<html dir="ltr" xmlns:svg="http://www.w3.org/2000/svg" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape" gpmc_reportInitialized="false">
<head>
<meta http-equiv="X-UA-Compatible" content="IE=edge" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-16" />
<title>KE-PO-WIN-U-Global Agent Settings</title>
<!-- Styles -->
<style type="text/css">
                body    { background-color:#FFFFFF; border:1px solid #666666; color:#000000; font-size:68%; font-family:MS Shell Dlg; margin:0,0,10px,0; word-break:normal; word-wrap:break-word; }

                table   { font-size:100%; table-layout:fixed; width:100%; }

                td,th   { overflow:visible; text-align:left; vertical-align:top; white-space:normal; }

                .title  { background:#FFFFFF; border:none; color:#333333; display:inline-table; height:24px; margin:0px,0px,0px,0px; padding-top:0px; position:relative; table-layout:fixed; z-index:5; }

                .he0_expanded    { background-color:#FEF7D6; border:1px solid #BBBBBB; color:#3333CC; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:0px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; }

                .he1_expanded    { background-color:#A0BACB; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:20px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; }

                .he0h_expanded   { background-color: #FEF0D0; border: 1px solid #BBBBBB; color: #000000; cursor: hand; display: block; font-family: MS Shell Dlg; font-size: 100%; font-weight: bold; height: 2.25em; margin-bottom: -1px; margin-left: 5px; margin-right: 0px; padding-left: 8px; padding-right: 5em; padding-top: 4px; position: relative;  }
                .he1h_expanded   { background-color: #7197B3; border: 1px solid #BBBBBB; color: #000000; cursor: hand; display: block; font-family: MS Shell Dlg; font-size: 100%; font-weight: bold; height: 2.25em; margin-bottom: -1px; margin-left: 10px; margin-right: 0px; padding-left: 8px; padding-right: 5em; padding-top: 4px; position: relative; }

                .he1    { background-color:#A0BACB; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:20px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; }

                .he2    { background-color:#C0D2DE; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:30px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; }

                .he3    { background-color:#D9E3EA; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:40px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; }

                .he4    { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:50px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; }

                .he4h   { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:55px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; }

                .he4i   { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:55px; margin-right:0px; padding-bottom:5px; padding-left:21px; padding-top:4px; position:relative; }

                .he2i   { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:35px; margin-right:0px; padding-bottom:5px; padding-left:21px; padding-top:4px; position:relative;}
                .he5    { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:60px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; }

                .he5h   { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; padding-right:5em; padding-top:4px; margin-bottom:-1px; margin-left:65px; margin-right:0px; position:relative; }

                .he5i   { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:65px; margin-right:0px; padding-left:21px; padding-bottom:5px; padding-top: 4px; position:relative; }

                div .expando { color:#000000; text-decoration:none; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:normal; position:absolute; right:10px; text-decoration:underline; z-index: 0; }

                .he0 .expando { font-size:100%; }

                .info, .info3, .info4, .disalign  { line-height:1.6em; padding:0px,0px,0px,0px; margin:0px,0px,0px,0px; }

                .disalign TD                      { padding-bottom:5px; padding-right:10px; }

                .info TD                          { padding-right:10px; width:50%; }

                .info3 TD                         { padding-right:10px; width:33%; }

                .info4 TD, .info4 TH              { padding-right:10px; width:25%; }

                .info TH, .info3 TH, .info4 TH, .disalign TH { border-bottom:1px solid #CCCCCC; padding-right:10px; }

                .subtable, .subtable3             { border:1px solid #CCCCCC; margin-left:0px; background:#FFFFFF; margin-bottom:10px; }

                .subtable TD, .subtable3 TD       { padding-left:10px; padding-right:5px; padding-top:3px; padding-bottom:3px; line-height:1.1em; }

                .subtable TH, .subtable3 TH       { border-bottom:1px solid #CCCCCC; font-weight:normal; padding-left:10px; line-height:1.6em;  }

                .subtable .footnote               { border-top:1px solid #CCCCCC; }

                .subtable3 .footnote, .subtable .footnote { border-top:1px solid #CCCCCC; }

                .subtable_frame     { background:#D9E3EA; border:1px solid #CCCCCC; margin-bottom:10px; margin-left:15px; }

                .subtable_frame TD  { line-height:1.1em; padding-bottom:3px; padding-left:10px; padding-right:15px; padding-top:3px; }

                .subtable_frame TH  { border-bottom:1px solid #CCCCCC; font-weight:normal; padding-left:10px; line-height:1.6em; }

                .subtableInnerHead { border-bottom:1px solid #CCCCCC; border-top:1px solid #CCCCCC; }

                .explainlink            { color:#0000FF; text-decoration:none; cursor:hand; }

                .explainlink:hover      { color:#0000FF; text-decoration:underline; }

                .spacer { background:transparent; border:1px solid #BBBBBB; color:#FFFFFF; display:block; font-family:MS Shell Dlg; font-size:100%; height:10px; margin-bottom:-1px; margin-left:43px; margin-right:0px; padding-top: 4px; position:relative; }

                .filler { background:transparent; border:none; color:#FFFFFF; display:block; font:100% MS Shell Dlg; line-height:8px; margin-bottom:-1px; margin-left:53px; margin-right:0px; padding-top:4px; position:relative; }

                .container { display:block; position:relative; }

                .rsopheader { background-color:#A0BACB; border-bottom:1px solid black; color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-bottom:5px; text-align:center; }

                .rsopname { color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-left:11px; }

                .gponame{ color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-left:11px; }

                .gpotype{ color:#333333; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; padding-left:11px; }

                #uri    { color:#333333; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; }

                #dtstamp{ color:#333333; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; text-align:left; width:30%; }

                #objshowhide { color:#000000; cursor:hand; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; margin-right:0px; padding-right:10px; text-align:right; text-decoration:underline; z-index:2; word-wrap:normal; }

                #gposummary { display:block; }

                #gpoinformation { display:block; }

                @media print {

                    #objshowhide{ display:none; }

                    body    { color:#000000; border:1px solid #000000; }

                    .title  { color:#000000; border:1px solid #000000; }

                    .he0_expanded    { color:#000000; border:1px solid #000000; }

                    .he1h_expanded   { color:#000000; border:1px solid #000000; }

                    .he1_expanded    { color:#000000; border:1px solid #000000; }

                    .he1    { color:#000000; border:1px solid #000000; }

                    .he2    { color:#000000; background:#EEEEEE; border:1px solid #000000; }

                    .he3    { color:#000000; border:1px solid #000000; }

                    .he4    { color:#000000; border:1px solid #000000; }

                    .he4h   { color:#000000; border:1px solid #000000; }

                    .he4i   { color:#000000; border:1px solid #000000; }

                    .he5    { color:#000000; border:1px solid #000000; }

                    .he5h   { color:#000000; border:1px solid #000000; }

                    .he5i   { color:#000000; border:1px solid #000000; }

                    }

</style>
<!-- Scripts -->
<script type="text/javascript" language="javascript">
/*
String "strShowHide(0/1)"
0 = Hide all mode.
1 = Show all mode.
*/

var windowsArray = new Array();
var strShowHide = 1;

//Localized strings

var strShow = "show";
var strHide = "hide";
var strShowAll = "show all";
var strHideAll = "hide all";
var strShown = "shown";
var strHidden = "hidden";
var strExpandoNumPixelsFromEdge = "10px";


function IsSectionHeader(obj) {
    return (obj.className === "he0_expanded") || (obj.className === "he0h_expanded") || (obj.className === "he1h_expanded") || (obj.className === "he1_expanded") || (obj.className === "he1") || (obj.className === "he2") || (obj.className === "he3") || (obj.className === "he4") || (obj.className === "he4h") || (obj.className === "he5") || (obj.className === "he5h");
}

function IsSectionExpandedByDefault(objHeader) {
    if (objHeader === null) {
        return false;
    } else {
        return (objHeader.className.slice(objHeader.className.lastIndexOf("_")) === "_expanded");
    }
}

function SetSectionState(objHeader, strState) {
    var i = 0;
    var j;
    var all = objHeader.parentElement.ownerDocument.all;

    if (all === null) {
        return;
    }

    for (j = 0; j < all.length; j++) {
        if (all[j] === objHeader) {
            break;
        }
        i = i + 1;
    }

    for (j = i; j < all.length; j++) {
        if (all[i].className === "container") {
            break;
        }
        i = i + 1;
    }

    var objContainer = all[i];

    if (strState === "toggle") {
        if (objContainer.style.display === "none") {
            SetSectionState(objHeader, "show");
        }
        else {
            SetSectionState(objHeader, "hide");
        }
    }
    else {
        var objExpando = objHeader.children[1];

        if (strState === "show") {
            objContainer.style.display = "block";
            objExpando.innerText = strHide;
        }
        else if (strState === "hide") {
            objContainer.style.display = "none";
            objExpando.innerText = strShow;
        }
    }
}

function ShowSection(objHeader) {
    SetSectionState(objHeader, "show");
}

function HideSection(objHeader) {
    SetSectionState(objHeader, "hide");
}

function ToggleSection(objHeader) {
    SetSectionState(objHeader, "toggle");
}

/*================================================================================
' link at the top of the page to collapse/expand all collapsable elements
'================================================================================
*/
function objshowhide_onClick() {
    var obji;
    var objBody = document.body.getElementsByTagName("*");

    if (objBody === null) {
        return;
    }
    
    switch (strShowHide) {
        case 0:
            strShowHide = 1;
            window.objshowhide.innerText = strShowAll;
            for (obji = 0; obji < objBody.length; obji++) {
                if (objBody[obji].className !== 'undefined' && IsSectionHeader(objBody[obji])) {
                    HideSection(objBody[obji]);
                }
            }
            break;
        case 1:
            strShowHide = 0;
            window.objshowhide.innerText = strHideAll;
            for (obji = 0; obji < objBody.length; obji++) {
                if (objBody[obji].className !== 'undefined' && IsSectionHeader(objBody[obji])) {
                    ShowSection(objBody[obji]);
                }
            }
            break;
    }
}

/*================================================================================
' onload collapse all except the first two levels of headers (he0, he1)
'================================================================================*/
function window_onload() {
    // Only initialize once.  The UI may reinsert a report into the webbrowser control,
    // firing onLoad multiple times.
    if (document.documentElement.getAttribute("gpmc_reportInitialized").toUpperCase() !== "TRUE") {
        // Set text direction
        fDetDir(document.dir.toUpperCase());

        // Initialize sections to default expanded/collapsed state.
        var objBody = document.body.getElementsByTagName("*");

        if (objBody === null) {
            return;
        }

        for (var obji = 0; obji < objBody.length; obji++) {
            if (IsSectionHeader(objBody[obji])) {
                if (IsSectionExpandedByDefault(objBody[obji])) {
                    ShowSection(objBody[obji]);
                }
                else {
                    HideSection(objBody[obji]);
                }
            }
        }

        objshowhide.innerText = strShowAll;

        document.documentElement.setAttribute("gpmc_reportInitialized", "true");
    }
}

/*'================================================================================
' When direction (LTR/RTL) changes, change adjust for readability
'================================================================================
*/
function document_onPropertyChange() {
    if (window.event.propertyName === "dir") {
        fDetDir(document.dir.toUpperCase());
    }
}

function fDetDir(strDir) {
    var colRules;
    var nug;
    var i;
    var strClass;

    switch (strDir.toUpperCase()) {
        case "LTR":
            colRules = document.styleSheets[0].cssRules;
            if (colRules !== null && colRules !== undefined ) {            
                for (i = 0; i < colRules.length - 1; i++) {
                    nug = colRules[i];
                    strClass = nug.selectorText;
                    if (nug.style.textAlign === "right") {
                        nug.style.textAlign = "left";
                    }
                    switch (strClass) {
                        case "div .expando":
                            nug.style.Left = "";
                            nug.style.Right = strExpandoNumPixelsFromEdge;
                            break;
                        case "#objshowhide":
                            nug.style.textAlign = "right";
                            break;
                    }
                }
            }
            break;
        case "RTL":
            colRules = document.styleSheets[0].cssRules;
            if (colRules !== null && colRules !== undefined ) {            
                for (i = 0; i < colRules.length - 1; i++) {
                    nug = colRules[i];
                    strClass = nug.selectorText;
                    if (nug.style.textAlign === "left") {
                        nug.style.textAlign = "right";
                    }
                    switch (strClass) {
                        case "div .expando":
                            nug.style.Left = strExpandoNumPixelsFromEdge;
                            nug.style.Right = "";
                            break;
                        case "#objshowhide":
                            nug.style.textAlign = "left";
                            break;
                    }
                }
            }
            break;
    }
}

/*'================================================================================
'When printing reports, if a given section is expanded, let's says "shown" (instead of "hide" in the UI).
'================================================================================
*/
function window_onbeforeprint() {
    var obji;
    for (obji in document.all) {
        if (document.all.hasOwnProperty(obji)) {
            if (obji.className === "expando") {
                if (obji.innerText === strHide) {
                    obji.innerText = strShown;
                }
                if (obji.innerText === strShow) {
                    obji.innerText = strHidden;
                }
            }
        }
    }
}

/*================================================================================
'If a section is collapsed, change to "hidden" in the printout (instead of "show").
'================================================================================
*/
function window_onafterprint() {
    var obji;
    for (obji in document.all) {
        if (document.all.hasOwnProperty(obji)) {
            if (obji.className === "expando") {
                if (obji.innerText === strShown) {
                    obji.innerText = strHide;
                }
                if (obji.innerText === strHidden) {
                    obji.innerText = strShow;
                }
            }
        }
    }
}

/*================================================================================
' Adding keypress support for accessibility
'================================================================================
*/
function document_onkeypress(event) {
    var chCode = ('charCode' in event) ? event.charCode : event.keyCode;

    //space bar (32) or carriage return (13) or line feed (10)
    if (chCode == "32" || chCode == "13" || chCode == "10") {
        if (event.srcElement.className === "expando") {
            document_onclick();
            event.returnValue = false;
        }
        if (event.srcElement.className === "sectionTitle") {
            document_onclick();
            event.returnValue = false;
        }
        if (event.srcElement.id === "objshowhide") {
            objshowhide_onClick();
            event.returnValue = false;
        }
    }
}

/*================================================================================
' When user clicks anywhere in the document body, determine if user is clicking
' on a header element.
'================================================================================
*/
function document_onclick() {
    var strsrc = window.event.srcElement;

    while (strsrc.className === "sectionTitle" || strsrc.className === "expando") {
        strsrc = strsrc.parentElement;
    }

    // Only handle clicks on headers.
    if (!IsSectionHeader(strsrc)) {
        return;
    }

    ToggleSection(strsrc);

    window.event.returnValue = false;
}

function ToggleState(e) {
    var objParentDisplayItem;
    var objDisplayItem;
    var i;

    if (e.innerText === strShow) {
        e.innerText = strHide;
        objParentDisplayItem = e.parentNode;
        objDisplayItem = objParentDisplayItem.childNodes;
        for (i = 0; i < objDisplayItem.length; i++) {
            if (objDisplayItem[i].id === "showItem") {
                objDisplayItem[i].style.display = "Block";
            }
        }
    }
    else {
        e.innerText = strShow;
        objParentDisplayItem = e.parentNode;
        objDisplayItem = objParentDisplayItem.childNodes;
        for (i = 0; i < objDisplayItem.length; i++) {
            if (objDisplayItem[i].id === "showItem") {
                objDisplayItem[i].style.display = "None";
            }
        }
    }
}

function traverseToURL(url) {
    if (url != null) {
        var urlInitialSubstr = url.substring(0, 4).toLowerCase();
        if (urlInitialSubstr === "http") {
            window.open(url, "_blank");
        }
    }
}

function getExplainWindowTitle() {
    return document.getElementById("explainText_windowTitle").innerHTML;
}

function getExplainWindowStyles() {
    return document.getElementById("explainText_windowStyles").innerHTML;
}

function getExplainWindowSettingPathLabel() {
    return document.getElementById("explainText_settingPathLabel").innerHTML;
}

function getExplainWindowExplainTextLabel() {
    return document.getElementById("explainText_explainTextLabel").innerHTML;
}

function getExplainWindowPrintButton() {
    return document.getElementById("explainText_printButton").innerHTML;
}

function getExplainWindowCloseButton() {
    return document.getElementById("explainText_closeButton").innerHTML;
}

function getNoExplainTextAvailable() {
    return document.getElementById("explainText_noExplainTextAvailable").innerHTML;
}

function getExplainWindowSupportedLabel() {
    return document.getElementById("explainText_supportedLabel").innerHTML;
}

function getNoSupportedTextAvailable() {
    return document.getElementById("explainText_noSupportedTextAvailable").innerHTML;
}

function showExplainText(srcElement)
{
    var strDiagArgs;

    var strSettingName = srcElement.getAttribute("gpmc_settingName");
    var strSettingPath = srcElement.getAttribute("gpmc_settingPath");
    var strSettingDescription = srcElement.getAttribute("gpmc_settingDescription");

    if (strSettingDescription === "")
    {
        strSettingDescription = getNoExplainTextAvailable();
    }

    var strSupported = srcElement.getAttribute("gpmc_supported");

    if (strSupported === "")
    {
        strSupported = getNoSupportedTextAvailable();
    }

    var strHtml = "<html dir=" + document.dir +  ">\n";
    strHtml += "<head>\n";
    strHtml += "<title>" + getExplainWindowTitle() + "</title>\n";
    strHtml += "<style type='text/css'>\n" + getExplainWindowStyles() + "</style>\n";
    strHtml += "</head>\n";
    strHtml += "<body>\n";
    strHtml += "<div class='head'>" + strSettingName +"</div>\n";
    strHtml += "<div class='path'><b>" + getExplainWindowSettingPathLabel() + "</b><br/>" + strSettingPath +"</div>\n";
    strHtml += "<div class='path'><b>" + getExplainWindowSupportedLabel() + "</b><br/>" + strSupported +"</div>\n";
    strHtml += "<div class='info'>\n";
    strHtml += "<div class='hdr'>" + getExplainWindowExplainTextLabel() + "</div>\n";
    strHtml += "<div class='bdy'>" + strSettingDescription + "</div>\n";
    strHtml += "<div class='btn'>";
    strHtml += getExplainWindowPrintButton();
    strHtml += getExplainWindowCloseButton();
    strHtml += "</div></body></html>";

    // IE specific method for showing the popup.
    if(navigator.userAgent.indexOf("MSIE") > 0 && window.location.toString().indexOf("file:") === -1)
    {
        strDiagArgs = "dialogHeight=360px;dialogWidth=630px;status=no;scroll=yes;resizable=yes;minimize=yes;maximize=yes;";

        var vModeless = window.showModelessDialog("about:blank", window, strDiagArgs);
        vModeless.document.write(strHtml);
        vModeless.document.close();
        vModeless.location.reload(false);
                        
        window.event.returnValue = false;
    }
    else
    {
        strDiagArgs = "height=360px, width=630px, status=no, toolbar=no, scrollbars=yes, resizable=yes ";
        
        var expWin = window.open("", "expWin", strDiagArgs);
        expWin.document.write("");
        expWin.document.close();
        expWin.document.write(strHtml);
        expWin.document.close();
        expWin.focus();
    }
    
    return false;
}

function showEvents(srcElement,bVerbose,bInformational,bWarning,bError)
{
    var strWindowId = "EventDetails_" + srcElement.getAttribute("eventLogActivityId");
    if((windowsArray[strWindowId]) && (windowsArray[strWindowId].closed === false)) {
        windowsArray[strWindowId].focus();
    } else {
        var eventIdLabelNode, eventTimeLabelNode, eventDescriptionLabelNode, eventDetailsLabelNode, eventXmlLabelNode, gpEventsTitleNode;
        var eventIdLabelNodeText, eventTimeLabelNodeText, eventDescriptionLabelNodeText, eventXmlLabelNodeText, gpEventsTitleNodeText, eventDetailsLabelNodeText;
        var singlePassEventsDetailsNode, eventRecordArray;
        var dataNotFoundWarningLabelNode, dataNotFoundWarningLabelNodeText;
        var mainSection;
        var attributeValue;
        var singlePassEventsDetails;
        var singlePassEventsDetailsChildren;
        var node;
        var children;
        var xmlDocumentRoot;
        var xmlDocument;
        var serializer;
        var itemSub;
        var doc;

        if (window.XMLSerializer) 
        {
           serializer = new XMLSerializer();
        }

        if (window.DOMParser) 
        {
           // This browser appears to support DOMParser
           parser = new DOMParser();

           doc = document.getElementById("data-island").textContent;
           xmlDocumentRoot = parser.parseFromString(doc, "application/xml");
           xmlDocument = xmlDocumentRoot.documentElement;
           itemSub = 1;
        } 
        else 
        { 
           // Internet Explorer, create a new XML document using ActiveX 
           // and use loadXML as a DOM parser. 
           try 
           {
              doc = document.getElementById("data-island");

              xmlDocumentRoot = new ActiveXObject("Msxml2.DOMDocument.6.0"); 
              xmlDocumentRoot.async = false; 
              xmlDocumentRoot.loadXML(doc.innerHTML);
              xmlDocument = xmlDocumentRoot.documentElement;
              itemSub = 0;
           } 
           catch(e) 
           {
              // Not supported.
           }
        }

        if (xmlDocument != null) {
            mainSection = xmlDocument.getElementsByTagName("MainSection")[0].childNodes;

            if (mainSection != null) {
                for (children = 0; children < mainSection.length; children++) {
                    node = mainSection[children];
                    if (node.nodeType === 1 && node.nodeName === 'Label') {
                        attributeValue = node.getAttribute("Name");
                        if (attributeValue != null) {
                            if (attributeValue === 'ComponentStatus_EventId') {
                                eventIdLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_EventTime') {
                                eventTimeLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_EventDescription') {
                                eventDescriptionLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_EventXml') {
                                eventXmlLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_EventDetails') {
                                eventDetailsLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_GPEvents') {
                                gpEventsTitleNode = node.childNodes[1];
                            }
                            if (attributeValue === 'Warning_DataNotFound') {
                                dataNotFoundWarningLabelNode = node.childNodes[1];
                            }
                        }
                    }
                }
            }

            singlePassEventsDetails = xmlDocument.getElementsByTagName("SinglePassEventsDetails");
            if (singlePassEventsDetails != null) {
                for (singlePassEventsDetailsChildren = 0; singlePassEventsDetailsChildren < singlePassEventsDetails.length; singlePassEventsDetailsChildren++) {
                    node = singlePassEventsDetails[singlePassEventsDetailsChildren];
                    attributeValue = node.getAttribute("ActivityId");
                    if (attributeValue === srcElement.getAttribute("eventLogActivityId")) {
                        singlePassEventsDetailsNode = node;
                    }
                }
            }
        }
        
        eventIdLabelNodeText = null;
        if (eventIdLabelNode != null) {
            if (eventIdLabelNode.childNodes.length > 0) {
                eventIdLabelNodeText = eventIdLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventIdLabelNodeText == null) {
            eventIdLabelNodeText = "Event ID";
        }

        eventTimeLabelNodeText = null;
        if (eventTimeLabelNode != null) {
            if (eventTimeLabelNode.firstChild.childNodes.length > 0) {
                eventTimeLabelNodeText = eventTimeLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventTimeLabelNodeText == null) {
            eventTimeLabelNodeText = "Event Time";
        }

        eventDescriptionLabelNodeText = null;
        if (eventDescriptionLabelNode != null) {
            if (eventDescriptionLabelNode.childNodes.length > 0) {
                eventDescriptionLabelNodeText = eventDescriptionLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventDescriptionLabelNodeText == null) {
            eventDescriptionLabelNodeText = "Event Description";
        }

        eventXmlLabelNodeText = null;
        if (eventXmlLabelNode != null) {
            if (eventXmlLabelNode.childNodes.length > 0) {
                eventXmlLabelNodeText = eventXmlLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventXmlLabelNodeText == null) {
            eventXmlLabelNodeText = "Event XML";
        }

        gpEventsTitleNodeText = null;
        if (gpEventsTitleNode != null) {
            if (gpEventsTitleNode.childNodes.length > 0) {
                gpEventsTitleNodeText = gpEventsTitleNode.childNodes[0].nodeValue;
            }
        }
        if (gpEventsTitleNodeText == null) {
            gpEventsTitleNodeText = "Group Policy Events";
        }

        eventDetailsLabelNodeText = null;
        if (eventDetailsLabelNode != null) {
            if (eventDetailsLabelNode.childNodes.length > 0) {
                eventDetailsLabelNodeText = eventDetailsLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventDetailsLabelNodeText == null) {
            eventDetailsLabelNodeText = "Event Details";
        }

        dataNotFoundWarningLabelNodeText = null;
        if (dataNotFoundWarningLabelNode != null) {
            if (dataNotFoundWarningLabelNode.childNodes.length > 0) {
                dataNotFoundWarningLabelNodeText = dataNotFoundWarningLabelNode.childNodes[0].nodeValue;
            }
        }
        if (dataNotFoundWarningLabelNodeText == null) {
            dataNotFoundWarningLabelNodeText = "Data Not Found";
        }
                
        if(singlePassEventsDetailsNode != null)
        {
            eventRecordArray = singlePassEventsDetailsNode.getElementsByTagName("EventRecord");
        }
        
        var htmlText = "<html dir=" + document.dir +  ">";
        htmlText = htmlText + "<head>";
        htmlText = htmlText + "<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\" />";
        htmlText = htmlText + "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-16\" />";
        htmlText = htmlText + "<title>" + gpEventsTitleNodeText + "</title>";
        htmlText = htmlText + "</head><style type=\"text/css\">";
        htmlText = htmlText + "body    { background-color:#FFFFFF; color:#000000; font-size:68%; font-family:MS Shell Dlg; margin:0,0,10px,0; word-break:normal; word-wrap:break-word; }";
        htmlText = htmlText + "table   { font-size:100%; table-layout:fixed; width:100%; }";
        htmlText = htmlText + "td,th   { overflow:visible; text-align:left; vertical-align:top; white-space:normal; }";
        htmlText = htmlText + ".he1    { text-align: center; vertical-align: middle; background-color:#C0D2DE; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:4em; position:relative; }";
        htmlText = htmlText + ".centerTxt { text-align: center; }";
        htmlText = htmlText + ".txtFormat1 { text-align: left; vertical-align:top; white-space:pre-line; }";
        htmlText = htmlText + "</style>";
      
        htmlText = htmlText + "<script> function toggle(e) {";
        htmlText = htmlText + "if (e.style.display === \"none\"){ e.style.display = \"\"; }";
        htmlText = htmlText + "else { e.style.display = \"none\"; }";
        htmlText = htmlText + "}</";
        htmlText = htmlText + "script";
        htmlText = htmlText + ">";
      
        htmlText = htmlText + "<body><table border=1><tr>";
        htmlText = htmlText + "<th class=\"he1\"><strong>" + eventIdLabelNodeText + "</strong></th>";
        htmlText = htmlText + "<th class=\"he1\"><strong>" + eventTimeLabelNodeText + "</strong></th>";
        htmlText = htmlText + "<th class=\"he1\"><strong>" + eventDescriptionLabelNodeText + "</strong></th>";
        htmlText = htmlText + "<th class=\"he1\"><strong>" + eventDetailsLabelNodeText + "</strong></th>";

        htmlText = htmlText + "</tr>";
        var i;
        var eventId;
        var eventTime;
        var eventDescription;
        var eventXml;
        var eventType;
        var displayEvent;
        var eventXmlId;
        var displayBgColor;

        if(eventRecordArray != null && eventRecordArray.length > 0)
        {
            for (i=0; i < eventRecordArray.length; i++)
            {
                displayEvent = false;
                var eventIdElements = eventRecordArray[i].getElementsByTagName("EventId");        
                if((eventIdElements != null) && (eventIdElements.length > 0) && (eventIdElements[0].firstChild != null))
                {
                    eventId =  eventIdElements[0].firstChild.nodeValue;
                }
                else
                {
                    eventId =  dataNotFoundWarningLabelNodeText;
                }
                var eventTimeElements = eventRecordArray[i].getElementsByTagName("EventTime");
                if((eventTimeElements != null) && (eventTimeElements.length > 0) && (eventTimeElements[0].firstChild != null))
                {
                    eventTime = eventTimeElements[0].firstChild.nodeValue;
                }
                else
                {
                    eventTime = dataNotFoundWarningLabelNodeText;
                }
                var eventDescriptionElements = eventRecordArray[i].getElementsByTagName("EventDescription");
                if((eventDescriptionElements != null) && (eventDescriptionElements.length > 0) && (eventDescriptionElements[0].firstChild != null))
                {
                        eventDescription = eventDescriptionElements[0].firstChild.nodeValue;
                }
                else
                {
                    eventDescription = dataNotFoundWarningLabelNodeText;
                }
                var eventXmlElements = eventRecordArray[i].getElementsByTagName("EventXml");
                if((eventXmlElements != null) && (eventXmlElements.length > 0) && (eventXmlElements[0].firstChild != null))
                {
                    if (window.XMLSerializer) 
                    {
                       var xml = serializer.serializeToString(eventXmlElements[0].firstChild);
                       eventXml = xml;
                    } 
                    else 
                    {
                       if (typeof eventXmlElements[0].firstChild.xml != "undefined") 
                       {
                          eventXml = eventXmlElements[0].firstChild.xml;
                       }
                    }
                }
                else
                {
                    eventXml = dataNotFoundWarningLabelNodeText;
                }
                var eventLevelElements = eventRecordArray[i].getElementsByTagName("EventLevel");
                if((eventLevelElements != null) && (eventLevelElements.length > 0) && (eventLevelElements[0].firstChild != null))
                {
                    eventType = eventLevelElements[0].firstChild.nodeValue;
                }
                else
                {
                    eventType = 5;
                }
                
                if((bVerbose === true)&&(eventType == 5))
                {
                    displayEvent = true;
                }
                else if((bInformational === true)&&(eventType == 4))
                {
                    displayEvent = true;
                }
                else if((bWarning === true)&&(eventType == 3))
                {
                    displayEvent = true;
                }
                else if((bError === true)&&((eventType == 1)||(eventType == 2)))
                {
                    displayEvent = true;
                }
                
                if (displayEvent === true)
                {
                    eventXmlId = "EventXml" + (i+"");
                    htmlText = htmlText + "<tr>";
                    htmlText = htmlText + "<td class=\"centerTxt\" style=\"background:" + displayBgColor +"\">" + eventId + "</td>";
                    htmlText = htmlText + "<td class=\"centerTxt\" style=\"background:" + displayBgColor +"\">" + eventTime + "</td>";
                    htmlText = htmlText + "<td class=\"txtFormat1\" style=\"background:" + displayBgColor +"\">" + eventDescription + "</td>";
                    htmlText = htmlText + "<td style=\"background:" + displayBgColor +"\"><span style=\"color:blue; cursor:hand\" onclick=\"toggle(" + eventXmlId +");\" onKeyPress=\"toggle(" + eventXmlId + ");\" tabIndex=1 >";
                    htmlText = htmlText + eventXmlLabelNodeText + "</span><br/>";
                    htmlText = htmlText + "<span style=\"display:none\" id=" + eventXmlId +">";
                    htmlText = htmlText + eventXml + "</span>";
                    htmlText = htmlText + "</td>";
                    htmlText = htmlText + "</tr>";
                }
            }
        }
        htmlText = htmlText + "</table></body></html>";

        if(windowsArray[strWindowId])
        {
            delete windowsArray[strWindowId];
        }
        
