<html dir="ltr" xmlns:svg="http://www.w3.org/2000/svg" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape" gpmc_reportInitialized="false">
<head>
<meta http-equiv="X-UA-Compatible" content="IE=edge" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-16" />
<title>FR-PO-WIN-U-Security_Agent_KM_tbd</title>
<!-- Styles -->
<style type="text/css">
                body    { background-color:#FFFFFF; border:1px solid #666666; color:#000000; font-size:68%; font-family:MS Shell Dlg; margin:0,0,10px,0; word-break:normal; word-wrap:break-word; }

                table   { font-size:100%; table-layout:fixed; width:100%; }

                td,th   { overflow:visible; text-align:left; vertical-align:top; white-space:normal; }

                .title  { background:#FFFFFF; border:none; color:#333333; display:inline-table; height:24px; margin:0px,0px,0px,0px; padding-top:0px; position:relative; table-layout:fixed; z-index:5; }

                .he0_expanded    { background-color:#FEF7D6; border:1px solid #BBBBBB; color:#3333CC; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:0px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; }

                .he1_expanded    { background-color:#A0BACB; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:20px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; }

                .he0h_expanded   { background-color: #FEF0D0; border: 1px solid #BBBBBB; color: #000000; cursor: hand; display: block; font-family: MS Shell Dlg; font-size: 100%; font-weight: bold; height: 2.25em; margin-bottom: -1px; margin-left: 5px; margin-right: 0px; padding-left: 8px; padding-right: 5em; padding-top: 4px; position: relative;  }
                .he1h_expanded   { background-color: #7197B3; border: 1px solid #BBBBBB; color: #000000; cursor: hand; display: block; font-family: MS Shell Dlg; font-size: 100%; font-weight: bold; height: 2.25em; margin-bottom: -1px; margin-left: 10px; margin-right: 0px; padding-left: 8px; padding-right: 5em; padding-top: 4px; position: relative; }

                .he1    { background-color:#A0BACB; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:20px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; }

                .he2    { background-color:#C0D2DE; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:30px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; }

                .he3    { background-color:#D9E3EA; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:40px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; }

                .he4    { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:50px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; }

                .he4h   { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:55px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; }

                .he4i   { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:55px; margin-right:0px; padding-bottom:5px; padding-left:21px; padding-top:4px; position:relative; }

                .he2i   { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:35px; margin-right:0px; padding-bottom:5px; padding-left:21px; padding-top:4px; position:relative;}
                .he5    { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:60px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; }

                .he5h   { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; padding-right:5em; padding-top:4px; margin-bottom:-1px; margin-left:65px; margin-right:0px; position:relative; }

                .he5i   { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:65px; margin-right:0px; padding-left:21px; padding-bottom:5px; padding-top: 4px; position:relative; }

                div .expando { color:#000000; text-decoration:none; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:normal; position:absolute; right:10px; text-decoration:underline; z-index: 0; }

                .he0 .expando { font-size:100%; }

                .info, .info3, .info4, .disalign  { line-height:1.6em; padding:0px,0px,0px,0px; margin:0px,0px,0px,0px; }

                .disalign TD                      { padding-bottom:5px; padding-right:10px; }

                .info TD                          { padding-right:10px; width:50%; }

                .info3 TD                         { padding-right:10px; width:33%; }

                .info4 TD, .info4 TH              { padding-right:10px; width:25%; }

                .info TH, .info3 TH, .info4 TH, .disalign TH { border-bottom:1px solid #CCCCCC; padding-right:10px; }

                .subtable, .subtable3             { border:1px solid #CCCCCC; margin-left:0px; background:#FFFFFF; margin-bottom:10px; }

                .subtable TD, .subtable3 TD       { padding-left:10px; padding-right:5px; padding-top:3px; padding-bottom:3px; line-height:1.1em; }

                .subtable TH, .subtable3 TH       { border-bottom:1px solid #CCCCCC; font-weight:normal; padding-left:10px; line-height:1.6em;  }

                .subtable .footnote               { border-top:1px solid #CCCCCC; }

                .subtable3 .footnote, .subtable .footnote { border-top:1px solid #CCCCCC; }

                .subtable_frame     { background:#D9E3EA; border:1px solid #CCCCCC; margin-bottom:10px; margin-left:15px; }

                .subtable_frame TD  { line-height:1.1em; padding-bottom:3px; padding-left:10px; padding-right:15px; padding-top:3px; }

                .subtable_frame TH  { border-bottom:1px solid #CCCCCC; font-weight:normal; padding-left:10px; line-height:1.6em; }

                .subtableInnerHead { border-bottom:1px solid #CCCCCC; border-top:1px solid #CCCCCC; }

                .explainlink            { color:#0000FF; text-decoration:none; cursor:hand; }

                .explainlink:hover      { color:#0000FF; text-decoration:underline; }

                .spacer { background:transparent; border:1px solid #BBBBBB; color:#FFFFFF; display:block; font-family:MS Shell Dlg; font-size:100%; height:10px; margin-bottom:-1px; margin-left:43px; margin-right:0px; padding-top: 4px; position:relative; }

                .filler { background:transparent; border:none; color:#FFFFFF; display:block; font:100% MS Shell Dlg; line-height:8px; margin-bottom:-1px; margin-left:53px; margin-right:0px; padding-top:4px; position:relative; }

                .container { display:block; position:relative; }

                .rsopheader { background-color:#A0BACB; border-bottom:1px solid black; color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-bottom:5px; text-align:center; }

                .rsopname { color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-left:11px; }

                .gponame{ color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-left:11px; }

                .gpotype{ color:#333333; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; padding-left:11px; }

                #uri    { color:#333333; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; }

                #dtstamp{ color:#333333; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; text-align:left; width:30%; }

                #objshowhide { color:#000000; cursor:hand; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; margin-right:0px; padding-right:10px; text-align:right; text-decoration:underline; z-index:2; word-wrap:normal; }

                #gposummary { display:block; }

                #gpoinformation { display:block; }

                @media print {

                    #objshowhide{ display:none; }

                    body    { color:#000000; border:1px solid #000000; }

                    .title  { color:#000000; border:1px solid #000000; }

                    .he0_expanded    { color:#000000; border:1px solid #000000; }

                    .he1h_expanded   { color:#000000; border:1px solid #000000; }

                    .he1_expanded    { color:#000000; border:1px solid #000000; }

                    .he1    { color:#000000; border:1px solid #000000; }

                    .he2    { color:#000000; background:#EEEEEE; border:1px solid #000000; }

                    .he3    { color:#000000; border:1px solid #000000; }

                    .he4    { color:#000000; border:1px solid #000000; }

                    .he4h   { color:#000000; border:1px solid #000000; }

                    .he4i   { color:#000000; border:1px solid #000000; }

                    .he5    { color:#000000; border:1px solid #000000; }

                    .he5h   { color:#000000; border:1px solid #000000; }

                    .he5i   { color:#000000; border:1px solid #000000; }

                    }

</style>
<!-- Scripts -->
<script type="text/javascript" language="javascript">
/*
String "strShowHide(0/1)"
0 = Hide all mode.
1 = Show all mode.
*/

var windowsArray = new Array();
var strShowHide = 1;

//Localized strings

var strShow = "show";
var strHide = "hide";
var strShowAll = "show all";
var strHideAll = "hide all";
var strShown = "shown";
var strHidden = "hidden";
var strExpandoNumPixelsFromEdge = "10px";


function IsSectionHeader(obj) {
    return (obj.className === "he0_expanded") || (obj.className === "he0h_expanded") || (obj.className === "he1h_expanded") || (obj.className === "he1_expanded") || (obj.className === "he1") || (obj.className === "he2") || (obj.className === "he3") || (obj.className === "he4") || (obj.className === "he4h") || (obj.className === "he5") || (obj.className === "he5h");
}

function IsSectionExpandedByDefault(objHeader) {
    if (objHeader === null) {
        return false;
    } else {
        return (objHeader.className.slice(objHeader.className.lastIndexOf("_")) === "_expanded");
    }
}

function SetSectionState(objHeader, strState) {
    var i = 0;
    var j;
    var all = objHeader.parentElement.ownerDocument.all;

    if (all === null) {
        return;
    }

    for (j = 0; j < all.length; j++) {
        if (all[j] === objHeader) {
            break;
        }
        i = i + 1;
    }

    for (j = i; j < all.length; j++) {
        if (all[i].className === "container") {
            break;
        }
        i = i + 1;
    }

    var objContainer = all[i];

    if (strState === "toggle") {
        if (objContainer.style.display === "none") {
            SetSectionState(objHeader, "show");
        }
        else {
            SetSectionState(objHeader, "hide");
        }
    }
    else {
        var objExpando = objHeader.children[1];

        if (strState === "show") {
            objContainer.style.display = "block";
            objExpando.innerText = strHide;
        }
        else if (strState === "hide") {
            objContainer.style.display = "none";
            objExpando.innerText = strShow;
        }
    }
}

function ShowSection(objHeader) {
    SetSectionState(objHeader, "show");
}

function HideSection(objHeader) {
    SetSectionState(objHeader, "hide");
}

function ToggleSection(objHeader) {
    SetSectionState(objHeader, "toggle");
}

/*================================================================================
' link at the top of the page to collapse/expand all collapsable elements
'================================================================================
*/
function objshowhide_onClick() {
    var obji;
    var objBody = document.body.getElementsByTagName("*");

    if (objBody === null) {
        return;
    }
    
    switch (strShowHide) {
        case 0:
            strShowHide = 1;
            window.objshowhide.innerText = strShowAll;
            for (obji = 0; obji < objBody.length; obji++) {
                if (objBody[obji].className !== 'undefined' && IsSectionHeader(objBody[obji])) {
                    HideSection(objBody[obji]);
                }
            }
            break;
        case 1:
            strShowHide = 0;
            window.objshowhide.innerText = strHideAll;
            for (obji = 0; obji < objBody.length; obji++) {
                if (objBody[obji].className !== 'undefined' && IsSectionHeader(objBody[obji])) {
                    ShowSection(objBody[obji]);
                }
            }
            break;
    }
}

/*================================================================================
' onload collapse all except the first two levels of headers (he0, he1)
'================================================================================*/
function window_onload() {
    // Only initialize once.  The UI may reinsert a report into the webbrowser control,
    // firing onLoad multiple times.
    if (document.documentElement.getAttribute("gpmc_reportInitialized").toUpperCase() !== "TRUE") {
        // Set text direction
        fDetDir(document.dir.toUpperCase());

        // Initialize sections to default expanded/collapsed state.
        var objBody = document.body.getElementsByTagName("*");

        if (objBody === null) {
            return;
        }

        for (var obji = 0; obji < objBody.length; obji++) {
            if (IsSectionHeader(objBody[obji])) {
                if (IsSectionExpandedByDefault(objBody[obji])) {
                    ShowSection(objBody[obji]);
                }
                else {
                    HideSection(objBody[obji]);
                }
            }
        }

        objshowhide.innerText = strShowAll;

        document.documentElement.setAttribute("gpmc_reportInitialized", "true");
    }
}

/*'================================================================================
' When direction (LTR/RTL) changes, change adjust for readability
'================================================================================
*/
function document_onPropertyChange() {
    if (window.event.propertyName === "dir") {
        fDetDir(document.dir.toUpperCase());
    }
}

function fDetDir(strDir) {
    var colRules;
    var nug;
    var i;
    var strClass;

    switch (strDir.toUpperCase()) {
        case "LTR":
            colRules = document.styleSheets[0].cssRules;
            if (colRules !== null && colRules !== undefined ) {            
                for (i = 0; i < colRules.length - 1; i++) {
                    nug = colRules[i];
                    strClass = nug.selectorText;
                    if (nug.style.textAlign === "right") {
                        nug.style.textAlign = "left";
                    }
                    switch (strClass) {
                        case "div .expando":
                            nug.style.Left = "";
                            nug.style.Right = strExpandoNumPixelsFromEdge;
                            break;
                        case "#objshowhide":
                            nug.style.textAlign = "right";
                            break;
                    }
                }
            }
            break;
        case "RTL":
            colRules = document.styleSheets[0].cssRules;
            if (colRules !== null && colRules !== undefined ) {            
                for (i = 0; i < colRules.length - 1; i++) {
                    nug = colRules[i];
                    strClass = nug.selectorText;
                    if (nug.style.textAlign === "left") {
                        nug.style.textAlign = "right";
                    }
                    switch (strClass) {
                        case "div .expando":
                            nug.style.Left = strExpandoNumPixelsFromEdge;
                            nug.style.Right = "";
                            break;
                        case "#objshowhide":
                            nug.style.textAlign = "left";
                            break;
                    }
                }
            }
            break;
    }
}

/*'================================================================================
'When printing reports, if a given section is expanded, let's says "shown" (instead of "hide" in the UI).
'================================================================================
*/
function window_onbeforeprint() {
    var obji;
    for (obji in document.all) {
        if (document.all.hasOwnProperty(obji)) {
            if (obji.className === "expando") {
                if (obji.innerText === strHide) {
                    obji.innerText = strShown;
                }
                if (obji.innerText === strShow) {
                    obji.innerText = strHidden;
                }
            }
        }
    }
}

/*================================================================================
'If a section is collapsed, change to "hidden" in the printout (instead of "show").
'================================================================================
*/
function window_onafterprint() {
    var obji;
    for (obji in document.all) {
        if (document.all.hasOwnProperty(obji)) {
            if (obji.className === "expando") {
                if (obji.innerText === strShown) {
                    obji.innerText = strHide;
                }
                if (obji.innerText === strHidden) {
                    obji.innerText = strShow;
                }
            }
        }
    }
}

/*================================================================================
' Adding keypress support for accessibility
'================================================================================
*/
function document_onkeypress(event) {
    var chCode = ('charCode' in event) ? event.charCode : event.keyCode;

    //space bar (32) or carriage return (13) or line feed (10)
    if (chCode == "32" || chCode == "13" || chCode == "10") {
        if (event.srcElement.className === "expando") {
            document_onclick();
            event.returnValue = false;
        }
        if (event.srcElement.className === "sectionTitle") {
            document_onclick();
            event.returnValue = false;
        }
        if (event.srcElement.id === "objshowhide") {
            objshowhide_onClick();
            event.returnValue = false;
        }
    }
}

/*================================================================================
' When user clicks anywhere in the document body, determine if user is clicking
' on a header element.
'================================================================================
*/
function document_onclick() {
    var strsrc = window.event.srcElement;

    while (strsrc.className === "sectionTitle" || strsrc.className === "expando") {
        strsrc = strsrc.parentElement;
    }

    // Only handle clicks on headers.
    if (!IsSectionHeader(strsrc)) {
        return;
    }

    ToggleSection(strsrc);

    window.event.returnValue = false;
}

function ToggleState(e) {
    var objParentDisplayItem;
    var objDisplayItem;
    var i;

    if (e.innerText === strShow) {
        e.innerText = strHide;
        objParentDisplayItem = e.parentNode;
        objDisplayItem = objParentDisplayItem.childNodes;
        for (i = 0; i < objDisplayItem.length; i++) {
            if (objDisplayItem[i].id === "showItem") {
                objDisplayItem[i].style.display = "Block";
            }
        }
    }
    else {
        e.innerText = strShow;
        objParentDisplayItem = e.parentNode;
        objDisplayItem = objParentDisplayItem.childNodes;
        for (i = 0; i < objDisplayItem.length; i++) {
            if (objDisplayItem[i].id === "showItem") {
                objDisplayItem[i].style.display = "None";
            }
        }
    }
}

function traverseToURL(url) {
    if (url != null) {
        var urlInitialSubstr = url.substring(0, 4).toLowerCase();
        if (urlInitialSubstr === "http") {
            window.open(url, "_blank");
        }
    }
}

function getExplainWindowTitle() {
    return document.getElementById("explainText_windowTitle").innerHTML;
}

function getExplainWindowStyles() {
    return document.getElementById("explainText_windowStyles").innerHTML;
}

function getExplainWindowSettingPathLabel() {
    return document.getElementById("explainText_settingPathLabel").innerHTML;
}

function getExplainWindowExplainTextLabel() {
    return document.getElementById("explainText_explainTextLabel").innerHTML;
}

function getExplainWindowPrintButton() {
    return document.getElementById("explainText_printButton").innerHTML;
}

function getExplainWindowCloseButton() {
    return document.getElementById("explainText_closeButton").innerHTML;
}

function getNoExplainTextAvailable() {
    return document.getElementById("explainText_noExplainTextAvailable").innerHTML;
}

function getExplainWindowSupportedLabel() {
    return document.getElementById("explainText_supportedLabel").innerHTML;
}

function getNoSupportedTextAvailable() {
    return document.getElementById("explainText_noSupportedTextAvailable").innerHTML;
}

function showExplainText(srcElement)
{
    var strDiagArgs;

    var strSettingName = srcElement.getAttribute("gpmc_settingName");
    var strSettingPath = srcElement.getAttribute("gpmc_settingPath");
    var strSettingDescription = srcElement.getAttribute("gpmc_settingDescription");

    if (strSettingDescription === "")
    {
        strSettingDescription = getNoExplainTextAvailable();
    }

    var strSupported = srcElement.getAttribute("gpmc_supported");

    if (strSupported === "")
    {
        strSupported = getNoSupportedTextAvailable();
    }

    var strHtml = "<html dir=" + document.dir +  ">\n";
    strHtml += "<head>\n";
    strHtml += "<title>" + getExplainWindowTitle() + "</title>\n";
    strHtml += "<style type='text/css'>\n" + getExplainWindowStyles() + "</style>\n";
    strHtml += "</head>\n";
    strHtml += "<body>\n";
    strHtml += "<div class='head'>" + strSettingName +"</div>\n";
    strHtml += "<div class='path'><b>" + getExplainWindowSettingPathLabel() + "</b><br/>" + strSettingPath +"</div>\n";
    strHtml += "<div class='path'><b>" + getExplainWindowSupportedLabel() + "</b><br/>" + strSupported +"</div>\n";
    strHtml += "<div class='info'>\n";
    strHtml += "<div class='hdr'>" + getExplainWindowExplainTextLabel() + "</div>\n";
    strHtml += "<div class='bdy'>" + strSettingDescription + "</div>\n";
    strHtml += "<div class='btn'>";
    strHtml += getExplainWindowPrintButton();
    strHtml += getExplainWindowCloseButton();
    strHtml += "</div></body></html>";

    // IE specific method for showing the popup.
    if(navigator.userAgent.indexOf("MSIE") > 0 && window.location.toString().indexOf("file:") === -1)
    {
        strDiagArgs = "dialogHeight=360px;dialogWidth=630px;status=no;scroll=yes;resizable=yes;minimize=yes;maximize=yes;";

        var vModeless = window.showModelessDialog("about:blank", window, strDiagArgs);
        vModeless.document.write(strHtml);
        vModeless.document.close();
        vModeless.location.reload(false);
                        
        window.event.returnValue = false;
    }
    else
    {
        strDiagArgs = "height=360px, width=630px, status=no, toolbar=no, scrollbars=yes, resizable=yes ";
        
        var expWin = window.open("", "expWin", strDiagArgs);
        expWin.document.write("");
        expWin.document.close();
        expWin.document.write(strHtml);
        expWin.document.close();
        expWin.focus();
    }
    
    return false;
}

function showEvents(srcElement,bVerbose,bInformational,bWarning,bError)
{
    var strWindowId = "EventDetails_" + srcElement.getAttribute("eventLogActivityId");
    if((windowsArray[strWindowId]) && (windowsArray[strWindowId].closed === false)) {
        windowsArray[strWindowId].focus();
    } else {
        var eventIdLabelNode, eventTimeLabelNode, eventDescriptionLabelNode, eventDetailsLabelNode, eventXmlLabelNode, gpEventsTitleNode;
        var eventIdLabelNodeText, eventTimeLabelNodeText, eventDescriptionLabelNodeText, eventXmlLabelNodeText, gpEventsTitleNodeText, eventDetailsLabelNodeText;
        var singlePassEventsDetailsNode, eventRecordArray;
        var dataNotFoundWarningLabelNode, dataNotFoundWarningLabelNodeText;
        var mainSection;
        var attributeValue;
        var singlePassEventsDetails;
        var singlePassEventsDetailsChildren;
        var node;
        var children;
        var xmlDocumentRoot;
        var xmlDocument;
        var serializer;
        var itemSub;
        var doc;

        if (window.XMLSerializer) 
        {
           serializer = new XMLSerializer();
        }

        if (window.DOMParser) 
        {
           // This browser appears to support DOMParser
           parser = new DOMParser();

           doc = document.getElementById("data-island").textContent;
           xmlDocumentRoot = parser.parseFromString(doc, "application/xml");
           xmlDocument = xmlDocumentRoot.documentElement;
           itemSub = 1;
        } 
        else 
        { 
           // Internet Explorer, create a new XML document using ActiveX 
           // and use loadXML as a DOM parser. 
           try 
           {
              doc = document.getElementById("data-island");

              xmlDocumentRoot = new ActiveXObject("Msxml2.DOMDocument.6.0"); 
              xmlDocumentRoot.async = false; 
              xmlDocumentRoot.loadXML(doc.innerHTML);
              xmlDocument = xmlDocumentRoot.documentElement;
              itemSub = 0;
           } 
           catch(e) 
           {
              // Not supported.
           }
        }

        if (xmlDocument != null) {
            mainSection = xmlDocument.getElementsByTagName("MainSection")[0].childNodes;

            if (mainSection != null) {
                for (children = 0; children < mainSection.length; children++) {
                    node = mainSection[children];
                    if (node.nodeType === 1 && node.nodeName === 'Label') {
                        attributeValue = node.getAttribute("Name");
                        if (attributeValue != null) {
                            if (attributeValue === 'ComponentStatus_EventId') {
                                eventIdLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_EventTime') {
                                eventTimeLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_EventDescription') {
                                eventDescriptionLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_EventXml') {
                                eventXmlLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_EventDetails') {
                                eventDetailsLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_GPEvents') {
                                gpEventsTitleNode = node.childNodes[1];
                            }
                            if (attributeValue === 'Warning_DataNotFound') {
                                dataNotFoundWarningLabelNode = node.childNodes[1];
                            }
                        }
                    }
                }
            }

            singlePassEventsDetails = xmlDocument.getElementsByTagName("SinglePassEventsDetails");
            if (singlePassEventsDetails != null) {
                for (singlePassEventsDetailsChildren = 0; singlePassEventsDetailsChildren < singlePassEventsDetails.length; singlePassEventsDetailsChildren++) {
                    node = singlePassEventsDetails[singlePassEventsDetailsChildren];
                    attributeValue = node.getAttribute("ActivityId");
                    if (attributeValue === srcElement.getAttribute("eventLogActivityId")) {
                        singlePassEventsDetailsNode = node;
                    }
                }
            }
        }
        
        eventIdLabelNodeText = null;
        if (eventIdLabelNode != null) {
            if (eventIdLabelNode.childNodes.length > 0) {
                eventIdLabelNodeText = eventIdLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventIdLabelNodeText == null) {
            eventIdLabelNodeText = "Event ID";
        }

        eventTimeLabelNodeText = null;
        if (eventTimeLabelNode != null) {
            if (eventTimeLabelNode.firstChild.childNodes.length > 0) {
                eventTimeLabelNodeText = eventTimeLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventTimeLabelNodeText == null) {
            eventTimeLabelNodeText = "Event Time";
        }

        eventDescriptionLabelNodeText = null;
        if (eventDescriptionLabelNode != null) {
            if (eventDescriptionLabelNode.childNodes.length > 0) {
                eventDescriptionLabelNodeText = eventDescriptionLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventDescriptionLabelNodeText == null) {
            eventDescriptionLabelNodeText = "Event Description";
        }

        eventXmlLabelNodeText = null;
        if (eventXmlLabelNode != null) {
            if (eventXmlLabelNode.childNodes.length > 0) {
                eventXmlLabelNodeText = eventXmlLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventXmlLabelNodeText == null) {
            eventXmlLabelNodeText = "Event XML";
        }

        gpEventsTitleNodeText = null;
        if (gpEventsTitleNode != null) {
            if (gpEventsTitleNode.childNodes.length > 0) {
                gpEventsTitleNodeText = gpEventsTitleNode.childNodes[0].nodeValue;
            }
        }
        if (gpEventsTitleNodeText == null) {
            gpEventsTitleNodeText = "Group Policy Events";
        }

        eventDetailsLabelNodeText = null;
        if (eventDetailsLabelNode != null) {
            if (eventDetailsLabelNode.childNodes.length > 0) {
                eventDetailsLabelNodeText = eventDetailsLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventDetailsLabelNodeText == null) {
            eventDetailsLabelNodeText = "Event Details";
        }

        dataNotFoundWarningLabelNodeText = null;
        if (dataNotFoundWarningLabelNode != null) {
            if (dataNotFoundWarningLabelNode.childNodes.length > 0) {
                dataNotFoundWarningLabelNodeText = dataNotFoundWarningLabelNode.childNodes[0].nodeValue;
            }
        }
        if (dataNotFoundWarningLabelNodeText == null) {
            dataNotFoundWarningLabelNodeText = "Data Not Found";
        }
                
        if(singlePassEventsDetailsNode != null)
        {
            eventRecordArray = singlePassEventsDetailsNode.getElementsByTagName("EventRecord");
        }
        
        var htmlText = "<html dir=" + document.dir +  ">";
        htmlText = htmlText + "<head>";
        htmlText = htmlText + "<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\" />";
        htmlText = htmlText + "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-16\" />";
        htmlText = htmlText + "<title>" + gpEventsTitleNodeText + "</title>";
        htmlText = htmlText + "</head><style type=\"text/css\">";
        htmlText = htmlText + "body    { background-color:#FFFFFF; color:#000000; font-size:68%; font-family:MS Shell Dlg; margin:0,0,10px,0; word-break:normal; word-wrap:break-word; }";
        htmlText = htmlText + "table   { font-size:100%; table-layout:fixed; width:100%; }";
        htmlText = htmlText + "td,th   { overflow:visible; text-align:left; vertical-align:top; white-space:normal; }";
        htmlText = htmlText + ".he1    { text-align: center; vertical-align: middle; background-color:#C0D2DE; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:4em; position:relative; }";
        htmlText = htmlText + ".centerTxt { text-align: center; }";
        htmlText = htmlText + ".txtFormat1 { text-align: left; vertical-align:top; white-space:pre-line; }";
        htmlText = htmlText + "</style>";
      
        htmlText = htmlText + "<script> function toggle(e) {";
        htmlText = htmlText + "if (e.style.display === \"none\"){ e.style.display = \"\"; }";
        htmlText = htmlText + "else { e.style.display = \"none\"; }";
        htmlText = htmlText + "}</";
        htmlText = htmlText + "script";
        htmlText = htmlText + ">";
      
        htmlText = htmlText + "<body><table border=1><tr>";
        htmlText = htmlText + "<th class=\"he1\"><strong>" + eventIdLabelNodeText + "</strong></th>";
        htmlText = htmlText + "<th class=\"he1\"><strong>" + eventTimeLabelNodeText + "</strong></th>";
        htmlText = htmlText + "<th class=\"he1\"><strong>" + eventDescriptionLabelNodeText + "</strong></th>";
        htmlText = htmlText + "<th class=\"he1\"><strong>" + eventDetailsLabelNodeText + "</strong></th>";

        htmlText = htmlText + "</tr>";
        var i;
        var eventId;
        var eventTime;
        var eventDescription;
        var eventXml;
        var eventType;
        var displayEvent;
        var eventXmlId;
        var displayBgColor;

        if(eventRecordArray != null && eventRecordArray.length > 0)
        {
            for (i=0; i < eventRecordArray.length; i++)
            {
                displayEvent = false;
                var eventIdElements = eventRecordArray[i].getElementsByTagName("EventId");        
                if((eventIdElements != null) && (eventIdElements.length > 0) && (eventIdElements[0].firstChild != null))
                {
                    eventId =  eventIdElements[0].firstChild.nodeValue;
                }
                else
                {
                    eventId =  dataNotFoundWarningLabelNodeText;
                }
                var eventTimeElements = eventRecordArray[i].getElementsByTagName("EventTime");
                if((eventTimeElements != null) && (eventTimeElements.length > 0) && (eventTimeElements[0].firstChild != null))
                {
                    eventTime = eventTimeElements[0].firstChild.nodeValue;
                }
                else
                {
                    eventTime = dataNotFoundWarningLabelNodeText;
                }
                var eventDescriptionElements = eventRecordArray[i].getElementsByTagName("EventDescription");
                if((eventDescriptionElements != null) && (eventDescriptionElements.length > 0) && (eventDescriptionElements[0].firstChild != null))
                {
                        eventDescription = eventDescriptionElements[0].firstChild.nodeValue;
                }
                else
                {
                    eventDescription = dataNotFoundWarningLabelNodeText;
                }
                var eventXmlElements = eventRecordArray[i].getElementsByTagName("EventXml");
                if((eventXmlElements != null) && (eventXmlElements.length > 0) && (eventXmlElements[0].firstChild != null))
                {
                    if (window.XMLSerializer) 
                    {
                       var xml = serializer.serializeToString(eventXmlElements[0].firstChild);
                       eventXml = xml;
                    } 
                    else 
                    {
                       if (typeof eventXmlElements[0].firstChild.xml != "undefined") 
                       {
                          eventXml = eventXmlElements[0].firstChild.xml;
                       }
                    }
                }
                else
                {
                    eventXml = dataNotFoundWarningLabelNodeText;
                }
                var eventLevelElements = eventRecordArray[i].getElementsByTagName("EventLevel");
                if((eventLevelElements != null) && (eventLevelElements.length > 0) && (eventLevelElements[0].firstChild != null))
                {
                    eventType = eventLevelElements[0].firstChild.nodeValue;
                }
                else
                {
                    eventType = 5;
                }
                
                if((bVerbose === true)&&(eventType == 5))
                {
                    displayEvent = true;
                }
                else if((bInformational === true)&&(eventType == 4))
                {
                    displayEvent = true;
                }
                else if((bWarning === true)&&(eventType == 3))
                {
                    displayEvent = true;
                }
                else if((bError === true)&&((eventType == 1)||(eventType == 2)))
                {
                    displayEvent = true;
                }
                
                if (displayEvent === true)
                {
                    eventXmlId = "EventXml" + (i+"");
                    htmlText = htmlText + "<tr>";
                    htmlText = htmlText + "<td class=\"centerTxt\" style=\"background:" + displayBgColor +"\">" + eventId + "</td>";
                    htmlText = htmlText + "<td class=\"centerTxt\" style=\"background:" + displayBgColor +"\">" + eventTime + "</td>";
                    htmlText = htmlText + "<td class=\"txtFormat1\" style=\"background:" + displayBgColor +"\">" + eventDescription + "</td>";
                    htmlText = htmlText + "<td style=\"background:" + displayBgColor +"\"><span style=\"color:blue; cursor:hand\" onclick=\"toggle(" + eventXmlId +");\" onKeyPress=\"toggle(" + eventXmlId + ");\" tabIndex=1 >";
                    htmlText = htmlText + eventXmlLabelNodeText + "</span><br/>";
                    htmlText = htmlText + "<span style=\"display:none\" id=" + eventXmlId +">";
                    htmlText = htmlText + eventXml + "</span>";
                    htmlText = htmlText + "</td>";
                    htmlText = htmlText + "</tr>";
                }
            }
        }
        htmlText = htmlText + "</table></body></html>";

        if(windowsArray[strWindowId])
        {
            delete windowsArray[strWindowId];
        }
        
