<html dir="ltr" xmlns:svg="http://www.w3.org/2000/svg" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape" gpmc_reportInitialized="false">
<head>
<meta http-equiv="X-UA-Compatible" content="IE=edge" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-16" />
<title>EG-PO-WIN-C-CTX LOOPBACK Computer Restrictions and Hardening</title>
<!-- Styles -->
<style type="text/css">
                body    { background-color:#FFFFFF; border:1px solid #666666; color:#000000; font-size:68%; font-family:MS Shell Dlg; margin:0,0,10px,0; word-break:normal; word-wrap:break-word; }

                table   { font-size:100%; table-layout:fixed; width:100%; }

                td,th   { overflow:visible; text-align:left; vertical-align:top; white-space:normal; }

                .title  { background:#FFFFFF; border:none; color:#333333; display:inline-table; height:24px; margin:0px,0px,0px,0px; padding-top:0px; position:relative; table-layout:fixed; z-index:5; }

                .he0_expanded    { background-color:#FEF7D6; border:1px solid #BBBBBB; color:#3333CC; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:0px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; }

                .he1_expanded    { background-color:#A0BACB; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:20px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; }

                .he0h_expanded   { background-color: #FEF0D0; border: 1px solid #BBBBBB; color: #000000; cursor: hand; display: block; font-family: MS Shell Dlg; font-size: 100%; font-weight: bold; height: 2.25em; margin-bottom: -1px; margin-left: 5px; margin-right: 0px; padding-left: 8px; padding-right: 5em; padding-top: 4px; position: relative;  }
                .he1h_expanded   { background-color: #7197B3; border: 1px solid #BBBBBB; color: #000000; cursor: hand; display: block; font-family: MS Shell Dlg; font-size: 100%; font-weight: bold; height: 2.25em; margin-bottom: -1px; margin-left: 10px; margin-right: 0px; padding-left: 8px; padding-right: 5em; padding-top: 4px; position: relative; }

                .he1    { background-color:#A0BACB; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:20px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; }

                .he2    { background-color:#C0D2DE; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:30px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; }

                .he3    { background-color:#D9E3EA; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:40px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; }

                .he4    { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:50px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; }

                .he4h   { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:55px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; }

                .he4i   { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:55px; margin-right:0px; padding-bottom:5px; padding-left:21px; padding-top:4px; position:relative; }

                .he2i   { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:35px; margin-right:0px; padding-bottom:5px; padding-left:21px; padding-top:4px; position:relative;}
                .he5    { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:60px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; }

                .he5h   { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; padding-right:5em; padding-top:4px; margin-bottom:-1px; margin-left:65px; margin-right:0px; position:relative; }

                .he5i   { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:65px; margin-right:0px; padding-left:21px; padding-bottom:5px; padding-top: 4px; position:relative; }

                div .expando { color:#000000; text-decoration:none; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:normal; position:absolute; right:10px; text-decoration:underline; z-index: 0; }

                .he0 .expando { font-size:100%; }

                .info, .info3, .info4, .disalign  { line-height:1.6em; padding:0px,0px,0px,0px; margin:0px,0px,0px,0px; }

                .disalign TD                      { padding-bottom:5px; padding-right:10px; }

                .info TD                          { padding-right:10px; width:50%; }

                .info3 TD                         { padding-right:10px; width:33%; }

                .info4 TD, .info4 TH              { padding-right:10px; width:25%; }

                .info TH, .info3 TH, .info4 TH, .disalign TH { border-bottom:1px solid #CCCCCC; padding-right:10px; }

                .subtable, .subtable3             { border:1px solid #CCCCCC; margin-left:0px; background:#FFFFFF; margin-bottom:10px; }

                .subtable TD, .subtable3 TD       { padding-left:10px; padding-right:5px; padding-top:3px; padding-bottom:3px; line-height:1.1em; }

                .subtable TH, .subtable3 TH       { border-bottom:1px solid #CCCCCC; font-weight:normal; padding-left:10px; line-height:1.6em;  }

                .subtable .footnote               { border-top:1px solid #CCCCCC; }

                .subtable3 .footnote, .subtable .footnote { border-top:1px solid #CCCCCC; }

                .subtable_frame     { background:#D9E3EA; border:1px solid #CCCCCC; margin-bottom:10px; margin-left:15px; }

                .subtable_frame TD  { line-height:1.1em; padding-bottom:3px; padding-left:10px; padding-right:15px; padding-top:3px; }

                .subtable_frame TH  { border-bottom:1px solid #CCCCCC; font-weight:normal; padding-left:10px; line-height:1.6em; }

                .subtableInnerHead { border-bottom:1px solid #CCCCCC; border-top:1px solid #CCCCCC; }

                .explainlink            { color:#0000FF; text-decoration:none; cursor:hand; }

                .explainlink:hover      { color:#0000FF; text-decoration:underline; }

                .spacer { background:transparent; border:1px solid #BBBBBB; color:#FFFFFF; display:block; font-family:MS Shell Dlg; font-size:100%; height:10px; margin-bottom:-1px; margin-left:43px; margin-right:0px; padding-top: 4px; position:relative; }

                .filler { background:transparent; border:none; color:#FFFFFF; display:block; font:100% MS Shell Dlg; line-height:8px; margin-bottom:-1px; margin-left:53px; margin-right:0px; padding-top:4px; position:relative; }

                .container { display:block; position:relative; }

                .rsopheader { background-color:#A0BACB; border-bottom:1px solid black; color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-bottom:5px; text-align:center; }

                .rsopname { color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-left:11px; }

                .gponame{ color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-left:11px; }

                .gpotype{ color:#333333; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; padding-left:11px; }

                #uri    { color:#333333; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; }

                #dtstamp{ color:#333333; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; text-align:left; width:30%; }

                #objshowhide { color:#000000; cursor:hand; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; margin-right:0px; padding-right:10px; text-align:right; text-decoration:underline; z-index:2; word-wrap:normal; }

                #gposummary { display:block; }

                #gpoinformation { display:block; }

                @media print {

                    #objshowhide{ display:none; }

                    body    { color:#000000; border:1px solid #000000; }

                    .title  { color:#000000; border:1px solid #000000; }

                    .he0_expanded    { color:#000000; border:1px solid #000000; }

                    .he1h_expanded   { color:#000000; border:1px solid #000000; }

                    .he1_expanded    { color:#000000; border:1px solid #000000; }

                    .he1    { color:#000000; border:1px solid #000000; }

                    .he2    { color:#000000; background:#EEEEEE; border:1px solid #000000; }

                    .he3    { color:#000000; border:1px solid #000000; }

                    .he4    { color:#000000; border:1px solid #000000; }

                    .he4h   { color:#000000; border:1px solid #000000; }

                    .he4i   { color:#000000; border:1px solid #000000; }

                    .he5    { color:#000000; border:1px solid #000000; }

                    .he5h   { color:#000000; border:1px solid #000000; }

                    .he5i   { color:#000000; border:1px solid #000000; }

                    }

</style>
<!-- Scripts -->
<script type="text/javascript" language="javascript">
/*
String "strShowHide(0/1)"
0 = Hide all mode.
1 = Show all mode.
*/

var windowsArray = new Array();
var strShowHide = 1;

//Localized strings

var strShow = "show";
var strHide = "hide";
var strShowAll = "show all";
var strHideAll = "hide all";
var strShown = "shown";
var strHidden = "hidden";
var strExpandoNumPixelsFromEdge = "10px";


function IsSectionHeader(obj) {
    return (obj.className === "he0_expanded") || (obj.className === "he0h_expanded") || (obj.className === "he1h_expanded") || (obj.className === "he1_expanded") || (obj.className === "he1") || (obj.className === "he2") || (obj.className === "he3") || (obj.className === "he4") || (obj.className === "he4h") || (obj.className === "he5") || (obj.className === "he5h");
}

function IsSectionExpandedByDefault(objHeader) {
    if (objHeader === null) {
        return false;
    } else {
        return (objHeader.className.slice(objHeader.className.lastIndexOf("_")) === "_expanded");
    }
}

function SetSectionState(objHeader, strState) {
    var i = 0;
    var j;
    var all = objHeader.parentElement.ownerDocument.all;

    if (all === null) {
        return;
    }

    for (j = 0; j < all.length; j++) {
        if (all[j] === objHeader) {
            break;
        }
        i = i + 1;
    }

    for (j = i; j < all.length; j++) {
        if (all[i].className === "container") {
            break;
        }
        i = i + 1;
    }

    var objContainer = all[i];

    if (strState === "toggle") {
        if (objContainer.style.display === "none") {
            SetSectionState(objHeader, "show");
        }
        else {
            SetSectionState(objHeader, "hide");
        }
    }
    else {
        var objExpando = objHeader.children[1];

        if (strState === "show") {
            objContainer.style.display = "block";
            objExpando.innerText = strHide;
        }
        else if (strState === "hide") {
            objContainer.style.display = "none";
            objExpando.innerText = strShow;
        }
    }
}

function ShowSection(objHeader) {
    SetSectionState(objHeader, "show");
}

function HideSection(objHeader) {
    SetSectionState(objHeader, "hide");
}

function ToggleSection(objHeader) {
    SetSectionState(objHeader, "toggle");
}

/*================================================================================
' link at the top of the page to collapse/expand all collapsable elements
'================================================================================
*/
function objshowhide_onClick() {
    var obji;
    var objBody = document.body.getElementsByTagName("*");

    if (objBody === null) {
        return;
    }
    
    switch (strShowHide) {
        case 0:
            strShowHide = 1;
            window.objshowhide.innerText = strShowAll;
            for (obji = 0; obji < objBody.length; obji++) {
                if (objBody[obji].className !== 'undefined' && IsSectionHeader(objBody[obji])) {
                    HideSection(objBody[obji]);
                }
            }
            break;
        case 1:
            strShowHide = 0;
            window.objshowhide.innerText = strHideAll;
            for (obji = 0; obji < objBody.length; obji++) {
                if (objBody[obji].className !== 'undefined' && IsSectionHeader(objBody[obji])) {
                    ShowSection(objBody[obji]);
                }
            }
            break;
    }
}

/*================================================================================
' onload collapse all except the first two levels of headers (he0, he1)
'================================================================================*/
function window_onload() {
    // Only initialize once.  The UI may reinsert a report into the webbrowser control,
    // firing onLoad multiple times.
    if (document.documentElement.getAttribute("gpmc_reportInitialized").toUpperCase() !== "TRUE") {
        // Set text direction
        fDetDir(document.dir.toUpperCase());

        // Initialize sections to default expanded/collapsed state.
        var objBody = document.body.getElementsByTagName("*");

        if (objBody === null) {
            return;
        }

        for (var obji = 0; obji < objBody.length; obji++) {
            if (IsSectionHeader(objBody[obji])) {
                if (IsSectionExpandedByDefault(objBody[obji])) {
                    ShowSection(objBody[obji]);
                }
                else {
                    HideSection(objBody[obji]);
                }
            }
        }

        objshowhide.innerText = strShowAll;

        document.documentElement.setAttribute("gpmc_reportInitialized", "true");
    }
}

/*'================================================================================
' When direction (LTR/RTL) changes, change adjust for readability
'================================================================================
*/
function document_onPropertyChange() {
    if (window.event.propertyName === "dir") {
        fDetDir(document.dir.toUpperCase());
    }
}

function fDetDir(strDir) {
    var colRules;
    var nug;
    var i;
    var strClass;

    switch (strDir.toUpperCase()) {
        case "LTR":
            colRules = document.styleSheets[0].cssRules;
            if (colRules !== null && colRules !== undefined ) {            
                for (i = 0; i < colRules.length - 1; i++) {
                    nug = colRules[i];
                    strClass = nug.selectorText;
                    if (nug.style.textAlign === "right") {
                        nug.style.textAlign = "left";
                    }
                    switch (strClass) {
                        case "div .expando":
                            nug.style.Left = "";
                            nug.style.Right = strExpandoNumPixelsFromEdge;
                            break;
                        case "#objshowhide":
                            nug.style.textAlign = "right";
                            break;
                    }
                }
            }
            break;
        case "RTL":
            colRules = document.styleSheets[0].cssRules;
            if (colRules !== null && colRules !== undefined ) {            
                for (i = 0; i < colRules.length - 1; i++) {
                    nug = colRules[i];
                    strClass = nug.selectorText;
                    if (nug.style.textAlign === "left") {
                        nug.style.textAlign = "right";
                    }
                    switch (strClass) {
                        case "div .expando":
                            nug.style.Left = strExpandoNumPixelsFromEdge;
                            nug.style.Right = "";
                            break;
                        case "#objshowhide":
                            nug.style.textAlign = "left";
                            break;
                    }
                }
            }
            break;
    }
}

/*'================================================================================
'When printing reports, if a given section is expanded, let's says "shown" (instead of "hide" in the UI).
'================================================================================
*/
function window_onbeforeprint() {
    var obji;
    for (obji in document.all) {
        if (document.all.hasOwnProperty(obji)) {
            if (obji.className === "expando") {
                if (obji.innerText === strHide) {
                    obji.innerText = strShown;
                }
                if (obji.innerText === strShow) {
                    obji.innerText = strHidden;
                }
            }
        }
    }
}

/*================================================================================
'If a section is collapsed, change to "hidden" in the printout (instead of "show").
'================================================================================
*/
function window_onafterprint() {
    var obji;
    for (obji in document.all) {
        if (document.all.hasOwnProperty(obji)) {
            if (obji.className === "expando") {
                if (obji.innerText === strShown) {
                    obji.innerText = strHide;
                }
                if (obji.innerText === strHidden) {
                    obji.innerText = strShow;
                }
            }
        }
    }
}

/*================================================================================
' Adding keypress support for accessibility
'================================================================================
*/
function document_onkeypress(event) {
    var chCode = ('charCode' in event) ? event.charCode : event.keyCode;

    //space bar (32) or carriage return (13) or line feed (10)
    if (chCode == "32" || chCode == "13" || chCode == "10") {
        if (event.srcElement.className === "expando") {
            document_onclick();
            event.returnValue = false;
        }
        if (event.srcElement.className === "sectionTitle") {
            document_onclick();
            event.returnValue = false;
        }
        if (event.srcElement.id === "objshowhide") {
            objshowhide_onClick();
            event.returnValue = false;
        }
    }
}

/*================================================================================
' When user clicks anywhere in the document body, determine if user is clicking
' on a header element.
'================================================================================
*/
function document_onclick() {
    var strsrc = window.event.srcElement;

    while (strsrc.className === "sectionTitle" || strsrc.className === "expando") {
        strsrc = strsrc.parentElement;
    }

    // Only handle clicks on headers.
    if (!IsSectionHeader(strsrc)) {
        return;
    }

    ToggleSection(strsrc);

    window.event.returnValue = false;
}

function ToggleState(e) {
    var objParentDisplayItem;
    var objDisplayItem;
    var i;

    if (e.innerText === strShow) {
        e.innerText = strHide;
        objParentDisplayItem = e.parentNode;
        objDisplayItem = objParentDisplayItem.childNodes;
        for (i = 0; i < objDisplayItem.length; i++) {
            if (objDisplayItem[i].id === "showItem") {
                objDisplayItem[i].style.display = "Block";
            }
        }
    }
    else {
        e.innerText = strShow;
        objParentDisplayItem = e.parentNode;
        objDisplayItem = objParentDisplayItem.childNodes;
        for (i = 0; i < objDisplayItem.length; i++) {
            if (objDisplayItem[i].id === "showItem") {
                objDisplayItem[i].style.display = "None";
            }
        }
    }
}

function traverseToURL(url) {
    if (url != null) {
        var urlInitialSubstr = url.substring(0, 4).toLowerCase();
        if (urlInitialSubstr === "http") {
            window.open(url, "_blank");
        }
    }
}

function getExplainWindowTitle() {
    return document.getElementById("explainText_windowTitle").innerHTML;
}

function getExplainWindowStyles() {
    return document.getElementById("explainText_windowStyles").innerHTML;
}

function getExplainWindowSettingPathLabel() {
    return document.getElementById("explainText_settingPathLabel").innerHTML;
}

function getExplainWindowExplainTextLabel() {
    return document.getElementById("explainText_explainTextLabel").innerHTML;
}

function getExplainWindowPrintButton() {
    return document.getElementById("explainText_printButton").innerHTML;
}

function getExplainWindowCloseButton() {
    return document.getElementById("explainText_closeButton").innerHTML;
}

function getNoExplainTextAvailable() {
    return document.getElementById("explainText_noExplainTextAvailable").innerHTML;
}

function getExplainWindowSupportedLabel() {
    return document.getElementById("explainText_supportedLabel").innerHTML;
}

function getNoSupportedTextAvailable() {
    return document.getElementById("explainText_noSupportedTextAvailable").innerHTML;
}

function showExplainText(srcElement)
{
    var strDiagArgs;

    var strSettingName = srcElement.getAttribute("gpmc_settingName");
    var strSettingPath = srcElement.getAttribute("gpmc_settingPath");
    var strSettingDescription = srcElement.getAttribute("gpmc_settingDescription");

    if (strSettingDescription === "")
    {
        strSettingDescription = getNoExplainTextAvailable();
    }

    var strSupported = srcElement.getAttribute("gpmc_supported");

    if (strSupported === "")
    {
        strSupported = getNoSupportedTextAvailable();
    }

    var strHtml = "<html dir=" + document.dir +  ">\n";
    strHtml += "<head>\n";
    strHtml += "<title>" + getExplainWindowTitle() + "</title>\n";
    strHtml += "<style type='text/css'>\n" + getExplainWindowStyles() + "</style>\n";
    strHtml += "</head>\n";
    strHtml += "<body>\n";
    strHtml += "<div class='head'>" + strSettingName +"</div>\n";
    strHtml += "<div class='path'><b>" + getExplainWindowSettingPathLabel() + "</b><br/>" + strSettingPath +"</div>\n";
    strHtml += "<div class='path'><b>" + getExplainWindowSupportedLabel() + "</b><br/>" + strSupported +"</div>\n";
    strHtml += "<div class='info'>\n";
    strHtml += "<div class='hdr'>" + getExplainWindowExplainTextLabel() + "</div>\n";
    strHtml += "<div class='bdy'>" + strSettingDescription + "</div>\n";
    strHtml += "<div class='btn'>";
    strHtml += getExplainWindowPrintButton();
    strHtml += getExplainWindowCloseButton();
    strHtml += "</div></body></html>";

