys This
This
This
This
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows CHKCU\Soft At least Windows

Windows CHKCU\SoftwAt least Windows
Windows CHKLM\SoftwAt least Windows
Windows CHKLM\Soft Unknown
System\TroHKLM\SOFTAt least Windows
Vista
2000
2000
Server
2000
2000
2000
2000
2000
2000
2000
2000
2000
2000
Vista
Vista
2000
2000
Server
Server
Server
Server
2000
Server
Server
Server
Server
Server
Server
Vista
Vista
Vista
Vista
This
This
This
2003 operating sys This
This
This
This
This
This
This
This
This
This
This
This
This
This
This
2008
This
2008
This
2003 R2
This
2003 R2
This
This
2003 R2
This
2003 R2
This
2003 R2
This
2003 R2
This
2003 R2
This
2003 R2
This
This
This
This
This
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
Vista
This polic
Vista
This polic
Server 2008 R2 or WindowThis polic
Vista
This polic
2000
This polic
2000
This polic
2000
This polic
2000
This polic
2000
This polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows CHKLM\SoftwWindows Installer v4.0

This polic
Windows CHKLM\SoftwAt least Windows 2000
Th
This polic
This polic
Windows CHKCU\SoftwAt least Windows 2000
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
Windows CHKLM\SoftwAt least Windows Server 2003 operating sys This polic
Windows CHKLM\SoftwMicrosoft Windows XP or Windows 2000 withThis polic
Windows CHKLM\Soft Windows Installer v3.0
This polic
Th
Sp
This polic
This polic
This polic
This polic
Windows CHKLM\SoftwUnknown
This polic
Windows CHKLM\SOFTAt least Windows XP Professional with SP2 This polic
Network\DiHKLM\SOFTAt least Windows Server 2008 R2 or WindowSpecifies
Network\NeHKLM\Soft At least Windows Server 2008 R2 or WindowThis polic
Network\NeHKLM\SoftwAt least Windows Server 2008 R2 or WindowThis polic
Network\NeHKLM\SoftwAt least Windows Server 2012 Windows 8 or This Polic
System\Ne HKLM\Soft At least Windows Server 2003 operating sys This polic
System\Ne HKLM\SoftwAt least Windows Server 2003 operating sys This polic
System\Ne HKLM\SoftwAt least Windows Server 2003
This polic
System\Ne HKLM\Soft At least Windows Server 2003
This polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
This polic
This polic
System\Ne HKLM\SoftwAt least Windows Server 2012 R2 or WindowThis polic
System\Ne HKLM\SoftwAt least Windows Vista
This polic
System\Ne HKLM\SoftwAt least Windows Vista
This polic
System\Ne HKLM\Soft At least Windows Vista
This polic
This polic
This polic
System\Ne HKLM\SoftwAt least Windows Server 2012 Windows 8 or This polic
System\Ne HKLM\Soft At least Windows Server 2012 Windows 8 or This polic
System\Ne HKLM\Soft At least Windows Server 2012 Windows 8 or This polic
Network\N HKCU\Soft Microsoft Windows Server 2003 Windows XP Determines
Network\N HKLM\Soft At least Windows Server 2003 operating sys Determines
Network\N HKCU\Soft Windows Server 2003 Windows XP and WindDetermines
Network\N HKCU\Soft At least Windows 2000 Service Pack 1
Determines
Determines
Network\N HKCU\Soft Windows Server 2003 and Windows XP only Determines
Network\N HKCU\Soft Microsoft Windows XP Professional with SP2 This polic
Determines
Network\N HKLM\Soft Windows Server 2003 and Windows XP only Prohibits
Determines
Determines
Determines
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

Determines
Network\N HKLM\Soft Microsoft Windows Server 2003 Windows XP Determines
Network\N HKCU\SoftwMicrosoft Windows Server 2003 Windows XP Determines
Network\N HKLM\Soft At least Windows Server 2008 R2 or WindowThis polic
Network\N HKLM\Soft At least Windows Server 2008 R2 or WindowSpecifies
Network\N HKLM\SoftwAt least Windows Server 2008 R2 or WindowThis polic
Network\NeHKLM\SOFTAt least Windows Server 2012 Windows 8 or This sett
Network\NeHKLM\SOFTAt least Windows Server 2012 Windows 8 or This sett
Network\NeHKLM\SOFTAt least Windows Server 2012 Windows 8 or This setti
This polic
This polic
Windows CHKLM\SoftwAt least Windows Server 2008 R2 or WindowThis polic
Network\Off
HKLM\Soft Windows Server 2003 Windows XP and WindMakes subf
Network\Off
This polic
Network\Off
This polic
Network\Off
HKCU\Soft Windows Server 2003 Windows XP and WindDetermines
Network\Off
HKLM\Soft Windows Server 2003 Windows XP and WindDetermines
Network\Off
HKLM\Soft Windows Server 2003 Windows XP and WindLimits the
Network\Off
This polic
Network\Off
HKLM\Soft At least Windows Server 2003 operating sys This polic
Network\Off
Network\Off
Network\Off
HKLM\Soft Windows Server 2003 Windows XP and WindLists type
Network\Off
HKCU\SoftwWindows Server 2003 Windows XP and WindDetermines
Network\Off
HKLM\SoftwWindows Server 2003 Windows XP and WindDetermines
Network\Off
HKCU\Soft Windows Server 2003 Windows XP and WindDisables t
Network\Off
HKLM\Soft Windows Server 2003 Windows XP and WindDisables t
Network\Off
HKCU\Soft Windows Server 2003 Windows XP and WindPrevents u
Network\Off
HKLM\Soft Windows Server 2003 Windows XP and WindPrevents u
Network\Off
This polic
Network\Off
This polic
Network\Off
HKCU\SoftwAt least Windows Server 2003 operating sys This polic
Network\Off
HKLM\SoftwAt least Windows Server 2003 operating sys This polic
Network\Off
HKCU\Soft Windows Server 2003 Windows XP and WindHides or d
Network\Off
HKLM\Soft Windows Server 2003 Windows XP and WindHides or d
Network\Off
HKLM\Soft Windows Server 2003 Windows XP and WindDeletes lo
Network\Off
Network\Off
Network\Off
Network\Off
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Network\Off
Network\Off
Network\Off
Configures
Network\Off
Network\Off
Network\Off
Network\Off
Network\Off
Network\Off
Network\Off
This polic
Network\Off
This polic
Network\Off
This polic
Network\Off
Network\Off
Network\Off
Network\Off
HKCU\Soft At least Windows Server 2012 Windows 8 or This polic
Network\Off
HKLM\Soft At least Windows Server 2012 Windows 8 or This polic
Network\Off
HKLM\Soft At least Windows Server 2012 Windows 8 or This polic
Network\MiHKLM\SoftwAt least Windows XP Professional with SP2 This setti
Network\MiHKLM\SoftwAt least Windows XP Professional with SP2 This polic
Network\MiHKLM\Soft At least Windows Vista
By default
This polic
System\TroHKLM\Soft At least Windows Server 2012 Windows 8 or This polic
System\TroHKLM\SOFTAt least Windows Vista
This setti
This setti
This setti
This setti
This setti
This setti
Network\B HKLM\SOFTAt least Windows 7 or Windows Server 2008 This polic
Network\B HKLM\Soft At least Windows Server 2008 R2 or WindowThis polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Network\B HKLM\SOFTAt least Windows Server 2012 Windows 8 or This polic

Network\B HKLM\SOFTW
At least Windows Server 2012 Windows 8 or This polic
Windows CHKCU\SOFTW
Windows Vista only
Turns off
Windows CHKLM\SOFTW
Windows Vista only
Turns off
Determines
Determines
Determines
Determines
This polic
System\Po HKLM\Soft At least Windows Vista
This polic
This polic
This policy
This polic
This polic
This polic
This polic
This polic
System\Po HKLM\Soft Windows Vista only
This polic
This polic
This polic
This polic
System\Po HKLM\Soft Windows Vista only
This polic
This polic
This polic
This polic
This polic
System\Po HKCU\Soft Windows Server 2003 Windows XP and WindThis polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
System
HKLM\Soft At least Windows Server 2003 operating sys This polic
System\Po HKLM\Soft At least Windows Server 2008 R2 or WindowThis polic
Windows CHKLM\SoftwAt least Microsoft Windows 7 or Windows Se This polic
Windows CHKCU\SoftwAt least Microsoft Windows 7 or Windows Se This polic
Windows CHKLM\Soft At least Microsoft Windows 7 or Windows Se
Th
Windows CHKCU\Soft At least Microsoft Windows 7 or Windows Se
Th
Windows CHKLM\Soft At least Microsoft Windows 7 or Windows Se This polic
Windows CHKCU\Soft At least Microsoft Windows 7 or Windows Se This polic
Windows Co
HKCU\SoftwSupported Windows Vista through Windows This polic
Windows Co
HKLM\SoftwSupported Windows Vista through Windows This polic
Windows Co
HKCU\SoftwSupported Windows Vista through Windows This policy
Windows Co
HKLM\SoftwSupported Windows Vista through Windows This policy
Windows Co
Windows Co
Windows Co
HKCU\SoftwAt least Windows Vista
This policy
Windows Co
This policy
Windows Co
HKCU\SoftwAt least Windows Vista
This setti
Windows Co
This setti
Windows Co
Windows Co
Printers
HKLM\SoftwWindows 2000 only
Internet pr
Printers
HKLM\SoftwAt least Windows Server 2012 Windows 8 or Determines
Printers
HKLM\SoftwWindows Server 2003 Windows XP and WindBy default
Printers
If you ena
Control PanHKCU\SoftwAt least Windows 2000
Allows use
Printers
When print
Printers
HKLM\SoftwAt least Windows Server 2012 Windows 8 or Determines
Control PanHKCU\SoftwWindows Server 2003 Windows XP and WindAdds a lin
Printers
Prevents u
If this po
Printers
This polic
Control PanHKCU\SoftwWindows Server 2008 and Windows Vista
This polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Control PanHKCU\SoftwWindows Server 2008 and Windows Vista

Restricts
Printers
This polic
Printers
Restricts
Printers
If this po
Printers
Enables th
Control PanHKCU\SoftwSupported Windows XP SP1 through WindowThis polic
Printers
This polic
Specifies
Printers
Announces
Printers
Printers
Printers
Printers
HKLM\SoftwAt least Windows Server 2012 Windows 8 or This polic
Printers
HKLM\Soft At least Windows Server 2012 Windows 8 or Microsoft
Printers
HKLM\SoftwAt least Windows Server 2012 Windows 8 or
Thi
Printers
HKLM\Soft At least Windows Server 2003
This polic
Printers
Printers
Determines
Printers
Specifies
Printers
Sets the p
Printers
Specifies
Printers
Printers
Determines
Printers
Directs the
Printers
Determines
Control Pa HKCU\Soft At least Windows Vista
This setti
This setti
This setti
This setti
Control Pa HKCU\Soft Windows Vista only
This setti
Prevents u
This setti
This polic
This polic
This polic
Windows CHKLM\SoftwAt least Windows Server 2008
This polic
Network\Q HKLM\Soft At least Windows Server 2003 operating sys Specifies
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

Network\Q HKLM\SoftwAt least Windows Server 2003 operating sys Determines
Network\Q HKLM\SoftwAt least Windows Server 2003 operating sys Determines
Network\QoHKLM\SoftwAt least Windows Server 2003 operating sys Specifies
Network\QoHKLM\Soft At least Windows Server 2003 operating sys Specifies
Network\QoHKLM\SoftwAt least Windows Server 2003 operating sys Specifies
Determines
System\Re HKLM\SOFTWindows Server 2008 R2 and Windows 7
Requir
System
HKLM\SoftwAt least Windows Server 2003
This polic
Windows CHKLM\SoftwWindows Server 2003 only
This polic
System
HKLM\SoftwWindows Server 2003 only
This polic
System
HKLM\Soft At least Windows Server 2003 operating sys The Shutdo
System\Re HKLM\Soft At least Windows Vista
This polic
System\Re HKLM\SoftwAt least Windows Vista
This polic
This polic
This polic
System\Re HKLM\SoftwAt least Windows Server 2003 operating sys This polic
System\Re HKCU\Soft At least Windows Vista
This polic
This polic
This polic
This polic
This polic
This polic
System\Re HKLM\Soft At least Windows Server 2008 R2 or WindowThis polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
Configure
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

Configure
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
System\Re HKLM\Soft At least Windows XP Professional with SP2 This polic
System\Re HKLM\SoftwAt least Windows Server 2003
This polic
System\Re HKLM\Soft At least Windows Server 2003 operating sys This polic
System\Re HKLM\SoftwAt least Windows XP Professional with SP2 This polic
System\ScrHKLM\Soft At least Windows 2000
This polic
System\ScrHKCU\Soft At least Windows 2000
This polic
System\ScrHKCU\SoftwAt least Windows 2000
This polic
This polic
This polic
This polic
System\ScrHKLM\Soft At least Windows Server 2008 R2 or WindowThis polic
System\ScrHKLM\SoftwAt least Windows Server 2008 R2 or WindowThis polic
System\ScrHKCU\SoftwAt least Windows Server 2008 R2 or WindowThis polic
This polic
This polic
System\ScrHKLM\SoftwAt least Windows 2000
This polic
System\ScrHKLM\SoftwAt least Windows Vista
This polic
System\TroHKLM\SOFTAt least Windows Server 2008 R2 or WindowThis polic
System\Tr HKLM\SOFTAt least Windows Server 2008 R2 or WindowDetermines
Windows CHKLM\SOFTAny version of Microsoft Windows with WindoEnabling t
Windows CHKCU\SOFTAny version of Microsoft Windows with WindoEnabling t
Windows CHKLM\SOFTMicrosoft Windows Vista or any version of W This polic
Windows CHKLM\SOFTAny version of Microsoft Windows with WindoIf enabled
Windows CHKLM\SOFTAny version of Microsoft Windows with WindoIf enabled
Windows CHKLM\SOFTMicrosoft Windows XP Windows Server 2003 Ifwenabled
Windows CHKLM\SOFTMicrosoft Windows XP Windows Server 2003 Ifwenabled
Windows CHKCU\SOFTAny version of Microsoft Windows with WindoIf enabled
Windows CHKLM\SOFTMicrosoft Windows Vista or any version of This polic
Windows CHKLM\SOFTMicrosoft Windows 8 or later
This polic
Windows CHKLM\SOFTMicrosoft %WINDOWS_CLIENT_VERSION_6_3_
This polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

This polic
This polic
This polic
This polic
Windows CHKLM\SOFTAny version of Microsoft Windows with Wind This polic
Windows CHKLM\SOFTMicrosoft Windows XP or Windows Server 200
This polic
Windows CHKLM\SOFTMicrosoft Windows Vista or any version of This polic
Windows CHKLM\SOFTMicrosoft Windows Vista or later
If enabled
Windows CHKLM\SOFTMicrosoft Windows Vista or any version of Enabling t
Windows CHKLM\SOFTAny version of Microsoft Windows with WindoEnabling t
Windows CHKLM\SOFTAny version of Microsoft Windows with WindoWhen using
Windows CHKLM\SOFTMicrosoft Windows Vista or any version of Enable thi
Enabling th
Windows CHKLM\SOFTMicrosoft Windows Vista or any version of Store inde
Enabling t
Enabling t
Enabling t
Enabling t
Windows CHKLM\SOFTMicrosoft Windows XP Windows Server 2003 Enabling
w
t
Windows CHKLM\SOFTMicrosoft Windows XP Windows Server 2003 Enabling t
Enabling t
Windows CHKLM\SOFTMicrosoft Windows XP Windows Server 2003 Ifwyou ena
Windows CHKCU\SOFTAny version of Microsoft Windows with WindoIf you ena
w
t
w
t
w
t
Windows CHKCU\SOFTMicrosoft Windows 8 or later
This polic
String Not HKLM\SOFTMicrosoft Windows 7 or later
This polic
String Not HKLM\SOFTMicrosoft Windows 7 or later
Th
Windows CHKLM\Soft At least Windows Server 2003 operating sys This polic
Windows CHKCU\Soft At least Windows Server 2008 R2 or Window
Thi
Windows CHKLM\Soft At least Windows Server 2008 R2 or Window
Thi
Windows CHKCU\Soft At least Windows Server 2008 R2 or Window
Thi
Windows CHKLM\Soft At least Windows Server 2008 R2 or Window
Thi
Windows CHKCU\SoftwAt least Windows Server 2008 R2 or Window
Thi
Windows CHKLM\SoftwAt least Windows Server 2008 R2 or Window
Thi
System\Se HKLM\Soft At least Windows Server 2008
This polic
System\Se HKLM\Soft At least Windows Server 2008
This polic
System\Se HKLM\SoftwWindows Server 2008 and Windows Server 2This polic
System
HKLM\Soft At least Windows Server 2003
This polic
System
HKLM\SoftwAt least Windows Server 2012 Windows 8 or This polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows CHKLM\Soft At least Windows Server 2012 Windows 8 or Prevent sy

Windows CHKLM\SoftwAt least Windows Server 2012 Windows 8 or Prevent th
Windows CHKLM\Soft At least Windows Server 2012 R2 Windows 8
Pr
Windows CHKLM\Soft At least Windows Server 2012 Windows 8 or Prevent th
Windows CHKLM\Soft At least Windows Server 2012 Windows 8 or Prevent sy
Windows CHKLM\Soft At least Windows Server 2012 R2 Windows 8
Pre
System
System
System\In HKLM\Soft At least Windows Server 2008 R2 or WindowTurns off
System\In HKCU\Soft At least Windows Server 2008 R2 or WindowTurns off
Shared Fol HKCU\SoftwAt least Windows Server 2003 operating sys This polic
Shared Fol HKCU\SoftwAt least Windows Server 2003 operating sys This polic
This polic
Windows HKLM\Soft At least Windows Server 2008 R2 or WindowThis polic
System
This polic
System
Disables t
System
Limits the
System
Prevents W
Windows CHKCU\SoftwWindows Vista only
This polic
Windows CHKCU\SoftwWindows Server 2008 Windows 7 and Window
This polic
Windows CHKLM\Soft Windows Server 2008 Windows 7 and Window
This polic
Windows CHKCU\Soft Windows Server 2008 Windows 7 and Window
This polic
This polic
Windows CHKCU\Soft Windows Server 2008 Windows 7 and Window
This polic
This polic
Windows CHKLM\SoftwAt least Windows 8.1 or Windows RT 8.1
This polic
Windows CHKLM\Soft At least Windows 8.1 or Windows RT 8.1
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
Windows CHKLM\SOFTAt least Windows Vista Service Pack 1
This polic
This polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

This polic
This polic
Network\S HKLM\Soft At least Windows Server 2003 operating sys This polic
Network\S HKLM\Soft At least Windows Server 2003 operating sys This polic
Network\S HKLM\SoftwAt least Windows Server 2003 operating sys This polic
Specifies
Specifies
System\FileHKLM\SOFTAt least Windows Server 2012 Windows 8 or This polic
System\FileHKLM\SOFTW
At least Windows Server 2012 Windows 8 or This polic
System\Ac HKLM\SOFTAt least Windows Server 2012 Windows 8 or This polic
System\Ac HKLM\SOFTAt least Windows Server 2012 Windows 8 or This Group
Start MenuHKCU\Soft Windows Server 2008 Windows 7 and Window
If you ena
If you ena
Start MenuHKCU\Soft Windows Vista only
If you ena
Start MenuHKCU\Soft At least Windows Server 2008 R2 or Window
Start MenuHKCU\SoftwWindows Server 2008 R2 and Windows 7
If you ena
Start MenuHKCU\SoftwWindows Server 2008 Windows 7 and Window
If you ena
Start MenuHKCU\SoftwWindows Server 2008 and Windows Vista
If you ena
If you ena
If you ena
Start MenuHKCU\SoftwWindows Server 2008 Windows 7 and Window
If you ena
If you ena
This polic
Start MenuHKCU\SoftwAt least Windows 2000
Clear hist
Start MenuHKCU\SoftwWindows Server 2008 Windows Server 2003 This polic
Start MenuHKCU\SoftwWindows Server 2008 Windows Server 2003 Displays S
Start MenuHKCU\SoftwWindows Server 2008 Windows Server 2003 Disables p
Start MenuHKCU\SoftwAt least Windows Server 2003 operating sys This setti
Start MenuHKCU\Soft At least Windows 2000
Lets users
Start MenuHKCU\SoftwWindows Server 2003 and Windows XP only Hides popStart MenuHKCU\Soft At least Windows 2000
This polic
Start MenuHKCU\SoftwAt least Windows Server 2012 Windows 8 or If you ena
Start MenuHKLM\SoftwAt least Windows Server 2012 R2 Windows 8This polic
Start MenuHKCU\SoftwAt least Windows Server 2012 R2 Windows 8This polic
Start MenuHKLM\SoftwAt least Windows Server 2012 R2 Windows 8Specifies
Start MenuHKCU\SoftwAt least Windows Server 2012 R2 Windows 8Specifies
This polic
Removes it
Start MenuHKCU\SoftwWindows Server 2008 Windows Server 2003 Prevents u
Start MenuHKCU\SoftwWindows Server 2003 and Windows XP only This polic
Start MenuHKCU\Soft Windows Server 2008 Windows Server 2003 If you ena
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Start MenuHKCU\Soft Windows Server 2008 Windows Server 2003 This polic
Start MenuHKCU\SoftwWindows Server 2008 Windows Server 2003 This polic
Start MenuHKCU\Soft At least Windows Server 2003 operating sys This polic
Start MenuHKCU\SoftwWindows Server 2008 Windows Server 2003 If you ena
Prevents t
Start MenuHKCU\Soft Windows Server 2008 Windows Server 2003 Removes th
This polic
This polic
Allows you
This polic
This polic
Start MenuHKCU\Soft Windows XP Professional Service Pack 1 or This polic
Start MenuHKCU\Soft Windows Server 2008 Windows Server 2003 Hides all
Start MenuHKCU\Soft Windows Server 2008 Windows Server 2003 This setti
Start MenuHKCU\SoftwAt least Windows Server 2003 operating sys Prevents t
This polic
Start MenuHKCU\Soft Windows Server 2003 and Windows XP only This polic
This polic
Start MenuHKCU\Soft At least Windows Server 2003 operating sys If you ena
This polic
Start MenuHKCU\Soft Windows Server 2008 R2 and Windows 7
If you ena
This polic
This polic
This polic
Start MenuHKCU\SoftwAt least Windows Server 2012 Windows 8 or If you ena
Start MenuHKCU\SoftwWindows Server 2008 R2 and Windows 7
Set the de
Start MenuHKCU\SoftwAt least Windows Server 2012 Windows 8 or This polic
Start MenuHKCU\Soft At least Windows Server 2012 R2 Windows 8This polic
System\Sy HKLM\Soft At least Windows Server 2008 R2 or WindowAllows you
System\Sy HKLM\Soft At least Windows Server 2008 R2 or WindowAllows you
Windows CHKCU\softwWindows Server 2008 Windows 7 and Window
Turns off
Windows CHKLM\softwWindows Server 2008 Windows 7 and Window
Turns off
Prevents I
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