        // IE specific method for showing the popup.
        if(navigator.userAgent.indexOf("MSIE") > 0 && window.location.toString().indexOf("file:") === -1)
        {
            var strDiagArgs = "dialogHeight=360px;dialogWidth=630px;status=no;scroll=yes;resizable=yes;minimize=yes;maximize=yes;";

            var vModeless = window.showModelessDialog("about:blank", window, strDiagArgs);
            vModeless.document.write(htmlText);
            vModeless.document.close();
            vModeless.location.reload(false);
            windowsArray[strWindowId] = vModeless;            
        }
        else
        {
            var strDiagArgs = "height=360px, width=630px, status=no, toolbar=no, scrollbars=yes, resizable=yes";
        
            windowsArray[strWindowId] = window.open("", "", strDiagArgs);
            windowsArray[strWindowId].document.write(htmlText);
            windowsArray[strWindowId].focus();
        } 
    }

    xmlDocumentRoot = null;
}

function cleanUp() {
    var windowsArray = this.windowsArray;
    for (var currentWindow in windowsArray) {
        if (windowsArray.hasOwnProperty(currentWindow)) {
            windowsArray[currentWindow].close();
        }
    }
}

function getMessageText(messageNode) {
    if (messageNode != null) {
        if (messageNode.firstChild != null) {
            if (messageNode.firstChild.nodeType === 3) {
                for (var i = 0; i < messageNode.childNodes.length; i++) 
                {
                    var curNode = messageNode.childNodes[i];
                    if(curNode.nodeType === 1){
                        return curNode.childNodes[0].nodeValue;
                    }
                }
            } else {
                return messageNode.firstChild.childNodes[0].nodeValue;
            }
        }
    }
    return null;
}

function showComponentProcessingDetails(srcElement) {
    var strWindowId = "ProcessingDetails_" + srcElement.getAttribute("eventLogActivityId");
    if ((windowsArray[strWindowId]) && (windowsArray[strWindowId].closed === false)) {
        windowsArray[strWindowId].focus();
    } else {
        var doc;
        var parser;
        var xmlDocumentRoot;
        var xmlDocument;

        var extensionsProcessedLabelNode, slowLinkThresholdLabelNode, linkSpeedLabelNode, extensionsProcessedTimeTakenNode;
        var domainControllerIpLabelNode, domainControllerNameLabelNode, processingTypeLabelNode, loopbackModeLabelNode;
        var processingTriggerLabelNode, extensionNameLabelNode, timeTakenLabelNode;
        var dataNotFoundWarningLabelNode;
        var singlePassEventsDetailsNode, totalProcessingTimeLabelNode, refreshMessageLabelNode;
        var processingDetailsUserTitleNode, processingDetailsComputerTitleNode;
        var policySectionNode;
        var policyEventsDetailsNode, detailsLabelNode;

        var extensionsProcessedLabelNodeText, slowLinkThresholdLabelNodeText, linkSpeedLabelNodeText, extensionsProcessedTimeTakenNodeText;
        var domainControllerIpLabelNodeText, domainControllerNameLabelNodeText, processingTypeLabelNodeText, loopbackModeLabelNodeText;
        var processingTriggerLabelNodeText, extensionNameLabelNodeText, timeTakenLabelNodeText;
        var dataNotFoundWarningLabelNodeText, totalProcessingTimeLabelNodeText, refreshMessageLabelNodeText;
        var processingDetailsUserTitleNodeText, processingDetailsComputerTitleNodeText;
        var detailsLabelNodeText;

        var slowLinkThresholdValue, linkSpeedValue, domainControllerIpValue, domainControllerNameValue;
        var processingTypeValue, loopbackModeValue, processingTriggerValue, totalPolicyProcessingTime, extensionProcessingTimeArray;
        var cseNameArray = new Array();
        var cseElapsedTimeArray = new Array();
        var policyApplicationFinishedTime;

        var isComputerProcessing;
        var strDiagArgs;
        var mainSection;
        var attributeValue;
        var singlePassEventsDetails;
        var singlePassEventsDetailsChildren;
        var node;
        var children;
        var itemSub;

        if (window.DOMParser) 
        {
           // This browser appears to support DOMParser
           parser = new DOMParser();
           doc = document.getElementById("data-island").textContent;

           xmlDocumentRoot = parser.parseFromString(doc, "application/xml");

           xmlDocument = xmlDocumentRoot.documentElement;

           itemSub = 1;
        } 
        else 
        { 
           // Internet Explorer, create a new XML document using ActiveX 
           // and use loadXML as a DOM parser. 
           try 
           {
              doc = document.getElementById("data-island");

              xmlDocumentRoot = new ActiveXObject("Msxml2.DOMDocument.6.0"); 
              xmlDocumentRoot.async = false; 
              xmlDocumentRoot.loadXML(doc.innerHTML);
              xmlDocument = xmlDocumentRoot.documentElement;
              itemSub = 0;
           } 
           catch(e) 
           {
              // Not supported.
           }
        }

        if (xmlDocument != null) {
            mainSection = xmlDocument.getElementsByTagName("MainSection")[0].childNodes;

            if (mainSection != null) {
                for (children = 0; children < mainSection.length; children++) {
                    node = mainSection[children];
                    if (node.nodeType === 1 && node.nodeName === 'Label') {
                        attributeValue = node.getAttribute("Name")
                        if (attributeValue != null) {
                            if (attributeValue === 'ComponentStatus_ExtensionsProcessed') {
                                extensionsProcessedLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_SlowLinkThreshold') {
                                slowLinkThresholdLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_LinkSpeed') {
                                linkSpeedLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_TimeTaken') {
                                extensionsProcessedTimeTakenNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_DomainControllerIP') {
                                domainControllerIpLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_DomainControllerName') {
                                domainControllerNameLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ProcessingTrigger') {
                                processingTriggerLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ExtensionName') {
                                extensionNameLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_TimeTaken') {
                                timeTakenLabelNode = node;
                            }
                            if (attributeValue === 'Warning_DataNotFound') {
                                dataNotFoundWarningLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_TotalProcessingTime') {
                                totalProcessingTimeLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_RefreshMessage') {
                                refreshMessageLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_UserProcessingDetails') {
                                processingDetailsUserTitleNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ComputerProcessingDetails') {
                                detailsLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ProcessingType') {
                                processingTypeLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_LoopbackMode') {
                                loopbackModeLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_UserProcessingDetails') {
                                processingDetailsUserTitleNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ComputerProcessingDetails') {
                                processingDetailsComputerTitleNode = node;
                            }
                        }
                    }
                }
            }

            singlePassEventsDetails = xmlDocument.getElementsByTagName("SinglePassEventsDetails");
            if (singlePassEventsDetails != null) {
                for (singlePassEventsDetailsChildren = 0; singlePassEventsDetailsChildren < singlePassEventsDetails.length; singlePassEventsDetailsChildren++) {
                    node = singlePassEventsDetails[singlePassEventsDetailsChildren];
                    if (node.getAttribute("ActivityId") === srcElement.getAttribute("eventLogActivityId")) {
                        singlePassEventsDetailsNode = node;
                    }
                }
            }

            if (singlePassEventsDetailsNode) {
                policyEventsDetailsNode = singlePassEventsDetailsNode.parentNode;
                if (policyEventsDetailsNode) {
                    policySectionNode = policyEventsDetailsNode.parentNode;
                    if (policySectionNode) {
                        if (policySectionNode.nodeName === 'UserPolicySection') {
                            isComputerProcessing = false;
                        }
                        if (policySectionNode.nodeName === 'ComputerPolicySection') {
                            isComputerProcessing = true;
                        }
                    }
                }
            }
        }

        
        extensionsProcessedLabelNodeText = getMessageText(extensionsProcessedLabelNode);
        slowLinkThresholdLabelNodeText = getMessageText(slowLinkThresholdLabelNode);
        linkSpeedLabelNodeText = getMessageText(linkSpeedLabelNode);
        domainControllerIpLabelNodeText = getMessageText(domainControllerIpLabelNode);
        domainControllerNameLabelNodeText = getMessageText(domainControllerNameLabelNode);
        processingTypeLabelNodeText = getMessageText(processingTypeLabelNode);
        loopbackModeLabelNodeText = getMessageText(loopbackModeLabelNode);
        processingTriggerLabelNodeText = getMessageText(processingTriggerLabelNode);
        extensionNameLabelNodeText = getMessageText(extensionNameLabelNode);
        timeTakenLabelNodeText = getMessageText(timeTakenLabelNode);
        processingDetailsUserTitleNodeText = getMessageText(processingDetailsUserTitleNode);
        processingDetailsComputerTitleNodeText = getMessageText(processingDetailsComputerTitleNode);
        dataNotFoundWarningLabelNodeText = getMessageText(dataNotFoundWarningLabelNode);
        totalProcessingTimeLabelNodeText = getMessageText(totalProcessingTimeLabelNode);
        refreshMessageLabelNodeText = getMessageText(refreshMessageLabelNode);
        detailsLabelNodeText = getMessageText(detailsLabelNode);
     

        slowLinkThresholdValue = null;
        linkSpeedValue = null;
        domainControllerIpValue = null;
        domainControllerNameValue = null;
        processingTypeValue = null;
        loopbackModeValue = null;
        processingTriggerValue = null;

        if (singlePassEventsDetailsNode != null) {
            slowLinkThresholdValue = singlePassEventsDetailsNode.getAttribute("SlowLinkThresholdInKbps");
            linkSpeedValue = singlePassEventsDetailsNode.getAttribute("LinkSpeedInKbps");
            domainControllerIpValue = singlePassEventsDetailsNode.getAttribute("DomainControllerIPAddress");
            domainControllerNameValue = singlePassEventsDetailsNode.getAttribute("DomainControllerName");
            processingTypeValue = singlePassEventsDetailsNode.getAttribute("ProcessingAppMode");
            loopbackModeValue = singlePassEventsDetailsNode.getAttribute("PolicyProcessingMode");
            processingTriggerValue = singlePassEventsDetailsNode.getAttribute("ProcessingTrigger");
            totalPolicyProcessingTime = singlePassEventsDetailsNode.getAttribute("PolicyElapsedTime");
            extensionProcessingTimeArray = singlePassEventsDetailsNode.getElementsByTagName("ExtensionProcessingTime");
        }
        if (slowLinkThresholdValue == null) {
            slowLinkThresholdValue = dataNotFoundWarningLabelNodeText;
        }
        if (linkSpeedValue == null) {
            linkSpeedValue = dataNotFoundWarningLabelNodeText;
        }
        if (domainControllerIpValue == null) {
            domainControllerIpValue = dataNotFoundWarningLabelNodeText;
        }
        else {
            domainControllerIpValue = domainControllerIpValue.replace(/^\\\\/, "");
        }
        if (domainControllerNameValue == null) {
            domainControllerNameValue = dataNotFoundWarningLabelNodeText;
        }
        else {
            domainControllerNameValue = domainControllerNameValue.replace(/^\\\\/, "");
        }
        if (processingTypeValue == null) {
            processingTypeValue = dataNotFoundWarningLabelNodeText;
        }
        if (loopbackModeValue == null) {
            loopbackModeValue = dataNotFoundWarningLabelNodeText;
        }
        if (processingTriggerValue == null) {
            processingTriggerValue = dataNotFoundWarningLabelNodeText;
        }

        if (extensionProcessingTimeArray != null && extensionProcessingTimeArray.length > 0) {
            var cseName;
            var cseElapsedTime;
            var cseProcessedTime;
            var cseId;
            var i;
            var index = 0;
            for (i = 0; i < extensionProcessingTimeArray.length; i++) {
                var cseNameElements = extensionProcessingTimeArray[i].getElementsByTagName("ExtensionName");
                var cseElapsedTimeElements = extensionProcessingTimeArray[i].getElementsByTagName("ElapsedTime");
                var cseProcessedTimeElements = extensionProcessingTimeArray[i].getElementsByTagName("ProcessedTime");
                var cseIdElements = extensionProcessingTimeArray[i].getElementsByTagName("ExtensionGuid");
                if ((cseNameElements.length > 0) && (cseElapsedTimeElements.length > 0) && (cseProcessedTimeElements.length > 0) && (cseIdElements.length > 0)) {
                    if ((cseNameElements[0].firstChild != null) && (cseElapsedTimeElements[0].firstChild != null) && (cseProcessedTimeElements[0].firstChild != null) && (cseIdElements[0].firstChild != null)) {
                        cseName = cseNameElements[0].firstChild.nodeValue;
                        cseElapsedTime = cseElapsedTimeElements[0].firstChild.nodeValue;
                        cseProcessedTime = cseProcessedTimeElements[0].firstChild.nodeValue;
                        cseId = cseIdElements[0].firstChild.nodeValue;
                        if ((cseName != null) && (cseElapsedTime != null) && (cseProcessedTime != null) && (cseId != null)) {
                            cseNameArray[index] = cseName;
                            cseElapsedTimeArray[index] = cseElapsedTime;
                            index = index + 1;
                            if (cseId === '{00000000-0000-0000-0000-000000000000}') {
                                policyApplicationFinishedTime = cseProcessedTime;
                            }
                        }
                    }
                }
            }
        }
          
        var htmlText = "<html dir=" + document.dir +  ">";
        htmlText = htmlText + "<head>";
        htmlText = htmlText + "<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\" />";
        htmlText = htmlText + "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-16\" />";
        if(isComputerProcessing != null)
        {
            if(isComputerProcessing === true)
            {
                htmlText = htmlText + "<title>" + processingDetailsComputerTitleNodeText + "</title>";
            }
            else
            {
                htmlText = htmlText + "<title>" + processingDetailsUserTitleNodeText + "</title>";
            }
        }
        

        htmlText = htmlText + "</head><style type=\"text/css\">";
        htmlText = htmlText + "body    { background-color:#FFFFFF; color:#000000; font-size:68%; font-family:MS Shell Dlg; margin:0,0,10px,0; word-break:normal; word-wrap:break-word; }";
        htmlText = htmlText + "table   { font-size:100%; table-layout:fixed; width:100%; }";
        htmlText = htmlText + "td,th   { overflow:visible; text-align:left; vertical-align:top; white-space:normal; }";
        htmlText = htmlText + ".he0    { background-color:#FEF7D6; border:1px solid #BBBBBB; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:0px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; width:100%; }";
        htmlText = htmlText + ".he1    { color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2em;margin-left: 5 px; margin-top: 5 px; position:relative; width:100%; }";
        htmlText = htmlText + ".tblspecialfmt { border:1px solid black;border-collapse:collapse; }";
        htmlText = htmlText + ".tblfirstcolfmt { border-left-width: 1px;border-top-width: 1px;border-bottom-width: 1px;border-right-width: 0px;border-style: solid; border-color: black; }";
        htmlText = htmlText + ".tblsecondcolfmt { border-left-width: 0px;border-top-width: 1px;border-bottom-width: 1px;border-right-width: 1px;border-style: solid; border-color: black; }";
        htmlText = htmlText + "</style>";
        htmlText = htmlText + "<body>";
        htmlText = htmlText + "<span class=\"he1\">" + refreshMessageLabelNodeText + " " + policyApplicationFinishedTime + "</span>" ;
        htmlText = htmlText + "<div class=\"he0\">" + detailsLabelNodeText + "</div>"
        htmltext = htmlText + "<table><tr>";

        htmlText = htmlText + "<td>";
        htmlText = htmlText + "<table>";
        htmlText = htmlText + "<tr><td colspan=\"2\">&nbsp;</td></tr>";


        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + processingTypeLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + processingTypeValue + "</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + loopbackModeLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + loopbackModeValue + "</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + linkSpeedLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + linkSpeedValue + "</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + slowLinkThresholdLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + slowLinkThresholdValue + "</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + domainControllerNameLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + domainControllerNameValue +"</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + domainControllerIpLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + domainControllerIpValue +"</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + processingTriggerLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + processingTriggerValue + "</td></tr>";

        htmlText = htmlText + "</table></td></tr>";
        htmlText = htmlText + "<tr ><td ><table>";


        htmlText = htmlText + "<tr><td><span class=\"he1\" >" + extensionsProcessedLabelNodeText +"</span></td></tr>";
        htmlText = htmlText + "<tr><td><table class=\"tblspecialfmt\" >";
        htmlText = htmlText + "<tr><td class=\"tblfirstcolfmt\" style=\"width: 50%;background-color:#FEF7D6;\"><strong>" + extensionNameLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td class=\"tblsecondcolfmt\" style=\"background-color:#FEF7D6;\" ><strong>" + timeTakenLabelNodeText + "</strong></td></tr>";

        for (var idx in cseNameArray)
        {
            htmlText = htmlText + "<tr><td style=\"width: 50%\">" + cseNameArray[idx] + "</td>";                   
            htmlText = htmlText + "<td>" + cseElapsedTimeArray[idx] + "</td></tr>";
        }

        if (totalPolicyProcessingTime != null)
        {
            htmlText = htmlText + "<tr><td class=\"tblfirstcolfmt\" style=\"width: 50%\" >" + totalProcessingTimeLabelNodeText +":</td>";
            htmlText = htmlText + "<td class=\"tblsecondcolfmt\">" + totalPolicyProcessingTime + "</td></tr>";
        }
        htmlText = htmlText + "</table></td></tr></table></td></tr></table></body></html>";

        if(windowsArray[strWindowId])
        {
            delete windowsArray[strWindowId];
        }
         
        // IE specific method for showing the popup.
        if(navigator.userAgent.indexOf("MSIE") > 0 && window.location.toString().indexOf("file:") === -1)
        {
            strDiagArgs = "dialogHeight=360px;dialogWidth=630px;status=no;scroll=yes;resizable=yes;minimize=yes;maximize=yes;";

            var vModeless = window.showModelessDialog("about:blank", window, strDiagArgs);
            vModeless.document.write(htmlText);
            vModeless.document.close();
            vModeless.location.reload(false);
            windowsArray[strWindowId] = vModeless;                      
        }
        else
        {
            strDiagArgs = "height=360px, width=630px, status=no, toolbar=no, scrollbars=yes, resizable=yes";
        
            windowsArray[strWindowId] = window.open("", "" , strDiagArgs);
            windowsArray[strWindowId].document.write(htmlText);
            windowsArray[strWindowId].focus();
        }
    }

    xmlDocumentRoot = null;
}
</script>
</head>

<body onload="window_onload();" onclick="document_onclick();" onkeypress="document_onkeypress(event);" onunload="cleanUp();">

<!-- HTML resources -->
<div style="display:none;">
        <div id="explainText_windowTitle">Group Policy Management</div>
        <div id="explainText_windowStyles">
        
                            body  { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; }

                            .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; }

                            .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; }

                            .info { padding-left:10px;width:100%; }

                            table { font-size:100%; width:100%; border:1px solid #999999; }

                            th    { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; }

                            td    { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; }

                            .btn  { width:100%; text-align:right; margin-top:16px; }

                            .hdr  { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; }

                            .bdy  { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; }

                            button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; }

                            @media print {

                                .bdy { display:block; overflow:visible; }

                                button { display:none; }

                                .head { color:#000000; background:#FFFFFF; border:1px solid #000000; }

                            }

                
        </div>
        <div id="explainText_settingPathLabel">Setting Path:</div>
        <div id="explainText_explainTextLabel">Explanation</div>
        <div id="explainText_printButton">
        <button name="Print" onClick="window.print()" accesskey="P"><u>P</u>rint</button>

        </div>
        <div id="explainText_closeButton">
        <button name="Close" onClick="window.close()" accesskey="C"><u>C</u>lose</button>
                
        </div>
        <div id="explainText_noExplainTextAvailable">No explanation is available for this setting.</div>
        <div id="explainText_supportedLabel">Supported On:</div>
        <div id="explainText_noSupportedTextAvailable">Not available</div>
</div><table class="title" >
<tr><td colspan="2" class="gponame">FR-PO-WIN-U-Security_Agent_KM_tbd</td></tr>
<tr>
    <td id="dtstamp">Data collected on: 2-9-2025 08:51:07</td>
    <td><div id="objshowhide" tabindex="0" onclick="objshowhide_onClick();return false;"></div></td>
</tr>
</table>

<div class="gposummary">
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1"><span class="sectionTitle" tabindex="0">Details</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td scope="row">Domain</td><td>emea.tpg.ads</td></tr>
<tr><td scope="row">Owner</td><td>S-1-5-21-513466819-3096973226-347852806-27238</td></tr>
<tr><td scope="row">Created</td><td>13-6-2014 10:34:12</td></tr>
<tr><td scope="row">Modified</td><td>21-8-2024 08:18:12</td></tr>
<tr><td scope="row">User Revisions</td><td>61 (AD), 61 (SYSVOL)</td></tr>
<tr><td scope="row">Computer Revisions</td><td>1 (AD), 1 (SYSVOL)</td></tr>
<tr><td scope="row">Unique ID</td><td>{72e7feb8-5537-494f-bc87-9fc33b9bd987}</td></tr>
<tr><td scope="row">GPO Status</td><td>All settings disabled</td></tr>
</table></div></div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Links</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" ><tr><th scope="col">Location</th><th scope="col">Enforced</th><th scope="col">Link Status</th><th scope="col">Path</th></tr>
    <tr><td>FR</td><td>No</td><td>Enabled</td><td>emea.tpg.ads/FR</td></tr>
    </table>
    <br/>This list only includes links in the domain of the GPO.</div></div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Security Filtering</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>The settings in this GPO can only apply to the following groups, users, and computers:</b></div>
<div class="he4i">
<table class="info" ><tr><th scope="col">Name</th></tr><tr><td>EMEA\FR-L-SEC-GPO-Agent_KM</td></tr></table>
</div>
</div>
<div class="filler"></div>

<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Delegation</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>These groups and users have the specified permission for this GPO</b></div>
<div class="he4i">
<table class="info3" >
<tr><th scope="col">Name</th><th scope="col">Allowed Permissions</th><th scope="col">Inherited</th></tr>
<tr><td>EMEA\Domain Admins</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>EMEA\EMEA-FSM-L-SEC-Dlg Read Group Policy</td><td>Read</td><td>No</td></tr>
<tr><td>EMEA\FR-G-ORG-OU Admins</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>EMEA\FR-L-SEC-Delegation Modify Group Policy Settings Access</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>EMEA\FR-L-SEC-GPO-Agent_KM</td><td>Read (from Security Filtering)</td><td>No</td></tr>
<tr><td>NT AUTHORITY\Authenticated Users</td><td>Read</td><td>No</td></tr>
<tr><td>NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS</td><td>Read</td><td>No</td></tr>
<tr><td>NT AUTHORITY\SYSTEM</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>ROOT\Enterprise Admins</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
</table>