        // IE specific method for showing the popup.
        if(navigator.userAgent.indexOf("MSIE") > 0 && window.location.toString().indexOf("file:") === -1)
        {
            var strDiagArgs = "dialogHeight=360px;dialogWidth=630px;status=no;scroll=yes;resizable=yes;minimize=yes;maximize=yes;";

            var vModeless = window.showModelessDialog("about:blank", window, strDiagArgs);
            vModeless.document.write(htmlText);
            vModeless.document.close();
            vModeless.location.reload(false);
            windowsArray[strWindowId] = vModeless;            
        }
        else
        {
            var strDiagArgs = "height=360px, width=630px, status=no, toolbar=no, scrollbars=yes, resizable=yes";
        
            windowsArray[strWindowId] = window.open("", "", strDiagArgs);
            windowsArray[strWindowId].document.write(htmlText);
            windowsArray[strWindowId].focus();
        } 
    }

    xmlDocumentRoot = null;
}

function cleanUp() {
    var windowsArray = this.windowsArray;
    for (var currentWindow in windowsArray) {
        if (windowsArray.hasOwnProperty(currentWindow)) {
            windowsArray[currentWindow].close();
        }
    }
}

function getMessageText(messageNode) {
    if (messageNode != null) {
        if (messageNode.firstChild != null) {
            if (messageNode.firstChild.nodeType === 3) {
                for (var i = 0; i < messageNode.childNodes.length; i++) 
                {
                    var curNode = messageNode.childNodes[i];
                    if(curNode.nodeType === 1){
                        return curNode.childNodes[0].nodeValue;
                    }
                }
            } else {
                return messageNode.firstChild.childNodes[0].nodeValue;
            }
        }
    }
    return null;
}

function showComponentProcessingDetails(srcElement) {
    var strWindowId = "ProcessingDetails_" + srcElement.getAttribute("eventLogActivityId");
    if ((windowsArray[strWindowId]) && (windowsArray[strWindowId].closed === false)) {
        windowsArray[strWindowId].focus();
    } else {
        var doc;
        var parser;
        var xmlDocumentRoot;
        var xmlDocument;

        var extensionsProcessedLabelNode, slowLinkThresholdLabelNode, linkSpeedLabelNode, extensionsProcessedTimeTakenNode;
        var domainControllerIpLabelNode, domainControllerNameLabelNode, processingTypeLabelNode, loopbackModeLabelNode;
        var processingTriggerLabelNode, extensionNameLabelNode, timeTakenLabelNode;
        var dataNotFoundWarningLabelNode;
        var singlePassEventsDetailsNode, totalProcessingTimeLabelNode, refreshMessageLabelNode;
        var processingDetailsUserTitleNode, processingDetailsComputerTitleNode;
        var policySectionNode;
        var policyEventsDetailsNode, detailsLabelNode;

        var extensionsProcessedLabelNodeText, slowLinkThresholdLabelNodeText, linkSpeedLabelNodeText, extensionsProcessedTimeTakenNodeText;
        var domainControllerIpLabelNodeText, domainControllerNameLabelNodeText, processingTypeLabelNodeText, loopbackModeLabelNodeText;
        var processingTriggerLabelNodeText, extensionNameLabelNodeText, timeTakenLabelNodeText;
        var dataNotFoundWarningLabelNodeText, totalProcessingTimeLabelNodeText, refreshMessageLabelNodeText;
        var processingDetailsUserTitleNodeText, processingDetailsComputerTitleNodeText;
        var detailsLabelNodeText;

        var slowLinkThresholdValue, linkSpeedValue, domainControllerIpValue, domainControllerNameValue;
        var processingTypeValue, loopbackModeValue, processingTriggerValue, totalPolicyProcessingTime, extensionProcessingTimeArray;
        var cseNameArray = new Array();
        var cseElapsedTimeArray = new Array();
        var policyApplicationFinishedTime;

        var isComputerProcessing;
        var strDiagArgs;
        var mainSection;
        var attributeValue;
        var singlePassEventsDetails;
        var singlePassEventsDetailsChildren;
        var node;
        var children;
        var itemSub;

        if (window.DOMParser) 
        {
           // This browser appears to support DOMParser
           parser = new DOMParser();
           doc = document.getElementById("data-island").textContent;

           xmlDocumentRoot = parser.parseFromString(doc, "application/xml");

           xmlDocument = xmlDocumentRoot.documentElement;

           itemSub = 1;
        } 
        else 
        { 
           // Internet Explorer, create a new XML document using ActiveX 
           // and use loadXML as a DOM parser. 
           try 
           {
              doc = document.getElementById("data-island");

              xmlDocumentRoot = new ActiveXObject("Msxml2.DOMDocument.6.0"); 
              xmlDocumentRoot.async = false; 
              xmlDocumentRoot.loadXML(doc.innerHTML);
              xmlDocument = xmlDocumentRoot.documentElement;
              itemSub = 0;
           } 
           catch(e) 
           {
              // Not supported.
           }
        }

        if (xmlDocument != null) {
            mainSection = xmlDocument.getElementsByTagName("MainSection")[0].childNodes;

            if (mainSection != null) {
                for (children = 0; children < mainSection.length; children++) {
                    node = mainSection[children];
                    if (node.nodeType === 1 && node.nodeName === 'Label') {
                        attributeValue = node.getAttribute("Name")
                        if (attributeValue != null) {
                            if (attributeValue === 'ComponentStatus_ExtensionsProcessed') {
                                extensionsProcessedLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_SlowLinkThreshold') {
                                slowLinkThresholdLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_LinkSpeed') {
                                linkSpeedLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_TimeTaken') {
                                extensionsProcessedTimeTakenNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_DomainControllerIP') {
                                domainControllerIpLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_DomainControllerName') {
                                domainControllerNameLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ProcessingTrigger') {
                                processingTriggerLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ExtensionName') {
                                extensionNameLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_TimeTaken') {
                                timeTakenLabelNode = node;
                            }
                            if (attributeValue === 'Warning_DataNotFound') {
                                dataNotFoundWarningLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_TotalProcessingTime') {
                                totalProcessingTimeLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_RefreshMessage') {
                                refreshMessageLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_UserProcessingDetails') {
                                processingDetailsUserTitleNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ComputerProcessingDetails') {
                                detailsLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ProcessingType') {
                                processingTypeLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_LoopbackMode') {
                                loopbackModeLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_UserProcessingDetails') {
                                processingDetailsUserTitleNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ComputerProcessingDetails') {
                                processingDetailsComputerTitleNode = node;
                            }
                        }
                    }
                }
            }

            singlePassEventsDetails = xmlDocument.getElementsByTagName("SinglePassEventsDetails");
            if (singlePassEventsDetails != null) {
                for (singlePassEventsDetailsChildren = 0; singlePassEventsDetailsChildren < singlePassEventsDetails.length; singlePassEventsDetailsChildren++) {
                    node = singlePassEventsDetails[singlePassEventsDetailsChildren];
                    if (node.getAttribute("ActivityId") === srcElement.getAttribute("eventLogActivityId")) {
                        singlePassEventsDetailsNode = node;
                    }
                }
            }

            if (singlePassEventsDetailsNode) {
                policyEventsDetailsNode = singlePassEventsDetailsNode.parentNode;
                if (policyEventsDetailsNode) {
                    policySectionNode = policyEventsDetailsNode.parentNode;
                    if (policySectionNode) {
                        if (policySectionNode.nodeName === 'UserPolicySection') {
                            isComputerProcessing = false;
                        }
                        if (policySectionNode.nodeName === 'ComputerPolicySection') {
                            isComputerProcessing = true;
                        }
                    }
                }
            }
        }

        
        extensionsProcessedLabelNodeText = getMessageText(extensionsProcessedLabelNode);
        slowLinkThresholdLabelNodeText = getMessageText(slowLinkThresholdLabelNode);
        linkSpeedLabelNodeText = getMessageText(linkSpeedLabelNode);
        domainControllerIpLabelNodeText = getMessageText(domainControllerIpLabelNode);
        domainControllerNameLabelNodeText = getMessageText(domainControllerNameLabelNode);
        processingTypeLabelNodeText = getMessageText(processingTypeLabelNode);
        loopbackModeLabelNodeText = getMessageText(loopbackModeLabelNode);
        processingTriggerLabelNodeText = getMessageText(processingTriggerLabelNode);
        extensionNameLabelNodeText = getMessageText(extensionNameLabelNode);
        timeTakenLabelNodeText = getMessageText(timeTakenLabelNode);
        processingDetailsUserTitleNodeText = getMessageText(processingDetailsUserTitleNode);
        processingDetailsComputerTitleNodeText = getMessageText(processingDetailsComputerTitleNode);
        dataNotFoundWarningLabelNodeText = getMessageText(dataNotFoundWarningLabelNode);
        totalProcessingTimeLabelNodeText = getMessageText(totalProcessingTimeLabelNode);
        refreshMessageLabelNodeText = getMessageText(refreshMessageLabelNode);
        detailsLabelNodeText = getMessageText(detailsLabelNode);
     

        slowLinkThresholdValue = null;
        linkSpeedValue = null;
        domainControllerIpValue = null;
        domainControllerNameValue = null;
        processingTypeValue = null;
        loopbackModeValue = null;
        processingTriggerValue = null;

        if (singlePassEventsDetailsNode != null) {
            slowLinkThresholdValue = singlePassEventsDetailsNode.getAttribute("SlowLinkThresholdInKbps");
            linkSpeedValue = singlePassEventsDetailsNode.getAttribute("LinkSpeedInKbps");
            domainControllerIpValue = singlePassEventsDetailsNode.getAttribute("DomainControllerIPAddress");
            domainControllerNameValue = singlePassEventsDetailsNode.getAttribute("DomainControllerName");
            processingTypeValue = singlePassEventsDetailsNode.getAttribute("ProcessingAppMode");
            loopbackModeValue = singlePassEventsDetailsNode.getAttribute("PolicyProcessingMode");
            processingTriggerValue = singlePassEventsDetailsNode.getAttribute("ProcessingTrigger");
            totalPolicyProcessingTime = singlePassEventsDetailsNode.getAttribute("PolicyElapsedTime");
            extensionProcessingTimeArray = singlePassEventsDetailsNode.getElementsByTagName("ExtensionProcessingTime");
        }
        if (slowLinkThresholdValue == null) {
            slowLinkThresholdValue = dataNotFoundWarningLabelNodeText;
        }
        if (linkSpeedValue == null) {
            linkSpeedValue = dataNotFoundWarningLabelNodeText;
        }
        if (domainControllerIpValue == null) {
            domainControllerIpValue = dataNotFoundWarningLabelNodeText;
        }
        else {
            domainControllerIpValue = domainControllerIpValue.replace(/^\\\\/, "");
        }
        if (domainControllerNameValue == null) {
            domainControllerNameValue = dataNotFoundWarningLabelNodeText;
        }
        else {
            domainControllerNameValue = domainControllerNameValue.replace(/^\\\\/, "");
        }
        if (processingTypeValue == null) {
            processingTypeValue = dataNotFoundWarningLabelNodeText;
        }
        if (loopbackModeValue == null) {
            loopbackModeValue = dataNotFoundWarningLabelNodeText;
        }
        if (processingTriggerValue == null) {
            processingTriggerValue = dataNotFoundWarningLabelNodeText;
        }

        if (extensionProcessingTimeArray != null && extensionProcessingTimeArray.length > 0) {
            var cseName;
            var cseElapsedTime;
            var cseProcessedTime;
            var cseId;
            var i;
            var index = 0;
            for (i = 0; i < extensionProcessingTimeArray.length; i++) {
                var cseNameElements = extensionProcessingTimeArray[i].getElementsByTagName("ExtensionName");
                var cseElapsedTimeElements = extensionProcessingTimeArray[i].getElementsByTagName("ElapsedTime");
                var cseProcessedTimeElements = extensionProcessingTimeArray[i].getElementsByTagName("ProcessedTime");
                var cseIdElements = extensionProcessingTimeArray[i].getElementsByTagName("ExtensionGuid");
                if ((cseNameElements.length > 0) && (cseElapsedTimeElements.length > 0) && (cseProcessedTimeElements.length > 0) && (cseIdElements.length > 0)) {
                    if ((cseNameElements[0].firstChild != null) && (cseElapsedTimeElements[0].firstChild != null) && (cseProcessedTimeElements[0].firstChild != null) && (cseIdElements[0].firstChild != null)) {
                        cseName = cseNameElements[0].firstChild.nodeValue;
                        cseElapsedTime = cseElapsedTimeElements[0].firstChild.nodeValue;
                        cseProcessedTime = cseProcessedTimeElements[0].firstChild.nodeValue;
                        cseId = cseIdElements[0].firstChild.nodeValue;
                        if ((cseName != null) && (cseElapsedTime != null) && (cseProcessedTime != null) && (cseId != null)) {
                            cseNameArray[index] = cseName;
                            cseElapsedTimeArray[index] = cseElapsedTime;
                            index = index + 1;
                            if (cseId === '{00000000-0000-0000-0000-000000000000}') {
                                policyApplicationFinishedTime = cseProcessedTime;
                            }
                        }
                    }
                }
            }
        }
          
        var htmlText = "<html dir=" + document.dir +  ">";
        htmlText = htmlText + "<head>";
        htmlText = htmlText + "<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\" />";
        htmlText = htmlText + "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-16\" />";
        if(isComputerProcessing != null)
        {
            if(isComputerProcessing === true)
            {
                htmlText = htmlText + "<title>" + processingDetailsComputerTitleNodeText + "</title>";
            }
            else
            {
                htmlText = htmlText + "<title>" + processingDetailsUserTitleNodeText + "</title>";
            }
        }
        

        htmlText = htmlText + "</head><style type=\"text/css\">";
        htmlText = htmlText + "body    { background-color:#FFFFFF; color:#000000; font-size:68%; font-family:MS Shell Dlg; margin:0,0,10px,0; word-break:normal; word-wrap:break-word; }";
        htmlText = htmlText + "table   { font-size:100%; table-layout:fixed; width:100%; }";
        htmlText = htmlText + "td,th   { overflow:visible; text-align:left; vertical-align:top; white-space:normal; }";
        htmlText = htmlText + ".he0    { background-color:#FEF7D6; border:1px solid #BBBBBB; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:0px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; width:100%; }";
        htmlText = htmlText + ".he1    { color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2em;margin-left: 5 px; margin-top: 5 px; position:relative; width:100%; }";
        htmlText = htmlText + ".tblspecialfmt { border:1px solid black;border-collapse:collapse; }";
        htmlText = htmlText + ".tblfirstcolfmt { border-left-width: 1px;border-top-width: 1px;border-bottom-width: 1px;border-right-width: 0px;border-style: solid; border-color: black; }";
        htmlText = htmlText + ".tblsecondcolfmt { border-left-width: 0px;border-top-width: 1px;border-bottom-width: 1px;border-right-width: 1px;border-style: solid; border-color: black; }";
        htmlText = htmlText + "</style>";
        htmlText = htmlText + "<body>";
        htmlText = htmlText + "<span class=\"he1\">" + refreshMessageLabelNodeText + " " + policyApplicationFinishedTime + "</span>" ;
        htmlText = htmlText + "<div class=\"he0\">" + detailsLabelNodeText + "</div>"
        htmltext = htmlText + "<table><tr>";

        htmlText = htmlText + "<td>";
        htmlText = htmlText + "<table>";
        htmlText = htmlText + "<tr><td colspan=\"2\">&nbsp;</td></tr>";


        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + processingTypeLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + processingTypeValue + "</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + loopbackModeLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + loopbackModeValue + "</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + linkSpeedLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + linkSpeedValue + "</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + slowLinkThresholdLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + slowLinkThresholdValue + "</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + domainControllerNameLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + domainControllerNameValue +"</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + domainControllerIpLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + domainControllerIpValue +"</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + processingTriggerLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + processingTriggerValue + "</td></tr>";

        htmlText = htmlText + "</table></td></tr>";
        htmlText = htmlText + "<tr ><td ><table>";


        htmlText = htmlText + "<tr><td><span class=\"he1\" >" + extensionsProcessedLabelNodeText +"</span></td></tr>";
        htmlText = htmlText + "<tr><td><table class=\"tblspecialfmt\" >";
        htmlText = htmlText + "<tr><td class=\"tblfirstcolfmt\" style=\"width: 50%;background-color:#FEF7D6;\"><strong>" + extensionNameLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td class=\"tblsecondcolfmt\" style=\"background-color:#FEF7D6;\" ><strong>" + timeTakenLabelNodeText + "</strong></td></tr>";

        for (var idx in cseNameArray)
        {
            htmlText = htmlText + "<tr><td style=\"width: 50%\">" + cseNameArray[idx] + "</td>";                   
            htmlText = htmlText + "<td>" + cseElapsedTimeArray[idx] + "</td></tr>";
        }

        if (totalPolicyProcessingTime != null)
        {
            htmlText = htmlText + "<tr><td class=\"tblfirstcolfmt\" style=\"width: 50%\" >" + totalProcessingTimeLabelNodeText +":</td>";
            htmlText = htmlText + "<td class=\"tblsecondcolfmt\">" + totalPolicyProcessingTime + "</td></tr>";
        }
        htmlText = htmlText + "</table></td></tr></table></td></tr></table></body></html>";

        if(windowsArray[strWindowId])
        {
            delete windowsArray[strWindowId];
        }
         
        // IE specific method for showing the popup.
        if(navigator.userAgent.indexOf("MSIE") > 0 && window.location.toString().indexOf("file:") === -1)
        {
            strDiagArgs = "dialogHeight=360px;dialogWidth=630px;status=no;scroll=yes;resizable=yes;minimize=yes;maximize=yes;";

            var vModeless = window.showModelessDialog("about:blank", window, strDiagArgs);
            vModeless.document.write(htmlText);
            vModeless.document.close();
            vModeless.location.reload(false);
            windowsArray[strWindowId] = vModeless;                      
        }
        else
        {
            strDiagArgs = "height=360px, width=630px, status=no, toolbar=no, scrollbars=yes, resizable=yes";
        
            windowsArray[strWindowId] = window.open("", "" , strDiagArgs);
            windowsArray[strWindowId].document.write(htmlText);
            windowsArray[strWindowId].focus();
        }
    }

    xmlDocumentRoot = null;
}
</script>
</head>

<body onload="window_onload();" onclick="document_onclick();" onkeypress="document_onkeypress(event);" onunload="cleanUp();">

<!-- HTML resources -->
<div style="display:none;">
        <div id="explainText_windowTitle">Group Policy Management</div>
        <div id="explainText_windowStyles">
        
                            body  { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; }

                            .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; }

                            .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; }

                            .info { padding-left:10px;width:100%; }

                            table { font-size:100%; width:100%; border:1px solid #999999; }

                            th    { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; }

                            td    { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; }

                            .btn  { width:100%; text-align:right; margin-top:16px; }

                            .hdr  { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; }

                            .bdy  { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; }

                            button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; }

                            @media print {

                                .bdy { display:block; overflow:visible; }

                                button { display:none; }

                                .head { color:#000000; background:#FFFFFF; border:1px solid #000000; }

                            }

                
        </div>
        <div id="explainText_settingPathLabel">Setting Path:</div>
        <div id="explainText_explainTextLabel">Explanation</div>
        <div id="explainText_printButton">
        <button name="Print" onClick="window.print()" accesskey="P"><u>P</u>rint</button>

        </div>
        <div id="explainText_closeButton">
        <button name="Close" onClick="window.close()" accesskey="C"><u>C</u>lose</button>
                
        </div>
        <div id="explainText_noExplainTextAvailable">No explanation is available for this setting.</div>
        <div id="explainText_supportedLabel">Supported On:</div>
        <div id="explainText_noSupportedTextAvailable">Not available</div>
</div><table class="title" >
<tr><td colspan="2" class="gponame">KE-PO-WIN-U-Global Agent Settings</td></tr>
<tr>
    <td id="dtstamp">Data collected on: 2-9-2025 10:39:04</td>
    <td><div id="objshowhide" tabindex="0" onclick="objshowhide_onClick();return false;"></div></td>
</tr>
</table>

<div class="gposummary">
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1"><span class="sectionTitle" tabindex="0">Details</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td scope="row">Domain</td><td>emea.tpg.ads</td></tr>
<tr><td scope="row">Owner</td><td>EMEA\tentolouris.5-adm</td></tr>
<tr><td scope="row">Created</td><td>11-8-2022 09:35:24</td></tr>
<tr><td scope="row">Modified</td><td>9-3-2023 16:17:40</td></tr>
<tr><td scope="row">User Revisions</td><td>346 (AD), 346 (SYSVOL)</td></tr>
<tr><td scope="row">Computer Revisions</td><td>0 (AD), 0 (SYSVOL)</td></tr>
<tr><td scope="row">Unique ID</td><td>{f9d49f1b-b610-44ff-936f-549f06fbc2d6}</td></tr>
<tr><td scope="row">GPO Status</td><td>Computer settings disabled</td></tr>
</table></div></div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Links</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" ><tr><th scope="col">Location</th><th scope="col">Enforced</th><th scope="col">Link Status</th><th scope="col">Path</th></tr>
    <tr><td>Agents</td><td>No</td><td>Enabled</td><td>emea.tpg.ads/KE/Agents</td></tr>
    </table>
    <br/>This list only includes links in the domain of the GPO.</div></div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Security Filtering</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>The settings in this GPO can only apply to the following groups, users, and computers:</b></div>
<div class="he4i">
<table class="info" ><tr><th scope="col">Name</th></tr><tr><td>EMEA\KE-L-SEC-Restricted Agents Default Profile</td></tr></table>
</div>
</div>
<div class="filler"></div>

<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Delegation</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>These groups and users have the specified permission for this GPO</b></div>
<div class="he4i">
<table class="info3" >
<tr><th scope="col">Name</th><th scope="col">Allowed Permissions</th><th scope="col">Inherited</th></tr>
<tr><td>EMEA\Domain Admins</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>EMEA\KE-G-ORG-OU Admins</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>EMEA\KE-L-SEC-Restricted Agents Default Profile</td><td>Read (from Security Filtering)</td><td>No</td></tr>
<tr><td>EMEA\tentolouris.5-adm</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>NT AUTHORITY\Authenticated Users</td><td>Read</td><td>No</td></tr>
<tr><td>NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS</td><td>Read</td><td>No</td></tr>
<tr><td>NT AUTHORITY\SYSTEM</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>ROOT\Enterprise Admins</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
</table>