Prevents I
Prevents t
Prevents t
Prevents t
Prevents t
Windows CHKCU\softwAt least Windows Vista
Adjusts pa
Windows CHKLM\softwAt least Windows Vista
Adjusts pa
Windows CHKCU\softwAt least Windows Vista
Includes r
Windows CHKLM\softwAt least Windows Vista
Includes r
Windows CHKCU\softwWindows Vista only
Tu
Windows CHKLM\softwWindows Vista only
Tu
Windows CHKCU\softwAt least Windows Server 2008 R2 or WindowPrevents t
Windows CHKLM\softwAt least Windows Server 2008 R2 or WindowPrevents t
Windows CHKCU\SOFTW
Windows Vista only
Prevents s
Windows CHKLM\SOFTW
Windows Vista only
Prevents s
Windows CHKCU\SOFTW
Prevents s
Windows CHKLM\SOFTW
Prevents s
Windows CHKCU\SOFTW
Prevents pr
Windows CHKLM\SOFTW
Prevents pr
Prevents th
Prevents th
Disables v
Disables v
Removes th
Removes th
Prevents t
Prevents t
Prevents p
Prevents p
Turns off
Turns off
Makes pen
Makes pen
Windows CHKCU\SOFTW
Windows Server 2008 Windows 7 and Window
Makes pen f
Windows CHKLM\SOFTW
Windows Server 2008 Windows 7 and Window
Makes pen f
Start MenuHKCU\Soft At least Windows Vista
This polic
This polic
This polic
Start MenuHKCU\SoftwAt least Windows Server 2008 R2 or WindowThis polic
Start MenuHKCU\SoftwAt least Windows Vista
This polic
This polic
This polic
This policy
This polic
This polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

This polic
Start MenuHKCU\Soft At least Windows Server 2008 R2 or WindowThis polic
Start MenuHKCU\Soft At least Windows Server 2012 Windows 8 or This polic
Start MenuHKCU\SoftwAt least Windows Server 2012 R2 Windows 8This polic
Windows CHKCU\SoftwWindows Server 2003 Windows XP and WindLimits new
Windows CHKLM\SoftwWindows Server 2003 Windows XP and WindLimits new
Windows CHKCU\Soft Windows Server 2003 Windows XP and WindThis setti
Windows CHKLM\Soft Windows Server 2003 Windows XP and WindThis setti
Windows CHKCU\Soft Windows Server 2003 Windows XP and WindPrevents u
Windows CHKLM\Soft Windows Server 2003 Windows XP and WindPrevents u
Windows CHKCU\SoftwWindows Server 2003 Windows XP and WindPrevents u
Windows CHKLM\SoftwWindows Server 2003 Windows XP and WindPrevents u
Network\TCHKLM\SoftwAt least Windows Server 2008 R2 or WindowThis polic
Network\TCHKLM\Soft At least Windows Server 2008 R2 or WindowThis polic
Network\TCHKLM\Syst At least Windows Vista Service Pack 1
This polic
Network\TCHKLM\Syst At least Windows Server 2008 R2 or WindowThis polic
Windows CHKCU\SOFTAt least Windows Server 2008
This polic
This polic
This polic
This polic
Windows CHKLM\SOFTAt least Windows Server 2008
This polic
Windows CHKLM\SOFTWindows Server 2008 R2 only
This polic
Windows CHKLM\SOFTAt least Windows Server 2008
This polic
Windows CHKLM\SOFTW
This polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
CHKCU\SOFTW
This polic
CHKCU\SOFTAt least Windows Server 2008
This polic
CHKLM\SOFTAt least Windows Server 2008
This polic
CHKLM\SOFTAt least Windows Server 2008 R2
This polic
This polic
This polic
Fair Share
This polic
This polic
CHKLM\SOFTAt least Windows Server 2012 R2 with RDSHThis polic
CHKCU\SOFTAt least Windows Server 2003 operating sys Controls w
CHKLM\SOFTAt least Windows Server 2003 operating sys Controls w
CHKLM\SOFTAt least Windows Server 2003 operating sys This polic
This polic
This polic
This polic
CHKCU\SOFTAt least Windows Server 2003 operating sys Specifies
CHKCU\SOFTAt least Windows Server 2003 operating sys If you ena
CHKCU\SOFTAt least Windows Server 2003 operating sys Specifies
CHKLM\SOFTAt least Windows Server 2003 operating sys Specifies
CHKLM\SOFTWindows Server 2008 Windows Server 2003
Th
CHKLM\SOFTAt least Windows Server 2008 R2 or WindowThis polic
CHKLM\SOFTAt least Windows Server 2003 operating sys Specifies
CHKLM\SOFTW
At least Windows XP and Windows Server 20This polic
This polic
CHKLM\SOFTAt least Windows Server 2003 with Service This polic
CHKLM\SOFTW
At least Windows Server 2003 with Service This polic
Specifies
CHKLM\SoftwAt least Windows 2000 Terminal Services
This polic
CHKLM\SoftwAt least Windows 2000 Terminal Services
Specifies
CHKLM\SOFTAt least Windows 8 Enterprise or Windows This polic
CHKCU\SOFTWindows Server 2008 R2 Windows Server 2 If you ena
CHKLM\SOFTWindows Server 2008 R2 Windows Server 2 If you ena
This polic
CHKCU\SOFTAt least Windows Server 2003
Configures
Configures
This polic
Specifies
This polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows

This polic
CHKLM\SoftwAt least Windows Server 2003
This polic
CHKLM\SoftwAt least Windows Server 2003
This polic
CHKLM\SOFTW
At least Windows Server 2008 or Windows 7 This polic
CHKCU\SOFTW
At least Windows Server 2008 or Windows 7 This polic
This polic
CHKLM\SOFTW
Windows Server 2003 with Service Pack 1 o This polic
This polic
Specifies
CHKLM\SOFTAt least Windows Server 2003 Enterprise EdiThis polic
CHKCU\SOFTAt least Windows Server 2003 operating sys This polic
This polic
This polic
CHKCU\SOFTAt least Windows Vista with Service Pack 1 This polic
CHKLM\SOFTAt least Windows Vista with Service Pack 1 This polic
CHKLM\SOFTAt least Windows Server 2012 Windows 8 or This polic
CHKLM\SOFTAt least Windows Server 2012 Windows 8 or This polic
CHKLM\SOFTAt least Windows Server 2012 R2 or Window This p
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows CHKLM\SOFTWindows 7 or Windows Server 2008 R2 (and This polic

Windows CHKLM\SOFTAt least Windows 7 with Service Pack 1 or This polic
Windows CHKLM\SOFTWindows 7 or Windows Server 2008 R2 (and This polic
Windows CHKLM\Soft Windows 7 or Windows Server 2008 R2 (and This polic
Windows CHKLM\SOFTAt least Windows Server 2012 Windows 8 or
Thi
Windows CHKLM\SOFTAt least Windows 8 or Windows RT
This polic
This polic
This polic
Windows CHKCU\Soft Windows Vista Service Pack 1
Turns off
Turn off T
Turn off T
Windows CHKCU\SOFTWindows Server 2008 R2 and Windows 7
Turn off P
Windows CHKLM\SOFTWindows Server 2008 R2 and Windows 7
Turn off P
System\TruHKLM\SoftwAt least Windows Vista
This polic
System\TruHKLM\Soft At least Windows Server 2012 Windows 8 or This polic
System\TruHKLM\SOFTAt least Windows Vista
This polic
System\TruHKLM\Soft At least Windows Vista
This polic
System\TruHKLM\Soft At least Windows Vista
This polic
System\TruHKLM\SoftwAt least Windows Server 2012 Windows 8 or This polic
System\UseHKLM\Soft At least Windows Server 2003 operating sys This polic
System\UseHKLM\Soft At least Windows Server 2003 operating sy This polic
System\UseHKCU\Soft Windows Server 2003 Windows XP and WindThis polic
System\UseHKLM\Soft At least Windows 2000
This polic
This polic
This polic
System\UseHKCU\SoftwAt least Windows 2000
This polic
System\UseHKLM\Soft At least Windows Server 2003 operating sys This polic
System\UseHKCU\Soft At least Windows 2000
This polic
System\UseHKLM\SoftwAt least Windows Server 2003 operating sys This setti
System\UseHKLM\Soft Windows Server 2003 Windows XP and WindThis polic
System\UseHKLM\SoftwAt least Windows 2000
This polic
System\UseHKLM\Soft Windows Server 2003 Windows XP and WindThis polic
System\UseHKLM\SoftwAt least Windows Server 2003 operating sys This polic
System\UseHKLM\SoftwAt least Windows 2000
This polic
This polic
System\UseHKLM\SoftwAt least Windows Vista
This polic
System\UseHKCU\Soft At least Windows Vista
This polic
System\UseHKLM\Soft At least Windows Vista
This polic
System\UseHKLM\Soft At least Windows Vista
This polic
System\UseHKLM\SoftwAt least Windows Vista
This polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
System\UseHKLM\Soft At least Windows Server 2008 R2 or WindowThis

System\UseHKLM\Soft At least Windows Server 2012 Windows 8 or This
System\UseHKLM\SoftwAt least Windows Server 2012 R2 Windows 8This
Windows CHKLM\SoftwWindows Server 2008 and Windows Vista
This
Windows CHKLM\SOFTWindows Server 2008 and Windows Vista
This
This
This
Windows CHKLM\SOFTAt least Windows Server 2012 Windows 8 or
This
Windows CHKLM\Soft At least Windows Server 2008 R2 or WindowThis
Windows CHKLM\Soft At least Windows Server 2012 or Windows 8 This
Windows CHKLM\SoftwAt least Windows Server 2012 Windows 8 or This
Windows CHKLM\SoftwAt least Windows Server 2012 or Windows 8 This
Windows CHKLM\SoftwAt least Windows Server 2008 R2 or WindowThis
Windows CHKLM\SOFTAt least Windows Server 2008 R2 or WindowThis
Windows CHKLM\SOFTAt least Windows Server 2012 or Windows 8 This
Windows CHKLM\SOFTWindows Server 2008 and Windows Vista
This
This
Windows CHKLM\SOFTAt least Windows Server 2012 Windows 8 or This
Windows CHKLM\SOFTAt least Windows Server 2012 Windows 8 or This
Windows CHKLM\SoftwAt least Windows Server 2012 or Windows 8 This
Windows CHKLM\Syst At least Windows Server 2008 R2 or WindowThis
Windows CHKLM\Syst At least Windows Server 2008 R2 or WindowThis
polic
setti
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
System\Wi HKLM\Soft At least Windows Server

System\Wi HKLM\SoftwAt least Windows Server
Network\WHKLM\Soft At least Windows Server
Windows CHKCU\Soft Windows Vista only
Windows CHKLM\Soft Windows Vista only
Windows CHKLM\SoftwAt least Windows Server
Windows CHKCU\SoftwAt least Windows Server
Windows CHKLM\Soft At least Windows Server
Network\WHKCU\Soft At least Windows Vista
Network\WHKLM\Soft At least Windows Vista
Network\WHKLM\Soft At least Windows Vista
2003
2003
2003
2003
2012
2012
2012
2012
2008
2008
2008
2008
2008
2008
2008
2012
2012
2012
2012
2012
2012
2012
2012
2012
2012
2012
2012
2012
2012
2012
2012
2012
2012
2012
operating sys This polic

Windows 8 or This polic
This polic
This polic
Windows Ca
Windows Ca
R2 or WindowBy default
R2 or WindowBy default
This polic
This polic
This polic
This polic
This polic
This policy
This policy
This polic
This polic
This polic
This polic
This polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
CHKLM\SoftwAt
CHKLM\SoftwAt
CHKLM\SoftwAt
CHKLM\SoftwAt
CHKLM\SoftwAt
CHKLM\SoftwAt
CHKLM\SoftwAt
CHKLM\Soft At
CHKLM\Soft At
CHKLM\SoftwAt
CHKLM\SoftwAt
CHKLM\SoftwAt
CHKLM\SoftwAt
CHKLM\SoftwAt
CHKLM\SoftwAt
CHKLM\SoftwAt
CHKLM\Soft At
CHKLM\Soft At
CHKLM\Soft At
CHKLM\SoftwAt
CHKLM\SoftwAt
CHKLM\Soft At
CHKLM\SoftwAt
CHKLM\Soft At
CHKLM\Soft At
CHKLM\Soft At
CHKLM\Soft At
CHKLM\Soft At
CHKLM\Soft At
CHKLM\Soft At
CHKLM\Soft At
CHKLM\Soft At
CHKLM\Soft At
CHKLM\Soft At
CHKLM\Soft At
CHKLM\SoftwAt
CHKLM\Soft At
CHKLM\Soft At
CHKLM\Soft At
CHKLM\SoftwAt
CHKLM\Soft At
CHKLM\Soft At
CHKLM\Soft At
CHKLM\Soft At
CHKLM\Soft At
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
least
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Server
Server
Server
Server
Server
Server
Vista
Server
Server
Server
Server
Server
Server
Server
Server
Server
Server
Server
Server
Server
Server
Server
Server
Server
Server
Server
Server
Server
Server
Server
Vista
Server
Server
Server
Server
Server
Server
Server
Server
Server
Server
Server
Server
Server
Server
2012
2012
2012
2012
2012
2012
Windows
Windows
Windows
Windows
Windows
Windows
8
8
8
8
8
8
2012
2012
2012
2012
2012
2012
2012
2012
2012
2012
2012
2012
2012
2012
2012
2012
2012
2012
2012
2012
2012
2012
2012
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
8
2012
2012
2012
2012
2012
2012
2012
2012
2012
2012
2012
2012
2012
2012
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
8
8
8
8
8
8
8
8
8
8
8
8
8
8
or This
or This
or This
or This
or This
or This
This
or This
or This
or This
or This
or This
or This
or This
or This
or This
or This
or This
or This
or This
or This
or This
or This
or This
or This
or This
or This
or This
or This
or This
This
or This
or This
or This
or This
or This
or This
or This
or This
or This
or This
or This
or This
or This
or This
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
policy
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
CHKLM\Soft At least Windows Server 2012 Windows 8 or This polic

CHKLM\SoftwAt least Windows Server 2012 Windows 8 or This polic
HKLM\Soft At least Windows Server 2012 Windows 8 or This policy
This polic
Hide the B
Removes th
Removes th
CHKCU\Soft At least Windows Server 2003 operating sys Configures
CHKCU\SoftwWindows Server 2008 Windows Server 2003 This setti
CHKCU\SoftwAt least Windows Server 2003 operating sys Allows you
This setti
This polic
CHKCU\Soft Windows Server 2008 Windows Server 2003 "This poli
CHKCU\Soft Windows Server 2003 Windows XP and WindThis polic
CHKCU\Soft Windows Server 2003 Windows XP and WindDisables t
This polic
This polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
CHKCU\Soft Windows Server 2003 Windows XP and WindRemoves al

Removes th
This polic
Removes th
Removes t
CHKCU\Soft Windows XP Professional only
This polic
Prevents u
CHKCU\SoftwAt least Windows Server 2003 operating sys When a fil
CHKCU\SoftwWindows Server 2003 Windows XP and WindPrevents u
CHKCU\SoftwAt least Windows Server 2003 operating sys Removes th
CHKCU\SoftwWindows Server 2003 Windows XP and WindThis polic
Removes sh
Prevents u
CHKCU\Soft At least Windows Server 2003
Turn off W
CHKCU\SoftwWindows Server 2003 Windows XP and WindPrompts us
CHKCU\SoftwWindows Server 2003 Windows XP and WindLimits the
CHKCU\SoftwAt least Windows XP Professional with SP2 This polic
CHKLM\SoftwAt least Windows XP Professional with SP2 This polic
CHKCU\SoftwAt least Windows Server 2008 R2 or WindowIf you ena
CHKCU\Soft At least Windows Server 2008 R2 or WindowThis polic
CHKCU\SoftwAt least Windows Server 2008 R2 or WindowThis polic
CHKLM\Soft At least Windows Server 2008 R2 or WindowThis polic
CHKCU\Soft At least Windows Server 2008 R2 or WindowThis polic
CHKCU\Soft At least Windows Server 2008 R2 or WindowDisables s
Changes th
Changes th
CHKLM\SoftwAt least Windows Server 2008 R2 or WindowThis polic
Co
Co
HKCU\SoftwAt least Windows Server 2008 R2 or WindowThis polic
Co
Co
Co
Co
Co
Co
Co
Co
CHKLM\Soft At least Windows Server 2008 R2 or WindowThis polic
Co
Co
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows Co
Windows Co
Windows Co
Windows Co
Windows Co
Windows Co
Windows Co
Windows Co
Windows Co
Windows Co
Windows Co
Windows Co
Windows Co
Windows Co
Windows Co
Windows Co
Windows CHKLM\SoftwAt least Windows Server 2008 R2 or WindowThis polic
Windows CHKCU\SoftwAt least Windows Server 2008 R2 or WindowThis polic
Windows Co
Windows Co
Windows Co
Windows Co
Windows Co
Windows Co
Windows Co
Windows Co
Windows CHKLM\Soft At least Windows Server 2012 Windows 8 or Shows or h
System\WinHKLM\SoftwWindows Server 2003 Windows XP and WindThis polic
Network\N HKLM\SOFTAt least Windows XP Professional with SP2 Allows uns
Network\N HKLM\SOFTW
At least Windows XP Professional with SP2 Allows you
Network\N HKLM\SOFTAt least Windows XP Professional with SP2 Allows adm
Network\N HKLM\SOFTAt least Windows XP Professional with SP2 Turns on W
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Network\N HKLM\SOFTAt least Windows XP Professional with SP2 Specifies

Network\N HKLM\SOFTAt least Windows XP Professional with SP2 Allows inb
Network\N HKLM\SOFTAt least Windows XP Professional with SP2 Defines th
Network\N HKLM\SOFTAt least Windows XP Professional with SP2 Allows Win
Network\N HKLM\SOFTW
At least Windows XP Professional with SP2 Prevents W
Network\N HKLM\SOFTAt least Windows XP Professional with SP2 Allows you
Network\N HKLM\SOFTAt least Windows XP Professional with SP2 Allows adm
Network\N HKLM\SOFTAt least Windows XP Professional with SP2 Allows rem
Network\N HKLM\SOFTAt least Windows XP Professional with SP2 Allows thi
Network\N HKLM\SOFTAt least Windows XP Professional with SP2 Prevents t
Network\N HKLM\SOFTAt least Windows XP Professional with SP2 Allows thi
Network\NeHKLM\SOFTW
Network\NeHKLM\SOFTAt least Windows XP Professional with SP2 Allows adm
At least Windows XP Professional with SP2 Turns on W
Network\NeHKLM\SOFTAt least Windows XP Professional with SP2 Specifies
At least Windows XP Professional with SP2 Allows inb
Network\NeHKLM\SOFTAt least Windows XP Professional with SP2 Defines th
Network\NeHKLM\SOFTAt least Windows XP Professional with SP2 Allows Win
At least Windows XP Professional with SP2 Prevents W
Network\NeHKLM\SOFTAt least Windows XP Professional with SP2 Allows adm
Network\NeHKLM\SOFTAt least Windows XP Professional with SP2 Allows rem
Network\NeHKLM\SOFTAt least Windows XP Professional with SP2 Allows thi
Network\NeHKLM\SOFTAt least Windows XP Professional with SP2 Prevents t
Network\NeHKLM\SOFTAt least Windows XP Professional with SP2 Allows thi
Denies or
Denies or
Windows Ma
Windows Ma
Prevents W
Windows CHKLM\Soft Windows Media Player 9 Series and later.
This polic
This polic
This polic
Windows CHKCU\Soft Windows Media Player 9 Series and later.
This polic
Windows CHKLM\Soft Windows Media Player 11 for Windows XP or This polic
This polic
This polic
Windows CHKCU\SoftwWindows Server 2003 Windows XP and WindThis polic
This polic
This polic
Windows CHKCU\Soft Windows Media Player for Windows XP and laThis polic
Windows CHKCU\Soft Windows Server 2003 Windows XP and WindPrevents t
This polic
This polic
Windows CHKCU\Soft Windows Media Player for Windows XP and laThis polic
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
System
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
Windows
CHKCU\Soft Windows Media Player for Windows XP and laThis polic

CHKCU\Soft Windows Media Player 9 Series and later.
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
This polic
HKCU\Soft Windows XP Professional only
This setti
CHKLM\Soft Windows 7 Windows Server 2008 R2 WindowThis polic
CHKCU\Soft Windows 7 Windows Server 2008 R2 WindowThis polic
CHKCU\Soft Windows 7 Windows Server 2008 R2 WindowThis polic
CHKLM\Soft Windows 7 Windows Server 2008 R2 WindowThis polic
CHKCU\Soft Windows XP Professional Service Pack 1 or This setti
CHKLM\Soft Windows XP Professional Service Pack 1 or Specifies
CHKLM\Soft At least Windows XP Professional Service P Specifies
CHKLM\Soft At least Windows XP Professional Service P Specifies
CHKLM\Soft Windows XP Professional Service Pack 1 or This polic
CHKLM\Soft Windows XP Professional Service Pack 1 or Specifies
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