</div></div></div>
<div class="filler"></div>
</div>
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">Computer Configuration (Disabled)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1h_expanded"><span class="sectionTitle" tabindex="0">Policies</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1_expanded"><span class="sectionTitle" tabindex="0">Windows Settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he2"><span class="sectionTitle" tabindex="0">Security Settings</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">Local Policies/Audit Policy</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Audit account logon events</td><td>No auditing</td></tr>
<tr><td>Audit logon events</td><td>No auditing</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Event Log</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Maximum security log size</td><td>16384 kilobytes</td></tr>
<tr><td>Retain application log</td><td>2 days</td></tr>
<tr><td>Retain system log</td><td>2 days</td></tr>
<tr><td>Retention method for application log</td><td>By days</td></tr>
<tr><td>Retention method for security log</td><td>As needed</td></tr>
<tr><td>Retention method for system log</td><td>By days</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System Services</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">Messenger (Startup Mode: Automatic)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Permissions</b><table class="subtable3" >
<tr><th scope="col">Type</th><th scope="col">Name</th><th scope="col">Permission</th></tr><tr><td>Allow</td><td>BUILTIN\Administrators</td><td>Full Control</td></tr><tr><td>Allow</td><td>NT AUTHORITY\SYSTEM</td><td>Full Control</td></tr><tr><td>Allow</td><td>NT AUTHORITY\INTERACTIVE</td><td>Read</td></tr></table>
</div><div class="he4i"><b>Auditing</b><table class="subtable3" >
<tr><th scope="col">Type</th><th scope="col">Name</th><th scope="col">Access</th></tr><tr><td>Failure</td><td>Everyone</td><td>Full Control</td></tr></table>
</div></div></div></div></div><div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Administrative Templates</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">Policy definitions (ADMX files) retrieved from the central store.</div><div class="he3"><span class="sectionTitle" tabindex="0">System/System Restore</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Configuration" gpmc_settingPath="Computer Configuration/Administrative Templates/System/System Restore" gpmc_settingDescription="Allows you to disable System Restore configuration through System Protection.&lt;br/&gt;&lt;br/&gt;This policy setting allows you to turn off System Restore configuration through System Protection.&lt;br/&gt;&lt;br/&gt;System Restore enables users, in the event of a problem, to restore their computers to a previous state without losing personal data files. The behavior of this policy setting depends on the &amp;quot;Turn off System Restore&amp;quot; policy setting.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the option to configure System Restore through System Protection is disabled.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can change the System Restore settings through System Protection. &lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Turn off System Restore&amp;quot; policy setting. If the &amp;quot;Turn off System Restore&amp;quot; policy setting is enabled, the &amp;quot;Turn off System Restore configuration&amp;quot; policy setting is overwritten." gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Turn off Configuration</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off System Restore" gpmc_settingPath="Computer Configuration/Administrative Templates/System/System Restore" gpmc_settingDescription="Allows you to disable System Restore.&lt;br/&gt;&lt;br/&gt;This policy setting allows you to turn off System Restore.&lt;br/&gt;&lt;br/&gt;System Restore enables users, in the event of a problem, to restore their computers to a previous state without losing personal data files. By default, System Restore is turned on for the boot volume.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, System Restore is turned off, and the System Restore Wizard cannot be accessed. The option to configure System Restore or create a restore point through System Protection is also disabled.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can perform System Restore and configure System Restore settings through System Protection.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Turn off System Restore configuration&amp;quot; policy setting. If the &amp;quot;Turn off System Restore&amp;quot; policy setting is disabled or not configured, the &amp;quot;Turn off System Restore configuration&amp;quot; policy setting is used to determine whether the option to configure System Restore is available." gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Turn off System Restore</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Remote Desktop Services/Remote Desktop Session Host/Security</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Require user authentication for remote connections by using Network Level Authentication" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Remote Desktop Services/Remote Desktop Session Host/Security" gpmc_settingDescription="This policy setting allows you to specify whether to require user authentication for remote connections to the RD Session Host server by using Network Level Authentication. This policy setting enhances security by requiring that user authentication occur earlier in the remote connection process.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, only client computers that support Network Level Authentication can connect to the RD Session Host server.&lt;br/&gt;&lt;br/&gt;To determine whether a client computer supports Network Level Authentication, start Remote Desktop Connection on the client computer, click the icon in the upper-left corner of the Remote Desktop Connection dialog box, and then click About. In the About Remote Desktop Connection dialog box, look for the phrase Network Level Authentication supported.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Network Level Authentication is not required for user authentication before allowing remote connections to the RD Session Host server.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the local setting on the target computer will be enforced. On Windows Server 2012 and Windows 8, Network Level Authentication is enforced by default.&lt;br/&gt;&lt;br/&gt;Important: Disabling this policy setting provides less security because user authentication will occur later in the remote connection process.&lt;br/&gt;" gpmc_supported="At least Windows Vista">Require user authentication for remote connections by using Network Level Authentication</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Set client connection encryption level" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Remote Desktop Services/Remote Desktop Session Host/Security" gpmc_settingDescription="Specifies whether to require the use of a specific encryption level to secure communications between client computers and RD Session Host servers during Remote Desktop Protocol (RDP) connections. This policy only applies when you are using native RDP encryption. However, native RDP encryption (as opposed to SSL encryption) is not recommended. This policy does not apply to SSL encryption.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, all communications between clients and RD Session Host servers during remote connections must use the encryption method specified in this setting. By default, the encryption level is set to High. The following encryption methods are available:&lt;br/&gt;&lt;br/&gt;* High: The High setting encrypts data sent from the client to the server and from the server to the client by using strong 128-bit encryption. Use this encryption level in environments that contain only 128-bit clients (for example, clients that run Remote Desktop Connection). Clients that do not support this encryption level cannot connect to RD Session Host servers.&lt;br/&gt;&lt;br/&gt;* Client Compatible: The Client Compatible setting encrypts data sent between the client and the server at the maximum key strength supported by the client. Use this encryption level in environments that include clients that do not support 128-bit encryption.&lt;br/&gt;&lt;br/&gt;* Low: The Low setting encrypts only data sent from the client to the server by using 56-bit encryption.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the encryption level to be used for remote connections to RD Session Host servers is not enforced through Group Policy.&lt;br/&gt;&lt;br/&gt;Important&lt;br/&gt;&lt;br/&gt;FIPS compliance can be configured through the System cryptography. Use FIPS compliant algorithms for encryption, hashing, and signing settings in Group Policy (under Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options.) The FIPS compliant setting encrypts and decrypts data sent from the client to the server and from the server to the client, with the Federal Information Processing Standard (FIPS) 140 encryption algorithms, by using Microsoft cryptographic modules. Use this encryption level when communications between clients and RD Session Host servers requires the highest level of encryption.&lt;br/&gt;" gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Set client connection encryption level</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Encryption Level</td><td>High Level</td></tr>
<tr><td colspan="2">Choose the encryption level from the drop-down list.</td></tr></table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Installer</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Windows Installer" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Windows Installer" gpmc_settingDescription="This policy setting restricts the use of Windows Installer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, you can prevent users from installing software on their systems or permit users to install only those programs offered by a system administrator. You can use the options in the Disable Windows Installer box to establish an installation setting.&lt;br/&gt;&lt;br/&gt;--   The &amp;quot;Never&amp;quot; option indicates Windows Installer is fully enabled. Users can install and upgrade software. This is the default behavior for Windows Installer on Windows 2000 Professional, Windows XP Professional and Windows Vista when the policy is not configured.&lt;br/&gt;&lt;br/&gt;--   The &amp;quot;For non-managed applications only&amp;quot; option permits users to install only those programs that a system administrator assigns (offers on the desktop) or publishes (adds them to Add or Remove Programs). This is the default behavior of Windows Installer on Windows Server 2003 family when the policy is not configured.&lt;br/&gt;&lt;br/&gt;--   The &amp;quot;Always&amp;quot; option indicates that Windows Installer is disabled.&lt;br/&gt;&lt;br/&gt;This policy setting affects Windows Installer only. It does not prevent users from using other methods to install and upgrade programs." gpmc_supported="At least Windows 2000">Turn off Windows Installer</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Disable Windows Installer</td><td>Never</td></tr>
</table></td></tr></table>
</div></div></div></div></div>
<div class="filler"></div>
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">User Configuration (Disabled)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1h_expanded"><span class="sectionTitle" tabindex="0">Policies</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1_expanded"><span class="sectionTitle" tabindex="0">Windows Settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he2"><span class="sectionTitle" tabindex="0">Scripts</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">Logon</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4i"><b>For this GPO, Script order:</b> Not configured</div><div class="he4i"><table class="info" >
<tr><th scope="col">Name</th><th scope="col">Parameters</th></tr>
<tr><td>ie.bat</td><td></td></tr>
</table>
</div></div></div><div class="he2"><span class="sectionTitle" tabindex="0">Security Settings</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">Public Key Policies/Certificate Services Client - Auto-Enrollment Settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Automatic certificate management</td><td>Enabled</td></tr>
<tr><td colspan="2"><table class="subtable3" >
<tr><th scope="col">Option</th><th scope="col">Setting</th></tr>
<tr><td scope="row">Enroll new certificates, renew expired certificates, process pending certificate requests and remove revoked certificates</td><td>Disabled</td></tr>
<tr><td scope="row">Update and manage certificates that use certificate templates from Active Directory</td><td>Disabled</td></tr>
</table></td></tr><tr><td>Display user notifications for expiring certificates in user and computer MY store</td><td>Disabled</td></tr>
</table>
</div></div></div><div class="he2"><span class="sectionTitle" tabindex="0">Folder Redirection</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">Start Menu</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4h"><span class="sectionTitle" tabindex="0">Setting: Basic (Redirect everyone's folder to the same location)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">Path: \\frparfs03\Clients\10 - KM\menu</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Options</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">
      <table class="info" >
      <tr><td scope="row">Grant user exclusive rights to Start Menu</td><td>Disabled</td></tr>
      <tr><td scope="row">Move the contents of Start Menu to the new location</td><td>Disabled</td></tr>
      <tr><td scope="row">Also apply redirection policy to Windows 2000, Windows 2000 server, Windows XP, and Windows Server 2003 operating systems</td><td>Enabled</td></tr>
      </table>
      </div>
      <div class="he4i">
      <table class="info" >
      <tr><td scope="row">Policy Removal Behavior</td><td>Leave contents</td></tr>
      <tr><td scope="row">Configuration Control</td><td>Group Policy</td></tr>
      <tr><td scope="row">Primary Computer Evaluation</td><td>Not evaluated because primary computer policy is not enabled</td></tr>
      </table>
    </div></div></div></div><div class="he2"><span class="sectionTitle" tabindex="0">Internet Explorer Maintenance</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">Browser User Interface/Customized Title Bar</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><th scope="col">Title Bar Text</th></tr>
<tr><td>Teleperformance France</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Connection/Automatic Browser Configuration</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Automatically detect configuration settings</td><td>Disabled</td></tr>
<tr><td>Automatic Browser Configuration</td><td>Not configured</td></tr>
<tr><td colspan="2"></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">URLs/Favorites and Links</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Place favorites and links at the top of the list in the order specified below</td><td>Not configured</td></tr>
<tr><td>Delete existing Favorites and Links, if present</td><td>Enabled</td></tr>
<tr><td colspan="2"><table class="subtable" ><tr><td>Only delete the favorites created by the administrator</td><td>Not configured</td></tr>
</table></td></tr><tr><td>Delete existing channels, if present</td><td>Not configured</td></tr>
</table>
<table class="info" ></table></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Security/Security Zones and Content Ratings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">Security Zones and Privacy</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4i">These settings will not apply to users that log on to computers that have the Internet Explorer Enhanced Security Configuration (ESC) enabled. To create settings for users on computers that have ESC enabled, create a new GPO and edit that GPO on a computer where ESC is enabled.</div><div class="he4h"><span class="sectionTitle" tabindex="0">Internet (Security Level: Medium-high)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">.NET Framework-reliant components<table class="subtable" ><tr><td>Run components not signed with Authenticode</td><td>Enable</td></tr>
<tr><td>Run components signed with Authenticode</td><td>Enable</td></tr>
</table>ActiveX controls and plug-ins<table class="subtable" ><tr><td>Download signed ActiveX controls</td><td>Prompt</td></tr>
<tr><td>Download unsigned ActiveX controls</td><td>Disable</td></tr>
<tr><td>Initialize and script ActiveX controls not marked as safe</td><td>Disable</td></tr>
<tr><td>Run ActiveX controls and plug-ins</td><td>Enable</td></tr>
<tr><td>Script ActiveX controls marked safe for scripting</td><td>Enable</td></tr>
</table>Downloads<table class="subtable" ><tr><td>File download</td><td>Enable</td></tr>
<tr><td>Font download</td><td>Enable</td></tr>
</table>Microsoft VM<table class="subtable" ><tr><td>Java permissions</td><td>High safety</td></tr>
</table>Miscellaneous<table class="subtable" ><tr><td>Access data sources across domains</td><td>Disable</td></tr>
<tr><td>Allow META REFRESH</td><td>Enable</td></tr>
<tr><td>Display mixed content</td><td>Prompt</td></tr>
<tr><td>Don&#39;t prompt for client certificate selection when no certificates or only one certificate exists</td><td>Disable</td></tr>
<tr><td>Drag and drop or copy and paste files</td><td>Enable</td></tr>
<tr><td>Installation of desktop items</td><td>Prompt</td></tr>
<tr><td>Launching programs and files in an IFRAME</td><td>Prompt</td></tr>
<tr><td>Navigate sub-frames across different domains</td><td>Disable</td></tr>
<tr><td>Submit nonencrypted form data</td><td>Enable</td></tr>
<tr><td>Userdata persistence</td><td>Enable</td></tr>
</table>Scripting<table class="subtable" ><tr><td>Active scripting</td><td>Enable</td></tr>
<tr><td>Allow paste operations via script</td><td>Prompt</td></tr>
<tr><td>Scripting of Java applets</td><td>Enable</td></tr>
</table>User Authentication<table class="subtable" ><tr><td>Logon</td><td>Automatic logon only in Intranet zone</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Local intranet (Security Level: Medium-low)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">.NET Framework-reliant components<table class="subtable" ><tr><td>Run components not signed with Authenticode</td><td>Enable</td></tr>
<tr><td>Run components signed with Authenticode</td><td>Enable</td></tr>
</table>ActiveX controls and plug-ins<table class="subtable" ><tr><td>Download signed ActiveX controls</td><td>Prompt</td></tr>
<tr><td>Download unsigned ActiveX controls</td><td>Disable</td></tr>
<tr><td>Initialize and script ActiveX controls not marked as safe</td><td>Disable</td></tr>
<tr><td>Run ActiveX controls and plug-ins</td><td>Enable</td></tr>
<tr><td>Script ActiveX controls marked safe for scripting</td><td>Enable</td></tr>
</table>Downloads<table class="subtable" ><tr><td>File download</td><td>Enable</td></tr>
<tr><td>Font download</td><td>Enable</td></tr>
</table>Microsoft VM<table class="subtable" ><tr><td>Java permissions</td><td>Medium safety</td></tr>
</table>Miscellaneous<table class="subtable" ><tr><td>Access data sources across domains</td><td>Prompt</td></tr>
<tr><td>Allow META REFRESH</td><td>Enable</td></tr>
<tr><td>Display mixed content</td><td>Prompt</td></tr>
<tr><td>Don&#39;t prompt for client certificate selection when no certificates or only one certificate exists</td><td>Enable</td></tr>
<tr><td>Drag and drop or copy and paste files</td><td>Enable</td></tr>
<tr><td>Installation of desktop items</td><td>Prompt</td></tr>
<tr><td>Launching programs and files in an IFRAME</td><td>Prompt</td></tr>
<tr><td>Navigate sub-frames across different domains</td><td>Enable</td></tr>
<tr><td>Submit nonencrypted form data</td><td>Enable</td></tr>
<tr><td>Userdata persistence</td><td>Enable</td></tr>
</table>Scripting<table class="subtable" ><tr><td>Active scripting</td><td>Enable</td></tr>
<tr><td>Allow paste operations via script</td><td>Enable</td></tr>
<tr><td>Scripting of Java applets</td><td>Enable</td></tr>
</table>User Authentication<table class="subtable" ><tr><td>Logon</td><td>Automatic logon only in Intranet zone</td></tr>
</table>Sites<table class="subtable" ><tr><td>Require server verification (https:) for all sites in this zone</td><td>Disabled</td></tr>
<tr><td>Include all local (intranet) sites not listed in other zones</td><td>Disabled</td></tr>
<tr><td>Include all sites that bypass the proxy server</td><td>Disabled</td></tr>
<tr><td>Include all network paths (UNCs)</td><td>Disabled</td></tr>
</table><table class="subtable" >
<tr><th scope="col">Sites in this zone</th></tr><tr><td>http://localhost/</td></tr></table>
</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Trusted sites (Security Level: Medium)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">.NET Framework-reliant components<table class="subtable" ><tr><td>Run components not signed with Authenticode</td><td>Enable</td></tr>
<tr><td>Run components signed with Authenticode</td><td>Enable</td></tr>
</table>ActiveX controls and plug-ins<table class="subtable" ><tr><td>Download signed ActiveX controls</td><td>Prompt</td></tr>
<tr><td>Download unsigned ActiveX controls</td><td>Disable</td></tr>
<tr><td>Initialize and script ActiveX controls not marked as safe</td><td>Disable</td></tr>
<tr><td>Run ActiveX controls and plug-ins</td><td>Enable</td></tr>
<tr><td>Script ActiveX controls marked safe for scripting</td><td>Enable</td></tr>
</table>Downloads<table class="subtable" ><tr><td>File download</td><td>Enable</td></tr>
<tr><td>Font download</td><td>Enable</td></tr>
</table>Microsoft VM<table class="subtable" ><tr><td>Java permissions</td><td>High safety</td></tr>
</table>Miscellaneous<table class="subtable" ><tr><td>Access data sources across domains</td><td>Disable</td></tr>
<tr><td>Allow META REFRESH</td><td>Enable</td></tr>
<tr><td>Display mixed content</td><td>Prompt</td></tr>
<tr><td>Don&#39;t prompt for client certificate selection when no certificates or only one certificate exists</td><td>Disable</td></tr>
<tr><td>Drag and drop or copy and paste files</td><td>Enable</td></tr>
<tr><td>Installation of desktop items</td><td>Prompt</td></tr>
<tr><td>Launching programs and files in an IFRAME</td><td>Prompt</td></tr>
<tr><td>Navigate sub-frames across different domains</td><td>Disable</td></tr>
<tr><td>Submit nonencrypted form data</td><td>Enable</td></tr>
<tr><td>Userdata persistence</td><td>Enable</td></tr>
</table>Scripting<table class="subtable" ><tr><td>Active scripting</td><td>Enable</td></tr>
<tr><td>Allow paste operations via script</td><td>Prompt</td></tr>
<tr><td>Scripting of Java applets</td><td>Enable</td></tr>
</table>User Authentication<table class="subtable" ><tr><td>Logon</td><td>Automatic logon only in Intranet zone</td></tr>
</table>Sites<table class="subtable" ><tr><td>Require server verification (https:) for all sites in this zone</td><td>Enabled</td></tr>
</table><table class="subtable" >
<tr><th scope="col">Sites in this zone</th></tr><tr><td>None</td></tr></table>
</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Restricted sites (Security Level: High)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">.NET Framework-reliant components<table class="subtable" ><tr><td>Run components not signed with Authenticode</td><td>Disable</td></tr>
<tr><td>Run components signed with Authenticode</td><td>Disable</td></tr>
</table>ActiveX controls and plug-ins<table class="subtable" ><tr><td>Download signed ActiveX controls</td><td>Disable</td></tr>
<tr><td>Download unsigned ActiveX controls</td><td>Disable</td></tr>
<tr><td>Initialize and script ActiveX controls not marked as safe</td><td>Disable</td></tr>
<tr><td>Run ActiveX controls and plug-ins</td><td>Disable</td></tr>
<tr><td>Script ActiveX controls marked safe for scripting</td><td>Disable</td></tr>
</table>Downloads<table class="subtable" ><tr><td>File download</td><td>Disable</td></tr>
<tr><td>Font download</td><td>Disable</td></tr>
</table>Microsoft VM<table class="subtable" ><tr><td>Java permissions</td><td>Disable Java</td></tr>
</table>Miscellaneous<table class="subtable" ><tr><td>Access data sources across domains</td><td>Disable</td></tr>
<tr><td>Allow META REFRESH</td><td>Disable</td></tr>
<tr><td>Display mixed content</td><td>Prompt</td></tr>
<tr><td>Don&#39;t prompt for client certificate selection when no certificates or only one certificate exists</td><td>Disable</td></tr>
<tr><td>Drag and drop or copy and paste files</td><td>Prompt</td></tr>
<tr><td>Installation of desktop items</td><td>Disable</td></tr>
<tr><td>Launching programs and files in an IFRAME</td><td>Disable</td></tr>
<tr><td>Navigate sub-frames across different domains</td><td>Disable</td></tr>
<tr><td>Submit nonencrypted form data</td><td>Prompt</td></tr>
<tr><td>Userdata persistence</td><td>Disable</td></tr>
</table>Scripting<table class="subtable" ><tr><td>Active scripting</td><td>Disable</td></tr>
<tr><td>Allow paste operations via script</td><td>Disable</td></tr>
<tr><td>Scripting of Java applets</td><td>Disable</td></tr>
</table>User Authentication<table class="subtable" ><tr><td>Logon</td><td>Prompt for user name and password</td></tr>
</table>Sites<table class="subtable" >
<tr><th scope="col">Sites in this zone</th></tr><tr><td>None</td></tr></table>
</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Privacy</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Privacy Level</td><td>Medium</td></tr>
<tr><td colspan="2">Web Sites</td></tr><tr><td colspan="2"><table class="subtable" >
<tr><td scope="row">Always allow</td><td>None</td></tr>
<tr><td scope="row">Always block</td><td>None</td></tr>
</table>
</td></tr></table>
</div></div></div></div></div></div><div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Administrative Templates</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">Policy definitions (ADMX files) retrieved from the central store.</div><div class="he3"><span class="sectionTitle" tabindex="0">Control Panel</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit access to Control Panel and PC settings" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel" gpmc_settingDescription="Disables all Control Panel programs and the PC settings app.&lt;br/&gt;&lt;br/&gt;This setting prevents Control.exe and SystemSettings.exe, the program files for Control Panel and PC settings, from starting. As a result, users cannot start Control Panel or PC settings, or run any of their items.&lt;br/&gt;&lt;br/&gt;This setting removes Control Panel from:&lt;br/&gt;The Start screen&lt;br/&gt;File Explorer&lt;br/&gt;&lt;br/&gt;This setting removes PC settings from:&lt;br/&gt;The Start screen&lt;br/&gt;Settings charm&lt;br/&gt;Account picture&lt;br/&gt;Search results&lt;br/&gt;&lt;br/&gt;If users try to select a Control Panel item from the Properties item on a context menu, a message appears explaining that a setting prevents the action." gpmc_supported="At least Windows 2000">Prohibit access to Control Panel and PC settings</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Control Panel/Add or Remove Programs</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Add New Programs page" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Add or Remove Programs" gpmc_settingDescription="Removes the Add New Programs button from the Add or Remove Programs bar. As a result, users cannot view or change the attached page.&lt;br/&gt;&lt;br/&gt;The Add New Programs button lets users install programs published or assigned by a system administrator.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Add New Programs button is available to all users.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other tools and methods to install programs." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Hide Add New Programs page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Add/Remove Windows Components page" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Add or Remove Programs" gpmc_settingDescription="Removes the Add/Remove Windows Components button from the Add or Remove Programs bar. As a result, users cannot view or change the associated page.&lt;br/&gt;&lt;br/&gt;The Add/Remove Windows Components button lets users configure installed services and use the Windows Component Wizard to add, remove, and configure components of Windows from the installation files.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Add/Remove Windows Components button is available to all users.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other tools and methods to configure services or add or remove program components. However, this setting blocks user access to the Windows Component Wizard." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Hide Add/Remove Windows Components page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Change or Remove Programs page" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Add or Remove Programs" gpmc_settingDescription="Removes the Change or Remove Programs button from the Add or Remove Programs bar. As a result, users cannot view or change the attached page.&lt;br/&gt;&lt;br/&gt;The Change or Remove Programs button lets users uninstall, repair, add, or remove features of installed programs.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Change or Remove Programs page is available to all users.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other tools and methods to delete or uninstall programs." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Hide Change or Remove Programs page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the &amp;quot;Add a program from CD-ROM or floppy disk&amp;quot; option" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Add or Remove Programs" gpmc_settingDescription="Removes the &amp;quot;Add a program from CD-ROM or floppy disk&amp;quot; section from the Add New Programs page. This prevents users from using Add or Remove Programs to install programs from removable media.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the &amp;quot;Add a program from CD-ROM or floppy disk&amp;quot; option is available to all users.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other tools and methods to add or remove program components.&lt;br/&gt;&lt;br/&gt;Note: If the &amp;quot;Hide Add New Programs page&amp;quot; setting is enabled, this setting is ignored. Also, if the &amp;quot;Prevent removable media source for any install&amp;quot; setting (located in User Configuration\Administrative Templates\Windows Components\Windows Installer) is enabled, users cannot add programs from removable media, regardless of this setting." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Hide the &quot;Add a program from CD-ROM or floppy disk&quot; option</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the &amp;quot;Add programs from Microsoft&amp;quot; option" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Add or Remove Programs" gpmc_settingDescription="Removes the &amp;quot;Add programs from Microsoft&amp;quot; section from the Add New Programs page. This setting prevents users from using Add or Remove Programs to connect to Windows Update.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, &amp;quot;Add programs from Microsoft&amp;quot; is available to all users.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other tools and methods to connect to Windows Update.&lt;br/&gt;&lt;br/&gt;Note: If the &amp;quot;Hide Add New Programs page&amp;quot; setting is enabled, this setting is ignored." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Hide the &quot;Add programs from Microsoft&quot; option</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the &amp;quot;Add programs from your network&amp;quot; option" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Add or Remove Programs" gpmc_settingDescription="Prevents users from viewing or installing published programs.&lt;br/&gt;&lt;br/&gt;This setting removes the &amp;quot;Add programs from your network&amp;quot; section from the Add New Programs page. The &amp;quot;Add programs from your network&amp;quot; section lists published programs and provides an easy way to install them.&lt;br/&gt;&lt;br/&gt;Published programs are those programs that the system administrator has explicitly made available to the user with a tool such as Windows Installer. Typically, system administrators publish programs to notify users that the programs are available, to recommend their use, or to enable users to install them without having to search for installation files.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users cannot tell which programs have been published by the system administrator, and they cannot use Add or Remove Programs to install published programs. However, they can still install programs by using other methods, and they can view and install assigned (partially installed) programs that are offered on the desktop or on the Start menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, &amp;quot;Add programs from your network&amp;quot; is available to all users.&lt;br/&gt;&lt;br/&gt;Note: If the &amp;quot;Hide Add New Programs page&amp;quot; setting is enabled, this setting is ignored." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Hide the &quot;Add programs from your network&quot; option</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the Set Program Access and Defaults page" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Add or Remove Programs" gpmc_settingDescription="Removes the Set Program Access and Defaults button from the Add or Remove Programs bar.  As a result, users cannot view or change the associated page.&lt;br/&gt;&lt;br/&gt;The Set Program Access and Defaults button lets administrators specify default programs for certain activities, such as Web browsing or sending e-mail, as well as which programs are accessible from the Start menu, desktop, and other locations.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Set Program Access and Defaults button is available to all users.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other tools and methods to change program access or defaults.&lt;br/&gt;&lt;br/&gt;This setting does not prevent the Set Program Access and Defaults icon from appearing on the Start menu.  See the &amp;quot;Remove Set Program Access and Defaults from Start menu&amp;quot; setting." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Hide the Set Program Access and Defaults page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Support Information" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Add or Remove Programs" gpmc_settingDescription="Removes links to the Support Info dialog box from programs on the Change or Remove Programs page.&lt;br/&gt;&lt;br/&gt;Programs listed on the Change or Remove Programs page can include a &amp;quot;Click here for support information&amp;quot; hyperlink. When clicked, the hyperlink opens a dialog box that displays troubleshooting information, including a link to the installation files and data that users need to obtain product support, such as the Product ID and version number of the program. The dialog box also includes a hyperlink to support information on the Internet, such as the Microsoft Product Support Services Web page.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Support Info hyperlink appears.&lt;br/&gt;&lt;br/&gt;Note: Not all programs provide a support information hyperlink." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Remove Support Information</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Control Panel/Display</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Display Control Panel" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Display" gpmc_settingDescription="Disables the Display Control Panel.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Display Control Panel does not run. When users try to start Display, a message appears explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Prohibit access to the Control Panel&amp;quot; (User Configuration\Administrative Templates\Control Panel) and &amp;quot;Remove programs on Settings menu&amp;quot; (User Configuration\Administrative Templates\Start Menu &amp;amp; Taskbar) settings." gpmc_supported="At least Windows 2000">Disable the Display Control Panel</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Settings tab" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Display" gpmc_settingDescription="Removes the Settings tab from Display in Control Panel.&lt;br/&gt;&lt;br/&gt;This setting prevents users from using Control Panel to add, configure, or change the display settings on the computer." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Hide Settings tab</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Control Panel/Personalization</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing color and appearance" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="Disables the Color (or Window Color) page in the Personalization Control Panel, or the Color Scheme dialog in the Display Control Panel on systems where the Personalization feature is not available.&lt;br/&gt;&lt;br/&gt;This setting prevents users from using Control Panel to change the window border and taskbar color (on Windows 8), glass color (on Windows Vista and Windows 7), system colors, or color scheme of the desktop and windows.&lt;br/&gt;&lt;br/&gt;If this setting is disabled or not configured, the Color (or Window Color) page or Color Scheme dialog is available in the Personalization or Display Control Panel.&lt;br/&gt;&lt;br/&gt;For systems prior to Windows Vista, this setting hides the Appearance and Themes tabs in the in Display in Control Panel." gpmc_supported="At least Windows 2000">Prevent changing color and appearance</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing desktop icons" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="Prevents users from changing the desktop icons.&lt;br/&gt;&lt;br/&gt;By default, users can use the Desktop Icon Settings dialog in the Personalization or Display Control Panel to show, hide, or change the desktop icons.&lt;br/&gt;&lt;br/&gt;If you enable this setting, none of the desktop icons can be changed by the user.&lt;br/&gt;&lt;br/&gt;For systems prior to Windows Vista, this setting also hides the Desktop tab in the Display Control Panel." gpmc_supported="At least Windows 2000">Prevent changing desktop icons</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing screen saver" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="Prevents the Screen Saver dialog from opening in the Personalization or Display Control Panel.&lt;br/&gt;      &lt;br/&gt;This setting prevents users from using Control Panel to add, configure, or change the screen saver on the computer. It does not prevent a screen saver from running.&lt;br/&gt;      " gpmc_supported="At least Windows 2000">Prevent changing screen saver</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Control Panel/Printers</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Browse a common web site to find printers" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Printers" gpmc_settingDescription="Adds a link to an Internet or intranet Web page to the Add Printer Wizard.&lt;br/&gt;&lt;br/&gt;          You can use this setting to direct users to a Web page from which they can install printers.&lt;br/&gt;&lt;br/&gt;          If you enable this setting and type an Internet or intranet address in the text box, the system adds a Browse button to the &amp;quot;Specify a Printer&amp;quot; page in the Add Printer Wizard. The Browse button appears beside the &amp;quot;Connect to a printer on the Internet or on a home or office network&amp;quot; option. When users click Browse, the system opens an Internet browser and navigates to the specified URL address to display the available printers.&lt;br/&gt;&lt;br/&gt;          This setting makes it easy for users to find the printers you want them to add.&lt;br/&gt;&lt;br/&gt;          Also, see the &amp;quot;Custom support URL in the Printers folder&amp;#39;s left pane&amp;quot; and &amp;quot;Activate Internet printing&amp;quot; settings in &amp;quot;Computer Configuration\Administrative Templates\Printers.&amp;quot;" gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Browse a common web site to find printers</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Browse the network to find printers" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Printers" gpmc_settingDescription="Allows users to use the Add Printer Wizard to search the network for shared printers.&lt;br/&gt;&lt;br/&gt;If you enable this setting or do not configure it, when users choose to add a network printer by selecting the &amp;quot;A network printer, or a printer attached to another computer&amp;quot; radio button on Add Printer Wizard&amp;#39;s page 2, and also check the &amp;quot;Connect to this printer (or to browse for a printer, select this option and click Next)&amp;quot; radio button on Add Printer Wizard&amp;#39;s page 3, and do not specify a printer name in the adjacent &amp;quot;Name&amp;quot; edit box, then Add Printer Wizard displays the list of shared printers on the network and invites to choose a printer from the shown list.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the network printer browse page is removed from within the Add Printer Wizard, and users cannot search the network but must type a printer name.&lt;br/&gt;&lt;br/&gt;Note: This setting affects the Add Printer Wizard only. It does not prevent users from using other programs to search for shared printers or to connect to network printers." gpmc_supported="At least Windows 2000">Browse the network to find printers</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent addition of printers" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Printers" gpmc_settingDescription="Prevents users from using familiar methods to add local and network printers.&lt;br/&gt;&lt;br/&gt;          If this policy setting is enabled, it removes the Add Printer option from the Start menu. (To find the Add Printer option, click Start, click Printers, and then click Add Printer.) This setting also removes Add Printer from the Printers folder in Control Panel.&lt;br/&gt;&lt;br/&gt;          Also, users cannot add printers by dragging a printer icon into the Printers folder. If they try, a message appears explaining that the setting prevents the action.&lt;br/&gt;&lt;br/&gt;          However, this setting does not prevent users from using the Add Hardware Wizard to add a printer. Nor does it prevent users from running other programs to add printers.&lt;br/&gt;&lt;br/&gt;          This setting does not delete printers that users have already added. However, if users have not added a printer when this setting is applied, they cannot print.&lt;br/&gt;&lt;br/&gt;          Note: You can use printer permissions to restrict the use of printers without specifying a setting. In the Printers folder, right-click a printer, click Properties, and then click the Security tab.&lt;br/&gt;&lt;br/&gt;          If this policy is disabled, or not configured, users can add printers using the methods described above." gpmc_supported="At least Windows 2000">Prevent addition of printers</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent deletion of printers" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Printers" gpmc_settingDescription="If this policy setting is enabled, it prevents users from deleting local and network printers.