</div></div></div>
<div class="filler"></div>
</div>
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">Computer Configuration (Disabled)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">No settings defined.</div></div>
<div class="filler"></div>
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">User Configuration (Enabled)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1h_expanded"><span class="sectionTitle" tabindex="0">Policies</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1"><span class="sectionTitle" tabindex="0">Administrative Templates</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">Policy definitions (ADMX files) retrieved from the central store.</div><div class="he3"><span class="sectionTitle" tabindex="0">Control Panel</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Always open All Control Panel Items when opening Control Panel" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel" gpmc_settingDescription="This policy setting controls the default Control Panel view, whether by category or icons.&lt;br/&gt;&lt;br/&gt;If this policy setting is enabled, the Control Panel opens to the icon view.&lt;br/&gt;&lt;br/&gt;If this policy setting is disabled, the Control Panel opens to the category view.&lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the Control Panel opens to the view used in the last Control Panel session.&lt;br/&gt;Note: Icon size is dependent upon what the user has set it to in the previous session." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Always open All Control Panel Items when opening Control Panel</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Desktop</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not add shares of recently opened documents to Network Locations" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Remote shared folders are not added to Network Locations whenever you open a document in the shared folder.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, when you open a document in a remote shared folder, the system adds a connection to the shared folder to Network Locations.&lt;br/&gt;&lt;br/&gt;If you enable this setting, shared folders are not added to Network Locations automatically when you open a document in the shared folder." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Do not add shares of recently opened documents to Network Locations</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Network Locations icon on desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes the Network Locations icon from the desktop.&lt;br/&gt;&lt;br/&gt;This setting only affects the desktop icon. It does not prevent users from connecting to the network or browsing for shared computers on the network.&lt;br/&gt;&lt;br/&gt;Note: In operating systems earlier than Microsoft Windows Vista, this policy applies to the My Network Places icon." gpmc_supported="At least Windows 2000">Hide Network Locations icon on desktop</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent adding, dragging, dropping and closing the Taskbar&amp;#39;s toolbars" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Prevents users from manipulating desktop toolbars.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users cannot add or remove toolbars from the desktop. Also, users cannot drag toolbars on to or off of docked toolbars.&lt;br/&gt;&lt;br/&gt;Note: If users have added or removed toolbars, this setting prevents them from restoring the default configuration.&lt;br/&gt;&lt;br/&gt;Tip: To view the toolbars that can be added to the desktop, right-click a docked toolbar (such as the taskbar beside the Start button), and point to &amp;quot;Toolbars.&amp;quot;&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Prohibit adjusting desktop toolbars&amp;quot; setting." gpmc_supported="At least Windows 2000">Prevent adding, dragging, dropping and closing the Taskbar&#39;s toolbars</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit adjusting desktop toolbars" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Prevents users from adjusting the length of desktop toolbars. Also, users cannot reposition items or toolbars on docked toolbars.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from adding or removing toolbars on the desktop.&lt;br/&gt;&lt;br/&gt;Note: If users have adjusted their toolbars, this setting prevents them from restoring the default configuration.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Prevent adding, dragging, dropping and closing the Taskbar&amp;#39;s toolbars&amp;quot; setting." gpmc_supported="At least Windows 2000">Prohibit adjusting desktop toolbars</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit User from manually redirecting Profile Folders" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Prevents users from changing the path to their profile folders.&lt;br/&gt;&lt;br/&gt;By default, a user can change the location of their individual profile folders like Documents, Music etc. by typing a new path in the Locations tab of the folder&amp;#39;s Properties dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users are unable to type a new location in the Target box." gpmc_supported="At least Windows 2000">Prohibit User from manually redirecting Profile Folders</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Computer icon on the desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="This setting hides Computer from the desktop and from the new Start menu. It also hides links to Computer in the Web view of all Explorer windows, and it hides Computer in the Explorer folder tree pane. If the user navigates into Computer via the &amp;quot;Up&amp;quot; button while this setting is enabled, they view an empty Computer folder. This setting allows administrators to restrict their users from seeing Computer in the shell namespace, allowing them to present their users with a simpler desktop environment.&lt;br/&gt;&lt;br/&gt;If you enable this setting, Computer is hidden on the desktop, the new Start menu, the Explorer folder tree pane, and the Explorer Web views. If the user manages to navigate to Computer, the folder will be empty.&lt;br/&gt;&lt;br/&gt;If you disable this setting, Computer is displayed as usual, appearing as normal on the desktop, Start menu, folder tree pane, and Web views, unless restricted by another setting.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, the default is to display Computer as usual.&lt;br/&gt;&lt;br/&gt;Note: In operating systems earlier than Microsoft Windows Vista, this policy applies to the My Computer icon. Hiding Computer and its contents does not hide the contents of the child folders of Computer. For example, if the users navigate into one of their hard drives, they see all of their folders and files there, even if this setting is enabled." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Remove Computer icon on the desktop</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove My Documents icon on the desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes most occurrences of the My Documents icon.&lt;br/&gt;&lt;br/&gt;This setting removes the My Documents icon from the desktop, from File Explorer, from programs that use the File Explorer windows, and from the standard Open dialog box.&lt;br/&gt;&lt;br/&gt;This setting does not prevent the user from using other methods to gain access to the contents of the My Documents folder.&lt;br/&gt;&lt;br/&gt;This setting does not remove the My Documents icon from the Start menu. To do so, use the &amp;quot;Remove My Documents icon from Start Menu&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Note: To make changes to this setting effective, you must log off from and log back on to Windows 2000 Professional." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Remove My Documents icon on the desktop</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Properties from the Computer icon context menu" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="This setting hides Properties on the context menu for Computer.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Properties option will not be present when the user right-clicks My Computer or clicks Computer and then goes to the File menu.  Likewise, Alt-Enter does nothing when Computer is selected.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Properties option is displayed as usual." gpmc_supported="At least Windows 2000 Service Pack 3">Remove Properties from the Computer icon context menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Properties from the Documents icon context menu" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="This policy setting hides the Properties menu command on the shortcut menu for the My Documents icon.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Properties menu command will not be displayed when the user does any of the following:&lt;br/&gt;&lt;br/&gt;Right-clicks the My Documents icon.&lt;br/&gt;Clicks the My Documents icon, and then opens the File menu.&lt;br/&gt;Clicks the My Documents icon, and then presses ALT+ENTER.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Properties menu command is displayed." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Remove Properties from the Documents icon context menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Properties from the Recycle Bin context menu" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes the Properties option from the Recycle Bin context menu.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Properties option will not be present when the user right-clicks on Recycle Bin or opens Recycle Bin and then clicks File. Likewise, Alt-Enter does nothing when Recycle Bin is selected.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Properties option is displayed as usual." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Remove Properties from the Recycle Bin context menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Recycle Bin icon from desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes most occurrences of the Recycle Bin icon.&lt;br/&gt;&lt;br/&gt;This setting removes the Recycle Bin icon from the desktop, from File Explorer, from programs that use the File Explorer windows, and from the standard Open dialog box.&lt;br/&gt;&lt;br/&gt;This setting does not prevent the user from using other methods to gain access to the contents of the Recycle Bin folder.&lt;br/&gt;&lt;br/&gt;Note: To make changes to this setting effective, you must log off and then log back on." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Remove Recycle Bin icon from desktop</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove the Desktop Cleanup Wizard" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Prevents users from using the Desktop Cleanup Wizard.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Desktop Cleanup wizard does not automatically run on a users workstation every 60 days. The user will also not be able to access the Desktop Cleanup Wizard.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the default behavior of the Desktop Clean Wizard running every 60 days occurs.&lt;br/&gt;&lt;br/&gt;Note: When this setting is not enabled, users can run the Desktop Cleanup Wizard, or have it run automatically every 60 days from Display, by clicking the Desktop tab and then clicking the Customize Desktop button." gpmc_supported="Windows Server 2003 and Windows XP only">Remove the Desktop Cleanup Wizard</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Desktop/Active Directory</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Active Directory folder" gpmc_settingPath="User Configuration/Administrative Templates/Desktop/Active Directory" gpmc_settingDescription="Hides the Active Directory folder in Network Locations.&lt;br/&gt;&lt;br/&gt;The Active Directory folder displays Active Directory objects in a browse window.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Active Directory folder does not appear in the Network Locations folder.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Active Directory folder appears in the Network Locations folder.&lt;br/&gt;&lt;br/&gt;This setting is designed to let users search Active Directory but not tempt them to casually browse Active Directory.&lt;br/&gt;" gpmc_supported="Windows 2000 only">Hide Active Directory folder</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Google/Google Chrome</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Clear Browsing Data on Exit" gpmc_settingPath="User Configuration/Administrative Templates/Google/Google Chrome" gpmc_settingDescription="Configures a list of browsing data types that should be deleted when the user closes all browser windows. The available data types are browsing history (browsing_history), download history (download_history), cookies (cookies_and_other_site_data), cache(cached_images_and_files), autofill (autofill), passwords (password_signin), site settings (site_settings) and hosted apps data (hosted_app_data). This policy does not take precedence over AllowDeletingBrowserHistory.&lt;br/&gt;&lt;br/&gt;Until Chrome 114, this policy required the SyncDisabled policy to be set to true. Starting Chrome 115, setting this policy will disable sync for the respective data types if neither `Chrome Sync` is disabled by setting the SyncDisabled policy nor BrowserSignin is disabled.&lt;br/&gt;&lt;br/&gt;If Google Chrome does not exit cleanly (for example, if the browser or the OS crashes), the browsing data will be cleared the next time the profile is loaded.&lt;br/&gt;&lt;br/&gt;Example value:&lt;br/&gt;&lt;br/&gt;browsing_history&lt;br/&gt;download_history&lt;br/&gt;cookies_and_other_site_data&lt;br/&gt;cached_images_and_files&lt;br/&gt;password_signin&lt;br/&gt;autofill&lt;br/&gt;site_settings&lt;br/&gt;hosted_app_data" gpmc_supported="Microsoft Windows 7 or later">Clear Browsing Data on Exit</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td colspan="2"><table class="subtable" >
<tr><th scope="col">Clear Browsing Data on Exit</th></tr>
<tr><td>password_signin</td></tr>
<tr><td>cookies_and_other_site_data</td></tr>
<tr><td>autofill</td></tr>
<tr><td>browsing_history</td></tr>
<tr><td>download_history</td></tr>
</table></td></tr></table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable saving browser history" gpmc_settingPath="User Configuration/Administrative Templates/Google/Google Chrome" gpmc_settingDescription="Setting the policy to Enabled means browsing history is not saved, tab syncing is off and users can&amp;#39;t change this setting.&lt;br/&gt;&lt;br/&gt;Setting the policy to Disabled or leaving it unset saves browsing history." gpmc_supported="Microsoft Windows 7 or later">Disable saving browser history</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable synchronization of data with Google" gpmc_settingPath="User Configuration/Administrative Templates/Google/Google Chrome" gpmc_settingDescription="Setting the policy to Enabled turns off data synchronization in Google Chrome using Google-hosted synchronization services.&lt;br/&gt;To fully turn off Chrome Sync services, we recommend that you turn off the service in the Google Admin console.&lt;br/&gt;&lt;br/&gt;If the policy is set to Disabled or not set, users are allowed to choose whether to use Chrome Sync.&lt;br/&gt;&lt;br/&gt;Note: Do not turn on this policy when RoamingProfileSupportEnabled is Enabled, because that feature shares the same client-side functionality. The Google-hosted synchronization is off completely in this case." gpmc_supported="Microsoft Windows 7 or later">Disable synchronization of data with Google</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Ephemeral profile" gpmc_settingPath="User Configuration/Administrative Templates/Google/Google Chrome" gpmc_settingDescription="If set to enabled this policy forces the profile to be switched to ephemeral mode. If this policy is specified as an OS policy (e.g. GPO on Windows) it will apply to every profile on the system; if the policy is set as a Cloud policy it will apply only to a profile signed in with a managed account.&lt;br/&gt;&lt;br/&gt;In this mode the profile data is persisted on disk only for the length of the user session. Features like browser history, extensions and their data, web data like cookies and web databases are not preserved after the browser is closed. However this does not prevent the user from downloading any data to disk manually, save pages or print them.&lt;br/&gt;&lt;br/&gt;If the user has enabled sync all this data is preserved in their sync profile just like with regular profiles. Incognito mode is also available if not explicitly disabled by policy.&lt;br/&gt;&lt;br/&gt;If the policy is set to disabled or left not set signing in leads to regular profiles." gpmc_supported="Microsoft Windows 7 or later">Ephemeral profile</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Google/Google Chrome/Password manager</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable saving passwords to the password manager" gpmc_settingPath="User Configuration/Administrative Templates/Google/Google Chrome/Password manager" gpmc_settingDescription="This policy controls the browser&amp;#39;s ability to automatically remember passwords on websites and save them in the built-in password manager. It does not limit access or change the contents of passwords saved in the password manager and possibly synchronized to the Google account profile and Android.&lt;br/&gt;&lt;br/&gt;Setting the policy to Enabled means users have Google Chrome remember passwords and provide them the next time they sign in to a site.&lt;br/&gt;&lt;br/&gt;Setting the policy to Disabled means users can&amp;#39;t save new passwords, but previously saved passwords will still work.&lt;br/&gt;&lt;br/&gt;If the policy is set, users can&amp;#39;t change it in Google Chrome. If not set, the user can turn off password saving." gpmc_supported="Microsoft Windows 7 or later">Enable saving passwords to the password manager</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Microsoft Edge</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Ads setting for sites with intrusive ads" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Controls whether ads are blocked on sites with intrusive ads.&lt;br/&gt;&lt;br/&gt;Policy options mapping:&lt;br/&gt;&lt;br/&gt;* AllowAds (1) = Allow ads on all sites&lt;br/&gt;&lt;br/&gt;* BlockAds (2) = Block ads on sites with intrusive ads. (Default value)&lt;br/&gt;&lt;br/&gt;Use the preceding information when configuring this policy." gpmc_supported="Microsoft Edge version 78, Windows 7 or later">Ads setting for sites with intrusive ads</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Ads setting for sites with intrusive ads</td><td>Block ads on sites with intrusive ads. (Default value)</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow download restrictions" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Configures the type of downloads that Microsoft Edge completely blocks, without letting users override the security decision.&lt;br/&gt;&lt;br/&gt;Set &amp;#39;BlockDangerousDownloads&amp;#39; to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of known dangerous downloads or that have dangerous file type extensions.&lt;br/&gt;&lt;br/&gt;Set &amp;#39;BlockPotentiallyDangerousDownloads&amp;#39; to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of potentially dangerous or unwanted downloads or that have dangerous file type extensions.&lt;br/&gt;&lt;br/&gt;Set &amp;#39;BlockAllDownloads&amp;#39; to block all downloads.&lt;br/&gt;&lt;br/&gt;Set &amp;#39;BlockMaliciousDownloads&amp;#39; to allow all downloads except for those that carry Microsoft Defender SmartScreen warnings of known malicious downloads.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this policy or set the &amp;#39;DefaultDownloadSecurity&amp;#39; option, the downloads go through the usual security restrictions based on Microsoft Defender SmartScreen analysis results.&lt;br/&gt;&lt;br/&gt;Note that these restrictions apply to downloads from web page content, as well as the &amp;#39;download link...&amp;#39; context menu option. These restrictions don&amp;#39;t apply to saving or downloading the currently displayed page, nor do they apply to the Save as PDF option from the printing options.&lt;br/&gt;&lt;br/&gt;See https://go.microsoft.com/fwlink/?linkid=2094934 for more info on Microsoft Defender SmartScreen.&lt;br/&gt;&lt;br/&gt;Policy options mapping:&lt;br/&gt;&lt;br/&gt;* DefaultDownloadSecurity (0) = No special restrictions&lt;br/&gt;&lt;br/&gt;* BlockDangerousDownloads (1) = Block malicious downloads and dangerous file types&lt;br/&gt;&lt;br/&gt;* BlockPotentiallyDangerousDownloads (2) = Block potentially dangerous or unwanted downloads and dangerous file types&lt;br/&gt;&lt;br/&gt;* BlockAllDownloads (3) = Block all downloads&lt;br/&gt;&lt;br/&gt;* BlockMaliciousDownloads (4) = Block malicious downloads&lt;br/&gt;&lt;br/&gt;Use the preceding information when configuring this policy." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Allow download restrictions</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Download restrictions</td><td>No special restrictions</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow Google Cast to connect to Cast devices on all IP addresses" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Enable this policy to let Google Cast connect to Cast devices on all IP addresses, not just RFC1918/RFC4193 private addresses.&lt;br/&gt;&lt;br/&gt;Disable this policy to restrict Google Cast to Cast devices on RFC1918/RFC4193 private addresses.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this policy, Google Cast connects to Cast devices on RFC1918/RFC4193 private addresses only, unless you enable the CastAllowAllIPs feature.&lt;br/&gt;&lt;br/&gt;If the &amp;#39;EnableMediaRouter&amp;#39; (Enable Google Cast) policy is disabled, then this policy has no effect." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Allow Google Cast to connect to Cast devices on all IP addresses</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow importing of autofill form data" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Allows users to import autofill form data from another browser into Microsoft Edge.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the option to manually import autofill data is automatically selected.&lt;br/&gt;&lt;br/&gt;If you disable this policy, autofill form data isn&amp;#39;t imported at first run, and users can&amp;#39;t import it manually.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this policy, autofill data is imported at first run, and users can choose whether to import this data manually during later browsing sessions.&lt;br/&gt;&lt;br/&gt;You can set this policy as a recommendation. This means that Microsoft Edge will import autofill data on first run, but users can select or clear **autofill data** option during manual import.&lt;br/&gt;&lt;br/&gt;**Note**: This policy currently manages importing from Google Chrome (on Windows 7, 8, and 10 and on macOS) and Mozilla Firefox (on Windows 7, 8, and 10 and on macOS) browsers." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Allow importing of autofill form data</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow importing of browser settings" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Allows users to import browser settings from another browser into Microsoft Edge.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the **Browser settings** check box is automatically selected in the **Import browser data** dialog box.&lt;br/&gt;&lt;br/&gt;If you disable this policy, browser settings aren&amp;#39;t imported at first run, and users can&amp;#39;t import them manually.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this policy, browser settings are imported at first run, and users can choose whether to import them manually during later browsing sessions.&lt;br/&gt;&lt;br/&gt;You can also set this policy as a recommendation. This means that Microsoft Edge imports the settings on first run, but users can select or clear the **browser settings** option during manual import.&lt;br/&gt;&lt;br/&gt;**Note**: This policy currently manages importing Google Chrome (on Windows 7, 8, and 10 and on macOS)." gpmc_supported="Microsoft Edge version 78, Windows 7 or later">Allow importing of browser settings</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow importing of browsing history" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Allows users to import their browsing history from another browser into Microsoft Edge.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the **Browsing history** check box is automatically selected in the **Import browser data** dialog box.&lt;br/&gt;&lt;br/&gt;If you disable this policy, browsing history data isn&amp;#39;t imported at first run, and users can&amp;#39;t import this data manually.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this policy, browsing history data is imported at first run, and users can choose whether to import it manually during later browsing sessions.&lt;br/&gt;&lt;br/&gt;You can also set this policy as a recommendation. This means that Microsoft Edge imports browsing history on first run, but users can select or clear the **history** option during manual import.&lt;br/&gt;&lt;br/&gt;**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS), Mozilla Firefox (on Windows 7, 8, and 10 and on macOS), and Apple Safari (macOS) browsers." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Allow importing of browsing history</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow importing of Cookies" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Allows users to import Cookies from another browser into Microsoft Edge.&lt;br/&gt;&lt;br/&gt;If you disable this policy, Cookies aren&amp;#39;t imported on first run.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this policy, Cookies are imported on first run.&lt;br/&gt;&lt;br/&gt;You can also set this policy as a recommendation. This means that Microsoft Edge imports Cookies on first run.&lt;br/&gt;&lt;br/&gt;**Note**: This policy currently manages importing Google Chrome (on Windows 7, 8, and 10 and on macOS)." gpmc_supported="Microsoft Edge version 81, Windows 7 or later">Allow importing of Cookies</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow importing of extensions" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Allows users to import extensions from another browser into Microsoft Edge.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the **Extensions** check box is automatically selected in the **Import browser data** dialog box.&lt;br/&gt;&lt;br/&gt;If you disable this policy, extensions aren&amp;#39;t imported at first run, and users can&amp;#39;t import them manually.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this policy, extensions are imported at first run, and users can choose whether to import them manually during later browsing sessions.&lt;br/&gt;&lt;br/&gt;You can also set this policy as a recommendation. This means that Microsoft Edge imports extensions on first run, but users can select or clear the **extensions** option during manual import.&lt;br/&gt;&lt;br/&gt;**Note**: This policy currently only supports importing from Google Chrome (on Windows 7, 8, and 10 and on macOS)." gpmc_supported="Microsoft Edge version 81, Windows 7 or later">Allow importing of extensions</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow importing of favorites" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Allows users to import favorites from another browser into Microsoft Edge.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the **Favorites** check box is automatically selected in the **Import browser data** dialog box.&lt;br/&gt;&lt;br/&gt;If you disable this policy, favorites aren&amp;#39;t imported at first run, and users can&amp;#39;t import them manually.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this policy, favorites are imported at first run, and users can choose whether to import them manually during later browsing sessions.&lt;br/&gt;&lt;br/&gt;You can also set this policy as a recommendation. This means that Microsoft Edge imports favorites on first run, but users can select or clear the **favorites** option during manual import.&lt;br/&gt;&lt;br/&gt;**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS), Mozilla Firefox (on Windows 7, 8, and 10 and on macOS), and Apple Safari (on macOS) browsers." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Allow importing of favorites</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow importing of home page settings" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Allows users to import their home page setting from another browser into Microsoft Edge.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the option to manually import the home page setting is automatically selected.&lt;br/&gt;&lt;br/&gt;If you disable this policy, the home page setting isn&amp;#39;t imported at first run, and users can&amp;#39;t import it manually.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this policy, the home page setting is imported at first run, and users can choose whether to import this data manually during later browsing sessions.&lt;br/&gt;&lt;br/&gt;You can set this policy as a recommendation. This means that Microsoft Edge imports the home page setting on first run, but users can select or clear the **home page** option during manual import.&lt;br/&gt;&lt;br/&gt;**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10)." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Allow importing of home page settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow importing of open tabs" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Allows users to import open and pinned tabs from another browser into Microsoft Edge.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the **Open tabs** check box is automatically selected in the **Import browser data** dialog box.&lt;br/&gt;&lt;br/&gt;If you disable this policy, open tabs aren&amp;#39;t imported at first run, and users can&amp;#39;t import them manually.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this policy, open tabs are imported at first run, and users can choose whether to import them manually during later browsing sessions.&lt;br/&gt;&lt;br/&gt;You can also set this policy as a recommendation. This means that Microsoft Edge imports open tabs on first run, but users can select or clear the **Open tabs** option during manual import.&lt;br/&gt;&lt;br/&gt;**Note**: This policy currently only supports importing from Google Chrome (on Windows 7, 8, and 10 and on macOS)." gpmc_supported="Microsoft Edge version 79, Windows 7 or later">Allow importing of open tabs</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow importing of payment info" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Allows users to import payment info from another browser into Microsoft Edge.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the **payment info** check box is automatically selected in the **Import browser data** dialog box.&lt;br/&gt;&lt;br/&gt;If you disable this policy, payment info isn&amp;#39;t imported at first run, and users can&amp;#39;t import it manually.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this policy, payment info is imported at first run, and users can choose whether to import it manually during later browsing sessions.&lt;br/&gt;&lt;br/&gt;You can also set this policy as a recommendation. This means that Microsoft Edge imports payment info on first run, but users can select or clear the **payment info** option during manual import.&lt;br/&gt;&lt;br/&gt;**Note:** This policy currently manages importing from Google Chrome (on Windows 7, 8, and 10 and on macOS)." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Allow importing of payment info</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow importing of saved passwords" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Allows users to import saved passwords from another browser into Microsoft Edge.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the option to manually import saved passwords is automatically selected.&lt;br/&gt;&lt;br/&gt;If you disable this policy, saved passwords aren&amp;#39;t imported on first run, and users can&amp;#39;t import them manually.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this policy, no passwords are imported at first run, and users can choose whether to import them manually during later browsing sessions.&lt;br/&gt;&lt;br/&gt;You can set this policy as a recommendation. This means that Microsoft Edge imports passwords on first run, but users can select or clear the **passwords** option during manual import.&lt;br/&gt;&lt;br/&gt;**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS), and Mozilla Firefox (on Windows 7, 8, and 10 and on macOS) browsers." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Allow importing of saved passwords</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow importing of search engine settings" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Allows users to import search engine settings from another browser into Microsoft Edge.&lt;br/&gt;&lt;br/&gt;If you enable, this policy, the option to import search engine settings is automatically selected.&lt;br/&gt;&lt;br/&gt;If you disable this policy, search engine settings aren&amp;#39;t imported at first run, and users can&amp;#39;t import them manually.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this policy, search engine settings are imported at first run, and users can choose whether to import this data manually during later browsing sessions.&lt;br/&gt;&lt;br/&gt;You can set this policy as a recommendation. This means that Microsoft Edge imports search engine settings on first run, but users can select or clear the **search engine** option during manual import.&lt;br/&gt;&lt;br/&gt;**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10)." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Allow importing of search engine settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow or block audio capture" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Allows you to set whether a user is prompted to grant a website access to their audio capture device. This policy applies to all URLs except for those configured in the &amp;#39;AudioCaptureAllowedUrls&amp;#39; (Sites that can access audio capture devices without requesting permission) list.&lt;br/&gt;&lt;br/&gt;If you enable this policy or don&amp;#39;t configure it (the default setting), the user is prompted for audio capture access except from the URLs in the &amp;#39;AudioCaptureAllowedUrls&amp;#39; list. These listed URLs are granted access without prompting.&lt;br/&gt;&lt;br/&gt;If you disable this policy, the user is not prompted, and audio capture is accessible only to the URLs configured in &amp;#39;AudioCaptureAllowedUrls&amp;#39;.&lt;br/&gt;&lt;br/&gt;This policy affects all types of audio inputs, not only the built-in microphone." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Allow or block audio capture</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow or block video capture" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Control whether sites can capture video.&lt;br/&gt;&lt;br/&gt;If enabled or not configured (default), the user will be asked about video capture access for all sites except those with URLs configured in the &amp;#39;VideoCaptureAllowedUrls&amp;#39; (Sites that can access video capture devices without requesting permission) policy list, which will be granted access without prompting.&lt;br/&gt;&lt;br/&gt;If you disable this policy, the user isn&amp;#39;t prompted, and video capture is only available to URLs configured in &amp;#39;VideoCaptureAllowedUrls&amp;#39; policy.&lt;br/&gt;&lt;br/&gt;This policy affects all types of video inputs, not only the built-in camera." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Allow or block video capture</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allows users to edit favorites" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Enable this policy to let users add, remove, and modify favorites. This is the default behavior if you don&amp;#39;t configure the policy.&lt;br/&gt;&lt;br/&gt;Disable this policy to stop users from adding, removing, or modifying favorites. They can still use existing favorites." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Allows users to edit favorites</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Automatically import another browser&amp;#39;s data and settings at first run" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="If you enable this policy, all supported datatypes and settings from the specified browser will be silently and automatically imported at first run. During the First Run Experience, the import section will also be skipped.&lt;br/&gt;&lt;br/&gt;The browser data from Microsoft Edge Legacy will always be silently migrated at the first run, irrespective of the value of this policy.&lt;br/&gt;&lt;br/&gt;If this policy is set to &amp;#39;FromDefaultBrowser&amp;#39;, then the datatypes corresponding to the default browser on the managed device will be imported.&lt;br/&gt;&lt;br/&gt;If the browser specified as the value of this policy is not present in the managed device, Microsoft Edge will simply skip the import without any notification to the user.&lt;br/&gt;&lt;br/&gt;If you set this policy to &amp;#39;DisabledAutoImport&amp;#39;, the import section of the first-run experience is skipped entirely and Microsoft Edge doesn&amp;#39;t import browser data and settings automatically.&lt;br/&gt;&lt;br/&gt;If this policy is set to the value of &amp;#39;FromInternetExplorer&amp;#39;, the following datatypes will be imported from Internet Explorer:&lt;br/&gt;1. Favorites or bookmarks&lt;br/&gt;2. Saved passwords&lt;br/&gt;3. Search engines&lt;br/&gt;4. Browsing history&lt;br/&gt;5. Home page&lt;br/&gt;&lt;br/&gt;If this policy is set to the value of &amp;#39;FromGoogleChrome&amp;#39;, the following datatypes will be imported from Google Chrome:&lt;br/&gt;1. Favorites&lt;br/&gt;2. Saved passwords&lt;br/&gt;3. Addresses and more&lt;br/&gt;4. Payment info&lt;br/&gt;5. Browsing history&lt;br/&gt;6. Settings&lt;br/&gt;7. Pinned and Open tabs&lt;br/&gt;8. Extensions&lt;br/&gt;9. Cookies&lt;br/&gt;&lt;br/&gt;Note: For more details on what is imported from Google Chrome, please see https://go.microsoft.com/fwlink/?linkid=2120835&lt;br/&gt;&lt;br/&gt;If this policy is set to the value of &amp;#39;FromSafari&amp;#39;, user data is no longer imported into Microsoft Edge. This is due to the way Full Disk Access works on Mac.&lt;br/&gt;On macOS Mojave and above, it&amp;#39;s no longer possible to have automated and unattended import of Safari data into Microsoft Edge.&lt;br/&gt;&lt;br/&gt;Starting with Microsoft Edge version 83, if this policy is set to the value of &amp;#39;FromMozillaFirefox&amp;#39;, the following datatypes will be imported from Mozilla Firefox:&lt;br/&gt;1. Favorites or bookmarks&lt;br/&gt;2. Saved passwords&lt;br/&gt;3. Addresses and more&lt;br/&gt;4. Browsing History&lt;br/&gt;&lt;br/&gt;If you want to restrict specific datatypes from getting imported on the managed devices, you can use this policy with other policies such as &amp;#39;ImportAutofillFormData&amp;#39; (Allow importing of autofill form data), &amp;#39;ImportBrowserSettings&amp;#39; (Allow importing of browser settings), &amp;#39;ImportFavorites&amp;#39; (Allow importing of favorites), and etc.&lt;br/&gt;&lt;br/&gt;Policy options mapping:&lt;br/&gt;&lt;br/&gt;* FromDefaultBrowser (0) = Automatically imports all supported datatypes and settings from the default browser&lt;br/&gt;&lt;br/&gt;* FromInternetExplorer (1) = Automatically imports all supported datatypes and settings from Internet Explorer&lt;br/&gt;&lt;br/&gt;* FromGoogleChrome (2) = Automatically imports all supported datatypes and settings from Google Chrome&lt;br/&gt;&lt;br/&gt;* FromSafari (3) = Automatically imports all supported datatypes and settings from Safari&lt;br/&gt;&lt;br/&gt;* DisabledAutoImport (4) = Disables automatic import, and the import section of the first-run experience is skipped&lt;br/&gt;&lt;br/&gt;* FromMozillaFirefox (5) = Automatically imports all supported datatypes and settings from Mozilla Firefox&lt;br/&gt;&lt;br/&gt;Use the preceding information when configuring this policy." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Automatically import another browser&#39;s data and settings at first run</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Automatically import another browser&#39;s data and settings at first run</td><td>Automatically imports all supported datatypes and settings from Internet Explorer</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Browser sign-in settings" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Specify whether a user can sign into Microsoft Edge with their account and use account-related services like sync and single sign on. To control the availability of sync, use the &amp;#39;SyncDisabled&amp;#39; (Disable synchronization of data using Microsoft sync services) policy instead.&lt;br/&gt;&lt;br/&gt;If you set this policy to &amp;#39;Disable&amp;#39;, make sure that you also set the &amp;#39;NonRemovableProfileEnabled&amp;#39; (Configure whether a user always has a default profile automatically signed in with their work or school account) policy to disabled because &amp;#39;NonRemovableProfileEnabled&amp;#39; disables the creation of an automatically signed in browser profile. If both policies are set, Microsoft Edge will use the &amp;#39;Disable browser sign-in&amp;#39; policy and behave as if &amp;#39;NonRemovableProfileEnabled&amp;#39; is set to disabled.&lt;br/&gt;&lt;br/&gt;If you set this policy to &amp;#39;Enable&amp;#39;, users can sign into the browser. Signing into the browser doesn&amp;#39;t mean that sync is turned on by default; the user must separately opt-in to use this feature.&lt;br/&gt;&lt;br/&gt;If you set this policy to &amp;#39;Force&amp;#39;, users must sign into a profile to use the browser. By default, this will allow the user to choose whether they want to sync to their account, unless sync is disabled by the domain admin or with the &amp;#39;SyncDisabled&amp;#39; policy. The default value of &amp;#39;BrowserGuestModeEnabled&amp;#39; (Enable guest mode) policy is set to false.