    // IE specific method for showing the popup.
    if(navigator.userAgent.indexOf("MSIE") > 0 && window.location.toString().indexOf("file:") === -1)
    {
        strDiagArgs = "dialogHeight=360px;dialogWidth=630px;status=no;scroll=yes;resizable=yes;minimize=yes;maximize=yes;";

        var vModeless = window.showModelessDialog("about:blank", window, strDiagArgs);
        vModeless.document.write(strHtml);
        vModeless.document.close();
        vModeless.location.reload(false);
                        
        window.event.returnValue = false;
    }
    else
    {
        strDiagArgs = "height=360px, width=630px, status=no, toolbar=no, scrollbars=yes, resizable=yes ";
        
        var expWin = window.open("", "expWin", strDiagArgs);
        expWin.document.write("");
        expWin.document.close();
        expWin.document.write(strHtml);
        expWin.document.close();
        expWin.focus();
    }
    
    return false;
}

function showEvents(srcElement,bVerbose,bInformational,bWarning,bError)
{
    var strWindowId = "EventDetails_" + srcElement.getAttribute("eventLogActivityId");
    if((windowsArray[strWindowId]) && (windowsArray[strWindowId].closed === false)) {
        windowsArray[strWindowId].focus();
    } else {
        var eventIdLabelNode, eventTimeLabelNode, eventDescriptionLabelNode, eventDetailsLabelNode, eventXmlLabelNode, gpEventsTitleNode;
        var eventIdLabelNodeText, eventTimeLabelNodeText, eventDescriptionLabelNodeText, eventXmlLabelNodeText, gpEventsTitleNodeText, eventDetailsLabelNodeText;
        var singlePassEventsDetailsNode, eventRecordArray;
        var dataNotFoundWarningLabelNode, dataNotFoundWarningLabelNodeText;
        var mainSection;
        var attributeValue;
        var singlePassEventsDetails;
        var singlePassEventsDetailsChildren;
        var node;
        var children;
        var xmlDocumentRoot;
        var xmlDocument;
        var serializer;
        var itemSub;
        var doc;

        if (window.XMLSerializer) 
        {
           serializer = new XMLSerializer();
        }

        if (window.DOMParser) 
        {
           // This browser appears to support DOMParser
           parser = new DOMParser();

           doc = document.getElementById("data-island").textContent;
           xmlDocumentRoot = parser.parseFromString(doc, "application/xml");
           xmlDocument = xmlDocumentRoot.documentElement;
           itemSub = 1;
        } 
        else 
        { 
           // Internet Explorer, create a new XML document using ActiveX 
           // and use loadXML as a DOM parser. 
           try 
           {
              doc = document.getElementById("data-island");

              xmlDocumentRoot = new ActiveXObject("Msxml2.DOMDocument.6.0"); 
              xmlDocumentRoot.async = false; 
              xmlDocumentRoot.loadXML(doc.innerHTML);
              xmlDocument = xmlDocumentRoot.documentElement;
              itemSub = 0;
           } 
           catch(e) 
           {
              // Not supported.
           }
        }

        if (xmlDocument != null) {
            mainSection = xmlDocument.getElementsByTagName("MainSection")[0].childNodes;

            if (mainSection != null) {
                for (children = 0; children < mainSection.length; children++) {
                    node = mainSection[children];
                    if (node.nodeType === 1 && node.nodeName === 'Label') {
                        attributeValue = node.getAttribute("Name");
                        if (attributeValue != null) {
                            if (attributeValue === 'ComponentStatus_EventId') {
                                eventIdLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_EventTime') {
                                eventTimeLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_EventDescription') {
                                eventDescriptionLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_EventXml') {
                                eventXmlLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_EventDetails') {
                                eventDetailsLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_GPEvents') {
                                gpEventsTitleNode = node.childNodes[1];
                            }
                            if (attributeValue === 'Warning_DataNotFound') {
                                dataNotFoundWarningLabelNode = node.childNodes[1];
                            }
                        }
                    }
                }
            }

            singlePassEventsDetails = xmlDocument.getElementsByTagName("SinglePassEventsDetails");
            if (singlePassEventsDetails != null) {
                for (singlePassEventsDetailsChildren = 0; singlePassEventsDetailsChildren < singlePassEventsDetails.length; singlePassEventsDetailsChildren++) {
                    node = singlePassEventsDetails[singlePassEventsDetailsChildren];
                    attributeValue = node.getAttribute("ActivityId");
                    if (attributeValue === srcElement.getAttribute("eventLogActivityId")) {
                        singlePassEventsDetailsNode = node;
                    }
                }
            }
        }
        
        eventIdLabelNodeText = null;
        if (eventIdLabelNode != null) {
            if (eventIdLabelNode.childNodes.length > 0) {
                eventIdLabelNodeText = eventIdLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventIdLabelNodeText == null) {
            eventIdLabelNodeText = "Event ID";
        }

        eventTimeLabelNodeText = null;
        if (eventTimeLabelNode != null) {
            if (eventTimeLabelNode.firstChild.childNodes.length > 0) {
                eventTimeLabelNodeText = eventTimeLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventTimeLabelNodeText == null) {
            eventTimeLabelNodeText = "Event Time";
        }

        eventDescriptionLabelNodeText = null;
        if (eventDescriptionLabelNode != null) {
            if (eventDescriptionLabelNode.childNodes.length > 0) {
                eventDescriptionLabelNodeText = eventDescriptionLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventDescriptionLabelNodeText == null) {
            eventDescriptionLabelNodeText = "Event Description";
        }

        eventXmlLabelNodeText = null;
        if (eventXmlLabelNode != null) {
            if (eventXmlLabelNode.childNodes.length > 0) {
                eventXmlLabelNodeText = eventXmlLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventXmlLabelNodeText == null) {
            eventXmlLabelNodeText = "Event XML";
        }

        gpEventsTitleNodeText = null;
        if (gpEventsTitleNode != null) {
            if (gpEventsTitleNode.childNodes.length > 0) {
                gpEventsTitleNodeText = gpEventsTitleNode.childNodes[0].nodeValue;
            }
        }
        if (gpEventsTitleNodeText == null) {
            gpEventsTitleNodeText = "Group Policy Events";
        }

        eventDetailsLabelNodeText = null;
        if (eventDetailsLabelNode != null) {
            if (eventDetailsLabelNode.childNodes.length > 0) {
                eventDetailsLabelNodeText = eventDetailsLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventDetailsLabelNodeText == null) {
            eventDetailsLabelNodeText = "Event Details";
        }

        dataNotFoundWarningLabelNodeText = null;
        if (dataNotFoundWarningLabelNode != null) {
            if (dataNotFoundWarningLabelNode.childNodes.length > 0) {
                dataNotFoundWarningLabelNodeText = dataNotFoundWarningLabelNode.childNodes[0].nodeValue;
            }
        }
        if (dataNotFoundWarningLabelNodeText == null) {
            dataNotFoundWarningLabelNodeText = "Data Not Found";
        }
                
        if(singlePassEventsDetailsNode != null)
        {
            eventRecordArray = singlePassEventsDetailsNode.getElementsByTagName("EventRecord");
        }
        
        var htmlText = "<html dir=" + document.dir +  ">";
        htmlText = htmlText + "<head>";
        htmlText = htmlText + "<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\" />";
        htmlText = htmlText + "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-16\" />";
        htmlText = htmlText + "<title>" + gpEventsTitleNodeText + "</title>";
        htmlText = htmlText + "</head><style type=\"text/css\">";
        htmlText = htmlText + "body    { background-color:#FFFFFF; color:#000000; font-size:68%; font-family:MS Shell Dlg; margin:0,0,10px,0; word-break:normal; word-wrap:break-word; }";
        htmlText = htmlText + "table   { font-size:100%; table-layout:fixed; width:100%; }";
        htmlText = htmlText + "td,th   { overflow:visible; text-align:left; vertical-align:top; white-space:normal; }";
        htmlText = htmlText + ".he1    { text-align: center; vertical-align: middle; background-color:#C0D2DE; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:4em; position:relative; }";
        htmlText = htmlText + ".centerTxt { text-align: center; }";
        htmlText = htmlText + ".txtFormat1 { text-align: left; vertical-align:top; white-space:pre-line; }";
        htmlText = htmlText + "</style>";
      
        htmlText = htmlText + "<script> function toggle(e) {";
        htmlText = htmlText + "if (e.style.display === \"none\"){ e.style.display = \"\"; }";
        htmlText = htmlText + "else { e.style.display = \"none\"; }";
        htmlText = htmlText + "}</";
        htmlText = htmlText + "script";
        htmlText = htmlText + ">";
      
        htmlText = htmlText + "<body><table border=1><tr>";
        htmlText = htmlText + "<th class=\"he1\"><strong>" + eventIdLabelNodeText + "</strong></th>";
        htmlText = htmlText + "<th class=\"he1\"><strong>" + eventTimeLabelNodeText + "</strong></th>";
        htmlText = htmlText + "<th class=\"he1\"><strong>" + eventDescriptionLabelNodeText + "</strong></th>";
        htmlText = htmlText + "<th class=\"he1\"><strong>" + eventDetailsLabelNodeText + "</strong></th>";

        htmlText = htmlText + "</tr>";
        var i;
        var eventId;
        var eventTime;
        var eventDescription;
        var eventXml;
        var eventType;
        var displayEvent;
        var eventXmlId;
        var displayBgColor;

        if(eventRecordArray != null && eventRecordArray.length > 0)
        {
            for (i=0; i < eventRecordArray.length; i++)
            {
                displayEvent = false;
                var eventIdElements = eventRecordArray[i].getElementsByTagName("EventId");        
                if((eventIdElements != null) && (eventIdElements.length > 0) && (eventIdElements[0].firstChild != null))
                {
                    eventId =  eventIdElements[0].firstChild.nodeValue;
                }
                else
                {
                    eventId =  dataNotFoundWarningLabelNodeText;
                }
                var eventTimeElements = eventRecordArray[i].getElementsByTagName("EventTime");
                if((eventTimeElements != null) && (eventTimeElements.length > 0) && (eventTimeElements[0].firstChild != null))
                {
                    eventTime = eventTimeElements[0].firstChild.nodeValue;
                }
                else
                {
                    eventTime = dataNotFoundWarningLabelNodeText;
                }
                var eventDescriptionElements = eventRecordArray[i].getElementsByTagName("EventDescription");
                if((eventDescriptionElements != null) && (eventDescriptionElements.length > 0) && (eventDescriptionElements[0].firstChild != null))
                {
                        eventDescription = eventDescriptionElements[0].firstChild.nodeValue;
                }
                else
                {
                    eventDescription = dataNotFoundWarningLabelNodeText;
                }
                var eventXmlElements = eventRecordArray[i].getElementsByTagName("EventXml");
                if((eventXmlElements != null) && (eventXmlElements.length > 0) && (eventXmlElements[0].firstChild != null))
                {
                    if (window.XMLSerializer) 
                    {
                       var xml = serializer.serializeToString(eventXmlElements[0].firstChild);
                       eventXml = xml;
                    } 
                    else 
                    {
                       if (typeof eventXmlElements[0].firstChild.xml != "undefined") 
                       {
                          eventXml = eventXmlElements[0].firstChild.xml;
                       }
                    }
                }
                else
                {
                    eventXml = dataNotFoundWarningLabelNodeText;
                }
                var eventLevelElements = eventRecordArray[i].getElementsByTagName("EventLevel");
                if((eventLevelElements != null) && (eventLevelElements.length > 0) && (eventLevelElements[0].firstChild != null))
                {
                    eventType = eventLevelElements[0].firstChild.nodeValue;
                }
                else
                {
                    eventType = 5;
                }
                
                if((bVerbose === true)&&(eventType == 5))
                {
                    displayEvent = true;
                }
                else if((bInformational === true)&&(eventType == 4))
                {
                    displayEvent = true;
                }
                else if((bWarning === true)&&(eventType == 3))
                {
                    displayEvent = true;
                }
                else if((bError === true)&&((eventType == 1)||(eventType == 2)))
                {
                    displayEvent = true;
                }
                
                if (displayEvent === true)
                {
                    eventXmlId = "EventXml" + (i+"");
                    htmlText = htmlText + "<tr>";
                    htmlText = htmlText + "<td class=\"centerTxt\" style=\"background:" + displayBgColor +"\">" + eventId + "</td>";
                    htmlText = htmlText + "<td class=\"centerTxt\" style=\"background:" + displayBgColor +"\">" + eventTime + "</td>";
                    htmlText = htmlText + "<td class=\"txtFormat1\" style=\"background:" + displayBgColor +"\">" + eventDescription + "</td>";
                    htmlText = htmlText + "<td style=\"background:" + displayBgColor +"\"><span style=\"color:blue; cursor:hand\" onclick=\"toggle(" + eventXmlId +");\" onKeyPress=\"toggle(" + eventXmlId + ");\" tabIndex=1 >";
                    htmlText = htmlText + eventXmlLabelNodeText + "</span><br/>";
                    htmlText = htmlText + "<span style=\"display:none\" id=" + eventXmlId +">";
                    htmlText = htmlText + eventXml + "</span>";
                    htmlText = htmlText + "</td>";
                    htmlText = htmlText + "</tr>";
                }
            }
        }
        htmlText = htmlText + "</table></body></html>";

        if(windowsArray[strWindowId])
        {
            delete windowsArray[strWindowId];
        }
        
        // IE specific method for showing the popup.
        if(navigator.userAgent.indexOf("MSIE") > 0 && window.location.toString().indexOf("file:") === -1)
        {
            var strDiagArgs = "dialogHeight=360px;dialogWidth=630px;status=no;scroll=yes;resizable=yes;minimize=yes;maximize=yes;";

            var vModeless = window.showModelessDialog("about:blank", window, strDiagArgs);
            vModeless.document.write(htmlText);
            vModeless.document.close();
            vModeless.location.reload(false);
            windowsArray[strWindowId] = vModeless;            
        }
        else
        {
            var strDiagArgs = "height=360px, width=630px, status=no, toolbar=no, scrollbars=yes, resizable=yes";
        
            windowsArray[strWindowId] = window.open("", "", strDiagArgs);
            windowsArray[strWindowId].document.write(htmlText);
            windowsArray[strWindowId].focus();
        } 
    }

    xmlDocumentRoot = null;
}

function cleanUp() {
    var windowsArray = this.windowsArray;
    for (var currentWindow in windowsArray) {
        if (windowsArray.hasOwnProperty(currentWindow)) {
            windowsArray[currentWindow].close();
        }
    }
}

function getMessageText(messageNode) {
    if (messageNode != null) {
        if (messageNode.firstChild != null) {
            if (messageNode.firstChild.nodeType === 3) {
                for (var i = 0; i < messageNode.childNodes.length; i++) 
                {
                    var curNode = messageNode.childNodes[i];
                    if(curNode.nodeType === 1){
                        return curNode.childNodes[0].nodeValue;
                    }
                }
            } else {
                return messageNode.firstChild.childNodes[0].nodeValue;
            }
        }
    }
    return null;
}

function showComponentProcessingDetails(srcElement) {
    var strWindowId = "ProcessingDetails_" + srcElement.getAttribute("eventLogActivityId");
    if ((windowsArray[strWindowId]) && (windowsArray[strWindowId].closed === false)) {
        windowsArray[strWindowId].focus();
    } else {
        var doc;
        var parser;
        var xmlDocumentRoot;
        var xmlDocument;

        var extensionsProcessedLabelNode, slowLinkThresholdLabelNode, linkSpeedLabelNode, extensionsProcessedTimeTakenNode;
        var domainControllerIpLabelNode, domainControllerNameLabelNode, processingTypeLabelNode, loopbackModeLabelNode;
        var processingTriggerLabelNode, extensionNameLabelNode, timeTakenLabelNode;
        var dataNotFoundWarningLabelNode;
        var singlePassEventsDetailsNode, totalProcessingTimeLabelNode, refreshMessageLabelNode;
        var processingDetailsUserTitleNode, processingDetailsComputerTitleNode;
        var policySectionNode;
        var policyEventsDetailsNode, detailsLabelNode;

        var extensionsProcessedLabelNodeText, slowLinkThresholdLabelNodeText, linkSpeedLabelNodeText, extensionsProcessedTimeTakenNodeText;
        var domainControllerIpLabelNodeText, domainControllerNameLabelNodeText, processingTypeLabelNodeText, loopbackModeLabelNodeText;
        var processingTriggerLabelNodeText, extensionNameLabelNodeText, timeTakenLabelNodeText;
        var dataNotFoundWarningLabelNodeText, totalProcessingTimeLabelNodeText, refreshMessageLabelNodeText;
        var processingDetailsUserTitleNodeText, processingDetailsComputerTitleNodeText;
        var detailsLabelNodeText;

        var slowLinkThresholdValue, linkSpeedValue, domainControllerIpValue, domainControllerNameValue;
        var processingTypeValue, loopbackModeValue, processingTriggerValue, totalPolicyProcessingTime, extensionProcessingTimeArray;
        var cseNameArray = new Array();
        var cseElapsedTimeArray = new Array();
        var policyApplicationFinishedTime;

        var isComputerProcessing;
        var strDiagArgs;
        var mainSection;
        var attributeValue;
        var singlePassEventsDetails;
        var singlePassEventsDetailsChildren;
        var node;
        var children;
        var itemSub;

        if (window.DOMParser) 
        {
           // This browser appears to support DOMParser
           parser = new DOMParser();
           doc = document.getElementById("data-island").textContent;

           xmlDocumentRoot = parser.parseFromString(doc, "application/xml");

           xmlDocument = xmlDocumentRoot.documentElement;

           itemSub = 1;
        } 
        else 
        { 
           // Internet Explorer, create a new XML document using ActiveX 
           // and use loadXML as a DOM parser. 
           try 
           {
              doc = document.getElementById("data-island");

              xmlDocumentRoot = new ActiveXObject("Msxml2.DOMDocument.6.0"); 
              xmlDocumentRoot.async = false; 
              xmlDocumentRoot.loadXML(doc.innerHTML);
              xmlDocument = xmlDocumentRoot.documentElement;
              itemSub = 0;
           } 
           catch(e) 
           {
              // Not supported.
           }
        }

        if (xmlDocument != null) {
            mainSection = xmlDocument.getElementsByTagName("MainSection")[0].childNodes;