&lt;br/&gt;&lt;br/&gt;          If a user tries to delete a printer, such as by using the Delete option in Printers in Control Panel, a message appears explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt;          This setting does not prevent users from running other programs to delete a printer.&lt;br/&gt;&lt;br/&gt;          If this policy is disabled, or not configured, users can delete printers using the methods described above." gpmc_supported="At least Windows 2000">Prevent deletion of printers</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Control Panel/Regional and Language Options</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Restrict selection of Windows menus and dialogs language" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Regional and Language Options" gpmc_settingDescription="This policy setting restricts users to the specified language by disabling the menus and dialog box controls in the Region settings control panel. If the specified language is not installed on the target computer, the language selection defaults to English.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the dialog box controls in the Regional and Language Options control panel are not accessible to the logged on user. This prevents users from specifying a language different than the one used.&lt;br/&gt;&lt;br/&gt;To enable this policy setting in Windows Vista, use the &amp;quot;Restricts the UI languages Windows should use for the selected user&amp;quot; policy setting.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the logged-on user can access the dialog box controls in the Regional and Language Options control panel to select any available UI language." gpmc_supported="At least Windows 2000">Restrict selection of Windows menus and dialogs language</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Restrict users to the following language:</td><td>French</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Desktop</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not add shares of recently opened documents to Network Locations" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Remote shared folders are not added to Network Locations whenever you open a document in the shared folder.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, when you open a document in a remote shared folder, the system adds a connection to the shared folder to Network Locations.&lt;br/&gt;&lt;br/&gt;If you enable this setting, shared folders are not added to Network Locations automatically when you open a document in the shared folder." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Do not add shares of recently opened documents to Network Locations</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Don&amp;#39;t save settings at exit" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Prevents users from saving certain changes to the desktop.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users can change the desktop, but some changes, such as the position of open windows or the size and position of the taskbar, are not saved when users log off. However, shortcuts placed on the desktop are always saved." gpmc_supported="At least Windows 2000">Don&#39;t save settings at exit</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide and disable all items on the desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes icons, shortcuts, and other default and user-defined items from the desktop, including Briefcase, Recycle Bin, Computer, and Network Locations.&lt;br/&gt;&lt;br/&gt;Removing icons and shortcuts does not prevent the user from using another method to start the programs or opening the items they represent.&lt;br/&gt;&lt;br/&gt;Also, see &amp;quot;Items displayed in Places Bar&amp;quot; in User Configuration\Administrative Templates\Windows Components\Common Open File Dialog to remove the Desktop icon from the Places Bar. This will help prevent users from saving data to the Desktop." gpmc_supported="At least Windows 2000">Hide and disable all items on the desktop</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Internet Explorer icon on desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes the Internet Explorer icon from the desktop and from the Quick Launch bar on the taskbar.&lt;br/&gt;&lt;br/&gt;This setting does not prevent the user from starting Internet Explorer by using other methods." gpmc_supported="At least Windows 2000">Hide Internet Explorer icon on desktop</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Network Locations icon on desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes the Network Locations icon from the desktop.&lt;br/&gt;&lt;br/&gt;This setting only affects the desktop icon. It does not prevent users from connecting to the network or browsing for shared computers on the network.&lt;br/&gt;&lt;br/&gt;Note: In operating systems earlier than Microsoft Windows Vista, this policy applies to the My Network Places icon." gpmc_supported="At least Windows 2000">Hide Network Locations icon on desktop</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent adding, dragging, dropping and closing the Taskbar&amp;#39;s toolbars" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Prevents users from manipulating desktop toolbars.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users cannot add or remove toolbars from the desktop. Also, users cannot drag toolbars on to or off of docked toolbars.&lt;br/&gt;&lt;br/&gt;Note: If users have added or removed toolbars, this setting prevents them from restoring the default configuration.&lt;br/&gt;&lt;br/&gt;Tip: To view the toolbars that can be added to the desktop, right-click a docked toolbar (such as the taskbar beside the Start button), and point to &amp;quot;Toolbars.&amp;quot;&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Prohibit adjusting desktop toolbars&amp;quot; setting." gpmc_supported="At least Windows 2000">Prevent adding, dragging, dropping and closing the Taskbar&#39;s toolbars</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit adjusting desktop toolbars" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Prevents users from adjusting the length of desktop toolbars. Also, users cannot reposition items or toolbars on docked toolbars.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from adding or removing toolbars on the desktop.&lt;br/&gt;&lt;br/&gt;Note: If users have adjusted their toolbars, this setting prevents them from restoring the default configuration.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Prevent adding, dragging, dropping and closing the Taskbar&amp;#39;s toolbars&amp;quot; setting." gpmc_supported="At least Windows 2000">Prohibit adjusting desktop toolbars</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit User from manually redirecting Profile Folders" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Prevents users from changing the path to their profile folders.&lt;br/&gt;&lt;br/&gt;By default, a user can change the location of their individual profile folders like Documents, Music etc. by typing a new path in the Locations tab of the folder&amp;#39;s Properties dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users are unable to type a new location in the Target box." gpmc_supported="At least Windows 2000">Prohibit User from manually redirecting Profile Folders</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Computer icon on the desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="This setting hides Computer from the desktop and from the new Start menu. It also hides links to Computer in the Web view of all Explorer windows, and it hides Computer in the Explorer folder tree pane. If the user navigates into Computer via the &amp;quot;Up&amp;quot; button while this setting is enabled, they view an empty Computer folder. This setting allows administrators to restrict their users from seeing Computer in the shell namespace, allowing them to present their users with a simpler desktop environment.&lt;br/&gt;&lt;br/&gt;If you enable this setting, Computer is hidden on the desktop, the new Start menu, the Explorer folder tree pane, and the Explorer Web views. If the user manages to navigate to Computer, the folder will be empty.&lt;br/&gt;&lt;br/&gt;If you disable this setting, Computer is displayed as usual, appearing as normal on the desktop, Start menu, folder tree pane, and Web views, unless restricted by another setting.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, the default is to display Computer as usual.&lt;br/&gt;&lt;br/&gt;Note: In operating systems earlier than Microsoft Windows Vista, this policy applies to the My Computer icon. Hiding Computer and its contents does not hide the contents of the child folders of Computer. For example, if the users navigate into one of their hard drives, they see all of their folders and files there, even if this setting is enabled." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Remove Computer icon on the desktop</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove My Documents icon on the desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes most occurrences of the My Documents icon.&lt;br/&gt;&lt;br/&gt;This setting removes the My Documents icon from the desktop, from File Explorer, from programs that use the File Explorer windows, and from the standard Open dialog box.&lt;br/&gt;&lt;br/&gt;This setting does not prevent the user from using other methods to gain access to the contents of the My Documents folder.&lt;br/&gt;&lt;br/&gt;This setting does not remove the My Documents icon from the Start menu. To do so, use the &amp;quot;Remove My Documents icon from Start Menu&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Note: To make changes to this setting effective, you must log off from and log back on to Windows 2000 Professional." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Remove My Documents icon on the desktop</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Properties from the Computer icon context menu" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="This setting hides Properties on the context menu for Computer.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Properties option will not be present when the user right-clicks My Computer or clicks Computer and then goes to the File menu.  Likewise, Alt-Enter does nothing when Computer is selected.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Properties option is displayed as usual." gpmc_supported="At least Windows 2000 Service Pack 3">Remove Properties from the Computer icon context menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Properties from the Documents icon context menu" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="This policy setting hides the Properties menu command on the shortcut menu for the My Documents icon.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Properties menu command will not be displayed when the user does any of the following:&lt;br/&gt;&lt;br/&gt;Right-clicks the My Documents icon.&lt;br/&gt;Clicks the My Documents icon, and then opens the File menu.&lt;br/&gt;Clicks the My Documents icon, and then presses ALT+ENTER.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Properties menu command is displayed." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Remove Properties from the Documents icon context menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Properties from the Recycle Bin context menu" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes the Properties option from the Recycle Bin context menu.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Properties option will not be present when the user right-clicks on Recycle Bin or opens Recycle Bin and then clicks File. Likewise, Alt-Enter does nothing when Recycle Bin is selected.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Properties option is displayed as usual." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Remove Properties from the Recycle Bin context menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Recycle Bin icon from desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes most occurrences of the Recycle Bin icon.&lt;br/&gt;&lt;br/&gt;This setting removes the Recycle Bin icon from the desktop, from File Explorer, from programs that use the File Explorer windows, and from the standard Open dialog box.&lt;br/&gt;&lt;br/&gt;This setting does not prevent the user from using other methods to gain access to the contents of the Recycle Bin folder.&lt;br/&gt;&lt;br/&gt;Note: To make changes to this setting effective, you must log off and then log back on." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Remove Recycle Bin icon from desktop</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove the Desktop Cleanup Wizard" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Prevents users from using the Desktop Cleanup Wizard.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Desktop Cleanup wizard does not automatically run on a users workstation every 60 days. The user will also not be able to access the Desktop Cleanup Wizard.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the default behavior of the Desktop Clean Wizard running every 60 days occurs.&lt;br/&gt;&lt;br/&gt;Note: When this setting is not enabled, users can run the Desktop Cleanup Wizard, or have it run automatically every 60 days from Display, by clicking the Desktop tab and then clicking the Customize Desktop button." gpmc_supported="Windows Server 2003 and Windows XP only">Remove the Desktop Cleanup Wizard</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Network/Network Connections</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Ability to change properties of an all user remote access connection" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether a user can view and change the properties of remote access connections that are available to all users of the computer.&lt;br/&gt;&lt;br/&gt;To create an all-user remote access connection, on the Connection Availability page in the New Connection Wizard, click the &amp;quot;For all users&amp;quot; option.&lt;br/&gt;&lt;br/&gt;This setting determines whether the Properties menu item is enabled, and thus, whether the Remote Access Connection Properties dialog box is available to users.&lt;br/&gt;&lt;br/&gt;If you enable this setting, a Properties menu item appears when any user right-clicks the icon for a remote access connection. Also, when any user selects the connection, Properties appears on the File menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Properties menu items are disabled, and users (including administrators) cannot open the remote access connection properties dialog box.&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, only Administrators and Network Configuration Operators can change properties of all-user remote access connections.&lt;br/&gt;&lt;br/&gt;Note: This setting takes precedence over settings that manipulate the availability of features inside the Remote Access Connection Properties dialog box. If this setting is disabled, nothing within the properties dialog box for a remote access connection will be available to users.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting." gpmc_supported="At least Windows 2000 Service Pack 1">Ability to change properties of an all user remote access connection</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Ability to delete all user remote access connections" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether users can delete all user remote access connections.&lt;br/&gt;&lt;br/&gt;To create an all-user remote access connection, on the Connection Availability page in the New Connection Wizard, click the &amp;quot;For all users&amp;quot; option.&lt;br/&gt;&lt;br/&gt;If you enable this setting, all users can delete shared remote access connections. In addition, if your file system is NTFS, users need to have Write access to Documents and Settings\All Users\Application Data\Microsoft\Network\Connections\Pbk to delete a shared remote access connection.&lt;br/&gt;&lt;br/&gt;If you disable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), users (including administrators) cannot delete all-user remote access connections. (By default, users can still delete their private connections, but you can change the default by using the &amp;quot;Prohibit deletion of remote access connections&amp;quot; setting.)&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, only Administrators and Network Configuration Operators can delete all user remote access connections.&lt;br/&gt;&lt;br/&gt;Important: When enabled, the &amp;quot;Prohibit deletion of remote access connections&amp;quot; setting takes precedence over this setting. Users (including administrators) cannot delete any remote access connections, and this setting is ignored.&lt;br/&gt;&lt;br/&gt;Note: LAN connections are created and deleted automatically by the system when a LAN adapter is installed or removed. You cannot use the Network Connections folder to create or delete a LAN connection.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Ability to delete all user remote access connections</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Ability to Enable/Disable a LAN connection" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether users can enable/disable LAN connections.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Enable and Disable options for LAN connections are available to users (including nonadministrators). Users can enable/disable a LAN connection by double-clicking the icon representing the connection, by right-clicking it, or by using the File menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), double-clicking the icon has no effect, and the Enable and Disable menu items are disabled for all users (including administrators).&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, only Administrators and Network Configuration Operators can enable/disable LAN connections.&lt;br/&gt;&lt;br/&gt;Note: Administrators can still enable/disable LAN connections from Device Manager when this setting is disabled." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Ability to Enable/Disable a LAN connection</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Ability to rename all user remote access connections" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether nonadministrators can rename all-user remote access connections.&lt;br/&gt;&lt;br/&gt;To create an all-user connection, on the Connection Availability page in the New Connection Wizard, click the &amp;quot;For all users&amp;quot; option.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Rename option is enabled for all-user remote access connections. Any user can rename all-user connections by clicking an icon representing the connection or by using the File menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the Rename option is disabled for nonadministrators only.&lt;br/&gt;&lt;br/&gt;If you do not configure the setting, only Administrators and Network Configuration Operators can rename all-user remote access connections.&lt;br/&gt;&lt;br/&gt;Note: This setting does not apply to Administrators&lt;br/&gt;&lt;br/&gt;Note: When the &amp;quot;Ability to rename LAN connections or remote access connections available to all users&amp;quot; setting is configured (set to either Enabled or Disabled), this setting does not apply.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Ability to rename all user remote access connections</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Ability to rename LAN connections" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether nonadministrators can rename a LAN connection.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Rename option is enabled for LAN connections. Nonadministrators can rename LAN connections by clicking an icon representing the connection or by using the File menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the Rename option is disabled for nonadministrators only.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, only Administrators and Network Configuration Operators can rename LAN connections&lt;br/&gt;&lt;br/&gt;Note: This setting does not apply to Administrators.&lt;br/&gt;&lt;br/&gt;Note: When the &amp;quot;Ability to rename LAN connections or remote access connections available to all users&amp;quot; setting is configured (set to either enabled or disabled), this setting does not apply." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Ability to rename LAN connections</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Ability to rename LAN connections or remote access connections available to all users" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether users can rename LAN or all user remote access connections.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Rename option is enabled for all users. Users can rename connections by clicking the icon representing a connection or by using the File menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Rename option for LAN and all user remote access connections is disabled for all users (including Administrators and Network Configuration Operators).&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If this setting is not configured, only Administrators and Network Configuration Operators have the right to rename LAN or all user remote access connections.&lt;br/&gt;&lt;br/&gt;Note: When configured, this setting always takes precedence over the &amp;quot;Ability to rename LAN connections&amp;quot; and &amp;quot;Ability to rename all user remote access connections&amp;quot; settings.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent users from using other programs, such as Internet Explorer, to rename remote access connections." gpmc_supported="Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only">Ability to rename LAN connections or remote access connections available to all users</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit access to properties of a LAN connection" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether users can change the properties of a LAN connection.&lt;br/&gt;&lt;br/&gt;This setting determines whether the Properties menu item is enabled, and thus, whether the Local Area Connection Properties dialog box is available to users.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Properties menu items are disabled for all users, and users cannot open the Local Area Connection Properties dialog box.&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, a Properties menu item appears when users right-click the icon representing a LAN connection. Also, when users select the connection, Properties is enabled on the File menu.&lt;br/&gt;&lt;br/&gt;Note: This setting takes precedence over settings that manipulate the availability of features inside the Local Area Connection Properties dialog box. If this setting is enabled, nothing within the properties dialog box for a LAN connection is available to users.&lt;br/&gt;&lt;br/&gt;Note: Nonadministrators have the right to view the properties dialog box for a connection but not to make changes, regardless of this setting." gpmc_supported="At least Windows 2000 Service Pack 1">Prohibit access to properties of a LAN connection</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit access to properties of components of a LAN connection" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether Administrators and Network Configuration Operators can change the properties of components used by a LAN connection.&lt;br/&gt;&lt;br/&gt;This setting determines whether the Properties button for components of a LAN connection is enabled.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Properties button is disabled for Administrators. Network Configuration Operators are prohibited from accessing connection components, regardless of the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting does not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Properties button is enabled for administrators and Network Configuration Operators.&lt;br/&gt;&lt;br/&gt;The Local Area Connection Properties dialog box includes a list of the network components that the connection uses. To view or change the properties of a component, click the name of the component, and then click the Properties button beneath the component list.&lt;br/&gt;&lt;br/&gt;Note: Not all network components have configurable properties. For components that are not configurable, the Properties button is always disabled.&lt;br/&gt;&lt;br/&gt;Note: When the &amp;quot;Prohibit access to properties of a LAN connection&amp;quot; setting is enabled, users are blocked from accessing the Properties button for LAN connection components.&lt;br/&gt;&lt;br/&gt;Note: Network Configuration Operators only have permission to change TCP/IP properties. Properties for all other components are unavailable to these users.&lt;br/&gt;&lt;br/&gt;Note: Nonadministrators are already prohibited from accessing properties of components for a LAN connection, regardless of this setting." gpmc_supported="Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only">Prohibit access to properties of components of a LAN connection</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit access to properties of components of a remote access connection" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether users can view and change the properties of components used by a private or all-user remote access connection.&lt;br/&gt;&lt;br/&gt;This setting determines whether the Properties button for components used by a private or all-user remote access connection is enabled.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Properties button is disabled for all users (including administrators).&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting does not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Properties button is enabled for all users.&lt;br/&gt;&lt;br/&gt;The Networking tab of the Remote Access Connection Properties dialog box includes a list of the network components that the connection uses. To view or change the properties of a component, click the name of the component, and then click the Properties button beneath the component list.&lt;br/&gt;&lt;br/&gt;Note: Not all network components have configurable properties. For components that are not configurable, the Properties button is always disabled.&lt;br/&gt;&lt;br/&gt;Note: When the &amp;quot;Ability to change properties of an all user remote access connection&amp;quot; or &amp;quot;Prohibit changing properties of a private remote access connection&amp;quot; settings are set to deny access to the Remote Access Connection Properties dialog box, the Properties button for remote access connection components is blocked.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting." gpmc_supported="Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only">Prohibit access to properties of components of a remote access connection</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit access to the Advanced Settings item on the Advanced menu" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether the Advanced Settings item on the Advanced menu in Network Connections is enabled for administrators.&lt;br/&gt;&lt;br/&gt;The Advanced Settings item lets users view and change bindings and view and change the order in which the computer accesses connections, network providers, and print providers.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Advanced Settings item is disabled for administrators.&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Advanced Settings item is enabled for administrators.&lt;br/&gt;&lt;br/&gt;Note: Nonadministrators are already prohibited from accessing the Advanced Settings dialog box, regardless of this setting." gpmc_supported="Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only">Prohibit access to the Advanced Settings item on the Advanced menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit access to the New Connection Wizard" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether users can use the New Connection Wizard, which creates new network connections.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Make New Connection icon does not appear in the Start Menu on in the Network Connections folder. As a result, users (including administrators) cannot start the New Connection Wizard.&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Make New Connection icon appears in the Start menu and in the Network Connections folder for all users. Clicking the Make New Connection icon starts the New Connection Wizard.&lt;br/&gt;&lt;br/&gt;Note: Changing this setting from Enabled to Not Configured does not restore the Make New Connection icon until the user logs off or on. When other changes to this setting are applied, the icon does not appear or disappear in the Network Connections folder until the folder is refreshed.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting." gpmc_supported="Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only">Prohibit access to the New Connection Wizard</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit access to the Remote Access Preferences item on the Advanced menu" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether the Remote Acccess Preferences item on the Advanced menu in Network Connections folder is enabled.&lt;br/&gt;&lt;br/&gt;The Remote Access Preferences item lets users create and change connections before logon and configure automatic dialing and callback features.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Remote Access Preferences item is disabled for all users (including administrators).&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Remote Access Preferences item is enabled for all users." gpmc_supported="At least Windows 2000 Service Pack 1">Prohibit access to the Remote Access Preferences item on the Advanced menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit adding and removing components for a LAN or remote access connection" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether administrators can add and remove network components for a LAN or remote access connection. This setting has no effect on nonadministrators.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Install and Uninstall buttons for components of connections are disabled, and administrators are not permitted to access network components in the Windows Components Wizard.&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Install and Uninstall buttons for components of connections in the Network Connections folder are enabled. Also, administrators can gain access to network components in the Windows Components Wizard.&lt;br/&gt;&lt;br/&gt;The Install button opens the dialog boxes used to add network components. Clicking the Uninstall button removes the selected component in the components list (above the button).&lt;br/&gt;&lt;br/&gt;The Install and Uninstall buttons appear in the properties dialog box for connections. These buttons are on the General tab for LAN connections and on the Networking tab for remote access connections.&lt;br/&gt;&lt;br/&gt;Note: When the &amp;quot;Prohibit access to properties of a LAN connection&amp;quot;, &amp;quot;Ability to change properties of an all user remote access connection&amp;quot;, or &amp;quot;Prohibit changing properties of a private remote access connection&amp;quot; settings are set to deny access to the connection properties dialog box, the Install and Uninstall buttons for connections are blocked.&lt;br/&gt;&lt;br/&gt;Note: Nonadministrators are already prohibited from adding and removing connection components, regardless of this setting." gpmc_supported="Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only">Prohibit adding and removing components for a LAN or remote access connection</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit changing properties of a private remote access connection" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether users can view and change the properties of their private remote access connections.&lt;br/&gt;&lt;br/&gt;Private connections are those that are available only to one user. To create a private connection, on the Connection Availability page in the New Connection Wizard, click the &amp;quot;Only for myself&amp;quot; option.&lt;br/&gt;&lt;br/&gt;This setting determines whether the Properties menu item is enabled, and thus, whether the Remote Access Connection Properties dialog box for a private connection is available to users.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Properties menu items are disabled, and no users (including administrators) can open the Remote Access Connection Properties dialog box for a private connection.&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, a Properties menu item appears when any user right-clicks the icon representing a private remote access connection. Also, when any user selects the connection, Properties appears on the File menu.&lt;br/&gt;&lt;br/&gt;Note: This setting takes precedence over settings that manipulate the availability of features in the Remote Access Connection Properties dialog box. If this setting is enabled, nothing within the properties dialog box for a remote access connection will be available to users.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting." gpmc_supported="At least Windows 2000 Service Pack 1">Prohibit changing properties of a private remote access connection</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit connecting and disconnecting a remote access connection" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether users can connect and disconnect remote access connections.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), double-clicking the icon has no effect, and the Connect and Disconnect menu items are disabled for all users (including administrators).&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Connect and Disconnect options for remote access connections are available to all users. Users can connect or disconnect a remote access connection by double-clicking the icon representing the connection, by right-clicking it, or by using the File menu." gpmc_supported="At least Windows 2000 Service Pack 1">Prohibit connecting and disconnecting a remote access connection</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit deletion of remote access connections" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether users can delete remote access connections.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), users (including administrators) cannot delete any remote access connections. This setting also disables the Delete option on the context menu for a remote access connection and on the File menu in the Network Connections folder.&lt;br/&gt;&lt;br/&gt;Important:  If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, all users can delete their private remote access connections. Private connections are those that are available only to one user. (By default, only Administrators and Network Configuration Operators can delete connections available to all users, but you can change the default by using the &amp;quot;Ability to delete all user remote access connections&amp;quot; setting.)&lt;br/&gt;&lt;br/&gt;Important: When enabled, this setting takes precedence over the &amp;quot;Ability to delete all user remote access connections&amp;quot; setting. Users cannot delete any remote access connections, and the &amp;quot;Ability to delete all user remote access connections&amp;quot; setting is ignored.&lt;br/&gt;&lt;br/&gt;Note: LAN connections are created and deleted automatically when a LAN adapter is installed or removed. You cannot use the Network Connections folder to create or delete a LAN connection.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting." gpmc_supported="At least Windows 2000 Service Pack 1">Prohibit deletion of remote access connections</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit Enabling/Disabling components of a LAN connection" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether administrators can enable and disable the components used by LAN connections.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the check boxes for enabling and disabling components are disabled. As a result, administrators cannot enable or disable the components that a connection uses.&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Properties dialog box for a connection includes a check box beside the name of each component that the connection uses. Selecting the check box enables the component, and clearing the check box disables the component.&lt;br/&gt;&lt;br/&gt;Note: When the &amp;quot;Prohibit access to properties of a LAN connection&amp;quot; setting is enabled, users are blocked from accessing the check boxes for enabling and disabling the components of a LAN connection.&lt;br/&gt;&lt;br/&gt;Note: Nonadministrators are already prohibited from enabling or disabling components for a LAN connection, regardless of this setting." gpmc_supported="Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only">Prohibit Enabling/Disabling components of a LAN connection</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit renaming private remote access connections" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether users can rename their private remote access connections.&lt;br/&gt;&lt;br/&gt;Private connections are those that are available only to one user. To create a private connection, on the Connection Availability page in the New Connection Wizard, click the &amp;quot;Only for myself&amp;quot; option.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Rename option is disabled for all users (including administrators).&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Rename option is enabled for all users&amp;#39; private remote access connections. Users can rename their private connection by clicking an icon representing the connection or by using the File menu.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting." gpmc_supported="At least Windows 2000 Service Pack 1">Prohibit renaming private remote access connections</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit TCP/IP advanced configuration" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether users can configure advanced TCP/IP settings.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Advanced button on the Internet Protocol (TCP/IP) Properties dialog box is disabled for all users (including administrators). As a result, users cannot open the Advanced TCP/IP Settings Properties page and modify IP settings, such as DNS and WINS server information.&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the Advanced button is enabled, and all users can open the Advanced TCP/IP Setting dialog box.&lt;br/&gt;&lt;br/&gt;Note: This setting is superseded by settings that prohibit access to properties of connections or connection components. When these policies are set to deny access to the connection properties dialog box or Properties button for connection components, users cannot gain access to the Advanced button for TCP/IP configuration.&lt;br/&gt;&lt;br/&gt;Note: Nonadministrators (excluding Network Configuration Operators) do not have permission to access TCP/IP advanced configuration for a LAN connection, regardless of this setting.&lt;br/&gt;&lt;br/&gt;Tip: To open the Advanced TCP/IP Setting dialog box, in the Network Connections folder, right-click a connection icon, and click Properties. For remote access connections, click the Networking tab.  In the &amp;quot;Components checked are used by this connection&amp;quot; box, click Internet Protocol (TCP/IP), click the Properties button, and then click the Advanced button.&lt;br/&gt;&lt;br/&gt;Note: Changing this setting from Enabled to Not Configured does not enable the Advanced button until the user logs off." gpmc_supported="Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only">Prohibit TCP/IP advanced configuration</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit viewing of status for an active connection" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether users can view the status for an active connection.&lt;br/&gt;&lt;br/&gt;Connection status is available from the connection status taskbar icon or from the Status dialog box. The Status dialog box displays information about the connection and its activity. It also provides buttons to disconnect and to configure the properties of the connection.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the connection status taskbar icon and Status dialog box are not available to users (including administrators). The Status option is disabled in the context menu for the connection and on the File menu in the Network Connections folder. Users cannot choose to show the connection icon in the taskbar from the Connection Properties dialog box.&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the connection status taskbar icon and  Status dialog box are available to all users." gpmc_supported="Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only">Prohibit viewing of status for an active connection</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Start Menu and Taskbar</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Add Logoff to the Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy only applies to the classic version of the start menu and does not affect the new style start menu.&lt;br/&gt;&lt;br/&gt;Adds the &amp;quot;Log Off &amp;lt;username&amp;gt;&amp;quot; item to the Start menu and prevents users from removing it.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Log Off &amp;lt;username&amp;gt; item appears in the Start menu. This setting also removes the Display Logoff item from Start Menu Options. As a result, users cannot remove the Log Off &amp;lt;username&amp;gt; item from the Start Menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, users can use the Display Logoff item to add and remove the Log Off item.&lt;br/&gt;&lt;br/&gt;This setting affects the Start menu only. It does not affect the Log Off item on the Windows Security dialog box that appears when you press Ctrl+Alt+Del.&lt;br/&gt;&lt;br/&gt;Note: To add or remove the Log Off item on a computer, click Start, click Settings, click Taskbar and Start Menu, click the Start Menu Options tab, and then, in the Start Menu Settings box, click Display Logoff.&lt;br/&gt;&lt;br/&gt;Also, see &amp;quot;Remove Logoff&amp;quot; in User Configuration\Administrative Templates\System\Logon/Logoff." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows Vista, Windows XP, and Windows 2000">Add Logoff to the Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Add Search Internet link to Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="&lt;br/&gt;If you enable this policy, a &amp;quot;Search the Internet&amp;quot; link is shown when the user performs a search in the start menu search box.  This button launches the default browser with the search terms.&lt;br/&gt;&lt;br/&gt;If you disable this policy, there will not be a &amp;quot;Search the Internet&amp;quot; link when the user performs a search in the start menu search box.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy (default), there will not be a &amp;quot;Search the Internet&amp;quot; link on the start menu." gpmc_supported="Windows Server 2008 R2 and Windows 7">Add Search Internet link to Start Menu</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Clear history of recently opened documents on exit" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Clear history of recently opened documents on exit.