Specifies
0
This polic
0
Specifies
0
Windows CHKLM\Soft Windows XP Professional Service Pack 1 or Specifies
0
Windows CHKLM\Soft At least Windows Server 2012 Windows 8 or If you ena
0
Windows CHKLM\Soft Windows 7 Windows Server 2008 R2 Window
Sp
0
Windows CHKLM\Soft Windows 7 Windows Server 2008 R2 WindowSpecifies
0
Windows CHKLM\Soft Windows 7 Windows Server 2008 R2 WindowSpecifies
0
Windows CHKLM\Soft At least Windows XP Professional Service P Specifies
0
Windows CHKLM\Soft At least Windows Server 2003 operating sy This polic
0
Windows CHKLM\Soft At least Windows Server 2012 R2 Windows 8Even when
0
This polic
0
This polic
0
System\Sh HKLM\Soft At least Windows Server 2012 Windows 8 or This polic
0
This polic
0
This polic
0
This polic
0
This polic
0
This polic
0
This polic
0
System
Specifies
0
Windows CHKLM\Soft At least Windows Server 2012 R2 Windows 8This polic
0
System\Sh HKLM\Soft At least Windows Vista
This polic
0
Windows CHKCU\Soft At least Windows Server 2012 Windows 8 or Denies or
0
Windows CHKLM\Soft At least Windows Server 2012 Windows 8 or Denies or
0
Windows CHKLM\Soft At least Windows Server 2012 R2 Windows 8Enables or
0
Windows CHKLM\Soft At least Windows Server 2012 Windows 8 or Enables or
0
Windows CHKCU\Soft At least Windows Server 2012 Windows 8 or Enables or
0
Windows CHKLM\Soft At least Windows Server 2012 Windows 8 or Enables or
0
Network\WHKLM\SoftwAt least Windows Server 2012 Windows 8 or This polic
0
Set up the
0
This polic
0
Windows CHKCU\SoftwAt least Windows 8.1 or Windows RT 8.1
This polic
0
Windows CHKLM\SoftwAt least Windows Server 2008 R2 or WindowThis setti
0
Start MenuHKCU\SOFTW
At least Windows Server 2012 Windows 8 or
T
0
T
0
Start MenuHKCU\SOFTAt least Windows Server 2012 Windows 8 or
Thi
0
T
0
Start MenuHKCU\SOFTAt least Windows Server 2012 R2 Windows 8
Th
0
Thi
0
This policy setting specifies th
This policy setting blocks voice
Network\WHKLM\Soft At least Windows Server 2012 Windows 8 or This policy setting configures the co
Network\WHKLM\Soft At least Windows Server 2012 Windows 8 or This policy setting configures the co
w in Update 1
cy setting specifies the number of minutes after midnight (local time) that Quiet Hours is to end each day.
I
cy setting blocks voice and video calls during Quiet Hours.
If you enable this policy setting voice and video
tting configures the cost of 3G connections on the local machine.If this policy setting is enabled a drop-down list
tting configures the cost of 4G connections on the local machine.
If this policy setting is enabled a drop-down
is to end each day.

If you enable this policy setting the specified time will be used and users will not be able
setting voice and video calls will be blocked during the designated Quiet Hours time window each day and user
enabled a drop-down list box presenting possible cost values will be active. Selecting one of the following valu
g is enabled a drop-down list box presenting possible cost values will be active. Selecting one of the following v
and users will not be able to customize any Quiet Hours settings.
If you disable this policy setting a default
indow each day and users will not be able to customize any other Quiet Hours settings.
If you disable this p
one of the following values from the list will set the cost of all 3G connections on the local machine:- Unrestricte
ng one of the following values from the list will set the cost of all 4G connections on the local machine:- Unrestri
s policy setting a default value will be used and users will not be able to change it or any other Quiet Hours setti
If you disable this policy setting voice and video calls will be allowed during Quiet Hours and users will not
cal machine:- Unrestricted: Use of this connection is unlimited and not restricted by usage charges and capacity
local machine:- Unrestricted: Use of this connection is unlimited and not restricted by usage charges and capac
y other Quiet Hours setting.

If you do not configure this policy setting a default value will be used which ad
Hours and users will not be able to customize this or any other Quiet Hours settings.
If you do not configure
ge charges and capacity constraints. - Fixed: Use of this connection is not restricted by usage charges and capa
usage charges and capacity constraints. - Fixed: Use of this connection is not restricted by usage charges and ca
ue will be used which administrators and users will be able to modify.

If you do not configure this policy setting voice and video calls will be allowed during Quiet Hours by default.
usage charges and capacity constraints up to a certain data limit. - Variable: This connection is costed on a per
by usage charges and capacity constraints up to a certain data limit. - Variable: This connection is costed on a p
g Quiet Hours by default. Adminstrators and users will be able to modify this setting.
ection is costed on a per byte basis.If this policy setting is disabled or is not configured the cost of 3G connectio
onnection is costed on a per byte basis.If this policy setting is disabled or is not configured the cost of 4G connec
the cost of 3G connections is Fixed by default.

ed the cost of 4G connections is Fixed by default.
Status
Policy Path
Computer Configuration\Windows Settings\Account Policies\Password Policy
Computer Configuration\Windows Settings\Account Policies\Account Lockout Policy
Computer Configuration\Windows Settings\Local Policies\Kerberos Policy
Computer Configuration\Windows Settings\Local Policies\Audit Policy
Computer Configuration\Windows Settings\Local Policies\User Rights Assignment

Computer Configuration\Windows Settings\Local Policies\Security Options


Computer Configuration\Windows Settings\Security Settings\Event Log
Computer Configuration\Windows Settings\Security Settings\Restricted Groups
Computer Configuration\Windows Settings\Security Settings\System Services

Computer Configuration\Windows Settings\Security Settings\Registry
Computer Configuration\Windows Settings\Security Settings\File System
Policy Name
Enforce password history
Maximum password age
Minimum password age
Minimum password length
Password must meet complexity requirement
Store passwords using reversible encryption for all users in the domain
Account lockout duration
Account lockout threshold
Reset lockout counter after
Enforce user logon restrictions
Maximum lifetime for service ticket
Maximum lifetime for user ticket
Maximum lifetime for user ticket renewal
Maximum tolerance for computer clock synchronization
Audit account logon events
Audit account management
Audit directory service access
Audit logon events
Audit object access
Audit policy change
Audit privilege use
Audit process tracking
Audit system events
Access this computer from the network
Access Credential Manager as a trusted caller
Act as part of the operating system
Add workstations to a domain
Adjust memory quotas for a process
Allow log on locally
Allow log on through Remote Desktop Services
Backup files and directories
Bypass traverse checking
Change the system time
Change the time zone
Create a pagefile
Create a token object
Create global objects
Create permanent shared objects
Create Symbolic Links
Debug programs
Deny access to this computer from the network
Deny log on as a batch job
Deny log on as a service
Deny log on locally

Deny log on through Remote Desktop Services
Enable computer and user accounts to be trusted for delegation
Force shutdown from a remote system
Generate security audits
Impersonate a client after authentication
Increase a process working set
Increase scheduling priority
Load and unload device drivers
Lock pages in memory
Log on as a batch job
Log on as a service
Log on locally
Manage auditing and security log
Modify an object label
Modify firmware environment values
Perform volume maintenance tasks
Profile single process
Profile system performance
Remove computer from docking station
Replace a process level token
Restore files and directories
Shut down the system
Synchronize directory service data
Take ownership of files or other objects
Accounts: Administrator account status
Accounts: Block Microsoft accounts
Accounts: Guest account status
Accounts: Limit local account use of blank passwords to console logon only
Accounts: Rename administrator account
Accounts: Rename guest account
Audit: Audit the accesss of global system objects
Audit: Audit the use of Backup and Restore privilege
Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy categ
Audit: Shut down system immediately if unable to log security audits
DCOM: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) syntax
DCOM: Machine Launch Restrictions in Security Descriptor Definition Language (SDDL) syntax
Devices: Allow undock without having to log on
Devices: Allowed to format and eject removable media
Devices: Prevent users from installing printer drivers
Devices: Restrict CD-ROM access to locally logged-on user only
Devices: Restrict floppy access to locally logged-on user only
Devices: Unsigned driver installation behavior
Domain controller: Allow server operators to schedule tasks
Domain controller: LDAP server signing requirements
Domain controller: Refuse machine account password changes

Domain member: Digitally encrypt or sign secure channel data (always)
Domain member: Digitally encrypt secure channel data (when possible)
Domain member: Digitally sign secure channel data (when possible)
Domain member: Disable machine account password changes
Domain member: Maximum machine account password age
Domain member: Require strong (Windows 2000 or later) session key
Interactive logon: Do not display last user name
Interactive Logon: Display user information when session is locked
Interactive logon: Do not require CTRL+ALT+DEL
Interactive logon: Machine account lockout threshold
Interactive logon: Machine inactivity limit
Interactive logon: Message text for users attempting to logon
Interactive logon: Message title for users attempting to logon
Interactive logon: Number of previous logons to cache (in case domain controller is not available)
Interactive logon: Prompt user to change password before expiration
Interactive logon: Require Domain Controller authentication to unlock workstation
Interactive logon: Require smart card
Interactive logon: Smart card removal behavior
Microsoft network client: Digitally sign communications (always)
Microsoft network client: Digitally sign communications (if server agrees)
Microsoft network client: Send unencrypted password to third-party SMB servers
Microsoft network server: Amount of idle time required before suspending session
Microsoft network server: Attempt S4U2Self to obtain claim information
Microsoft network server: Digitally sign communications (always)
Microsoft network server: Digitally sign communications (if client agrees)
Microsoft network server: Disconnect clients when logon hours expire
Microsoft network server: Server SPN target name validation level
Network access: Allow anonymous SID/Name translation
Network access: Do not allow anonymous enumeration of SAM accounts
Network access: Do not allow anonymous enumeration of SAM accounts and shares
Network access: Do not allow storage of passwords and credentials for network authentication
Network access: Let Everyone permissions apply to anonymous users
Network access: Named Pipes that can be accessed anonymously
Network access: Remotely accessible registry paths
Network access: Remotely accessible registry paths and sub-paths
Network access: Restrict anonymous access to Named Pipes and Shares
Network access: Shares that can be accessed anonymously
Network access: Sharing and security model for local accounts
Network security: Do not store LAN Manager hash value on next password change
Network security: Force logoff when logon hours expire
Network security: LAN Manager authentication level
Network security: LDAP client signing requirements
Network security: Minimum session security for NTLM SSP based (including secure RPC) clients
Network security: Minimum session security for NTLM SSP based (including secure RPC) servers
Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers

Network security: Restrict NTLM: Incoming NTLM traffic
Network security: Restrict NTLM: Audit Incoming NTLM Traffic
Network security: Restrict NTLM: NTLM authentication in this domain
Network security: Restrict NTLM: Audit NTLM authentication in this domain
Network security: Restrict NTLM: Add remote server exceptions for NTLM authentication
Network security: Restrict NTLM: Add server exceptions in this domain
Network security: Allow LocalSystem NULL session fallback
Network security: Allow Local System to use computer identity for NTLM
Network security: Allow PKU2U authentication requests to this computer to use online identities.
Network security: Configure encryption types allowed for Kerberos
Recovery console: Allow automatic administrative logon
Recovery console: Allow floppy copy and access to all drives and all folders
Shutdown: Allow system to be shut down without having to log on
Shutdown: Clear virtual memory pagefile
System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing
System cryptography: Force strong key protection for user keys stored on the computer
System objects: Default owner for objects created by members of the Administrators group
System objects: Require case insensitivity for non-Windows subsystems
System objects: Strengthen default permissions of internal system objects (e.g., Symbolic Links)
System settings: Optional subsystems
System settings: Use Certificate Rules on Windows Executables for Software Restriction Policies
User Account Control: Admin Approval Mode for the Built-in Administrator account
User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode
User Account Control: Behavior of the elevation prompt for standard users
User Account Control: Detect application installations and prompt for elevation
User Account Control: Only elevate executables that are signed and validated
User Account Control: Only elevate UIAccess applications that are installed in secure locations
User Account Control: Run all administrators in Admin Approval Mode
User Account Control: Switch to the secure desktop when prompting for elevation
User Account Control: Virtualize file and registry write failures to per-user locations
User Account Control: Allow UIAccess applications to prompt for elevation without using the secure
Maximum application log size
Maximum security log size
Maximum system log size
Prevent local guests group from accessing application log
Prevent local guests group from accessing security log
Prevent local guests group from accessing system log
Retain application log
Retain security log
Retain system log
Retention method for application log
Retention method for security log
Retention method for system log
Restricted Groups
System Services
Registry
File System
Supported On
At least Windows XP SP2, Windows Server 2003
At least Windows Vista, Windows Server 2008

Only Windows XP SP2
Windows XP SP2, Windows Server 2003
Windows 8, Windows Server 2012
Only Windows XP SP2, Windows Server 2003

At least Windows 7, Windows Server 2008 R2

Windows XP SP2, Windows Server 2003

Registry Settings
Password Policy security settings are not registry keys.
Account Lockout Policy security settings are not registry keys.
Kerberos Policy security settings are not registry keys.
Audit Policy security settings are not registry keys.
User Rights security settings are not registry keys

Not a registry key
Not a registry key
Not a registry key
MACHINE\System\CurrentControlSet\Control\Lsa\LimitBlankPasswordUse
Not a registry key
Not a registry key
MACHINE\System\CurrentControlSet\Control\Lsa\AuditBaseObjects
MACHINE\System\CurrentControlSet\Control\Lsa\FullPrivilegeAuditing
MACHINE\System\CurrentControlSet\Control\Lsa\SCENoApplyLegacyAuditPolicy
MACHINE\System\CurrentControlSet\Control\Lsa\CrashOnAuditFail
MACHINE\SOFTWARE\policies\Microsoft\windows
NT\DCOM\MachineAccessRestriction
MACHINE\SOFTWARE\policies\Microsoft\windows
NT\DCOM\MachineLaunchRestriction
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\UndockWitho
utLogon
MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\AllocateDASD
MACHINE\System\CurrentControlSet\Control\Print\Providers\LanMan Print
Services\Servers\AddPrinterDrivers
MACHINE\Software\Microsoft\Windows
NT\CurrentVersion\Winlogon\AllocateCDRoms
MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\AllocateFloppies
MACHINE\Software\Microsoft\Driver Signing\Policy
MACHINE\System\CurrentControlSet\Control\Lsa\SubmitControl
MACHINE\System\CurrentControlSet\Services\NTDS\Parameters\LDAPServerIntegrit
y
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RefusePassword
Change
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RequireSignOrS
eal
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\SealSecureChan
nel
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\SignSecureChan
nel
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\DisablePasswor
dChange
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\MaximumPassw
ordAge
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RequireStrongKe
y
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\DontDisplayL
Machine\Software\Microsoft\Windows\CurrentVersion\Policies\System,
value=DontDisplayLockedUserId
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableCAD
Not a registry key
Not a registry key
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\LegalNoticeT
ext
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\LegalNoticeC
aption
NT\CurrentVersion\Winlogon\CachedLogonsCount
NT\CurrentVersion\Winlogon\PasswordExpiryWarning
NT\CurrentVersion\Winlogon\ForceUnlockLogon
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\ScForceOptio
n
NT\CurrentVersion\Winlogon\ScRemoveOption
MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\Requi
reSecuritySignature
MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\Enabl
eSecuritySignature
MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\Enabl
ePlainTextPassword
MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\AutoDisco
nnect
Not a registry key
MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\RequireSe
curitySignature
MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\EnableSec
uritySignature
MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\EnableFor
cedLogOff
MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\SmbServer
NameHardeningLevel
Not a registry key
MACHINE\System\CurrentControlSet\Control\Lsa\RestrictAnonymousSAM
MACHINE\System\CurrentControlSet\Control\Lsa\RestrictAnonymous
MACHINE\System\CurrentControlSet\Control\Lsa\DisableDomainCreds
MACHINE\System\CurrentControlSet\Control\Lsa\EveryoneIncludesAnonymous
MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\NullSessio
nPipes
MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPath
s\Machine
MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPath
s\Machine
nShares
nShares
MACHINE\System\CurrentControlSet\Control\Lsa\ForceGuest
MACHINE\System\CurrentControlSet\Control\Lsa\NoLMHash
Not a registry key
MACHINE\System\CurrentControlSet\Control\Lsa\LmCompatibilityLevel
MACHINE\System\CurrentControlSet\Services\LDAP\LDAPClientIntegrity
MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\NTLMMinClientSec
MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\NTLMMinServerSec
MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\RestrictSendingNTLMTraffi
MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\RestrictReceivingNTLMTraff
MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\AuditReceivingNTLMTraffic
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RestrictNTLMInD
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\AuditNTLMInDom
MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\ClientAllowedNTLMServers
MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\DCAllowedNTLMS
MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\allownullsessionfallback
MACHINE\System\CurrentControlSet\Control\Lsa\UseMachineId
MACHINE\System\CurrentControlSet\Control\Lsa\pku2u\AllowOnlineID
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Par
ameters\SupportedEncryptionTypes
NT\CurrentVersion\Setup\RecoveryConsole\SecurityLevel
NT\CurrentVersion\Setup\RecoveryConsole\SetCommand
MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\ShutdownWit
houtLogon
MACHINE\System\CurrentControlSet\Control\Session Manager\Memory
Management\ClearPageFileAtShutdown
MACHINE\System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy
MACHINE\Software\Policies\Microsoft\Cryptography\ForceKeyProtection
MACHINE\System\CurrentControlSet\Control\Lsa\NoDefaultAdminOwner
MACHINE\System\CurrentControlSet\Control\Session
Manager\Kernel\ObCaseInsensitive
MACHINE\System\CurrentControlSet\Control\Session Manager\ProtectionMode
MACHINE\System\CurrentControlSet\Control\Session Manager\SubSystems\optional
MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\AuthenticodeEn
abled
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\FilterAdministratorTo
ken
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ConsentPromptBeha
viorAdmin
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ConsentPromptBeha
viorUser
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableInstallerDetec
tion
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ValidateAdminCode
Signatures
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableSecureUIAPa
ths
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\PromptOnSecureDe
sktop
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableVirtualization
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableUIADesktopT
oggle
Event Log security settings are not registry keys.
Restricted Groups policy settings are not registry keys.
System Services policy settings are not registry keys.