            if (mainSection != null) {
                for (children = 0; children < mainSection.length; children++) {
                    node = mainSection[children];
                    if (node.nodeType === 1 && node.nodeName === 'Label') {
                        attributeValue = node.getAttribute("Name")
                        if (attributeValue != null) {
                            if (attributeValue === 'ComponentStatus_ExtensionsProcessed') {
                                extensionsProcessedLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_SlowLinkThreshold') {
                                slowLinkThresholdLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_LinkSpeed') {
                                linkSpeedLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_TimeTaken') {
                                extensionsProcessedTimeTakenNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_DomainControllerIP') {
                                domainControllerIpLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_DomainControllerName') {
                                domainControllerNameLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ProcessingTrigger') {
                                processingTriggerLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ExtensionName') {
                                extensionNameLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_TimeTaken') {
                                timeTakenLabelNode = node;
                            }
                            if (attributeValue === 'Warning_DataNotFound') {
                                dataNotFoundWarningLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_TotalProcessingTime') {
                                totalProcessingTimeLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_RefreshMessage') {
                                refreshMessageLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_UserProcessingDetails') {
                                processingDetailsUserTitleNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ComputerProcessingDetails') {
                                detailsLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ProcessingType') {
                                processingTypeLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_LoopbackMode') {
                                loopbackModeLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_UserProcessingDetails') {
                                processingDetailsUserTitleNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ComputerProcessingDetails') {
                                processingDetailsComputerTitleNode = node;
                            }
                        }
                    }
                }
            }

            singlePassEventsDetails = xmlDocument.getElementsByTagName("SinglePassEventsDetails");
            if (singlePassEventsDetails != null) {
                for (singlePassEventsDetailsChildren = 0; singlePassEventsDetailsChildren < singlePassEventsDetails.length; singlePassEventsDetailsChildren++) {
                    node = singlePassEventsDetails[singlePassEventsDetailsChildren];
                    if (node.getAttribute("ActivityId") === srcElement.getAttribute("eventLogActivityId")) {
                        singlePassEventsDetailsNode = node;
                    }
                }
            }

            if (singlePassEventsDetailsNode) {
                policyEventsDetailsNode = singlePassEventsDetailsNode.parentNode;
                if (policyEventsDetailsNode) {
                    policySectionNode = policyEventsDetailsNode.parentNode;
                    if (policySectionNode) {
                        if (policySectionNode.nodeName === 'UserPolicySection') {
                            isComputerProcessing = false;
                        }
                        if (policySectionNode.nodeName === 'ComputerPolicySection') {
                            isComputerProcessing = true;
                        }
                    }
                }
            }
        }

        
        extensionsProcessedLabelNodeText = getMessageText(extensionsProcessedLabelNode);
        slowLinkThresholdLabelNodeText = getMessageText(slowLinkThresholdLabelNode);
        linkSpeedLabelNodeText = getMessageText(linkSpeedLabelNode);
        domainControllerIpLabelNodeText = getMessageText(domainControllerIpLabelNode);
        domainControllerNameLabelNodeText = getMessageText(domainControllerNameLabelNode);
        processingTypeLabelNodeText = getMessageText(processingTypeLabelNode);
        loopbackModeLabelNodeText = getMessageText(loopbackModeLabelNode);
        processingTriggerLabelNodeText = getMessageText(processingTriggerLabelNode);
        extensionNameLabelNodeText = getMessageText(extensionNameLabelNode);
        timeTakenLabelNodeText = getMessageText(timeTakenLabelNode);
        processingDetailsUserTitleNodeText = getMessageText(processingDetailsUserTitleNode);
        processingDetailsComputerTitleNodeText = getMessageText(processingDetailsComputerTitleNode);
        dataNotFoundWarningLabelNodeText = getMessageText(dataNotFoundWarningLabelNode);
        totalProcessingTimeLabelNodeText = getMessageText(totalProcessingTimeLabelNode);
        refreshMessageLabelNodeText = getMessageText(refreshMessageLabelNode);
        detailsLabelNodeText = getMessageText(detailsLabelNode);
     

        slowLinkThresholdValue = null;
        linkSpeedValue = null;
        domainControllerIpValue = null;
        domainControllerNameValue = null;
        processingTypeValue = null;
        loopbackModeValue = null;
        processingTriggerValue = null;

        if (singlePassEventsDetailsNode != null) {
            slowLinkThresholdValue = singlePassEventsDetailsNode.getAttribute("SlowLinkThresholdInKbps");
            linkSpeedValue = singlePassEventsDetailsNode.getAttribute("LinkSpeedInKbps");
            domainControllerIpValue = singlePassEventsDetailsNode.getAttribute("DomainControllerIPAddress");
            domainControllerNameValue = singlePassEventsDetailsNode.getAttribute("DomainControllerName");
            processingTypeValue = singlePassEventsDetailsNode.getAttribute("ProcessingAppMode");
            loopbackModeValue = singlePassEventsDetailsNode.getAttribute("PolicyProcessingMode");
            processingTriggerValue = singlePassEventsDetailsNode.getAttribute("ProcessingTrigger");
            totalPolicyProcessingTime = singlePassEventsDetailsNode.getAttribute("PolicyElapsedTime");
            extensionProcessingTimeArray = singlePassEventsDetailsNode.getElementsByTagName("ExtensionProcessingTime");
        }
        if (slowLinkThresholdValue == null) {
            slowLinkThresholdValue = dataNotFoundWarningLabelNodeText;
        }
        if (linkSpeedValue == null) {
            linkSpeedValue = dataNotFoundWarningLabelNodeText;
        }
        if (domainControllerIpValue == null) {
            domainControllerIpValue = dataNotFoundWarningLabelNodeText;
        }
        else {
            domainControllerIpValue = domainControllerIpValue.replace(/^\\\\/, "");
        }
        if (domainControllerNameValue == null) {
            domainControllerNameValue = dataNotFoundWarningLabelNodeText;
        }
        else {
            domainControllerNameValue = domainControllerNameValue.replace(/^\\\\/, "");
        }
        if (processingTypeValue == null) {
            processingTypeValue = dataNotFoundWarningLabelNodeText;
        }
        if (loopbackModeValue == null) {
            loopbackModeValue = dataNotFoundWarningLabelNodeText;
        }
        if (processingTriggerValue == null) {
            processingTriggerValue = dataNotFoundWarningLabelNodeText;
        }

        if (extensionProcessingTimeArray != null && extensionProcessingTimeArray.length > 0) {
            var cseName;
            var cseElapsedTime;
            var cseProcessedTime;
            var cseId;
            var i;
            var index = 0;
            for (i = 0; i < extensionProcessingTimeArray.length; i++) {
                var cseNameElements = extensionProcessingTimeArray[i].getElementsByTagName("ExtensionName");
                var cseElapsedTimeElements = extensionProcessingTimeArray[i].getElementsByTagName("ElapsedTime");
                var cseProcessedTimeElements = extensionProcessingTimeArray[i].getElementsByTagName("ProcessedTime");
                var cseIdElements = extensionProcessingTimeArray[i].getElementsByTagName("ExtensionGuid");
                if ((cseNameElements.length > 0) && (cseElapsedTimeElements.length > 0) && (cseProcessedTimeElements.length > 0) && (cseIdElements.length > 0)) {
                    if ((cseNameElements[0].firstChild != null) && (cseElapsedTimeElements[0].firstChild != null) && (cseProcessedTimeElements[0].firstChild != null) && (cseIdElements[0].firstChild != null)) {
                        cseName = cseNameElements[0].firstChild.nodeValue;
                        cseElapsedTime = cseElapsedTimeElements[0].firstChild.nodeValue;
                        cseProcessedTime = cseProcessedTimeElements[0].firstChild.nodeValue;
                        cseId = cseIdElements[0].firstChild.nodeValue;
                        if ((cseName != null) && (cseElapsedTime != null) && (cseProcessedTime != null) && (cseId != null)) {
                            cseNameArray[index] = cseName;
                            cseElapsedTimeArray[index] = cseElapsedTime;
                            index = index + 1;
                            if (cseId === '{00000000-0000-0000-0000-000000000000}') {
                                policyApplicationFinishedTime = cseProcessedTime;
                            }
                        }
                    }
                }
            }
        }
          
        var htmlText = "<html dir=" + document.dir +  ">";
        htmlText = htmlText + "<head>";
        htmlText = htmlText + "<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\" />";
        htmlText = htmlText + "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-16\" />";
        if(isComputerProcessing != null)
        {
            if(isComputerProcessing === true)
            {
                htmlText = htmlText + "<title>" + processingDetailsComputerTitleNodeText + "</title>";
            }
            else
            {
                htmlText = htmlText + "<title>" + processingDetailsUserTitleNodeText + "</title>";
            }
        }
        

        htmlText = htmlText + "</head><style type=\"text/css\">";
        htmlText = htmlText + "body    { background-color:#FFFFFF; color:#000000; font-size:68%; font-family:MS Shell Dlg; margin:0,0,10px,0; word-break:normal; word-wrap:break-word; }";
        htmlText = htmlText + "table   { font-size:100%; table-layout:fixed; width:100%; }";
        htmlText = htmlText + "td,th   { overflow:visible; text-align:left; vertical-align:top; white-space:normal; }";
        htmlText = htmlText + ".he0    { background-color:#FEF7D6; border:1px solid #BBBBBB; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:0px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; width:100%; }";
        htmlText = htmlText + ".he1    { color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2em;margin-left: 5 px; margin-top: 5 px; position:relative; width:100%; }";
        htmlText = htmlText + ".tblspecialfmt { border:1px solid black;border-collapse:collapse; }";
        htmlText = htmlText + ".tblfirstcolfmt { border-left-width: 1px;border-top-width: 1px;border-bottom-width: 1px;border-right-width: 0px;border-style: solid; border-color: black; }";
        htmlText = htmlText + ".tblsecondcolfmt { border-left-width: 0px;border-top-width: 1px;border-bottom-width: 1px;border-right-width: 1px;border-style: solid; border-color: black; }";
        htmlText = htmlText + "</style>";
        htmlText = htmlText + "<body>";
        htmlText = htmlText + "<span class=\"he1\">" + refreshMessageLabelNodeText + " " + policyApplicationFinishedTime + "</span>" ;
        htmlText = htmlText + "<div class=\"he0\">" + detailsLabelNodeText + "</div>"
        htmltext = htmlText + "<table><tr>";

        htmlText = htmlText + "<td>";
        htmlText = htmlText + "<table>";
        htmlText = htmlText + "<tr><td colspan=\"2\">&nbsp;</td></tr>";


        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + processingTypeLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + processingTypeValue + "</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + loopbackModeLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + loopbackModeValue + "</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + linkSpeedLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + linkSpeedValue + "</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + slowLinkThresholdLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + slowLinkThresholdValue + "</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + domainControllerNameLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + domainControllerNameValue +"</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + domainControllerIpLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + domainControllerIpValue +"</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + processingTriggerLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + processingTriggerValue + "</td></tr>";

        htmlText = htmlText + "</table></td></tr>";
        htmlText = htmlText + "<tr ><td ><table>";


        htmlText = htmlText + "<tr><td><span class=\"he1\" >" + extensionsProcessedLabelNodeText +"</span></td></tr>";
        htmlText = htmlText + "<tr><td><table class=\"tblspecialfmt\" >";
        htmlText = htmlText + "<tr><td class=\"tblfirstcolfmt\" style=\"width: 50%;background-color:#FEF7D6;\"><strong>" + extensionNameLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td class=\"tblsecondcolfmt\" style=\"background-color:#FEF7D6;\" ><strong>" + timeTakenLabelNodeText + "</strong></td></tr>";

        for (var idx in cseNameArray)
        {
            htmlText = htmlText + "<tr><td style=\"width: 50%\">" + cseNameArray[idx] + "</td>";                   
            htmlText = htmlText + "<td>" + cseElapsedTimeArray[idx] + "</td></tr>";
        }

        if (totalPolicyProcessingTime != null)
        {
            htmlText = htmlText + "<tr><td class=\"tblfirstcolfmt\" style=\"width: 50%\" >" + totalProcessingTimeLabelNodeText +":</td>";
            htmlText = htmlText + "<td class=\"tblsecondcolfmt\">" + totalPolicyProcessingTime + "</td></tr>";
        }
        htmlText = htmlText + "</table></td></tr></table></td></tr></table></body></html>";

        if(windowsArray[strWindowId])
        {
            delete windowsArray[strWindowId];
        }
         
        // IE specific method for showing the popup.
        if(navigator.userAgent.indexOf("MSIE") > 0 && window.location.toString().indexOf("file:") === -1)
        {
            strDiagArgs = "dialogHeight=360px;dialogWidth=630px;status=no;scroll=yes;resizable=yes;minimize=yes;maximize=yes;";

            var vModeless = window.showModelessDialog("about:blank", window, strDiagArgs);
            vModeless.document.write(htmlText);
            vModeless.document.close();
            vModeless.location.reload(false);
            windowsArray[strWindowId] = vModeless;                      
        }
        else
        {
            strDiagArgs = "height=360px, width=630px, status=no, toolbar=no, scrollbars=yes, resizable=yes";
        
            windowsArray[strWindowId] = window.open("", "" , strDiagArgs);
            windowsArray[strWindowId].document.write(htmlText);
            windowsArray[strWindowId].focus();
        }
    }

    xmlDocumentRoot = null;
}
</script>
</head>

<body onload="window_onload();" onclick="document_onclick();" onkeypress="document_onkeypress(event);" onunload="cleanUp();">

<!-- HTML resources -->
<div style="display:none;">
        <div id="explainText_windowTitle">Group Policy Management</div>
        <div id="explainText_windowStyles">
        
                            body  { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; }

                            .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; }

                            .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; }

                            .info { padding-left:10px;width:100%; }

                            table { font-size:100%; width:100%; border:1px solid #999999; }

                            th    { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; }

                            td    { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; }

                            .btn  { width:100%; text-align:right; margin-top:16px; }

                            .hdr  { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; }

                            .bdy  { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; }

                            button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; }

                            @media print {

                                .bdy { display:block; overflow:visible; }

                                button { display:none; }

                                .head { color:#000000; background:#FFFFFF; border:1px solid #000000; }

                            }

                
        </div>
        <div id="explainText_settingPathLabel">Setting Path:</div>
        <div id="explainText_explainTextLabel">Explanation</div>
        <div id="explainText_printButton">
        <button name="Print" onClick="window.print()" accesskey="P"><u>P</u>rint</button>

        </div>
        <div id="explainText_closeButton">
        <button name="Close" onClick="window.close()" accesskey="C"><u>C</u>lose</button>
                
        </div>
        <div id="explainText_noExplainTextAvailable">No explanation is available for this setting.</div>
        <div id="explainText_supportedLabel">Supported On:</div>
        <div id="explainText_noSupportedTextAvailable">Not available</div>
</div><table class="title" >
<tr><td colspan="2" class="gponame">EG-PO-WIN-C-CTX LOOPBACK Computer Restrictions and Hardening</td></tr>
<tr>
    <td id="dtstamp">Data collected on: 2-9-2025 10:54:40</td>
    <td><div id="objshowhide" tabindex="0" onclick="objshowhide_onClick();return false;"></div></td>
</tr>
</table>

<div class="gposummary">
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1"><span class="sectionTitle" tabindex="0">Details</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td scope="row">Domain</td><td>emea.tpg.ads</td></tr>
<tr><td scope="row">Owner</td><td>S-1-5-21-513466819-3096973226-347852806-503948</td></tr>
<tr><td scope="row">Created</td><td>29-7-2022 18:55:16</td></tr>
<tr><td scope="row">Modified</td><td>9-2-2023 16:33:10</td></tr>
<tr><td scope="row">User Revisions</td><td>1 (AD), 1 (SYSVOL)</td></tr>
<tr><td scope="row">Computer Revisions</td><td>19 (AD), 19 (SYSVOL)</td></tr>
<tr><td scope="row">Unique ID</td><td>{164bb578-42f6-4b69-bca6-e3b60d0e9750}</td></tr>
<tr><td scope="row">GPO Status</td><td>User settings disabled</td></tr>
</table></div></div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Links</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" ><tr><th scope="col">Location</th><th scope="col">Enforced</th><th scope="col">Link Status</th><th scope="col">Path</th></tr>
    <tr><td>Citrix</td><td>No</td><td>Enabled</td><td>emea.tpg.ads/EG/Systems/Citrix</td></tr>
    <tr><td>Testing</td><td>No</td><td>Enabled</td><td>emea.tpg.ads/EG/Systems/Citrix/Testing</td></tr>
    </table>
    <br/>This list only includes links in the domain of the GPO.</div></div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Security Filtering</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>The settings in this GPO can only apply to the following groups, users, and computers:</b></div>
<div class="he4i">
<table class="info" ><tr><th scope="col">Name</th></tr><tr><td>NT AUTHORITY\Authenticated Users</td></tr></table>
</div>
</div>
<div class="filler"></div>

<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Delegation</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>These groups and users have the specified permission for this GPO</b></div>
<div class="he4i">
<table class="info3" >
<tr><th scope="col">Name</th><th scope="col">Allowed Permissions</th><th scope="col">Inherited</th></tr>
<tr><td>EMEA\Domain Admins</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>EMEA\Domain Computers</td><td>Read</td><td>No</td></tr>
<tr><td>EMEA\EG-G-ORG-OU Admins</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>EMEA\EMEA-G-ORG-CEMEA VEUC infra Team</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>NT AUTHORITY\Authenticated Users</td><td>Read (from Security Filtering)</td><td>No</td></tr>
<tr><td>NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS</td><td>Read</td><td>No</td></tr>
<tr><td>NT AUTHORITY\SYSTEM</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>ROOT\Enterprise Admins</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>S-1-5-21-513466819-3096973226-347852806-503948</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
</table>