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system deletes shortcuts to recently used document files when the user logs off. As a result, the Recent Items menu on the Start menu is always empty when the user logs on. In addition, recently and frequently used items in the Jump Lists off of programs in the Start Menu and Taskbar will be cleared when the user logs off.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the system retains document shortcuts, and when a user logs on, the Recent Items menu and the Jump Lists appear just as it did when the user logged off.&lt;br/&gt;&lt;br/&gt;Note: The system saves document shortcuts in the user profile in the System-drive\Users\User-name\Recent folder.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Remove Recent Items menu from Start Menu&amp;quot; and &amp;quot;Do not keep history of recently opened documents&amp;quot; policies in this folder. The system only uses this setting when neither of these related settings are selected.&lt;br/&gt;&lt;br/&gt;This setting does not clear the list of recent files that Windows programs display at the bottom of the File menu. See the &amp;quot;Do not keep history of recently opened documents&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;This policy setting also does not hide document shortcuts displayed in the Open dialog box. See the &amp;quot;Hide the dropdown list of recent files&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;This policy also does not clear items that the user may have pinned to the Jump Lists, or Tasks that the application has provided for their menu. See the &amp;quot;Do not allow pinning items in Jump Lists&amp;quot; setting." gpmc_supported="At least Windows 2000">Clear history of recently opened documents on exit</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not display any custom toolbars in the taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This setting affects the taskbar.&lt;br/&gt;&lt;br/&gt;The taskbar includes the Start button, buttons for currently running tasks, custom toolbars, the notification area, and the system clock. Toolbars include Quick Launch, Address, Links, Desktop, and other custom toolbars created by the user or by an application.&lt;br/&gt;&lt;br/&gt;If this setting is enabled, the taskbar does not display any custom toolbars, and the user cannot add any custom toolbars to the taskbar. Moreover, the &amp;quot;Toolbars&amp;quot; menu command and submenu are removed from the context menu. The taskbar displays only the Start button, taskbar buttons, the notification area, and the system clock.&lt;br/&gt;&lt;br/&gt;If this setting is disabled or is not configured, the taskbar displays all toolbars. Users can add or remove custom toolbars, and the &amp;quot;Toolbars&amp;quot; command appears in the context menu." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Do not display any custom toolbars in the taskbar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not keep history of recently opened documents" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Prevents the operating system and installed programs from creating and displaying shortcuts to recently opened documents.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system and Windows programs do not create shortcuts to documents opened while the setting is in effect. Also, they retain but do not display existing document shortcuts. The system empties the Recent Items menu on the Start menu, and Windows programs do not display shortcuts at the bottom of the File menu. In addition, the Jump Lists off of programs in the Start Menu and Taskbar do not show lists of recently or frequently used files, folders, or websites.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the system will store and display shortcuts to recently and frequently used files, folders, and websites.&lt;br/&gt;&lt;br/&gt;Note: The system saves document shortcuts in the user profile in the System-drive\Users\User-name\Recent folder.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Remove Recent Items menu from Start Menu&amp;quot; and &amp;quot;Clear history of recently opened documents on exit&amp;quot; policies in this folder.&lt;br/&gt;&lt;br/&gt;If you enable this setting but do not enable the &amp;quot;Remove Recent Items menu from Start Menu&amp;quot; setting, the Recent Items menu appears on the Start menu, but it is empty.&lt;br/&gt;&lt;br/&gt;If you enable this setting, but then later disable it or set it to Not Configured, the document shortcuts saved before the setting was enabled reappear in the Recent Items menu and program File menus, and Jump Lists.&lt;br/&gt;&lt;br/&gt;This setting does not hide or prevent the user from pinning files, folders, or websites to the Jump Lists. See the &amp;quot;Do not allow pinning items in Jump Lists&amp;quot; setting. This policy also does not hide Tasks that the application has provided for their Jump List. This setting does not hide document shortcuts displayed in the Open dialog box. See the &amp;quot;Hide the dropdown list of recent files&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Note: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="At least Windows 2000">Do not keep history of recently opened documents</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not search for files" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy setting the Start menu search box will not search for files.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Start menu will search for files, unless the user chooses not to do so directly in Control Panel.  If you enable this policy, a &amp;quot;See more results&amp;quot; / &amp;quot;Search Everywhere&amp;quot; link will not be shown when the user performs a search in the start menu search box." gpmc_supported="Windows Server 2008, Windows 7, and Windows Vista">Do not search for files</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Force classic Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This setting affects the presentation of the Start menu.&lt;br/&gt;&lt;br/&gt;The classic Start menu in Windows 2000 Professional allows users to begin common tasks, while the new Start menu consolidates common items onto one menu. When the classic Start menu is used, the following icons are placed on the desktop: Documents, Pictures, Music, Computer, and Network. The new Start menu starts them directly.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Start menu displays the classic Start menu in the Windows 2000 style and displays the standard desktop icons.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the Start menu only displays in the new style, meaning the desktop icons are now on the Start page.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, the default is the new style, and the user can change the view." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows Vista, and Windows XP">Force classic Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the notification area" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This setting affects the notification area (previously called the &amp;quot;system tray&amp;quot;) on the taskbar.&lt;br/&gt;&lt;br/&gt;Description: The notification area is located at the far right end of the task bar and includes the icons for current notifications and the system clock.&lt;br/&gt;&lt;br/&gt;If this setting is enabled, the user’s entire notification area, including the notification icons, is hidden. The taskbar displays only the Start button, taskbar buttons, custom toolbars (if any), and the system clock.&lt;br/&gt;&lt;br/&gt;If this setting is disabled or is not configured, the notification area is shown in the user&amp;#39;s taskbar.&lt;br/&gt;&lt;br/&gt;Note: Enabling this setting overrides the &amp;quot;Turn off notification area cleanup&amp;quot; setting, because if the notification area is hidden, there is no need to clean up the icons." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Hide the notification area</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Lock the Taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This setting affects the taskbar, which is used to switch between running applications.&lt;br/&gt;&lt;br/&gt;The taskbar includes the Start button, list of currently running tasks, and the notification area. By default, the taskbar is located at the bottom of the screen, but it can be dragged to any side of the screen. When it is locked, it cannot be moved or resized.&lt;br/&gt;&lt;br/&gt;If you enable this setting, it prevents the user from moving or resizing the taskbar. While the taskbar is locked, auto-hide and other taskbar options are still available in Taskbar properties.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the user can configure the taskbar position.&lt;br/&gt;&lt;br/&gt;Note: Enabling this setting also locks the QuickLaunch bar and any other toolbars that the user has on their taskbar. The toolbar&amp;#39;s position is locked, and the user cannot show and hide various toolbars using the taskbar context menu." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Lock the Taskbar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changes to Taskbar and Start Menu Settings" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to prevent changes to Taskbar and Start Menu Settings.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, The user will be prevented from opening the Taskbar Properties dialog box.&lt;br/&gt;&lt;br/&gt;If the user right-clicks the taskbar and then clicks Properties, a message appears explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Taskbar and Start Menu items are available from Settings on the Start menu." gpmc_supported="At least Windows 2000">Prevent changes to Taskbar and Start Menu Settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent grouping of taskbar items" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This setting affects the taskbar buttons used to switch between running programs.&lt;br/&gt;&lt;br/&gt;Taskbar grouping consolidates similar applications when there is no room on the taskbar. It kicks in when the user&amp;#39;s taskbar is full.&lt;br/&gt;&lt;br/&gt;If you enable this setting, it prevents the taskbar from grouping items that share the same program name. By default, this setting is always enabled.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure it, items on the taskbar that share the same program are grouped together. The users have the option to disable grouping if they choose." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Prevent grouping of taskbar items</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent users from customizing their Start Screen" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to prevent users from changing their Start screen layout.&lt;br/&gt;&lt;br/&gt;If you enable this setting, you will prevent a user from selecting an app, resizing a tile, pinning/unpinning a tile or a secondary tile, entering the customize mode and rearranging tiles within Start and Apps.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, you will allow a user to select an app, resize a tile, pin/unpin a tile or a secondary tile, enter the customize mode and rearrange tiles within Start and Apps." gpmc_supported="At least Windows 2000">Prevent users from customizing their Start Screen</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove access to the context menus for the taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove access to the context menus for the taskbar.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the menus that appear when you right-click the taskbar and items on the taskbar are hidden, such as the Start button, the clock, and the taskbar buttons.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the context menus for the taskbar are available.&lt;br/&gt;&lt;br/&gt;This policy setting does not prevent users from using other methods to issue the commands that appear on these menus." gpmc_supported="At least Windows 2000">Remove access to the context menus for the taskbar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commands" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting prevents users from performing the following commands from the Start menu or Windows Security screen: Shut Down, Restart, Sleep, and Hibernate. This policy setting does not prevent users from running Windows-based programs that perform these functions.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Power button and the Shut Down, Restart, Sleep, and Hibernate commands are removed from the Start menu. The Power button is also removed from the Windows Security screen, which appears when you press CTRL+ALT+DELETE.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Power button and the Shut Down, Restart, Sleep, and Hibernate commands are available on the Start menu. The Power button on the Windows Security screen is also available.&lt;br/&gt;&lt;br/&gt;Note: Third-party programs certified as compatible with Microsoft Windows Vista, Windows XP SP2, Windows XP SP1, Windows XP, or Windows 2000 Professional are required to support this policy setting." gpmc_supported="At least Windows 2000">Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commands</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Balloon Tips on Start Menu items" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Hides pop-up text on the Start menu and in the notification area.&lt;br/&gt;&lt;br/&gt;When you hold the cursor over an item on the Start menu or in the notification area, the system displays pop-up text providing additional information about the object.&lt;br/&gt;&lt;br/&gt;If you enable this setting, some of this pop-up text is not displayed. The pop-up text affected by this setting includes &amp;quot;Click here to begin&amp;quot; on the Start button, &amp;quot;Where have all my programs gone&amp;quot; on the Start menu, and &amp;quot;Where have my icons gone&amp;quot; in the notification area.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, all pop-up text is displayed on the Start menu and in the notification area." gpmc_supported="Windows Server 2003 and Windows XP only">Remove Balloon Tips on Start Menu items</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Clock from the system notification area" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Prevents the clock in the system notification area from being displayed.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the clock will not be displayed in the system notification area.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the default behavior of the clock appearing in the notification area will occur." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Remove Clock from the system notification area</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove common program groups from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes items in the All Users profile from the Programs menu on the Start menu.&lt;br/&gt;&lt;br/&gt;By default, the Programs menu contains items from the All Users profile and items from the user&amp;#39;s profile. If you enable this setting, only items in the user&amp;#39;s profile appear in the Programs menu.&lt;br/&gt;&lt;br/&gt;Tip: To see the Program menu items in the All Users profile, on the system drive, go to ProgramData\Microsoft\Windows\Start Menu\Programs." gpmc_supported="At least Windows 2000">Remove common program groups from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Documents icon from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Documents icon from the Start menu and its submenus.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Documents icon is removed from the Start menu and its submenus. Enabling this policy setting only removes the icon. It does not prevent the user from using other methods to gain access to the contents of the Documents folder.&lt;br/&gt;&lt;br/&gt;Note: To make changes to this policy setting effective, you must log off and then log on.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, he Documents icon is available from the Start menu.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Remove Documents icon on the desktop&amp;quot; policy setting." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, and Windows 2000">Remove Documents icon from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Favorites menu from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Prevents users from adding the Favorites menu to the Start menu or classic Start menu.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Display Favorites item does not appear in the Advanced Start menu options box.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Display Favorite item is available.&lt;br/&gt;&lt;br/&gt;Note:The Favorities menu does not appear on the Start menu by default. To display the Favorites menu, right-click Start, click Properties, and then click Customize.  If you are using Start menu, click the Advanced tab, and then, under Start menu items, click the Favorites menu. If you are using the classic Start menu, click Display Favorites under Advanced Start menu options.&lt;br/&gt;&lt;br/&gt;Note:The items that appear in the Favorites menu when you install Windows are preconfigured by the system to appeal to most users. However, users can add and remove items from this menu, and system administrators can create a customized Favorites menu for a user group.&lt;br/&gt;&lt;br/&gt;Note:This setting only affects the Start menu. The Favorites item still appears in File Explorer and in Internet Explorer." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, and Windows 2000">Remove Favorites menu from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Help menu from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Help command from the Start menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Help command is removed from the Start menu.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Help command is available from the Start menu.&lt;br/&gt;&lt;br/&gt;This policy setting only affects the Start menu. It does not remove the Help menu from File Explorer and does not prevent users from running Help." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, and Windows 2000">Remove Help menu from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove links and access to Windows Update" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove links and access to Windows Update.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users are prevented from connecting to the Windows Update Web site.&lt;br/&gt;&lt;br/&gt;Enabling this policy setting blocks user access to the Windows Update Web site at http://windowsupdate.microsoft.com. Also, the policy setting removes the Windows Update hyperlink from the Start menu and from the Tools menu in Internet Explorer.&lt;br/&gt;&lt;br/&gt;Windows Update, the online extension of Windows, offers software updates to keep a user’s system up-to-date. The Windows Update Product Catalog determines any system files, security fixes, and Microsoft updates that users need and shows the newest versions available for download.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Windows Update hyperlink is available from the Start menu and from the Tools menu in Internet Explorer.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Hide the &amp;quot;Add programs from Microsoft&amp;quot; option&amp;quot; policy setting." gpmc_supported="At least Windows 2000 through Windows 8.1 or Windows Server 2012 R2">Remove links and access to Windows Update</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Logoff on the Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to removes the &amp;quot;Log Off &amp;lt;username&amp;gt;&amp;quot; item from the Start menu and prevents users from restoring it.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Log Off &amp;lt;username&amp;gt; item does not appear in the Start menu. This policy setting also removes the Display Logoff item from Start Menu Options. As a result, users cannot restore the Log Off &amp;lt;username&amp;gt; item to the Start Menu.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can use the Display Logoff item to add and remove the Log Off item.&lt;br/&gt;&lt;br/&gt;This policy setting affects the Start menu only. It does not affect the Log Off item on the Windows Security dialog box that appears when you press Ctrl+Alt+Del, and it does not prevent users from using other methods to log off.&lt;br/&gt;&lt;br/&gt;Tip: To add or remove the Log Off item on a computer, click Start, click Settings, click Taskbar and Start Menu, click the Start Menu Options tab and, in the Start Menu Settings box, click Display Logoff.&lt;br/&gt;&lt;br/&gt;See also: &amp;quot;Remove Logoff&amp;quot; policy setting in User Configuration\Administrative Templates\System\Logon/Logoff." gpmc_supported="At least Windows 2000">Remove Logoff on the Start Menu</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Music icon from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Music icon from Start Menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Music icon is no longer available from Start Menu.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Music icon is available from Start Menu." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, and Windows XP">Remove Music icon from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Network Connections from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove Network Connections from the Start Menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users are prevented from running Network Connections.&lt;br/&gt;&lt;br/&gt;Enabling this policy setting prevents the Network Connections folder from opening. This policy setting also removes Network Connections from Settings on the Start menu.&lt;br/&gt;&lt;br/&gt;Network Connections still appears in Control Panel and in File Explorer, but if users try to start it, a message appears explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Network Connections is available from the Start Menu.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Disable programs on Settings menu&amp;quot; and &amp;quot;Disable Control Panel&amp;quot; policy settings and the policy settings in the Network Connections folder (Computer Configuration and User Configuration\Administrative Templates\Network\Network Connections)." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows Vista, Windows XP, and Windows 2000">Remove Network Connections from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Network icon from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Network icon from Start Menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Network icon is no longer available from Start Menu.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Network icon is available from Start Menu." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, and Windows XP">Remove Network icon from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Pictures icon from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Pictures icon from Start Menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Pictures icon is no longer available from Start Menu.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Pictures icon is available from Start Menu." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, and Windows XP">Remove Pictures icon from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove pinned programs list from the Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this setting, the &amp;quot;Pinned Programs&amp;quot; list is removed from the Start menu. Users cannot pin programs to the Start menu.&lt;br/&gt;&lt;br/&gt;In Windows XP and Windows Vista, the Internet and email checkboxes are removed from the &amp;#39;Customize Start Menu&amp;#39; dialog.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the &amp;quot;Pinned Programs&amp;quot; list remains on the Start menu. Users can pin and unpin programs in the Start Menu." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, and Windows XP">Remove pinned programs list from the Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove programs on Settings menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove programs on Settings menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Control Panel, Printers, and Network and Connection folders are removed from Settings on the Start menu, and from Computer and File Explorer. It also prevents the programs represented by these folders (such as Control.exe) from running.&lt;br/&gt;&lt;br/&gt;However, users can still start Control Panel items by using other methods, such as right-clicking the desktop to start Display or right-clicking Computer to start System.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Control Panel, Printers, and Network and Connection folders from Settings are available on the Start menu, and from Computer and File Explorer.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Disable Control Panel,&amp;quot; &amp;quot;Disable Display in Control Panel,&amp;quot; and &amp;quot;Remove Network Connections from Start Menu&amp;quot; policy settings." gpmc_supported="Windows Server 2012 R2, Windows 8.1, Windows RT 8.1, Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, and Windows 2000">Remove programs on Settings menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Recent Items menu from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes the Recent Items menu from the Start menu.  Removes the Documents menu from the classic Start menu.&lt;br/&gt;&lt;br/&gt;The Recent Items menu contains links to the non-program files that users have most recently opened. It appears so that users can easily reopen their documents.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system saves document shortcuts but does not display the Recent Items menu in the Start Menu, and users cannot turn the menu on.&lt;br/&gt;&lt;br/&gt;If you later disable the setting, so that the Recent Items menu appears in the Start Menu, the document shortcuts saved before the setting was enabled and while it was in effect appear in the Recent Items menu.&lt;br/&gt;&lt;br/&gt;When the setting is disabled, the Recent Items menu appears in the Start Menu, and users cannot remove it.&lt;br/&gt;&lt;br/&gt;If the setting is not configured, users can turn the Recent Items menu on and off.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent Windows programs from displaying shortcuts to recently opened documents. See the &amp;quot;Do not keep history of recently opened documents&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;This setting also does not hide document shortcuts displayed in the Open dialog box. See the &amp;quot;Hide the dropdown list of recent files&amp;quot; setting." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, and Windows 2000">Remove Recent Items menu from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Run menu from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Allows you to remove the Run command from the Start menu, Internet Explorer, and Task Manager.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the following changes occur:&lt;br/&gt;&lt;br/&gt;(1) The Run command is removed from the Start menu.&lt;br/&gt;&lt;br/&gt;(2) The New Task (Run) command is removed from Task Manager.&lt;br/&gt;&lt;br/&gt;(3) The user will be blocked from entering the following into the Internet Explorer Address Bar:&lt;br/&gt;&lt;br/&gt;--- A UNC path: \\&amp;lt;server&amp;gt;\&amp;lt;share&amp;gt;&lt;br/&gt;&lt;br/&gt;---Accessing local drives:  e.g., C:&lt;br/&gt;&lt;br/&gt;--- Accessing local folders: e.g., \temp&amp;gt;&lt;br/&gt;&lt;br/&gt;Also, users with extended keyboards will no longer be able to display the Run dialog box by pressing the Application key (the key with the Windows logo) + R.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, users will be able to access the Run command in the Start menu and in Task Manager and use the Internet Explorer Address Bar.&lt;br/&gt;&lt;br/&gt;&lt;br/&gt;&lt;br/&gt;Note:This setting affects the specified interface only. It does not prevent users from using other methods to run programs.&lt;br/&gt;&lt;br/&gt;Note: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="Windows Server 2012 R2, Windows 8.1, Windows RT 8.1, Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, and Windows 2000">Remove Run menu from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Search Computer link" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy, the &amp;quot;See all results&amp;quot; link will not be shown when the user performs a search in the start menu search box.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, the &amp;quot;See all results&amp;quot; link will be shown when the user performs a search in the start menu search box." gpmc_supported="Windows Vista only">Remove Search Computer link</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Search link from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Search link from the Start menu, and disables some File Explorer search elements.  Note that this does not remove the search box from the new style Start menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Search item is removed from the Start menu and from the context menu that appears when you right-click the Start menu. Also, the system does not respond when users press the Application key (the key with the Windows logo)+ F.&lt;br/&gt;&lt;br/&gt;Note: Enabling this policy setting also prevents the user from using the F3 key.&lt;br/&gt;&lt;br/&gt;In File Explorer, the Search item still appears on the Standard buttons toolbar, but the system does not respond when the user presses Ctrl+F. Also, Search does not appear in the context menu when you right-click an icon representing a drive or a folder.&lt;br/&gt;&lt;br/&gt;This policy setting affects the specified user interface elements only. It does not affect Internet Explorer and does not prevent the user from using other methods to search.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Search link is available from the Start menu." gpmc_supported="Windows Server 2003 and Windows XP only">Remove Search link from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove the &amp;quot;Undock PC&amp;quot; button from the Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this setting, the &amp;quot;Undock PC&amp;quot; button is removed from the simple Start Menu, and your PC cannot be undocked.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the &amp;quot;Undock PC&amp;quot; button remains on the simple Start menu, and your PC can be undocked." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, and Windows XP">Remove the &quot;Undock PC&quot; button from the Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off notification area cleanup" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This setting affects the notification area, also called the &amp;quot;system tray.&amp;quot;&lt;br/&gt;&lt;br/&gt;The notification area is located in the task bar, generally at the bottom of the screen, and it includes the clock and current notifications. This setting determines whether the items are always expanded or always collapsed. By default, notifications are collapsed. The notification cleanup &amp;lt;&amp;lt; icon can be referred to as the &amp;quot;notification chevron.&amp;quot;&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system notification area expands to show all of the notifications that use this area.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the system notification area will always collapse notifications.&lt;br/&gt;&lt;br/&gt;If you do not configure it, the user can choose if they want notifications collapsed." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Turn off notification area cleanup</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off personalized menus" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Disables personalized menus.&lt;br/&gt;&lt;br/&gt;Windows personalizes long menus by moving recently used items to the top of the menu and hiding items that have not been used recently. Users can display the hidden items by clicking an arrow to extend the menu.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system does not personalize menus. All menu items appear and remain in standard order. Also, this setting removes the &amp;quot;Use Personalized Menus&amp;quot; option so users do not try to change the setting while a setting is in effect.&lt;br/&gt;&lt;br/&gt;Note: Personalized menus require user tracking. If you enable the &amp;quot;Turn off user tracking&amp;quot; setting, the system disables user tracking and personalized menus and ignores this setting.&lt;br/&gt;&lt;br/&gt;Tip: To Turn off personalized menus without specifying a setting, click Start, click Settings, click Taskbar and Start Menu, and then, on the General tab, clear the &amp;quot;Use Personalized Menus&amp;quot; option." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows Vista, Windows XP, and Windows 2000">Turn off personalized menus</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off user tracking" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to turn off user tracking.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the system does not track the programs that the user runs, and does not display frequently used programs in the Start Menu.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the system tracks the programs that the user runs. The system uses this information to customize Windows features, such as showing frequently used programs in the Start Menu.&lt;br/&gt;&lt;br/&gt;Also, see these related policy settings: &amp;quot;Remove frequent programs liist from the Start Menu&amp;quot; and &amp;quot;Turn off personalized menus&amp;quot;.&lt;br/&gt;&lt;br/&gt;This policy  setting does not prevent users from pinning programs to the Start Menu or Taskbar. See the &amp;quot;Remove pinned programs list from the Start Menu&amp;quot; and &amp;quot;Do not allow pinning programs to the Taskbar&amp;quot; policy settings." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows Vista, Windows XP, and Windows 2000">Turn off user tracking</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not display the Getting Started welcome screen at logon" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="This policy setting hides the welcome screen that is displayed on Windows 2000 Professional each time the user logs on.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the welcome screen is hidden from the user logging on to a computer where this policy is applied.&lt;br/&gt;&lt;br/&gt;Users can still display the welcome screen by selecting it on the Start menu or by typing &amp;quot;&amp;quot;Welcome&amp;quot;&amp;quot; in the Run dialog box.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, the welcome screen is displayed each time a user logs on to the computer.&lt;br/&gt;&lt;br/&gt;This setting applies only to Windows 2000 Professional. It does not affect the &amp;quot;&amp;quot;Configure Your Server on a Windows 2000 Server&amp;quot;&amp;quot; screen on Windows 2000 Server.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Tip: To display the welcome screen, click Start, point to Programs, point to Accessories, point to System Tools, and then click &amp;quot;&amp;quot;Getting Started.&amp;quot;&amp;quot; To suppress the welcome screen without specifying a setting, clear the &amp;quot;&amp;quot;Show this screen at startup&amp;quot;&amp;quot; check box on the welcome screen." gpmc_supported="Windows 2000 only">Do not display the Getting Started welcome screen at logon</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Don&amp;#39;t run specified Windows applications" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="Prevents Windows from running the programs you specify in this policy setting.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users cannot run programs that you add to the list of disallowed applications.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting or do not configure it, users can run any programs.&lt;br/&gt;&lt;br/&gt;This policy setting only prevents users from running programs that are started by the File Explorer process. It does not prevent users from running programs, such as Task Manager, which are started by the system process or by other processes.  Also, if users have access to the command prompt (Cmd.exe), this policy setting does not prevent them from starting programs in the command window even though they would be prevented from doing so using File Explorer.&lt;br/&gt;&lt;br/&gt;Note: Non-Microsoft applications with Windows 2000 or later certification are required to comply with this policy setting.&lt;br/&gt;Note: To create a list of allowed applications, click Show.  In the Show Contents dialog box, in the Value column, type the application executable name (e.g., Winword.exe, Poledit.exe, Powerpnt.exe)." gpmc_supported="At least Windows 2000">Don&#39;t run specified Windows applications</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td colspan="2"><table class="subtable" >
<tr><th scope="col">List of disallowed applications</th></tr>
<tr><td>freecell.exe</td></tr>
<tr><td>HelpCtr.exe</td></tr>
<tr><td>hh.exe</td></tr>
<tr><td>msmsgs.exe</td></tr>
<tr><td>msn.exe</td></tr>
<tr><td>mspaint.exe</td></tr>
<tr><td>pinball.exe</td></tr>
<tr><td>sol.exe</td></tr>
<tr><td>windows.chm</td></tr>
<tr><td>winhelp.exe</td></tr>
<tr><td>winhlp32.exe</td></tr>
<tr><td>winmine.exe</td></tr>
<tr><td>wmplayer.exe</td></tr>
<tr><td>explorer.exe</td></tr>
</table></td></tr></table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Download missing COM components" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="This policy setting directs the system to search Active Directory for missing Component Object Model (COM) components that a program requires.&lt;br/&gt;&lt;br/&gt;Many Windows programs, such as the MMC snap-ins, use the interfaces provided by the COM components. These programs cannot perform all their functions unless Windows has internally registered the required components.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting and a component registration is missing, the system searches for it in Active Directory and, if it is found, downloads it. The resulting searches might make some programs start or run slowly.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the program continues without the registration. As a result, the program might not perform all its functions, or it might stop.&lt;br/&gt;&lt;br/&gt;This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in  User Configuration." gpmc_supported="At least Windows 2000">Download missing COM components</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent access to registry editing tools" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="Disables the Windows registry editor Regedit.exe.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting and the user tries to start Regedit.exe, a message appears explaining that a policy setting prevents the action.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting or do not configure it, users can run Regedit.exe normally.&lt;br/&gt;&lt;br/&gt;To prevent users from using other administrative tools, use the &amp;quot;Run only specified Windows applications&amp;quot; policy setting." gpmc_supported="At least Windows 2000">Prevent access to registry editing tools</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Disable regedit from running silently?</td><td>No</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent access to the command prompt" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="This policy setting prevents users from running the interactive command prompt, Cmd.exe.  This policy setting also determines whether batch files (.cmd and .bat) can run on the computer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting and the user tries to open a command window, the system displays a message explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting or do not configure it, users can run Cmd.exe and batch files normally.&lt;br/&gt;&lt;br/&gt;Note: Do not prevent the computer from running batch files if the computer uses logon, logoff, startup, or shutdown batch file scripts, or for users that use Remote Desktop Services." gpmc_supported="At least Windows 2000">Prevent access to the command prompt</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Disable the command prompt script processing also?</td><td>No</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Restrict these programs from being launched from Help" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="&lt;br/&gt;        This policy setting allows you to restrict programs from being run from online Help.&lt;br/&gt;        &lt;br/&gt;        If you enable this policy setting, you can prevent specified programs from being run from Help. When you enable this policy setting, enter the file names names of the programs you want to restrict, separated by commas.&lt;br/&gt;        &lt;br/&gt;        If you disable or do not configure this policy setting, users can run all applications from online Help.&lt;br/&gt;        &lt;br/&gt;        Note: You can also restrict users from running applications by using the Software Restriction Policy settings available in Computer Configuration\Security Settings.&lt;br/&gt;        &lt;br/&gt;        Note: This policy setting is available under Computer Configuration and User Configuration. If both are settings are used, any programs listed in either of these locations cannot launched from Help&lt;br/&gt;      " gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Restrict these programs from being launched from Help</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Enter executables separated by commas:</td><td>freecell.exe;HelpCtr.exe;hh.exe;msmsgs.exe;msn.exe;mspaint.exe;pinball.exe;sol.exe;windows.chm;winhelp.exe;winhlp32.exe;winmine.exe</td></tr>
<tr><td colspan="2">Example: calc.exe,paint.exe</td></tr></table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Run only specified Windows applications" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="Limits the Windows programs that users have permission to run on the computer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users can only run programs that you add to the list of allowed applications.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting or do not configure it, users can run all applications.&lt;br/&gt;&lt;br/&gt;This policy setting only prevents users from running programs that are started by the File Explorer process.  It does not prevent users from running programs such as Task Manager, which are started by the system process or by other processes.  Also, if users have access to the command prompt (Cmd.exe), this policy setting does not prevent them from starting programs in the command window even though they would be prevented from doing so using File Explorer.&lt;br/&gt;&lt;br/&gt;Note: Non-Microsoft applications with Windows 2000 or later certification are required to comply with this policy setting.&lt;br/&gt;Note: To create a list of allowed applications, click Show.  In the Show Contents dialog box, in the Value column, type the application executable name (e.g., Winword.exe, Poledit.exe, Powerpnt.exe)." gpmc_supported="At least Windows 2000">Run only specified Windows applications</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td colspan="2"><table class="subtable" >