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this policy users can decide if they want to enable the browser sign-in option and use it as they see fit.&lt;br/&gt;&lt;br/&gt;Policy options mapping:&lt;br/&gt;&lt;br/&gt;* Disable (0) = Disable browser sign-in&lt;br/&gt;&lt;br/&gt;* Enable (1) = Enable browser sign-in&lt;br/&gt;&lt;br/&gt;* Force (2) = Force users to sign-in to use the browser (all profiles)&lt;br/&gt;&lt;br/&gt;Use the preceding information when configuring this policy." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Browser sign-in settings</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Browser sign-in settings</td><td>Disable browser sign-in</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Clear browsing data when Microsoft Edge closes" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Microsoft Edge doesn&amp;#39;t clear the browsing data by default when it closes. Browsing data includes information entered in forms, passwords, and even the websites visited.&lt;br/&gt;&lt;br/&gt;If you enable this policy, all browsing data is deleted each time Microsoft Edge closes. Note that if you enable this policy, it takes precedence over how you configured &amp;#39;DefaultCookiesSetting&amp;#39; (Configure cookies)&lt;br/&gt;&lt;br/&gt;If you disable or don&amp;#39;t configure this policy, users can configure the Clear browsing data option in Settings.&lt;br/&gt;&lt;br/&gt;If you enable this policy, don&amp;#39;t configure the &amp;#39;AllowDeletingBrowserHistory&amp;#39; (Enable deleting browser and download history) or the &amp;#39;ClearCachedImagesAndFilesOnExit&amp;#39; (Clear cached images and files when Microsoft Edge closes) policy, because they all deal with deleting browsing data. If you configure the preceding policies and this policy, all browsing data is deleted when Microsoft Edge closes, regardless of how you configured &amp;#39;AllowDeletingBrowserHistory&amp;#39; or &amp;#39;ClearCachedImagesAndFilesOnExit&amp;#39;.&lt;br/&gt;&lt;br/&gt;To exclude cookies from being deleted on exit, configure the &amp;#39;SaveCookiesOnExit&amp;#39; (Save cookies when Microsoft Edge closes) policy.&lt;br/&gt;To exclude passwords from being deleted on exit, configure the &amp;quot;SavePasswordsOnExit&amp;quot; policy." gpmc_supported="Microsoft Edge version 78, Windows 7 or later">Clear browsing data when Microsoft Edge closes</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Configure whether a user always has a default profile automatically signed in with their work or school account" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="This policy determines if a user can remove the Microsoft Edge profile automatically signed in with a user&amp;#39;s work or school account.&lt;br/&gt;&lt;br/&gt;If you enable this policy, a non-removable profile will be created with the user&amp;#39;s work or school account on Windows. This profile can&amp;#39;t be signed out or removed. The profile will be non-removable only if profile is signed-in with either on-premises account or Azure AD account that matches OS sign-in account.&lt;br/&gt;&lt;br/&gt;If you disable or don&amp;#39;t configure this policy, the profile automatically signed in with a user&amp;#39;s work or school account on Windows can be signed out or removed by the user.&lt;br/&gt;&lt;br/&gt;If you want to configure browser sign in, use the &amp;#39;BrowserSignin&amp;#39; (Browser sign-in settings) policy.&lt;br/&gt;&lt;br/&gt;This policy is available only on Windows instances that are joined to a Microsoft Active Directory domain, Windows 10 Pro or Enterprise instances that enrolled for device management.&lt;br/&gt;&lt;br/&gt;From Microsoft Edge 89 onwards, if there is an existing on-premises profile with sync disabled and machine is hybrid joined, it will auto-upgrade the on-premises profile to Azure AD profile and make it non-removable instead of creating a new non-removable Azure AD profile.&lt;br/&gt;&lt;br/&gt;From Microsoft Edge 93 onwards, if policy &amp;#39;ImplicitSignInEnabled&amp;#39; (Enable implicit sign-in) is disabled, this policy will not take any effect." gpmc_supported="Microsoft Edge version 78, Windows 7 or later">Configure whether a user always has a default profile automatically signed in with their work or school account</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable saving browser history" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Disables saving browser history and prevents users from changing this setting.&lt;br/&gt;&lt;br/&gt;If you enable this policy, browsing history isn&amp;#39;t saved. This also disables tab syncing.&lt;br/&gt;&lt;br/&gt;If you disable this policy or don&amp;#39;t configure it, browsing history is saved." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Disable saving browser history</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable synchronization of data using Microsoft sync services" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Disables data synchronization in Microsoft Edge. This policy also prevents the sync consent prompt from appearing.&lt;br/&gt;&lt;br/&gt;This policy disables cloud synchronization only and has no impact on the &amp;#39;RoamingProfileSupportEnabled&amp;#39; (Enable using roaming copies for Microsoft Edge profile data) policy.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t set this policy or apply it as recommended, users will be able to turn sync on or off. If you apply this policy as mandatory, users will not be able to turn sync on." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Disable synchronization of data using Microsoft sync services</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable taking screenshots" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Controls if users can take screenshots of the browser page.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users can&amp;#39;t take screenshots using keyboard shortcuts or extension APIs.&lt;br/&gt;&lt;br/&gt;If you disable or don&amp;#39;t configure this policy, users can take screenshots.&lt;br/&gt;&lt;br/&gt;Note: Even if you disable screenshots using this policy, users might still be able to take screenshots using Web Capture within the browser or other methods outside of the browser. For example, using an operating system feature or another application." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Disable taking screenshots</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable AutoFill for payment instruments" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Enables Microsoft Edge&amp;#39;s AutoFill feature and lets users auto complete payment instruments like credit or debit cards in web forms using previously stored information. This includes suggesting new payment instruments like Buy Now Pay Later (BNPL) in web forms and Express Checkout.&lt;br/&gt;&lt;br/&gt;If you enable this policy or don&amp;#39;t configure it, users can control AutoFill for payment instruments.&lt;br/&gt;&lt;br/&gt;If you disable this policy, AutoFill never suggests, fills, or recommends new payment Instruments. Additionally, it won&amp;#39;t save any payment instrument information that users submit while browsing the web." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Enable AutoFill for payment instruments</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable deleting browser and download history" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Enables deleting browser history and download history and prevents users from changing this setting.&lt;br/&gt;&lt;br/&gt;Note that even with this policy is disabled, the browsing and download history aren&amp;#39;t guaranteed to be retained: users can edit or delete the history database files directly, and the browser itself may remove (based on expiration period) or archive any or all history items at any time.&lt;br/&gt;&lt;br/&gt;If you enable this policy or don&amp;#39;t configure it, users can delete the browsing and download history.&lt;br/&gt;&lt;br/&gt;If you disable this policy, users can&amp;#39;t delete browsing and download history. Disabling this policy will disable history sync and open tab sync.&lt;br/&gt;&lt;br/&gt;If you enable this policy, don&amp;#39;t enable the &amp;#39;ClearBrowsingDataOnExit&amp;#39; (Clear browsing data when Microsoft Edge closes) policy, because they both deal with deleting data. If you enable both, the &amp;#39;ClearBrowsingDataOnExit&amp;#39; policy takes precedence and deletes all data when Microsoft Edge closes, regardless of how this policy is configured." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Enable deleting browser and download history</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable ending processes in the Browser task manager" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="If you enable or don&amp;#39;t configure this policy, users can end processes in the Browser task manager. If you disable it, users can&amp;#39;t end processes, and the End process button is disabled in the Browser task manager." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Enable ending processes in the Browser task manager</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable favorites bar" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Enables or disables the favorites bar.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users will see the favorites bar.&lt;br/&gt;&lt;br/&gt;If you disable this policy, users won&amp;#39;t see the favorites bar.&lt;br/&gt;&lt;br/&gt;If this policy is not configured, then the user can decide to use the favorites bar or not." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Enable favorites bar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable full-tab promotional content" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Control the presentation of full-tab promotional or educational content. This setting controls the presentation of welcome pages that help users sign into Microsoft Edge, choose their default browser, or learn about product features.&lt;br/&gt;&lt;br/&gt;If you enable this policy (set it true) or don&amp;#39;t configure it, Microsoft Edge can show full-tab content to users to provide product information.&lt;br/&gt;&lt;br/&gt;If you disable (set to false) this policy, Microsoft Edge can&amp;#39;t show full-tab content to users." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Enable full-tab promotional content</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable use of ephemeral profiles" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Controls whether user profiles are switched to ephemeral mode. An ephemeral profile is created when a session begins, is deleted when the session ends, and is associated with the user&amp;#39;s original profile.&lt;br/&gt;&lt;br/&gt;If you enable this policy, profiles run in ephemeral mode. This lets users work from their own devices without saving browsing data to those devices. If you enable this policy as an OS policy (by using GPO on Windows, for example), it applies to every profile on the system.&lt;br/&gt;&lt;br/&gt;If you disable this policy or don&amp;#39;t configure it, users get their regular profiles when they sign in to the browser.&lt;br/&gt;&lt;br/&gt;In ephemeral mode, profile data is saved on disk only for the length of the user session. Features like browser history, extensions and their data, web data like cookies, and web databases aren&amp;#39;t saved after the browser is closed. This doesn&amp;#39;t prevent a user from manually downloading any data to disk, or from saving pages or printing them. If the user has enabled sync, all data is preserved in their sync accounts just like with regular profiles. Users can also use InPrivate browsing in ephemeral mode unless you explicitly disable this." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Enable use of ephemeral profiles</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Notify a user that a browser restart is recommended or required for pending updates" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Notify users that they need to restart Microsoft Edge to apply a pending update.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this policy, Microsoft Edge adds a recycle icon at the far right of the top menu bar to prompt users to restart the browser to apply the update.&lt;br/&gt;&lt;br/&gt;If you enable this policy and set it to &amp;#39;Recommended&amp;#39;, a recurring warning prompts users that a restart is recommended. Users can dismiss this warning and defer the restart.&lt;br/&gt;&lt;br/&gt;If you set the policy to &amp;#39;Required&amp;#39;, a recurring warning prompts users that the browser will be restarted automatically as soon as a notification period passes. The default period is seven days. You can configure this period with the &amp;#39;RelaunchNotificationPeriod&amp;#39; (Set the time period for update notifications) policy.&lt;br/&gt;&lt;br/&gt;The user&amp;#39;s session is restored when the browser restarts.&lt;br/&gt;&lt;br/&gt;Policy options mapping:&lt;br/&gt;&lt;br/&gt;* Recommended (1) = Recommended - Show a recurring prompt to the user indicating that a restart is recommended&lt;br/&gt;&lt;br/&gt;* Required (2) = Required - Show a recurring prompt to the user indicating that a restart is required&lt;br/&gt;&lt;br/&gt;Use the preceding information when configuring this policy." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Notify a user that a browser restart is recommended or required for pending updates</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Notify a user that a browser restart is recommended or required for pending updates</td><td>Recommended - Show a recurring prompt to the user indicating that a restart is recommended</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Sites that can access audio capture devices without requesting permission" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Specify websites, based on URL patterns, that can use audio capture devices without asking the user for permission. Patterns in this list are matched against the security origin of the requesting URL. If they match, the site is automatically granted access to audio capture devices.&lt;br/&gt;&lt;br/&gt;Example value:&lt;br/&gt;&lt;br/&gt;https://www.contoso.com/&lt;br/&gt;https://[*.]contoso.edu/" gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Sites that can access audio capture devices without requesting permission</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Sites that can access video capture devices without requesting permission" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Specify websites, based on URL patterns, that can use video capture devices without asking the user for permission. Patterns in this list are matched against the security origin of the requesting URL. If they match, the site is automatically granted access to video capture devices.&lt;br/&gt;&lt;br/&gt;Example value:&lt;br/&gt;&lt;br/&gt;https://www.contoso.com/&lt;br/&gt;https://[*.]contoso.edu/" gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Sites that can access video capture devices without requesting permission</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Use built-in DNS client" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Controls whether to use the built-in DNS client.&lt;br/&gt;&lt;br/&gt;This policy controls which software stack is used to communicate with the DNS server: the operating system DNS client, or Microsoft Edge&amp;#39;s built-in DNS client. This policy does not affect which DNS servers are used: if, for example, the operating system is configured to use an enterprise DNS server, that same server would be used by the built-in DNS client. It also does not control if DNS-over-HTTPS is used; Microsoft Edge always uses the built-in resolver for DNS-over-HTTPS requests. Please see the &amp;#39;DnsOverHttpsMode&amp;#39; (Control the mode of DNS-over-HTTPS) policy for information on controlling DNS-over-HTTPS.&lt;br/&gt;&lt;br/&gt;If you enable this policy or you don&amp;#39;t configure this policy, the built-in DNS client is used.&lt;br/&gt;&lt;br/&gt;If you disable this policy, the built-in DNS client is only used when DNS-over-HTTPS is in use." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Use built-in DNS client</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Use graphics acceleration when available" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="If you enable this policy, or leave it unconfigured, graphics acceleration will be utilized if it’s available.&lt;br/&gt;If you disable this policy, turns off graphics acceleration." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Use graphics acceleration when available</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Microsoft Edge/Cast</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable Google Cast" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge/Cast" gpmc_settingDescription="Enable this policy to enable Google Cast. Users will be able to launch it from the app menu, page context menus, media controls on Cast-enabled websites, and (if shown) the Cast toolbar icon.&lt;br/&gt;&lt;br/&gt;Disable this policy to disable Google Cast.&lt;br/&gt;&lt;br/&gt;By default, Google Cast is enabled." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Enable Google Cast</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Show the cast icon in the toolbar" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge/Cast" gpmc_settingDescription="Set this policy to true to show the Cast toolbar icon on the toolbar or the overflow menu. Users won&amp;#39;t be able to remove it.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this policy or if you disable it, users can pin or remove the icon by using its contextual menu.&lt;br/&gt;&lt;br/&gt;If you&amp;#39;ve also set the &amp;#39;EnableMediaRouter&amp;#39; (Enable Google Cast) policy to false, then this policy is ignored, and the toolbar icon isn&amp;#39;t shown." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Show the cast icon in the toolbar</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Microsoft Edge/Content settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Control use of the Web Bluetooth API" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge/Content settings" gpmc_settingDescription="Control whether websites can access nearby Bluetooth devices. You can completely block access or require the site to ask the user each time it wants to access a Bluetooth device.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this policy, the default value (&amp;#39;AskWebBluetooth&amp;#39;, meaning users are asked each time) is used and users can change it.&lt;br/&gt;&lt;br/&gt;Policy options mapping:&lt;br/&gt;&lt;br/&gt;* BlockWebBluetooth (2) = Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API&lt;br/&gt;&lt;br/&gt;* AskWebBluetooth (3) = Allow sites to ask the user to grant access to a nearby Bluetooth device&lt;br/&gt;&lt;br/&gt;Use the preceding information when configuring this policy." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Control use of the Web Bluetooth API</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Control use of the Web Bluetooth API</td><td>Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Control use of the WebUSB API" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge/Content settings" gpmc_settingDescription="Set whether websites can access connected USB devices. You can completely block access or ask the user each time a website wants to get access to connected USB devices.&lt;br/&gt;&lt;br/&gt;You can override this policy for specific URL patterns by using the &amp;#39;WebUsbAskForUrls&amp;#39; (Allow WebUSB on specific sites) and &amp;#39;WebUsbBlockedForUrls&amp;#39; (Block WebUSB on specific sites) policies.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this policy, sites can ask users whether they can access the connected USB devices (&amp;#39;AskWebUsb&amp;#39;) by default, and users can change this setting.&lt;br/&gt;&lt;br/&gt;Policy options mapping:&lt;br/&gt;&lt;br/&gt;* BlockWebUsb (2) = Do not allow any site to request access to USB devices via the WebUSB API&lt;br/&gt;&lt;br/&gt;* AskWebUsb (3) = Allow sites to ask the user to grant access to a connected USB device&lt;br/&gt;&lt;br/&gt;Use the preceding information when configuring this policy." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Control use of the WebUSB API</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Control use of the WebUSB API</td><td>Do not allow any site to request access to USB devices via the WebUSB API</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Microsoft Edge/Extensions</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Control which extensions cannot be installed" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge/Extensions" gpmc_settingDescription="Lets you specify which extensions the users CANNOT install. Extensions already installed will be disabled if blocked, without a way for the user to enable them. After a disabled extension is removed from the blocklist it will automatically get re-enabled.&lt;br/&gt;&lt;br/&gt;A blocklist value of &amp;#39;*&amp;#39; means all extensions are blocked unless they are explicitly listed in the allowlist.&lt;br/&gt;&lt;br/&gt;If this policy isn&amp;#39;t set, the user can install any extension in Microsoft Edge.&lt;br/&gt;&lt;br/&gt;Example value:&lt;br/&gt;&lt;br/&gt;extension_id1&lt;br/&gt;extension_id2" gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Control which extensions cannot be installed</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td colspan="2"><table class="subtable" >
<tr><th scope="col">Extension IDs the user should be prevented from installing (or * for all)</th></tr>
<tr><td>*</td></tr>
</table></td></tr></table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Microsoft Edge/Password manager and protection</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable saving passwords to the password manager" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge/Password manager and protection" gpmc_settingDescription="Enable Microsoft Edge to save user passwords. The next time a user visits a site with a saved password, Microsoft Edge will enter the password automatically.&lt;br/&gt;&lt;br/&gt;If you enable or don&amp;#39;t configure this policy, users can save and add their passwords in Microsoft Edge.&lt;br/&gt;&lt;br/&gt;If you disable this policy, users can&amp;#39;t save and add new passwords, but they can still use previously saved passwords." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Enable saving passwords to the password manager</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Microsoft Edge/Proxy server</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Proxy settings" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge/Proxy server" gpmc_settingDescription="Configures the proxy settings for Microsoft Edge.&lt;br/&gt;&lt;br/&gt;If you enable this policy, Microsoft Edge ignores all proxy-related options specified from the command line.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this policy, users can choose their own proxy settings.&lt;br/&gt;&lt;br/&gt;This policy overrides the following individual policies:&lt;br/&gt;&lt;br/&gt;&amp;#39;ProxyMode&amp;#39; (Configure proxy server settings)&lt;br/&gt;&amp;#39;ProxyPacUrl&amp;#39; (Set the proxy .pac file URL)&lt;br/&gt;&amp;#39;ProxyServer&amp;#39; (Configure address or URL of proxy server)&lt;br/&gt;&amp;#39;ProxyBypassList&amp;#39; (Configure proxy bypass rules)&lt;br/&gt;&lt;br/&gt;Setting the &amp;#39;ProxySettings&amp;#39; (Proxy settings) policy accepts the following fields:&lt;br/&gt;  * ProxyMode, which lets you specify the proxy server used by Microsoft Edge and prevents users from changing proxy settings&lt;br/&gt;  * ProxyPacUrl, a URL to a proxy .pac file&lt;br/&gt;  * ProxyPacMandatory, a boolean flag which prevents the network stack from falling back to direct connections with invalid or unavailable PAC script&lt;br/&gt;  * ProxyServer, a URL for the proxy server&lt;br/&gt;  * ProxyBypassList, a list of proxy hosts that Microsoft Edge bypasses&lt;br/&gt;&lt;br/&gt;For ProxyMode, if you choose the value:&lt;br/&gt;  * direct, a proxy is never used and all other fields are ignored.&lt;br/&gt;  * system, the systems&amp;#39;s proxy is used and all other fields are ignored.&lt;br/&gt;  * auto_detect, all other fields are ignored.&lt;br/&gt;  * fixed_servers, the ProxyServer and ProxyBypassList fields are used.&lt;br/&gt;  * pac_script, the ProxyPacUrl, ProxyPacMandatory and ProxyBypassList fields are used.&lt;br/&gt;&lt;br/&gt;For more detailed examples go to https://go.microsoft.com/fwlink/?linkid=2094936.&lt;br/&gt;&lt;br/&gt;Example value:&lt;br/&gt;&lt;br/&gt;{&lt;br/&gt;  &amp;quot;ProxyBypassList&amp;quot;: &amp;quot;https://www.example1.com,https://www.example2.com,https://internalsite/&amp;quot;,&lt;br/&gt;  &amp;quot;ProxyMode&amp;quot;: &amp;quot;pac_script&amp;quot;,&lt;br/&gt;  &amp;quot;ProxyPacMandatory&amp;quot;: false,&lt;br/&gt;  &amp;quot;ProxyPacUrl&amp;quot;: &amp;quot;https://internal.site/example.pac&amp;quot;,&lt;br/&gt;  &amp;quot;ProxyServer&amp;quot;: &amp;quot;123.123.123.123:8080&amp;quot;&lt;br/&gt;}&lt;br/&gt;&lt;br/&gt;&lt;br/&gt;Compact example value:&lt;br/&gt;&lt;br/&gt;{&amp;quot;ProxyBypassList&amp;quot;: &amp;quot;https://www.example1.com,https://www.example2.com,https://internalsite/&amp;quot;, &amp;quot;ProxyMode&amp;quot;: &amp;quot;pac_script&amp;quot;, &amp;quot;ProxyPacMandatory&amp;quot;: false, &amp;quot;ProxyPacUrl&amp;quot;: &amp;quot;https://internal.site/example.pac&amp;quot;, &amp;quot;ProxyServer&amp;quot;: &amp;quot;123.123.123.123:8080&amp;quot;}" gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Proxy settings</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Proxy settings</td><td>system</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Mozilla/Firefox</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Password Manager" gpmc_settingPath="User Configuration/Administrative Templates/Mozilla/Firefox" gpmc_settingDescription="If this policy is disabled, the password manager is not available via preferences.&lt;br/&gt;&lt;br/&gt;If this policy is enabled or not configured, the password manager is available via preferences." gpmc_supported="Firefox 70 or later, Firefox 68.2 ESR or later">Password Manager</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Mozilla/Firefox/Clear data when browser is closed</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Active Logins" gpmc_settingPath="User Configuration/Administrative Templates/Mozilla/Firefox/Clear data when browser is closed" gpmc_settingDescription="If the policy is enabled, sessions cleared when the browser is closed.&lt;br/&gt;&lt;br/&gt;If this policy is disabled or not configured, sessions not cleared when the browser is closed." gpmc_supported="Firefox 74 or later, Firefox 68.6 ESR or later">Active Logins</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Browsing History" gpmc_settingPath="User Configuration/Administrative Templates/Mozilla/Firefox/Clear data when browser is closed" gpmc_settingDescription="If the policy is enabled, browsing history is cleared when the browser is closed.&lt;br/&gt;&lt;br/&gt;If this policy is disabled or not configured, browsing history is not cleared when the browser is closed." gpmc_supported="Firefox 74 or later, Firefox 68.6 ESR or later">Browsing History</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Cache" gpmc_settingPath="User Configuration/Administrative Templates/Mozilla/Firefox/Clear data when browser is closed" gpmc_settingDescription="If the policy is enabled, the cache is cleared when the browser is closed.&lt;br/&gt;&lt;br/&gt;If this policy is disabled or not configured, the cache is not cleared when the browser is closed." gpmc_supported="Firefox 74 or later, Firefox 68.6 ESR or later">Cache</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Cookies" gpmc_settingPath="User Configuration/Administrative Templates/Mozilla/Firefox/Clear data when browser is closed" gpmc_settingDescription="If the policy is enabled, cookies are cleared when the browser is closed.&lt;br/&gt;&lt;br/&gt;If this policy is disabled or not configured, cookies are not cleared when the browser is closed." gpmc_supported="Firefox 74 or later, Firefox 68.6 ESR or later">Cookies</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Download History" gpmc_settingPath="User Configuration/Administrative Templates/Mozilla/Firefox/Clear data when browser is closed" gpmc_settingDescription="If the policy is enabled, download history is cleared when the browser is closed.&lt;br/&gt;&lt;br/&gt;If this policy is disabled or not configured, download history is not cleared when the browser is closed." gpmc_supported="Firefox 74 or later, Firefox 68.6 ESR or later">Download History</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Form &amp;amp; Search History" gpmc_settingPath="User Configuration/Administrative Templates/Mozilla/Firefox/Clear data when browser is closed" gpmc_settingDescription="If the policy is enabled, form data is cleared when the browser is closed.&lt;br/&gt;&lt;br/&gt;If this policy is disabled or not configured, form data is not cleared when the browser is closed." gpmc_supported="Firefox 74 or later, Firefox 68.6 ESR or later">Form &amp; Search History</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Locked" gpmc_settingPath="User Configuration/Administrative Templates/Mozilla/Firefox/Clear data when browser is closed" gpmc_settingDescription="If this policy is disabled, all shutdown preferences can be changed by the user.&lt;br/&gt;&lt;br/&gt;If this policy is enabled, any shutdown preferences explicitly set via policy cannot be changed by the user.&lt;br/&gt;&lt;br/&gt;If this policy is not configured, no shutdown preferences can be changed by the user (previous behavior)." gpmc_supported="Firefox 74 or later, Firefox 68.6 ESR or later">Locked</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Offline Website Data" gpmc_settingPath="User Configuration/Administrative Templates/Mozilla/Firefox/Clear data when browser is closed" gpmc_settingDescription="If the policy is enabled, offline application storage is cleared when the browser is closed.&lt;br/&gt;&lt;br/&gt;If this policy is disabled or not configured, offline application storage is not cleared when the browser is closed." gpmc_supported="Firefox 74 or later, Firefox 68.6 ESR or later">Offline Website Data</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Site Preferences" gpmc_settingPath="User Configuration/Administrative Templates/Mozilla/Firefox/Clear data when browser is closed" gpmc_settingDescription="If the policy is enabled, site preferences are cleared when the browser is closed.&lt;br/&gt;&lt;br/&gt;If this policy is disabled or not configured, site preferences are not cleared when the browser is closed." gpmc_supported="Firefox 74 or later, Firefox 68.6 ESR or later">Site Preferences</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Start Menu and Taskbar</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Add Search Internet link to Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="&lt;br/&gt;If you enable this policy, a &amp;quot;Search the Internet&amp;quot; link is shown when the user performs a search in the start menu search box.  This button launches the default browser with the search terms.&lt;br/&gt;&lt;br/&gt;If you disable this policy, there will not be a &amp;quot;Search the Internet&amp;quot; link when the user performs a search in the start menu search box.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy (default), there will not be a &amp;quot;Search the Internet&amp;quot; link on the start menu." gpmc_supported="Windows Server 2008 R2 and Windows 7">Add Search Internet link to Start Menu</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Add the Run command to the Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this setting, the Run command is added to the Start menu.  If you disable or do not configure this setting, the Run command is not visible on the Start menu by default, but it can be added from the Taskbar and Start menu properties. If the Remove Run link from Start Menu policy is set, the Add the Run command to the Start menu policy has no effect." gpmc_supported="Windows Server 2008, Windows 7, and Windows Vista">Add the Run command to the Start Menu</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Change Start Menu power button" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Set the default action of the power button on the Start menu.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Start Menu will set the power button to the chosen action, and not let the user change this action.&lt;br/&gt;&lt;br/&gt;If you set the button to either Sleep or Hibernate, and that state is not supported on a computer, then the button will fall back to Shut Down.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Start Menu power button will be set to Shut Down by default, and the user can change this setting to another action." gpmc_supported="Windows Server 2008 R2 and Windows 7">Change Start Menu power button</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Choose one of the following actions</td><td>Shut Down</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Clear history of recently opened documents on exit" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Clear history of recently opened documents on exit.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system deletes shortcuts to recently used document files when the user logs off. As a result, the Recent Items menu on the Start menu is always empty when the user logs on. In addition, recently and frequently used items in the Jump Lists off of programs in the Start Menu and Taskbar will be cleared when the user logs off.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the system retains document shortcuts, and when a user logs on, the Recent Items menu and the Jump Lists appear just as it did when the user logged off.&lt;br/&gt;&lt;br/&gt;Note: The system saves document shortcuts in the user profile in the System-drive\Users\User-name\Recent folder.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Remove Recent Items menu from Start Menu&amp;quot; and &amp;quot;Do not keep history of recently opened documents&amp;quot; policies in this folder. The system only uses this setting when neither of these related settings are selected.&lt;br/&gt;&lt;br/&gt;This setting does not clear the list of recent files that Windows programs display at the bottom of the File menu. See the &amp;quot;Do not keep history of recently opened documents&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;This policy setting also does not hide document shortcuts displayed in the Open dialog box. See the &amp;quot;Hide the dropdown list of recent files&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;This policy also does not clear items that the user may have pinned to the Jump Lists, or Tasks that the application has provided for their menu. See the &amp;quot;Do not allow pinning items in Jump Lists&amp;quot; setting." gpmc_supported="At least Windows 2000">Clear history of recently opened documents on exit</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Clear the recent programs list for new users" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy setting, the recent programs list in the start menu will be blank for each new user.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, the start menu recent programs list will be pre-populated with programs for each new user." gpmc_supported="Windows Server 2008, Windows 7, Windows Vista, and Windows 10">Clear the recent programs list for new users</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Clear tile notifications during log on" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this setting, the system deletes tile notifications when the user logs on. As a result, the Tiles in the start view will always show their default content when the user logs on. In addition, any cached versions of these notifications will be cleared when the user logs on.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the system retains notifications, and when a user logs on, the tiles appear just as they did when the user logged off, including the history of previous notifications for each tile.&lt;br/&gt;&lt;br/&gt;This setting does not prevent new notifications from appearing. See the &amp;quot;Turn off Application Notifications&amp;quot; setting to prevent new notifications." gpmc_supported="At least Windows Server 2012, Windows 8 or Windows RT">Clear tile notifications during log on</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable context menus in the Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy allows you to prevent users from being able to open context menus in the Start Menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy, then invocations of context menus within the Start Menu will be ignored." gpmc_supported="At least Windows Server 2016, Windows 10 Version 1803">Disable context menus in the Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not allow pinning items in Jump Lists" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to control pinning items in Jump Lists.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users cannot pin files, folders, websites, or other items to their Jump Lists in the Start Menu and Taskbar. Users also cannot unpin existing items pinned to their Jump Lists. Existing items already pinned to their Jump Lists will continue to show.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can pin files, folders, websites, and other items to a program&amp;#39;s Jump List so that the items is always present in this menu.&lt;br/&gt;" gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Do not allow pinning items in Jump Lists</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not allow pinning programs to the Taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to control pinning programs to the Taskbar.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users cannot change the programs currently pinned to the Taskbar. If any programs are already pinned to the Taskbar, these programs continue to show in the Taskbar. However, users cannot unpin these programs already pinned to the Taskbar, and they cannot pin new programs to the Taskbar.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can change the programs currently pinned to the Taskbar." gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Do not allow pinning programs to the Taskbar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not allow pinning Store app to the Taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="&lt;br/&gt;This policy setting allows you to control pinning the Store app to the Taskbar.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users cannot pin the Store app to the Taskbar. If the Store app is already pinned to the Taskbar, it will be removed from the Taskbar on next login.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can pin the Store app to the Taskbar." gpmc_supported="At least Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1">Do not allow pinning Store app to the Taskbar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not display or track items in Jump Lists from remote locations" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to control displaying or tracking items in Jump Lists from remote locations.&lt;br/&gt;&lt;br/&gt;The Start Menu and Taskbar display Jump Lists off of programs. These menus include files, folders, websites and other relevant items for that program. This helps users more easily reopen their most important documents and other tasks.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Start Menu and Taskbar only track the files that the user opens locally on this computer. Files that the user opens over the network from remote computers are not tracked or shown in the Jump Lists. Use this setting to reduce network traffic, particularly over slow network connections.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, all files that the user opens appear in the menus, including files located remotely on another computer.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent Windows from displaying remote files that the user has explicitly pinned to the Jump Lists. See the &amp;quot;&amp;quot;Do not allow pinning items in Jump Lists&amp;quot;&amp;quot; policy setting." gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Do not display or track items in Jump Lists from remote locations</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not keep history of recently opened documents" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Prevents the operating system and installed programs from creating and displaying shortcuts to recently opened documents.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system and Windows programs do not create shortcuts to documents opened while the setting is in effect. Also, they retain but do not display existing document shortcuts. The system empties the Recent Items menu on the Start menu, and Windows programs do not display shortcuts at the bottom of the File menu. In addition, the Jump Lists off of programs in the Start Menu and Taskbar do not show lists of recently or frequently used files, folders, or websites.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the system will store and display shortcuts to recently and frequently used files, folders, and websites.&lt;br/&gt;&lt;br/&gt;Note: The system saves document shortcuts in the user profile in the System-drive\Users\User-name\Recent folder.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Remove Recent Items menu from Start Menu&amp;quot; and &amp;quot;Clear history of recently opened documents on exit&amp;quot; policies in this folder.&lt;br/&gt;&lt;br/&gt;If you enable this setting but do not enable the &amp;quot;Remove Recent Items menu from Start Menu&amp;quot; setting, the Recent Items menu appears on the Start menu, but it is empty.