</div></div></div>
<div class="filler"></div>
</div>
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">Computer Configuration (Enabled)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1h_expanded"><span class="sectionTitle" tabindex="0">Policies</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1_expanded"><span class="sectionTitle" tabindex="0">Windows Settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he2"><span class="sectionTitle" tabindex="0">Security Settings</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">Local Policies/Audit Policy</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Audit account logon events</td><td>Success, Failure</td></tr>
<tr><td>Audit account management</td><td>Success, Failure</td></tr>
<tr><td>Audit directory service access</td><td>Success, Failure</td></tr>
<tr><td>Audit logon events</td><td>Success, Failure</td></tr>
<tr><td>Audit object access</td><td>Success, Failure</td></tr>
<tr><td>Audit policy change</td><td>Success, Failure</td></tr>
<tr><td>Audit system events</td><td>Success, Failure</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Local Policies/Security Options</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">Accounts</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Accounts: Guest account status</td><td>Disabled</td></tr>
<tr><td>Accounts: Rename administrator account</td><td>&quot;Apollo&quot;</td></tr>
</table>
</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Devices</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Devices: Prevent users from installing printer drivers</td><td>Disabled</td></tr>
</table>
</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Interactive Logon</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Interactive logon: Don&#39;t display last signed-in</td><td>Enabled</td></tr>
</table>
</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Shutdown</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Shutdown: Clear virtual memory pagefile</td><td>Enabled</td></tr>
</table>
</div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Event Log</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Maximum application log size</td><td>3000000 kilobytes</td></tr>
<tr><td>Maximum security log size</td><td>3000000 kilobytes</td></tr>
<tr><td>Maximum system log size</td><td>3000000 kilobytes</td></tr>
<tr><td>Retain security log</td><td>90 days</td></tr>
<tr><td>Retention method for application log</td><td>As needed</td></tr>
<tr><td>Retention method for security log</td><td>By days</td></tr>
<tr><td>Retention method for system log</td><td>As needed</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System Services</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">Browser (Startup Mode: Disabled)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Permissions</b><br/>No permissions specified</div><div class="he4i"><b>Auditing</b><br/>No auditing specified</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Remote Registry (Startup Mode: Automatic)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Permissions</b><br/>No permissions specified</div><div class="he4i"><b>Auditing</b><br/>No auditing specified</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Task Scheduler (Startup Mode: Automatic)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Permissions</b><br/>No permissions specified</div><div class="he4i"><b>Auditing</b><br/>No auditing specified</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Shell Hardware Detection (Startup Mode: Automatic)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Permissions</b><br/>No permissions specified</div><div class="he4i"><b>Auditing</b><br/>No auditing specified</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Windows Image Acquisition (WIA) (Startup Mode: Automatic)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Permissions</b><br/>No permissions specified</div><div class="he4i"><b>Auditing</b><br/>No auditing specified</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Telephony (Startup Mode: Automatic)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Permissions</b><br/>No permissions specified</div><div class="he4i"><b>Auditing</b><br/>No auditing specified</div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">File System</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">%ProgramFiles%\Common Files\microsoft shared\VGX\VGX.dll</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">Configure this file or folder then: Propagate inheritable permissions to all subfolders and files</div><div class="he4i"><table class="info" >
<tr><td scope="row"><b>Owner</b></td><td></td></tr>
</table>
</div><div class="he4i"><b>Permissions</b><table class="subtable3" >
<tr><th scope="col">Type</th><th scope="col">Name</th><th scope="col">Permission</th><th scope="col">Apply To</th></tr><tr><td>Allow</td><td>BUILTIN\Administrators</td><td>Full Control</td><td>This folder, subfolders and files</td></tr><tr><td>Allow</td><td>CREATOR OWNER</td><td>Full Control</td><td>Subfolders and files only</td></tr><tr><td>Allow</td><td>NT AUTHORITY\SYSTEM</td><td>Full Control</td><td>This folder, subfolders and files</td></tr><tr><td>Allow</td><td>BUILTIN\Users</td><td>Read and Execute</td><td>This folder, subfolders and files</td></tr><tr><td>Allow</td><td>APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES</td><td>Read and Execute</td><td>This folder, subfolders and files</td></tr></table>
<table class="subtable">
<tr><td scope="row">Allow inheritable permissions from the parent to propagate to this object and all child objects</td><td>Disabled</td></tr>
</table>
</div><div class="he4i"><b>Auditing</b><br/>No auditing specified</div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Public Key Policies/Certificate Path Validation Settings/Network Retrieval</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Default URL retrieval timeout in seconds</td><td>15</td></tr>
<tr><td>Default path validation cumulative timeout in seconds</td><td>20</td></tr>
<tr><td>Allow issuer certificate retrieval during path validation</td><td>Enabled</td></tr>
<tr><td>Default cross-certificate download interval in hours</td><td>168</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Firewall with Advanced Security</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">Global Settings</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4i"><table class="info" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Policy version</td><td>Not Configured</td></tr>
<tr><td>Disable stateful FTP</td><td>Not Configured</td></tr>
<tr><td>Disable stateful PPTP</td><td>Not Configured</td></tr>
<tr><td>IPsec exempt</td><td>Not Configured</td></tr>
<tr><td>IPsec through NAT</td><td>Not Configured</td></tr>
<tr><td>Preshared key encoding</td><td>Not Configured</td></tr>
<tr><td>SA idle time</td><td>Not Configured</td></tr>
<tr><td>Strong CRL check</td><td>Not Configured</td></tr>
</table>
</div></div><div class="he4"><span class="sectionTitle" tabindex="0">Domain Profile Settings</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4i"><table class="info" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Firewall state</td><td>Off</td></tr>
<tr><td>Inbound connections</td><td>Not Configured</td></tr>
<tr><td>Outbound connections</td><td>Not Configured</td></tr>
<tr><td>Apply local firewall rules</td><td>Not Configured</td></tr>
<tr><td>Apply local connection security rules</td><td>Not Configured</td></tr>
<tr><td>Display notifications</td><td>No</td></tr>
<tr><td>Allow unicast responses</td><td>Not Configured</td></tr>
<tr><td>Log dropped packets</td><td>Not Configured</td></tr>
<tr><td>Log successful connections</td><td>Not Configured</td></tr>
<tr><td>Log file path</td><td>Not Configured</td></tr>
<tr><td>Log file maximum size (KB)</td><td>Not Configured</td></tr>
</table>
</div></div><div class="he4"><span class="sectionTitle" tabindex="0">Connection Security Settings</span><a class="expando" href="#"></a></div>
    <div class="container">
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Advanced Audit Configuration</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">Account Logon</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4i"><table class="info" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Audit Other Account Logon Events</td><td>Success, Failure</td></tr>
</table>
</div></div><div class="he4"><span class="sectionTitle" tabindex="0">Account Management</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4i"><table class="info" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Audit Application Group Management</td><td>Success, Failure</td></tr>
<tr><td>Audit Computer Account Management</td><td>Success, Failure</td></tr>
<tr><td>Audit Security Group Management</td><td>Success, Failure</td></tr>
<tr><td>Audit User Account Management</td><td>Success, Failure</td></tr>
</table>
</div></div><div class="he4"><span class="sectionTitle" tabindex="0">Detailed Tracking</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4i"><table class="info" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Audit Process Creation</td><td>Success, Failure</td></tr>
<tr><td>Audit Process Termination</td><td>Success, Failure</td></tr>
</table>
</div></div><div class="he4"><span class="sectionTitle" tabindex="0">Logon/Logoff</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4i"><table class="info" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Audit Account Lockout</td><td>Success, Failure</td></tr>
<tr><td>Audit Logoff</td><td>Success, Failure</td></tr>
<tr><td>Audit Logon</td><td>Success, Failure</td></tr>
<tr><td>Audit Special Logon</td><td>Success, Failure</td></tr>
</table>
</div></div><div class="he4"><span class="sectionTitle" tabindex="0">Policy Change</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4i"><table class="info" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Audit Audit Policy Change</td><td>Success, Failure</td></tr>
<tr><td>Audit Authentication Policy Change</td><td>Success, Failure</td></tr>
</table>
</div></div><div class="he4"><span class="sectionTitle" tabindex="0">System</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4i"><table class="info" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Audit Security State Change</td><td>Success, Failure</td></tr>
<tr><td>Audit System Integrity</td><td>Success, Failure</td></tr>
</table>
</div></div></div></div></div><div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Administrative Templates</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">Policy definitions (ADMX files) retrieved from the central store.</div><div class="he3"><span class="sectionTitle" tabindex="0">Citrix Components/Workspace Environment Management/Agent Host Configuration</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Agent service port" gpmc_settingPath="Computer Configuration/Administrative Templates/Citrix Components/Workspace Environment Management/Agent Host Configuration" gpmc_settingDescription="The port on which the agent connects to the infrastructure server. The port defaults to 8286 and corresponds to the AgentPort command line argument." gpmc_supported="At least Microsoft Windows XP">Agent service port</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Agent service port :</td><td>8286</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Cache synchronization port" gpmc_settingPath="Computer Configuration/Administrative Templates/Citrix Components/Workspace Environment Management/Agent Host Configuration" gpmc_settingDescription="The port on which the agent cache synchronization process connects to the infrastructure service to synchronize the agent cache with the infrastructure server. The port defaults to 8285 and corresponds to the AgentSyncPort command line argument." gpmc_supported="At least Microsoft Windows XP">Cache synchronization port</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Cache synchronization port :</td><td>8285</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Infrastructure server" gpmc_settingPath="Computer Configuration/Administrative Templates/Citrix Components/Workspace Environment Management/Agent Host Configuration" gpmc_settingDescription="Type the name or IP address of the computer on which the infrastructure services are installed. The agent connects to this computer." gpmc_supported="At least Microsoft Windows XP">Infrastructure server</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Infrastructure server :</td><td>10.231.100.7</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Google/Google Chrome</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Browser sign in settings" gpmc_settingPath="Computer Configuration/Administrative Templates/Google/Google Chrome" gpmc_settingDescription="This policy controls the sign-in behavior of the browser. It allows you to specify if the user can sign in to Google Chrome with their account and use account related services like Google Chrome Sync.&lt;br/&gt;&lt;br/&gt;If the policy is set to &amp;quot;Disable browser sign-in&amp;quot; then the user cannot sign in to the browser and use account-based services. In this case browser-level features like Google Chrome Sync cannot be used and will be unavailable. On iOS, if the user was signed in and the policy is set to &amp;quot;Disabled&amp;quot; they will be signed out immediately. On other platforms, they will be signed out the next time they run Google Chrome. On all platforms, their local profile data like bookmarks, passwords etc. will be preserved and still usable. The user will still be able to sign into and use Google web services like Gmail.&lt;br/&gt;&lt;br/&gt;If the policy is set to &amp;quot;Enable browser sign-in,&amp;quot; then the user is allowed to sign in to the browser. On all platforms except iOS, the user is automatically signed in to the browser when signed in to Google web services like Gmail. Being signed in to the browser means the user&amp;#39;s account information will be kept by the browser. However, it does not mean that Google Chrome Sync will be turned on by default; the user must separately opt-in to use this feature. Enabling this policy will prevent the user from turning off the setting that allows browser sign-in. To control the availability of Google Chrome Sync, use the SyncDisabled policy.&lt;br/&gt;&lt;br/&gt;If the policy is set to &amp;quot;Force browser sign-in&amp;quot; the user is presented with an account selection dialog and has to choose and sign in to an account to use the browser. This ensures that for managed accounts the policies associated with the account are applied and enforced. The default value of BrowserGuestModeEnabled will be set to disabled. Note that existing unsigned profiles will be locked and inaccessible after enabling this policy. For more information, see help center article: https://support.google.com/chrome/a/answer/7572556 . This option is not supported on Linux, Android or iOS. It will fall back to &amp;quot;Enable browser sign-in&amp;quot; if used.&lt;br/&gt;&lt;br/&gt;If this policy is not set then the user can decide if they want to enable browser sign-in in the Google Chrome settings and use it as they see fit." gpmc_supported="Microsoft Windows 7 or later">Browser sign in settings</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable AutoFill for addresses" gpmc_settingPath="Computer Configuration/Administrative Templates/Google/Google Chrome" gpmc_settingDescription="Setting the policy to True or leaving it unset gives users control of Autofill for addresses in the UI.&lt;br/&gt;&lt;br/&gt;Setting the policy to False means Autofill never suggests or fills address information, nor does it save additional address information that users submit while browsing the web." gpmc_supported="Microsoft Windows 7 or later">Enable AutoFill for addresses</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable AutoFill for credit cards" gpmc_settingPath="Computer Configuration/Administrative Templates/Google/Google Chrome" gpmc_settingDescription="Setting the policy to True or leaving it unset means users can control autofill suggestions for credit cards in the UI.&lt;br/&gt;&lt;br/&gt;Setting the policy to False means autofill never suggests or fills credit card information, nor will it save additional credit card information that users might submit while browsing the web." gpmc_supported="Microsoft Windows 7 or later">Enable AutoFill for credit cards</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the web store from the New Tab Page and app launcher" gpmc_settingPath="Computer Configuration/Administrative Templates/Google/Google Chrome" gpmc_settingDescription="Hide the Chrome Web Store app and footer link from the New Tab Page and Google ChromeOS app launcher.&lt;br/&gt;&lt;br/&gt;When this policy is set to true, the icons are hidden.&lt;br/&gt;&lt;br/&gt;When this policy is set to false or is not configured, the icons are visible." gpmc_supported="Microsoft Windows 7 or later">Hide the web store from the New Tab Page and app launcher</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Google/Google Chrome/Extensions</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Configure extension installation allow list" gpmc_settingPath="Computer Configuration/Administrative Templates/Google/Google Chrome/Extensions" gpmc_settingDescription="Setting the policy specifies which extensions are not subject to the blocklist.&lt;br/&gt;&lt;br/&gt;A blocklist value of * means all extensions are blocked and users can only install extensions listed in the allow list.&lt;br/&gt;&lt;br/&gt;By default, all extensions are allowed. But, if you prohibited extensions by policy, use the list of allowed extensions to change that policy.&lt;br/&gt;&lt;br/&gt;Example value:&lt;br/&gt;&lt;br/&gt;extension_id1&lt;br/&gt;extension_id2" gpmc_supported="Microsoft Windows 7 or later">Configure extension installation allow list</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td colspan="2"><table class="subtable" >
<tr><th scope="col">Extension IDs to exempt from the blocklist</th></tr>
<tr><td>jahbgfelgdkpjhbcggnkfglaldkhodmi</td></tr>
</table></td></tr></table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Configure the list of force-installed apps and extensions" gpmc_settingPath="Computer Configuration/Administrative Templates/Google/Google Chrome/Extensions" gpmc_settingDescription="Setting the policy specifies a list of apps and extensions that install silently, without user interaction, and which users can&amp;#39;t uninstall or turn off. Permissions are granted implicitly, including for the enterprise.deviceAttributes and enterprise.platformKeys extension APIs. (These 2 APIs aren&amp;#39;t available to apps and extensions that aren&amp;#39;t force-installed.)&lt;br/&gt;&lt;br/&gt;Leaving the policy unset means no apps or extensions are autoinstalled, and users can uninstall any app or extension in Google Chrome.&lt;br/&gt;&lt;br/&gt;This policy supersedes ExtensionInstallBlocklist policy. If a previously force-installed app or extension is removed from this list, Google Chrome automatically uninstalls it.&lt;br/&gt;&lt;br/&gt;The source code of any extension may be altered by users through developer tools, potentially rendering the extension dysfunctional. If this is a concern, set the DeveloperToolsDisabled policy.&lt;br/&gt;&lt;br/&gt;Each list item of the policy is a string that contains an extension ID and, optionally, an update URL separated by a semicolon (;). The extension ID is the 32-letter string found, for example, on chrome://extensions when in Developer mode. If specified, the update URL should point to an Update Manifest XML document ( https://developer.chrome.com/extensions/autoupdate ). The update URL should use one of the following schemes: http, https or file. By default, the Chrome Web Store&amp;#39;s update URL is used. The update URL set in this policy is only used for the initial installation; subsequent updates of the extension use the update URL in the extension&amp;#39;s manifest. The update url for subsequent updates can be overridden using the ExtensionSettings policy, see http://support.google.com/chrome/a?p=Configure_ExtensionSettings_policy.&lt;br/&gt;&lt;br/&gt;On Microsoft&amp;#174; Windows&amp;#174; instances, apps and extensions from outside the Chrome Web Store can only be forced installed if the instance is joined to a Microsoft&amp;#174; Active Directory&amp;#174; domain, joined to Microsoft&amp;#174; Azure&amp;#174; Active Directory&amp;#174; or enrolled in Chrome Browser Cloud Management.&lt;br/&gt;&lt;br/&gt;On macOS instances, apps and extensions from outside the Chrome Web Store can only be force installed if the instance is managed via MDM, joined to a domain via MCX or enrolled in Chrome Browser Cloud Management.&lt;br/&gt;&lt;br/&gt;Note: This policy doesn&amp;#39;t apply to Incognito mode. Read about hosting extensions ( https://developer.chrome.com/extensions/hosting ).&lt;br/&gt;&lt;br/&gt;Example value:&lt;br/&gt;&lt;br/&gt;aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa;https://clients2.google.com/service/update2/crx&lt;br/&gt;abcdefghijklmnopabcdefghijklmnop" gpmc_supported="Microsoft Windows 7 or later">Configure the list of force-installed apps and extensions</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td colspan="2"><table class="subtable" >
<tr><th scope="col">Extension/App IDs and update URLs to be silently installed</th></tr>
<tr><td>hdppkjifljbdpckfajcmlblbchhledln; https://clients2.google.com/service/update2/crx</td></tr>
</table></td></tr></table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Google/Google Chrome/Google Cast</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable Google Cast" gpmc_settingPath="Computer Configuration/Administrative Templates/Google/Google Chrome/Google Cast" gpmc_settingDescription="Setting the policy to Enabled or leaving it unset turns on Google Cast, which users can launch from the app menu, page context menus, media controls on Cast-enabled websites, and (if shown) the Cast toolbar icon.&lt;br/&gt;&lt;br/&gt;Setting the policy to Disabled turns off Google Cast." gpmc_supported="Microsoft Windows 7 or later">Enable Google Cast</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Show the Google Cast toolbar icon" gpmc_settingPath="Computer Configuration/Administrative Templates/Google/Google Chrome/Google Cast" gpmc_settingDescription="Setting the policy to Enabled displays the Cast toolbar icon on the toolbar or the overflow menu, and users can&amp;#39;t remove it.&lt;br/&gt;&lt;br/&gt;Setting the policy to Disabled or leaving it unset lets users pin or remove the icon through its contextual menu.&lt;br/&gt;&lt;br/&gt;If the policy EnableMediaRouter is set to Disabled, then this policy&amp;#39;s value has no effect, and the toolbar icon doesn&amp;#39;t appear." gpmc_supported="Microsoft Windows 7 or later">Show the Google Cast toolbar icon</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Google/Google Chrome/Password manager</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable saving passwords to the password manager" gpmc_settingPath="Computer Configuration/Administrative Templates/Google/Google Chrome/Password manager" gpmc_settingDescription="This policy controls the browser&amp;#39;s ability to automatically remember passwords on websites and save them in the built-in password manager. It does not limit access or change the contents of passwords saved in the password manager and possibly synchronized to the Google account profile and Android.&lt;br/&gt;&lt;br/&gt;Setting the policy to Enabled means users have Google Chrome remember passwords and provide them the next time they sign in to a site.&lt;br/&gt;&lt;br/&gt;Setting the policy to Disabled means users can&amp;#39;t save new passwords, but previously saved passwords will still work.&lt;br/&gt;&lt;br/&gt;If the policy is set, users can&amp;#39;t change it in Google Chrome. If not set, the user can turn off password saving." gpmc_supported="Microsoft Windows 7 or later">Enable saving passwords to the password manager</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Google/Google Chrome/Removed policies</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow background tabs freeze" gpmc_settingPath="Computer Configuration/Administrative Templates/Google/Google Chrome/Removed policies" gpmc_settingDescription="This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500" gpmc_supported="Microsoft Windows 7 or later">Allow background tabs freeze</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Configure extension installation allowlist" gpmc_settingPath="Computer Configuration/Administrative Templates/Google/Google Chrome/Removed policies" gpmc_settingDescription="This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500" gpmc_supported="Microsoft Windows 7 or later">Configure extension installation allowlist</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td colspan="2"><table class="subtable" >