<tr><th scope="col">List of allowed applications</th></tr>
<tr><td>iexplore.exe</td></tr>
<tr><td>AcroRd32.exe</td></tr>
</table></td></tr></table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Ctrl+Alt+Del Options</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Task Manager" gpmc_settingPath="User Configuration/Administrative Templates/System/Ctrl+Alt+Del Options" gpmc_settingDescription="This policy setting prevents users from starting Task Manager.&lt;br/&gt;&lt;br/&gt;Task Manager (taskmgr.exe) lets users start and stop programs; monitor the performance of their computers; view and monitor all programs running on their computers, including system services; find the executable names of programs; and change the priority of the process in which programs run.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users will not be able to access Task Manager. If users try to start Task Manager, a message appears explaining that a policy prevents the action.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can access Task Manager to  start and stop programs, monitor the performance of their computers, view and monitor all programs running on their computers, including system services, find the executable names of programs, and change the priority of the process in which programs run." gpmc_supported="At least Windows 2000">Remove Task Manager</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Driver Installation</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Windows Update device driver search prompt" gpmc_settingPath="User Configuration/Administrative Templates/System/Driver Installation" gpmc_settingDescription="Specifies whether the administrator will be prompted about going to Windows Update to search for device drivers using the Internet.&lt;br/&gt;&lt;br/&gt;Note: This setting only has effect if &amp;quot;Turn off Windows Update device driver searching&amp;quot; in &amp;quot;Administrative Templates/System/Internet Communication Management/Internet Communication settings&amp;quot; is disabled or not configured.&lt;br/&gt;&lt;br/&gt;If you enable this setting, administrators will not be prompted to search Windows Update.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, and &amp;quot;Turn off Windows Update device driver searching&amp;quot; is disabled or not configured, the administrator will be prompted for consent before going to Windows Update to search for device drivers." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows Vista, and Windows XP SP2">Turn off Windows Update device driver search prompt</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Logon</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Run these programs at user logon" gpmc_settingPath="User Configuration/Administrative Templates/System/Logon" gpmc_settingDescription="This policy setting specifies additional programs or documents that Windows starts automatically when a user logs on to the system.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, you can specify which programs can run at the time the user logs on to this computer that has this policy applied.&lt;br/&gt;&lt;br/&gt;To specify values for this policy setting, click Show. In the Show Contents dialog box in the Value column, type the name of the executable program (.exe) file or document file. To specify another name, press ENTER, and type the name. Unless the file is located in the %Systemroot% directory, you must specify the fully qualified path to the file.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the user will have to start the appropriate programs after logon.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the system starts the programs specified in the Computer Configuration setting just before it starts the programs specified in the User Configuration setting.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;&amp;quot;Do not process the legacy run list&amp;quot;&amp;quot; and the &amp;quot;&amp;quot;Do not process the run once list&amp;quot;&amp;quot; settings." gpmc_supported="At least Windows 2000">Run these programs at user logon</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Scripts</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Display instructions in logoff scripts as they run" gpmc_settingPath="User Configuration/Administrative Templates/System/Scripts" gpmc_settingDescription="This policy setting displays the instructions in logoff scripts as they run.&lt;br/&gt;&lt;br/&gt;Logoff scripts are batch files of instructions that run when the user logs off. By default, the system does not display the instructions in the logoff script.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the system displays each instruction in the logoff script as it runs. The instructions appear in a command window. This policy setting is designed for advanced users.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the instructions are suppressed." gpmc_supported="At least Windows 2000">Display instructions in logoff scripts as they run</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Display instructions in logon scripts as they run" gpmc_settingPath="User Configuration/Administrative Templates/System/Scripts" gpmc_settingDescription="This policy setting displays the instructions in logon scripts as they run.&lt;br/&gt;&lt;br/&gt;Logon scripts are batch files of instructions that run when the user logs on. By default, the system does not display the instructions in logon scripts.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the system displays each instruction in the logon script as it runs. The instructions appear in a command window. This policy setting is designed for advanced users.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the instructions are suppressed." gpmc_supported="At least Windows 2000">Display instructions in logon scripts as they run</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/AutoPlay Policies</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Autoplay" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/AutoPlay Policies" gpmc_settingDescription="This policy setting allows you to turn off the Autoplay feature.&lt;br/&gt;&lt;br/&gt;          Autoplay begins reading from a drive as soon as you insert media in the drive. As a result, the setup file of programs and the music on audio media start immediately.&lt;br/&gt;&lt;br/&gt;          Prior to Windows XP SP2, Autoplay is disabled by default on removable drives, such as the floppy disk drive (but not the CD-ROM drive), and on network drives.&lt;br/&gt;&lt;br/&gt;          Starting with Windows XP SP2, Autoplay is enabled for removable drives as well, including Zip drives and some USB mass storage devices.&lt;br/&gt;&lt;br/&gt;          If you enable this policy setting, Autoplay is disabled on CD-ROM and removable media drives, or disabled on all drives.&lt;br/&gt;&lt;br/&gt;          This policy setting disables Autoplay on additional types of drives. You cannot use this setting to enable Autoplay on drives on which it is disabled by default.&lt;br/&gt;&lt;br/&gt;          If you disable or do not configure this policy setting, AutoPlay is enabled.&lt;br/&gt;&lt;br/&gt;          Note: This policy setting appears in both the Computer Configuration and User Configuration folders. If the policy settings conflict, the policy setting in Computer Configuration takes precedence over the policy setting in User Configuration." gpmc_supported="At least Windows 2000">Turn off Autoplay</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Turn off Autoplay on:</td><td>CD-ROM and removable media drives</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/File Explorer</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Display confirmation dialog when deleting files" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Allows you to have File Explorer display a confirmation dialog  whenever a file is deleted or moved to the Recycle Bin.&lt;br/&gt;&lt;br/&gt;If you enable this setting, a confirmation dialog is displayed when a file is deleted or moved to the Recycle Bin by the user.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the default behavior of not displaying a confirmation dialog occurs." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Display confirmation dialog when deleting files</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Display the menu bar in File Explorer " gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting configures File Explorer to always display the menu bar.&lt;br/&gt;&lt;br/&gt;Note: By default, the menu bar is not displayed in File Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the menu bar will be displayed in File Explorer.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the menu bar will not be displayed in File Explorer.&lt;br/&gt;&lt;br/&gt;Note: When the menu bar is not displayed, users can access the menu bar by pressing the &amp;#39;ALT&amp;#39; key." gpmc_supported="At least Windows Vista">Display the menu bar in File Explorer </span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to prevent users from accessing Folder Options through the View tab on the ribbon in File Explorer.&lt;br/&gt;&lt;br/&gt;Folder Options allows users to change the way files and folders open, what appears in the navigation pane, and other advanced view settings.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users will receive an error message if they tap or click the Options button or choose the Change folder and search options command, and they will not be able to open Folder Options.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can open Folder Options from the View tab on the ribbon." gpmc_supported="At least Windows 2000">Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not move deleted files to the Recycle Bin" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="When a file or folder is deleted in File Explorer, a copy of the file or folder is placed in the Recycle Bin. Using this setting, you can change this behavior.&lt;br/&gt;&lt;br/&gt;If you enable this setting, files and folders that are deleted using File Explorer will not be placed in the Recycle Bin and will therefore be permanently deleted.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, files and folders deleted using File Explorer will be placed in the Recycle Bin." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Do not move deleted files to the Recycle Bin</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not track Shell shortcuts during roaming" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting determines whether Windows traces shortcuts back to their sources when it cannot find the target on the user&amp;#39;s system.&lt;br/&gt;&lt;br/&gt;Shortcut files typically include an absolute path to the original target file as well as the relative path to the current target file. When the system cannot find the file in the current target path, then, by default, it searches for the target in the original path. If the shortcut has been copied to a different computer, the original path might lead to a network computer, including external resources, such as an Internet server.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows only searches the current target path. It does not search for the original path even when it cannot find the target file in the current target path.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Windows searches for the original path when it cannot find the target file in the current target path." gpmc_supported="At least Windows 2000">Do not track Shell shortcuts during roaming</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide these specified drives in My Computer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to hide these specified drives in My Computer.&lt;br/&gt;&lt;br/&gt;This policy setting allows you to remove the icons representing selected hard drives from My Computer and File Explorer. Also, the drive letters representing the selected drives do not appear in the standard Open dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, select a drive or combination of drives in the drop-down list.&lt;br/&gt;&lt;br/&gt;Note: This policy setting removes the drive icons. Users can still gain access to drive contents by using other methods, such as by typing the path to a directory on the drive in the Map Network Drive dialog box, in the Run dialog box, or in a command window.&lt;br/&gt;&lt;br/&gt;Also, this policy setting does not prevent users from using programs to access these drives or their contents. And, it does not prevent users from using the Disk Management snap-in to view and change drive characteristics.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, all drives are displayed, or select the &amp;quot;Do not restrict drives&amp;quot; option in the drop-down list.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Prevent access to drives from My Computer&amp;quot; policy setting." gpmc_supported="At least Windows 2000">Hide these specified drives in My Computer</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Pick one of the following combinations</td><td>Restrict all drives</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hides the Manage item on the File Explorer context menu" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Removes the Manage item from the File Explorer context menu. This context menu appears when you right-click File Explorer or My Computer.&lt;br/&gt;&lt;br/&gt;The Manage item opens Computer Management (Compmgmt.msc), a console tool that includes many of the primary Windows 2000 administrative tools, such as Event Viewer, Device Manager, and Disk Management. You must be an administrator to use many of the features of these tools.&lt;br/&gt;&lt;br/&gt;This setting does not remove the Computer Management item from the Start menu (Start, Programs, Administrative Tools, Computer Management), nor does it prevent users from using other methods to start Computer Management.&lt;br/&gt;&lt;br/&gt;Tip: To hide all context menus, use the &amp;quot;Remove File Explorer&amp;#39;s default context menu&amp;quot; setting." gpmc_supported="At least Windows 2000">Hides the Manage item on the File Explorer context menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="No Computers Near Me in Network Locations" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to remove computers in the user&amp;#39;s workgroup and domain from lists of network resources in File Explorer and Network Locations.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the system removes the &amp;quot;Computers Near Me&amp;quot; option and the icons representing nearby computers from Network Locations. This policy setting also removes these icons from the Map Network Drive browser.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, computers in the user&amp;#39;s workgroup and domain appear in lists of network resources in File Explorer and Network Locations.&lt;br/&gt;&lt;br/&gt;This policy setting does not prevent users from connecting to computers in their workgroup or domain by other commonly used methods, such as typing the share name in the Run dialog box or the Map Network Drive dialog box.&lt;br/&gt;&lt;br/&gt;To remove network computers from lists of network resources, use the &amp;quot;No Entire Network in Network Locations&amp;quot; policy setting.&lt;br/&gt;" gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">No Computers Near Me in Network Locations</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="No Entire Network in Network Locations" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Removes all computers outside of the user&amp;#39;s workgroup or local domain from lists of network resources in File Explorer and Network Locations.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system removes the Entire Network option and the icons representing networked computers from Network Locations and from the browser associated with the Map Network Drive option.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from viewing or connecting to computers in their workgroup or domain. It also does not prevent users from connecting to remote computers by other commonly used methods, such as by typing the share name in the Run dialog box or the Map Network Drive dialog box.&lt;br/&gt;&lt;br/&gt;To remove computers in the user&amp;#39;s workgroup or domain from lists of network resources, use the &amp;quot;No Computers Near Me in Network Locations&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Note: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">No Entire Network in Network Locations</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent access to drives from My Computer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Prevents users from using My Computer to gain access to the content of selected drives.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users can browse the directory structure of the selected drives in My Computer or File Explorer, but they cannot open folders and access the contents. Also, they cannot use the Run dialog box or the Map Network Drive dialog box to view the directories on these drives.&lt;br/&gt;&lt;br/&gt;To use this setting, select a drive or combination of drives from the drop-down list. To allow access to all drive directories, disable this setting or select the &amp;quot;Do not restrict drives&amp;quot; option from the drop-down list.&lt;br/&gt;&lt;br/&gt;Note: The icons representing the specified drives still appear in My Computer, but if users double-click the icons, a message appears explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt; Also, this setting does not prevent users from using programs to access local and network drives. And, it does not prevent them from using the Disk Management snap-in to view and change drive characteristics.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Hide these specified drives in My Computer&amp;quot; setting." gpmc_supported="At least Windows 2000">Prevent access to drives from My Computer</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Pick one of the following combinations</td><td>Restrict all drives</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent users from adding files to the root of their Users Files folder." gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows administrators to prevent users from adding new items such as files or folders to the root of their Users Files folder in File Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users will no longer be able to add new items such as files or folders to the root of their Users Files folder in File Explorer.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users will be able to add new items such as files or folders to the root of their Users Files folder in File Explorer.&lt;br/&gt;&lt;br/&gt;&lt;br/&gt;Note: Enabling this policy setting does not prevent the user from being able to add new items such as files and folders to their actual file system profile folder at %userprofile%." gpmc_supported="At least Windows Vista">Prevent users from adding files to the root of their Users Files folder.</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove &amp;quot;Map Network Drive&amp;quot; and &amp;quot;Disconnect Network Drive&amp;quot;" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Prevents users from using File Explorer or Network Locations to map or disconnect network drives.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system removes the Map Network Drive and Disconnect Network Drive commands from the toolbar and Tools menus in File Explorer and Network Locations and from menus that appear when you right-click the File Explorer or Network Locations icons.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from connecting to another computer by typing the name of a shared folder in the Run dialog box.&lt;br/&gt;&lt;br/&gt;Note:&lt;br/&gt;&lt;br/&gt;This setting was documented incorrectly on the Explain tab in Group Policy for Windows 2000. The Explain tab states incorrectly that this setting prevents users from connecting and disconnecting drives.&lt;br/&gt;&lt;br/&gt;Note: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="At least Windows 2000">Remove &quot;Map Network Drive&quot; and &quot;Disconnect Network Drive&quot;</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove CD Burning features" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to remove CD Burning features. File Explorer allows you to create and modify re-writable CDs if you have a CD writer connected to your PC.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, all features in the File Explorer that allow you to use your CD writer are removed.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users are able to use the File Explorer CD burning features.&lt;br/&gt;&lt;br/&gt;Note: This policy setting does not prevent users from using third-party applications to create or modify CDs using a CD writer." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Remove CD Burning features</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove DFS tab" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to remove the DFS tab from File Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the DFS (Distributed File System) tab is removed from File Explorer and from other programs that use the File Explorer browser, such as My Computer. As a result, users cannot use this tab to view or change the properties of the DFS shares available from their computer.&lt;br/&gt;&lt;br/&gt;This policy setting does not prevent users from using other methods to configure DFS.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the DFS tab is available." gpmc_supported="At least Windows 2000">Remove DFS tab</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove File Explorer&amp;#39;s default context menu" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Removes shortcut menus from the desktop and File Explorer. Shortcut menus appear when you right-click an item.&lt;br/&gt;&lt;br/&gt;If you enable this setting, menus do not appear when you right-click the desktop or when you right-click the items in File Explorer. This setting does not prevent users from using other methods to issue commands available on the shortcut menus." gpmc_supported="At least Windows 2000">Remove File Explorer&#39;s default context menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove File menu from File Explorer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Removes the File menu from My Computer and File Explorer.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other methods to perform tasks available on the File menu." gpmc_supported="At least Windows 2000">Remove File menu from File Explorer</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Hardware tab" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Removes the Hardware tab.&lt;br/&gt;&lt;br/&gt;This setting removes the Hardware tab from Mouse, Keyboard, and Sounds and Audio Devices in Control Panel. It also removes the Hardware tab from the Properties dialog box for all local drives, including hard drives, floppy disk drives, and CD-ROM drives. As a result, users cannot use the Hardware tab to view or change the device list or device properties, or use the Troubleshoot button to resolve problems with the device." gpmc_supported="At least Windows 2000">Remove Hardware tab</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Search button from File Explorer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to remove the Search button from the File Explorer toolbar.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Search button is removed from the Standard Buttons toolbar that appears in File Explorer and other programs that use the File Explorer window, such as My Computer and Network Locations.&lt;br/&gt;&lt;br/&gt;Enabling this policy setting does not remove the Search button or affect any search features of Internet browser windows, such as the Internet Explorer window.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Search button is available from the File Explorer toolbar.&lt;br/&gt;&lt;br/&gt;This policy setting does not affect the Search items on the File Explorer context menu or on the Start menu. To remove Search from the Start menu, use the &amp;quot;Remove Search menu from Start menu&amp;quot; policy setting (in User Configuration\Administrative Templates\Start Menu and Taskbar). To hide all context menus, use the &amp;quot;Remove File Explorer&amp;#39;s default context menu&amp;quot; policy setting." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Remove Search button from File Explorer</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Security tab" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Removes the Security tab from File Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users opening the Properties dialog box for all file system objects, including folders, files, shortcuts, and drives, will not be able to access the Security tab. As a result, users will be able to neither change the security settings nor view a list of all users that have access to the resource in question.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, users will be able to access the security tab." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Remove Security tab</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Shared Documents from My Computer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to remove the Shared Documents folder from My Computer.&lt;br/&gt;&lt;br/&gt;When a Windows client is in a workgroup, a Shared Documents icon appears in the File Explorer Web view under &amp;quot;Other Places&amp;quot; and also under &amp;quot;Files Stored on This Computer&amp;quot; in My Computer. Using this policy setting, you can choose not to have these items displayed.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Shared Documents folder is not displayed in the Web view or in My Computer.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Shared Documents folder is displayed in Web view and also in My Computer when the client is part of a workgroup.&lt;br/&gt;&lt;br/&gt;Note:  The ability to remove the Shared Documents folder via Group Policy is only available on Windows XP Professional." gpmc_supported="Windows XP Professional only">Remove Shared Documents from My Computer</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove UI to change keyboard navigation indicator setting" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Disables the &amp;quot;Hide keyboard navigation indicators until I use the ALT key&amp;quot; option in Display in Control Panel.&lt;br/&gt;&lt;br/&gt;When this Display Properties option is selected, the underlining that indicates a keyboard shortcut character (hot key) does not appear on menus until you press ALT.&lt;br/&gt;&lt;br/&gt;Effects, such as transitory underlines, are designed to enhance the user&amp;#39;s experience but might be confusing or distracting to some users." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Remove UI to change keyboard navigation indicator setting</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove UI to change menu animation setting" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to prevent users from enabling or disabling minor animations in the operating system for the movement of windows, menus, and lists.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the &amp;quot;Use transition effects for menus and tooltips&amp;quot; option in Display in Control Panel is disabled, and cannot be toggled by users.&lt;br/&gt;&lt;br/&gt;Effects, such as animation, are designed to enhance the user&amp;#39;s experience but might be confusing or distracting to some users.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users are allowed to turn on or off these minor system animations using the &amp;quot;Use transition effects for menus and tooltips&amp;quot; option in Display in Control Panel." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Remove UI to change menu animation setting</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Windows Key hotkeys" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Turn off Windows Key hotkeys.&lt;br/&gt;&lt;br/&gt;Keyboards with a Windows key provide users with shortcuts to common shell features. For example, pressing the keyboard sequence Windows+R opens the Run dialog box; pressing Windows+E starts File Explorer. By using this setting, you can disable these Windows Key hotkeys.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Windows Key hotkeys are unavailable.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Windows Key hotkeys are available." gpmc_supported="At least Windows Server 2003">Turn off Windows Key hotkeys</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/File Explorer/Common Open File Dialog</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the common dialog back button" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer/Common Open File Dialog" gpmc_settingDescription="Hide the Back button in the Open dialog box.&lt;br/&gt;&lt;br/&gt;This policy setting lets you remove new features added in Microsoft Windows 2000 Professional, so the Open dialog box appears as it did in Windows NT 4.0 and earlier. This policy setting affects only programs that use the standard Open dialog box provided to developers of Windows programs.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Back button is removed from the standard Open dialog box.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Back button is displayed for any standard Open dialog box.&lt;br/&gt;&lt;br/&gt;To see an example of the standard Open dialog box, start Notepad  and, on the File menu, click Open.&lt;br/&gt;&lt;br/&gt;Note: In Windows Vista, this policy  setting applies only to applications that are using the Windows XP common dialog box style. This policy setting does not apply to the new Windows Vista common dialog box style. Also, third-party applications with Windows 2000 or later certification to are required to adhere to this policy setting." gpmc_supported="At least Windows 2000">Hide the common dialog back button</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the dropdown list of recent files" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer/Common Open File Dialog" gpmc_settingDescription="Removes the list of most recently used files from the Open dialog box.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the &amp;quot;File name&amp;quot; field includes a drop-down list of recently used files. If you enable this setting, the &amp;quot;File name&amp;quot; field is a simple text box. Users must browse directories to find a file or type a file name in the text box.&lt;br/&gt;&lt;br/&gt;This setting, and others in this folder, lets you remove new features added in Windows 2000 Professional, so that the Open dialog box looks like it did in Windows NT 4.0 and earlier. These policies only affect programs that use the standard Open dialog box provided to developers of Windows programs.&lt;br/&gt;&lt;br/&gt;To see an example of the standard Open dialog box, start Wordpad and, on the File menu, click Open.&lt;br/&gt;&lt;br/&gt;Note: In Windows Vista, this policy  setting applies only to applications that are using the Windows XP common dialog box style. This policy setting does not apply to the new Windows Vista common dialog box style. It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="At least Windows 2000">Hide the dropdown list of recent files</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Items displayed in Places Bar" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer/Common Open File Dialog" gpmc_settingDescription="Configures the list of items displayed in the Places Bar in the Windows File/Open dialog. If enable this setting you can specify from 1 to 5 items to be displayed in the Places Bar.&lt;br/&gt;&lt;br/&gt;The valid items you may display in the Places Bar are:&lt;br/&gt;&lt;br/&gt;1) Shortcuts to a local folders -- (ex. C:\Windows)&lt;br/&gt;&lt;br/&gt;2) Shortcuts to remote folders -- (\\server\share)&lt;br/&gt;&lt;br/&gt;3) FTP folders&lt;br/&gt;&lt;br/&gt;4) web folders&lt;br/&gt;&lt;br/&gt;5) Common Shell folders.&lt;br/&gt;&lt;br/&gt;The list of Common Shell Folders that may be specified:&lt;br/&gt;&lt;br/&gt;Desktop, Recent Places, Documents, Pictures, Music, Recently Changed, Attachments and Saved Searches.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting the default list of items will be displayed in the Places Bar.&lt;br/&gt;&lt;br/&gt;Note: In Windows Vista, this policy  setting applies only to applications that are using the Windows XP common dialog box style. This policy setting does not apply to the new Windows Vista common dialog box style." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Items displayed in Places Bar</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable caching of Auto-Proxy scripts" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents automatic proxy scripts, which interact with a server to automatically configure users&amp;#39; proxy settings, from being stored in the users&amp;#39; cache.&lt;br/&gt;&lt;br/&gt;If you enable this policy, automatic proxy scripts will not be stored temporarily on the users&amp;#39; computer.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, automatic proxy scripts can be stored in the users&amp;#39; cache." gpmc_supported="At least Internet Explorer 5.0">Disable caching of Auto-Proxy scripts</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing accessibility settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="If you enable this policy, the user cannot modify the Accessibility options. All options in the &amp;quot;Accessibility&amp;quot; window on the General Tab in the Internet Options dialog box appear dimmed.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can change accessibility settings, such as overriding fonts and colors on Web pages.&lt;br/&gt;&lt;br/&gt;If you set the &amp;quot;Disable the General page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), you do not need to set this policy, because the &amp;quot;Disable the General page&amp;quot; policy removes the General tab from the interface." gpmc_supported="At least Internet Explorer 5.0">Disable changing accessibility settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing Advanced page settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents users from changing settings on the Advanced tab in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users are prevented from changing advanced Internet settings, such as security, multimedia, and printing. Users cannot select or clear the check boxes on the Advanced tab.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can select or clear settings on the Advanced tab.&lt;br/&gt;&lt;br/&gt;If you set the &amp;quot;Disable the Advanced page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), you do not need to set this policy, because the &amp;quot;Disable the Advanced page&amp;quot; policy removes the Advanced tab from the interface." gpmc_supported="At least Internet Explorer 5.0">Disable changing Advanced page settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing Automatic Configuration settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This setting specifies to automatically detect the proxy server settings used to connect to the Internet and customize Internet Explorer. This setting specifies that Internet explorer use the configuration settings provided in a file by the system administrator.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user will not be able to do automatic configuration. You can import your current connection settings from your machine using Internet Explorer Maintenance under Admin Templates using group policy editor.&lt;br/&gt;&lt;br/&gt;If you disable or do no configure this policy setting, the user will have the freedom to automatically configure these settings." gpmc_supported="At least Internet Explorer 5.0">Disable changing Automatic Configuration settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing Calendar and Contact settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents users from changing the default programs for managing schedules and contacts.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Calendar and Contact combo boxes appear dimmed in the Internet Programs area. To display these options, users open the Internet Options dialog box, and then click the Programs tab.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can determine which programs to use for managing schedules and contacts, if programs that perform these tasks are installed.&lt;br/&gt;&lt;br/&gt;This &amp;quot;Disable the Programs Page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel) takes precedence over this policy. If it is enabled, this policy is ignored." gpmc_supported="At least Internet Explorer 5.0. Not supported on Windows Vista">Disable changing Calendar and Contact settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing color settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents users from changing the default Web page colors.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the color settings for Web pages appear dimmed. The settings are located in the Colors area in the dialog box that appears when the user clicks the General tab and then clicks the Colors button in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can change the default background and text color of Web pages.&lt;br/&gt;&lt;br/&gt;If you set the &amp;quot;Disable the General page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), you do not need to set this policy, because the &amp;quot;Disable the General page&amp;quot; policy removes the General tab from the interface.&lt;br/&gt;&lt;br/&gt;Note: The default Web page colors are ignored on Web pages in which the author has specified the background and text colors." gpmc_supported="At least Internet Explorer 5.0">Disable changing color settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing connection settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents users from changing dial-up settings.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Settings button on the Connections tab in the Internet Options dialog box appears dimmed.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can change their settings for dial-up connections.&lt;br/&gt;&lt;br/&gt;If you set the &amp;quot;Disable the Connections page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), you do not need to set this policy, because the &amp;quot;Disable the Connections page&amp;quot; policy removes the Connections tab from the interface." gpmc_supported="At least Internet Explorer 5.0">Disable changing connection settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing default browser check" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents Microsoft Internet Explorer from checking to see whether it is the default browser.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Internet Explorer Should Check to See Whether It Is the Default Browser check box on the Programs tab in the Internet Options dialog box appears dimmed.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can determine whether Internet Explorer will check to see if it is the default browser. When Internet Explorer performs this check, it prompts the user to specify which browser to use as the default.&lt;br/&gt;&lt;br/&gt;This policy is intended for organizations that do not want users to determine which browser should be their default.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Disable the Programs page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), which removes the Programs tab from Internet Explorer in Control Panel, takes precedence over this policy. If it is enabled, this policy is ignored." gpmc_supported="Only Internet Explorer 5.0 through Internet Explorer 9.0">Disable changing default browser check</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing font settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents users from changing font settings.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users will not be able to change font settings for viewing Web pages. All font settings visible after pressing the &amp;quot;Fonts&amp;quot; button on the General Tab in the Internet Options dialog box will be disabled.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can change the default fonts for viewing Web pages.&lt;br/&gt;&lt;br/&gt;If you set the &amp;quot;Disable the General page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), you do not need to set this policy, because the &amp;quot;Disable the General page&amp;quot; policy removes the General tab from the interface.&lt;br/&gt;&lt;br/&gt;Note: The default font settings colors are ignored in cases in which the Web page author has specified the font attributes." gpmc_supported="At least Internet Explorer 5.0">Disable changing font settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing home page settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="The Home page specified on the General tab of the Internet Options dialog box is the default Web page that Internet Explorer loads whenever it is run.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, a user cannot set a custom default home page. You must specify which default home page should load on the user machine. For machines with at least Internet Explorer 7, the home page can be set within this policy to override other home page policies.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Home page box is enabled and users can choose their own home page." gpmc_supported="At least Internet Explorer 5.0">Disable changing home page settings</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Home Page</td><td>http://intranet-ta</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing language settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents users from changing language preference settings.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users will not be able to set language preferences to read websites. Language preference settings visible after pressing the &amp;quot;Languages&amp;quot; button on the General Tab in the Internet Options dialog box will be disabled.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can change the language preference settings for viewing Web sites for languages in which the character set has been installed.&lt;br/&gt;&lt;br/&gt;If you set the &amp;quot;Disable the General page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), you do not need to set this policy, because the &amp;quot;Disable the General page&amp;quot; policy removes the General tab from the interface." gpmc_supported="At least Internet Explorer 5.0">Disable changing language settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing link color settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents users from changing the colors of links on Web pages.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the color settings for links appear dimmed. The settings are located in the Links area of the dialog box that appears when users click the General tab and then click the Colors button in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can change the default color of links on Web pages.