&lt;br/&gt;&lt;br/&gt;If you enable this setting, but then later disable it or set it to Not Configured, the document shortcuts saved before the setting was enabled reappear in the Recent Items menu and program File menus, and Jump Lists.&lt;br/&gt;&lt;br/&gt;This setting does not hide or prevent the user from pinning files, folders, or websites to the Jump Lists. See the &amp;quot;Do not allow pinning items in Jump Lists&amp;quot; setting. This policy also does not hide Tasks that the application has provided for their Jump List. This setting does not hide document shortcuts displayed in the Open dialog box. See the &amp;quot;Hide the dropdown list of recent files&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Note: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="At least Windows 2000">Do not keep history of recently opened documents</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not search communications" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy the start menu search box will not search for communications.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, the start menu will search for communications, unless the user chooses not to in the start menu control panel." gpmc_supported="Windows Server 2008, Windows 7, and Windows Vista">Do not search communications</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not search for files" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy setting the Start menu search box will not search for files.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Start menu will search for files, unless the user chooses not to do so directly in Control Panel.  If you enable this policy, a &amp;quot;See more results&amp;quot; / &amp;quot;Search Everywhere&amp;quot; link will not be shown when the user performs a search in the start menu search box." gpmc_supported="Windows Server 2008, Windows 7, and Windows Vista">Do not search for files</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not search Internet" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy the start menu search box will not search for internet history or favorites.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, the start menu will search for for internet history or favorites, unless the user chooses not to in the start menu control panel." gpmc_supported="Windows Server 2008 and Windows Vista">Do not search Internet</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not search programs and Control Panel items" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy setting the Start menu search box will not search for programs or Control Panel items.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Start menu search box will search for programs and Control Panel items, unless the user chooses not to do so directly in Control Panel." gpmc_supported="Windows Server 2008, Windows 7, and Windows Vista">Do not search programs and Control Panel items</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not use the search-based method when resolving shell shortcuts" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting prevents the system from conducting a comprehensive search of the target drive to resolve a shortcut.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the system does not conduct the final drive search. It just displays a message explaining that the file is not found.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, by default, when the system cannot find the target file for a shortcut (.lnk), it searches all paths associated with the shortcut. If the target file is located on an NTFS partition, the system then uses the target&amp;#39;s file ID to find a path. If the resulting path is not correct, it conducts a comprehensive search of the target drive in an attempt to find the file.&lt;br/&gt;&lt;br/&gt;Note: This policy setting only applies to target files on NTFS partitions. FAT partitions do not have this ID tracking and search capability.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Do not track Shell shortcuts during roaming&amp;quot; and the &amp;quot;Do not use the tracking-based method when resolving shell shortcuts&amp;quot; policy settings." gpmc_supported="At least Windows 2000">Do not use the search-based method when resolving shell shortcuts</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not use the tracking-based method when resolving shell shortcuts" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting prevents the system from using NTFS tracking features to resolve a shortcut.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the system does not try to locate the file by using its file ID. It skips this step and begins a comprehensive search of the drive specified in the target path.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, by default, when the system cannot find the target file for a shortcut (.lnk), it searches all paths associated with the shortcut. If the target file is located on an NTFS partition, the system then uses the target&amp;#39;s file ID to find a path. If the resulting path is not correct, it conducts a comprehensive search of the target drive in an attempt to find the file.&lt;br/&gt;&lt;br/&gt;Note: This policy setting only applies to target files on NTFS partitions. FAT partitions do not have this ID tracking and search capability.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Do not track Shell shortcuts during roaming&amp;quot; and the &amp;quot;Do not use the search-based method when resolving shell shortcuts&amp;quot; policy settings." gpmc_supported="At least Windows 2000">Do not use the tracking-based method when resolving shell shortcuts</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Force classic Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This setting affects the presentation of the Start menu.&lt;br/&gt;&lt;br/&gt;The classic Start menu in Windows 2000 Professional allows users to begin common tasks, while the new Start menu consolidates common items onto one menu. When the classic Start menu is used, the following icons are placed on the desktop: Documents, Pictures, Music, Computer, and Network. The new Start menu starts them directly.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Start menu displays the classic Start menu in the Windows 2000 style and displays the standard desktop icons.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the Start menu only displays in the new style, meaning the desktop icons are now on the Start page.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, the default is the new style, and the user can change the view." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows Vista, and Windows XP">Force classic Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Go to the desktop instead of Start when signing in" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows users to go to the desktop instead of the Start screen when they sign in.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users will always go to the desktop when they sign in.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, users will always go to the Start screen when they sign in.&lt;br/&gt;&lt;br/&gt;If you don’t configure this policy setting, the default setting for the user’s device will be used, and the user can choose to change it." gpmc_supported="Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1 only">Go to the desktop instead of Start when signing in</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Gray unavailable Windows Installer programs Start Menu shortcuts" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Displays Start menu shortcuts to partially installed programs in gray text.&lt;br/&gt;&lt;br/&gt;This setting makes it easier for users to distinguish between programs that are fully installed and those that are only partially installed.&lt;br/&gt;&lt;br/&gt;Partially installed programs include those that a system administrator assigns using Windows Installer and those that users have configured for full installation upon first use.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, all Start menu shortcuts appear as black text.&lt;br/&gt;&lt;br/&gt;Note: Enabling this setting can make the Start menu slow to open." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, and Windows 2000">Gray unavailable Windows Installer programs Start Menu shortcuts</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Lock all taskbar settings" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to lock all taskbar settings.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user cannot access the taskbar control panel. The user is also unable to resize, move or rearrange toolbars on their taskbar.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the user will be able to set any taskbar setting that is not prevented by another policy setting." gpmc_supported="At least Windows Vista">Lock all taskbar settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Pin Apps to Start when installed" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows pinning apps to Start by default, when they are included by AppID on the list." gpmc_supported="Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1 only">Pin Apps to Start when installed</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changes to Taskbar and Start Menu Settings" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to prevent changes to Taskbar and Start Menu Settings.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, The user will be prevented from opening the Taskbar Properties dialog box.&lt;br/&gt;&lt;br/&gt;If the user right-clicks the taskbar and then clicks Properties, a message appears explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Taskbar and Start Menu items are available from Settings on the Start menu." gpmc_supported="At least Windows 2000">Prevent changes to Taskbar and Start Menu Settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent users from adding or removing toolbars" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to prevent users from adding or removing toolbars.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user is not allowed to add or remove any toolbars to the taskbar. Applications are not able to add toolbars either.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the users and applications are able to add toolbars to the taskbar." gpmc_supported="At least Windows Vista">Prevent users from adding or removing toolbars</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent users from customizing their Start Screen" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to prevent users from changing their Start screen layout.&lt;br/&gt;&lt;br/&gt;If you enable this setting, you will prevent a user from selecting an app, resizing a tile, pinning/unpinning a tile or a secondary tile, entering the customize mode and rearranging tiles within Start and Apps.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, you will allow a user to select an app, resize a tile, pin/unpin a tile or a secondary tile, enter the customize mode and rearrange tiles within Start and Apps." gpmc_supported="At least Windows 2000">Prevent users from customizing their Start Screen</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent users from rearranging toolbars" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to prevent users from rearranging toolbars.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users are not able to drag or drop toolbars to the taskbar.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users are able to rearrange the toolbars on the taskbar." gpmc_supported="At least Windows Vista">Prevent users from rearranging toolbars</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent users from uninstalling applications from Start" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this setting, users cannot uninstall apps from Start.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, users can access the uninstall command from Start" gpmc_supported="At least Windows Server 2012, Windows 8 or Windows RT">Prevent users from uninstalling applications from Start</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove &amp;quot;Recently added&amp;quot; list from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy allows you to prevent the Start Menu from displaying a list of recently installed applications.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Start Menu will no longer display the &amp;quot;Recently added&amp;quot; list.  The corresponding setting will also be disabled in Settings." gpmc_supported="At least Windows Server 2016, Windows 10 Version 1803">Remove &quot;Recently added&quot; list from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove access to the context menus for the taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove access to the context menus for the taskbar.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the menus that appear when you right-click the taskbar and items on the taskbar are hidden, such as the Start button, the clock, and the taskbar buttons.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the context menus for the taskbar are available.&lt;br/&gt;&lt;br/&gt;This policy setting does not prevent users from using other methods to issue the commands that appear on these menus." gpmc_supported="At least Windows 2000">Remove access to the context menus for the taskbar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove All Programs list from the Start menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this setting, the Start Menu will either collapse or remove the all apps list from the Start menu.&lt;br/&gt;&lt;br/&gt;Selecting &amp;quot;Collapse&amp;quot; will not display the app list next to the pinned tiles in Start. An &amp;quot;All apps&amp;quot; button will be displayed on Start to open the all apps list. This is equivalent to setting the &amp;quot;Show app list in Start&amp;quot; in Settings to Off.&lt;br/&gt;&lt;br/&gt;Selecting &amp;quot;Collapse and disable setting&amp;quot; will do the same as the collapse option and disable the &amp;quot;Show app list in Start menu&amp;quot; in Settings, so users cannot turn it to On.&lt;br/&gt;&lt;br/&gt;Selecting &amp;quot;Remove and disable setting&amp;quot; will remove the all apps list from Start and disable the &amp;quot;Show app list in Start menu&amp;quot; in Settings, so users cannot turn it to On. Select this option for compatibility with earlier versions of Windows.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the all apps list will be visible by default, and the user can change &amp;quot;Show app list in Start&amp;quot; in Settings." gpmc_supported="At least Windows Server 2016, Windows 10">Remove All Programs list from the Start menu</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Choose one of the following actions</td><td>Remove and disable setting</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Balloon Tips on Start Menu items" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Hides pop-up text on the Start menu and in the notification area.&lt;br/&gt;&lt;br/&gt;When you hold the cursor over an item on the Start menu or in the notification area, the system displays pop-up text providing additional information about the object.&lt;br/&gt;&lt;br/&gt;If you enable this setting, some of this pop-up text is not displayed. The pop-up text affected by this setting includes &amp;quot;Click here to begin&amp;quot; on the Start button, &amp;quot;Where have all my programs gone&amp;quot; on the Start menu, and &amp;quot;Where have my icons gone&amp;quot; in the notification area.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, all pop-up text is displayed on the Start menu and in the notification area." gpmc_supported="Windows Server 2003 and Windows XP only">Remove Balloon Tips on Start Menu items</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove common program groups from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes items in the All Users profile from the Programs menu on the Start menu.&lt;br/&gt;&lt;br/&gt;By default, the Programs menu contains items from the All Users profile and items from the user&amp;#39;s profile. If you enable this setting, only items in the user&amp;#39;s profile appear in the Programs menu.&lt;br/&gt;&lt;br/&gt;Tip: To see the Program menu items in the All Users profile, on the system drive, go to ProgramData\Microsoft\Windows\Start Menu\Programs." gpmc_supported="At least Windows 2000">Remove common program groups from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Default Programs link from the Start menu." gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Default Programs link from the Start menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Default Programs link is removed from the Start menu.&lt;br/&gt;&lt;br/&gt;Clicking the Default Programs link from the Start menu opens the Default Programs control panel and provides administrators the ability to specify default programs for certain activities, such as Web browsing or sending e-mail, as well as which programs are accessible from the Start menu, desktop, and other locations.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Default Programs link is available from the Start menu.&lt;br/&gt;&lt;br/&gt;Note: This policy setting does not prevent the Set Default Programs for This Computer option from appearing in the Default Programs control panel." gpmc_supported="Windows Server 2012 R2, Windows 8.1, Windows RT 8.1, Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP Professional Service Pack 1 and Windows 2000 Service Pack 3">Remove Default Programs link from the Start menu.</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Documents icon from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Documents icon from the Start menu and its submenus.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Documents icon is removed from the Start menu and its submenus. Enabling this policy setting only removes the icon. It does not prevent the user from using other methods to gain access to the contents of the Documents folder.&lt;br/&gt;&lt;br/&gt;Note: To make changes to this policy setting effective, you must log off and then log on.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, he Documents icon is available from the Start menu.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Remove Documents icon on the desktop&amp;quot; policy setting." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, and Windows 2000">Remove Documents icon from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Downloads link from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Downloads link from the Start Menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Start Menu does not show a link to the Downloads folder.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Downloads link is available from the Start Menu." gpmc_supported="Windows Server 2008 R2 and Windows 7">Remove Downloads link from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Favorites menu from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Prevents users from adding the Favorites menu to the Start menu or classic Start menu.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Display Favorites item does not appear in the Advanced Start menu options box.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Display Favorite item is available.&lt;br/&gt;&lt;br/&gt;Note:The Favorities menu does not appear on the Start menu by default. To display the Favorites menu, right-click Start, click Properties, and then click Customize.  If you are using Start menu, click the Advanced tab, and then, under Start menu items, click the Favorites menu. If you are using the classic Start menu, click Display Favorites under Advanced Start menu options.&lt;br/&gt;&lt;br/&gt;Note:The items that appear in the Favorites menu when you install Windows are preconfigured by the system to appeal to most users. However, users can add and remove items from this menu, and system administrators can create a customized Favorites menu for a user group.&lt;br/&gt;&lt;br/&gt;Note:This setting only affects the Start menu. The Favorites item still appears in File Explorer and in Internet Explorer." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, and Windows 2000">Remove Favorites menu from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove frequent programs list from the Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this setting, the frequently used programs list is removed from the Start menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the frequently used programs list remains on the simple Start menu." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, and Windows 10">Remove frequent programs list from the Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Games link from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy the start menu will not show a link to the Games folder.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, the start menu will show a link to the Games folder, unless the user chooses to remove it in the start menu control panel." gpmc_supported="Windows Server 2008, Windows 7, and Windows Vista">Remove Games link from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Help menu from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Help command from the Start menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Help command is removed from the Start menu.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Help command is available from the Start menu.&lt;br/&gt;&lt;br/&gt;This policy setting only affects the Start menu. It does not remove the Help menu from File Explorer and does not prevent users from running Help." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, and Windows 2000">Remove Help menu from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Homegroup link from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy the Start menu will not show a link to Homegroup. It also removes the homegroup item from the Start Menu options. As a result, users cannot add the homegroup link to the Start Menu.&lt;br/&gt;&lt;br/&gt;      If you disable or do not configure this policy, users can use the Start Menu options to add or remove the homegroup link from the Start Menu." gpmc_supported="Windows Server 2008 R2 and Windows 7">Remove Homegroup link from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove links and access to Windows Update" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove links and access to Windows Update.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users are prevented from connecting to the Windows Update Web site.&lt;br/&gt;&lt;br/&gt;Enabling this policy setting blocks user access to the Windows Update Web site at http://windowsupdate.microsoft.com. Also, the policy setting removes the Windows Update hyperlink from the Start menu and from the Tools menu in Internet Explorer.&lt;br/&gt;&lt;br/&gt;Windows Update, the online extension of Windows, offers software updates to keep a user’s system up-to-date. The Windows Update Product Catalog determines any system files, security fixes, and Microsoft updates that users need and shows the newest versions available for download.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Windows Update hyperlink is available from the Start menu and from the Tools menu in Internet Explorer.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Hide the &amp;quot;Add programs from Microsoft&amp;quot; option&amp;quot; policy setting." gpmc_supported="At least Windows 2000 through Windows 8.1 or Windows Server 2012 R2">Remove links and access to Windows Update</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Music icon from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Music icon from Start Menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Music icon is no longer available from Start Menu.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Music icon is available from Start Menu." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, and Windows XP">Remove Music icon from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Network Connections from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove Network Connections from the Start Menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users are prevented from running Network Connections.&lt;br/&gt;&lt;br/&gt;Enabling this policy setting prevents the Network Connections folder from opening. This policy setting also removes Network Connections from Settings on the Start menu.&lt;br/&gt;&lt;br/&gt;Network Connections still appears in Control Panel and in File Explorer, but if users try to start it, a message appears explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Network Connections is available from the Start Menu.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Disable programs on Settings menu&amp;quot; and &amp;quot;Disable Control Panel&amp;quot; policy settings and the policy settings in the Network Connections folder (Computer Configuration and User Configuration\Administrative Templates\Network\Network Connections)." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows Vista, Windows XP, and Windows 2000">Remove Network Connections from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Network icon from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Network icon from Start Menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Network icon is no longer available from Start Menu.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Network icon is available from Start Menu." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, and Windows XP">Remove Network icon from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Notifications and Action Center" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting removes Notifications and Action Center from the notification area on the taskbar.&lt;br/&gt;&lt;br/&gt;The notification area is located at the far right end of the taskbar and includes icons for current notifications and the system clock.&lt;br/&gt;&lt;br/&gt;If this setting is enabled, Notifications and Action Center is not displayed in the notification area. The user will be able to read notifications when they appear, but they won’t be able to review any notifications they miss.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Notification and Security and Maintenance will be displayed on the taskbar.&lt;br/&gt;&lt;br/&gt;A reboot is required for this policy setting to take effect." gpmc_supported="At least Windows Server 2016, Windows 10">Remove Notifications and Action Center</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Pictures icon from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Pictures icon from Start Menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Pictures icon is no longer available from Start Menu.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Pictures icon is available from Start Menu." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, and Windows XP">Remove Pictures icon from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove pinned programs from the Taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove pinned programs from the taskbar.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, pinned programs are prevented from being shown on the Taskbar. Users cannot pin programs to the Taskbar.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can pin programs so that the program shortcuts stay on the Taskbar." gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Remove pinned programs from the Taskbar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove pinned programs list from the Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this setting, the &amp;quot;Pinned Programs&amp;quot; list is removed from the Start menu. Users cannot pin programs to the Start menu.&lt;br/&gt;&lt;br/&gt;In Windows XP and Windows Vista, the Internet and email checkboxes are removed from the &amp;#39;Customize Start Menu&amp;#39; dialog.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the &amp;quot;Pinned Programs&amp;quot; list remains on the Start menu. Users can pin and unpin programs in the Start Menu." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, and Windows XP">Remove pinned programs list from the Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove programs on Settings menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove programs on Settings menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Control Panel, Printers, and Network and Connection folders are removed from Settings on the Start menu, and from Computer and File Explorer. It also prevents the programs represented by these folders (such as Control.exe) from running.&lt;br/&gt;&lt;br/&gt;However, users can still start Control Panel items by using other methods, such as right-clicking the desktop to start Display or right-clicking Computer to start System.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Control Panel, Printers, and Network and Connection folders from Settings are available on the Start menu, and from Computer and File Explorer.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Disable Control Panel,&amp;quot; &amp;quot;Disable Display in Control Panel,&amp;quot; and &amp;quot;Remove Network Connections from Start Menu&amp;quot; policy settings." gpmc_supported="Windows Server 2012 R2, Windows 8.1, Windows RT 8.1, Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, and Windows 2000">Remove programs on Settings menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Recent Items menu from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes the Recent Items menu from the Start menu.  Removes the Documents menu from the classic Start menu.&lt;br/&gt;&lt;br/&gt;The Recent Items menu contains links to the non-program files that users have most recently opened. It appears so that users can easily reopen their documents.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system saves document shortcuts but does not display the Recent Items menu in the Start Menu, and users cannot turn the menu on.&lt;br/&gt;&lt;br/&gt;If you later disable the setting, so that the Recent Items menu appears in the Start Menu, the document shortcuts saved before the setting was enabled and while it was in effect appear in the Recent Items menu.&lt;br/&gt;&lt;br/&gt;When the setting is disabled, the Recent Items menu appears in the Start Menu, and users cannot remove it.&lt;br/&gt;&lt;br/&gt;If the setting is not configured, users can turn the Recent Items menu on and off.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent Windows programs from displaying shortcuts to recently opened documents. See the &amp;quot;Do not keep history of recently opened documents&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;This setting also does not hide document shortcuts displayed in the Open dialog box. See the &amp;quot;Hide the dropdown list of recent files&amp;quot; setting." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, and Windows 2000">Remove Recent Items menu from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Recorded TV link from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Recorded TV link from the Start Menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Start Menu does not show a link to the Recorded TV library.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Recorded TV link is available from the Start Menu." gpmc_supported="Windows Server 2008 R2 and Windows 7">Remove Recorded TV link from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Run menu from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Allows you to remove the Run command from the Start menu, Internet Explorer, and Task Manager.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the following changes occur:&lt;br/&gt;&lt;br/&gt;(1) The Run command is removed from the Start menu.&lt;br/&gt;&lt;br/&gt;(2) The New Task (Run) command is removed from Task Manager.&lt;br/&gt;&lt;br/&gt;(3) The user will be blocked from entering the following into the Internet Explorer Address Bar:&lt;br/&gt;&lt;br/&gt;--- A UNC path: \\&amp;lt;server&amp;gt;\&amp;lt;share&amp;gt;&lt;br/&gt;&lt;br/&gt;---Accessing local drives:  e.g., C:&lt;br/&gt;&lt;br/&gt;--- Accessing local folders: e.g., \temp&amp;gt;&lt;br/&gt;&lt;br/&gt;Also, users with extended keyboards will no longer be able to display the Run dialog box by pressing the Application key (the key with the Windows logo) + R.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, users will be able to access the Run command in the Start menu and in Task Manager and use the Internet Explorer Address Bar.&lt;br/&gt;&lt;br/&gt;&lt;br/&gt;&lt;br/&gt;Note:This setting affects the specified interface only. It does not prevent users from using other methods to run programs.&lt;br/&gt;&lt;br/&gt;Note: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="Windows Server 2012 R2, Windows 8.1, Windows RT 8.1, Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, and Windows 2000">Remove Run menu from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Search Computer link" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy, the &amp;quot;See all results&amp;quot; link will not be shown when the user performs a search in the start menu search box.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, the &amp;quot;See all results&amp;quot; link will be shown when the user performs a search in the start menu search box." gpmc_supported="Windows Vista only">Remove Search Computer link</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Search link from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Search link from the Start menu, and disables some File Explorer search elements.  Note that this does not remove the search box from the new style Start menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Search item is removed from the Start menu and from the context menu that appears when you right-click the Start menu. Also, the system does not respond when users press the Application key (the key with the Windows logo)+ F.&lt;br/&gt;&lt;br/&gt;Note: Enabling this policy setting also prevents the user from using the F3 key.&lt;br/&gt;&lt;br/&gt;In File Explorer, the Search item still appears on the Standard buttons toolbar, but the system does not respond when the user presses Ctrl+F. Also, Search does not appear in the context menu when you right-click an icon representing a drive or a folder.&lt;br/&gt;&lt;br/&gt;This policy setting affects the specified user interface elements only. It does not affect Internet Explorer and does not prevent the user from using other methods to search.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Search link is available from the Start menu." gpmc_supported="Windows Server 2003 and Windows XP only">Remove Search link from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove See More Results / Search Everywhere link" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="&lt;br/&gt;          If you enable this policy, a &amp;quot;See more results&amp;quot; / &amp;quot;Search Everywhere&amp;quot; link will not be shown when the user performs a search in the start menu search box.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, a &amp;quot;See more results&amp;quot; link will be shown when the user performs a search in the start menu search box.  If a 3rd party protocol handler is installed, a &amp;quot;Search Everywhere&amp;quot; link will be shown instead of the &amp;quot;See more results&amp;quot; link." gpmc_supported="At least Windows Server 2008 R2 or Windows 7. Not supported on Windows 10 or later">Remove See More Results / Search Everywhere link</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove the &amp;quot;Undock PC&amp;quot; button from the Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this setting, the &amp;quot;Undock PC&amp;quot; button is removed from the simple Start Menu, and your PC cannot be undocked.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the &amp;quot;Undock PC&amp;quot; button remains on the simple Start menu, and your PC can be undocked." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, and Windows XP">Remove the &quot;Undock PC&quot; button from the Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove the Meet Now icon" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Meet Now icon from the system control area.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Meet Now icon is not displayed in the system notification area.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Meet Now icon is displayed in the system notification area." gpmc_supported="At least Windows Server 2016, Windows 10">Remove the Meet Now icon</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove the People Bar from the taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy allows you to remove the People Bar from the taskbar and disables the My People experience.&lt;br/&gt;&lt;br/&gt;If you enable this policy the people icon will be removed from the taskbar, the corresponding settings toggle is removed from the taskbar settings page, and users will not be able to pin people to the taskbar." gpmc_supported="At least Windows Server 2016, Windows 10 Version 1703">Remove the People Bar from the taskbar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove the Security and Maintenance icon" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove Security and Maintenance from the system control area.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Security and Maintenance icon is not displayed in the system notification area.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Security and Maintenance icon is displayed in the system notification area." gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Remove the Security and Maintenance icon</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove user folder link from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy the start menu will not show a link to the user&amp;#39;s storage folder.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, the start menu will display a link, unless the user chooses to remove it in the start menu control panel." gpmc_supported="Windows Server 2008, Windows 7, and Windows Vista">Remove user folder link from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove user&amp;#39;s folders from the Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Hides all folders on the user-specific (top) section of the Start menu. Other items appear, but folders are hidden.&lt;br/&gt;&lt;br/&gt;This setting is designed for use with redirected folders. Redirected folders appear on the main (bottom) section of the Start menu. However, the original, user-specific version of the folder still appears on the top section of the Start menu. Because the appearance of two folders with the same name might confuse users, you can use this setting to hide user-specific folders.&lt;br/&gt;&lt;br/&gt;Note that this setting hides all user-specific folders, not just those associated with redirected folders.&lt;br/&gt;&lt;br/&gt;If you enable this setting, no folders appear on the top section of the Start menu. If users add folders to the Start Menu directory in their user profiles, the folders appear in the directory but not on the Start menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configured it, Windows 2000 Professional and Windows XP Professional display folders on both sections of the Start menu." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, Windows 2000, and Windows 10">Remove user&#39;s folders from the Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Videos link from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Videos link from the Start Menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Start Menu does not show a link to the Videos library.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Videos link is available from the Start Menu." gpmc_supported="Windows Server 2008 R2 and Windows 7">Remove Videos link from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Search just apps from the Apps view" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting prevents the user from searching apps, files, settings (and the web if enabled) when the user searches from the Apps view.&lt;br/&gt;&lt;br/&gt;This policy setting is only applied when the Apps view is set as the default view for Start.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, searching from the Apps view will only search the list of installed apps.&lt;br/&gt;&lt;br/&gt;If you disable or don’t configure this policy setting, the user can configure this setting." gpmc_supported="Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1 only">Search just apps from the Apps view</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Show or hide &amp;quot;Most used&amp;quot; list from Start menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy setting, you can configure Start menu to show or hide the list of user&amp;#39;s most used apps, regardless of user settings.&lt;br/&gt;&lt;br/&gt;Selecting &amp;quot;Show&amp;quot; will force the &amp;quot;Most used&amp;quot; list to be shown, and user cannot change to hide it using the Settings app.&lt;br/&gt;&lt;br/&gt;Selecting &amp;quot;Hide&amp;quot; will force the &amp;quot;Most used&amp;quot; list to be hidden, and user cannot change to show it using the Settings app.&lt;br/&gt;&lt;br/&gt;Selecting &amp;quot;Not Configured&amp;quot;, or if you disable or do not configure this policy setting, all will allow users to turn on or off the display of &amp;quot;Most used&amp;quot; list using the Settings app. This is default behavior.&lt;br/&gt;&lt;br/&gt;Note: configuring this policy to &amp;quot;Show&amp;quot; or &amp;quot;Hide&amp;quot; on supported versions of Windows 10 will supercede any policy setting of &amp;quot;Remove frequent programs list from the Start Menu&amp;quot; (which manages same part of Start menu but with fewer options)." gpmc_supported="At least Windows Server 2016, Windows 10 Version 2106">Show or hide &quot;Most used&quot; list from Start menu</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Choose one of the following actions</td><td>Hide</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Show QuickLaunch on Taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting controls whether the QuickLaunch bar is displayed in the Taskbar.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the QuickLaunch bar will be visible and cannot be turned off.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the QuickLaunch bar will be hidden and cannot be turned on.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, then users will be able to turn the QuickLaunch bar on and off." gpmc_supported="Windows Vista only">Show QuickLaunch on Taskbar</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Show Start on the display the user is using when they press the Windows logo key" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows the Start screen to appear on the display the user is using when they press the Windows logo key. This setting only applies to users who are using multiple displays.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Start screen will appear on the display the user is using when they press the Windows logo key.&lt;br/&gt;&lt;br/&gt;If you disable or don&amp;#39;t configure this policy setting, the Start screen will always appear on the main display when the user presses the Windows logo key. Users will still be able to open Start on other displays by pressing the Start button on that display. Also, the user will be able to configure this setting." gpmc_supported="Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1 only">Show Start on the display the user is using when they press the Windows logo key</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Show the Apps view automatically when the user goes to Start" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows the Apps view to be opened by default when the user goes to Start.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Apps view will appear whenever the user goes to Start.  Users will still be able to switch between the Apps view and the Start screen.&lt;br/&gt;&lt;br/&gt;If you disable or don’t configure this policy setting, the Start screen will appear by default whenever the user goes to Start, and the user will be able to switch between the Apps view and the Start screen. Also, the user will be able to configure this setting." gpmc_supported="Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1 only">Show the Apps view automatically when the user goes to Start</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Show Windows Store apps on the taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="&lt;br/&gt;This policy setting allows users to see Windows Store apps on the taskbar.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users will see Windows Store apps on the taskbar.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, users won’t see Windows Store apps on the taskbar.&lt;br/&gt;&lt;br/&gt;If you don’t configure this policy setting, the default setting for the user’s device will be used, and the user can choose to change it." gpmc_supported="At least Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1">Show Windows Store apps on the taskbar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Start Layout" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Specifies the Start layout for users.&lt;br/&gt;&lt;br/&gt;This setting lets you specify the Start layout for users and prevents them from changing its configuration. The Start layout you specify must be stored in an XML file that was generated by the Export-StartLayout PowerShell cmdlet.&lt;br/&gt;To use this setting, you must first manually configure a device&amp;#39;s Start layout to the desired look and feel. Once you are done, run the Export-StartLayout PowerShell cmdlet on that same device. The cmdlet will generate an XML file representing the layout you configured.&lt;br/&gt;&lt;br/&gt;Once the XML file is generated and moved to the desired file path, type the fully qualified path and name of the XML file. You can type a local path, such as C:\StartLayouts\myLayout.xml or a UNC path, such as \\Server\Share\Layout.xml. If the specified file is not available when the user logs on, the layout won&amp;#39;t be changed. Users cannot customize their Start screen while this setting is enabled.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Start screen layout won&amp;#39;t be changed and users will be able to customize it." gpmc_supported="At least Windows Server 2016, Windows 10">Start Layout</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Start Layout File</td><td>\\grkalfs01\netconfigfiles\Kenya\Settings\StartMenu\start.xml</td></tr>