not a registry key
File System policy settings are not registry keys.
Help Text
Enforce password history
Maximum
password
age
This security
setting determines
the number of unique new passwords that have to be associated with a user account before an old password can be reused. T
Minimum
password
age
This policy
security
settingadministrators
determines thetoperiod
of time
(in days)
that a password
can be used
the system
requires the user to change it. You can set passwo
This
enables
enhance
security
by ensuring
that old passwords
arebefore
not reused
continually.
can
be any
value between
0 and 998 days.
Minimum
password
This
security
setting length
determines the period of time (in days) that a password must be used before the user can change it. You can set a value between 1 and 9
Default:
Password
meetbest
complexity
requirements
Note:
It is amust
security
practicethe
to least
have passwords
expire every
90 days,for
depending
on yourmay
environment.
This
way, an
attacker
has a limited
This
security
setting
determines
characters
that30a to
password
athe
user
account
contain.
can
a value
ofthat
between
1 andamount
14 neve
charo
The minimum
password
age must
be lessnumber
than theofMaximum
password
age, unless
maximum
password
ageYou
is set
to set
0, indicating
passwords
will
24
on
domain
controllers.
Store
passwords
using
reversiblewhether
encryption
This
determines
passwords must meet complexity requirements.
Default:
42. setting
Default:
0 on security
stand-alone
servers.
Configure
the minimum
password age to be more than 0 if you want Enforce password history to be effective. Without a minimum password age, users can cy
Account
lockout
duration
This
setting
the
operating
system
stores
a this
newsecurity
password.
Fordetermines
thispasswords
reason,whether
Enforce
password
history
is set
to 1passwords
by default. using reversible encryption.
If
policy
iscontrollers.
enabled,
must
meet
following
minimum
requirements:
Note:
7
on domain
By default,
member
computers
follow
thethe
configuration
of their domain
controllers.
Account
lockout
threshold
This
security
setting
determines
the
number
of
minutes
a
locked-out
account
remains
locked
out
before
automatically
becoming
unlocked.
The enabling
available
range
0
on
stand-alone
servers.
To maintain
the effectiveness
of applications
password
history,
do not allow
passwords
to be changed
immediately
afterfor
they
were
just changed
by also
the
Miu
This
policy
provides
support
for
that
use
protocols
that
require
knowledge
of the user's
password
authentication
purposes.
Storing
passwords
Default:
Not contain the user's account name or parts of the user's full name that exceed two consecutive
characters
Reset
account
lockout
counter
after
This
security
setting
determines
the
number
of
failed
logon
attempts
that
causes
a
user
account
to
be
locked
out.
A
locked-out
account
cannot
be
used
until
it i
Be
at
least
six
characters
in
length
If
account
lockout
threshold
is defined,
lockout
must
be
greater
than
or equal to the
resetremote
time. access or Internet Authentication Serv
Note:
By default,
member
computers
followthe
theaccount
configuration
ofduration
their domain
controllers.
1 an
This
on policy
domain
is controllers.
required
when
using
Challenge-Handshake
Authentication
Protocol
(CHAP)
authentication
through
Contain
characters
from
three
of the
following four categories:
Enforce
user
logon
restrictions
This
setting
determines
number of minutes
that must elapse
afterbeen
a failed
logon
attempt
before
the failed logon attempt
counter is reset screen
to 0 badsav
lo
0
on security
stand-alone
servers.
Failed
password
attempts
against
workstations
or member
that
have
locked
using
either
CTRL+ALT+DELETE
or password-protected
English
uppercase
characters
(Athe
through
Default:
None,
because
this
policy
settingZ)
only has
meaningservers
when an
Account
lockout
threshold
is specified.
Default:
Disabled.
Maximum
lifetime
for
service
ticket
English
lowercase
characters
(a
through
z)
This
setting
determines
the
Kerberos
V5must
KeyofDistribution
(KDC)
request
for a session ticket against the user rights pol
If
an security
account
lockout
threshold
iswhether
defined,
this
reset
time
be
lessdomain
thanCenter
orcontrollers.
equal
to thevalidates
Accountevery
lockout
duration.
Note:
By0.
default,
computers
follow
the
configuration
their
Default:
Base
10
digits
(0 member
through
9)
Maximum
lifetime
fordetermines
user ticket
This
security
setting
the
maximum
amount
of
time
(in
minutes)
that
a
granted
session
ticket
can
be
used
to access a particular service. The setting
Non-alphabetic
characters
(for
example,
!,
$,
#,
%)
Default:
Enabled.
Default:
None,
because this
policy
setting
only
has meaning
when an Account
lockout threshold is specified.
Complexity
requirements
are
enforced
when
passwords
are changed
or created.
Maximum
lifetime
for
user
ticket
renewal
This
security
settingandetermines
the maximum
amount
of timea(in
hours) that
ticketan
(TGT)
be used.
If a client
presents
expired session
ticket when
it requests
connection
toaauser's
server,ticket-granting
the server returns
errormay
message.
The client must request a new ses
Maximum
tolerance
for
computer
clock
synchronization
connection
expires
during
the
connection.
This
security
setting
determines
the
period
of
time
(in
days)
during
which
a
user's
ticket-granting
ticket
(TGT)
may
be
renewed.
Default: 10 hours.
Audit
account
logon events
This security
600
minutes
setting
determines
(10 hours).the maximum time difference (in minutes) that Kerberos V5 tolerates between the time on the client clock and the time on the
Default:
Default:
7
days.
Auditsecurity
accountsetting
management
This
determines
whether
audits
eachastime
computer
anFor
accounts
credentials.
To
prevent
Kerberos
V5 the
usesOS
time
stamps
partthis
of its
protocolvalidates
definition.
time stamps
to work properly, the clocks of the client and the do
Enabled
on"replay
domainattacks,"
controllers.
Audit
directory
service
access
difference
between
a
client
clock
and
the
domain
controller
clock
is
less
than
the
maximum
time
difference
that isofspecified
in this policy, any
timeinclude:
stamp that is
Disabled
on stand-alone
servers.whether to audit each event of account management on a computer. Examples
This
security
setting
determines
account management
events
Account logon events are generated whenever a computer validates the credentials of an account for which it is authoritative.
Domain members
and non-dom
Audit
logon
events
so
there
is
no
corresponding
logoff
event
forthe
account
logon
This
security
setting
determines
whether
the
OS
audits
userevents.
attempts
to access
Active Directory objects. Audit is only generated for objects that have system a
Important
Note:
By
default,
follow
of their domain
controllers.
A user
account
ormember
group
iscomputers
created,
changed,
orconfiguration
deleted.
Audit
object
access
A
user
account
is
renamed,
disabled,
or
enabled.
This
security
setting
whether
OS
audits
each
instance
a user
attempting
to and
log
on
to or toor
log
off
to
this these
computer.
If thisadministrator
policy is
setting
isdetermines
defined,
the
administrator
can
whether
toofaudit
only
successes,
only
failures,
both
successes
andevents
failures,
or
not
audit these
ev
The
can
specifyonwhether
to the
audit
only
successes,
only this
failures,
both
successes
failures,
tothis
not
audit
allto(i.e.
neither
succes
This
setting
persistent
pre
Vista
platforms.
Ifspecify
you
configure
setting
and
then restart
the
computer,
setting
reverts
to theatdefault
value.
A password
is not
set or
changed.
Audit
policy
change
This
security
setting
determines
whether
the
OS
audits
user
attempts
to
access
non-Active
Directory
objects.
Audit
is
only
generated
for
objects
that
have
syste
If
you
define
this
policy
setting,
you
can
specify
whether
to
audit
successes,
audit
failures,
or
not
audit
the
event
type
at
all.
Success
audits
generate
an
audit
Log
off events
are generated
a logged
on user account's
terminated.accesses
If this policy
setting isobject
defined,
can specify
we
Default:
Success.
If
Success
auditing
is enabled,whenever
an audit entry
is generated
each timelogon
any session
account is
successfully
a Directory
thatthe
hasadministrator
a matching SACL
specifie
Default:
5 minutes.
Audit
privilege
use
This
security setting
determines
whether
OS
audits
each instance
of attempts
change user
assignment
policy,
auditevents
policy,ataccount
trust
Default:
The
administrator
can
specify whether
to the
audit
only
successes,
only failures,
both to
successes
and rights
failures,
or to not audit
these
all (i.e. policy,
neitherorsucces
Default:
Success.
If
Failure
auditing
is enabled, an audit entry is generated each time any user unsuccessfully attempts to access a Directory object that has a matching SACL sp
Audit
process
tracking
This
security setting
determines
whether to
audit
each
instance only
of a user exercising
a user right.
The
administrator
can
specify whether
audit
successes,
both successfully
successes
and
failures,a or
to not audit these
at aallmatching
(i.e. neither
succes
If
Success
iscontrollers.
enabled,
an audittoentry
isonly
generated
each timefailures,
any account
accesses
non-Directory
objectevents
that has
SACL
spec
Success
onauditing
domain
Audit
system
events
Default:
This
security
setting
determines
whether
the OSwhether
audits process-related
events
such
as process
creation,
process
termination,
handle duplication,
and indirect
Noyou
auditing
on
member
servers.you
If
define
this
policy
setting,
can
specify
to
audit
successes,
audit
failures,
or
not
audit
this
type
of
event
at
all.
Success
audits
generate
an
aud
If
Success
auditingisisenabled,
enabled,ananaudit
auditentry
entryisisgenerated
generatedeach
when
an any
attempted
change to user
rights assignment
audit policy,
or trust
policy
is successfu
If
Failurethis
auditing
time
user unsuccessfully
attempts
to access apolicy,
non-Directory
object
that has
a matching
SAC
Access
computer
from the network
This
security
setting
determines
whether
the
OS
audits
any
of
the
following
events:
Success
on
domain
controllers.
If
this
policy
setting
is defined,
the
administrator
can
specify
whether
to audit
only successes,
only failures,
both successes
and box
failures,
or to not
audit
these
ev
To
set
this
value
to
No
auditing,
in
the
Properties
dialog
box
for
this
policy
setting,
select
the
Define
these
policy
settings
check
and
clear
the
Success
and
If
Failure
is
enabled,
an
is generated
when
an attempted
to user
rights assignment
policy, audit policy, or trust policy is attempted b
Undefined
for can
a member
computer.
Note
that auditing
you
set
aCredential
SACL
onaudit
aManager
file entry
system
object
using
the Security
tabtoinchange
thatcomputer
object's
Properties
dialog as
box.
user
right
determines
which
users
and
groups
are
allowed
to
connect
the
over
the
network.
Remote
Desktop
Services
are
not
affected
by
this
This
setting
is
used
by
during
Backup/Restore.
No
accounts
should
have
this
privilege,
it
is
only
assigned
to
Winlogon.
Users
saved
cre
If Attempted
system is
time
change
Success
enabled,
an audit entry is generated each time the OS performs one of these process-related activities.
Default:
Noauditing
auditing.
Act
as part
of
the operating
Default:
Attempted
security
systemsystem
startup or shutdown
Default:
No
auditing.
Note:
Remote
Desktop
Services
was calledcomponents
Terminal Services in previous versions of Windows Server.
If Attempt
to
load
extensible
authentication
Failure
auditing
is enabled,
an audit
is generated
each
timeif the
OS fails
to perform
one
of these
activities.for Audit privilege use. Enabling auditing of th
Add
workstations
to
domain
Audits
areon
not
generated
for use
ofimpersonate
theentry
following
useruser
rights,
even
success
audits
failure
audits
are specified
This
user
right
allows
a process
to
without
authentication.
Theorprocess
can therefore
gain access to the same local resources as that us
Success
Loss
of
audited
events
due
to auditing
system any
failure
domain
controllers.
Default
on
workstations
and
servers:
No
Security
log
exceeding
a configurable warning threshold level.
auditing
onsize
member
servers.
Adjust
memory
quotas
for
a process
Default:
No
auditing
This
security
setting
determines
which
groups
or
users
can
add
workstations
to
a
domain.
Administrators
Bypass
traverse
checking
Processes that require this privilege should use the LocalSystem account, which already includes this privilege, rather than using a separate user account with
Backup
Operators
Debug
programs
passwords
Allow
log
oninsetting
locally
plaintext.
If
thisprivilege
policy
is defined,
the administrator
can specify
whether tocan
audit
successes,
failures, both successes and failures, or to not audit these ev
This
determines
who
can
maximum
memory
beonly
consumed
byhas
a only
process.
This
security
setting
only
onchange
domainthe
controllers.
By
default,that
any authenticated
user
this right and can create up to 10 computer accounts in the dom
Users
Create
a token
objectis valid
Allow
logprocess
onauditing
through
Desktop
Everyone
Replace
level
tokenwhich
This
logon
right
users
can interactively
on to
thisthe
computer.
Logons
byactivities
pressing
CTRL+ALT+DEL
sequence
on the attached keyb
Caution
If
Success
isRemote
enabled,
an
auditServices
entry
is generatedlog
each
time
OS performs
oneinitiated
these
successfully.
This
user
right
isdetermines
defined
in the
Default
Domain
Group
object
inofthe
local
security
policy
of workstations
and servers.
Adding
a computer
account
to the
domain
allowsController
the computer
toPolicy
participate
in(GPO)
Active and
Directorybased
networking.
For
example, adding
a workstation to a dom
Generate
security
audits
Back
up
files
and
directories
This
security
setting
determines
users
groups have
permission
totolog
on asusers.
a Remote
client.
Back
Default
upon
on
files
domain
and
Default
workstations
and
Administrators
Assigning
this
userdirectories
right
can servers:
be
security
risk.
Only
userthe
right
trusted
If
Failure
auditing
iscontrollers:
enabled,
anawhich
audit
entry
isorgenerated
time
OS
attempts
fails toDesktop
perform Services
one
of these
activities.
Note:
This
privilege
is
useful
but itassign
can each
bethis
misused,
for
example,
inand
a denial-of-service
attack.
Default:
Authenticated
Users for
on system
domaintuning,
controllers.
Restore
Administrators
files
andchecking
directories
Bypass
traverse
Backup
Operators
This
user
right
determines
which
users
can
bypass
file
and
directory,
registry,
and
other
persistent
object
permissions
for the purposes of backing up the system
Default:
Authenticated
Users.
Default:
None.Users
Default:
Administrators
Change
the
system
time
Note:
Users
who
have
the
Create
Computer
Objects
permission
on
the
Active
Directory
computers
container
can
also
computerdirectory.
accountsThis
in the
domain
Enterprise
Domain
Controllers
Caution
This
user
right
determines
which
users
can traverse
directorypermissions
trees even though
the user
mayinnot
have permissions
oncreate
the
traversed
privilege
d
Specifically,
this
user
right is
similar
to granting
thecreator
following
thecomputer
user
or group
question
allpermissions
files and
folders
oncontainer
the system:
Local
Service
On
workstation
servers:
Administrators,
Remote
Desktop
Users.
permissions
on and
the
computers
container
have
the
as the
owner oftothe
account.
If a useron
has
on the
and also has the A
Everyone
Default
on
domain
controllers:
Account
Operators
Success
on
domain
controllers.
Change
the
Time
Zone
Network
Service.
This
user
right
determines
which
users
and groups
can
change
timeobject
and
date
on the
clock
of the
Users
thatvalued
are
assigned
right
On
domain
controllers:
Administrators.
Pre-Windows
Compatible
Access
Incorrectly
editing
the
registry
severely
damage
your
system.
Before
making
changes
thelocal
registry,
youcomputer.
should
back
up any
data onthis
theuser
computer
This
user Folder/Execute
right
is
defined
in
themay
Default
Domain
Controller
Groupthe
Policy
(GPO)
andinternal
intothe
security
policy of
workstations
and
servers.
Administrators
No auditing
on2000
member
servers.
Traverse
File
Create
a
pagefile
Backup
Operators
List Folder/Read
This
user right
right is
determines
Data inwhich
users Domain
and groups
can change
timeobject
zone used
byand
the in
computer
displaying
the
time, which
the computer's syste
This
user
defined
Default
Controller
Groupthe
Policy
(GPO)
the localfor
security
policy
oflocal
workstations
andisservers.
Important
Default
on workstations
andthe
servers:
Print
Operators
Read
Attributes
Create
a token
object
Administrators
This
user
right
determines
which
users
and
groups
can
call
an
internal
application
programming
interface
(API)
to
create
and
change
the
size
of a page file. Th
Server
Operators.
This
user
right
isAttributes
defined
inany
the
Default
Controller
Group Policy
(GPO)
in the to
local
security
policy
Read
Extended
Default
on
workstations
and
servers:
This
setting
does
not have
effect
onDomain
Windows
2000 computers
that object
have not
beenand
updated
Service
Pack
2. of the workstations and servers.
Backup
Operators
Create
global
objects
Read
Permissions
Administrators
This
security setting
whicha accounts
befor
used
by processes
a token
thatofcan
bememory
used to paging
get access
For
information
aboutdetermines
how
to specify
paging filecan
size
a given
drive, seetoTocreate
change
the size
the then
virtual
file. to any local resources when t
Users
Default:
Administrators,
Users
Local
Service
Create
permanent
shared
objects
Everyone
This
security
determines
users can
createUnless
global objects
that aredo
available
to allthis
sessions.
Users
create
arethan
specific
thei
Caution
This
rightsetting
is used
internally whether
by the operating
system.
it is necessary,
not assign
user right
to a can
user,still
group,
or objects
processthat
other
LocaltoSyst
Default:
Administrators.
Localuser
Service
Create
Symbolic
Links
Default
on
domain
controllers:
This userService
right
determines
which
can Since
be used
by processes
tobe
create
directory
usingup
the
object
manager.
Network
Caution
Assigning
this user
right can
be aaccounts
security risk.
there
is no way to
sure athat
a userobject
is backing
data,
stealing
data, or copying data to be distributed,
Caution
Administrators
Debug
programs
This
privilege
determines
if
the
user
can
create
a
symbolic
link
from
the
computer
he
is
logged
on
to.
Server
Operators
This
user
is used
internally
by the
operating
system and
is right
useful
to kernel-mode
components that extend the object namespace. Because components th
Default
on
domain
controllers:
Assigning
this
user
right
can
be
a
risk.
user
only
to to
trusted
users.
Default
onright
workstations
and
Administrators
Assigning
this
can servers:
befrom
a security
security
risk. Assign
Do not this
assign
this user
right
any user,
group, or process that you do not want to take over the system.
Local access
Service
Deny
touser
thisright
computer
the network
Administrators
This
user
right
determines
which
users
can
attach
a
debugger
to
any
process
or
to
the
kernel. Developers who are debugging their own applications do not ne
Backup
Operators.
Administrator
Default:
None
Default:
None.Users
Authenticated
Default:
Deny
log on as
a batch
job
This
security
setting
determines
which users are prevented from accessing a computer over the network. This policy setting supersedes the Access this compu
Everyone
Caution
Default
on domain
controllers:Administrators
WARNING:
This privilege
should only be given to trusted users. Symbolic links can expose security vulnerabilities in applications that arent designed to hand
Local
Service
Deny
log
on
as
a
service
Administrators
Backup
Operators
This security
setting determines which accounts are prevented from being able to log on as a batch job. This policy setting supersedes the Log on as a batch jo
Default:
Guest
Network
Service
Assigning
this user right can be a security risk. Only assign this user right to trusted users.
Local
Service
Server
Operators
Note
Pre-Windows
2000 Compatible
Access
This
security
setting
determines
which service
accounts
are prevented
a process
as command
a service. This
policytosetting
Log onthat
as aa
Network
Service
This setting
Default:
None.
can
be used
in conjunction
a symlink
filesystem
setting thatfrom
can registering
be manipulated
with the
line utility
controlsupersedes
the kinds ofthe
symlinks
Default:
Service Administrators
Note: This security setting does not apply to the System, Local Service, or Network Service accounts.
Default: None.
Deny log on locally
Deny
log on through
Remote Desktop
This security
setting determines
which Services
users are prevented from logging on at the computer. This policy setting supersedes the Allow log on locally policy settin
Enable
computer
anddetermines
user accounts
tousers
be trusted
for delegation
This
security
setting
which
and groups
are prohibited from logging on as a Remote Desktop Services client.
Important
Force
shutdown
from
a
remote
system
This
security
setting determines which users can set the Trusted for Delegation setting on a user or computer object.
Default:
None.
If you apply
this security policy to the Everyone group, no one will be able to log on locally.
Generate
security
audits
This
security
setting
determines
users are
allowed
shutaccess
down atocomputer
fromcontrol
a remote
the
userprocess
right can
result on
in
The
user
or object
that
is grantedwhich
this privilege
must
havetowrite
the account
flagslocation
on the on
user
ornetwork.
computerMisuse
object.ofAthis
server
running
Important
Default:
None.
Impersonate
a
client
after
authentication
This user
security
setting
determines
which accounts
can be used
by a process
to add
entries
the security
log. The
security
log is usedand
to trace
unauthorized syst
This
right
is
in the
Default
Domain Controller
Group
object
(GPO)
andto
in
local
security
policy
of workstations
servers.
This
user
right
is defined
defined
the effect
Default
Controller
Group Policy
Policy
(GPO)
in the
the to
local
security
policy
log
security
audits
This
setting
does
notworking
haveinany
onDomain
Windows
2000 computers
that object
have not
beenand
updated
Service
Pack
2. of workstations and servers.
Increase
athis
process
set allows
Assigning
privilege
to a user
programs running on behalf of that user to impersonate a client. Requiring this user right for this kind of impersonation
Default:
Caution
Increase
scheduling
priority
Default:
Local
Service
This
privilege
determines
which user accounts can increase or decrease the size of a processs working set.
Caution
Network
Service.
Increase
a
process
working
set
On
workstations
and
servers:
Administrators.
Load
and
unload
device
drivers
Misuse
of
this
user
right,
or
of
thewhich
Trusted
for Delegation
could
network
vulnerable
to sophisticated
attacks using
Trojan horse
programs
thatto
This
securitycontrollers:
setting determines
accounts
can use setting,
a process
withmake
Writethe
Property
access
to another
process to increase
the execution
priority
assigned
On domain
Server
Assigning
this user rightAdministrators,
can be a security
risk.Operators.
Only assign this user right to trusted users.
This
Lock
privilege
pages
indetermines
memory
accounts
can increase
decrease
the sizedrivers
of a processs
working
set.
This
user
right
determines
whichuser
users
can dynamically
load or
and
unload device
or other code
in to
kernel mode. This user right does not apply to Plug
Default:
Administrators
onwhich
domain
controllers.
Default:
Administrators.
Default:
Log
on
as
a batch
jobdetermines which accounts can use a process to keep data in physical memory, which prevents the system from paging the data to virtual
This
security
setting
Default:
Users
Caution
Log
on
as a service
Administrators
This
security
setting
allows
a user
toset
beoflogged
on by means
of a batch-queue
facility
andinisphysical
provided
onlymemory.
for compatibilitypages
with olderresident
versionsand
of Windows.
Default:
None.
The
of aright
process
is the
memory
currently
visible
to to
theany
process
RAM
available for
Localworking
Assigning
Service
thisset
user
can be
a security
risk. Do pages
not assign
this user
right
user, group,
or process
that you These
do not want toare
take over the
system.
Log
on
locally
This
security
setting
allows
a
security
principal
to
log
on
as
a
service.
Services
can
be
configured
to
run
under
the
Local
System,
Local
Service,
or
Networkuse
Se
Network
Service
For example,
when athe
user
submits
job by
of the
task scheduler,
the task
scheduler
logs that
user on
batch
rather than as an interactive
Warning:
Increasing
working
setasize
formeans
a process
decreases
the amount
of physical
memory
available
toas
thea rest
of user
the system.
Default
on
workstations
and
servers:
Administrators.
Service
Manage
auditing
and
security
log
Determines
which
users can log on to the computer.
Default
setting:
None.
Modify
an
object
label
Default
on
domain
controllers:
Note:
By
default,
services
that are
started
by can
the Service
Controlaccess
Manager
have options
the built-in
Service group
added such
to their
tokens.
Component
Object
Mo
This
security
setting
determines
which
users
specify object
auditing
for individual
resources,
as access
files, Active
Directory
objects,
and reg
Default:
Administrators
Important
Administrators
Backupfirmware
Operators.
Modify
environment
values
This
privilege
determines
which
usera accounts
can modify
integrity
labelauditing
of objects,
such
asFor
files,
registry
keys,
or
owned
byobject
otheraccess
users. Proces
Print
Operators
In
addition,
a user
can also
impersonate
antoaccess
token
ifthe
any
of the
following
conditions
exist.
This
security
allow
user
enable
file and
object
access
in For
general.
such
auditing
toabout
beprocesses
enabled,
the
Audit
setting
Modifying
thissetting
settingdoes
may not
affect
compatibility
with clients,
services,
and applications.
compatibility
information
this setting,
see Allow
log on locally
(h
Perform
volume
maintenance
tasks
This
security
setting
determines
who
can
modify
firmware
environment
values.
Firmware
environment
variables
are
settings
stored
in
the
nonvolatile
RAM
of n
Default:
None
The can
access
token
thatevents
is being
impersonated
is of
forthe
thisEvent
user.Viewer. A user with this privilege can also view and clear the security log.
You
view
audited
in
the
security
log
Default:
Profile
single
process
The
user,
in this
logon
session, created
the access
tokencan
by logging
on to the network
withvolume,
explicit such
credentials.
Thisx86-based
security
setting
determines
which
users
and groups
runthat
maintenance
tasks on
as remote
On
computers,
only
firmware
environment
value
be modified
by a
assigning this
user
right is defragmentation.
the Last Known Good Configuration setting,
The
requested
level is lessthe
than
Impersonate,
such as Anonymous
orcan
Identify.
Default:
Administrators.
Profile
system
performance
On
computers,
boot
information
is use
stored
in
nonvolatile
RAM.
Users
must
be assigned
this user right
to run bootcfg.exe
and to change the Defa
Because
OnItanium-based
workstations
and
servers:
Administrators,
Backup
Operators,
Power
Users,
Users,
and
Guest.
This
security
setting
determines
which
users
can
performance
monitoring
tools
to
monitor
the
performance
of
nonsystem
processes.
of
these
factors,
users
do
not
usually
need
this
user
right.
Use
caution
when
assigning
this is
user
right. Users
with
user
right
can exploreand
disks
and
extend files in to memory that contains
other data. When the exten
On
computers,
this
user
right
required
toAdministrators,
install
orthis
upgrade
Windows.
Onall
domain
controllers:
Account
Operators,
Backup
Operators,
Print
Operators.
Remove
computer
from
docking
station
This
security
setting determines
which
users can use performance
monitoring
tools toSDK.
monitor the performance of system processes.
Default:
Administrators,
Powerfor
users.
For
more
information,
search
"SeImpersonatePrivilege"
in the Microsoft
Platform
Default:
Administrators
Note:
This
security setting
does not affect who can modify the system environment variables and user environment variables that are displayed on the Advanc
Replace
a
process
level
token
This
security setting determines whether a user can undock a portable computer from its docking station without logging on.
Default:
WarningAdministrators.
Restore
files and directories
Default:
Administrators.
This
determines
user
can call the
application
programming
interface
(API) so the
thatuser
one may
service
can star
If
thissecurity
policy issetting
enabled,
the user which
must log
onaccounts
before removing
the CreateProcessAsUser()
portable computer from its
docking station.
If this policy
is disabled,
remove
the
If
you
enable
this
setting, programs that previously had the Impersonate privilege may lose it, and they may not run.
Shut security
down thesetting
system
This
determines
which
users
can
bypass
file,
directory,
registry,
and
other
persistent
objects
permissions
when
restoring
backed
up
files
and
di
Default:
Network Service,
LocalUsers,
Service.
Default: Administrators,
Power
Users
Synchronize
directory
service
data
This
securitythis
setting
which
users who
loggedpermissions
on locally to to
thethe
computer
can shut
down theon
operating
system
using
Down command. M
Specifically,
userdetermines
right is similar
to granting
theare
following
user or group
in question
all files and
folders
onthe
theShut
system:
Take
ownership
of
files
or
other
objects
This
security
setting determines
which users
and Operators,
groups have
the authority to synchronize all directory service data. This is also known as Active Directory syn
Default
onFolder/Execute
Workstations:
Administrators,
Backup
Users.
Traverse
File
Accounts:
Administrator
account
status
This
setting determines which users can take ownership of any securable object in the system, including Active Directory objects, files and folders, prin
Writesecurity
Defaults:
Default onNone.
Servers: Administrators, Backup Operators.
Accounts:
Block
Microsoft
accounts
This
security
setting
determines
whether the local Administrator account is enabled or disabled.
Caution
Default on Guest
Domain
controllers:
Administrators, Backup Operators, Server Operators, Print Operators.
Accounts:
account
status
This
policy setting prevents users from adding new Microsoft accounts on this computer.
Notes
Assigning this user right can be a security risk. Since owners
of objects
control
of them,
onlysettings,
assign this
right
trusted
users. of system objects,
users with
this userhave
rightfull
can
overwrite
registry
hideuser
data,
andtogain
ownership
Accounts:
Limit
localdetermines
account useif of
passwords
toenabled
consoleor
logon
only
This
security
setting
theblank
Guest
account isoption,
disabled.
If
you
select
the
Users
cant
add Microsoft
accounts
users
will notand
be able
tocurrent
createAdministrator
ne Microsoft accounts
on
thisnot
computer,
switch
a local
account to
If
you
try
to
reenable
the
Administrator
account
after
it
has
been
disabled,
if
the
password
does
meet
the
password
requirements
Default:
Administrators.
Accounts:
Rename
administrator
account
This security
setting
determines
whether
local accounts
that are not
password
protected
can be used to log on from locations other than the physical computer
Disabling
the
Administrator
account
can become
a maintenance
issue
under certain
circumstances.
Default:
Disabled.
If you select the Users cant add or log on with Microsoft accounts option, existing Microsoft account users will not be able to log on to Windows. Selecting thi
Accounts:
Rename
guest
account
Workstations
and servers:
Administrators,
This
security
setting
determines
whether
a Backup
differentOperators.
accountwill
name
associated
security
identifier (SID)
for the
Administrator.
Renaming
the w
Default:
Enabled.
Under
Safe
Mode
boot,
theisdisabled
Administrator
account
onlyisbe
enabledSharing
ifwith
the the
machine
is non-domain
andaccount
thereisare
active
adminis
Note:
the
Guest
disabled
and the
security
option
Network
and Security
Modelwith
forjoined
local accounts
setno
toother
Guestlocal
Only,
network
logo
Domain
controllers:
Administrators,
Backup
Operators,
Serverusers
Operators.
If you If
disable
oraccess
doaccount
not
configure
this
policy
(recommended),
willAccess:
be able to use Microsoft
accounts
Windows.
Audit:
Audit
the
of
global
system
objects
This
security
setting determines whether a different account name is associated with the security identifier (SID) for the account "Guest." Renaming the well-kn
Default:
Administrator.
Default: Disabled.
Audit:
Audit the
use of
Backup and
Restore
privilege
This
security
setting
determines
whether
to audit
the access of global system objects.
Warning:
Default:
Guest.
Audit:
Force
audit
policy
subcategory
settings
(Windows
Vista
or
later)
to override
audit policy
category
settings.
This
determines
whether
to
audit
the
use
allalways
user
privileges,
including
Backup
anddevices,
Restore,
when
theaccounts.
Audit
use
policy
is inwith
effect.
E
If
thissecurity
policythat
issetting
enabled,
it causes
system
objects,
such
asofmutexes,
events,
and DOS
be user
created
withprivilege
a default
system
access
control
Computers
are not
in
physically
secure
locations
should
enforcesemaphores
strong
password
policies
for all to
local
Otherwise,
anyone
physi
Audit:
Shut
down
system
immediately
if unableallow
to
logaudit
security
If you apply
thisand
security
policy
to the
Everyone
group,
no policy
one audits
will
be
able
to log in
onathrough
Remote
Desktop
Services.
Windows
Vista
later
versions
of
Windows
to
be
managed
more
precise
way
using
audit
policy
subcategories.
Setting
audit
policy
at
If
you disableconfiguring
this policy,this
thensecurity
use of the Backup
or Restore
is not
audited
even Windows.
when Audit privilege use is enabled.
Note:
changes
will Policy,
notprivilege
take
effect
until
you
restart
using When
subcategories
without
requiringsetting,
a change
toDescriptor
Group
there
is a
new
registry
value
in Windows Vista and later versions, SCENoApplyLegacyAuditPo
DCOM:
Machine
Access
Restrictions
in
Security
Definition
(SDDL)
syntax
This
setting
determines
whether
the system
shuts down
if it isLanguage
unable to log
security
events.
Notessecurity
Note: OnDisabled.
Windows versions prior to Windows Vista configuring this security setting, changes will not take effect until you restart Windows. Enabling this setting