<tr><th scope="col">Extension IDs to exempt from the blocklist</th></tr>
<tr><td>hdppkjifljbdpckfajcmlblbchhledln</td></tr>
</table></td></tr></table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Configure extension installation blocklist" gpmc_settingPath="Computer Configuration/Administrative Templates/Google/Google Chrome/Removed policies" gpmc_settingDescription="This policy is removed. It is not compatible with this version of Google Chrome. Read more at https://support.google.com/chrome/a/answer/7643500" gpmc_supported="Microsoft Windows 7 or later">Configure extension installation blocklist</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td colspan="2"><table class="subtable" >
<tr><th scope="col">Extension IDs the user should be prevented from installing (or * for all)</th></tr>
<tr><td>*</td></tr>
</table></td></tr></table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">LAPS</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not allow password expiration time longer than required by policy" gpmc_settingPath="Computer Configuration/Administrative Templates/LAPS" gpmc_settingDescription="&lt;br/&gt;When you enable this setting, planned password expiration longer than password age dictated by &amp;quot;Password Settings&amp;quot; policy is NOT allowed. When such expiration is detected, password is changed immediately and password expiration is set according to policy.&lt;br/&gt;&lt;br/&gt;When you disable or not configure this setting, password expiration time may be longer than required by &amp;quot;Password Settings&amp;quot; policy.&lt;br/&gt;      " gpmc_supported="At least Microsoft Windows Vista or Windows Server 2003 family">Do not allow password expiration time longer than required by policy</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable local admin password management" gpmc_settingPath="Computer Configuration/Administrative Templates/LAPS" gpmc_settingDescription="&lt;br/&gt;Enables management of password for local administrator account&lt;br/&gt;&lt;br/&gt;If you enable this setting, local administrator password is managed&lt;br/&gt;&lt;br/&gt;If you disable or not configure this setting, local administrator password is NOT managed&lt;br/&gt;      " gpmc_supported="At least Microsoft Windows Vista or Windows Server 2003 family">Enable local admin password management</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Password Settings" gpmc_settingPath="Computer Configuration/Administrative Templates/LAPS" gpmc_settingDescription="&lt;br/&gt;Configures password parameters&lt;br/&gt;&lt;br/&gt;Password complexity: which characters are used when generating a new password&lt;br/&gt;  Default: Large letters + small letters + numbers + special characters&lt;br/&gt;&lt;br/&gt;Password length&lt;br/&gt;  Minimum: 8 characters&lt;br/&gt;  Maximum: 64 characters&lt;br/&gt;  Default: 14 characters&lt;br/&gt;&lt;br/&gt;Password age in days&lt;br/&gt;  Minimum: 1 day&lt;br/&gt;  Maximum: 365 days&lt;br/&gt;  Default: 30 days&lt;br/&gt;      " gpmc_supported="At least Microsoft Windows Vista or Windows Server 2003 family">Password Settings</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Password Complexity</td><td>Large letters + small letters + numbers + specials</td></tr>
<tr><td>Password Length</td><td>14</td></tr>
<tr><td>Password Age (Days)</td><td>30</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Microsoft Edge</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow freezing of background tabs (obsolete)" gpmc_settingPath="Computer Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="OBSOLETE: This policy is obsolete and doesn&amp;#39;t work after Microsoft Edge 86.&lt;br/&gt;&lt;br/&gt;This policy doesn&amp;#39;t work, use &amp;#39;SleepingTabsEnabled&amp;#39; (Configure sleeping tabs) instead.&lt;br/&gt;&lt;br/&gt;Controls whether Microsoft Edge can freeze tabs that are in the background for at least 5 minutes.&lt;br/&gt;&lt;br/&gt;Tab freezing reduces CPU, battery, and memory usage. Microsoft Edge uses heuristics to avoid freezing tabs that do useful work in the background, such as display notifications, play sound, and stream video.&lt;br/&gt;&lt;br/&gt;If you enable or don&amp;#39;t configure this policy, tabs that have been in the background for at least 5 minutes might be frozen.&lt;br/&gt;&lt;br/&gt;If you disable this policy, no tabs will be frozen." gpmc_supported="Microsoft Edge version 79-86, Windows 7 or later">Allow freezing of background tabs (obsolete)</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow user feedback" gpmc_settingPath="Computer Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Microsoft Edge uses the Edge Feedback feature (enabled by default) to allow users to send feedback, suggestions or customer surveys and to report any issues with the browser. Also, by default, users can&amp;#39;t disable (turn off) the Edge Feedback feature.&lt;br/&gt;&lt;br/&gt;Starting in Microsoft Edge 105, if the user is signed into Microsoft Edge with their work or school account, their feedback is associated with their account and organization.&lt;br/&gt;&lt;br/&gt;If you enable this policy or don&amp;#39;t configure it, users can invoke Edge Feedback.&lt;br/&gt;&lt;br/&gt;If you disable this policy, users can&amp;#39;t invoke Edge Feedback." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Allow user feedback</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Browser sign-in settings" gpmc_settingPath="Computer Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Specify whether a user can sign into Microsoft Edge with their account and use account-related services like sync and single sign on. To control the availability of sync, use the &amp;#39;SyncDisabled&amp;#39; (Disable synchronization of data using Microsoft sync services) policy instead.&lt;br/&gt;&lt;br/&gt;If you set this policy to &amp;#39;Disable&amp;#39;, make sure that you also set the &amp;#39;NonRemovableProfileEnabled&amp;#39; (Configure whether a user always has a default profile automatically signed in with their work or school account) policy to disabled because &amp;#39;NonRemovableProfileEnabled&amp;#39; disables the creation of an automatically signed in browser profile. If both policies are set, Microsoft Edge will use the &amp;#39;Disable browser sign-in&amp;#39; policy and behave as if &amp;#39;NonRemovableProfileEnabled&amp;#39; is set to disabled.&lt;br/&gt;&lt;br/&gt;If you set this policy to &amp;#39;Enable&amp;#39;, users can sign into the browser. Signing into the browser doesn&amp;#39;t mean that sync is turned on by default; the user must separately opt-in to use this feature.&lt;br/&gt;&lt;br/&gt;If you set this policy to &amp;#39;Force&amp;#39;, users must sign into a profile to use the browser. By default, this will allow the user to choose whether they want to sync to their account, unless sync is disabled by the domain admin or with the &amp;#39;SyncDisabled&amp;#39; policy. The default value of &amp;#39;BrowserGuestModeEnabled&amp;#39; (Enable guest mode) policy is set to false.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this policy users can decide if they want to enable the browser sign-in option and use it as they see fit.&lt;br/&gt;&lt;br/&gt;Policy options mapping:&lt;br/&gt;&lt;br/&gt;* Disable (0) = Disable browser sign-in&lt;br/&gt;&lt;br/&gt;* Enable (1) = Enable browser sign-in&lt;br/&gt;&lt;br/&gt;* Force (2) = Force users to sign-in to use the browser (all profiles)&lt;br/&gt;&lt;br/&gt;Use the preceding information when configuring this policy." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Browser sign-in settings</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Configure Internet Explorer integration" gpmc_settingPath="Computer Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="For guidance about configuring the optimal experience for Internet Explorer mode see https://go.microsoft.com/fwlink/?linkid=2094210&lt;br/&gt;&lt;br/&gt;Policy options mapping:&lt;br/&gt;&lt;br/&gt;* None (0) = None&lt;br/&gt;&lt;br/&gt;* IEMode (1) = Internet Explorer mode&lt;br/&gt;&lt;br/&gt;* NeedIE (2) = Internet Explorer 11&lt;br/&gt;&lt;br/&gt;Use the preceding information when configuring this policy." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Configure Internet Explorer integration</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Configure Internet Explorer integration</td><td>Internet Explorer mode</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Configure the Enterprise Mode Site List" gpmc_settingPath="Computer Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="For guidance about configuring the optimal experience for Internet Explorer mode see https://go.microsoft.com/fwlink/?linkid=2094210&lt;br/&gt;&lt;br/&gt;Example value: https://internal.contoso.com/sitelist.xml" gpmc_supported="Microsoft Edge version 78, Windows 7 or later">Configure the Enterprise Mode Site List</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Configure the Enterprise Mode Site List</td><td>C:\GPO\IE11Mode\IE11_Sitelist.xml</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable AutoFill for addresses" gpmc_settingPath="Computer Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Enables the AutoFill feature and allows users to auto-complete address information in web forms using previously stored information.&lt;br/&gt;&lt;br/&gt;If you disable this policy, AutoFill never suggests or fills in address information, nor does it save additional address information that the user might submit while browsing the web.&lt;br/&gt;&lt;br/&gt;If you enable this policy or don&amp;#39;t configure it, users can control AutoFill for addresses in the user interface.&lt;br/&gt;&lt;br/&gt;Note that if you disable this policy you also stop all activity for all web forms, except payment and password forms. No further entries are saved, and Microsoft Edge won&amp;#39;t suggest or AutoFill any previous entries." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Enable AutoFill for addresses</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable AutoFill for payment instruments" gpmc_settingPath="Computer Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Enables Microsoft Edge&amp;#39;s AutoFill feature and lets users auto complete payment instruments like credit or debit cards in web forms using previously stored information. This includes suggesting new payment instruments like Buy Now Pay Later (BNPL) in web forms and Express Checkout.&lt;br/&gt;&lt;br/&gt;If you enable this policy or don&amp;#39;t configure it, users can control AutoFill for payment instruments.&lt;br/&gt;&lt;br/&gt;If you disable this policy, AutoFill never suggests, fills, or recommends new payment Instruments. Additionally, it won&amp;#39;t save any payment instrument information that users submit while browsing the web." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Enable AutoFill for payment instruments</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the First-run experience and splash screen" gpmc_settingPath="Computer Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="If you enable this policy, the First-run experience and the splash screen will not be shown to users when they run Microsoft Edge for the first time.&lt;br/&gt;&lt;br/&gt;For the configuration options shown in the First Run Experience, the browser will default to the following:&lt;br/&gt;&lt;br/&gt;-On the New Tab Page, the feed type will be set to MSN News and the layout to Inspirational.&lt;br/&gt;&lt;br/&gt;-The user will still be automatically signed into Microsoft Edge if the Windows account is of Azure AD or MSA type.&lt;br/&gt;&lt;br/&gt;-Sync will not be enabled by default and users will be prompted to choose whether they&amp;#39;d like to sync on browser startup. You can use the &amp;#39;ForceSync&amp;#39; (Force synchronization of browser data and do not show the sync consent prompt) or the &amp;#39;SyncDisabled&amp;#39; (Disable synchronization of data using Microsoft sync services) policy to configure sync and the sync consent prompt.&lt;br/&gt;&lt;br/&gt;If you disable or don&amp;#39;t configure this policy, the First-run experience and the Splash screen will be shown.&lt;br/&gt;&lt;br/&gt;Note: The specific configuration options shown to the user in the First Run Experience, can also be managed by using other specific policies. You can use the HideFirstRunExperience policy in combination with these policies to configure a specific browser experience on your managed devices. Some of these other policies are:&lt;br/&gt;&lt;br/&gt;-&amp;#39;AutoImportAtFirstRun&amp;#39; (Automatically import another browser&amp;#39;s data and settings at first run)&lt;br/&gt;&lt;br/&gt;-&amp;#39;NewTabPageLocation&amp;#39; (Configure the new tab page URL)&lt;br/&gt;&lt;br/&gt;-&amp;#39;NewTabPageSetFeedType&amp;#39; (Configure the Microsoft Edge new tab page experience)&lt;br/&gt;&lt;br/&gt;-&amp;#39;ForceSync&amp;#39;&lt;br/&gt;&lt;br/&gt;-&amp;#39;SyncDisabled&amp;#39;&lt;br/&gt;&lt;br/&gt;-&amp;#39;BrowserSignin&amp;#39; (Browser sign-in settings)&lt;br/&gt;&lt;br/&gt;-&amp;#39;NonRemovableProfileEnabled&amp;#39; (Configure whether a user always has a default profile automatically signed in with their work or school account)" gpmc_supported="Microsoft Edge version 80, Windows 7 or later">Hide the First-run experience and splash screen</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Restrict which accounts can be used to sign in to Microsoft Edge" gpmc_settingPath="Computer Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Determines which accounts can be used to sign in to the Microsoft Edge account that&amp;#39;s chosen during the Sync opt-in flow.&lt;br/&gt;&lt;br/&gt;You can configure this policy to match multiple accounts using a Perl style regular expression for the pattern. If a user tries to sign in to the browser with an account whose username doesn&amp;#39;t match this pattern, they are blocked and will get the appropriate error message. Note that pattern matches are case sensitive. For more information about the regular expression rules that are used, refer to https://go.microsoft.com/fwlink/p/?linkid=2133903.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this policy or leave it blank, users can use any account to sign in to Microsoft Edge.&lt;br/&gt;&lt;br/&gt;Note that signed-in profiles with a username that doesn&amp;#39;t match this pattern will be signed out after this policy is enabled.&lt;br/&gt;&lt;br/&gt;Example value: .*@contoso.com" gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Restrict which accounts can be used to sign in to Microsoft Edge</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Restrict which accounts can be used to sign in to Microsoft Edge</td><td>.*@dfjsklfjdsklfdsjfdfsdfdsfsdl.com</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Microsoft Edge/Cast</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable Google Cast" gpmc_settingPath="Computer Configuration/Administrative Templates/Microsoft Edge/Cast" gpmc_settingDescription="Enable this policy to enable Google Cast. Users will be able to launch it from the app menu, page context menus, media controls on Cast-enabled websites, and (if shown) the Cast toolbar icon.&lt;br/&gt;&lt;br/&gt;Disable this policy to disable Google Cast.&lt;br/&gt;&lt;br/&gt;By default, Google Cast is enabled." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Enable Google Cast</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Show the cast icon in the toolbar" gpmc_settingPath="Computer Configuration/Administrative Templates/Microsoft Edge/Cast" gpmc_settingDescription="Set this policy to true to show the Cast toolbar icon on the toolbar or the overflow menu. Users won&amp;#39;t be able to remove it.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this policy or if you disable it, users can pin or remove the icon by using its contextual menu.&lt;br/&gt;&lt;br/&gt;If you&amp;#39;ve also set the &amp;#39;EnableMediaRouter&amp;#39; (Enable Google Cast) policy to false, then this policy is ignored, and the toolbar icon isn&amp;#39;t shown." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Show the cast icon in the toolbar</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Microsoft Edge/Default search provider</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Default search provider name" gpmc_settingPath="Computer Configuration/Administrative Templates/Microsoft Edge/Default search provider" gpmc_settingDescription="Specifies the name of the default search provider.&lt;br/&gt;&lt;br/&gt;If you enable this policy, you set the name of the default search provider.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t enable this policy or if you leave it empty, the host name specified by the search URL is used.&lt;br/&gt;&lt;br/&gt;&amp;#39;DefaultSearchProviderName&amp;#39; should be set to an organization-approved encrypted search provider that corresponds to the encrypted search provider set in DTBC-0008. This policy is applied only if you enable the &amp;#39;DefaultSearchProviderEnabled&amp;#39; (Enable the default search provider) and &amp;#39;DefaultSearchProviderSearchURL&amp;#39; (Default search provider search URL) policies.&lt;br/&gt;&lt;br/&gt;Starting in Microsoft Edge 84, you can set this policy as a recommended policy. If the user has already set a default search provider, the default search provider configured by this recommended policy will not be added to the list of search providers the user can choose from. If this is the desired behavior, use the &amp;#39;ManagedSearchEngines&amp;#39; (Manage Search Engines) policy.&lt;br/&gt;&lt;br/&gt;Example value: My Intranet Search" gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Default search provider name</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Default search provider name</td><td>Google</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Default search provider search URL" gpmc_settingPath="Computer Configuration/Administrative Templates/Microsoft Edge/Default search provider" gpmc_settingDescription="Specifies the URL of the search engine used for a default search. The URL contains the string &amp;#39;{searchTerms}&amp;#39;, which is replaced at query time by the terms the user is searching for.&lt;br/&gt;&lt;br/&gt;Specify Bing&amp;#39;s search URL as:&lt;br/&gt;&lt;br/&gt;&amp;#39;{bing:baseURL}search?q={searchTerms}&amp;#39;.&lt;br/&gt;&lt;br/&gt;Specify Google&amp;#39;s search URL as: &amp;#39;{google:baseURL}search?q={searchTerms}&amp;amp;{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}ie={inputEncoding}&amp;#39;.&lt;br/&gt;&lt;br/&gt;This policy is required when you enable the &amp;#39;DefaultSearchProviderEnabled&amp;#39; (Enable the default search provider) policy; if you don&amp;#39;t enable the latter policy, this policy is ignored.&lt;br/&gt;&lt;br/&gt;Starting in Microsoft Edge 84, you can set this policy as a recommended policy. If the user has already set a default search provider, the default search provider configured by this recommended policy will not be added to the list of search providers the user can choose from. If this is the desired behavior, use the &amp;#39;ManagedSearchEngines&amp;#39; (Manage Search Engines) policy.&lt;br/&gt;&lt;br/&gt;Example value: https://search.contoso.com/search?q={searchTerms}" gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Default search provider search URL</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Default search provider search URL</td><td>{google:baseURL}search?q={searchTerms}&amp;{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}ie={inputEncoding}</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Default search provider URL for suggestions" gpmc_settingPath="Computer Configuration/Administrative Templates/Microsoft Edge/Default search provider" gpmc_settingDescription="Specifies the URL for the search engine used to provide search suggestions. The URL contains the string &amp;#39;{searchTerms}&amp;#39;, which is replaced at query time by the text the user has entered so far.&lt;br/&gt;&lt;br/&gt;This policy is optional. If you don&amp;#39;t configure it, users won&amp;#39;t see search suggestions; they will see suggestions from their browsing history and favorites.&lt;br/&gt;&lt;br/&gt;Bing&amp;#39;s suggest URL can be specified as:&lt;br/&gt;&lt;br/&gt;&amp;#39;{bing:baseURL}qbox?query={searchTerms}&amp;#39;.&lt;br/&gt;&lt;br/&gt;Google&amp;#39;s suggest URL can be specified as: &amp;#39;{google:baseURL}complete/search?output=chrome&amp;amp;q={searchTerms}&amp;#39;.&lt;br/&gt;&lt;br/&gt;This policy is applied only if you enable the &amp;#39;DefaultSearchProviderEnabled&amp;#39; (Enable the default search provider) and &amp;#39;DefaultSearchProviderSearchURL&amp;#39; (Default search provider search URL) policies.&lt;br/&gt;&lt;br/&gt;Starting in Microsoft Edge 84, you can set this policy as a recommended policy. If the user has already set a default search provider, the default search provider configured by this recommended policy will not be added to the list of search providers the user can choose from. If this is the desired behavior, use the &amp;#39;ManagedSearchEngines&amp;#39; (Manage Search Engines) policy.&lt;br/&gt;&lt;br/&gt;Example value: https://search.contoso.com/suggest?q={searchTerms}" gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Default search provider URL for suggestions</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Default search provider URL for suggestions</td><td>{google:baseURL}complete/search?output=chrome&amp;q={searchTerms}</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable the default search provider" gpmc_settingPath="Computer Configuration/Administrative Templates/Microsoft Edge/Default search provider" gpmc_settingDescription="Enables the ability to use a default search provider.&lt;br/&gt;&lt;br/&gt;If you enable this policy, a user can search for a term by typing in the address bar (as long as what they type isn&amp;#39;t a URL).&lt;br/&gt;&lt;br/&gt;You can specify the default search provider to use by enabling the rest of the default search policies. If these are left empty (not configured) or configured incorrectly, the user can choose the default provider.&lt;br/&gt;&lt;br/&gt;If you disable this policy, the user can&amp;#39;t search from the address bar.&lt;br/&gt;&lt;br/&gt;If you enable or disable this policy, users can&amp;#39;t change or override it.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this policy, the default search provider is enabled, and the user can choose the default search provider and set the search provider list.&lt;br/&gt;&lt;br/&gt;This policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, joined to Microsoft Azure Active Directory, or instances that enrolled for device management. On macOS, this policy is available only on instances that are managed via MDM or joined to a domain via MCX.