<tr><td>Reapply layout at every logon</td><td>Enabled</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off all balloon notifications" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to turn off all notification balloons.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, no notification balloons are shown to the user.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, notification balloons are shown to the user." gpmc_supported="At least Windows Vista">Turn off all balloon notifications</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off automatic promotion of notification icons to the taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to turn off automatic promotion of notification icons to the taskbar.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, newly added notification icons are not temporarily promoted to the Taskbar. Users can still configure icons to be shown or hidden in the Notification Control Panel.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, newly added notification icons are temporarily promoted to the Taskbar." gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Turn off automatic promotion of notification icons to the taskbar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off feature advertisement balloon notifications" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to turn off feature advertisement balloon notifications.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, certain notification balloons that are marked as feature advertisements are not shown.&lt;br/&gt;&lt;br/&gt;If you disable do not configure this policy setting, feature advertisement balloons are shown." gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Turn off feature advertisement balloon notifications</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off notification area cleanup" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This setting affects the notification area, also called the &amp;quot;system tray.&amp;quot;&lt;br/&gt;&lt;br/&gt;The notification area is located in the task bar, generally at the bottom of the screen, and it includes the clock and current notifications. This setting determines whether the items are always expanded or always collapsed. By default, notifications are collapsed. The notification cleanup &amp;lt;&amp;lt; icon can be referred to as the &amp;quot;notification chevron.&amp;quot;&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system notification area expands to show all of the notifications that use this area.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the system notification area will always collapse notifications.&lt;br/&gt;&lt;br/&gt;If you do not configure it, the user can choose if they want notifications collapsed." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Turn off notification area cleanup</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off personalized menus" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Disables personalized menus.&lt;br/&gt;&lt;br/&gt;Windows personalizes long menus by moving recently used items to the top of the menu and hiding items that have not been used recently. Users can display the hidden items by clicking an arrow to extend the menu.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system does not personalize menus. All menu items appear and remain in standard order. Also, this setting removes the &amp;quot;Use Personalized Menus&amp;quot; option so users do not try to change the setting while a setting is in effect.&lt;br/&gt;&lt;br/&gt;Note: Personalized menus require user tracking. If you enable the &amp;quot;Turn off user tracking&amp;quot; setting, the system disables user tracking and personalized menus and ignores this setting.&lt;br/&gt;&lt;br/&gt;Tip: To Turn off personalized menus without specifying a setting, click Start, click Settings, click Taskbar and Start Menu, and then, on the General tab, clear the &amp;quot;Use Personalized Menus&amp;quot; option." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows Vista, Windows XP, and Windows 2000">Turn off personalized menus</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off user tracking" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to turn off user tracking.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the system does not track the programs that the user runs, and does not display frequently used programs in the Start Menu.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the system tracks the programs that the user runs. The system uses this information to customize Windows features, such as showing frequently used programs in the Start Menu.&lt;br/&gt;&lt;br/&gt;Also, see these related policy settings: &amp;quot;Remove frequent programs liist from the Start Menu&amp;quot; and &amp;quot;Turn off personalized menus&amp;quot;.&lt;br/&gt;&lt;br/&gt;This policy  setting does not prevent users from pinning programs to the Start Menu or Taskbar. See the &amp;quot;Remove pinned programs list from the Start Menu&amp;quot; and &amp;quot;Do not allow pinning programs to the Taskbar&amp;quot; policy settings." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows Vista, Windows XP, and Windows 2000">Turn off user tracking</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Ctrl+Alt+Del Options</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Task Manager" gpmc_settingPath="User Configuration/Administrative Templates/System/Ctrl+Alt+Del Options" gpmc_settingDescription="This policy setting prevents users from starting Task Manager.&lt;br/&gt;&lt;br/&gt;Task Manager (taskmgr.exe) lets users start and stop programs; monitor the performance of their computers; view and monitor all programs running on their computers, including system services; find the executable names of programs; and change the priority of the process in which programs run.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users will not be able to access Task Manager. If users try to start Task Manager, a message appears explaining that a policy prevents the action.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can access Task Manager to  start and stop programs, monitor the performance of their computers, view and monitor all programs running on their computers, including system services, find the executable names of programs, and change the priority of the process in which programs run." gpmc_supported="At least Windows 2000">Remove Task Manager</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Add features to Windows 10</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent the wizard from running." gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Add features to Windows 10" gpmc_settingDescription="By default, Add features to Windows 10 is available for all administrators. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the wizard will not run.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting or set it to Not Configured, the wizard will run." gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Prevent the wizard from running.</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/App runtime</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Block launching desktop apps associated with a file." gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/App runtime" gpmc_settingDescription="This policy setting lets you control whether Windows Store apps can open files using the default desktop app for a file type. Because desktop apps run at a higher integrity level than Windows Store apps, there is a risk that a Windows Store app might compromise the system by opening a file in the default desktop app for a file type.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows Store apps cannot open files in the default desktop app for a file type; they can open files only in other Windows Store apps.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Windows Store apps can open files in the default desktop app for a file type." gpmc_supported="At least Windows Server 2012, Windows 8 or Windows RT">Block launching desktop apps associated with a file.</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Block launching desktop apps associated with a URI scheme" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/App runtime" gpmc_settingDescription="This policy setting lets you control whether Windows Store apps can open URIs using the default desktop app for a URI scheme. Because desktop apps run at a higher integrity level than Windows Store apps, there is a risk that a URI scheme launched by a Windows Store app might compromise the system by launching a desktop app.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows Store apps cannot open URIs in the default desktop app for a URI scheme; they can open URIs only in other Windows Store apps.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Windows Store apps can open URIs in the default desktop app for a URI scheme.&lt;br/&gt;&lt;br/&gt;Note: Enabling this policy setting does not block Windows Store apps from opening the default desktop app for the http, https, and mailto URI schemes. The handlers for these URI schemes are hardened against URI-based vulnerabilities from untrusted sources, reducing the associated risk." gpmc_supported="At least Windows Server 2012, Windows 8 or Windows RT">Block launching desktop apps associated with a URI scheme</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Backup/Client</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent backing up to network location" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Backup/Client" gpmc_settingDescription="This policy setting lets you prevent users from selecting a network location for storing backups. &lt;br/&gt;&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users are blocked from selecting a network location as a backup location. &lt;br/&gt;&lt;br/&gt;&lt;br/&gt;&lt;br/&gt;If disable or do not configure this policy setting, users can select a network location as a backup location." gpmc_supported="At least Windows Vista">Prevent backing up to network location</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent backing up to optical media (CD/DVD)" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Backup/Client" gpmc_settingDescription="This policy setting lets you prevent users from selecting optical media (CD/DVD) for storing backups. &lt;br/&gt;&lt;br/&gt;&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users are blocked from selecting optical media as a backup location. &lt;br/&gt;&lt;br/&gt;&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can select optical media as a backup location." gpmc_supported="At least Windows Vista">Prevent backing up to optical media (CD/DVD)</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Desktop Gadgets</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off desktop gadgets" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Desktop Gadgets" gpmc_settingDescription="This policy setting allows you to turn off desktop gadgets. Gadgets are small applets that display information or utilities on the  desktop.&lt;br/&gt;&lt;br/&gt;If you enable this setting, desktop gadgets will be turned off.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, desktop gadgets will be turned on.&lt;br/&gt;&lt;br/&gt;The default is for desktop gadgets to be turned on." gpmc_supported="Windows Server 2008, Windows 7, and Windows Vista">Turn off desktop gadgets</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn Off user-installed desktop gadgets" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Desktop Gadgets" gpmc_settingDescription="This policy setting allows you to turn off desktop gadgets that have been installed by the user.&lt;br/&gt;&lt;br/&gt;If you enable this setting, Windows will not run any user-installed gadgets.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, Windows will run user-installed gadgets.&lt;br/&gt;&lt;br/&gt;The default is for Windows to run user installed gadgets." gpmc_supported="Windows Server 2008, Windows 7, and Windows Vista">Turn Off user-installed desktop gadgets</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Edge UI</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable help tips" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Edge UI" gpmc_settingDescription="Disables help tips that Windows shows to the user.&lt;br/&gt;&lt;br/&gt;By default, Windows will show the user help tips until the user has successfully completed the scenarios.&lt;br/&gt;&lt;br/&gt;If this setting is enabled, Windows will not show any help tips to the user.&lt;br/&gt;      " gpmc_supported="At least Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1">Disable help tips</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not show recent apps when the mouse is pointing to the upper-left corner of the screen" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Edge UI" gpmc_settingDescription="This policy setting allows you to prevent the last app and the list of recent apps from appearing when the mouse is pointing to the upper-left corner of the screen.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user will no longer be able to switch to recent apps using the mouse.  The user will still be able to switch apps using touch gestures, keyboard shortcuts, and the Start screen.&lt;br/&gt;&lt;br/&gt;If you disable or don&amp;#39;t configure this policy setting, the recent apps will be available by default, and the user can configure this setting." gpmc_supported="At least Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1">Do not show recent apps when the mouse is pointing to the upper-left corner of the screen</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent users from replacing the Command Prompt with Windows PowerShell in the menu they see when they right-click the lower-left corner or press the Windows logo key+X" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Edge UI" gpmc_settingDescription="This policy setting allows you to prevent users from replacing the Command Prompt with Windows PowerShell in the menu they see when they right-click the lower-left corner or press the Windows logo key + X.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Command Prompt will always be listed in that menu, and users won&amp;#39;t be able to replace it with Windows PowerShell. Users will still be able to access Windows PowerShell, but not from that menu.&lt;br/&gt;&lt;br/&gt;If you disable or don&amp;#39;t configure this policy setting, Command Prompt will be listed in the menu by default, and users can configure this setting." gpmc_supported="At least Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1">Prevent users from replacing the Command Prompt with Windows PowerShell in the menu they see when they right-click the lower-left corner or press the Windows logo key+X</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off switching between recent apps" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Edge UI" gpmc_settingDescription="If you enable this setting, users will not be allowed to switch between recent apps. The App Switching option in the PC settings app will be disabled as well.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users will be allowed to switch between recent apps." gpmc_supported="At least Windows Server 2012, Windows 8 or Windows RT">Turn off switching between recent apps</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off tracking of app usage" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Edge UI" gpmc_settingDescription="This policy setting prevents Windows from keeping track of the apps that are used and searched most frequently. If you enable this policy setting, apps will be sorted alphabetically in:&lt;br/&gt;      - search results&lt;br/&gt;      - the Search and Share panes&lt;br/&gt;      - the drop-down app list in the Picker&lt;br/&gt;&lt;br/&gt;      If you disable or don&amp;#39;t configure this policy setting, Windows will keep track of the apps that are used and searched most frequently. Most frequently used apps will appear at the top." gpmc_supported="At least Windows Server 2012, Windows 8 or Windows RT">Turn off tracking of app usage</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/File Explorer</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Display confirmation dialog when deleting files" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Allows you to have File Explorer display a confirmation dialog  whenever a file is deleted or moved to the Recycle Bin.&lt;br/&gt;&lt;br/&gt;If you enable this setting, a confirmation dialog is displayed when a file is deleted or moved to the Recycle Bin by the user.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the default behavior of not displaying a confirmation dialog occurs." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Display confirmation dialog when deleting files</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Display the menu bar in File Explorer " gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting configures File Explorer to always display the menu bar.&lt;br/&gt;&lt;br/&gt;Note: By default, the menu bar is not displayed in File Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the menu bar will be displayed in File Explorer.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the menu bar will not be displayed in File Explorer.&lt;br/&gt;&lt;br/&gt;Note: When the menu bar is not displayed, users can access the menu bar by pressing the &amp;#39;ALT&amp;#39; key." gpmc_supported="At least Windows Vista">Display the menu bar in File Explorer </span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to prevent users from accessing Folder Options through the View tab on the ribbon in File Explorer.&lt;br/&gt;&lt;br/&gt;Folder Options allows users to change the way files and folders open, what appears in the navigation pane, and other advanced view settings.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users will receive an error message if they tap or click the Options button or choose the Change folder and search options command, and they will not be able to open Folder Options.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can open Folder Options from the View tab on the ribbon." gpmc_supported="At least Windows 2000">Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not display the Welcome Center at user logon" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting prevents the display of the Welcome Center at user logon.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Welcome Center is not displayed at user logon. The user can access the Welcome Center using the Control Panel or Start menu.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Welcome Center is displayed at user logon." gpmc_supported="Windows Vista only">Do not display the Welcome Center at user logon</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide these specified drives in My Computer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to hide these specified drives in My Computer.&lt;br/&gt;&lt;br/&gt;This policy setting allows you to remove the icons representing selected hard drives from My Computer and File Explorer. Also, the drive letters representing the selected drives do not appear in the standard Open dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, select a drive or combination of drives in the drop-down list.&lt;br/&gt;&lt;br/&gt;Note: This policy setting removes the drive icons. Users can still gain access to drive contents by using other methods, such as by typing the path to a directory on the drive in the Map Network Drive dialog box, in the Run dialog box, or in a command window.&lt;br/&gt;&lt;br/&gt;Also, this policy setting does not prevent users from using programs to access these drives or their contents. And, it does not prevent users from using the Disk Management snap-in to view and change drive characteristics.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, all drives are displayed, or select the &amp;quot;Do not restrict drives&amp;quot; option in the drop-down list.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Prevent access to drives from My Computer&amp;quot; policy setting." gpmc_supported="At least Windows 2000">Hide these specified drives in My Computer</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Pick one of the following combinations</td><td>Restrict all drives</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hides the Manage item on the File Explorer context menu" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Removes the Manage item from the File Explorer context menu. This context menu appears when you right-click File Explorer or My Computer.&lt;br/&gt;&lt;br/&gt;The Manage item opens Computer Management (Compmgmt.msc), a console tool that includes many of the primary Windows 2000 administrative tools, such as Event Viewer, Device Manager, and Disk Management. You must be an administrator to use many of the features of these tools.&lt;br/&gt;&lt;br/&gt;This setting does not remove the Computer Management item from the Start menu (Start, Programs, Administrative Tools, Computer Management), nor does it prevent users from using other methods to start Computer Management.&lt;br/&gt;&lt;br/&gt;Tip: To hide all context menus, use the &amp;quot;Remove File Explorer&amp;#39;s default context menu&amp;quot; setting." gpmc_supported="At least Windows 2000">Hides the Manage item on the File Explorer context menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="No Computers Near Me in Network Locations" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to remove computers in the user&amp;#39;s workgroup and domain from lists of network resources in File Explorer and Network Locations.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the system removes the &amp;quot;Computers Near Me&amp;quot; option and the icons representing nearby computers from Network Locations. This policy setting also removes these icons from the Map Network Drive browser.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, computers in the user&amp;#39;s workgroup and domain appear in lists of network resources in File Explorer and Network Locations.&lt;br/&gt;&lt;br/&gt;This policy setting does not prevent users from connecting to computers in their workgroup or domain by other commonly used methods, such as typing the share name in the Run dialog box or the Map Network Drive dialog box.&lt;br/&gt;&lt;br/&gt;To remove network computers from lists of network resources, use the &amp;quot;No Entire Network in Network Locations&amp;quot; policy setting.&lt;br/&gt;" gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">No Computers Near Me in Network Locations</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="No Entire Network in Network Locations" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Removes all computers outside of the user&amp;#39;s workgroup or local domain from lists of network resources in File Explorer and Network Locations.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system removes the Entire Network option and the icons representing networked computers from Network Locations and from the browser associated with the Map Network Drive option.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from viewing or connecting to computers in their workgroup or domain. It also does not prevent users from connecting to remote computers by other commonly used methods, such as by typing the share name in the Run dialog box or the Map Network Drive dialog box.&lt;br/&gt;&lt;br/&gt;To remove computers in the user&amp;#39;s workgroup or domain from lists of network resources, use the &amp;quot;No Computers Near Me in Network Locations&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Note: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">No Entire Network in Network Locations</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent access to drives from My Computer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Prevents users from using My Computer to gain access to the content of selected drives.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users can browse the directory structure of the selected drives in My Computer or File Explorer, but they cannot open folders and access the contents. Also, they cannot use the Run dialog box or the Map Network Drive dialog box to view the directories on these drives.&lt;br/&gt;&lt;br/&gt;To use this setting, select a drive or combination of drives from the drop-down list. To allow access to all drive directories, disable this setting or select the &amp;quot;Do not restrict drives&amp;quot; option from the drop-down list.&lt;br/&gt;&lt;br/&gt;Note: The icons representing the specified drives still appear in My Computer, but if users double-click the icons, a message appears explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt; Also, this setting does not prevent users from using programs to access local and network drives. And, it does not prevent them from using the Disk Management snap-in to view and change drive characteristics.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Hide these specified drives in My Computer&amp;quot; setting." gpmc_supported="At least Windows 2000">Prevent access to drives from My Computer</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Pick one of the following combinations</td><td>Restrict A, B, C and D drives only</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent users from adding files to the root of their Users Files folder." gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows administrators to prevent users from adding new items such as files or folders to the root of their Users Files folder in File Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users will no longer be able to add new items such as files or folders to the root of their Users Files folder in File Explorer.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users will be able to add new items such as files or folders to the root of their Users Files folder in File Explorer.&lt;br/&gt;&lt;br/&gt;&lt;br/&gt;Note: Enabling this policy setting does not prevent the user from being able to add new items such as files and folders to their actual file system profile folder at %userprofile%." gpmc_supported="At least Windows Vista">Prevent users from adding files to the root of their Users Files folder.</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove &amp;quot;Map Network Drive&amp;quot; and &amp;quot;Disconnect Network Drive&amp;quot;" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Prevents users from using File Explorer or Network Locations to map or disconnect network drives.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system removes the Map Network Drive and Disconnect Network Drive commands from the toolbar and Tools menus in File Explorer and Network Locations and from menus that appear when you right-click the File Explorer or Network Locations icons.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from connecting to another computer by typing the name of a shared folder in the Run dialog box.&lt;br/&gt;&lt;br/&gt;Note:&lt;br/&gt;&lt;br/&gt;This setting was documented incorrectly on the Explain tab in Group Policy for Windows 2000. The Explain tab states incorrectly that this setting prevents users from connecting and disconnecting drives.&lt;br/&gt;&lt;br/&gt;Note: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="At least Windows 2000">Remove &quot;Map Network Drive&quot; and &quot;Disconnect Network Drive&quot;</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove CD Burning features" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to remove CD Burning features. File Explorer allows you to create and modify re-writable CDs if you have a CD writer connected to your PC.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, all features in the File Explorer that allow you to use your CD writer are removed.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users are able to use the File Explorer CD burning features.&lt;br/&gt;&lt;br/&gt;Note: This policy setting does not prevent users from using third-party applications to create or modify CDs using a CD writer." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Remove CD Burning features</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove DFS tab" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to remove the DFS tab from File Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the DFS (Distributed File System) tab is removed from File Explorer and from other programs that use the File Explorer browser, such as My Computer. As a result, users cannot use this tab to view or change the properties of the DFS shares available from their computer.&lt;br/&gt;&lt;br/&gt;This policy setting does not prevent users from using other methods to configure DFS.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the DFS tab is available." gpmc_supported="At least Windows 2000">Remove DFS tab</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove File Explorer&amp;#39;s default context menu" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Removes shortcut menus from the desktop and File Explorer. Shortcut menus appear when you right-click an item.&lt;br/&gt;&lt;br/&gt;If you enable this setting, menus do not appear when you right-click the desktop or when you right-click the items in File Explorer. This setting does not prevent users from using other methods to issue commands available on the shortcut menus." gpmc_supported="At least Windows 2000">Remove File Explorer&#39;s default context menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove File menu from File Explorer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Removes the File menu from My Computer and File Explorer.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other methods to perform tasks available on the File menu." gpmc_supported="At least Windows 2000">Remove File menu from File Explorer</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Hardware tab" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Removes the Hardware tab.&lt;br/&gt;&lt;br/&gt;This setting removes the Hardware tab from Mouse, Keyboard, and Sounds and Audio Devices in Control Panel. It also removes the Hardware tab from the Properties dialog box for all local drives, including hard drives, floppy disk drives, and CD-ROM drives. As a result, users cannot use the Hardware tab to view or change the device list or device properties, or use the Troubleshoot button to resolve problems with the device." gpmc_supported="At least Windows 2000">Remove Hardware tab</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Search button from File Explorer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to remove the Search button from the File Explorer toolbar.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Search button is removed from the Standard Buttons toolbar that appears in File Explorer and other programs that use the File Explorer window, such as My Computer and Network Locations.&lt;br/&gt;&lt;br/&gt;Enabling this policy setting does not remove the Search button or affect any search features of Internet browser windows, such as the Internet Explorer window.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Search button is available from the File Explorer toolbar.&lt;br/&gt;&lt;br/&gt;This policy setting does not affect the Search items on the File Explorer context menu or on the Start menu. To remove Search from the Start menu, use the &amp;quot;Remove Search menu from Start menu&amp;quot; policy setting (in User Configuration\Administrative Templates\Start Menu and Taskbar). To hide all context menus, use the &amp;quot;Remove File Explorer&amp;#39;s default context menu&amp;quot; policy setting." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Remove Search button from File Explorer</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Security tab" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Removes the Security tab from File Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users opening the Properties dialog box for all file system objects, including folders, files, shortcuts, and drives, will not be able to access the Security tab. As a result, users will be able to neither change the security settings nor view a list of all users that have access to the resource in question.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, users will be able to access the security tab." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Remove Security tab</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Shared Documents from My Computer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to remove the Shared Documents folder from My Computer.&lt;br/&gt;&lt;br/&gt;When a Windows client is in a workgroup, a Shared Documents icon appears in the File Explorer Web view under &amp;quot;Other Places&amp;quot; and also under &amp;quot;Files Stored on This Computer&amp;quot; in My Computer. Using this policy setting, you can choose not to have these items displayed.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Shared Documents folder is not displayed in the Web view or in My Computer.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Shared Documents folder is displayed in Web view and also in My Computer when the client is part of a workgroup.&lt;br/&gt;&lt;br/&gt;Note:  The ability to remove the Shared Documents folder via Group Policy is only available on Windows XP Professional." gpmc_supported="Windows XP Professional only">Remove Shared Documents from My Computer</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove the Search the Internet &amp;quot;Search again&amp;quot; link" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="If you enable this policy, the &amp;quot;Internet&amp;quot; &amp;quot;Search again&amp;quot; link will not be shown when the user performs a search in the Explorer window.&lt;br/&gt;&lt;br/&gt;If you disable this policy, there will be an &amp;quot;Internet&amp;quot; &amp;quot;Search again&amp;quot; link when the user performs a search in the Explorer window.  This button launches a search in the default browser with the search terms.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy (default), there will be an &amp;quot;Internet&amp;quot; link when the user performs a search in the Explorer window." gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Remove the Search the Internet &quot;Search again&quot; link</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/File Explorer/Common Open File Dialog</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the common dialog places bar" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer/Common Open File Dialog" gpmc_settingDescription="Removes the shortcut bar from the Open dialog box.&lt;br/&gt;&lt;br/&gt;This setting, and others in this folder, lets you remove new features added in Windows 2000 Professional, so that the Open dialog box looks like it did in Windows NT 4.0 and earlier. These policies only affect programs that use the standard Open dialog box provided to developers of Windows programs.&lt;br/&gt;&lt;br/&gt;To see an example of the standard Open dialog box, start Wordpad and, on the File menu, click Open.&lt;br/&gt;&lt;br/&gt;Note: In Windows Vista, this policy  setting applies only to applications that are using the Windows XP common dialog box style. This policy setting does not apply to the new Windows Vista common dialog box style. It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="At least Windows 2000">Hide the common dialog places bar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the dropdown list of recent files" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer/Common Open File Dialog" gpmc_settingDescription="Removes the list of most recently used files from the Open dialog box.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the &amp;quot;File name&amp;quot; field includes a drop-down list of recently used files. If you enable this setting, the &amp;quot;File name&amp;quot; field is a simple text box. Users must browse directories to find a file or type a file name in the text box.&lt;br/&gt;&lt;br/&gt;This setting, and others in this folder, lets you remove new features added in Windows 2000 Professional, so that the Open dialog box looks like it did in Windows NT 4.0 and earlier. These policies only affect programs that use the standard Open dialog box provided to developers of Windows programs.&lt;br/&gt;&lt;br/&gt;To see an example of the standard Open dialog box, start Wordpad and, on the File menu, click Open.&lt;br/&gt;&lt;br/&gt;Note: In Windows Vista, this policy  setting applies only to applications that are using the Windows XP common dialog box style. This policy setting does not apply to the new Windows Vista common dialog box style. It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="At least Windows 2000">Hide the dropdown list of recent files</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable AutoComplete for forms" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This AutoComplete feature suggests possible matches when users are filling up forms.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the user is not suggested matches when filling forms. The user cannot change it.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the user is suggested possible matches when filling forms. The user cannot change it.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, the user has the freedom to turn on the auto-complete feature for forms.&lt;br/&gt;&lt;br/&gt;To display this option, the users open the Internet Options dialog box, click the Contents Tab and click the Settings button." gpmc_supported="At least Internet Explorer 5.0">Disable AutoComplete for forms</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing accessibility settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="If you enable this policy, the user cannot modify the Accessibility options. All options in the &amp;quot;Accessibility&amp;quot; window on the General Tab in the Internet Options dialog box appear dimmed.