Default:
DCOM:
Machine
Launch
in Security
Descriptor
Definition
Language
syntax
If
the category
level
audit Restrictions
policy
set here
is or
notgroups
consistent
with
the events
that are(SDDL)
currently
being
generated,
the cause
might
that this
registry
key is set.
This
setting
determines
which
users
can
access
remotely
or locally.
setting
is used
to be
control
the to
attack
surface
of the
If thispolicy
security
setting
is enabled,
it that
causes
system
to stop
if a DCOM
securityapplication
audit cannot
be logged
for anyThis
reason.
Typically,
an
event fails
be logged
when
the
This
setting
does
not
affect
logons
usethe
domain
accounts.
Default:
Disabled.
Devices:
Allow
undock
without
having
to
log
on
It
is
possible
for
applications
that
use
remote
interactive
logons
to
bypass
this
setting.
Default:
This
policy
Disabled
setting
determines
which
users
or groups
can launch
orthe
activate
DCOMtoapplications
remotely
or locally.
This setting
is used
to control
theyou
attack
su
You
can
use
this
policy
setting
to
specify
access
permissions
to
all
computers
particular
users
for
DCOM
applications
in
the
enterprise.
When
specif
If the security log is full and an existing entry cannot be overwritten, and this security option is enabled, the following Stop error appears:
Devices:
Allowed
format
and
eject
media
Denysecurity
privileges
ontoboth
local
access
and
remote
access.
This
setting
determines
portable
computer
be undocked
without
having
to
log
on.define
If this this
policy
is enabled,
logon the
is not
required
and an
Note:
Remote
Desktop
Services
was removable
called
Terminal
Services
inusers
previous
versions
of Windows
Server.
You can
use this
setting
to grant whether
access
toa all
the computers
tocan
of DCOM
applications.
When
you
setting,
and specify
users
or groups
thate
STOP: C0000244
{Auditlocal
Failed}
Devices:
Prevent
users
from
installing
printer
drivers
when
connecting
to
shared
printers
launch,
remote
launch,
activation,
and
remote
activation.
The
This
registry
security
setting
determines
thata are
created
who
is
asallowed
a resulttoofformat
enabling
andthe
eject
DCOM:
removable
Machine
NTFS
Access
media.
Restrictions
This capability
in Security
can be
Descriptor
given to: Definition Language (SDDL) synta
Default:
Enabled.
An attempt
tosettings
generate
security
audit
failed.
existing
registry
settings
areaccess
no
longer
effective,
and
iflog
you
make
changes
to the
existing
settings,
computer
accessUntil
permissions
for users
are
not changed.
Uso
Devices:
Restrict
CD-ROM
to
locally
logged-on
user
only
To
recover,
an
administrator
must
log
on,
archive
the
(optional),
clear
the
log,
and
reset
this
option
as
desired.
security
setting
is reset,
no
users,
For
aregistry
computer
to print
toare
a shared
printer,
the driver
forpolicy
that shared
printer must
be the
installed
on the
local settings
computer.
Thisthis
security
setting
determines
who
is allo
The
settings
that
created
as a result
of this
take precedence
over
previous
registry
in this
area.
Remote
Procedure
Call
Services
Administrators
Caution
Devices:
Restrict
floppy
access
to
locally
user
only thistosecurity
Administrators
and
Interactive
Users
The
values
for this
policy
setting
are:
This
security
setting
determines
whether
alogged-on
CD-ROM
is accessible
both local
and remote
users
simultaneously.
Note:possible
On
prior
to
Windows
Vista
setting,
changes
will not
take effect until you restart Windows.
Default
onWindows
servers:
Enabled.
The
possible
valuesversions
for this Group
Policy
setting
are:configuring
Disabling
this
policy
may
tempt
users
to
try
and
physically
remove the laptop from its docking station using methods other than the external hardware eject but
Devices:
Unsigned
driver
installation
behavior
Default
on
workstations:
Disabled
This
security
setting
determines
whether
removable
floppy
media
are
accessible
to
both
local
and
remote
users
simultaneously.
Default:
This
policy
is
not
defined
and
only
Administrators
have
this
ability.
Blank.
This
represents
the
local
security
policy
way
of
deleting
the
policy
enforcement
key.
This
value
deletes
the
policyisand
then sets
as Notisdefined
state.
If
policy
enabled, itthe
allows
the interactively
logged-on
to access
removable
media.
If this
enabled
and it
loggedstate.
on in
Default:
Disabled.
this
Blank.
Thisisrepresents
localonly
security
policy way of
deleting user
the policy
enforcement
key.CD-ROM
This value
deletes
thepolicy
policy and
then sets
itnotoone
Not defined
Domain
controller:
Allow
server
operators
to
schedule
tasks
This
security
setting
determines
what
happens
when
an
attempt
is
made
to
install
a
device
driver
(by
means
of
Setup
API)
that
has
not
been
tested
by
the
Win
If
this
policy
allows
only
interactively
logged-on
user to to
access
removable
floppy
media.you
If this
policywhen
is enabled
and no
one
is logged on intera
SDDL.
Thisispolicy
isenabled,
the is
Security
Descriptor
Definition
Language
of locally
the
groups
and
privileges
specify
you enable
this
policy.
Default:
notit defined
andthe
CD-ROM
access
is notrepresentation
restricted
the
logged-on
user.
Notes
SDDL.This
This is theLDAP
Security
Descriptor
Definition
Language
representation
of the groups
and privileges
you specify when you enable this policy.
Domain
controller:
server
signing
requirements
This
securityare:
setting determines if Server Operators are allowed to submit jobs by means of the AT schedule facility.
The
Default:
This policy
and floppy disk drive access is not restricted to the locally logged-on user.
Notoptions
Defined.
This is
is not
the defined
default value.
This
Not
setting
Defined.
does
This
notisdetermines
affect
the default
the ability
value.
to add
a localserver
printer.requires signing to be negotiated with LDAP clients, as follows:
This
security
setting
whether
Note:
This
security
setting
only
affects
thethe
ATLDAP
schedule facility;
it does not affect the Task Scheduler facility.
Silently
succeed
This
setting
does not affect Administrators.
Note
Default:
This
policy
is not defined, which means that the system treats it as disabled.
Warn
but
allow
installation
Note
None:
Data signing is
is denied
not required
in order
bind with
theapplications
server. If thedue
client
requests
datamade
signing,
the server
supportsthe
it. administrator can use the DCOM:
If the administrator
permission
to to
access
DCOM
to the
changes
to DCOM
in Windows,
Do
notadministrator
allow
If
the
is denied
access
activate
launch
DCOM
applications
to be
the
changes made
to DCOM
in this version
of Language
Windows, this
policy
setti
Require
signature:
Unless
TLS\SSL
istobeing
the
LDAPthe
data
signing
optiondue
must
negotiated.
application
toinstallation
the administrator
and users.
Toused,
doand
this,
open
DCOM:
Machine
Access
Restrictions
in Security
Descriptor
Definition
(SDDL)
syntax
Default:
Warncontrol
but allow
installation.
This restores
of the
DCOM application to the administrator and specified users. To do this, open the DCOM: Machine Launch Restrictions in Security D
Default: This policy is not defined, which has the same effect as None.
Domain controller: Refuse machine account password changes
Domain
member:
Digitally
encrypt
or signdomain
secure controllers
channel data
This security
setting
determines
whether
will(always)
refuse requests from member computers to change computer account passwords. By default,
Domain
member:
Digitally
encrypt
secureall
channel
data
(when
possible)
This
security
setting
determines
whether
secure
channel
traffic
initiated
the domain
member must
be signed
or encrypted.
If it is enabled, this setting does not allow a domain controller to accept
anyby
changes
to a computer
account's
password.
Domain
member:
Digitally
sign
secure
channel
data
(when
possible)
This
security
setting determines
whether
a domain
member
attempts
to that,
negotiate
all secure
traffic that
it initiates.
When
a This
computer
a defined,
domain,
a computer
account
created.
After
whenencryption
the systemfor
starts,
it useschannel
the computer
account
password to create a secure
Default:
policyjoins
is not
which
means
that theissystem
treats
it as Disabled.
Domain
member:
Disable
machine
account
password
changes
This
security
setting
determines
whether
a
domain
member
attempts
to
negotiate
signing
for
all
secure
channel
traffic
that
it
initiates.
When
a computer
joins awhether
domain,
computer
account
is created.
After that,
when
the system
starts,
it uses
the computer
account password
to create
a secure
This setting
determines
oranot
all secure
channel
traffic initiated
by the
domain
member
meets
minimum
security requirements.
Specifically
it determin
Domain
member:
Maximum
machine
account
password
age encryption
Determines
whether
a in
domain
member
periodically
changes
its computer
account
password.
Ifstarts,
this
setting
isthe
enabled,
theand
domain
member
not attempt
the Domain
Controller
which
case
the
level of
signing
and
depends
on
the
version
of the
Domain
Controller
the settings
ofdoes
the
following
twotop
When
a
computer
joins
a
domain,
a
computer
account
is
created.
After
that,
when
the
system
it
uses
computer
account
password
to
create
secure
This setting determines whether or not the domain member attempts to negotiate encryption for all secure channel traffic that it initiates. If enabled, theadomain
Domain
member:
Require
stronghow
(Windows
2000
or later)
session
key
This
security
setting
determines
often
a
domain
member
will
attempt
to
change
its
computer
account
password.
negotiate
secure
channel
encryption.
Default:
Disabled.
Domain
member:
Digitally
encrypt
(when
possible)
This setting
determines
whether
orsecure
not thechannel
domain data
member
attempts
to negotiate signing for all secure channel traffic that it initiates. If enabled, the domain me
Interactive
logon:
Do
not display
last user
namedata
Domain
member:
Digitally
sign secure
channel
(when
possible)
This
security
setting
determines
whether
128-bit
key
strength
is
required for encrypted secure channel data.
Default:
30
days.
Enabled.
This
setting determines whether the name of the last user to log on to the computer is displayed in the Windows logon screen.
Notessecurity
Default:
Enabled.
Interactive
Logon:
Display user
information
session
is locked on is not displayed in the Logon Screen. .
If
this policy
is enabled,
name
of
the lastwhen
user
to
successfully
Default:
When
a Enabled.
computer
joins athe
domain,
a computer
account
is created.log
After that, when the system starts, it uses the computer account password to create a secure
Important
This
security
setting
should
not
be
enabled.
Computer
account
passwords are used to establish secure channel communications between members and doma
Interactive logon: Do not require CTRL+ALT+DEL
Notes:
If
this
policy
is
disabled,
the
name
of
the
last
user
to
log
on
is
displayed.
This
setting
should
not
be
used
in
an
attempt
to
support
dual-boot
scenariosthat
thatthe
usedomain
the same
computer
account. If youwith
want
to the
dual-boot
tha
Notes:
Depending
whatreason
version
ofdisabling
Windows
is running
on
domain
controller
member
is communicating
and
settingstwo
of installations
the parameters
This
applies
to
Windows
2000
computers,
itthe
is not
available
through
the Security
Configuration
Manager
onsecure
these
computers.
Theresetting
is no on
known
for
this
setting.but
Besides
unnecessarily
reducing
the potential
confidentiality
leveltools
of the
channel,
disabling
this settin
Interactive
Machine
account
threshold.
This
setting
determines
whether
pressing
CTRL+ALT+DEL
is data
required
before
user canthen
log this
on. policy is assumed to be enabled regardless of its curr
If thesecurity
policylogon:
Domain
member:
Digitally
encrypt
or sign
secure channel
(always)
is aenabled,
The
policy
is
enforced
only
onand
those
machines
that
havechannel
Bitlocker
enabled
for
protecting
OS
volumes.
Please
ensure
that
appropriate
recove
Default:
Disabled.
If
thismachine
policy
islockout
enabled,
theencrypt
policy
Domain
member:
Digitally
sign
secure
(when
possible)
is assumed
to bedomain
enabled
of its current
settin
Domain
member:
Digitally
ormembers
sign
secure
channel
data
(always)
controllers
are
also
domain
establish
secure
channels
withdata
other
domain
controllers
in the
same
asregardless
wellas
aswell
domain
controllers
in
Interactive
logon:
Machine
inactivity
limit.
Note:
Domain
controllers
are
also Domain
domain
members
and establish
secure
channels
with(when
otherpossible)
domain
controllers
in
thebesame
domain
asits
domain
contro
If
this
is
the
member:
Digitally
secure
channel
data
is assumed
to
enabled
regardless
current
settin
If
this policy
policy
is enabled,
enabled
on
apolicy
computer,
a user
is notdata
required
topossible)
press
CTRL+ALT+DEL
to log on.
Not having
to press
CTRL+ALT+DEL
leavesofusers
susceptibl
Domain
member:
Digitally
encrypt
secure
channel
(whensign
This
security
setting
determines
the
number
of
failed
logon
attempts
that
causes
the
machine
to
be
locked
out.
A
locked
out
machine
can
only
be
recovered
by
Logon
information
transmitted
over
the
secure
channel
is
always
encrypted
regardless
of
whether
encryption
of
ALL
other
secure
channel
traffic
is
negotiated
o
Interactive
logon:
Message
text
forisusers
attempting
log
on
Some
or all
of theinactivity
information
transmitted
over
the
secure
channel
will
be exceeds
encrypted.
policy limit,
setting
determines
whether
or not
Windows
notices
of
athat
logon
session,
and
if to
the
amount
of
inactive
time
theThis
inactivity
then
the screen
saver will
run,128-bit
lockingkey
thestrength
session.i
If this policy is disabled, any user is required to press CTRL+ALT+DEL before logging on to Windows (unless they are using a smart card for Windows logon).
Interactive
logon:
Message
title
users
attempting
logbe
on
Failed
password
attempts
against
workstations
or will
member
servers
that when
have
been
locked
using either
or password
protected
This
setting
specifies
a for
text
message
that
is to
displayed
to users
they
log
on.
If thissecurity
setting
is
enabled,
then
the
secure
channel
not
established
unless
128-bit
encryption
can CTRL+ALT+DELETE
be performed. If this setting
is disabled,
then screen
the keysav
str
Default:
not enforced.
Default on domain-computers:
Disabled.
Interactive
logon:
Number
of
previous
logons
to
cache
(in
case
domain
controller
is
not
available)
This
security
setting
allows
the
specification
of
a
title
to
appear
in
the
title
bar
of
the
window
that
contains
the
Interactive
logon:
Message
text
for
users
attempt
The
machine
lockout
policy
is
enforced
only
on
those
machines
that
have
Bitlocker
enabled
for
protecting
OS
volumes.
Please
ensure
that
the
appropriate
rec
This
texton
is stand-alone
often used for
legal reasons,
for example, to warn users about the ramifications of misusing company information or to warn them that their actions
Default
computers:
Enabled.
Default:
Disabled.
Interactive
logon:
Prompt
user to change
password
before
expiration
All
previous
users'
logon
information
is
cached
locally
so that,
in the event that a domain controller is unavailable during subsequent logon attempts, they are a
Default:
No
Default:
No message.
message.
Important
Interactive
logon:
Require
Domain
Controller
authentication
to
Determines
how far
in advance
(in days)
users are
thatunlock
theirYou
password
is about
to expire.
With
this advance
warning,
user has time
tochanged
constructyou
ap
Windows cannot
connect
to a server
to confirm
yourwarned
logon settings.
have been
logged
on using
previously
stored
accountthe
information.
If you
In
order
to
take
advantage
of
this
policy
on
member
workstations
servers, all domain controllers that constitute the member's domain must be running Win
Interactive
logon: Require
smart
cardto unlock a locked computer.and
Logon
information
must
be
provided
For
domain
accounts,
this
security
setting
determines
whether
a
domain
controller
must
be
c
Default:
14
days.
In
to take
advantage
of this policy
domain
controllers,
all domain
controllers
theissame
domain
asthis
wellmessage:
as all trusted domains must run Windows 200
If aorder
domain
controller
is unavailable
and on
a user's
logon
information
is not cached,
the in
user
prompted
with
Interactive
logon:
Smart
card
removal
behavior
This
security
setting requires users to log on to a computer using a smart card.
Default:
Disabled.
The
system
cannotclient:
log you
on now
because
the domain(always)
<DOMAIN_NAME> is not available.
Microsoft
network
Digitally
sign
communications
This
securityare:
setting determines
what
happens
when the smart card for a logged-on user is removed from the smart card reader.
The options
Important
Microsoft
network
client:
Digitally
sign communications
(ifisAny
server
agrees)
In
thissecurity
policy
setting,
a value
of 0whether
disables
logon signing
caching.
value
above
50 only
caches
50 logon attempts.
This
setting
determines
packet
required
by
the SMB
client
component.
The
options
are:
Enabled:
Users
can to
only
log on to
the computers,
computer using
aissmart
card.
This
setting
applies
Windows
2000
but
it
not
available
through
the
Security
Configuration Manager tools on these computers.
Microsoft
network
client:
Send
unencrypted
password
to attempts
connect to
SMBpacket
serverssigning.
This
security
setting
determines
whether
the
SMB any
client
to third-party
negotiate
Default:
Disabled.
25
Users
can
log
on
to the
computer
using
The
server
message
block
(SMB)
protocol
provides
themethod.
basis for Microsoft
file SMB
and print
sharing and many other networking operations, such as remote Windo
No
Action
Default: Disabled.
Microsoft
network
server:
Amountthe
of idle
timeMessage
requiredBlock
before(SMB)
suspending
a session
If
thisserver
security
setting
is enabled,
Server
redirector
allowed
to send and
plaintext
to non-Microsoft SMB
servers
that do
not
Lock
Workstation
The
message
block
protocol
provides
for Microsoft
fileisand
print sharing
manypasswords
other networking
such
asSMB
remote
Windo
If
this
setting
is enabled,
the(SMB)
Microsoft
network
clientthe
willbasis
not communicate
with
a Microsoft
network server
unless
that serveroperations,
agrees to perform
packet
sig
Force
Logoff
Microsoft
network
server:
Attempt
S4U2Self
to
obtain
claim
information
Important
This
security
setting
determines
the
ofrisk.
continuous idle time that must pass in a Server Message Block (SMB) session before the session is suspended
Sending
unencrypted
passwords
isServices
aamount
security
this
Disconnect
if a
Remote
Desktop
session
If
setting
is
enabled,
the
Microsoft
network
client
will
ask
the
server
to
perform
SMB
packet
signing
upon
session
setup.
If
packet
signing
has
been
enabled
Default:
Disabled.
Microsoft
network
server:
Digitally
sign communications
(always)
This
security
setting
istotothis
support
clients
running
a aversion
of Windows
to Windows
8session.
Consumer
Preview
that
are trying
to
access
aisfile
share
that require
setting
will
apply
any
computers
running
Windows
2000
throughprior
changes
in the
registry,
butIfthe
security
setting
is notthe
viewable
the Security
Co
Administrators
use
policy
control
when
computer
suspends
an workstation
inactive
SMB
client
activity
resumes,
sessionthrough
automatically
reesta
Default:
Disabled.
If
you
click
Lockcan
Workstation
in thetowhose
Properties
dialog
box be
forinthis
policy, the
locked when
smart controllers
card
is removed,
users
to leave
the
server
will
support
client
principals
accounts
may
a domain
which
has clientiscomputers
andthe
domain
runningallowing
a version
of Windows
priora
Default:
Enabled.
Microsoft
network
server:
Digitally
sign communications
(if required
client
agrees)
Important
This
security
setting
determines
whether
packet signing is
by the SMB server component.
For
this
policy
setting,
a value
of
0 meansdialog
to disconnect
an idle
session
as quickly
as is reasonably
possible.
Thesmart
maximum
is 99999, which is 208 days;
If you
click
Force
Logoff
inDisconnect
the
Properties
boxlogon
for the
this
policy,
thecan
user
is automatically
logged
off
when
the
card isvalue
removed.
Microsoft
network
server:
clients
when
hours
expire
This
setting
should
be
set
to
automatic
(default)
so
that
server
automatically
evaluate
whether
areTo
for
the user.SMB
An administrator
wou
Notes
This
security
setting
determines
whether
the
SMB
server
willfile
negotiate
SMB
packet
signing
with
clients
thatclaims
request
it.needed
For
policy
to take
effect
on
computers
running
Windows
2000,
client-side
packet
signing
must
also
be
enabled.
enable
client-side
packet
signing,
The this
server
message
block
(SMB)
protocol
provides
the basis
for Microsoft
file
and print
sharing
and
many
other
networking
operations,
such as
remote
Windo
Default:This
policy
is
not
defined,
which
means
that
the
system
treats
it
as
15
minutes
for
servers
and
undefined
for
workstations.
Computers
that
have
this
policy
set
will
not
be
able
to
communicate
with
computers
that
do
not
have
server-side
packet
signing
enabled.
By
default,
server-sid
Microsoft
network
SPN
target
name
validation
level
If
you
click
Disconnect
ifsystems
aServer
Remote
Desktop
Services
session,
removal
ofexamine
the
smart
card
disconnects
the
session
without
loggingclient
the
user
off.
This
allows
the
ui
This
security
setting
determines
whether
toprovides
disconnect
users
are
connected
the
local
computer
outside
their
usernetwork
account's
valid
logon
hours.
This
setti
When
enabled
thisserver:
security
setting
will
cause
Windows
filewho
server
to
the
access
token
ofmany
an
authenticated
principal
and
determine
All
Windows
operating
support
both
athe
client-side
SMB
component
and
a to
server-side
SMB
To
take
advantage
of
SMB
packet
signing,
both
The
message
block
protocol
the
basis
for
Microsoft
file
and
print
sharing
andcomponent.
other
networking
operations,
such
as
remote
Windo
Server-side
packet
signing
can
be
enabled
on
computers
running
Windows
2000
later
by
setting
Microsoft
network
server:
Digitally
sign
communications
If
thisserver
setting
is enabled,
the(SMB)
Microsoft
network
server
will
not
communicate
with
a and
Microsoft
network
client
unless
that client
agrees
to perform
SMB
packet
sig(
which
have
claim-based
access
control
policy
applied.
Microsoft
network
client:
Digitally
sign
communications
(always)
Controls
whether
or
not
the
client-side
SMB
component
requires
packet
signing.
Network
access:
Allow
anonymous
SID/name
translation
Server-side
packet
signing
can be
enabled
on
computers
running
Windows
NT 4.0 of
Service
Pack
3 other
and later
by setting
the following
registry
value
to 1:
The
message
block
(SMB)
protocol
provides
the
file
and printer
and
many
networking
operations,
such
aspacket
remote
Windows
adm
Note:server
Remote
Desktop
Services
was
called
Terminal
Services
in agrees)
previous
versions
Windows
Server.
When
thisnetwork
policy
isclient:
enabled,
it causes
client
sessions
the for
SMB
Service
to besharing
forcibly
disconnected
when
the client's
logon
hours
expire.
Microsoft
Digitally
sign
communications
(ifbasis
server
Controls
whether
or
not
the by
client-side
SMB
component
has
signing
If
this setting
is enabled,
the Microsoft
network
server with
will
negotiate
SMB -packet
signing
as
requested
the client.
That
is,
if packet
signing
has
been enabled.
enabled
HKLM\System\CurrentControlSet\Services\LanManServer\Parameters\EnableSecuritySignature
Default:
Network
access:
Do
not allow
anonymous
enumeration
of
SAM
accounts
If
thissecurity
setting
is
disabled,
the
Windows
file
server
will
not
attempt
to
obtain aidentifier
claim-enabled
access
token
for
the component
client
principal.
Microsoft
network
server:
Digitally
sign
communications
(always)
- Controls
whether
or
not attributes
the
server-side
SMB
requires packet signing.
This
setting
determines
if
an
anonymous
user
can
request
security
(SID)
for
another
user.
This
setting
the
level
of validation
a allowed
SMB
server
the
service
(SPN)
provided
by the SMB
client when
trying
to e
Default:
This
isdetermines
notan
defined,
which
means
that the
system
treats
it as
No on
action.
If
thissecurity
policy
ispolicy
disabled,
established
client
session
is
to
beperforms
maintained
the client's
hours
have
expired.
Microsoft
network
server:
Digitally
sign
communications
(if
client
agrees)
- Controls
orprincipal
not
the name
server-side
SMB
component
has packet
signing
enabled
Default:
Enabled
on
domain
controllers
only.
Server-side
signing
cannot
be enabled
on computers
running
Windows
95 after
orwhether
Windows
98. logon
Network
access:
Do
not
allow
anonymous
enumeration
ofable
SAM
accounts
and
shares
Disabled
for packet
member
servers.
This
security
setting
determines
what
additional
permissions
will
be
granted
for
anonymous
connections
to
the
computer.
Default:
Automatic.
If
server-side
SMB
signing
is
required,
a
client
will
not
be
to
establish
a
session
with
that
server
unless
it
has
client-side
SMB
signing
enabled.
By
default,
If
policy
is
enabled,
a user with
knowledge
ofwork,
an administrator's
SIDRemoval
could contact
a computer
that
this policy enabled and use the SID to get the admi
The
options
are:
Enabled
for
domain
controllers.
Onthis
Windows
Vista
and
above:
For this
setting to
thewill
Smart
Card
Policy
behas
started.
Default
on
Vista:
Enabled.
Similarly,
if Windows
client-side
SMB
signing
is required,
that client
not be
ablefortonetwork
establish
a service
session must
with servers
that do not have packet signing enabled. By defau
Network
access:
Do determines
not
allow
storage
of credentials
orenumeration
.NET Passports
authentication
Important
Notes
This
security
setting
whether
anonymous
of
SAM
accounts
and
shares
is
allowed.
Default
Windows
onallows
Windows
anonymous
XP:and
Disabled
users
to servers:
perform
certain
activities,
such
as enumerating
the that
names
of client-side
domain accounts
and network
shares. This is convenient, fo
If server-side
SMB
signing
ismember
enabled,
SMB packet
signing
will be
negotiated
with clients
have
SMB signing
enabled.
Default
on
workstations
Disabled.
No
validation
- validation
ofcan
the permissions
SPN will performance
notapply
be performed
by
SMB on
server.
Notes
Network
access:
Let
Everyone
to anonymous
users
Using
SMB
packet
signing
degrade
up
toSMB
15the
percent
file
service
transactions.
This
security
setting
determines
whether
Stored
User
Names
and
Passwords
saves
passwords,
credentials,
orbe
.NET
Passports
later
use
when
it gains2000
dom
Default
on
domain
controllers:
Enabled.
For
Windows
2000
servers
tousers
negotiate
signing
with
Windows
NT
4.0
clients,
the
registry
value
must
to advantage
1 network
on thefor
server
running
All
Windows
operating
systems
support
both
acertain
client-side
component
and
a following
server-side
SMB
component.
Toset
take
of
SMB
packet
signing,
both
Windows
allows
anonymous
to
perform
activities,
such
as
enumerating
the
names
of
domain
accounts
and
shares.
This
isWindows
convenient,
fo
This
security
option
allows
additional
restrictions
to be placed
on- anonymous
connections
as follows:
Microsoft
network
client:
Digitally
sign
communications
(always)
Controls
whether
or
notclient
the
client-side
SMB
component
requires packet
signing.
Network
Named
pipes
that
can
be
accessed
anonymously
All
Validate
Windows
ifaccess:
provided
operating
by
client
systems
- the
support
SMB
server
both
awill
client-side
validate
SMB
theare
SPN
component
provided
and
by athe
server-side
SMB
SMB
and component.
allow
a session
To take
to be
advantage
established
of SMB
if it matches
packet signing,
the SMBboth
ser
This
security
setting
determines
what
additional
permissions
granted
for
anonymous
connections
to
the
computer.
If
it is enabled,
thisclient:
setting
prevents
thecommunications
Stored User Names
and agrees)
Passwords
from storing
and
credentials.
Notes
Microsoft
network
Digitally
sign
(if
server
- Controls
whether
not the
client-side
SMB component
has
packet
signing enabled.
Default:
Microsoft
network
client:
Digitally
sign
(always)
whether
or
notpasswords
theorclient-side
SMB
component
requires
packet
signing.
Enabled:Disabled.
Do
not allow
enumeration
of communications
SAM
accounts.
This
option- -Controls
replaces
Everyone
Users
incomponent
the security
permissions
forsigning.
resources.
Network
access:
Remotely
accessible
registry
paths
Microsoft
network
server:
Digitally
sign
communications
(always)
Controls
whether
orwith
notAuthenticated
the
server-side
SMB
requires
packet
This
security
setting
determines
which
communication
sessions
(pipes)
will
have
attributes
and
permissions
that
allow
anonymous
access.
Require
match
from
client
the
SMB
client
MUST
send
a
SPN
name
in
session
setup,
and
the
SPN
name
provided
MUST
match
the
SMB
server
that enabled.
is beingfo
Microsoft
network
client:
Digitally
sign
communications
(if
server
agrees)
Controls
whether
or
not
the
client-side
SMB
component
has
packet
signing
Windows
allows
anonymous
users
toRely
perform
activities,
such
as enumerating
the Windows.
names
of the
domain
accounts
and
network shares.
This
is
convenient,
Disabled:
Noconfiguring
additional
restrictions.
on default
permissions.
Note:
When
this
security
setting,
changes
will(always)
take
effect
until
you
restart
All
Windows
operating
systems
support
both
acertain
client-side
SMB
component
and
a server-side
component.
take
advantage
ofhas
SMB
packet
signing,
both
Microsoft
network
server:
Digitally
sign
communications
(ifnot
client
agrees)
- Controls
whether
orSMB
not
server-side
SMB
component
packet
signing
enabled
Microsoft
network
server:
Digitally
sign
communications
-the
Controls
whether
or not
the
server-side
SMB To
component
requires
packet
signing.
Network
access:
Remotely
accessible
registry
paths
and
subpaths
set,
anonymous
users
can
only
access
those
resources
for
which
anonymous
user
has
been
explicitly
given
permission.
This
security
setting
determines
which
registry
keys
can
be
accessed
over
the
network,
regardless
of unless
the
users
or groups
listed
in the
access
control
listenabled
(ACL)
For
more
information
about
User
Names
and
Passwords,
see
Stored
User
Names
and
Passwords.
Microsoft
network
Digitally
sign
communications
(always)
Controls
whether
or
not
the
SMB
requires
packet
signing.
If
server-side
SMBclient:
signing
isStored
required,
acommunications
client will
not
be
able
to-agrees)
establish
session
with
that
server,
it component
has
client-side
SMB
signing
enabled.
By
default,
Default:
None.
No
validation
Microsoft
network
server:
Digitally
sign
(if
client
-a
Controls
whether
orclient-side
not the
server-side
SMB
component
has
packet
signing
Default
on
workstations:
Enabled.
Microsoft
network
client:
Digitally
sign access
communications
(if
server
- Controls
whether
orhave
not the
client-side
SMB
component
has packet
signing
enabled.
If
server-side
SMB
signing
is
enabled,
SMB
packet
signing
willand
beagrees)
negotiated
with clients
that
client-side
SMB
signing
enabled.
Network
access:
Restrict
anonymous
towill
Named
Pipes
Shares
If
server-side
SMB
signing
isEveryone
required,
a client
not
be
able
to
establish
session
with
that
server
unless
itInhas
client-side
SMB
signing
enabled.
default,
This
determines
which
registry
paths
subpaths
can
be aaccessed
over
the
network,
regardless
of
the users
or groups
listed
theBy
co
If
thissecurity
policy
issetting
enabled,
the
SID
is added
toand
the
token
that
is created
forservice
anonymous
connections.
this
case,
anonymous
users
are in
able
toaccess
access
Default
on
server:Disabled.
Default:
Disabled.
Microsoft
server:
Digitally
sign
communications
- Controls
whether
or
theSMB
server-side
SMB
component
requires
packet
Using
SMB
packet
signing
can
impose
up
to
aa 15
percent
performance
file
transactions.
All
Windows
operating
systems
support
both
client-side
SMB
and
a server-side
setting
serversigning.
SMB behavior,
a
Similarly,
ifnetwork
client-side
SMB
signing
is required,
that
client(always)
will
notcomponent
be
ablehittoon
establish
a not
session
withcomponent.
servers
thatThis
do not
haveaffects
packetthe
signing
enabled.
By defau
Network
access:
Shares
that
can be
accessed
anonymously
Microsoft
network
server:
Digitally
sign
communications
(if
client
agrees)
- and
Controls
whether
orhave
not the
server-side
SMB
component
has packet signing enabled
When
enabled,
this
security
setting
restricts
anonymous
access
to
shares
pipes
to
the
settings
for:
If
server-side
SMB
signing
is
enabled,
SMB
packet
signing
will
be
negotiated
with
clients
that
client-side
SMB
signing
enabled.
Default:
Disabled.
Important
System\\CurrentControlSet\\Control\\ProductOptions
If
server-side
SMB signing
signing can
is required,
a performance
client will notup
beto
able
establish
a session
that server unless it has client-side SMB signing enabled. By default,
Using
SMB
packet
degrade
15 to
percent
on file
servicewith
transactions.
Network
access:
Sharing
and
security
model
forthat
local
accounts
This
security
setting
determines
which
network
shares
canwill
accessed
by anonymous
System\\CurrentControlSet\\Control\\Server
Applications
Similarly,
if client-side
SMB
signing
is
required,
client
not be able
to establishusers.
a session with servers that do not have packet signing enabled. By defau
Network
access:
Named
pipes
that
can
be
accessed
anonymously
System\\CurrentControlSet\\Control\\Print\\Printers
This
policy has
no impact
on
controllers.
Software\\Microsoft\\Windows
NT\\CurrentVersion
If
server-side
SMB
signing
is domain
enabled,
SMB packet
signing
will
bepassword
negotiated
with clients that have client-side SMB signing enabled.
Network
access:
security:
Shares
Do
not that
store
can
LAN
beManager
accessed
hash
anonymously
value
next
change
Important
This
setting
determines
how
network
that on
use
local
accounts
If this setting is set to Classic, network logons that use local acc
System\\CurrentControlSet\\Services\\Eventlog
Default:
None
specified.
Usingsecurity
SMB
packet
signing
can impose
up to alogons
15 percent
performance
hit onare
fileauthenticated.
service transactions.
Default:
Enabled.
Software\\Microsoft\\OLAP
Server
Network
security:
Force
logoff
when
logon
hours
expire
Caution
This
security
setting
if,network
at the next
password
the
LANare
Manager
(LM)
hash
valuealso
forthe
the
new password
is stored.
The
LMSMB
hash
is relatively
For
this
policyis
toset
take
effect on
computers
running
Windows
2000,
server-side
packet
signing
must
beGuest
enabled.
To enable
server-side
packet
If
this