&lt;br/&gt;&lt;br/&gt;If you set the &amp;quot;Disable the General page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), you do not need to set this policy, because the &amp;quot;Disable the General page&amp;quot; policy removes the General tab from the interface.&lt;br/&gt;&lt;br/&gt;Note: The default link colors are ignored on Web pages on which the author has specified link colors." gpmc_supported="At least Internet Explorer 5.0">Disable changing link color settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing Messaging settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents users from changing the default programs for messaging tasks.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the E-mail, Newsgroups, and Internet Call options in the Internet Programs area appear dimmed. To display these options, users open the Internet Options dialog box, and then click the Programs tab.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can determine which programs to use for sending mail, viewing newsgroups, and placing Internet calls, if programs that perform these tasks are installed.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Disable the Programs page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), which removes the Programs tab from Internet Explorer in Control Panel, takes precedence over this policy. If it is enabled, this policy is ignored." gpmc_supported="At least Internet Explorer 5.0. Not supported on Windows Vista">Disable changing Messaging settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable external branding of Internet Explorer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents branding of Internet programs, such as customization of Internet Explorer and Outlook Express logos and title bars, by another party.&lt;br/&gt;&lt;br/&gt;If you enable this policy, it prevents customization of the browser by another party, such as an Internet service provider or Internet content provider.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users could install customizations from another party-for example, when signing up for Internet services.&lt;br/&gt;&lt;br/&gt;This policy is intended for administrators who want to maintain a consistent browser across an organization." gpmc_supported="At least Internet Explorer 5.0">Disable external branding of Internet Explorer</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable Import/Export Settings wizard" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy settings disables the Import/Export Settings wizard. This wizard allows you to import settings from another browser, import settings from a file, or export settings to a file. Importing settings from another browser allows the user to import favorites and feeds from other browsers. Importing settings from a file allows the user to import favorites, feeds and cookies from a file. Exporting settings to a file allows the user to export favorites, feeds and cookies to a file.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user will not be able to use the Import/Export Settings wizard.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the user will be able to use the Import/Export Settings wizard." gpmc_supported="At least Internet Explorer 5.0">Disable Import/Export Settings wizard</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable Internet Connection wizard" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents users from running the Internet Connection Wizard.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Setup button on the Connections tab in the Internet Options dialog box appears dimmed.&lt;br/&gt;&lt;br/&gt;Users will also be prevented from running the wizard by clicking the Connect to the Internet icon on the desktop or by clicking Start, pointing to Programs, pointing to Accessories, pointing to Communications, and then clicking Internet Connection Wizard.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can change their connection settings by running the Internet Connection Wizard.&lt;br/&gt;&lt;br/&gt;Note: This policy overlaps with the &amp;quot;Disable the Connections page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), which removes the Connections tab from the interface. Removing the Connections tab from the interface, however, does not prevent users from running the Internet Connection Wizard from the desktop or the Start menu." gpmc_supported="At least Internet Explorer 5.0">Disable Internet Connection wizard</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Reset Web Settings feature" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents users from restoring default settings for home and search pages.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Reset Web Settings button on the Programs tab in the Internet Options dialog box appears dimmed.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can restore the default settings for home and search pages.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Disable the Programs page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), which removes the Programs tab from Internet Explorer in Control Panel, takes precedence over this policy. If it is enabled, this policy is ignored." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Disable the Reset Web Settings feature</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Display error message on proxy script download failure" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Specifies that error messages will be displayed to users if problems occur with proxy scripts.&lt;br/&gt;&lt;br/&gt;If you enable this policy, error messages will be displayed when the browser does not download or run a script to set proxy settings.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, error messages will not be displayed when problems occur with proxy scripts." gpmc_supported="At least Internet Explorer 5.0">Display error message on proxy script download failure</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent access to Internet Explorer Help" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting prevents the user from accessing Help in Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the following occur:&lt;br/&gt;    • The Help menu on the menu bar is not functional.&lt;br/&gt;    • Help is removed from the Command bar.&lt;br/&gt;    • The shortcut key F1 does not make Help appear.&lt;br/&gt;    • Help cannot be accessed from the Settings charm (starting with Internet Explorer 10 on Windows 8).&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Internet Explorer Help menu is available to the user. The user can also use the Command bar and F1 to access Help." gpmc_supported="At least Internet Explorer 7.0">Prevent access to Internet Explorer Help</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing pop-up filter level" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting prevents the user from changing the level of pop-up filtering. The available levels are as follows:&lt;br/&gt;    High: Block all pop-ups.&lt;br/&gt;    Medium: Block most automatic pop-ups.&lt;br/&gt;    Low: Allow pop-ups from secure sites.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user cannot change the filter level. You can specify the filter level by importing Privacy settings from your computer under Internet Explorer Maintenance.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the user can manage pop-ups by changing the filter level.&lt;br/&gt;&lt;br/&gt;You may also want to enable the &amp;quot;Prevent managing pop-up exception list&amp;quot; and &amp;quot;Turn off pop-up management&amp;quot; policy settings to prevent the user from configuring pop-up behavior." gpmc_supported="At least Internet Explorer 7.0">Prevent changing pop-up filter level</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing proxy settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting specifies if a user can change proxy settings.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user will not be able to configure proxy settings.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the user can configure proxy settings." gpmc_supported="At least Internet Explorer 5.0">Prevent changing proxy settings</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing the default search provider" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting prevents the user from changing the default search provider for the Address bar and the toolbar Search box.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user cannot change the default search provider.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the user can change the default search provider." gpmc_supported="At least Internet Explorer 7.0">Prevent changing the default search provider</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent Internet Explorer Search box from appearing" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting prevents the Search box from appearing in Internet Explorer. When the Search box is available, it includes all installed search providers and a link to search settings.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Search box does not appear in the Internet Explorer frame.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Search box appears by default in the Internet Explorer frame.&lt;br/&gt;&lt;br/&gt;Note: If you enable this policy setting, Internet Explorer does not enumerate search providers for the Accelerators infrastructure. If Accelerators are turned on, users can install search providers as Accelerators to include them on the Accelerator menu." gpmc_supported="Only Internet Explorer 7.0 and Internet Explorer 8.0">Prevent Internet Explorer Search box from appearing</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent managing pop-up exception list" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="You can allow pop-ups from specific websites by adding the sites to the exception list.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user cannot add websites to or remove websites from the exception list.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the user can add websites to or remove websites from the exception list.&lt;br/&gt;&lt;br/&gt;Note: You can allow a default list of sites that can open pop-up windows regardless of the Internet Explorer process&amp;#39;s Pop-Up Blocker settings by enabling the &amp;quot;Specify pop-up allow list&amp;quot; policy setting." gpmc_supported="At least Internet Explorer 7.0">Prevent managing pop-up exception list</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent managing the phishing filter" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting prevents the user from managing a filter that warns the user if the website being visited is known for fraudulent attempts to gather personal information through &amp;quot;phishing.&amp;quot;&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user is not prompted to enable the phishing filter. You must specify which mode the phishing filter uses: manual, automatic, or off.&lt;br/&gt;&lt;br/&gt;If you select manual mode, the phishing filter performs only local analysis, and the user is prompted to permit any data to be sent to Microsoft. If the feature is fully enabled, all website addresses that are not on the filter&amp;#39;s allow list are sent automatically to Microsoft without prompting the user.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the user is prompted to decide the mode of operation for the phishing filter." gpmc_supported="Only Internet Explorer 7.0">Prevent managing the phishing filter</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Select phishing filter mode</td><td>Off</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent participation in the Customer Experience Improvement Program" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting prevents the user from participating in the Customer Experience Improvement Program (CEIP).&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user cannot participate in the CEIP, and the Customer Feedback Options command does not appear on the Help menu.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the user must participate in the CEIP, and the Customer Feedback Options command does not appear on the Help menu.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can choose to participate in the CEIP." gpmc_supported="At least Internet Explorer 7.0. Not supported on Windows Vista">Prevent participation in the Customer Experience Improvement Program</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Restrict search providers to a specific list" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting allows you to restrict the search providers that appear in the Search box in Internet Explorer to those defined in the list of policy keys for search providers (found under [HKCU or HKLM\Software\policies\Microsoft\Internet Explorer\SearchScopes]). Normally, search providers can be added from third-party toolbars or in Setup, but the user can also add them from a search provider&amp;#39;s website.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user cannot configure the list of search providers on his or her computer, and any default providers installed do not appear (including providers installed from other applications). The only providers that appear are those in the list of policy keys for search providers. Note: This list can be created through a custom administrative template file. For information about creating this custom administrative template file, see the Internet Explorer documentation on search providers.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the user can configure his or her list of search providers." gpmc_supported="At least Internet Explorer 7.0">Restrict search providers to a specific list</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Search: Disable Find Files via F3 within the browser" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Disables using the F3 key to search in Internet Explorer and File Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the search functionality of the F3 key is disabled. Users cannot press F3 to search the Internet (from Internet Explorer) or to search the hard disk (from File Explorer). If the user presses F3, a prompt appears that informs the user that this feature has been disabled.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can press F3 to search the Internet (from Internet Explorer) or the hard disk (from File Explorer).&lt;br/&gt;&lt;br/&gt;This policy is intended for situations in which administrators do not want users to explore the Internet or the hard disk.&lt;br/&gt;&lt;br/&gt;This policy can be used in coordination with the &amp;quot;File Menu: Disable Open menu option&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Browser Menus), which prevents users from opening files by using the browser." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Search: Disable Find Files via F3 within the browser</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Search: Disable Search Customization" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Makes the Customize button in the Search Assistant appear dimmed.&lt;br/&gt;&lt;br/&gt;The Search Assistant is a tool that appears in the Search bar to help users search the Internet.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users cannot change their Search Assistant settings, such as setting default search engines for specific tasks.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can change their settings for the Search Assistant.&lt;br/&gt;&lt;br/&gt;This policy is designed to help administrators maintain consistent settings for searching across an organization." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Search: Disable Search Customization</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Crash Detection" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting allows you to manage the crash detection feature of add-on Management.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, a crash in Internet Explorer will exhibit behavior found in Windows XP Professional Service Pack 1 and earlier, namely to invoke Windows Error Reporting. All policy settings for Windows Error Reporting continue to apply.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the crash detection feature for add-on management will be functional." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Turn off Crash Detection</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Favorites bar" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting allows you to manage whether a user has access to the Favorites bar in Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Favorites bar is turned off.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the Favorites bar is turned on.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can turn on or turn off the Favorites bar." gpmc_supported="At least Internet Explorer 8.0">Turn off Favorites bar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Managing SmartScreen Filter for Internet Explorer 8" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting allows the user to enable the SmartScreen Filter, which warns the user if the website being visited is known for fraudulent attempts to gather personal information through &amp;quot;phishing,&amp;quot; or is known to host malware.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user is not prompted to turn on SmartScreen Filter. You must specify which mode the SmartScreen Filter uses: on, or off.All website addresses that are not on the filter&amp;#39;s allow list are sent automatically to Microsoft without prompting the user.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the user is prompted to decide whether to turn on the SmartScreen Filter during the first-run experience." gpmc_supported="Only Internet Explorer 8.0">Turn off Managing SmartScreen Filter for Internet Explorer 8</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Select SmartScreen Filter mode for Internet Explorer 8</td><td>Off</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off page-zooming functionality" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting prevents the user from zooming in to or out of a page to better see the content.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, applications that host MSHTML do not respond to user input that causes the content to be re-rendered at a scaled size.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, applications that host MSHTML respond to user input that causes the content to be re-rendered at a scaled size." gpmc_supported="At least Internet Explorer 7.0">Turn off page-zooming functionality</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off pop-up management" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting allows you to manage pop-up management functionality in Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Control Panel information relating to pop-up management will be unavailable (grayed out) and all other pop-up manager controls, notifications, and dialog boxes will not appear. Pop-up windows will continue to function as they did in Windows XP Service Pack 1 or earlier, although windows launched off screen will continue to be re-positioned onscreen.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the popup management feature will be functional." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Turn off pop-up management</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Quick Tabs functionality" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting allows you to turn off the Quick Tabs functionality in Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the entry points to Quick Tabs are removed from the Internet Explorer user interface.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Quick Tabs is turned on." gpmc_supported="Internet Explorer 7.0 to Internet Explorer 10.0">Turn off Quick Tabs functionality</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Reopen Last Browsing Session" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting allows you to manage whether a user has access to the Reopen Last Browsing Session feature in Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user cannot use the Reopen Last Browsing Session feature.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the user can use the Reopen Last Browsing Session feature." gpmc_supported="At least Internet Explorer 8.0">Turn off Reopen Last Browsing Session</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off suggestions for all user-installed providers" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting allows you to turn off suggestions for all user-installed search providers.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user cannot view suggestions for user-installed search providers.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the user can choose to view suggestions for all user-installed search providers that offer suggestions." gpmc_supported="At least Internet Explorer 8.0">Turn off suggestions for all user-installed providers</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Tab Grouping" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting allows you to manage whether the user has access to Tab Grouping in Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Tab Grouping is turned off.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Tab Grouping is turned on.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can turn on or turn off Tab Grouping." gpmc_supported="At least Internet Explorer 8.0">Turn off Tab Grouping</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off tabbed browsing" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting allows you to turn off tabbed browsing and related entry points from the Internet Explorer user interface. Starting with Windows 8, this policy only applies to Internet Explorer on the desktop.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, tabbed browsing and related entry points are turned off for Internet Explorer, and the user cannot turn them on.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, tabbed browsing and related entry points appear on the user interface for Internet Explorer, and the user cannot turn them off.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can turn on or turn off tabbed browsing." gpmc_supported="Internet Explorer 7.0 to Internet Explorer 10.0">Turn off tabbed browsing</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off the quick pick menu" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting allows you to prevent the quick pick menu from appearing when a user clicks in the Search box.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, when a user clicks in the Search box, the quick pick menu does not appear until the user starts typing.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, when a user clicks in the Search box, the quick pick menu appears." gpmc_supported="Only Internet Explorer 8.0">Turn off the quick pick menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn on Suggested Sites" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting controls the Suggested Sites feature, which recommends websites based on the user’s browsing activity. Suggested Sites reports a user’s browsing history to Microsoft to suggest sites that the user might want to visit.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user is not prompted to enable Suggested Sites. The user’s browsing history is sent to Microsoft to produce suggestions.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the entry points and functionality associated with this feature are turned off.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can turn on and turn off the Suggested Sites feature." gpmc_supported="At least Internet Explorer 8.0">Turn on Suggested Sites</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn on the auto-complete feature for user names and passwords on forms" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This AutoComplete feature can remember and suggest User names and passwords on Forms.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the user cannot change &amp;quot;User name and passwords on forms&amp;quot; or &amp;quot;prompt me to save passwords&amp;quot;. The Auto Complete feature for User names and passwords on Forms will be turned on. You have to decide whether to select &amp;quot;prompt me to save passwords&amp;quot;.&lt;br/&gt;&lt;br/&gt;If you disable this setting the user cannot change &amp;quot;User name and passwords on forms&amp;quot; or &amp;quot;prompt me to save passwords&amp;quot;. The Auto Complete feature for User names and passwords on Forms is turned off. The user also cannot opt to be prompted to save passwords.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, the user has the freedom of turning on Auto complete for User name and passwords on forms and the option of prompting to save passwords. To display this option, the users open the Internet Options dialog box, click the Contents Tab and click the Settings button." gpmc_supported="At least Internet Explorer 5.0">Turn on the auto-complete feature for user names and passwords on forms</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Prompt me to save passwords</td><td>Disabled</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Use Automatic Detection for dial-up connections" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Specifies that Automatic Detection will be used to configure dial-up settings for users.&lt;br/&gt;&lt;br/&gt;Automatic Detection uses a DHCP (Dynamic Host Configuration Protocol) or DNS server to customize the browser the first time it is started.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users&amp;#39; dial-up settings will be configured by Automatic Detection.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, dial-up settings will not be configured by Automatic Detection, unless specified by the user." gpmc_supported="At least Internet Explorer 5.0">Use Automatic Detection for dial-up connections</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Browser menus</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable Open in New Window menu option" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents using the shortcut menu to open a link in a new browser window.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users cannot point to a link, click the right mouse button, and then click the Open in New Window command.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can open a Web page in a new browser window by using the shortcut menu.&lt;br/&gt;&lt;br/&gt;This policy can be used in coordination with the &amp;quot;File menu: Disable New menu option&amp;quot; policy, which prevents users from opening the browser in a new window by clicking the File menu, pointing to New, and then clicking Window.&lt;br/&gt;&lt;br/&gt;Note: When users click the Open in New Window command, the link will not open in a new window and they will be informed that the command is not available." gpmc_supported="At least Internet Explorer 5.0">Disable Open in New Window menu option</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="File menu: Disable New menu option" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents users from opening a new browser window from the File menu.&lt;br/&gt;&lt;br/&gt;If this policy is enabled, users cannot open a new browser window by clicking the File menu, pointing to the New menu, and then clicking Window. The user interface is not changed, but a new window will not be opened, and users will be informed that the command is not available.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can open a new browser window from the File menu.&lt;br/&gt;&lt;br/&gt;Caution: This policy does not prevent users from opening a new browser window by right-clicking, and then clicking the Open in New Window command. To prevent users from using the shortcut menu to open new browser windows, you should also set the &amp;quot;Disable Open in New Window menu option&amp;quot; policy, which disables this command on the shortcut menu, or the &amp;quot;Turn off Shortcut Menu&amp;quot; policy, which disables the entire shortcut menu.&lt;br/&gt;&lt;br/&gt;Note: the user will still be able to open New Tabs." gpmc_supported="At least Internet Explorer 5.0">File menu: Disable New menu option</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="File menu: Disable Open menu option" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents users from opening a file or Web page from the File menu in Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Open dialog box will not appear when users click the Open command on the File menu. If users click the Open command, they will be notified that the command is not available.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can open a Web page from the browser File menu.&lt;br/&gt;&lt;br/&gt;Caution: This policy does not prevent users from right-clicking a link on a Web page, and then clicking the Open or Open in New Window command. To prevent users from opening Web pages by using the shortcut menu, set the &amp;quot;Disable Open in New Window menu option&amp;quot; policy, which disables this command on the shortcut menu, or the &amp;quot;Turn off Shortcut Menu&amp;quot; policy, which disables the entire shortcut menu." gpmc_supported="At least Internet Explorer 5.0">File menu: Disable Open menu option</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="File menu: Disable Save As Web Page Complete" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents users from saving the complete contents that are displayed on or run from a Web page, including the graphics, scripts, linked files, and other elements. It does not prevent users from saving the text of a Web page.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Web Page, Complete file type option will be removed from the Save as Type box in the Save Web Page dialog box. Users can still save Web pages as hypertext markup language (HTML) files or as text files, but graphics, scripts, and other elements are not saved. To display the Save Web Page dialog box, users click the File menu, and then click the Save As command.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can save all elements on a Web page.&lt;br/&gt;&lt;br/&gt;The &amp;quot;File menu: Disable Save As... menu option&amp;quot; policy, which removes the Save As command, takes precedence over this policy. If it is enabled, this policy is ignored." gpmc_supported="At least Internet Explorer 5.0">File menu: Disable Save As Web Page Complete</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="File menu: Disable Save As... menu option" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents users from saving Web pages from the browser File menu to their hard disk or to a network share.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Save As command on the File menu will be removed.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can save Web pages for later viewing.&lt;br/&gt;&lt;br/&gt;This policy takes precedence over the &amp;quot;File Menu: Disable Save As Web Page Complete&amp;quot; policy, which prevents users from saving the entire contents that are displayed or run from a Web Page, such as graphics, scripts, and linked files, but does not prevent users from saving the text of a Web page.&lt;br/&gt;&lt;br/&gt;Caution: If you enable this policy, users are not prevented from saving Web content by pointing to a link on a Web page, clicking the right mouse button, and then clicking Save Target As." gpmc_supported="At least Internet Explorer 5.0">File menu: Disable Save As... menu option</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Help menu: Remove &amp;#39;For Netscape Users&amp;#39; menu option" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents users from displaying tips for users who are switching from Netscape.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the For Netscape Users command is removed from the Help menu.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can display content about switching from Netscape by clicking the For Netscape Users command on the Help menu.&lt;br/&gt;&lt;br/&gt;Caution: Enabling this policy does not remove the tips for Netscape users from the Microsoft Internet Explorer Help file." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Help menu: Remove &#39;For Netscape Users&#39; menu option</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Help menu: Remove &amp;#39;Send Feedback&amp;#39; menu option" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents users from sending feedback to Microsoft by clicking the Send Feedback command on the Help menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Send Feedback command is removed from the Help menu.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can fill out an Internet form to provide feedback about Microsoft products." gpmc_supported="At least Internet Explorer 5.0">Help menu: Remove &#39;Send Feedback&#39; menu option</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Help menu: Remove &amp;#39;Tip of the Day&amp;#39; menu option" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents users from viewing or changing the Tip of the Day interface in Microsoft Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Tip of the Day command is removed from the Help menu.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can enable or disable the Tip of the Day, which appears at the bottom of the browser." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Help menu: Remove &#39;Tip of the Day&#39; menu option</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Help menu: Remove &amp;#39;Tour&amp;#39; menu option" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents users from running the Internet Explorer Tour from the Help menu in Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Tour command is removed from the Help menu.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can run the tour from the Help menu." gpmc_supported="At least Internet Explorer 7.0">Help menu: Remove &#39;Tour&#39; menu option</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Favorites menu" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents users from adding, removing, editing or viewing the list of Favorite links.&lt;br/&gt;&lt;br/&gt;The Favorites list is a way to store popular links for future use.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Favorites menu is removed from the interface, and the Favorites button on the browser toolbar appears dimmed. The Add to Favorites command on the shortcut menu is disabled; when users click it, they are informed that the command is unavailable.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can manage their Favorites list.&lt;br/&gt;&lt;br/&gt;Note: If you enable this policy, users also cannot click Synchronize on the Tools menu (in Internet Explorer 6) to manage their favorite links that are set up for offline viewing." gpmc_supported="At least Internet Explorer 5.0">Hide Favorites menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Tools menu: Disable Internet Options... menu option" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents users from opening the Internet Options dialog box from the Tools menu in Microsoft Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users cannot change their Internet options, such as default home page, cache size, and connection and proxy settings, from the browser Tools menu. When users click the Internet Options command on the Tools menu, they are informed that the command is unavailable.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can change their Internet settings from the browser Tools menu.&lt;br/&gt;&lt;br/&gt;Caution: This policy does not prevent users from viewing and changing Internet settings by clicking the Internet Options icon in Windows Control Panel.&lt;br/&gt;&lt;br/&gt;Also, see policies for Internet options in the \Administrative Templates\Windows Components\Internet Explorer and in \Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel folders." gpmc_supported="At least Internet Explorer 5.0">Tools menu: Disable Internet Options... menu option</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Print Menu" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="This policy setting allows you to manage whether users can access the Print menu. Starting with Windows 8, this policy setting also allows you to manage whether users can access the Print flyout for Internet Explorer and any printers under the Devices charm.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Print menu in Internet Explorer will not be available. Starting with Windows 8, the Print flyout for Internet Explorer will not be available, and users will not see printers under the Devices charm.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Print menu in Internet Explorer will be available. Starting with Windows 8, the Print flyout for Internet Explorer will be available, and users will see installed printers under the Devices charm." gpmc_supported="At least Internet Explorer 5.0">Turn off Print Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Shortcut Menu" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="This policy setting prevents the shortcut menu from appearing when a user right-clicks a webpage while using Internet Explorer. Starting with Windows 8, this policy setting only applies to Internet Explorer on the desktop.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the shortcut menu will not appear when a user right-clicks a webpage.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can use the shortcut menu." gpmc_supported="At least Internet Explorer 5.0">Turn off Shortcut Menu</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="View menu: Disable Full Screen menu option" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents users from displaying the browser in full-screen (kiosk) mode, without the standard toolbar.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Full Screen command on the View menu will appear dimmed, and pressing F11 will not display the browser in a full screen.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can display the browser in a full screen.&lt;br/&gt;&lt;br/&gt;This policy is intended to prevent users from displaying the browser without toolbars, which might be confusing for some beginning users." gpmc_supported="At least Internet Explorer 5.0">View menu: Disable Full Screen menu option</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="View menu: Disable Source menu option" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents users from viewing the HTML source of Web pages by clicking the Source command on the View menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Source command on the View menu will appear dimmed.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, then users can view the HTML source of Web pages from the browser View menu.&lt;br/&gt;&lt;br/&gt;Caution: This policy does not prevent users from viewing the HTML source of a Web page by right-clicking a Web page to open the shortcut menu, and then clicking View Source. To prevent users from viewing the HTML source of a Web page from the shortcut menu, set the &amp;quot;Turn off Shortcut Menu&amp;quot; policy, which disables the entire shortcut menu." gpmc_supported="At least Internet Explorer 5.0">View menu: Disable Source menu option</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Delete Browsing History</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow deleting browsing history on exit" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Delete Browsing History" gpmc_settingDescription="This policy setting allows the automatic deletion of specified items when the last browser window closes. The preferences selected in the Delete Browsing History dialog box (such as deleting temporary Internet files, cookies, history, form data, and passwords) are applied, and those items are deleted.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, deleting browsing history on exit is turned on.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, deleting browsing history on exit is turned off.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, it can be configured on the General tab in Internet Options.&lt;br/&gt;&lt;br/&gt;If the &amp;quot;Prevent access to Delete Browsing History&amp;quot; policy setting is enabled, this policy setting has no effect." gpmc_supported="At least Internet Explorer 8.0">Allow deleting browsing history on exit</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable &amp;quot;Configuring History&amp;quot;" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Delete Browsing History" gpmc_settingDescription="This setting specifies the number of days that Internet Explorer tracks views of pages in the History List. To access the Temporary Internet Files and History Settings dialog box, from the Menu bar, on the Tools menu, click Internet Options, click the General tab, and then click Settings under Browsing history.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, a user cannot set the number of days that Internet Explorer tracks views of the pages in the History List. You must specify the number of days that Internet Explorer tracks views of pages in the History List. Users can not delete browsing history.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, a user can set the number of days that Internet Explorer tracks views of pages in the History list. Users can delete browsing history." gpmc_supported="At least Internet Explorer 5.0">Disable &quot;Configuring History&quot;</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Days to keep pages in History</td><td>1</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent access to Delete Browsing History" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Delete Browsing History" gpmc_settingDescription="This policy setting prevents the user from performing actions which will delete browsing history. For more information on browsing history Group Policy settings, see &amp;quot;Group Policies Settings in Internet Explorer 10&amp;quot; in the TechNet technical library.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user cannot access the Delete Browsing History dialog box. Starting with Windows 8, users cannot click the Delete Browsing History button on the Settings charm.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the user can access the Delete Browsing History dialog box. Starting with Windows 8, users can click the Delete Browsing History button on the Settings charm." gpmc_supported="At least Internet Explorer 7.0">Prevent access to Delete Browsing History</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent deleting cookies" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Delete Browsing History" gpmc_settingDescription="This policy setting prevents the user from deleting cookies. This feature is available in the Delete Browsing History dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, cookies are preserved when the user clicks Delete.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, cookies are deleted when the user clicks Delete.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can choose whether to delete or preserve cookies when he or she clicks Delete.