&lt;br/&gt;&lt;br/&gt;Starting in Microsoft Edge 84, you can set this policy as a recommended policy." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Enable the default search provider</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Parameters for an image URL that uses POST" gpmc_settingPath="Computer Configuration/Administrative Templates/Microsoft Edge/Default search provider" gpmc_settingDescription="If you enable this policy, it specifies the parameters used when an image search that uses POST is performed. The policy consists of comma-separated name/value pairs. If a value is a template parameter, like {imageThumbnail} in the preceding example, it&amp;#39;s replaced with real image thumbnail data. This policy is applied only if you enable the &amp;#39;DefaultSearchProviderEnabled&amp;#39; (Enable the default search provider) and &amp;#39;DefaultSearchProviderSearchURL&amp;#39; (Default search provider search URL) policies.&lt;br/&gt;&lt;br/&gt;Specify Bing&amp;#39;s Image Search URL Post Params as:&lt;br/&gt;&amp;#39;imageBin={google:imageThumbnailBase64}&amp;#39;.&lt;br/&gt;&lt;br/&gt;Specify Google&amp;#39;s Image Search URL Post Params as:&lt;br/&gt;&amp;#39;encoded_image={google:imageThumbnail},image_url={google:imageURL},sbisrc={google:imageSearchSource},original_width={google:imageOriginalWidth},original_height={google:imageOriginalHeight}&amp;#39;.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t set this policy, image search requests are sent using the GET method.&lt;br/&gt;&lt;br/&gt;Starting in Microsoft Edge 84, you can set this policy as a recommended policy. If the user has already set a default search provider, the default search provider configured by this recommended policy will not be added to the list of search providers the user can choose from. If this is the desired behavior, use the &amp;#39;ManagedSearchEngines&amp;#39; (Manage Search Engines) policy.&lt;br/&gt;&lt;br/&gt;Example value: content={imageThumbnail},url={imageURL},sbisrc={SearchSource}" gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Parameters for an image URL that uses POST</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Parameters for an image URL that uses POST</td><td>encoded_image={google:imageThumbnail},image_url={google:imageURL},sbisrc={google:imageSearchSource},original_width={google:imageOriginalWidth},original_height={google:imageOriginalHeight}</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Specifies the search-by-image feature for the default search provider" gpmc_settingPath="Computer Configuration/Administrative Templates/Microsoft Edge/Default search provider" gpmc_settingDescription="Specifies the URL to the search engine used for image search. Search requests are sent using the GET method.&lt;br/&gt;&lt;br/&gt;This policy is optional. If you don&amp;#39;t configure it, image search isn&amp;#39;t available.&lt;br/&gt;&lt;br/&gt;Specify Bing&amp;#39;s Image Search URL as:&lt;br/&gt;&amp;#39;{bing:baseURL}images/detail/search?iss=sbiupload&amp;amp;FORM=ANCMS1#enterInsights&amp;#39;.&lt;br/&gt;&lt;br/&gt;Specify Google&amp;#39;s Image Search URL as: &amp;#39;{google:baseURL}searchbyimage/upload&amp;#39;.&lt;br/&gt;&lt;br/&gt;See &amp;#39;DefaultSearchProviderImageURLPostParams&amp;#39; (Parameters for an image URL that uses POST) policy to finish configuring image search.&lt;br/&gt;&lt;br/&gt;This policy is applied only if you enable the &amp;#39;DefaultSearchProviderEnabled&amp;#39; (Enable the default search provider) and &amp;#39;DefaultSearchProviderSearchURL&amp;#39; (Default search provider search URL) policies.&lt;br/&gt;&lt;br/&gt;Starting in Microsoft Edge 84, you can set this policy as a recommended policy. If the user has already set a default search provider, the default search provider configured by this recommended policy will not be added to the list of search providers the user can choose from. If this is the desired behavior, use the &amp;#39;ManagedSearchEngines&amp;#39; (Manage Search Engines) policy.&lt;br/&gt;&lt;br/&gt;Example value: https://search.contoso.com/searchbyimage/upload" gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Specifies the search-by-image feature for the default search provider</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Specifies the search-by-image feature for the default search provider</td><td>{google:baseURL}searchbyimage/upload</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Microsoft Edge/Extensions</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow specific extensions to be installed" gpmc_settingPath="Computer Configuration/Administrative Templates/Microsoft Edge/Extensions" gpmc_settingDescription="Setting this policy specifies which extensions are not subject to the blocklist.&lt;br/&gt;&lt;br/&gt;A blocklist value of * means all extensions are blocked and users can only install extensions listed in the allow list.&lt;br/&gt;&lt;br/&gt;By default, all extensions are allowed. However, if you prohibited extensions by policy, you can use the list of allowed extensions to change that policy.&lt;br/&gt;&lt;br/&gt;Example value:&lt;br/&gt;&lt;br/&gt;extension_id1&lt;br/&gt;extension_id2" gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Allow specific extensions to be installed</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td colspan="2"><table class="subtable" >
<tr><th scope="col">Extension IDs to exempt from the block list</th></tr>
<tr><td>ggjhpefgjjfobnfoldnjipclpcfbgbhl</td></tr>
<tr><td>hdppkjifljbdpckfajcmlblbchhledln</td></tr>
<tr><td>folaiffmfcgfagbjdccaokekdohcgman</td></tr>
</table></td></tr></table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Control which extensions are installed silently" gpmc_settingPath="Computer Configuration/Administrative Templates/Microsoft Edge/Extensions" gpmc_settingDescription="Set this policy to specify a list of apps and extensions that install silently, without user interaction. Users can&amp;#39;t uninstall or turn off this setting. Permissions are granted implicitly, including the enterprise.deviceAttributes and enterprise.platformKeys extension APIs. Note: These 2 APIs aren&amp;#39;t available to apps and extensions that aren&amp;#39;t force-installed.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t set this policy, no apps or extensions are autoinstalled and users can uninstall any app in Microsoft Edge.&lt;br/&gt;&lt;br/&gt;This policy supercedes &amp;#39;ExtensionInstallBlocklist&amp;#39; (Control which extensions cannot be installed) policy. If a previously force-installed app or extension is removed from this list, Microsoft Edge automatically uninstalls it.&lt;br/&gt;&lt;br/&gt;For Windows instances not joined to a Microsoft Active Directory domain, forced installation is limited to apps and extensions listed in the Microsoft Edge Add-ons website.&lt;br/&gt;&lt;br/&gt;On macOS instances, apps and extensions from outside the Microsoft Edge Add-ons website can only be force installed if the instance is managed via MDM, or joined to a domain via MCX.&lt;br/&gt;&lt;br/&gt;The source code of any extension can be altered by users with developer tools, potentially rendering the extension unfunctional. If this is a concern, configure the &amp;#39;DeveloperToolsAvailability&amp;#39; (Control where developer tools can be used) policy.&lt;br/&gt;&lt;br/&gt;Each list item of the policy is a string that contains an extension ID and, optionally, an &amp;quot;update&amp;quot; URL separated by a semicolon (;). The extension ID is the 32-letter string found, for example, on edge://extensions when in Developer mode. If specified, the &amp;quot;update&amp;quot; URL should point to an Update Manifest XML document ( https://go.microsoft.com/fwlink/?linkid=2095043 ). By default, the Microsoft Edge Add-ons website&amp;#39;s update URL is used. The &amp;quot;update&amp;quot; URL set in this policy is only used for the initial installation; subsequent updates of the extension use the update URL in the extension&amp;#39;s manifest.&lt;br/&gt;&lt;br/&gt;Note: This policy doesn&amp;#39;t apply to InPrivate mode. Read about hosting extensions at [Publish and update extensions in the Microsoft Edge Add-ons website](/microsoft-edge/extensions-chromium/enterprise/hosting-and-updating).&lt;br/&gt;&lt;br/&gt;Example value:&lt;br/&gt;&lt;br/&gt;gbchcmhmhahfdphkhkmpfmihenigjmpp;https://edge.microsoft.com/extensionwebstorebase/v1/crx&lt;br/&gt;abcdefghijklmnopabcdefghijklmnop" gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Control which extensions are installed silently</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td colspan="2"><table class="subtable" >
<tr><th scope="col">Extension/App IDs and update URLs to be silently installed</th></tr>
<tr><td>hdppkjifljbdpckfajcmlblbchhledln; https://clients2.google.com/service/update2/crx</td></tr>
</table></td></tr></table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Control which extensions cannot be installed" gpmc_settingPath="Computer Configuration/Administrative Templates/Microsoft Edge/Extensions" gpmc_settingDescription="Lets you specify which extensions the users CANNOT install. Extensions already installed will be disabled if blocked, without a way for the user to enable them. After a disabled extension is removed from the blocklist it will automatically get re-enabled.&lt;br/&gt;&lt;br/&gt;A blocklist value of &amp;#39;*&amp;#39; means all extensions are blocked unless they are explicitly listed in the allowlist.&lt;br/&gt;&lt;br/&gt;If this policy isn&amp;#39;t set, the user can install any extension in Microsoft Edge.&lt;br/&gt;&lt;br/&gt;Example value:&lt;br/&gt;&lt;br/&gt;extension_id1&lt;br/&gt;extension_id2" gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Control which extensions cannot be installed</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td colspan="2"><table class="subtable" >
<tr><th scope="col">Extension IDs the user should be prevented from installing (or * for all)</th></tr>
<tr><td>*</td></tr>
</table></td></tr></table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Microsoft Edge/Password manager and protection</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable saving passwords to the password manager" gpmc_settingPath="Computer Configuration/Administrative Templates/Microsoft Edge/Password manager and protection" gpmc_settingDescription="Enable Microsoft Edge to save user passwords. The next time a user visits a site with a saved password, Microsoft Edge will enter the password automatically.&lt;br/&gt;&lt;br/&gt;If you enable or don&amp;#39;t configure this policy, users can save and add their passwords in Microsoft Edge.&lt;br/&gt;&lt;br/&gt;If you disable this policy, users can&amp;#39;t save and add new passwords, but they can still use previously saved passwords." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Enable saving passwords to the password manager</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Network/Network Connections/Windows Defender Firewall/Domain Profile</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Windows Defender Firewall: Prohibit notifications" gpmc_settingPath="Computer Configuration/Administrative Templates/Network/Network Connections/Windows Defender Firewall/Domain Profile" gpmc_settingDescription="Prevents Windows Defender Firewall from displaying notifications to the user when a program requests that Windows Defender Firewall add the program to the program exceptions list.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows Defender Firewall prevents the display of these notifications.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Windows Defender Firewall allows the display of these notifications. In the Windows Defender Firewall component of Control Panel, the &amp;quot;Notify me when Windows Defender Firewall blocks a new program&amp;quot; check box is selected and administrators cannot clear it.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, Windows Defender Firewall behaves as if the policy setting were disabled, except that in the Windows Defender Firewall component of Control Panel, the &amp;quot;Notify me when Windows Defender Firewall blocks a new program&amp;quot; check box is selected by default, and administrators can change it." gpmc_supported="At least Windows XP Professional with SP2">Windows Defender Firewall: Prohibit notifications</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Windows Defender Firewall: Protect all network connections" gpmc_settingPath="Computer Configuration/Administrative Templates/Network/Network Connections/Windows Defender Firewall/Domain Profile" gpmc_settingDescription="Turns on Windows Defender Firewall.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows Defender Firewall runs and ignores the &amp;quot;Computer Configuration\Administrative Templates\Network\Network Connections\Prohibit use of Internet Connection Firewall on your DNS domain network&amp;quot; policy setting.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Windows Defender Firewall does not run. This is the only way to ensure that Windows Defender Firewall does not run and administrators who log on locally cannot start it.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, administrators can use the Windows Defender Firewall component in Control Panel to turn Windows Defender Firewall on or off, unless the &amp;quot;Prohibit use of Internet Connection Firewall on your DNS domain network&amp;quot; policy setting overrides." gpmc_supported="At least Windows XP Professional with SP2">Windows Defender Firewall: Protect all network connections</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Printers</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Point and Print Restrictions" gpmc_settingPath="Computer Configuration/Administrative Templates/Printers" gpmc_settingDescription="This policy setting controls the client Point and Print behavior, including the security prompts for Windows Vista computers. The policy setting applies only to non-Print Administrator clients, and only to computers that are members of a domain.&lt;br/&gt;&lt;br/&gt;          If you enable this policy setting:&lt;br/&gt;          -Windows XP and later clients will only download print driver components from a list of explicitly named servers. If a compatible print driver is available on the client, a printer connection will be made. If a compatible print driver is not available on the client, no connection will be made.&lt;br/&gt;          -You can configure Windows Vista clients so that security warnings and elevated command prompts do not appear when users Point and Print, or when printer connection drivers need to be updated.&lt;br/&gt;&lt;br/&gt;          If you do not configure this policy setting:&lt;br/&gt;          -Windows Vista client computers can point and print to any server.&lt;br/&gt;          -Windows Vista computers will show a warning and an elevated command prompt when users create a printer connection to any server using Point and Print.&lt;br/&gt;          -Windows Vista computers will show a warning and an elevated command prompt when an existing printer connection driver needs to be updated.&lt;br/&gt;          -Windows Server 2003 and Windows XP client computers can create a printer connection to any server in their forest using Point and Print.&lt;br/&gt;&lt;br/&gt;          If you disable this policy setting:&lt;br/&gt;          -Windows Vista client computers can create a printer connection to any server using Point and Print.&lt;br/&gt;          -Windows Vista computers will not show a warning or an elevated command prompt when users create a printer connection to any server using Point and Print.&lt;br/&gt;          -Windows Vista computers will not show a warning or an elevated command prompt when an existing printer connection driver needs to be updated.&lt;br/&gt;          -Windows Server 2003 and Windows XP client computers can create a printer connection to any server using Point and Print.&lt;br/&gt;          -The &amp;quot;Users can only point and print to computers in their forest&amp;quot; setting applies only to Windows Server 2003 and Windows XP SP1 (and later service packs)." gpmc_supported="At least Windows Vista">Point and Print Restrictions</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Users can only point and print to these servers:</td><td>Disabled</td></tr>
<tr><td>Enter fully qualified server names separated by semicolons</td><td></td></tr>
<tr><td>Users can only point and print to machines in their forest</td><td>Disabled</td></tr>
<tr><td colspan="2"></td></tr><tr><td colspan="2">Security Prompts:</td></tr><tr><td>When installing drivers for a new connection:</td><td>Do not show warning or elevation prompt</td></tr>
<tr><td>When updating drivers for an existing connection:</td><td>Do not show warning or elevation prompt</td></tr>
<tr><td colspan="2">This setting only applies to:</td></tr><tr><td colspan="2">Windows Vista and later</td></tr></table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Group Policy</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Configure folder redirection policy processing" gpmc_settingPath="Computer Configuration/Administrative Templates/System/Group Policy" gpmc_settingDescription="This policy setting determines when folder redirection policies are updated.&lt;br/&gt;&lt;br/&gt;This policy setting affects all policies that use the folder redirection component of Group Policy, such as those in WindowsSettings\Folder Redirection. You can only set folder redirection policy for Group Policy objects, stored in Active Directory, not for Group Policy objects on the local computer.&lt;br/&gt;&lt;br/&gt;This policy setting overrides customized settings that the program implementing the folder redirection policy setting set when it was installed.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, you can use the check boxes provided to change the options. If you disable or do not configure this policy setting, it has no effect on the system.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Allow processing across a slow network connection&amp;quot; option updates the policies even when the update is being transmitted across a slow network connection, such as a telephone line. Updates across slow connections can cause significant delays.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Process even if the Group Policy objects have not changed&amp;quot; option updates and reapplies the policies even if the policies have not changed. Many policy implementations specify that they are updated only when changed. However, you might want to update unchanged policies, such as reapplying a desired setting in case a user has changed it." gpmc_supported="At least Windows 2000">Configure folder redirection policy processing</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Allow processing across a slow network connection</td><td>Disabled</td></tr>
<tr><td>Process even if the Group Policy objects have not changed</td><td>Enabled</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Configure Internet Explorer Maintenance policy processing" gpmc_settingPath="Computer Configuration/Administrative Templates/System/Group Policy" gpmc_settingDescription="This policy setting determines when Internet Explorer Maintenance policies are updated.&lt;br/&gt;&lt;br/&gt;This policy setting affects all policies that use the Internet Explorer Maintenance component of Group Policy, such as those in Windows Settings\Internet Explorer Maintenance.&lt;br/&gt;&lt;br/&gt;This policy setting overrides customized settings that the program implementing the Internet Explorer Maintenance policy set when it was installed.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, you can use the check boxes provided to change the options. If you disable or do not configure this policy setting, it has no effect on the system.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Allow processing across a slow network connection&amp;quot; option updates the policies even when the update is being transmitted across a slow network connection, such as a telephone line. Updates across slow connections can cause significant delays.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Do not apply during periodic background processing&amp;quot; option prevents the system from updating affected policies in the background while the computer is in use. When background updates are disabled, policy changes will not take effect until the next user logon or system restart.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Process even if the Group Policy objects have not changed&amp;quot; option updates and reapplies the policies even if the policies have not changed. Many policy implementations specify that they are updated only when changed. However, you might want to update unchanged policies, such as reapplying a desired policy setting in case a user has changed it." gpmc_supported="At least Windows 2000">Configure Internet Explorer Maintenance policy processing</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Allow processing across a slow network connection</td><td>Disabled</td></tr>
<tr><td>Do not apply during periodic background processing</td><td>Disabled</td></tr>