setting
todetermines
Guest
only,
logons
that
usechange,
local
accounts
automatically
mapped
to
account.
By
using
the
Guest
model,
yousigning
can hw
NT\\CurrentVersion\\Print
Microsoft
network LAN
server:
Digitally
sign communications
(if server agrees)
Network
security:
Manager
authentication
level your
NT\\CurrentVersion\\Windows
This
security
setting
whether
to disconnect
users
who are
connected
the local
outside
their user
valid logon
hours.
This setti
Incorrectly
editing
thedetermines
registry
may
severely
damage
system.
Before
making to
changes
to computer
the registry,
you should
backaccount's
up any valued
data on
the computer
Default
on domain
computers:
Classic.
System\\CurrentControlSet\\Control\\ContentIndex
Note:
This
security
setting
istonot
available
on earlier
versions of
The
setting
thatvalue
appears
onbe
computers
running
Windows
XP,server:
"Network acc
Network
security:
client
signing
requirements
Default
on
Windows
Vista:
Enabled
For
Windows
2000LDAP
servers
negotiate
signing
with Windows
NTWindows.
4.0 clients,
thesecurity
following
registry
must
set
to 1 on
the Windows
This
security
setting
determines
which
challenge/response
authentication
is used
for
network
logons.
choice
affects
theexpire.
level 2000
of authentication
pro
System\\CurrentControlSet\\Control\\Terminal
Default
on
stand-alone
computers:
Guest
only
Server
When
this
policy
is
enabled,
it
causes
client
sessions
with the
SMB serverprotocol
to be forcibly
disconnected
when
theThis
client's
logon
hours
Default:
Default
on Windows XP: Disabled.
HKLM\System\CurrentControlSet\Services\lanmanserver\parameters\enableW9xsecuritysignature
Server\\UserConfig
Network
security:
Minimum
session
security
for
NTLM
SSP
based
(including
secure
RPC)
clients
This
security
setting
determines
the level
of
data
signing
that
is requested
onnever
behalfuse
of clients
issuing
LDAP
BIND domain
requests,
as follows:
Send
& NTLM
responses:
Clients
use
LM
and
NTLM
authentication
and
NTLMv2
session
security;
controllers
accept LM, NTLM, and NT
Important
Server\\DefaultUserConfiguration
If
this LM
policy
is disabled,
anpolicy
established
client
session
is allowed
to be maintained
after
theclient-side
client's
logon
hours
have enabled.
expired.
System\CurrentControlSet\Control\ProductOptions
Important
Computers
that
have
thisNTLMv2
set
will
not
communicate
with
computers
that
doand
not
have
packet
signing
Client-side
packet
can
be
Network
security:
Minimum
session
security
for
NTLM
SSP
based
(including
secure
RPC)
servers
Send
LM
&
NTLM
use
session
security
if
negotiated:
Clients
use
LM
NTLM
authentication
and
use
NTLMv2
session
security
if thesigning
server
suppo
NT\\CurrentVersion\\Perflib
This
security
setting
allows
a client
to require
the
negotiation
ofare
128-bit
encryption
and/or
NTLMv2 session security. These values are
dependent
on
the LAN
M
System\CurrentControlSet\Control\Server
Applications
None:
The
LDAP
BIND
request
is
issued
with
the
options
that
specified
by
the
caller.
Send
NTLM
response
only:
Clients
use
NTLM
authentication
only
and
use
NTLMv2
session
security
if
the
server
supports
it;
domain
controllers
accept
LM,
NT
With
the
Guest
only
model,
any
user
who
can
access
your
computer
over
the
network
(including
anonymous
Internet
users)
can
access
your
shared
resources
System\\CurrentControlSet\\Services\\SysmonLog
Default:
Enabled.
Software\Microsoft\Windows
NT\CurrentVersion
Negotiate
signing:
If Transport
Layer
Sockets
Layer
(TLS\SSL)
has
nottobeen
started,
the LDAP
BINDThese
request
isit;initiated
with
the LDAP
data
siM
Windows
2000
Service
Pack
2Clients
(SP2)toSecurity/Secure
and
above
offer
compatibility
with
authentication
previous
versions
of
Windows,
such
as
Microsoft
Windows
NT
4.0.
Send
This
security
NTLMv2
setting
response
allows
only:
a
server
use
require
NTLMv2
the
negotiation
authentication
of
128-bit
only
and
encryption
use
NTLMv2
and/or
session
NTLMv2
security
session
if
the
security.
server
supports
values
domain
are
dependent
controllers
on
accept
the
LAN
LM
System\\CurrentControlSet\\Services\\CertSvc
Require
NTLMv2
session
connection
will Windows
failHowever,
if NTLMv2
is server's
not negotiated.
Require
signature:
Thisthe
is security:
the
same
as Negotiate
signing.
if protocol
the
LDAP
intermediate
saslBindInProgress
response
does not
indicate
thatfamily
LDA
This
setting
canresponse
affect
ability
of The
computers
running
2000
Server,
Windows
2000
Professional,
Windows
XP,
the Windows
Server
2003
Note:
Send
NTLMv2
use
NTLMv2
authentication
only
andcan
use
NTLMv2
session
security
theand
server
supports
it;
domain
controller
System\\CurrentControlSet\\Services\\Wins
Require
128-bit
encryption:
The connection
will fail
if strong
(128-bit)
is not
negotiated.
Note:
This
security
settingonly\\refuse
behaves
asLM:
an Clients
account
policy.
Forencryption
domain
accounts,
there
be
only one
account
policy.ifThe
account
policy must
be defined
in th
Require
NTLMv2
session
security:
The
connection
will
fail
if
message
integrity
is
not
negotiated.
Send
NTLMv2
response
only\\refuse
LM
&
NTLM:
Clients
use
NTLMv2
authentication
only
and
use
NTLMv2
session
security
if
the
server
supports
it;
domain
servers that are joined to a domain (for example, member computers) also receive the same account policy for their local accounts. However, local account po
Caution
Require
128-bit
The connection
willthat
failare
if strong
encryption
(128-bit)
is not
negotiated.
This
setting
doesencryption.
not affect interactive
logons
performed
remotely
by using
such
services as Telnet or Remote Desktop Services. Remote Desktop Se
Caution
Default:
No
requirements.
Important
If
youpolicy
setNo
the
server
Require
signature,
you
must also
set
the2000.
client.
Notmaking
settingchanges
the clienttoresults
in a loss
connection
thevalued
server.data on the computer
Default:
requirements.
This
will
have
noregistry
impactmay
on
computers
running
Windows
Incorrectly
editing
theto
severely
damage
your
system.
Before
the registry,
youofshould
back with
up any
Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers
Network
security:
NTLM:
Incoming
NTLM
trafficNTLM traffic from this Windows 7 or this Windows Server 2008 R2 computer to any Windows remote s
This policy
settingRestrict
allows you
to deny
or audit
outgoing
Network
security: Restrict
NTLM:
AuditorIncoming
NTLM NTLM
Traffic traffic.
This
to deny
allow
If youpolicy
selectsetting
"Allowallows
all" or you
do not
configure
thisincoming
policy setting,
the client computer can authenticate identities to a remote server by using NTLM authentication.
Network
security:
Restrict
NTLM:
NTLM
authentication
in
this domain
This
policy
setting
allows
you
to
audit
incoming
NTLM
traffic.
If
all" or
not configure
setting,
the server
allow all NTLM
authentication
requests.
If you
you select
select "Allow
"Audit all,"
thedoclient
computerthis
logspolicy
an event
for each
NTLMwill
authentication
request
to a remote
server. This allows you to identify those servers re
Network
security:
Restrict
NTLM:
AuditorNTLM
authentication
in this domain
This
policy
setting
allows
you
to
deny
allow
NTLM
authentication
within
a
domain
from
this
domain
controller.
This policy does not affect interactive logon to
If
you
select
"Disable",
or do not
configurethe
thisserver
policywill
setting,
the
server
will not log events
forfor
incoming
NTLM
traffic.
If
you
select
"Deny
all
domain
accounts,"
deny
NTLM
authentication
requests
domain
logon
and
display anYou
NTLM
but allow
loc
If
you select
"DenyRestrict
all," theNTLM:
client computer
cannot
authenticate
identities
toauthentication
a remote server by using NTLM authentication.
can blocked
use the error,
"Network
security:
Network
security:
Add
remote
server
exceptions
for
NTLM
This
policy
setting
allows
you
to audit
NTLMthis
authentication
in the
a domain
from
this domain
controller.
If
you
select
"Disabled"
or
do
not
configure
policy
setting,
domain
controller
will
allow
all
NTLM
pass-through
authentication
requests
within
the
domain
If
you
select
"Enable
for domain
accounts",
the
server
will log events
for NTLM
authentication
woulderror.
be blocked when the "
If
youpolicy
select
allauditing
accounts,"
the
server
will
deny
NTLM
authentication
requests
frompass-through
incoming traffic
and displayrequests
an NTLMthat
blocked
Network
security:
Restrict
NTLM:
Add
server
exceptions
in remote
this
domain
This
is"Deny
supported
on
at to
least
Windows
7 or
Windows
Server
2008 R2.
This
policy
setting
allows
you
create
an this
exception
list of
servers
to whichwill
clients
areevents
allowed
toNTLM
use NTLM
authentication
if domain.
the "Network Security: Re
If
you
select
"Disable"
or
do
not
configure
policy
setting,
the
domain
controller
not
log
for
authentication
in
this
If
select
"Deny
forauditing
domainfor
accounts
to domain
servers"
the
controller
will authentication
deny all NTLM requests
authentication
logonbe
attempts
all servers
in the domain
If you
youpolicy
select
"Enable
all Windows
accounts",
the
server
will
logdomain
events
for all NTLM
that would
blockedtowhen
the "Network
Securit
Network
security:
Allow
LocalSystem
NULL
session
fallback
This
is
supported
on
atare
least
7this
or Windows
Server
2008
This
policy
setting
allows
you
to
create
an exception
listofofremote
servers
in
this R2.
domain
toclients
which
clients
are
to useauthentication.
NTLM
pass-through
authentication if the "
Note:
Audit
and
block
events
recorded
on
computer
in theservers
"NTLMBlock"
Log
located
under
theallowed
Applications
and
Services
Log/Microsoft/Windows/Secu
If
you
configure
this
policy
setting,
you
can
define
a
list
to
which
are
allowed
to
use
NTLM
If you
you select
select "Deny
"Enable
for
domain
accounts
todomain
domaincontroller
servers," will
the deny
domain
controller
will log events
for attempts
NTLM authentication
logon
attempts
for domain
account
If
for
domain
account"
the
all
NTLM
authentication
logon
from
domain
accounts
and
return
an
NTLM
blo
Network
security:
Allow
Local
to computer
use computer
identity
for NTLM
This
policy
isevents
onNULL
at System
least
Windows
7 or
Windows
Server
2008
R2.
Allow
tosupported
fall
to
session
used
with
LocalSystem.
Note:
Block
are
recorded
on
this
the
"NTLMBlock"
Log
located
Applications
andtoServices
Log/Microsoft/Windows/Security-NTLM
If you
you NTLM
configure
thisback
policy
setting,
you
canwhen
define
ainlist
ofwill
servers
in this
domain
to under
which the
clients
are allowed
use NTLM
authentication.
If
do
not
configure
this
policy
setting,
no
exceptions
be
applied.
If
you
select
"Enable
domain
accounts,"
therequests
domain
controller
will log
events
for NTLM
authentication
logon
attempts
that
use domain
accounts
when
NTLM
Network
security:
PKU2U
authentication
toNegotiate
thiswill
computer
to
use
online
identities.
If
youpolicy
select
"DenyAllow
forfor
domain
servers"
the
domain
deny
NTLM
authentication
all
servers
in the
domain
and return
an NTLM
blocked
This
setting
allows
System
services
that
use
use
the
computer
identity
when to
reverting
to NTLM
authentication.
Note:
Audit
events
are
on this
computer
incontroller
the
located
under
the requests
Applications
and
Services
The
default
isconfigure
TRUE
uprecorded
toLocal
Windows
Vista
and
FALSE
in "NTLMBlock"
Windows
7.to Log
If
you
do
not
this
policy
setting,
no
exceptions
will
be
applied.
The
format
for
onservers"
this exception
list iscontroller
theKerberos
fully qualified
domain
name
(FQDN)
or NetBIOS
server
name
used in
bythe
thedomain
application,
listed
one per
Network
security:
Configure
encryption
types
allowed
for
If
younaming
select
"Enable
forservers
domain
the
domain
will
log
events
for
NTLM
authentication
requests
toable
all servers
when
NTLM
This
will
be policy
turned
offdomain
by default
on
domain
joined
This
would
disallow
online
identities
to be
to
authenticate
to theand
domain
joined
ma
If
select
"Deny
all,"
the
controller
will as
deny
allmachines.
NTLM
pass-through
authentication
requests
from
its
servers
and
for its
accounts
return
an authe
NTLM
If you
youpolicy
enable
this
setting,
services
running
Local
System
that
use
Negotiate
willthe
use
the computer
identity.
This
might
cause
some
authentication
requ
The naming
format Allow
for servers
on this
exception list
is the fully qualified domain name (FQDN) or NetBIOS server name used by the calling application listed o
Recovery
console:
automatic
administrative
logon
This
allows
you
to
set Windows
the
encryption
types
that
Kerberos
allowed to use.
If
youpolicy
selectsetting
all" on
the
controller
will log
events
for NTLM ispass-through
authentication requests from its servers and for its accounts which would
This
is"Enable
supported
atdomain
least
Server
2008
R2.
If youpolicy
do not
configure
this policy
setting, services
running
as Local System that use Negotiate when reverting to NTLM authentication will authenticate anonym
Recovery
console:
Allow
floppy
copy
and
access
to
all
drives
and
all
folders
This
setting
determines
if the
password
for the
Administrator
account
must
be givenwith
before
access
to theorsystem
is granted.
If this option
is enabled,
th
If
notsecurity
selected,
the encryption
type
be Server
allowed.
This
setting may
affect
compatibility
client
computers
services
and applications.
Multiple
selection
This
policy
supported
on at least
Windows
R2.
Note:
Blockis
are recorded
onwill
thisnot
computer
in 2008
the
"NTLMBlock"
Log
located
under the
Applications
and Services
This
policy
isevents
supported
on
at least
Windows
7 or having
Windows
Server
2008
R2.
Shutdown:
Allow
system
to
be
shut
down
without
to
log
on
EnablingThis
this policy
security
option
makes
the Recoveryadministrative
Console SETlogon
command
available,
which allows you to set the following Recovery Console environment varia
Default:
is not
and
is
not
allowed.
This
supported
ondefined
at least
Windows
7 or Windows
Server 2008
R2.
Note:policy
Audit is
events
are
recorded
on
thisautomatic
computer
in the "NTLMBlock"
Log
located
under the Applications and Services Log/Microsoft/Windows/Security-NTLM
Shutdown:
Clear
virtual
memory whether
pagefile a computer can be shut down without having to log on to Windows.
This
security
setting
determines
AllowWildCards: Enable wildcard support for some commands (such as the DEL command).
System
cryptography:
Use FIPS
140
cryptographic
algorithms,
including
encryption,
hashing
signing algorithms
AllowAllPaths:
Allow determines
access
to allwhether
filescompliant
and
folders
on
the computer.
This
security
setting
the
virtual
memory
pagefile
cleared
when
the system
is shutand
down.
When
this policy
is enabled,
Shut
Down
command
is available
onis
the
Windows
logon
AllowRemovableMedia:
Allowthe
files
to be
copied
to removable
media,
such
as a floppy
disk.screen.
System
Cryptography:
strong
key
protection
for
user
keys
stored disables
on the computer
NoCopyPrompt:
For
thememory
Schannel
Do
Security
notForce
prompt
Service
when
Provider
overwriting
(SSP),
this
existing
security
file.
weaker
Secure
(SSL)system,
protocols
supports
only theexclusi
Trans
Virtual
support
uses
a system
pagefile
toan
swap
pages
ofsetting
memory
to appear
diskthe
when
theyWindows
are not Sockets
used.
OnLayer
a running
thisand
pagefile
is able
opened
When
this policy
is disabled,
the
option
to shut
down
the
computer
does not
on SHA512)
the
logon
Inrequirements.
this case, users
must be
to log on to
authentication,
and
only
the
Secure
Hashing
Algorithm
(SHA1,
SHA256,
SHA384,
and
for the
TLSscreen.
hashing
System
objects:
Default
owner
for
objects
created
by
members
of
the
Administrators
group
unauthorized
user
who
manages
to
directly
access
the
pagefile.
This security
settingisdetermines
users'
keys
require
a password
Default:
This policy
not definedif and
theprivate
recover
console
SET
commandtoisbe
notused.
available.
Description
Default
on
workstations:
Enabled.
System
objects:
Require
case
insensitivity
for
non-Windows
subsystems
For Encrypting
File
System
Service
(EFS),
it supports
the(SID)
Triple
Data
Encryption
Standard
(DES)
andenable
Advanced
Encryption
Standard
(AES)
encryption
algorith
When
This
security
this
policy
setting
is
enabled,
determines
it
causes
which
the
security
system
principal
pagefile
to
be
will
cleared
be
assigned
upon
clean
the
OWNER
shutdown.
of objects
If you
when the
thisobject
security
is created
option,
the
by a
hibernation
member
offile
the(hiberfil.sys
Administr
The
options
are: Disabled.
Default
on servers:
Default:
System
objects:
Strengthen
default
permissions
of
internal
system
objects
(e.g.,
Symbolic
Links)
This
security
setting
determines
is enforced
for algorithm
all subsystems.
The Win32
subsystem
is case
insensitive.
the kernel suppo
For
Remote
Desktop
Services, itwhether
supportscase
onlyinsensitivity
the Triple DES
encryption
for encrypting
Remote
Desktop
Services
networkHowever,
communication.
Windows
XP:
User
SID
Default:
Disabled.
User input
is not
required
when new keys are stored and used
System
settings:
Optional
subsystems
Windows
2003
:
Administrators
Group
This
setting
determines
strength
of the default
access
control
list
(DACL)
forobjects,
objects.including file objects. Disabling this setting does n
User
isRemote
prompted
when
the
keyinsensitivity
isthe
first
usedisTerminal
If thissecurity
setting
is
enabled,
case
enforced
for alldiscretionary
directory
objects,
symbolic
links,
and
IO
Note:
Desktop
Services
was
called
Services
in previous
versions
of Windows
Server.
User
must
enter aUse
password
each
time on
they
use a key
System
settings:
Certificate
Rules
Windows
Executables
for
Software
Restriction
Policies
Thismore
security
setting
determines
which
subsystems
can optionally
be started
up to device
supportnames,
your applications.
With
this securityInsetting,
you
can specify
many
Active
Directory
maintains
a global
listinfrastructure.
of
shared
system
asgenerated.
DOS
mutexes,
and
semaphores.
this way,
objects
beaslocated
For
information,
seeneeds
Public
Default:
Enabled.
For BitLocker,
this
policy
tokey
be
enabled
before
anyresources,
encryptionsuch
key is
Please note
that when
this
policy is enabled,
BitLocker
willcan
prevent
the c
User security
Accountsetting
Control:
Admin Approval
Mode
for the are
Built-in
Administrator
account
This
determines
if
digital
certificates
processed
when
a
user
or
process
attempts
to
run
software
with
an
.exe
file
name
extension.
This
sec
Default:
POSIX.
If
this policy
ispolicy
enabled,
the
default
DACL
is stronger, allowing users who are not administrators to read shared objects but not allowing these users to modify s
Default:
This
is notthis
defined.
effect,
you
must
enable
security
setting.
Default:
Disabled.
User
Account
Control:
Behavior
of
the
elevation
prompt
for
administrators
in
Admin
Approval
Mode
This security setting determines the behavior of Admin Approval mode for the Built-in Administrator account.
Default:
Enabled.
User
Account
Control:
Behavior
of
elevation
prompt
for standard
users
When
certificate
rules
are
enabled,
software
restriction
policies
will
a certificate
revocation
list (CRL)
to makecryptographic
sure the software's
certificate
andvalidated
signatur
Note:
The
Federal
Information
Processing
Standard
(FIPS)
140
is acheck
security
implementation
designed
for certifying
software.
FIPS 140
This
security
setting
determines
thethe
behavior
of the
elevation
prompt
for administrators
The options
This
securityare:
setting determines the behavior of the elevation prompt for standard users
User
Account
Control: Detect application installations and prompt for elevation
Default:
Disabled.
The
options
are:Built-in Administrator will logon in Admin Approval Mode. By default any operation that requires elevation of privilege will prompt the Consent A
Enabled:
The
The
options
are:
User security
Accountsetting
Control:
Only elevate
that are signed
and validated
This
determines
the executables
behavior of application
installation
detection for the entire system.
forThe
consent:
AnAdministrator
operation that
requires
of privilege
will
prompt
Consent Admin
to select
Permit or Deny.
If the Consent Admin sel
Prompt
Disabled:
Built-in
will
logon
inelevation
XP
compatible
mode
and
run
allthe
applications
default
with either
full administrative
privilege.
User
Account
Control:
Only
elevate
UIAccess
applications
that
are
installed
secure
locations
Prompt
for
credentials:
An
operation
that
requires
elevation
of
privilege
willin
prompt
the
user
to by
enter
an administrative
name
and password.can
If the
user et
This
securityare:
setting will enforce PKI signature checks on any interactive application
that
requests
elevation
of privilege. user
Enterprise
administrators
control
The options
Prompt
for
credentials:
An
operation
that
requires
elevation
of
privilege
will
prompt
the
Consent
Admin
to
enter
their
user
name
and
password.
If
the
user
en
User
Account
Control:
Run
all users,
including
administrators,
users.
Default:
Disabled
This
security
setting
enforce
the requirement
thatresults
applications
that request
execution
with a UIAccess
integrity
level
(via a marking
of UIAccess=true
in thei
Automatically
denywill
elevation
requests:
This option
in as
an standard
access
denied
error message
being returned
to the
standard
user when
they try to perform
a
The
options
are:
Enabled:
Application
installation packages that require an elevation of privilege to install will be heuristically detected and trigger the configured elevation pro
User
Account
Control:
Switch
to
the
secure
desktop
when
prompting
for
elevation
Elevate
without
prompting:
This
option
allows
the
Consent
Admin
to
perform
an
operation
that
requires
elevation
without
consent
or
credentials.
Note:
this
sc
This
security
setting
determines
the behavior
of all UAC
policies
for the
entire system.
-Default:
\Program
Files\,
Prompt
for including
credentials
(home)
/chain
Automatically
deny
requests
(enterprise)
Enabled:
Enforces
therunning
PKI subdirectories
certificate
validation
ofthat
a elevation
given
executable
before
it is permitted
to run. like Group Policy Software Install (GPSI) or SMS wil
Disabled:
Enterprises
users
desktops
leverage
delegated
installation
technologies
-Default:
User
\Windows\system32\
Account
Control:
Virtualizesstandard
file and the
registry
write request
failures
to per-user
locations
This
security
setting
determines
whether
elevation
will
prompt
on
the
interactive users desktop or the Secure Desktop.
Prompt
for
consent
The
options
are:
- \Program
Files not
(x86)\,
including
subdirectories
64 bit versions
ofgiven
Windows
Disabled:
Does
enforce
PKI certificate
chainfor
validation
before
a
executable
permitted
to run.
User
Account
Control:
Allow
UIAccess
applications
to prompt
for elevation
without
usingisthe
secureindesktop.
Default:
Enabled
(home)
/ Disabled
(enterprise)
This
security
setting
enables
the redirection
of legacy
application
write failures
to defined
locations
both the registry and file system. This feature mitigates th
The
options
are:
Enabled:
Admin
Approval
Mode
and all check
other UAC
policies
are dependent
onthat
thisrequests
option being
enabled.
Changing integrity
this setting
requires
a system
Note:
Windows
enforces
a
PKI
signature
on
any
interactive
application
execution
with UIAccess
level
regardless
of thereboot.
state of thi
Maximum
application
log
size
Default:
Disabled
This
security setting
controls
whether
User
Interface
Accessibility
(UIAccess
or UIA) programs
canasautomatically
disable
the secure desktop
elevation
prom
Virtualization
facilitates
the
running
ofdefault
pre-Vista
(legacy)
applications
that historically
failed to run
Standard User.
An administrator
runningforonly
Windows
Vi
Enabled:
All
elevation
requests
by
will
go
to
the
secure
desktop
Disabled:
Admin
Approval
Mode user type and all related UAC policies will be disabled. Note: the Security Center will notify that the overall security of the op
Maximum
security
log
size
The
options
are:
This
security
setting
specifies
the maximum
size of
the application
event
log, which
has
a theoretical
maximum
of 4 GB.
Practically
the limit
is lowerUnless
(~300MB
If
you
enable
this
setting,
UIA
programs
including
Windows
Remote
Assistance
can
automatically
disable
the
secure
desktop
for
elevation
prompts.
you
The
optionsAll
are:
Disabled:
elevation
will go to the interactive users desktop
Maximum
system
logspecifies
sizerequests
Default:
Enabled
This
security
the maximum
size
of the security
log, which
a theoretical
of 4 GB. Practically the limit is lower (~300MB).
Enabled:
Ansetting
application
will only
launch with
UIAccess
integrityevent
if it resides
in ahas
secure
location inmaximum
the file system.
Notes
If
you
disable
or
do
not
configure
this
setting, of
theapplication
secure desktop
can onlytobe
disabled
bylocations
the user for
of the
desktop
by disabling the "User Account
Enabled:
Facilitates
the runtime
redirection
write
failures
defined
user
bothinteractive
the file system
andorregistry.
Prevent
local
guests
group
and
ANONYMOUS
LOGIN
users
from
accessing
application
log
Default:
Enabled
This
securityAn
setting
specifies
the
maximum
size of the
system
event
log,
which
has a in
theoretical
maximum
of
4 GB.
Practically the limit is lower (~300MB).
Notes
Disabled:
application
will
launch
with
UIAccess
integrity
even
if
it
does
not
reside
a
secure
location
in
the
file
system.
Log programs
file sizes must
be a multiple
of 64 KB.
IfWindows
you enterand
a value
that is programs
not a multiple
of 64 KB,
Viewer
will round
logprograms
file size up
to a multiple
of 64 KB.
UIA
are designed
towrite
interact
with
application
on behalf
aEvent
user. This
setting
allowshe
UIA
to bypass
the secure
desk
Prevent
local
guests
group
ANONYMOUS
LOGIN
users
from
accessing
security
logevent
Disabled:
Applications
thatand
data
to Computer
protected
locations
will simply
fail application
as
they
did
in of
previous
security
setting
if guests
are
prevented
from
accessing
the
log. versions of Windows.
This
setting
does
notdetermines
appear
in the
Local
Policy
object.
Notes
Log
file
sizes
must
be
a
multiple
of
64
KB.
If
you
enter
a
value
that
is
not
a
multiple
of
64
KB,
Event
Viewer
will
round
he
log
file
size
up
to
a
multiple
of
64
KB.
Default:
Enabled
Event
Log
sizeguests
and log
wrapping
should
be defined
to match
the business
and
security
requirements
you determined
designing must
your enterprise
securityInp
Prevent
local
group
and
ANONYMOUS
users
from
accessing
system
logevent
Since
UIA
programs
must
be
able
toLocal
respond
toLOGIN
prompts
regarding
security
such
as the
UAC elevation
prompt,when
UIA programs
be highly trusted.
This
setting
security
does
setting
notdetermines
appear
in
the
if2003
guests
Computer
are prevented
Policy
from
object.
accessing
the issues,
application
log.
Default
:For
Enabled
Notes
Default:
the
Windows
Server
family,
16 enter
MB;
for
Windows
XPnot
Professional
Service
Pack
1, Viewer
8 MB; for
Windows
XP
Professional,
512
KB. of 64 KB.
Log
file
sizes
must
be
a
multiple
of
64
KB.
If
you
a
value
that
is
a
multiple
of
64
KB,
Event
will
round
he
log
file
size
up
to
a
multiple
..\Program
Files\
(and
subfolders)
Event
Log
size andlog
log wrapping should be defined to match the business and security requirements you determined when designing your enterprise security p
Retain
application
This
setting
security
does
setting
notdetermines
appear
in the
if(and
guests
Local
Computer
are prevented
object.
accessing
the application
eventPack
log. 1, 8 MB; for Windows XP Professional, 512 KB.
..\Program
Files
(x86)\
subfolders,
in Policy
64-bit
versions
of Windows
only)
Notes
Default:
For
the
Windows
Server
2003
family,
16 MB;
forfrom
Windows
XP
Professional
Service
This
setting
does
not
appear
in the
Local
Computer
Policy
object.
..\Windows\System32\
Event
Log
size and
log
wrapping
should
be
defined to
match
the business and security requirements you determined when designing your enterprise security p
Retain
security
log
This
security
setting
determines
the
number
of16
days'
worth
of events
toProfessional
be retained for
the application
theWindows
retentionXP
method
for the application
Notes
Default:
For does
the
Windows
Server
2003
family,
MB;
for Windows
XP
Service
Pack 1, 8 log
MB;iffor
Professional,
512 KB. log is By D
This
setting
notaffects
appear
in the
Local
Computer
Policy
object.
This
security
setting
only
computers
running
Windows
2000
and Account
WindowsControl:
XP.
Retain
system
log
The
requirement
to
be
in
a
protected
path
can
be
disabled
by
the
"User
Only
elevate
UIAccess
applications
that
are
installed
in secure
locatio
This
security
setting
the
number
of days' worth
of events
to be
retained
for the
logapplication
if the retention
method
for the
security
log
is By Days.
Set
this
value
onlynot
if determines
you
archive
theLocal
log atComputer
scheduled
intervals
and you
make
sure that
the security
Maximum
log size
is large
enough
to accommodate
the
This
setting
does
appear
in the
Policy
object.
This
security
setting
affects
only
computers
running
Windows
2000
and
Windows
XP.
Retention
method
fordetermines
application
log
Default:
Enabled
for
Windows
XP,
Disabled
for
Windows
2000
Thisthis
security
setting
the
number
ofitdays'
worth
ofprimarily
events
toinbe
retained
for the
system
log security
if the retention
method
for
the system
log Assistance
is By Days.
While
this
setting
applies
to any
UIA
program,
will be
used
certain
Windows
Remote
Assistance
scenarios.
The
Windows
Remote
pro
Set
value
only
if
you
archive
the
log
at
scheduled
intervals
and
you
make
sure
that
the
Maximum
log
size
is
large
enough
to
accommodate
the
inte
Note:
This setting
does
not appear
in the Local
Computer
Policy
object.
This
security
setting
only
computers
running
Windows
2000
and Windows XP.
Retention
method
foraffects
security
log
Default:
Enabled
for
Windows
XP,
Disabled
for Windows
2000
This
security
setting
determines
the
"wrapping"
method
for
the
application
log.
Default:
None.
Set
this value
onlyremote
if you archive
the log
atan
scheduled
intervals
make
sure thatsession
the Maximum
system log
is largeprompts
enoughappear
to accommodate
the inte
If
a user
requests
assistance
from
administrator
andand
the you
remote
assistance
is established,
anysize
elevation
on the interactive
Notes
Retention
method
fordetermines
systemuser
log
Default:
Enabled
Windows
XP,
Disabled
2000
requires
that
the for
interactive
respond
tofor
anWindows
elevation
prompt
on thelog.
secure desktop. If the interactive user is a standard user, the user does not have the r
This
security
setting
the
"wrapping"
method
for
the
security
setting
does
not
appear
in
the
Local
Computer
Policy
object.
If
you This
do not
archive
thenot
application
the Properties
dialog box
for this policy, select the Define this policy setting check box, and then click Overwrite eve
Note:
setting
does
appearauditing
inlog,
theinLocal
Computer
object.
A
user must
possess
the Manage
and security
logPolicy
user right
to access the security log.
Restricted
Groups
This
security
setting
determines
the
"wrapping"
method
for
the
system
log.
Default:
None.
If
you
enable
this
setting,
("User
Account
Control:
Allow
UIAccess
applications
to prompt
for
elevation
withoutsetting
using check
the secure
desktop),
, requests
for elevatio
Default:
If
you archive
doNone.
not archive
security log,
in the Properties
dialog box
for box
this
policy,
Define
policy
box,
and
then
click
Overwrite
events
If
you
the log the
at scheduled
intervals,
in the Properties
dialog
for
this select
policy,the
select
the this
Define
this policy setting
check
box,
and
then
click Overwrite
This
security
setting
allows
anthe
administrator
tothe
define
two
properties
for for
security-sensitive
groupsthis
("restricted"
groups).
If
you
do
not
archive
the
system
log,
in
the
Properties
dialog
box
for
this
policy,
select
the
Define
policy
setting
check
box,
and
then
click
Overwrite
events
This
setting
does
not
change
behavior
of
UAC
elevation
prompt
administrators.
If
the log
at scheduled
intervals,
Properties
dialog
box
this
policy,
select
Define
this
policy
setting
check
box,
and
then
click
If you
you archive
must retain
all the
events in the
log, in in
thethe
Properties
dialog
box
forfor
this
policy,
select
thethe
Define
this
policy
setting
check
box,
and
then
click
DoOverwrite
not overw
The
two
properties
are
Members
and
Member
Of.
The
Members
list
defines
who
belongs
and
who
does
not
belong
to
the
restricted
group.
The
Member
Of listIf
archive
the
log
at
scheduled
intervals,
in
the
Properties
dialog
box
for
this
policy,
select
the
Define
this
policy
setting
check
box,
and
then
click
Overwrite
If
you
plan
to
enable
this
setting,
you
should
also
review
the
effect
of
the
"User
Account
Control:
Behavior
of
the
elevation
prompt
for
standard
users"
setting.
If you This
mustsetting
retain all
thenot
events
in the
log,Local
in theComputer
PropertiesPolicy
dialogobject.
box for this policy, select the Define this policy setting check box, and then click Do not overw
Note:
does
appear
in the
When
Restricted
Groups
Policyinisthe
enforced,
anyProperties
current member
of afor
restricted
group
that the
is not
on the
list is check
removed.
theDo
Members
.If
you a
must
retain all
the events
log, in the
dialog box
this policy,
select
Define
thisMembers
policy setting
box,Any
anduser
thenon
click
not overl
Notes
Default: None.
System Services security settings
Registry
settingsto define the startup mode (manual, automatic, or disabled) as well as the access permissions (Start, Stop, or Pause) for all system se
Allows ansecurity
administrator
File System
security settings
Allows
administrator
to define access permissions (on discretionary access control lists (DACLs)) and audit settings (on system access control lists (SACLs
Default:an
Undefined.
Allows
an administrator to define access permissions (on discretionary access control lists (DACLs)) and audit settings (on system access control lists (SACLs
Default:
Notes Undefined.
Default:
Undefined.
Note:
This
setting
does
not appear
the Local
Computer
This setting
does not
appear
in the in
Local
Computer
PolicyPolicy
object.object.
If
you
choose
to
set
system
service
startup
to
Automatic,
perform
adequate testing to verify that the services can start without user intervention.
Note: This setting does not appear in the Local Computer Policy object.
For performance optimization, set unnecessary or unused services to Manual.
Reboot Required
Comments
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
clients will get the new setting