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can change accessibility settings, such as overriding fonts and colors on Web pages.&lt;br/&gt;&lt;br/&gt;If you set the &amp;quot;Disable the General page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), you do not need to set this policy, because the &amp;quot;Disable the General page&amp;quot; policy removes the General tab from the interface." gpmc_supported="At least Internet Explorer 5.0">Disable changing accessibility settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing Advanced page settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents users from changing settings on the Advanced tab in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users are prevented from changing advanced Internet settings, such as security, multimedia, and printing. Users cannot select or clear the check boxes on the Advanced tab.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can select or clear settings on the Advanced tab.&lt;br/&gt;&lt;br/&gt;If you set the &amp;quot;Disable the Advanced page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), you do not need to set this policy, because the &amp;quot;Disable the Advanced page&amp;quot; policy removes the Advanced tab from the interface." gpmc_supported="At least Internet Explorer 5.0">Disable changing Advanced page settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing Automatic Configuration settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This setting specifies to automatically detect the proxy server settings used to connect to the Internet and customize Internet Explorer. This setting specifies that Internet explorer use the configuration settings provided in a file by the system administrator.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user will not be able to do automatic configuration. You can import your current connection settings from your machine using Internet Explorer Maintenance under Admin Templates using group policy editor.&lt;br/&gt;&lt;br/&gt;If you disable or do no configure this policy setting, the user will have the freedom to automatically configure these settings." gpmc_supported="At least Internet Explorer 5.0">Disable changing Automatic Configuration settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing connection settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents users from changing dial-up settings.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Settings button on the Connections tab in the Internet Options dialog box appears dimmed.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can change their settings for dial-up connections.&lt;br/&gt;&lt;br/&gt;If you set the &amp;quot;Disable the Connections page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), you do not need to set this policy, because the &amp;quot;Disable the Connections page&amp;quot; policy removes the Connections tab from the interface." gpmc_supported="At least Internet Explorer 5.0">Disable changing connection settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing home page settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="The Home page specified on the General tab of the Internet Options dialog box is the default Web page that Internet Explorer loads whenever it is run.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, a user cannot set a custom default home page. You must specify which default home page should load on the user machine. For machines with at least Internet Explorer 7, the home page can be set within this policy to override other home page policies.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Home page box is enabled and users can choose their own home page." gpmc_supported="At least Internet Explorer 5.0">Disable changing home page settings</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Home Page</td><td>https://www.sebra.ccms.teleperformance.com/index.html</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing Profile Assistant settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents users from changing Profile Assistant settings.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the My Profile button appears dimmed in the Personal Information area on the Content tab in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can change their profile information, such as their street and e-mail addresses.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Disable the Content page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), which removes the Content tab from Internet Explorer in Control Panel, takes precedence over this policy. If it is enabled, this policy is ignored." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Disable changing Profile Assistant settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable changing Temporary Internet files settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents users from changing the browser cache settings, such as the location and amount of disk space to use for the Temporary Internet Files folder.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the browser cache settings appear dimmed. These settings are found in the dialog box that appears when users click the General tab and then click the Settings button in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can change their cache settings.&lt;br/&gt;&lt;br/&gt;If you set the &amp;quot;Disable the General page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), you do not need to set this policy, because the &amp;quot;Disable the General page&amp;quot; policy removes the General tab from the interface." gpmc_supported="At least Internet Explorer 5.0">Disable changing Temporary Internet files settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable Import/Export Settings wizard" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy settings disables the Import/Export Settings wizard. This wizard allows you to import settings from another browser, import settings from a file, or export settings to a file. Importing settings from another browser allows the user to import favorites and feeds from other browsers. Importing settings from a file allows the user to import favorites, feeds and cookies from a file. Exporting settings to a file allows the user to export favorites, feeds and cookies to a file.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user will not be able to use the Import/Export Settings wizard.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the user will be able to use the Import/Export Settings wizard." gpmc_supported="At least Internet Explorer 5.0">Disable Import/Export Settings wizard</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable Internet Connection wizard" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Prevents users from running the Internet Connection Wizard.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Setup button on the Connections tab in the Internet Options dialog box appears dimmed.&lt;br/&gt;&lt;br/&gt;Users will also be prevented from running the wizard by clicking the Connect to the Internet icon on the desktop or by clicking Start, pointing to Programs, pointing to Accessories, pointing to Communications, and then clicking Internet Connection Wizard.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can change their connection settings by running the Internet Connection Wizard.&lt;br/&gt;&lt;br/&gt;Note: This policy overlaps with the &amp;quot;Disable the Connections page&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel), which removes the Connections tab from the interface. Removing the Connections tab from the interface, however, does not prevent users from running the Internet Connection Wizard from the desktop or the Start menu." gpmc_supported="At least Internet Explorer 5.0">Disable Internet Connection wizard</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not allow users to enable or disable add-ons" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting allows you to manage whether users have the ability to allow or deny add-ons through Add-On Manager.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users cannot enable or disable add-ons through Add-On Manager.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the appropriate controls in the Add-On Manager will be available to the user." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Do not allow users to enable or disable add-ons</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent &amp;quot;Fix settings&amp;quot; functionality" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting prevents the user from using the &amp;quot;Fix settings&amp;quot; functionality related to Security Settings Check.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user cannot use the &amp;quot;Fix settings&amp;quot; functionality.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the user can use the &amp;quot;Fix settings&amp;quot; functionality.&lt;br/&gt;&lt;br/&gt;Note: When this policy setting is enabled, the &amp;quot;Fix settings&amp;quot; command on the Notification bar shortcut menu should be disabled." gpmc_supported="At least Internet Explorer 7.0">Prevent &quot;Fix settings&quot; functionality</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent access to Internet Explorer Help" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting prevents the user from accessing Help in Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the following occur:&lt;br/&gt;    • The Help menu on the menu bar is not functional.&lt;br/&gt;    • Help is removed from the Command bar.&lt;br/&gt;    • The shortcut key F1 does not make Help appear.&lt;br/&gt;    • Help cannot be accessed from the Settings charm (starting with Internet Explorer 10 on Windows 8).&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Internet Explorer Help menu is available to the user. The user can also use the Command bar and F1 to access Help." gpmc_supported="At least Internet Explorer 7.0">Prevent access to Internet Explorer Help</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing pop-up filter level" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting prevents the user from changing the level of pop-up filtering. The available levels are as follows:&lt;br/&gt;    High: Block all pop-ups.&lt;br/&gt;    Medium: Block most automatic pop-ups.&lt;br/&gt;    Low: Allow pop-ups from secure sites.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user cannot change the filter level. You can specify the filter level by importing Privacy settings from your computer under Internet Explorer Maintenance.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the user can manage pop-ups by changing the filter level.&lt;br/&gt;&lt;br/&gt;You may also want to enable the &amp;quot;Prevent managing pop-up exception list&amp;quot; and &amp;quot;Turn off pop-up management&amp;quot; policy settings to prevent the user from configuring pop-up behavior." gpmc_supported="At least Internet Explorer 7.0">Prevent changing pop-up filter level</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing proxy settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting specifies if a user can change proxy settings.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user will not be able to configure proxy settings.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the user can configure proxy settings." gpmc_supported="At least Internet Explorer 5.0">Prevent changing proxy settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent participation in the Customer Experience Improvement Program" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting prevents the user from participating in the Customer Experience Improvement Program (CEIP).&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user cannot participate in the CEIP, and the Customer Feedback Options command does not appear on the Help menu.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the user must participate in the CEIP, and the Customer Feedback Options command does not appear on the Help menu.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can choose to participate in the CEIP." gpmc_supported="At least Internet Explorer 7.0. Not supported on Windows Vista">Prevent participation in the Customer Experience Improvement Program</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent running First Run wizard" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting prevents Internet Explorer from running the First Run wizard the first time a user starts the browser after installing Internet Explorer or Windows.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, you must make one of the following choices:&lt;br/&gt;    • Skip the First Run wizard, and go directly to the user&amp;#39;s home page.&lt;br/&gt;    • Skip the First Run wizard, and go directly to the &amp;quot;Welcome to Internet Explorer&amp;quot; webpage.&lt;br/&gt;&lt;br/&gt;Starting with Windows 8, the &amp;quot;Welcome to Internet Explorer&amp;quot; webpage is not available. The user&amp;#39;s home page will display regardless of which option is chosen.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Internet Explorer may run the First Run wizard the first time the browser is started after installation." gpmc_supported="At least Internet Explorer 7.0">Prevent running First Run wizard</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Select your choice</td><td>Go directly to home page</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Search: Disable Find Files via F3 within the browser" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Disables using the F3 key to search in Internet Explorer and File Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the search functionality of the F3 key is disabled. Users cannot press F3 to search the Internet (from Internet Explorer) or to search the hard disk (from File Explorer). If the user presses F3, a prompt appears that informs the user that this feature has been disabled.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can press F3 to search the Internet (from Internet Explorer) or the hard disk (from File Explorer).&lt;br/&gt;&lt;br/&gt;This policy is intended for situations in which administrators do not want users to explore the Internet or the hard disk.&lt;br/&gt;&lt;br/&gt;This policy can be used in coordination with the &amp;quot;File Menu: Disable Open menu option&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\Browser Menus), which prevents users from opening files by using the browser." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Search: Disable Find Files via F3 within the browser</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off browser geolocation" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting allows you to disable browser geolocation support. This will prevent websites from requesting location data about the user.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, browser geolocation support is turned off.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, browser geolocation support is turned on.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, browser geolocation support can be turned on or off in Internet Options on the Privacy tab." gpmc_supported="At least Internet Explorer 9.0">Turn off browser geolocation</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off the Security Settings Check feature" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting turns off the Security Settings Check feature, which checks Internet Explorer security settings to determine when the settings put Internet Explorer at risk.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the feature is turned off.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the feature is turned on." gpmc_supported="At least Internet Explorer 7.0">Turn off the Security Settings Check feature</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn on menu bar by default" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This policy setting allows you to turn on or turn off the earlier menus (for example, File, Edit, and View) in Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the menu bar appears in Internet Explorer by default, and the user cannot turn it off.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the menu bar appears in Internet Explorer by default, and the user cannot turn it on.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the menu bar is turned off by default. The user can turn on or turn off the menu bar." gpmc_supported="At least Internet Explorer 7.0">Turn on menu bar by default</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn on the auto-complete feature for user names and passwords on forms" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="This AutoComplete feature can remember and suggest User names and passwords on Forms.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the user cannot change &amp;quot;User name and passwords on forms&amp;quot; or &amp;quot;prompt me to save passwords&amp;quot;. The Auto Complete feature for User names and passwords on Forms will be turned on. You have to decide whether to select &amp;quot;prompt me to save passwords&amp;quot;.&lt;br/&gt;&lt;br/&gt;If you disable this setting the user cannot change &amp;quot;User name and passwords on forms&amp;quot; or &amp;quot;prompt me to save passwords&amp;quot;. The Auto Complete feature for User names and passwords on Forms is turned off. The user also cannot opt to be prompted to save passwords.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, the user has the freedom of turning on Auto complete for User name and passwords on forms and the option of prompting to save passwords. To display this option, the users open the Internet Options dialog box, click the Contents Tab and click the Settings button." gpmc_supported="At least Internet Explorer 5.0">Turn on the auto-complete feature for user names and passwords on forms</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Browser menus</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="View menu: Disable Source menu option" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents users from viewing the HTML source of Web pages by clicking the Source command on the View menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Source command on the View menu will appear dimmed.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, then users can view the HTML source of Web pages from the browser View menu.&lt;br/&gt;&lt;br/&gt;Caution: This policy does not prevent users from viewing the HTML source of a Web page by right-clicking a Web page to open the shortcut menu, and then clicking View Source. To prevent users from viewing the HTML source of a Web page from the shortcut menu, set the &amp;quot;Turn off Shortcut Menu&amp;quot; policy, which disables the entire shortcut menu." gpmc_supported="At least Internet Explorer 5.0">View menu: Disable Source menu option</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Delete Browsing History</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow deleting browsing history on exit" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Delete Browsing History" gpmc_settingDescription="This policy setting allows the automatic deletion of specified items when the last browser window closes. The preferences selected in the Delete Browsing History dialog box (such as deleting temporary Internet files, cookies, history, form data, and passwords) are applied, and those items are deleted.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, deleting browsing history on exit is turned on.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, deleting browsing history on exit is turned off.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, it can be configured on the General tab in Internet Options.&lt;br/&gt;&lt;br/&gt;If the &amp;quot;Prevent access to Delete Browsing History&amp;quot; policy setting is enabled, this policy setting has no effect." gpmc_supported="At least Internet Explorer 8.0">Allow deleting browsing history on exit</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Internet Control Panel</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Advanced page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="Removes the Advanced tab from the interface in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users are prevented from seeing and changing advanced Internet settings, such as security, multimedia, and printing.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings.&lt;br/&gt;&lt;br/&gt;When you set this policy, you do not need to set the &amp;quot;Disable changing Advanced page settings&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\), because this policy removes the Advanced tab from the interface." gpmc_supported="At least Internet Explorer 5.0">Disable the Advanced page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Connections page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="Removes the Connections tab from the interface in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users are prevented from seeing and changing connection and proxy settings.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings.&lt;br/&gt;&lt;br/&gt;When you set this policy, you do not need to set the following policies for the Content tab, because this policy removes the Connections tab from the interface:&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable Internet Connection Wizard&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing connection settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Prevent changing proxy settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing Automatic Configuration settings&amp;quot;" gpmc_supported="At least Internet Explorer 5.0">Disable the Connections page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Content page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="If you enable this policy setting, users are prevented from seeing and changing ratings, certificates, AutoComplete, Wallet, and Profile Assistant settings.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings." gpmc_supported="At least Internet Explorer 5.0">Disable the Content page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the General page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="Removes the General tab from the interface in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users are unable to see and change settings for the home page, the cache, history, Web page appearance, and accessibility.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings.&lt;br/&gt;&lt;br/&gt;When you set this policy, you do not need to set the following Internet Explorer policies (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\), because this policy removes the General tab from the interface:&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing home page settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing Temporary Internet files settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing history settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing color settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing link color settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing font settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing language settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing accessibility settings&amp;quot;" gpmc_supported="At least Internet Explorer 5.0">Disable the General page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Privacy page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="Removes the Privacy tab from the interface in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users are prevented from seeing and changing default settings for privacy.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings." gpmc_supported="At least Internet Explorer 5.0">Disable the Privacy page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Programs page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="Removes the Programs tab from the interface in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users are prevented from seeing and changing default settings for Internet programs.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings.&lt;br/&gt;&lt;br/&gt;When you set this policy, you do not need to set the following policies for the Programs tab, because this policy removes the Programs tab from the interface:&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing Messaging settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing Calendar and Contact settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable the Reset Web Settings feature&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing default browser check&amp;quot;" gpmc_supported="At least Internet Explorer 5.0">Disable the Programs page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Security page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="Removes the Security tab from the interface in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, it prevents users from seeing and changing settings for security zones, such as scripting, downloads, and user authentication.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings.&lt;br/&gt;&lt;br/&gt;When you set this policy, you do not need to set the following Internet Explorer policies, because this policy removes the Security tab from the interface:&lt;br/&gt;&lt;br/&gt;&amp;quot;Security zones: Do not allow users to change policies&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Security zones: Do not allow users to add/delete sites&amp;quot;" gpmc_supported="At least Internet Explorer 5.0">Disable the Security page</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Internet Control Panel/Advanced Page</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Empty Temporary Internet Files folder when browser is closed" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Advanced Page" gpmc_settingDescription="This policy setting allows you to manage whether Internet Explorer deletes the contents of the Temporary Internet Files folder after all browser windows are closed. This protects against storing dangerous files on the computer, or storing sensitive files that other users could see, in addition to managing total disk space usage.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Internet Explorer will delete the contents of the user&amp;#39;s Temporary Internet Files folder when all browser windows are closed.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Internet Explorer will not delete the contents of the user&amp;#39;s Temporary Internet Files folder when browser windows are closed.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy, Internet Explorer will not delete the contents of the Temporary Internet Files folder when browser windows are closed." gpmc_supported="At least Internet Explorer 6.0 in Windows 2003 Service Pack 1">Empty Temporary Internet Files folder when browser is closed</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Internet Control Panel/Security Page</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Intranet Sites: Include all local (intranet) sites not listed in other zones" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page" gpmc_settingDescription="This policy setting controls whether local sites which are not explicitly mapped into any Security Zone are forced into the local Intranet security zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, local sites which are not explicitly mapped into a zone are considered to be in the Intranet Zone.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, local sites which are not explicitly mapped into a zone will not be considered to be in the Intranet Zone (so would typically be in the Internet Zone).&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users choose whether to force local sites into the Intranet Zone." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Intranet Sites: Include all local (intranet) sites not listed in other zones</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Intranet Sites: Include all network paths (UNCs)" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page" gpmc_settingDescription="This policy setting controls whether URLs representing UNCs are mapped into the local Intranet security zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, all network paths are mapped into the Intranet Zone.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, network paths are not necessarily mapped into the Intranet Zone (other rules might map one there).&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users choose whether network paths are mapped into the Intranet Zone." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Intranet Sites: Include all network paths (UNCs)</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Site to Zone Assignment List" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page" gpmc_settingDescription="This policy setting allows you to manage a list of sites that you want to associate with a particular security zone. These zone numbers have associated security settings that apply to all of the sites in the zone.&lt;br/&gt;&lt;br/&gt;Internet Explorer has 4 security zones, numbered 1-4, and these are used by this policy setting to associate sites to zones. They are: (1) Intranet zone, (2) Trusted Sites zone, (3) Internet zone, and (4) Restricted Sites zone. Security settings can be set for each of these zones through other policy settings, and their default settings are: Trusted Sites zone (Low template), Intranet zone (Medium-Low template), Internet zone (Medium template), and Restricted Sites zone (High template). (The Local Machine zone and its locked down equivalent have special security settings that protect your local computer.)&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, you can enter a list of sites and their related zone numbers. The association of a site with a zone will ensure that the security settings for the specified zone are applied to the site.&amp;#160; For each entry that you add to the list, enter the following information:&lt;br/&gt;&lt;br/&gt;Valuename – A host for an intranet site, or a fully qualified domain name for other sites. The valuename may also include&amp;#160;a specific&amp;#160;protocol. For example, if you enter http://www.contoso.com&amp;#160;as the valuename, other protocols are not affected.&amp;#160;If you enter just www.contoso.com,&amp;#160;then all protocols&amp;#160;are affected for that site, including http, https, ftp, and so on. The site may also be expressed as an IP address (e.g., 127.0.0.1) or range (e.g., 127.0.0.1-10). To avoid creating conflicting policies, do not include additional characters after the domain such as trailing slashes or URL path. For example, policy settings for www.contoso.com and www.contoso.com/mail would be treated as the same policy setting by Internet Explorer, and would therefore be in conflict.&lt;br/&gt;&lt;br/&gt;Value - A number indicating the zone with which this site should be associated for security settings. The Internet Explorer zones described above are 1-4.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, users may choose their own site-to-zone assignments." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Site to Zone Assignment List</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td colspan="2"><table class="subtable" >
<tr><th scope="col">Enter the zone assignments here.</th><th scope="col">&nbsp;</th></tr>
<tr><td>grkalfs01.emea.tpg.ads</td><td>1</td></tr>
<tr><td>grkalfs01</td><td>1</td></tr>
<tr><td>https://deffmwebmailrrz1-1.emea.tpg.ads</td><td>2</td></tr>
<tr><td>https://deffmwebmailrr.emea.tpg.ads</td><td>2</td></tr>
<tr><td>https://deffmwebmailrrz1-4.emea.tpg.ads</td><td>2</td></tr>
<tr><td>https://www.sebra.ccms.teleperformance.com</td><td>2</td></tr>
<tr><td>*.emea.tpg.ads</td><td>1</td></tr>
<tr><td>\\emea.tpg.ads\</td><td>1</td></tr>
<tr><td>file://*.tpg.ads</td><td>1</td></tr>
<tr><td>file://GRKALFS01</td><td>1</td></tr>
</table></td></tr></table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Internet Settings/Advanced settings/Internet Connection Wizard Settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Start the Internet Connection Wizard automatically" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Settings/Advanced settings/Internet Connection Wizard Settings" gpmc_settingDescription="This policy setting determines whether the Internet Connection Wizard was completed. If the Internet Connection Wizard was not completed, this policy setting starts the wizard automatically.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Internet Connection Wizard starts automatically if it was not completed before. The user cannot prevent the wizard from starting.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the Internet Connection Wizard does not start automatically. The user can start the wizard manually.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can decide whether the Internet Connection Wizard should start automatically." gpmc_supported="At least Internet Explorer 7.0. Not supported on Windows Vista">Start the Internet Connection Wizard automatically</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Offline Pages</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable adding channels" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Offline Pages" gpmc_settingDescription="Prevents users from adding channels to Internet Explorer.&lt;br/&gt;&lt;br/&gt;Channels are Web sites that are updated automatically on your computer, according to a schedule specified by the channel provider.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Add Active Channel button, which appears on a channel that users haven&amp;#39;t yet subscribed to, will be disabled. Users also cannot add content that is based on a channel, such as some of the Active Desktop items from Microsoft&amp;#39;s Active Desktop Gallery, to their desktop.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can add channels to the Channel bar or to their desktop.&lt;br/&gt;&lt;br/&gt;Note: Most channel providers use the words Add Active Channel for this option; however, a few use different words, such as Subscribe." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Disable adding channels</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable adding schedules for offline pages" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Offline Pages" gpmc_settingDescription="Prevents users from specifying that Web pages can be downloaded for viewing offline. When users make Web pages available for offline viewing, they can view the content when their computer is not connected to the Internet.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users cannot add new schedules for downloading offline content. The Make Available Offline check box will be dimmed in the Add Favorite dialog box.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can add new offline content schedules.&lt;br/&gt;&lt;br/&gt;This policy is intended for organizations that are concerned about server load for downloading content.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Hide Favorites menu&amp;quot; policy (located in User Configuration\Administrative Templates\Windows Components\Internet Explorer) takes precedence over this policy. If it is enabled, this policy is ignored." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Disable adding schedules for offline pages</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable all scheduled offline pages" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Offline Pages" gpmc_settingDescription="Disables existing schedules for downloading Web pages for offline viewing.&lt;br/&gt;&lt;br/&gt;When users make Web pages available for offline viewing, they can view content when their computer is not connected to the Internet.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the check boxes for schedules on the Schedule tab of the Web page properties are cleared and users cannot select them. To display this tab, users click the Tools menu, click Synchronize, select a Web page, click the Properties button, and then click the Schedule tab.&lt;br/&gt;&lt;br/&gt;If you disable this policy, then Web pages can be updated on the schedules specified on the Schedule tab.&lt;br/&gt;&lt;br/&gt;This policy is intended for organizations that are concerned about server load for downloading content.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Hide Favorites menu&amp;quot; policy (located in User Configuration\Administrative Templates\Windows Components\Internet Explorer) takes precedence over this policy. If it is enabled, this policy is ignored." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Disable all scheduled offline pages</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Toolbars</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Lock all toolbars" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Toolbars" gpmc_settingDescription="This policy setting allows you to lock or unlock the toolbars on the user interface.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the toolbars are locked and the user cannot move them.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the toolbars are unlocked and the user can move them.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the toolbars are locked by default, but the user can unlock them through the shortcut menu of the Command bar." gpmc_supported="At least Internet Explorer 8.0">Lock all toolbars</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Developer Tools" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Toolbars" gpmc_settingDescription="This policy setting allows you to manage whether the user can access Developer Tools in Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user cannot access Developer Tools.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the user can access Developer Tools." gpmc_supported="At least Internet Explorer 8.0">Turn off Developer Tools</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Location and Sensors</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off location" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Location and Sensors" gpmc_settingDescription="&lt;br/&gt;        This policy setting turns off the location feature for this computer.&lt;br/&gt;&lt;br/&gt;        If you enable this policy setting, the location feature is turned off, and all programs on this computer are prevented from using location information from the location feature.&lt;br/&gt;&lt;br/&gt;        If you disable or do not configure this policy setting, all programs on this computer will not be prevented from using location information from the location feature.&lt;br/&gt;      " gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Turn off location</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off location scripting" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Location and Sensors" gpmc_settingDescription="&lt;br/&gt;        This policy setting turns off scripting for the location feature.&lt;br/&gt;&lt;br/&gt;        If you enable this policy setting, scripts for the location feature will not run.&lt;br/&gt;&lt;br/&gt;        If you disable or do not configure this policy setting, all location scripts will run.&lt;br/&gt;      " gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Turn off location scripting</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off sensors" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Location and Sensors" gpmc_settingDescription="&lt;br/&gt;        This policy setting turns off the sensor feature for this computer.&lt;br/&gt;&lt;br/&gt;        If you enable this policy setting, the sensor feature is turned off, and all programs on this computer cannot use the sensor feature.&lt;br/&gt;&lt;br/&gt;        If you disable or do not configure this policy setting, all programs on this computer can use the sensor feature.&lt;br/&gt;      " gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Turn off sensors</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Microsoft Edge</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow Address bar drop-down list suggestions" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Edge" gpmc_settingDescription="This policy setting lets you decide whether the Address bar drop-down functionality is available in Microsoft Edge. We recommend disabling this setting if you want to minimize network connections from Microsoft Edge to Microsoft services.&lt;br/&gt;&lt;br/&gt;        Note: Disabling this setting turns off the Address bar drop-down functionality. Therefore, because search suggestions are shown in the drop-down, this setting takes precedence over the &amp;quot;Configure search suggestions in Address bar&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;        If you enable or don&amp;#39;t configure this setting, employees can see the Address bar drop-down functionality in Microsoft Edge.&lt;br/&gt;&lt;br/&gt;        If you disable this setting, employees won&amp;#39;t see the Address bar drop-down functionality in Microsoft Edge. This setting also disables the user-defined setting, &amp;quot;Show search and site suggestions as I type&amp;quot;." gpmc_supported="Microsoft Edge on Windows 10, Version 1703 or later">Allow Address bar drop-down list suggestions</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow clearing browsing data on exit" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Edge" gpmc_settingDescription="This policy setting allows the automatic clearing of browsing data when Microsoft Edge closes.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, clearing browsing history on exit is turned on.&lt;br/&gt;&lt;br/&gt;If you disable or don&amp;#39;t configure this policy setting, it can be turned on and configured by the employee in the Clear browsing data options under Settings.