<tr><td>Process even if the Group Policy objects have not changed</td><td>Enabled</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Internet Communication Management/Internet Communication settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Automatic Root Certificates Update" gpmc_settingPath="Computer Configuration/Administrative Templates/System/Internet Communication Management/Internet Communication settings" gpmc_settingDescription="This policy setting specifies whether to automatically update root certificates using the Windows Update website. &lt;br/&gt;&lt;br/&gt;Typically, a certificate is used when you use a secure website or when you send and receive secure email. Anyone can issue certificates, but to have transactions that are as secure as possible, certificates must be issued by a trusted certificate authority (CA). Microsoft has included a list in Windows XP and other products of companies and organizations that it considers trusted authorities.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, when you are presented with a certificate issued by an untrusted root authority, your computer will not contact the Windows Update website to see if Microsoft has added the CA to its list of trusted authorities.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, your computer will contact the Windows Update website." gpmc_supported="At least Windows Server 2003 operating systems with SP1 or Windows XP Professional with SP2">Turn off Automatic Root Certificates Update</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Power Management/Hard Disk Settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn Off the hard disk (on battery)" gpmc_settingPath="Computer Configuration/Administrative Templates/System/Power Management/Hard Disk Settings" gpmc_settingDescription="This policy setting specifies the period of inactivity before Windows turns off the hard disk.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, you must provide a value, in seconds, indicating how much idle time should elapse before Windows turns off the hard disk.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can see and change this setting." gpmc_supported="At least Windows Vista">Turn Off the hard disk (on battery)</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Turn Off the Hard Disk (seconds):</td><td>0</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn Off the hard disk (plugged in)" gpmc_settingPath="Computer Configuration/Administrative Templates/System/Power Management/Hard Disk Settings" gpmc_settingDescription="This policy setting specifies the period of inactivity before Windows turns off the hard disk.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, you must provide a value, in seconds, indicating how much idle time should elapse before Windows turns off the hard disk.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can see and change this setting." gpmc_supported="At least Windows Vista">Turn Off the hard disk (plugged in)</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Turn Off the Hard Disk (seconds):</td><td>0</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Power Management/Sleep Settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Specify the system hibernate timeout (on battery)" gpmc_settingPath="Computer Configuration/Administrative Templates/System/Power Management/Sleep Settings" gpmc_settingDescription="This policy setting allows you to specify the period of inactivity before Windows transitions the system to hibernate.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, you must provide a value, in seconds, indicating how much idle time should elapse before Windows transitions to hibernate.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users control this setting.&lt;br/&gt;&lt;br/&gt;If the user has configured a slide show to run on the lock screen when the machine is locked, this can prevent the sleep transition from occuring.  The &amp;quot;Prevent enabling lock screen slide show&amp;quot; policy setting can be used to disable the slide show feature." gpmc_supported="At least Windows Vista">Specify the system hibernate timeout (on battery)</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>System Hibernate Timeout (seconds):</td><td>0</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Specify the system hibernate timeout (plugged in)" gpmc_settingPath="Computer Configuration/Administrative Templates/System/Power Management/Sleep Settings" gpmc_settingDescription="This policy setting allows you to specify the period of inactivity before Windows transitions the system to hibernate.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, you must provide a value, in seconds, indicating how much idle time should elapse before Windows transitions to hibernate.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users control this setting.&lt;br/&gt;&lt;br/&gt;If the user has configured a slide show to run on the lock screen when the machine is locked, this can prevent the sleep transition from occuring.  The &amp;quot;Prevent enabling lock screen slide show&amp;quot; policy setting can be used to disable the slide show feature." gpmc_supported="At least Windows Vista">Specify the system hibernate timeout (plugged in)</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>System Hibernate Timeout (seconds):</td><td>0</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Specify the system sleep timeout (on battery)" gpmc_settingPath="Computer Configuration/Administrative Templates/System/Power Management/Sleep Settings" gpmc_settingDescription="This policy setting allows you to specify the period of inactivity before Windows transitions the system to sleep.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, you must provide a value, in seconds, indicating how much idle time should elapse before Windows transitions to sleep.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users control this setting.&lt;br/&gt;&lt;br/&gt;If the user has configured a slide show to run on the lock screen when the machine is locked, this can prevent the sleep transition from occuring.  The &amp;quot;Prevent enabling lock screen slide show&amp;quot; policy setting can be used to disable the slide show feature." gpmc_supported="At least Windows Vista">Specify the system sleep timeout (on battery)</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>System Sleep Timeout (seconds):</td><td>0</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Specify the system sleep timeout (plugged in)" gpmc_settingPath="Computer Configuration/Administrative Templates/System/Power Management/Sleep Settings" gpmc_settingDescription="This policy setting allows you to specify the period of inactivity before Windows transitions the system to sleep.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, you must provide a value, in seconds, indicating how much idle time should elapse before Windows transitions to sleep.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users control this setting.&lt;br/&gt;&lt;br/&gt;If the user has configured a slide show to run on the lock screen when the machine is locked, this can prevent the sleep transition from occuring.  The &amp;quot;Prevent enabling lock screen slide show&amp;quot; policy setting can be used to disable the slide show feature." gpmc_supported="At least Windows Vista">Specify the system sleep timeout (plugged in)</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>System Sleep Timeout (seconds):</td><td>0</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Removable Storage Access</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Removable Disks: Deny execute access" gpmc_settingPath="Computer Configuration/Administrative Templates/System/Removable Storage Access" gpmc_settingDescription="This policy setting denies execute access to removable disks.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, execute access is denied to this removable storage class.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, execute access is allowed to this removable storage class." gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Removable Disks: Deny execute access</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Removable Disks: Deny read access" gpmc_settingPath="Computer Configuration/Administrative Templates/System/Removable Storage Access" gpmc_settingDescription="This policy setting denies read access to removable disks.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, read access is denied to this removable storage class.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, read access is allowed to this removable storage class." gpmc_supported="At least Windows Vista">Removable Disks: Deny read access</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Removable Disks: Deny write access" gpmc_settingPath="Computer Configuration/Administrative Templates/System/Removable Storage Access" gpmc_settingDescription="This policy setting denies write access to removable disks.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, write access is denied to this removable storage class.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, write access is allowed to this removable storage class.&lt;br/&gt;&lt;br/&gt;Note: To require that users write data to BitLocker-protected storage, enable the policy setting &amp;quot;Deny write access to drives not protected by BitLocker,&amp;quot; which is located in &amp;quot;Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives.&amp;quot;" gpmc_supported="At least Windows Vista">Removable Disks: Deny write access</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/User Profiles</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Add the Administrators security group to roaming user profiles" gpmc_settingPath="Computer Configuration/Administrative Templates/System/User Profiles" gpmc_settingDescription="This policy setting adds the Administrator security group to the roaming user profile share.&lt;br/&gt;&lt;br/&gt;Once an administrator has configured a user&amp;#39;s roaming profile, the profile will be created at the user&amp;#39;s next login. The profile is created at the location that is specified by the administrator.&lt;br/&gt;&lt;br/&gt;For the Windows XP Professional and Windows 2000 Professional operating systems, the default file permissions for the newly generated profile are full control, or read and write access for the user, and no file access for the administrators group.&lt;br/&gt;&lt;br/&gt;By configuring this policy setting, you can alter this behavior.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the administrator group is also given full control to the user&amp;#39;s profile folder.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, only the user is given full control of their user profile, and the administrators group has no file system access to this folder.&lt;br/&gt;&lt;br/&gt;Note: If the policy setting is enabled after the profile is created, the policy setting has no effect.&lt;br/&gt;&lt;br/&gt;Note: The policy setting must be configured on the client computer, not the server, for it to have any effect, because the client computer sets the file share permissions for the roaming profile at creation time.&lt;br/&gt;&lt;br/&gt;Note: In the default case, administrators have no file access to the user&amp;#39;s profile, but they may still take ownership of this folder to grant themselves file permissions.&lt;br/&gt;&lt;br/&gt;Note: The behavior when this policy setting is enabled is exactly the same behavior as in Windows NT 4.0." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Add the Administrators security group to roaming user profiles</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Delete cached copies of roaming profiles" gpmc_settingPath="Computer Configuration/Administrative Templates/System/User Profiles" gpmc_settingDescription="This policy setting determines whether Windows keeps a copy of a user&amp;#39;s roaming profile on the local computer&amp;#39;s hard drive when the user logs off. &lt;br/&gt;&lt;br/&gt;Roaming profiles reside on a network server. By default, when users with roaming profiles log off, the system also saves a copy of their roaming profile on the hard drive of the computer they are using in case the server that stores the roaming profile is unavailable when the user logs on again. The local copy is also used when the remote copy of the roaming user profile is slow to load.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, any local copies of the user&amp;#39;s roaming profile are deleted when the user logs off. The roaming profile still remains on the network server that stores it.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Windows keeps a copy of a user&amp;#39;s roaming profile on the local computer&amp;#39;s hard drive when the user logs off.&lt;br/&gt;&lt;br/&gt;Important: Do not enable this policy setting if you are using the slow link detection feature. To respond to a slow link, the system requires a local copy of the user&amp;#39;s roaming profile." gpmc_supported="At least Windows 2000">Delete cached copies of roaming profiles</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Delete user profiles older than a specified number of days on system restart" gpmc_settingPath="Computer Configuration/Administrative Templates/System/User Profiles" gpmc_settingDescription="This policy setting allows an administrator to automatically delete user profiles on system restart that have not been used within a specified number of days. Note: One day is interpreted as 24 hours after a specific user profile was accessed.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the User Profile Service will automatically delete on the next system restart all user profiles on the computer that have not been used within the specified number of days. &lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, User Profile Service will not automatically delete any profiles on the next system restart." gpmc_supported="At least Windows Vista">Delete user profiles older than a specified number of days on system restart</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Delete user profiles older than (days)</td><td>30</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/AutoPlay Policies</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Autoplay" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/AutoPlay Policies" gpmc_settingDescription="This policy setting allows you to turn off the Autoplay feature.&lt;br/&gt;&lt;br/&gt;          Autoplay begins reading from a drive as soon as you insert media in the drive. As a result, the setup file of programs and the music on audio media start immediately.&lt;br/&gt;&lt;br/&gt;          Prior to Windows XP SP2, Autoplay is disabled by default on removable drives, such as the floppy disk drive (but not the CD-ROM drive), and on network drives.&lt;br/&gt;&lt;br/&gt;          Starting with Windows XP SP2, Autoplay is enabled for removable drives as well, including Zip drives and some USB mass storage devices.&lt;br/&gt;&lt;br/&gt;          If you enable this policy setting, Autoplay is disabled on CD-ROM and removable media drives, or disabled on all drives.&lt;br/&gt;&lt;br/&gt;          This policy setting disables Autoplay on additional types of drives. You cannot use this setting to enable Autoplay on drives on which it is disabled by default.&lt;br/&gt;&lt;br/&gt;          If you disable or do not configure this policy setting, AutoPlay is enabled.&lt;br/&gt;&lt;br/&gt;          Note: This policy setting appears in both the Computer Configuration and User Configuration folders. If the policy settings conflict, the policy setting in Computer Configuration takes precedence over the policy setting in User Configuration." gpmc_supported="At least Windows 2000">Turn off Autoplay</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Turn off Autoplay on:</td><td>All drives</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Event Log Service/Application</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Control Event Log behavior when the log file reaches its maximum size" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Event Log Service/Application" gpmc_settingDescription="This policy setting controls Event Log behavior when the log file reaches its maximum size.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting and a log file reaches its maximum size, new events are not written to the log and are lost.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting and a log file reaches its maximum size, new events overwrite old events.&lt;br/&gt;&lt;br/&gt;Note: Old events may or may not be retained according to the &amp;quot;Backup log automatically when full&amp;quot; policy setting." gpmc_supported="At least Windows Vista">Control Event Log behavior when the log file reaches its maximum size</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Specify the maximum log file size (KB)" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Event Log Service/Application" gpmc_settingDescription="This policy setting specifies the maximum size of the log file in kilobytes.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, you can configure the maximum log file size to be between 1 megabyte (1024 kilobytes) and 2 terabytes (2147483647 kilobytes), in kilobyte increments.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the maximum size of the log file will be set to the locally configured value. This value can be changed by the local administrator using the Log Properties dialog, and it defaults to 1 megabyte." gpmc_supported="At least Windows Vista">Specify the maximum log file size (KB)</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Maximum Log Size (KB)</td><td>20480</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Event Log Service/System</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Control Event Log behavior when the log file reaches its maximum size" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Event Log Service/System" gpmc_settingDescription="This policy setting controls Event Log behavior when the log file reaches its maximum size.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting and a log file reaches its maximum size, new events are not written to the log and are lost.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting and a log file reaches its maximum size, new events overwrite old events.&lt;br/&gt;&lt;br/&gt;Note: Old events may or may not be retained according to the &amp;quot;Backup log automatically when full&amp;quot; policy setting." gpmc_supported="At least Windows Vista">Control Event Log behavior when the log file reaches its maximum size</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Specify the maximum log file size (KB)" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Event Log Service/System" gpmc_settingDescription="This policy setting specifies the maximum size of the log file in kilobytes.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, you can configure the maximum log file size to be between 1 megabyte (1024 kilobytes) and 2 terabytes (2147483647 kilobytes), in kilobyte increments.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the maximum size of the log file will be set to the locally configured value. This value can be changed by the local administrator using the Log Properties dialog, and it defaults to 1 megabyte." gpmc_supported="At least Windows Vista">Specify the maximum log file size (KB)</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Maximum Log Size (KB)</td><td>20480</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Microsoft Edge</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow extended telemetry for the Books tab" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Microsoft Edge" gpmc_settingDescription="This policy setting lets you decide how much data to send to Microsoft about the book you&amp;#39;re reading from the Books tab in Microsoft Edge.&lt;br/&gt;&lt;br/&gt;If you enable this setting, Microsoft Edge sends additional telemetry data, on top of the basic telemetry data, from the Books tab.&lt;br/&gt;&lt;br/&gt;If you disable or don&amp;#39;t configure this setting, Microsoft Edge only sends basic telemetry data, depending on your device configuration." gpmc_supported="Microsoft Edge on Windows 10, Version 1803 or later">Allow extended telemetry for the Books tab</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Configure Autofill" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Microsoft Edge" gpmc_settingDescription="This policy setting lets you decide whether employees can use Autofill to automatically fill in form fields while using Microsoft Edge. By default, employees can choose whether to use Autofill.&lt;br/&gt;&lt;br/&gt;If you enable this setting, employees can use Autofill to automatically fill in forms while using Microsoft Edge.&lt;br/&gt;&lt;br/&gt;If you disable this setting, employees can&amp;#39;t use Autofill to automatically fill in forms while using Microsoft Edge.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this setting, employees can choose whether to use Autofill to automatically fill in forms while using Microsoft Edge." gpmc_supported="Microsoft Edge on Windows 10 or later">Configure Autofill</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Configure Password Manager" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Microsoft Edge" gpmc_settingDescription="This policy setting lets you decide whether employees can save their passwords locally, using Password Manager. By default, Password Manager is turned on.&lt;br/&gt;&lt;br/&gt;If you enable this setting, employees can use Password Manager to save their passwords locally.&lt;br/&gt;&lt;br/&gt;If you disable this setting, employees can&amp;#39;t use Password Manager to save their passwords locally.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this setting, employees can choose whether to use Password Manager to save their passwords locally." gpmc_supported="Microsoft Edge on Windows 10 or later">Configure Password Manager</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent the First Run webpage from opening on Microsoft Edge" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Microsoft Edge" gpmc_settingDescription="&lt;br/&gt;This policy setting lets you decide whether employees see Microsoft&amp;#39;s First Run webpage when opening Microsoft Edge for the first time.&lt;br/&gt;&lt;br/&gt;If you enable this setting, employees won&amp;#39;t see the First Run page when opening Microsoft Edge for the first time.&lt;br/&gt;&lt;br/&gt;If you disable or don&amp;#39;t configure this setting, employees will see the First Run page when opening Microsoft Edge for the first time." gpmc_supported="Microsoft Edge on Windows 10, Version 1703 or later">Prevent the First Run webpage from opening on Microsoft Edge</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Remote Desktop Services/Remote Desktop Session Host/Connections</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow users to connect remotely by using Remote Desktop Services" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Remote Desktop Services/Remote Desktop Session Host/Connections" gpmc_settingDescription="This policy setting allows you to configure remote access to computers by using Remote Desktop Services.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users who are members of the Remote Desktop Users group on the target computer can connect remotely to the target computer by using Remote Desktop Services.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, users cannot connect remotely to the target computer by using Remote Desktop Services. The target computer will maintain any current connections, but will not accept any new incoming connections.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, Remote Desktop Services uses the Remote Desktop setting on the target computer to determine whether the remote connection is allowed. This setting is found on the Remote tab in the System properties sheet. By default, remote connections are not allowed. &lt;br/&gt;&lt;br/&gt;Note: You can limit which clients are able to connect remotely by using Remote Desktop Services by configuring the policy setting at Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security\Require user authentication for remote connections by using Network Level Authentication. &lt;br/&gt;&lt;br/&gt;You can limit the number of users who can connect simultaneously by configuring the policy setting at Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Connections\Limit number of connections, or by configuring the policy setting Maximum Connections by using the Remote Desktop Session Host WMI Provider.&lt;br/&gt;" gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Allow users to connect remotely by using Remote Desktop Services</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Remote Desktop Services/Remote Desktop Session Host/Security</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Require use of specific security layer for remote (RDP) connections" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Remote Desktop Services/Remote Desktop Session Host/Security" gpmc_settingDescription="This policy setting specifies whether to require the use of a specific security layer to secure communications between clients and RD Session Host servers during Remote Desktop Protocol (RDP) connections.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, all communications between clients and RD Session Host servers during remote connections must use the security method specified in this setting. The following security methods are available:&lt;br/&gt;&lt;br/&gt;* Negotiate: The Negotiate method enforces the most secure method that is supported by the client. If Transport Layer Security (TLS) version 1.0 is supported, it is used to authenticate the RD Session Host server. If TLS is not supported, native Remote Desktop Protocol (RDP) encryption is used to secure communications, but the RD Session Host server is not authenticated. Native RDP encryption (as opposed to SSL encryption) is not recommended.&lt;br/&gt;&lt;br/&gt;* RDP: The RDP method uses native RDP encryption to secure communications between the client and RD Session Host server. If you select this setting, the RD Session Host server is not authenticated. Native RDP encryption (as opposed to SSL encryption) is not recommended.&lt;br/&gt;&lt;br/&gt;* SSL (TLS 1.0): The SSL method requires the use of TLS 1.0 to authenticate the RD Session Host server. If TLS is not supported, the connection fails. This is the recommended setting for this policy.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the security method to be used for remote connections to RD Session Host servers is not specified at the Group Policy level.&lt;br/&gt;" gpmc_supported="At least Windows Vista">Require use of specific security layer for remote (RDP) connections</span></td><td>Enabled</td><td>PCI Plugin 18405</td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Security Layer</td><td>SSL</td></tr>