after a maximum of 8 hours
clients
newthese
setting
but for will
DCsget
to the
assign
after
a maximum
of 8 hours
new
settings
a
Gpupdate
clients
get
newthese
setting
but
foriswill
DCs
to the
assign
/force
required
or
waiting
after
a maximum
of 8
hours for
newusual
settings
a the
Gpupdate
clients
will
get
new
setting
the
5
minutes
when
the
but
forisDCs
to assign
these
/force
required
or
waiting
after
a
maximum
of 8
hours for
SCE settings
engine
assigns
all
new
a
Gpupdate
clients
new
setting
the
usual
5get
minutes
when
the
modified
but
foriswill
DCs
settings.
to the
assign
these
/force
required
or
waiting
after
a
maximum
of 8
hours for
SCE
engine
assigns
all
new
settings
a
Gpupdate
the
usual
5 minutes
when
modified
but
forisDCs
settings.
to assign
thesethe
/force
required
or waiting
for
SCE
engine
assigns
all
new
settings
a
Gpupdate
the
usualsettings.
5 minutes when the
modified
/force
is required
or waiting
for
SCE engine
assigns
all
the
usualsettings.
5 minutes when the
modified
SCE engine assigns all
modified settings.
No
No
No
No
No
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
No
Note: In Windows 2000