&lt;br/&gt;&lt;br/&gt;If the &amp;quot;Prevent access to Delete Browsing History&amp;quot; policy setting is enabled, this policy setting is enabled by default." gpmc_supported="At least Internet Explorer 8.0">Prevent deleting cookies</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent deleting favorites site data" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Delete Browsing History" gpmc_settingDescription="This policy setting prevents the user from deleting favorites site data. This feature is available in the Delete Browsing History dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, favorites site data is preserved when the user clicks Delete.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, favorites site data is deleted when the user clicks Delete.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can choose whether to delete or preserve favorites site data when he or she clicks Delete.&lt;br/&gt;&lt;br/&gt;If the &amp;quot;Prevent access to Delete Browsing History&amp;quot; policy setting is enabled, this policy setting has no effect." gpmc_supported="At least Internet Explorer 8.0">Prevent deleting favorites site data</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent deleting form data" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Delete Browsing History" gpmc_settingDescription="This policy setting prevents the user from deleting form data. This feature is available in the Delete Browsing History dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, form data is preserved when the user clicks Delete.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, form data is deleted when the user clicks Delete.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can choose whether to delete or preserve form data when he or she clicks Delete.&lt;br/&gt;&lt;br/&gt;If the &amp;quot;Prevent access to Delete Browsing History&amp;quot; policy setting is enabled, this policy setting is enabled by default." gpmc_supported="At least Internet Explorer 7.0">Prevent deleting form data</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent deleting passwords" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Delete Browsing History" gpmc_settingDescription="This policy setting prevents users from deleting passwords. This feature is available in the Delete Browsing History dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, passwords are preserved when the user clicks Delete.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, passwords are deleted when the user clicks Delete.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can choose whether to delete or preserve passwords when he or she clicks Delete.&lt;br/&gt;&lt;br/&gt;If the &amp;quot;Prevent access to Delete Browsing History&amp;quot; policy setting is enabled, this policy setting is enabled by default." gpmc_supported="At least Internet Explorer 7.0">Prevent deleting passwords</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent deleting temporary Internet files" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Delete Browsing History" gpmc_settingDescription="This policy setting prevents the user from deleting temporary Internet files. This feature is available in the Delete Browsing History dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, temporary Internet files are preserved when the user clicks Delete.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, temporary Internet files are deleted when the user clicks Delete.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can choose whether to delete or preserve temporary Internet files when he or she clicks Delete.&lt;br/&gt;&lt;br/&gt;If the &amp;quot;Prevent access to Delete Browsing History&amp;quot; policy setting is enabled, this policy setting is enabled by default." gpmc_supported="At least Internet Explorer 8.0">Prevent deleting temporary Internet files</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent the deletion of temporary Internet files and cookies" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Delete Browsing History" gpmc_settingDescription="This policy setting is used to manage temporary Internet files and cookies associated with your Internet browsing history, available by clicking Tools, Internet Options, and then Delete Browsing History in Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users will not be able to delete temporary Internet files and cookies.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users will be able to delete temporary Internet files and cookies." gpmc_supported="Only Internet Explorer 5.0 through Internet Explorer 7.0">Prevent the deletion of temporary Internet files and cookies</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Internet Control Panel</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Advanced page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="Removes the Advanced tab from the interface in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users are prevented from seeing and changing advanced Internet settings, such as security, multimedia, and printing.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings.&lt;br/&gt;&lt;br/&gt;When you set this policy, you do not need to set the &amp;quot;Disable changing Advanced page settings&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\), because this policy removes the Advanced tab from the interface." gpmc_supported="At least Internet Explorer 5.0">Disable the Advanced page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Content page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="If you enable this policy setting, users are prevented from seeing and changing ratings, certificates, AutoComplete, Wallet, and Profile Assistant settings.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings." gpmc_supported="At least Internet Explorer 5.0">Disable the Content page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the General page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="Removes the General tab from the interface in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users are unable to see and change settings for the home page, the cache, history, Web page appearance, and accessibility.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings.&lt;br/&gt;&lt;br/&gt;When you set this policy, you do not need to set the following Internet Explorer policies (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\), because this policy removes the General tab from the interface:&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing home page settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing Temporary Internet files settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing history settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing color settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing link color settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing font settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing language settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing accessibility settings&amp;quot;" gpmc_supported="At least Internet Explorer 5.0">Disable the General page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Privacy page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="Removes the Privacy tab from the interface in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users are prevented from seeing and changing default settings for privacy.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings." gpmc_supported="At least Internet Explorer 5.0">Disable the Privacy page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Programs page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="Removes the Programs tab from the interface in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users are prevented from seeing and changing default settings for Internet programs.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings.&lt;br/&gt;&lt;br/&gt;When you set this policy, you do not need to set the following policies for the Programs tab, because this policy removes the Programs tab from the interface:&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing Messaging settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing Calendar and Contact settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable the Reset Web Settings feature&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing default browser check&amp;quot;" gpmc_supported="At least Internet Explorer 5.0">Disable the Programs page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Security page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="Removes the Security tab from the interface in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, it prevents users from seeing and changing settings for security zones, such as scripting, downloads, and user authentication.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings.&lt;br/&gt;&lt;br/&gt;When you set this policy, you do not need to set the following Internet Explorer policies, because this policy removes the Security tab from the interface:&lt;br/&gt;&lt;br/&gt;&amp;quot;Security zones: Do not allow users to change policies&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Security zones: Do not allow users to add/delete sites&amp;quot;" gpmc_supported="At least Internet Explorer 5.0">Disable the Security page</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Internet Control Panel/Advanced Page</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Empty Temporary Internet Files folder when browser is closed" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Advanced Page" gpmc_settingDescription="This policy setting allows you to manage whether Internet Explorer deletes the contents of the Temporary Internet Files folder after all browser windows are closed. This protects against storing dangerous files on the computer, or storing sensitive files that other users could see, in addition to managing total disk space usage.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Internet Explorer will delete the contents of the user&amp;#39;s Temporary Internet Files folder when all browser windows are closed.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Internet Explorer will not delete the contents of the user&amp;#39;s Temporary Internet Files folder when browser windows are closed.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy, Internet Explorer will not delete the contents of the Temporary Internet Files folder when browser windows are closed." gpmc_supported="At least Internet Explorer 6.0 in Windows 2003 Service Pack 1">Empty Temporary Internet Files folder when browser is closed</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Internet Control Panel/Security Page/Internet Zone</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Automatic prompting for ActiveX controls" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Internet Zone" gpmc_settingDescription="This policy setting manages whether users will be automatically prompted for ActiveX control installations.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Automatic prompting for ActiveX controls</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Automatic prompting for ActiveX controls</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Download signed ActiveX controls" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Internet Zone" gpmc_settingDescription="This policy setting allows you to manage whether users may download signed ActiveX controls from a page in the zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users can download signed controls without user intervention. If you select Prompt in the drop-down box, users are queried whether to download controls signed by publishers who aren&amp;#39;t trusted. Code signed by trusted publishers is silently downloaded.&lt;br/&gt;&lt;br/&gt;If you disable the policy setting, signed controls cannot be downloaded.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users are queried whether to download controls signed by publishers who aren&amp;#39;t trusted.  Code signed by trusted publishers is silently downloaded." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Download signed ActiveX controls</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Download signed ActiveX controls</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Script ActiveX controls marked safe for scripting" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Internet Zone" gpmc_settingDescription="This policy setting allows you to manage whether an ActiveX control marked safe for scripting can interact with a script.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, script interaction can occur automatically without user intervention.&lt;br/&gt;&lt;br/&gt;If you select Prompt in the drop-down box, users are queried to choose whether to allow script interaction.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, script interaction is prevented from occurring.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, script interaction can occur automatically without user intervention." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Script ActiveX controls marked safe for scripting</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Script ActiveX controls marked safe for scripting</td><td>Enable</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Toolbars</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Configure Toolbar Buttons" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Toolbars" gpmc_settingDescription="Specifies which buttons will be displayed on the standard toolbar in Microsoft Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy, you can specify whether or not each button will be displayed by selecting or clearing the check boxes for each button.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, the standard toolbar will be displayed with its default settings, unless users customize it." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Configure Toolbar Buttons</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Show Back button</td><td>Enabled</td></tr>
<tr><td>Show Forward button</td><td>Enabled</td></tr>
<tr><td>Show Stop button</td><td>Disabled</td></tr>
<tr><td>Show Refresh button</td><td>Disabled</td></tr>
<tr><td>Show Home button</td><td>Disabled</td></tr>
<tr><td>Show Search button</td><td>Disabled</td></tr>
<tr><td>Show Favorites button</td><td>Disabled</td></tr>
<tr><td>Show History button</td><td>Disabled</td></tr>
<tr><td>Show Folders button</td><td>Disabled</td></tr>
<tr><td>Show Fullscreen button</td><td>Disabled</td></tr>
<tr><td>Show Tools button</td><td>Disabled</td></tr>
<tr><td>Show Mail button</td><td>Disabled</td></tr>
<tr><td>Show Font size button</td><td>Disabled</td></tr>
<tr><td>Show Print button</td><td>Disabled</td></tr>
<tr><td>Show Edit button</td><td>Disabled</td></tr>
<tr><td>Show Discussions button</td><td>Disabled</td></tr>
<tr><td>Show Cut button</td><td>Disabled</td></tr>
<tr><td>Show Copy button</td><td>Disabled</td></tr>
<tr><td>Show Paste button</td><td>Disabled</td></tr>
<tr><td>Show Encoding button</td><td>Disabled</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable customizing browser toolbar buttons" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Toolbars" gpmc_settingDescription="Prevents users from determining which buttons appear on the Microsoft Internet Explorer and File Explorer standard toolbars. The buttons appearing on the toolbar can be customized by the &amp;quot;Customize&amp;quot; option. This is present under the Toolbars submenu of the View menu in Internet Explorer 6 and under the Toolbars submenu of the Tools menu in the Command bar in subsequent versions of Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Customize option will be removed from the menu.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can customize which buttons appear on the Internet Explorer and File Explorer toolbars.&lt;br/&gt;&lt;br/&gt;This policy can be used in coordination with the &amp;quot;Disable customizing browser toolbars&amp;quot; policy, which prevents users from determining which toolbars are displayed in Internet Explorer and File Explorer." gpmc_supported="At least Internet Explorer 5.0">Disable customizing browser toolbar buttons</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable customizing browser toolbars" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Toolbars" gpmc_settingDescription="Prevents users from determining which toolbars are displayed in Microsoft Internet Explorer and File Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the list of toolbars, which users can display by clicking the View menu and then pointing to the Toolbars command, will appear dimmed.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can determine which toolbars are displayed in File Explorer and Internet Explorer.&lt;br/&gt;&lt;br/&gt;This policy can be used in coordination with the &amp;quot;Disable customizing browser toolbar buttons&amp;quot; policy, which prevents users from adding or removing toolbars from Internet Explorer." gpmc_supported="At least Internet Explorer 5.0">Disable customizing browser toolbars</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Lock all toolbars" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Toolbars" gpmc_settingDescription="This policy setting allows you to lock or unlock the toolbars on the user interface.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the toolbars are locked and the user cannot move them.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the toolbars are unlocked and the user can move them.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the toolbars are locked by default, but the user can unlock them through the shortcut menu of the Command bar." gpmc_supported="At least Internet Explorer 8.0">Lock all toolbars</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Developer Tools" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Toolbars" gpmc_settingDescription="This policy setting allows you to manage whether the user can access Developer Tools in Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user cannot access Developer Tools.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the user can access Developer Tools." gpmc_supported="At least Internet Explorer 8.0">Turn off Developer Tools</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off toolbar upgrade tool" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Toolbars" gpmc_settingDescription="This policy setting allows you to turn off the toolbar upgrade tool. The toolbar upgrade tool determines whether incompatible toolbars or Browser Helper Objects are installed when Internet Explorer starts. If the tool detects an incompatible toolbar, the user is prompted to update or disable the toolbar. Specific toolbars or Browser Helper Objects that are enabled or disabled via policy settings do not undergo this check.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the toolbar upgrade tool does not check for incompatible toolbars. The user is not prompted, and incompatible toolbars run unless previously disabled through policy settings or user choice.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the toolbar upgrade tool checks for incompatible toolbars. The user can enable or disable incompatible toolbars. Toolbars that are enabled or disabled via policy settings do not undergo these checks." gpmc_supported="At least Internet Explorer 7.0">Turn off toolbar upgrade tool</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/NetMeeting</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow persisting automatic acceptance of Calls" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting" gpmc_settingDescription="Make the automatic acceptance of incoming calls persistent." gpmc_supported="at least Windows NetMeeting v3.0">Allow persisting automatic acceptance of Calls</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable Chat" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting" gpmc_settingDescription="Disables the Chat feature of NetMeeting." gpmc_supported="at least Windows NetMeeting v3.0">Disable Chat</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable Directory services" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting" gpmc_settingDescription="Disables the directory feature of NetMeeting.&lt;br/&gt;&lt;br/&gt;Users will not logon to a directory (ILS) server when NetMeeting starts.  Users will also not be able to view or place calls via a NetMeeting directory.&lt;br/&gt;&lt;br/&gt;This policy is for deployers who have their own location or calling schemes such as a Web site or an address book.&amp;quot; " gpmc_supported="at least Windows NetMeeting v3.0">Disable Directory services</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable NetMeeting 2.x Whiteboard" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting" gpmc_settingDescription="Disables the 2.x whiteboard feature of NetMeeting.&lt;br/&gt;&lt;br/&gt;The 2.x whiteboard is available for compatibility with older versions of NetMeeting only.&lt;br/&gt;&lt;br/&gt;Deployers who do not need it can save bandwidth by disabling it." gpmc_supported="at least Windows NetMeeting v3.0">Disable NetMeeting 2.x Whiteboard</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable Whiteboard" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting" gpmc_settingDescription="Disables the T.126 whiteboard feature of NetMeeting." gpmc_supported="at least Windows NetMeeting v3.0">Disable Whiteboard</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable Automatic Configuration" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting" gpmc_settingDescription="Configures NetMeeting to download settings for users each time it starts.&lt;br/&gt;&lt;br/&gt;The settings are downloaded from the URL listed in the &amp;quot;Configuration URL:&amp;quot; text box.&lt;br/&gt;&lt;br/&gt;Group Policy based settings have precedence over any conflicting settings set by downloading them from this URL." gpmc_supported="at least Windows NetMeeting v3.0">Enable Automatic Configuration</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Limit the size of sent files" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting" gpmc_settingDescription="Limits the size of files users can send to others in a conference." gpmc_supported="at least Windows NetMeeting v3.0">Limit the size of sent files</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Maximum size in Kbytes</td><td>0</td></tr>
<tr><td colspan="2">Value is size in Kbytes, only files smaller</td></tr><tr><td colspan="2"> than this size can be sent by the user.</td></tr></table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent adding Directory servers" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting" gpmc_settingDescription="Prevents users from adding directory (ILS) servers to the list of those they can use for placing calls." gpmc_supported="at least Windows NetMeeting v3.0">Prevent adding Directory servers</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent automatic acceptance of Calls" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting" gpmc_settingDescription="Prevents users from turning on automatic acceptance of incoming calls.&lt;br/&gt;&lt;br/&gt;This ensures that others cannot call and connect to NetMeeting when the user is not present.&lt;br/&gt;&lt;br/&gt;This policy is recommended when deploying NetMeeting to run always." gpmc_supported="at least Windows NetMeeting v3.0">Prevent automatic acceptance of Calls</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing Call placement method" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting" gpmc_settingDescription="Prevents users from changing the way calls are placed, either directly or via a gatekeeper server." gpmc_supported="at least Windows NetMeeting v3.0">Prevent changing Call placement method</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent receiving files" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting" gpmc_settingDescription="Prevents users from receiving files from others in a conference." gpmc_supported="at least Windows NetMeeting v3.0">Prevent receiving files</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent sending files" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting" gpmc_settingDescription="Prevents users from sending files to others in a conference." gpmc_supported="at least Windows NetMeeting v3.0">Prevent sending files</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent viewing Web directory" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting" gpmc_settingDescription="Prevents users from viewing directories as Web pages in a browser." gpmc_supported="at least Windows NetMeeting v3.0">Prevent viewing Web directory</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Set Call Security options" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting" gpmc_settingDescription="Sets the level of security for both outgoing and incoming NetMeeting calls." gpmc_supported="at least Windows NetMeeting v3.0">Set Call Security options</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Set the intranet support Web page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting" gpmc_settingDescription="Sets the URL NetMeeting will display when the user chooses the Help Online Support command." gpmc_supported="at least Windows NetMeeting v3.0">Set the intranet support Web page</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/NetMeeting/Audio &amp; Video</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable Audio" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting/Audio &amp;amp; Video" gpmc_settingDescription="Disables the audio feature of NetMeeting.  Users will not be able to send or receive audio." gpmc_supported="at least Windows NetMeeting v3.0">Disable Audio</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable full duplex Audio" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting/Audio &amp;amp; Video" gpmc_settingDescription="Disables full duplex mode audio.  Users will not be able to listen to incoming audio while speaking into the microphone.  Older audio hardware does not perform well when in full duplex mode." gpmc_supported="at least Windows NetMeeting v3.0">Disable full duplex Audio</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing DirectSound Audio setting" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting/Audio &amp;amp; Video" gpmc_settingDescription="Prevents user from changing the DirectSound audio setting.  DirectSound provides much better audio quality, but older audio hardware may not support it." gpmc_supported="at least Windows NetMeeting v3.0">Prevent changing DirectSound Audio setting</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent receiving Video" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting/Audio &amp;amp; Video" gpmc_settingDescription="Prevents users from receiving video.  Users will still be able to send video provided they have the hardware.&amp;quot; " gpmc_supported="at least Windows NetMeeting v3.0">Prevent receiving Video</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent sending Video" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting/Audio &amp;amp; Video" gpmc_settingDescription="Prevents users from sending video if they have the hardware.  Users will still be able to receive video from others." gpmc_supported="at least Windows NetMeeting v3.0">Prevent sending Video</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/NetMeeting/Options Page</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Advanced Calling button" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting/Options Page" gpmc_settingDescription="Disables the Advanced Calling button on the General Options page.  Users will not then be able to change the call placement method and the servers used." gpmc_supported="at least Windows NetMeeting v3.0">Disable the Advanced Calling button</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the Audio page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting/Options Page" gpmc_settingDescription="Hides the Audio page of the Tools Options dialog.  Users will not then be able to change audio settings." gpmc_supported="at least Windows NetMeeting v3.0">Hide the Audio page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the General page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting/Options Page" gpmc_settingDescription="Hides the General page of the Tools Options dialog.  Users will not then be able to change personal identification and bandwidth settings." gpmc_supported="at least Windows NetMeeting v3.0">Hide the General page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the Security page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting/Options Page" gpmc_settingDescription="Hides the Security page of the Tools Options dialog.  Users will not then be able to change call security and authentication settings." gpmc_supported="at least Windows NetMeeting v3.0">Hide the Security page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the Video page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/NetMeeting/Options Page" gpmc_settingDescription="Hides the Video page of the Tools Options dialog.  Users will not then be able to change video settings." gpmc_supported="at least Windows NetMeeting v3.0">Hide the Video page</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Installer</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent removable media source for any installation" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Installer" gpmc_settingDescription="This policy setting prevents users from installing any programs from removable media.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, if a user tries to install a program from removable media, such as CD-ROMs, floppy disks, and DVDs, a message appears stating that the feature cannot be found.&lt;br/&gt;&lt;br/&gt;This policy setting applies even when the installation is running in the user&amp;#39;s security context.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can install from removable media when the installation is running in their own security context, but only system administrators can use removable media when an installation is running with elevated system privileges, such as installations offered on the desktop or in Add or Remove Programs.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Enable user to use media source while elevated&amp;quot; and &amp;quot;Hide the &amp;#39;Add a program from CD-ROM or floppy disk&amp;#39; option&amp;quot; policy settings." gpmc_supported="At least Windows 2000">Prevent removable media source for any installation</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Media Player</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent CD and DVD Media Information Retrieval" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Player" gpmc_settingDescription="This policy setting allows you to prevent media information for CDs and DVDs from being retrieved from the Internet.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Player is prevented from automatically obtaining media information from the Internet for CDs and DVDs played by users. In addition, the Retrieve media information for CDs and DVDs from the Internet check box on the Privacy Options tab in the first use dialog box and on the Privacy tab in the Player are not selected and are not available.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can change the setting of the Retrieve media information for CDs and DVDs from the Internet check box." gpmc_supported="Windows Media Player 9 Series and later.">Prevent CD and DVD Media Information Retrieval</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent Music File Media Information Retrieval" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Player" gpmc_settingDescription="This policy setting allows you to prevent media information for music files from being retrieved from the Internet.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Player is prevented from automatically obtaining media information for music files such as Windows Media Audio (WMA) and MP3 files from the Internet. In addition, the Update my music files (WMA and MP3 files) by retrieving missing media information from the Internet check box in the first use dialog box and on the Privacy and Media Library tabs in the Player are not selected and are not available.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can change the setting of the Update my music files (WMA and MP3 files) by retrieving missing media information from the Internet check box." gpmc_supported="Windows Media Player 9 Series and later.">Prevent Music File Media Information Retrieval</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent Radio Station Preset Retrieval" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Player" gpmc_settingDescription="This policy setting allows you to prevent radio station presets from being retrieved from the Internet.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Player is prevented from automatically retrieving radio station presets from the Internet and displaying them in Media Library. In addition, presets that exist before the policy is configured are not be updated, and presets a user adds are not be displayed.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Player automatically retrieves radio station presets from the Internet." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Prevent Radio Station Preset Retrieval</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Media Player/Networking</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Network Tab" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Player/Networking" gpmc_settingDescription="This policy setting allows you to hide the Network tab.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Network tab in Windows Media Player is hidden. The default network settings are used unless the user has previously defined network settings for the Player.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Network tab appears and users can use it to configure network settings." gpmc_supported="Windows Media Player for Windows XP and later.">Hide Network Tab</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Media Player/Playback</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow Screen Saver" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Player/Playback" gpmc_settingDescription="This policy setting allows a screen saver to interrupt playback.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, a screen saver is displayed during playback of digital media according to the options selected on the Screen Saver tab in the Display Properties dialog box in Control Panel. The Allow screen saver during playback check box on the Player tab in the Player is selected and is not available.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, a screen saver does not interrupt playback even if users have selected a screen saver. The Allow screen saver during playback check box is cleared and is not available.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users can change the setting for the Allow screen saver during playback check box." gpmc_supported="Windows Media Player 9 Series and later.">Allow Screen Saver</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent Codec Download" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Player/Playback" gpmc_settingDescription="This policy setting allows you to prevent Windows Media Player from downloading codecs.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Player is prevented from automatically downloading codecs to your computer. In addition, the Download codecs automatically check box on the Player tab in the Player is not available.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, codecs are automatically downloaded and the Download codecs automatically check box is not available.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users can change the setting for the Download codecs automatically check box." gpmc_supported="Windows Media Player for Windows XP and later.">Prevent Codec Download</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Media Player/User Interface</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do Not Show Anchor" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Player/User Interface" gpmc_settingDescription="Prevents the anchor window from being displayed when Windows Media Player is in skin mode.&lt;br/&gt;&lt;br/&gt;This policy hides the anchor window when the Player is in skin mode. In addition, the option on the Player tab in the Player that enables users to choose whether the anchor window displays is not available.&lt;br/&gt;&lt;br/&gt;When this policy is not configured or disabled, users can show or hide the anchor window when the Player is in skin mode by using the Player tab in the Player.&lt;br/&gt;&lt;br/&gt;When this policy is not configured and the Set and Lock Skin policy is enabled, some options in the anchor window are not available." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Do Not Show Anchor</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Privacy Tab" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Player/User Interface" gpmc_settingDescription="This policy setting allows you to hide the Privacy tab in Windows Media Player.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the &amp;quot;Update my music files (WMA and MP3 files) by retrieving missing media information from the Internet&amp;quot; check box on the Media Library tab is available, even though the Privacy tab is hidden, unless the &amp;quot;Prevent music file media information retrieval&amp;quot; policy setting is enabled.&lt;br/&gt;&lt;br/&gt;The default privacy settings are used for the options on the Privacy tab unless the user changed the settings previously.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Privacy tab is not hidden, and users can configure any privacy settings not configured by other polices." gpmc_supported="Windows Media Player 9 Series and later.">Hide Privacy Tab</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Security Tab" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Player/User Interface" gpmc_settingDescription="This policy setting allows you to hide the Security tab in Windows Media Player.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the default security settings for the options on the Security tab are used unless the user changed the settings previously. Users can still change security and zone settings by using Internet Explorer unless these settings have been hidden or disabled by Internet Explorer policies.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can configure the security settings on the Security tab." gpmc_supported="Windows Media Player 9 Series and later.">Hide Security Tab</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Extra Registry Settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">Display names for some settings cannot be found. You might be able to resolve this issue by updating the .ADM files used by Group Policy Management.<br/><br/><table class="info" >
<tr><th scope="col">Setting</th><th scope="col">State</th></tr>
<tr><td>Software\Policies\Microsoft\Internet Explorer\Main\NewTabAction</td><td>1</td></tr>
</table>
</div></div></div></div><div class="filler"></div>
<div class="he1h_expanded"><span class="sectionTitle" tabindex="0">Preferences</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1_expanded"><span class="sectionTitle" tabindex="0">Windows Settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he2"><span class="sectionTitle" tabindex="0">Registry</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">AutoConfigURL (Order: 1)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Replace</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_CURRENT_USER</td></tr>
<tr><td>Key path</td><td>Software\Microsoft\Windows\CurrentVersion\Internet Settings</td></tr>
<tr><td>Value name</td><td>AutoConfigURL</td></tr>
<tr><td>Value type</td><td>REG_SZ</td></tr>
<tr><td>Value data</td><td>http://frparwsus01/proxykm.pac</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>Yes</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">DefaultConnectionSettings (Order: 2)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Replace</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_CURRENT_USER</td></tr>
<tr><td>Key path</td><td>Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections</td></tr>
<tr><td>Value name</td><td>DefaultConnectionSettings</td></tr>
<tr><td>Value type</td><td>REG_BINARY</td></tr>
<tr><td>Value data</td><td>46000000010015000400000000000000000000001E000000687474703A2F2F66727061727773757330312F70726F78796B6D2E7061630000000000000000000000000000000000000000000000000000000000000000</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>Yes</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">WpadOverride (Order: 4)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Replace</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_CURRENT_USER</td></tr>
<tr><td>Key path</td><td>Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad</td></tr>
<tr><td>Value name</td><td>WpadOverride</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x0 (0)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>Yes</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">SavedLegacySettings (Order: 5)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_CURRENT_USER</td></tr>
<tr><td>Key path</td><td>Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections</td></tr>
<tr><td>Value name</td><td>SavedLegacySettings</td></tr>
<tr><td>Value type</td><td>REG_BINARY</td></tr>
<tr><td>Value data</td><td>46000000480000000400000000000000000000001E000000687474703A2F2F66727061727773757330312F70726F78796B6D2E7061630000000000000000000000000000000000000000000000000000000000000000</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>Yes</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">NoAddressBar (Order: 6)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Create</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_CURRENT_USER</td></tr>
<tr><td>Key path</td><td>Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions</td></tr>
<tr><td>Value name</td><td>NoAddressBar</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x1 (1)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>Yes</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">NoBandCustomize (Order: 7)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Create</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_CURRENT_USER</td></tr>
<tr><td>Key path</td><td>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer</td></tr>
<tr><td>Value name</td><td>NoBandCustomize</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x1 (1)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>Yes</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div></div></div><div class="filler"></div>
<div class="he1_expanded"><span class="sectionTitle" tabindex="0">Control Panel Settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he2"><span class="sectionTitle" tabindex="0">Start Menu</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he4i"><b>An error has occurred while collecting data for Start Menu.</b><br/><br/>
<table class="subtable" >
<tr><th>The following errors were encountered:</th></tr>
<tr><td>An unknown error occurred while data was gathered for this extension.  Details: Could not find file &#39;\\DEFFMEMEADC01.emea.tpg.ads\sysvol\emea.tpg.ads\Policies\{72E7FEB8-5537-494F-BC87-9FC33B9BD987}\User\Preferences\StartMenuTaskbar\StartMenuTaskbar.xml&#39;.</td></tr>
</table></div></div></div></div></div>
</body></html>