<tr><td colspan="2">Choose the security layer from the drop-down list.</td></tr></table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Require user authentication for remote connections by using Network Level Authentication" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Remote Desktop Services/Remote Desktop Session Host/Security" gpmc_settingDescription="This policy setting allows you to specify whether to require user authentication for remote connections to the RD Session Host server by using Network Level Authentication. This policy setting enhances security by requiring that user authentication occur earlier in the remote connection process.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, only client computers that support Network Level Authentication can connect to the RD Session Host server.&lt;br/&gt;&lt;br/&gt;To determine whether a client computer supports Network Level Authentication, start Remote Desktop Connection on the client computer, click the icon in the upper-left corner of the Remote Desktop Connection dialog box, and then click About. In the About Remote Desktop Connection dialog box, look for the phrase Network Level Authentication supported.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Network Level Authentication is not required for user authentication before allowing remote connections to the RD Session Host server.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the local setting on the target computer will be enforced. On Windows Server 2012 and Windows 8, Network Level Authentication is enforced by default.&lt;br/&gt;&lt;br/&gt;Important: Disabling this policy setting provides less security because user authentication will occur later in the remote connection process.&lt;br/&gt;" gpmc_supported="At least Windows Vista">Require user authentication for remote connections by using Network Level Authentication</span></td><td>Enabled</td><td>PCI plugin 58453 and 18405</td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Set client connection encryption level" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Remote Desktop Services/Remote Desktop Session Host/Security" gpmc_settingDescription="Specifies whether to require the use of a specific encryption level to secure communications between client computers and RD Session Host servers during Remote Desktop Protocol (RDP) connections. This policy only applies when you are using native RDP encryption. However, native RDP encryption (as opposed to SSL encryption) is not recommended. This policy does not apply to SSL encryption.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, all communications between clients and RD Session Host servers during remote connections must use the encryption method specified in this setting. By default, the encryption level is set to High. The following encryption methods are available:&lt;br/&gt;&lt;br/&gt;* High: The High setting encrypts data sent from the client to the server and from the server to the client by using strong 128-bit encryption. Use this encryption level in environments that contain only 128-bit clients (for example, clients that run Remote Desktop Connection). Clients that do not support this encryption level cannot connect to RD Session Host servers.&lt;br/&gt;&lt;br/&gt;* Client Compatible: The Client Compatible setting encrypts data sent between the client and the server at the maximum key strength supported by the client. Use this encryption level in environments that include clients that do not support 128-bit encryption.&lt;br/&gt;&lt;br/&gt;* Low: The Low setting encrypts only data sent from the client to the server by using 56-bit encryption.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the encryption level to be used for remote connections to RD Session Host servers is not enforced through Group Policy.&lt;br/&gt;&lt;br/&gt;Important&lt;br/&gt;&lt;br/&gt;FIPS compliance can be configured through the System cryptography. Use FIPS compliant algorithms for encryption, hashing, and signing settings in Group Policy (under Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options.) The FIPS compliant setting encrypts and decrypts data sent from the client to the server and from the server to the client, with the Federal Information Processing Standard (FIPS) 140 encryption algorithms, by using Microsoft cryptographic modules. Use this encryption level when communications between clients and RD Session Host servers requires the highest level of encryption.&lt;br/&gt;" gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Set client connection encryption level</span></td><td>Enabled</td><td>pci plugin 57690  Terminal Service Encryption</td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Encryption Level</td><td>High Level</td></tr>
<tr><td colspan="2">Choose the encryption level from the drop-down list.</td></tr></table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Search</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow Cortana" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Search" gpmc_settingDescription="This policy setting specifies whether Cortana is allowed on the device. &lt;br/&gt;&amp;#160;&lt;br/&gt;If you enable or don&amp;#39;t configure this setting, Cortana will be allowed on the device. If you disable this setting, Cortana will be turned off. &lt;br/&gt;&amp;#160;&lt;br/&gt;When Cortana is off, users will still be able to use search to find things on the device." gpmc_supported="At least Windows Server 2016, Windows 10">Allow Cortana</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Store</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable all apps from Microsoft Store " gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Store" gpmc_settingDescription="Disable&amp;#160;turns off the launch of all apps from the Microsoft Store that came pre-installed or were downloaded. Apps will not be updated. Your Store will also be disabled.&amp;#160;Enable&amp;#160;turns all of it back on. This setting applies only to Enterprise and Education editions of Windows." gpmc_supported="At least Windows Server 2016, Windows 10">Disable all apps from Microsoft Store </span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off the Store application" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Store" gpmc_settingDescription="Denies or allows access to the Store application.&lt;br/&gt;&lt;br/&gt;If you enable this setting, access to the Store application is denied. Access to the Store is required for installing app updates.&lt;br/&gt;&lt;br/&gt;If you disable or don&amp;#39;t configure this setting, access to the Store application is allowed." gpmc_supported="At least Windows Server 2012, Windows 8 or Windows RT">Turn off the Store application</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Extra Registry Settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">Display names for some settings cannot be found. You might be able to resolve this issue by updating the .ADM files used by Group Policy Management.<br/><br/><table class="info" >
<tr><th scope="col">Setting</th><th scope="col">State</th></tr>
<tr><td>Software\Policies\Mozilla\lockPref\network.dns.disableIPv6</td><td>1</td></tr>
</table>
</div></div></div></div><div class="filler"></div>
<div class="he1h_expanded"><span class="sectionTitle" tabindex="0">Preferences</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1_expanded"><span class="sectionTitle" tabindex="0">Windows Settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he2"><span class="sectionTitle" tabindex="0">Environment Variables</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">Environment Variable (Variable: JAVA_TOOL_OPTIONS)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">JAVA_TOOL_OPTIONS (Order: 1)</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Context</td><td>System</td></tr>
<tr><td>Variable</td><td>JAVA_TOOL_OPTIONS</td></tr>
<tr><td>Value</td><td>-Djava.vendor=&quot;Sun Microsystems Inc.&quot;</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div></div></div><div class="he2"><span class="sectionTitle" tabindex="0">Registry</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">InitialKeyboardIndicators (Order: 1)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_USERS</td></tr>
<tr><td>Key path</td><td>.DEFAULT\Control Panel\Keyboard</td></tr>
<tr><td>Value name</td><td>InitialKeyboardIndicators</td></tr>
<tr><td>Value type</td><td>REG_SZ</td></tr>
<tr><td>Value data</td><td>2</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>Yes</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table><b>Description</b><table class="subtable" >
<tr><td>Enable num-lock on startup</td></tr></table>
</div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">BlockNetFramework451 (Order: 2)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Create</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SOFTWARE\Microsoft\NET Framework Setup\NDP</td></tr>
<tr><td>Value name</td><td>BlockNetFramework451</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x1 (1)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">UserFeedbackAllowed (Order: 3)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SOFTWARE\Policies\Microsoft\Edge</td></tr>
<tr><td>Value name</td><td>UserFeedbackAllowed</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x0 (0)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">enablesecuritysignature (Order: 4)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SYSTEM\CurrentControlSet\services\LanmanServer\Parameters</td></tr>
<tr><td>Value name</td><td>enablesecuritysignature</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x1 (1)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table><b>Description</b><table class="subtable" >
<tr><td>SMB Signing PCI 57608</td></tr></table>
</div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">requiresecuresignature (Order: 5)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SYSTEM\CurrentControlSet\services\LanmanServer\Parameters</td></tr>
<tr><td>Value name</td><td>requiresecuresignature</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x1 (1)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table><b>Description</b><table class="subtable" >
<tr><td>SMB Signing PCI 57608</td></tr></table>
</div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">RequireSecuritySignature (Order: 6)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SYSTEM\CurrentControlSet\services\LanmanWorkstation\Parameters</td></tr>
<tr><td>Value name</td><td>RequireSecuritySignature</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x1 (1)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table><b>Description</b><table class="subtable" >
<tr><td>SMB Signing PCI 57608</td></tr></table>
</div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">EnableSecuritySignature (Order: 7)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SYSTEM\CurrentControlSet\services\LanmanWorkstation\Parameters</td></tr>
<tr><td>Value name</td><td>EnableSecuritySignature</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x1 (1)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table><b>Description</b><table class="subtable" >
<tr><td>SMB Siging PCI 57608</td></tr></table>
</div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">TurnOffSidebar (Order: 8)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Create</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar</td></tr>
<tr><td>Value name</td><td>TurnOffSidebar</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x1 (1)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table><b>Description</b><table class="subtable" >
<tr><td>PCI Plugin 59915</td></tr></table>
</div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">CachedLogonsCount (Order: 9)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon</td></tr>
<tr><td>Value name</td><td>CachedLogonsCount</td></tr>
<tr><td>Value type</td><td>REG_SZ</td></tr>
<tr><td>Value data</td><td>0</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table><b>Description</b><table class="subtable" >
<tr><td>Plugin ID 11457 </td></tr></table>
</div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">LmCompatibilityLevel (Order: 10)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SYSTEM\CurrentControlSet\Control\Lsa</td></tr>
<tr><td>Value name</td><td>LmCompatibilityLevel</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x3 (3)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">CachedLogonsCount (Order: 11)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon</td></tr>
<tr><td>Value name</td><td>CachedLogonsCount</td></tr>
<tr><td>Value type</td><td>REG_SZ</td></tr>
<tr><td>Value data</td><td>0</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table><b>Description</b><table class="subtable" >
<tr><td>Plugin ID 11457</td></tr></table>
</div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Enabled (Order: 12)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server</td></tr>
<tr><td>Value name</td><td>Enabled</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x0 (0)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Enabled (Order: 13)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Client</td></tr>
<tr><td>Value name</td><td>Enabled</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x0 (0)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">iexeplore.exe (Order: 14)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_PRINT_INFO_DISCLOSURE_FIX</td></tr>
<tr><td>Value name</td><td>iexeplore.exe</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x1 (1)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">iexplore.exe (Order: 15)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_PRINT_INFO_DISCLOSURE_FIX</td></tr>
<tr><td>Value name</td><td>iexplore.exe</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x1 (1)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">iexplore.exe (Order: 16)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_ALLOW_USER32_EXCEPTION_HANDLER_HARDENING</td></tr>
<tr><td>Value name</td><td>iexplore.exe</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x1 (1)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">iexplore.exe (Order: 17)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_ALLOW_USER32_EXCEPTION_HANDLER_HARDENING</td></tr>
<tr><td>Value name</td><td>iexplore.exe</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x1 (1)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">CWDIllegalInDllSearch (Order: 18)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SYSTEM\CurrentControlSet\Control\Session Manager</td></tr>
<tr><td>Value name</td><td>CWDIllegalInDllSearch</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x2 (2)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">FeatureSettingsOverride (Order: 19)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management</td></tr>
<tr><td>Value name</td><td>FeatureSettingsOverride</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x0 (0)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table><b>Description</b><table class="subtable" >
<tr><td>Nessus Plugin 111689</td></tr></table>
</div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">FeatureSettingsOverrideMask (Order: 20)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management</td></tr>
<tr><td>Value name</td><td>FeatureSettingsOverrideMask</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x3 (3)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table><b>Description</b><table class="subtable" >
<tr><td>Nessus Plugin 111689</td></tr></table>
</div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">EnableActiveProbing (Order: 21)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SYSTEM\CurrentControlSet\Services\NlaSvc\Parameters\Internet</td></tr>
<tr><td>Value name</td><td>EnableActiveProbing</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x0 (0)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">RestrictDriverInstallationToAdministrators (Order: 22)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SOFTWARE\Policies\Microsoft\Windows NT\Printers\PointAndPrint</td></tr>
<tr><td>Value name</td><td>RestrictDriverInstallationToAdministrators</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x0 (0)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">AllocateCDRoms (Order: 23)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Replace</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon</td></tr>
<tr><td>Value name</td><td>AllocateCDRoms</td></tr>
<tr><td>Value type</td><td>REG_SZ</td></tr>
<tr><td>Value data</td><td>1</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">NoDriveTypeAutoRun (Order: 24)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Replace</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer</td></tr>
<tr><td>Value name</td><td>NoDriveTypeAutoRun</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0xFF (255)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">NtfsDisable8dot3NameCreation (Order: 25)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Replace</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SYSTEM\CurrentControlSet\Control\FileSystem</td></tr>
<tr><td>Value name</td><td>NtfsDisable8dot3NameCreation</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x1 (1)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Optional (Order: 26)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Delete</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems</td></tr>
<tr><td>Value name</td><td>Optional</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Enabled (Order: 27)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Replace</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server</td></tr>
<tr><td>Value name</td><td>Enabled</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x0 (0)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Enabled (Order: 28)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Replace</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Client</td></tr>
<tr><td>Value name</td><td>Enabled</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x0 (0)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">NoNewAppAlert (Order: 29)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Create</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SOFTWARE\Policies\Microsoft\Windows\Explorer</td></tr>
<tr><td>Value name</td><td>NoNewAppAlert</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x0 (0)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">DelayedDesktopSwitchTimeout (Order: 30)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Replace</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system</td></tr>
<tr><td>Value name</td><td>DelayedDesktopSwitchTimeout</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x5 (5)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Installed Components (Order: 31)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Delete</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SOFTWARE\Microsoft\Active Setup\Installed Components</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Installed Components (Order: 32)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Delete</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">RestoreConnection (Order: 33)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Replace</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SYSTEM\CurrentControlSet\Control\NetworkProvider</td></tr>
<tr><td>Value name</td><td>RestoreConnection</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x0 (0)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div></div></div><div class="filler"></div>
<div class="he1_expanded"><span class="sectionTitle" tabindex="0">Control Panel Settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he2"><span class="sectionTitle" tabindex="0">Local Users and Groups</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">User (Name: Administrator (built-in))</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">Administrator (built-in) (Order: 2)</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4h"><span class="sectionTitle" tabindex="0">Local User</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>User name</td><td>Administrator (built-in)</td></tr>
<tr><td>Rename to</td><td>Apollo</td></tr>
<tr><td>User cannot change password</td><td>False</td></tr>
<tr><td>Password never expires</td><td>True</td></tr>
<tr><td>Account is disabled</td><td>False</td></tr>
<tr><td>Account expires</td><td>Never</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Group (Name: Remote Desktop Users (built-in))</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">Remote Desktop Users (built-in) (Order: 1)</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4h"><span class="sectionTitle" tabindex="0">Local Group</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Group name</td><td>Remote Desktop Users (built-in)</td></tr>
<tr><td>Delete all member users</td><td>Disabled</td></tr>
<tr><td>Delete all member groups</td><td>Disabled</td></tr>
</table><b>Add members</b><table class="subtable" ><tr><td>EMEA\NL-L-SEC-Remote Desktop Access Users</td><td>S-1-5-21-513466819-3096973226-347852806-433231</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Group (Name: Administrators (built-in))</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">Administrators (built-in) (Order: 3)</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4h"><span class="sectionTitle" tabindex="0">Local Group</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Group name</td><td>Administrators (built-in)</td></tr>
<tr><td>Delete all member users</td><td>Disabled</td></tr>
<tr><td>Delete all member groups</td><td>Disabled</td></tr>
</table><b>Add members</b><table class="subtable" ><tr><td>EMEA\NL-L-SEC-Delegation Local Administration Rights Client Systems</td><td>S-1-5-21-513466819-3096973226-347852806-2181</td></tr>
<tr><td>EMEA\emeanessus.1</td><td>S-1-5-21-513466819-3096973226-347852806-32532</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div></div></div><div class="he2"><span class="sectionTitle" tabindex="0">Services</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">Service (Name: wmiApSrv)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">wmiApSrv (Order: 1)</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Service name</td><td>wmiApSrv</td></tr>
<tr><td>Action</td><td>Start service</td></tr>
<tr><td>Startup type:</td><td>Automatic</td></tr>
<tr><td>Wait timeout if service is locked:</td><td>30 seconds</td></tr>
</table>
<b>Service Account</b><table class="subtable" ><tr><td>Log on service as:</td><td><i>No change</i></td></tr>
</table><b>Recovery</b><table class="subtable" ><tr><td>First failure:</td><td><i>No change</i></td></tr>
<tr><td>Second failure:</td><td><i>No change</i></td></tr>
<tr><td>Subsequent failures:</td><td><i>No change</i></td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div></div></div></div></div></div>
<div class="filler"></div>
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">User Configuration (Disabled)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">No settings defined.</div></div>
</body></html>