Server, Windows 2000
Logoff
required
Professional,
Windows XP
Professional,
and
Note: See also
thethe
Windows Server
2003 family,
corresponding
Windows
Logoff
required
the
Task
Scheduler
Server
2003
Allow log on
automatically
rightin
locally
policy grants
setting,this
earlier
Logoff
required
as
thisnecessary.
worksheet.
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
Logoff required
No
No
No
No
No
No
No
No
No
Yes
Yes
No
Yes
No
No
No
No
No
No
No
No
Yes
No
For the policy change to take

effect, the spooler service
needs to be
stopped/restarted, but the
system does not have to be
rebooted.
Restart of service might be
sufficient
No
No
No
No
No
No
No
No
Important: In order to take

advantage of this policy on
member workstations and
servers, all domain controllers
that constitute the members
domain must be running
Windows NT 4.0 Service Pack
Important:
6 or higher.This setting applies
to
2000
computers,
In Windows
order to take
advantage
of
but
is noton
available
this itpolicy
doma through
the Security Configuration
Manager tools on these
computers.
No
No
No
No
No
No
No
No
No
No
Yes
Yes
Yes
Yes
No
Yes
No
No
No
No
No
No
No
No
Important: This setting

applies to Windows 2000
Important:
computers,This
but itsetting
is not will
apply
to any
computers
available
through
the Security
Only
LogOff
is
required
for
running
Windows
2000 tools
Configuration
W2K, XPchanges
and Manager
W2K3
through
in
the
on
Important:
these computers.
For
policy to
computers.
In this
Vista,
registry,
buton
the
security
take
effect
computers
start/restart
the
scpolicysvc
setting
is not viewable
running
2000,through
clientwill
workWindows
or LogOff
the
Configuration
sideSecurity
packet signing
must also
Manager
tool
set.
be enabled. For more
information, search for
"Security Settings
Descriptions" in the Windows
Server
2003
Help.
Important:
For
this policy to
take effect on computers
running Windows 2000,
server-side packet signing
must also be enabled. For
more information, search for
"Security Settings
Server
2003
Help.
Important:
This
policy has no
impact on domain controllers.
For more information, search
for "Security Settings
Server 2003 Help.
Yes
No
No
Yes
Yes
No
No
No
No
Yes
No
No
Important: The Network

access: Remotely
Important:
Windows
XP,
accessible On
registry
paths
this
security
setting
called
security
setting
that was
appears
"Network
access:
Remotely
on computers
running
accessible
registry
paths." to
If
Windows XP
corresponds
you
configureaccess:
this setting on a
the Network
member
Important:
ofaccessible
the
ThisWindows
setting only
Remotely
affects
running
Server computers
2003
family
that
is
registry
paths
and
subpaths
Important:
Windows
2000
Windows
Professional
joined
topolicy
aXP
domain,
this
setting
security
setting
on
Service
Pack
2
(SP2)
and
which
are of
not
joined
is
inherited
by
computers
members
the
Wi to a with
above offer
compatibility
domain.
authentication
to
previous
Important:
This
setting
can
This policy will
have
no impact
versions
Windows,
such as
on computers
affect
theofability
running
of computers
Microsoft
Windows
NT
4.0.
running
2000
WindowsWindows
2000. For
more
This
setting
can
affect
the
Server,
Windows
2000
information,
search
forwill
Warning:
This
setting
ability
of computers
running
Professional,
Windows
XP
"Security
Setting
Descriptions"
apply
to
any
computers
Windows
2000
Server,
Warning:
Thisand
setting
Professional,
the will
in
the Win
running
Windows
2000
Windows
2000
Pr
apply
to changes
any
computers
Windows
Server
2003
through
in thefamily
to
running
communicate
Windows
with
2000 setting
registry
but
the security
through
changes
in Windows
the
computers
running
will
not be
viewable
through
registry
but the
security
setting
NT
and
earlier
over the
the 4.0
Security
Configuration
will
not betool
viewable
through
netwo
Manager
set. For
more
the
Security search
Configuration
information,
for
Manager
tool set.De
For more
"Security Setting
No
No
No
No
No
No
No
No
No
No
No
No
No
Require restart of recovery

console
Require restart of recovery
console
Requires logoff
Yes
Vista does NOT require reboot
No
No
Yes
No
Yes
Yes
Requires reboot with CNG on

Vista; Does not require reboot
This
policyon
does
notDoes
exist not
on
with CAPI
Vista;
Vista
require reboot on XP, 2003
with CAPI
Yes
No
No
No
No
No
No
No
Yes
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
Note: This setting does not

appear in the Local Computer
Note:
setting does not
Policy This
object.
Note: This
setting does not
Policy
object.
appear
in the
Local Computer
Important:
Modifying
thisnot
Notes:
This
setting does
Policy
object.
setting
may
affect
Notes:
This setting
does not
compatibility
with clients,
Policy object.
appear
in and
the setting
Local
Computer
services,
applications.
For
This
security
affects
Note:
This
setting
does
not
compatibility
Policy
object.
information
about
only
computers
running
appear
in the
Local
Computer
This
security
setting
affects
this
setting,
see
the does
"Event
Notes:
This
setting
not
Windows
2000,
Windows
Policy
object.
only
computers
running
Log:
Maximum
sec
appear
in the and
Local
Computer
Server 2003,
Windows
Notes:
This
setting
does
not
Windows
2000,
Windows
XP.
Policy
object.setting affects
This
security
appear
in thepossess
Local
Computer
Server
2003,
and
Windows
A
user
must
the
Note:
This
setting
does not
only
computers
running
Policy
object.
XP.
Manage
and
appear
inauditing
thepossess
Local
Computer
Windows
2000,
Windows
A
user
must
the
Note:
setting
does
security
log
user
right
tonot
Policy
object.
ServerThis
2003,
andand
Windows
Manage
auditing
security
appear
in
the
Local
Computer
access
the
security
log.
XP.
Note:
This
setting
does not
log
user
right
to acces
Policy
object.
Note:
This
setting
does not
Policy object.
Policy object.
Note: This setting does not

Note:
setting does not
PolicyThis
object.
Note: This
setting does not
Policy
object.
Policy object.

Windows 8.1 and Windows Server 2012 R2 GPEdit List

Caricato da

Informazioni sul documento

Copyright

Formati disponibili

Condividi questo documento

Condividi o incorpora il documento

Opzioni di condivisione

Hai trovato utile questo documento?

Questo contenuto è inappropriato?

Copyright:

Formati disponibili

Windows 8.1 and Windows Server 2012 R2 GPEdit List

Caricato da

Copyright:

Formati disponibili

Group Policy Settings Reference

Windows Server 2012R2 and Windows 8.1

2013 Microsoft Corporation. All rights reserved.

All other trademarks are property of their respective owners.

nistrative template files (.admx and .adml) delivered with

C) to edit Group Policy Objects (GPOs).

based on one value or a combination of values that are available

headings to add additional filtering criteria within that column.

alue or combination of values on which you want to filter,

ast Microsoft Windows Server 2012 or Windows 8.

Web site references, may change without notice.

Policy Setting Name

Prevent AutoPlay from rem User

Prevent enabling lock scr Machine

Prohibit User from manuallyUser

Configure how often a DFS Machine

Do not allow color changes User

List of applications to neve Machine

Turn off Data Execution Pre Machine

Restricts the UI language Machine

Set Group Policy refresh intUser

Configure Shortcuts prefer Machine

Turn off Windows Update deMachine

Turn off ClearType

Show Content Advisor on InMachine

Use UTF-8 for mailto links Machine

Prevent "Fix settings" functUser

Prevent deleting websites tMachine

Pop-up allow list

Security Zones: Do not all Machine

Allow only approved domai User

Launching applications andMachine

Turn on Cross-Site ScriptingUser

Allow loading of XAML files Machine

Navigate windows and framUser

Allow updates to status barMachine

Allow websites to open win Machine

Download signed ActiveX c User

Software channel permissi Machine

Allow active scripting

Automatic prompting for fi Machine

Show security warning for pUser

Enable MIME Sniffing

Turn off first-run prompt

Allow file downloads

Run .NET Framework-relian User

Allow binary and script behMachine

Don't run antimalware progUser

Intranet Sites: Include all Machine

Allow cut copy or paste opeUser

Script ActiveX controls mar Machine

Allow scripting of Internet User

Enable dragging of conten Machine

Help menu: Remove 'Tip of User

Prevent configuration of to Machine

Turn off ActiveX Opt-In pro Machine

Turn off ability to pin site User

Use forest search order

Restrict users to the explic User

NAP Client Configuration User

Network Policy Server (NPSUser

Prohibit use of Restart Man Machine

Specify negative DC DiscovMachine

Ability to rename all user User