&lt;br/&gt;      " gpmc_supported="Microsoft Edge on Windows 10, Version 1703 or later">Allow clearing browsing data on exit</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow Developer Tools" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Edge" gpmc_settingDescription="This policy setting lets you decide whether F12 Developer Tools are available on Microsoft Edge.&lt;br/&gt;&lt;br/&gt;If you enable or don&amp;#39;t configure this setting, the F12 Developer Tools are available in Microsoft Edge.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the F12 Developer Tools aren&amp;#39;t available in Microsoft Edge." gpmc_supported="Microsoft Edge on Windows 10, Version 1511 or later">Allow Developer Tools</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow Extensions" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Edge" gpmc_settingDescription="This setting lets you decide whether employees can load extensions in Microsoft Edge.&lt;br/&gt;&lt;br/&gt;If you enable or don&amp;#39;t configure this setting, employees can use Microsoft Edge Extensions.&lt;br/&gt;&lt;br/&gt;If you disable this setting, employees can&amp;#39;t use Microsoft Edge Extensions." gpmc_supported="Microsoft Edge on Windows 10, Version 1607 or later">Allow Extensions</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow InPrivate browsing" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Edge" gpmc_settingDescription="This policy setting lets you decide whether employees can browse using InPrivate website browsing.&lt;br/&gt;&lt;br/&gt;If you enable or don&amp;#39;t configure this setting, employees can use InPrivate website browsing.&lt;br/&gt;&lt;br/&gt;If you disable this setting, employees can&amp;#39;t use InPrivate website browsing." gpmc_supported="Microsoft Edge on Windows 10, Version 1511 or later">Allow InPrivate browsing</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow search engine customization" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Edge" gpmc_settingDescription="This policy setting lets you decide whether users can change their search engine. If you disable this setting, users can&amp;#39;t add new search engines or change the default used in the address bar.&lt;br/&gt;&lt;br/&gt;Important&lt;br/&gt;This setting can only be used with domain-joined or MDM-enrolled devices. For more info, see the Microsoft browser extension policy (aka.ms/browserpolicy).&lt;br/&gt;&lt;br/&gt;If you enable or don&amp;#39;t configure this policy, users can add new search engines and change the default used in the address bar from within Microsoft Edge Settings.&lt;br/&gt;&lt;br/&gt;If you disable this setting, users can&amp;#39;t add search engines or change the default used in the address bar." gpmc_supported="Microsoft Edge on Windows 10, Version 1703 or later">Allow search engine customization</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Configure Autofill" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Edge" gpmc_settingDescription="This policy setting lets you decide whether employees can use Autofill to automatically fill in form fields while using Microsoft Edge. By default, employees can choose whether to use Autofill.&lt;br/&gt;&lt;br/&gt;If you enable this setting, employees can use Autofill to automatically fill in forms while using Microsoft Edge.&lt;br/&gt;&lt;br/&gt;If you disable this setting, employees can&amp;#39;t use Autofill to automatically fill in forms while using Microsoft Edge.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this setting, employees can choose whether to use Autofill to automatically fill in forms while using Microsoft Edge." gpmc_supported="Microsoft Edge on Windows 10 or later">Configure Autofill</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Configure cookies" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Edge" gpmc_settingDescription="This setting lets you configure how to work with cookies.&lt;br/&gt;&lt;br/&gt;If you enable this setting, you must also decide whether to:&lt;br/&gt;     Allow all cookies (default): Allows all cookies from all websites.&lt;br/&gt;     Block all cookies: Blocks all cookies from all websites.&lt;br/&gt;     Block only 3rd-party cookies: Blocks only cookies from 3rd-party websites.&lt;br/&gt;&lt;br/&gt;If you disable or don&amp;#39;t configure this setting, all cookies are allowed from all sites." gpmc_supported="Microsoft Edge on Windows 10 or later">Configure cookies</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Configure Cookies </td><td>Block only 3rd-party cookies</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Configure Password Manager" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Edge" gpmc_settingDescription="This policy setting lets you decide whether employees can save their passwords locally, using Password Manager. By default, Password Manager is turned on.&lt;br/&gt;&lt;br/&gt;If you enable this setting, employees can use Password Manager to save their passwords locally.&lt;br/&gt;&lt;br/&gt;If you disable this setting, employees can&amp;#39;t use Password Manager to save their passwords locally.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this setting, employees can choose whether to use Password Manager to save their passwords locally." gpmc_supported="Microsoft Edge on Windows 10 or later">Configure Password Manager</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent access to the about:flags page in Microsoft Edge" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Edge" gpmc_settingDescription="This policy settings lets you decide whether employees can access the about:flags page, which is used to change developer settings and to enable experimental features.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, employees can&amp;#39;t access the about:flags page.&lt;br/&gt;&lt;br/&gt;If you disable or don&amp;#39;t configure this setting, employees can access the about:flags page." gpmc_supported="Microsoft Edge on Windows 10, Version 1607 or later">Prevent access to the about:flags page in Microsoft Edge</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent Microsoft Edge from gathering Live Tile information when pinning a site to Start" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Edge" gpmc_settingDescription="This policy lets you decide whether Microsoft Edge can gather Live Tile metadata from the ieonline.microsoft.com service to provide a better experience while pinning a Live Tile to the Start menu.&lt;br/&gt;&lt;br/&gt;If you enable this setting, Microsoft Edge won&amp;#39;t gather the Live Tile metadata, providing a minimal experience when a user pins a Live Tile to the Start menu.&lt;br/&gt;&lt;br/&gt;If you disable or don&amp;#39;t configure this setting, Microsoft Edge gathers the Live Tile metadata, providing a fuller and more complete experience when a user pins a Live Tile to the Start menu." gpmc_supported="Microsoft Edge on Windows 10, Version 1703 or later">Prevent Microsoft Edge from gathering Live Tile information when pinning a site to Start</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Microsoft Management Console</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Restrict users to the explicitly permitted list of snap-ins" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console" gpmc_settingDescription="Lets you selectively permit or prohibit the use of Microsoft Management Console (MMC) snap-ins.&lt;br/&gt;&lt;br/&gt;--  If you enable this setting, all snap-ins are prohibited, except those that you explicitly permit. Use this setting if you plan to prohibit use of most snap-ins.&lt;br/&gt;&lt;br/&gt;    To explicitly permit a snap-in, open the Restricted/Permitted snap-ins setting folder and enable the settings representing the snap-in you want to permit. If a snap-in setting in the folder is disabled or not configured, the snap-in is prohibited.&lt;br/&gt;&lt;br/&gt;--  If you disable this setting or do not configure it, all snap-ins are permitted, except those that you explicitly prohibit. Use this setting if you plan to permit use of most snap-ins.&lt;br/&gt;&lt;br/&gt;    To explicitly prohibit a snap-in, open the Restricted/Permitted snap-ins setting folder and then disable the settings representing the snap-ins you want to prohibit. If a snap-in setting in the folder is enabled or not configured, the snap-in is permitted.&lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.&lt;br/&gt;&lt;br/&gt;Note: If you enable this setting, and you do not enable any settings in the Restricted/Permitted snap-ins folder, users cannot use any MMC snap-ins." gpmc_supported="At least Windows 2000">Restrict users to the explicitly permitted list of snap-ins</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName=".Net Framework Configuration" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">.Net Framework Configuration</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Active Directory Domains and Trusts" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Active Directory Domains and Trusts</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Active Directory Sites and Services" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Active Directory Sites and Services</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Active Directory Users and Computers" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Active Directory Users and Computers</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="ActiveX Control" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="Permits or prohibits use of this snap-in.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the snap-in is permitted. If you disable the setting, the snap-in is prohibited.&lt;br/&gt;&lt;br/&gt;If this setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited.&lt;br/&gt;&lt;br/&gt;--  If &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted.&lt;br/&gt;&lt;br/&gt;    To explicitly permit use of this snap-in, enable this setting. If this setting is not configured (or disabled), this snap-in is prohibited.&lt;br/&gt;&lt;br/&gt;--  If &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited.&lt;br/&gt;&lt;br/&gt;    To explicitly prohibit use of this snap-in, disable this setting. If this setting is not configured (or enabled), the snap-in is permitted.&lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">ActiveX Control</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="ADSI Edit" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">ADSI Edit</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Certificate Templates" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Server 2003">Certificate Templates</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Certificates" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Certificates</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Certification Authority" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Certification Authority</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Component Services" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Component Services</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Computer Management" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Computer Management</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Device Manager" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Device Manager</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="DFS Management" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited.&lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited.&lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted.&lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Server 2003 R2">DFS Management</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disk Defragmenter" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Disk Defragmenter</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disk Management" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Disk Management</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Distributed File System" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Distributed File System</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enterprise PKI" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Vista">Enterprise PKI</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Event Viewer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Event Viewer</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Event Viewer (Windows Vista)" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Vista">Event Viewer (Windows Vista)</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Failover Clusters Manager" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Vista">Failover Clusters Manager</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="FAX Service" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">FAX Service</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="File Server Resource Manager" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited.&lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited.&lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted.&lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Server 2003 R2">File Server Resource Manager</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="FrontPage Server Extensions" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">FrontPage Server Extensions</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Health Registration Authority (HRA)" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Vista">Health Registration Authority (HRA)</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Indexing Service" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Indexing Service</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Internet Authentication Service (IAS)" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="Windows Server 2003 only">Internet Authentication Service (IAS)</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Internet Information Services" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Internet Information Services</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="IP Security Monitor" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">IP Security Monitor</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="IP Security Policy Management" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">IP Security Policy Management</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Local Users and Groups" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Local Users and Groups</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="NAP Client Configuration" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Vista">NAP Client Configuration</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Network Policy Server (NPS)" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Vista">Network Policy Server (NPS)</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Online Responder" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Vista">Online Responder</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Performance Logs and Alerts" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Performance Logs and Alerts</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="QoS Admission Control" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">QoS Admission Control</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remote Desktop Services Configuration" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Remote Desktop Services Configuration</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remote Desktops" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Remote Desktops</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Removable Storage Management" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Removable Storage Management</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Routing and Remote Access" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Routing and Remote Access</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Security Configuration and Analysis" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Security Configuration and Analysis</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Security Templates" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Security Templates</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Server Manager" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Server Manager</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Services" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Services</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Share and Storage Management" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited.&lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited.&lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted.&lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Server 2003 R2">Share and Storage Management</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Shared Folders" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Shared Folders</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Storage Manager for SANs" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited.&lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited.&lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted.&lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Server 2003 R2">Storage Manager for SANs</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="System Information" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">System Information</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Telephony" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Telephony</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="TPM Management" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Vista">TPM Management</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Windows Firewall with Advanced Security" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows Vista">Windows Firewall with Advanced Security</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Wireless Monitor" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Wireless Monitor</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="WMI Control" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">WMI Control</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Network Sharing</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent users from sharing files within their profile." gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Network Sharing" gpmc_settingDescription="This policy setting specifies whether users can share files within their profile. By default users are allowed to share files within their profile to other users on their network after an administrator opts in the computer.  An administrator can opt in the computer by using the sharing wizard to share a file within their profile.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users cannot share files within their profile using the sharing wizard.  Also, the sharing wizard cannot create a share at %root%\users and can only be used to create SMB shares on folders.&lt;br/&gt;&lt;br/&gt;If you disable or don&amp;#39;t configure this policy setting, users can share files out of their user profile after an administrator has opted in the computer." gpmc_supported="At least Windows Vista">Prevent users from sharing files within their profile.</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Search</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent adding UNC locations to index from Control Panel" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Search" gpmc_settingDescription="Enabling this policy prevents users from adding UNC locations to the index from the Search and Indexing Options in Control Panel.  Any UNC locations that have already been added to the index by the user will not be removed.&lt;br/&gt;&lt;br/&gt;When this policy is disabled or not configured, users will be able to add UNC locations to the index.&lt;br/&gt;&lt;br/&gt;This policy has no effect if the Files on Microsoft Networks add-in is not installed.&lt;br/&gt;&lt;br/&gt;Disabled by default." gpmc_supported="Any version of Microsoft Windows with Windows Search 4.0 or later">Prevent adding UNC locations to index from Control Panel</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent customization of indexed locations in Control Panel" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Search" gpmc_settingDescription="If enabled, Search and Indexing Options in Control Panel does not allow opening the Modify Locations dialog. Otherwise it can be opened. Disabled by default." gpmc_supported="Any version of Microsoft Windows with Windows Search 4.0 or later">Prevent customization of indexed locations in Control Panel</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off storage and display of search history" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Search" gpmc_settingDescription="This policy setting prevents search queries from being stored in the registry. If you enable this policy setting, search suggestions based on previous searches won&amp;#39;t appear in the search pane. Search suggestions provided by apps or by Windows based on local content will still appear.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users will get search suggestions based on previous searches in the search pane." gpmc_supported="Microsoft Windows 8 or later">Turn off storage and display of search history</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Store</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off the Store application" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Store" gpmc_settingDescription="Denies or allows access to the Store application.&lt;br/&gt;&lt;br/&gt;If you enable this setting, access to the Store application is denied. Access to the Store is required for installing app updates.&lt;br/&gt;&lt;br/&gt;If you disable or don&amp;#39;t configure this setting, access to the Store application is allowed." gpmc_supported="At least Windows Server 2012, Windows 8 or Windows RT">Turn off the Store application</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Tablet PC/Accessories</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not allow Inkball to run" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Tablet PC/Accessories" gpmc_settingDescription="Prevents start of InkBall game.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the InkBall game will not run.&lt;br/&gt;&lt;br/&gt;If you disable this policy, the InkBall game will run.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy, the InkBall game will run." gpmc_supported="Windows Vista only">Do not allow Inkball to run</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not allow printing to Journal Note Writer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Tablet PC/Accessories" gpmc_settingDescription="Prevents printing to Journal Note Writer.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Journal Note Writer printer driver will not allow printing to it. It will remain displayed in the list of available printers, but attempts to print to it will fail.&lt;br/&gt;&lt;br/&gt;If you disable this policy, you will be able to use this feature to print to a Journal Note.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy, users will be able to use this feature to print to a Journal Note." gpmc_supported="At least Windows Vista">Do not allow printing to Journal Note Writer</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not allow Windows Journal to be run" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Tablet PC/Accessories" gpmc_settingDescription="Prevents start of Windows Journal.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Windows Journal accessory will not run.&lt;br/&gt;&lt;br/&gt;If you disable this policy, the Windows Journal accessory will run.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy, the Windows Journal accessory will run." gpmc_supported="At least Windows Vista">Do not allow Windows Journal to be run</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Tablet PC/Hardware Buttons</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent launch an application" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Tablet PC/Hardware Buttons" gpmc_settingDescription="Prevents the user from launching an application from a Tablet PC hardware button.&lt;br/&gt;&lt;br/&gt;If you enable this policy, applications cannot be launched from a hardware button, and &amp;quot;Launch an application&amp;quot; is removed from the drop down menu for configuring button actions (in the Tablet PC Control Panel buttons tab).&lt;br/&gt;&lt;br/&gt;If you disable this policy, applications can be launched from a hardware button.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy, applications can be launched from a hardware button." gpmc_supported="At least Windows Vista">Prevent launch an application</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent press and hold" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Tablet PC/Hardware Buttons" gpmc_settingDescription="Prevents press and hold actions on hardware buttons, so that only one action is available per button.&lt;br/&gt;&lt;br/&gt;If you enable this policy, press and hold actions are unavailable, and the button configuration dialog will display the following text:  &amp;quot;Some settings are controlled by Group Policy. If a setting is unavailable, contact your system administrator.&amp;quot;&lt;br/&gt;&lt;br/&gt;If you disable this policy, press and hold actions for buttons will be available.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy, press and hold actions will be available." gpmc_supported="At least Windows Vista">Prevent press and hold</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off hardware buttons" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Tablet PC/Hardware Buttons" gpmc_settingDescription="Turns off Tablet PC hardware buttons.&lt;br/&gt;&lt;br/&gt;If you enable this policy, no actions will occur when the buttons are pressed, and the buttons tab in Tablet PC Control Panel will be removed.&lt;br/&gt;&lt;br/&gt;If you disable this policy, user and OEM defined button actions will occur when the buttons are pressed.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy, user and OEM defined button actions will occur when the buttons are pressed." gpmc_supported="At least Windows Vista">Turn off hardware buttons</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Task Scheduler</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Advanced Properties Checkbox in Add Scheduled Task Wizard" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Task Scheduler" gpmc_settingDescription="This setting removes the &amp;quot;Open advanced properties for this task when I click Finish&amp;quot; checkbox from the last page of the Scheduled Task Wizard.  This policy is only designed to simplify task creation for beginning users.&lt;br/&gt;&lt;br/&gt;The checkbox, when checked, instructs Task Scheduler to automatically open the newly created task&amp;#39;s property sheet upon completion of the &amp;quot;Add Scheduled Task&amp;quot; wizard.  The task&amp;#39;s property sheet allows users to change task characteristics such as: the program the task runs, details of its schedule, idle time and power management settings, and its security context.  Beginning users will often not be interested or confused by having the property sheet displayed automatically.  Note that the checkbox is not checked by default even if this setting is Disabled or Not Configured.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Hide Advanced Properties Checkbox in Add Scheduled Task Wizard</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Property Pages" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Task Scheduler" gpmc_settingDescription="Prevents users from viewing and changing the properties of an existing task.&lt;br/&gt;&lt;br/&gt;This setting removes the Properties item from the File menu in Scheduled Tasks and from the context menu that appears when you right-click a task. As a result, users cannot change any properties of a task. They can only see the properties that appear in Detail view and in the task preview.&lt;br/&gt;&lt;br/&gt;This setting prevents users from viewing and changing characteristics such as the program the task runs, its schedule details, idle time and power management settings, and its security context.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Tip: This setting affects existing tasks only. To prevent users from changing the properties of newly created tasks, use the &amp;quot;Remove Advanced Menu&amp;quot; setting." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Hide Property Pages</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent Task Run or End" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Task Scheduler" gpmc_settingDescription="Prevents users from starting and stopping tasks manually.&lt;br/&gt;&lt;br/&gt;This setting removes the Run and End Task items from the context menu that appears when you right-click a task. As a result, users cannot start tasks manually or force tasks to end before they are finished.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Prevent Task Run or End</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit Browse" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Task Scheduler" gpmc_settingDescription="Limits newly scheduled to items on the user&amp;#39;s Start menu, and prevents the user from changing the scheduled program for existing tasks.&lt;br/&gt;&lt;br/&gt;This setting removes the Browse button from the Schedule Task Wizard and from the Task tab of the properties dialog box for a task. Also, users cannot edit the &amp;quot;Run&amp;quot; box or the &amp;quot;Start in&amp;quot; box that determine the program and path for a task.&lt;br/&gt;&lt;br/&gt;As a result, when users create a task, they must select a program from the list in the Scheduled Task Wizard, which displays only the tasks that appear on the Start menu and its submenus. Once a task is created, users cannot change the program a task runs.&lt;br/&gt;&lt;br/&gt;Important: This setting does not prevent users from creating a new task by pasting or dragging any program into the Scheduled Tasks folder. To prevent this action, use the &amp;quot;Prohibit Drag-and-Drop&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Prohibit Browse</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit Drag-and-Drop" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Task Scheduler" gpmc_settingDescription="Prevents users from adding or removing tasks by moving or copying programs in the Scheduled Tasks folder.&lt;br/&gt;&lt;br/&gt;This setting disables the Cut, Copy, Paste, and Paste Shortcut items on the context menu and the Edit menu in Scheduled Tasks. It also disables the drag-and-drop features of the Scheduled Tasks folder.&lt;br/&gt;&lt;br/&gt;As a result, users cannot add new scheduled tasks by dragging, moving, or copying a document or program into the Scheduled tasks folder.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other methods to create new tasks, and it does not prevent users from deleting tasks.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Prohibit Drag-and-Drop</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit New Task Creation" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Task Scheduler" gpmc_settingDescription="Prevents users from creating new tasks.&lt;br/&gt;&lt;br/&gt;This setting removes the Add Scheduled Task item that starts the New Task Wizard. Also, the system does not respond when users try to move, paste, or drag programs or documents into the Scheduled Tasks folder.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Important: This setting does not prevent administrators of a computer from using At.exe to create new tasks or prevent administrators from submitting tasks from remote computers." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Prohibit New Task Creation</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit Task Deletion" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Task Scheduler" gpmc_settingDescription="Prevents users from deleting tasks from the Scheduled Tasks folder.&lt;br/&gt;&lt;br/&gt;This setting removes the Delete command from the Edit menu in the Scheduled Tasks folder and from the menu that appears when you right-click a task. Also, the system does not respond when users try to cut or drag a task from the Scheduled Tasks folder.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Important: This setting does not prevent administrators of a computer from using At.exe to delete tasks." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Prohibit Task Deletion</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Media Player</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent CD and DVD Media Information Retrieval" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Player" gpmc_settingDescription="This policy setting allows you to prevent media information for CDs and DVDs from being retrieved from the Internet.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Player is prevented from automatically obtaining media information from the Internet for CDs and DVDs played by users. In addition, the Retrieve media information for CDs and DVDs from the Internet check box on the Privacy Options tab in the first use dialog box and on the Privacy tab in the Player are not selected and are not available.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can change the setting of the Retrieve media information for CDs and DVDs from the Internet check box." gpmc_supported="Windows Media Player 9 Series and later.">Prevent CD and DVD Media Information Retrieval</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent Music File Media Information Retrieval" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Player" gpmc_settingDescription="This policy setting allows you to prevent media information for music files from being retrieved from the Internet.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Player is prevented from automatically obtaining media information for music files such as Windows Media Audio (WMA) and MP3 files from the Internet. In addition, the Update my music files (WMA and MP3 files) by retrieving missing media information from the Internet check box in the first use dialog box and on the Privacy and Media Library tabs in the Player are not selected and are not available.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can change the setting of the Update my music files (WMA and MP3 files) by retrieving missing media information from the Internet check box." gpmc_supported="Windows Media Player 9 Series and later.">Prevent Music File Media Information Retrieval</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent Radio Station Preset Retrieval" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Player" gpmc_settingDescription="This policy setting allows you to prevent radio station presets from being retrieved from the Internet.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Player is prevented from automatically retrieving radio station presets from the Internet and displaying them in Media Library. In addition, presets that exist before the policy is configured are not be updated, and presets a user adds are not be displayed.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Player automatically retrieves radio station presets from the Internet." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Prevent Radio Station Preset Retrieval</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Media Player/Networking</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Network Tab" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Player/Networking" gpmc_settingDescription="This policy setting allows you to hide the Network tab.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Network tab in Windows Media Player is hidden. The default network settings are used unless the user has previously defined network settings for the Player.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Network tab appears and users can use it to configure network settings." gpmc_supported="Windows Media Player for Windows XP and later.">Hide Network Tab</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Media Player/Playback</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow Screen Saver" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Player/Playback" gpmc_settingDescription="This policy setting allows a screen saver to interrupt playback.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, a screen saver is displayed during playback of digital media according to the options selected on the Screen Saver tab in the Display Properties dialog box in Control Panel. The Allow screen saver during playback check box on the Player tab in the Player is selected and is not available.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, a screen saver does not interrupt playback even if users have selected a screen saver. The Allow screen saver during playback check box is cleared and is not available.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users can change the setting for the Allow screen saver during playback check box." gpmc_supported="Windows Media Player 9 Series and later.">Allow Screen Saver</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Messenger</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not allow Windows Messenger to be run" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Messenger" gpmc_settingDescription="This policy setting allows you to prevent Windows Messenger from running.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows Messenger does not run.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Windows Messenger can be used.&lt;br/&gt;&lt;br/&gt;Note: If you enable this policy setting, Remote Assistance also cannot use Windows Messenger.&lt;br/&gt;&lt;br/&gt;Note: This policy setting is available under both Computer Configuration and User Configuration. If both are present, the Computer Configuration version of this policy setting takes precedence." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Do not allow Windows Messenger to be run</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not automatically start Windows Messenger initially" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Messenger" gpmc_settingDescription="This policy setting prevents Windows Messenger from automatically running at logon. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows Messenger is not loaded automatically when a user logs on.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Windows Messenger will be loaded automatically at logon.&lt;br/&gt;&lt;br/&gt;Note: This policy setting simply prevents Windows Messenger from running initially. If the user invokes and uses Windows Messenger from that point on, Windows Messenger will be loaded.&lt;br/&gt;&lt;br/&gt;The user can also configure this behavior on the Preferences tab on the Tools menu in the Windows Messenger user interface.&lt;br/&gt;&lt;br/&gt;Note: If you do not want users to use Windows Messenger, enable the &amp;quot;Do not allow Windows Messenger to run&amp;quot; policy setting.&lt;br/&gt;&lt;br/&gt;Note: This policy setting is available under both Computer Configuration and User Configuration. If both are present, the Computer Configuration version of this policy setting takes precedence." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Do not automatically start Windows Messenger initially</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows SideShow</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Windows SideShow" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows SideShow" gpmc_settingDescription="This policy setting turns off Windows SideShow.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Windows SideShow Control Panel will be disabled and data from Windows SideShow-compatible gadgets (applications) will not be sent to connected devices. &lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Windows SideShow is on by default." gpmc_supported="At least Windows Vista">Turn off Windows SideShow</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Extra Registry Settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">Display names for some settings cannot be found. You might be able to resolve this issue by updating the .ADM files used by Group Policy Management.<br/><br/><table class="info" >
<tr><th scope="col">Setting</th><th scope="col">State</th></tr>
<tr><td>Software\Policies\Mozilla\Firefox\SanitizeOnShutdown</td><td>1</td></tr>
</table>
</div></div></div></div><div class="filler"></div>
<div class="he1h_expanded"><span class="sectionTitle" tabindex="0">Preferences</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1_expanded"><span class="sectionTitle" tabindex="0">Windows Settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he2"><span class="sectionTitle" tabindex="0">Folders</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">Folder (Path: C:\Users\%Username%\AppData\Local\Microsoft\Windows\WinX\Group2)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">Group2 (Order: 1)</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Delete</td></tr>
</table>
<b>Attributes</b><table class="subtable" ><tr><td>Path</td><td>C:\Users\%Username%\AppData\Local\Microsoft\Windows\WinX\Group2</td></tr>
</table><table class="info" >
<tr><td>Delete this folder (if emptied)</td><td>Enabled</td></tr>
<tr><td>Recursively delete all subfolders (if emptied)</td><td>Enabled</td></tr>
<tr><td>Delete all files in the folder(s)</td><td>Enabled</td></tr>
<tr><td>Allow deletion of read-only files/folders</td><td>Enabled</td></tr>
<tr><td>Ignore errors for files/folders that cannot be deleted</td><td>Enabled</td></tr>
</table>
</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Folder (Path: C:\Users\%Username%\AppData\Local\Microsoft\Windows\WinX\Group3)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">Group3 (Order: 2)</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Delete</td></tr>
</table>
<b>Attributes</b><table class="subtable" ><tr><td>Path</td><td>C:\Users\%Username%\AppData\Local\Microsoft\Windows\WinX\Group3</td></tr>
</table><table class="info" >
<tr><td>Delete this folder (if emptied)</td><td>Enabled</td></tr>
<tr><td>Recursively delete all subfolders (if emptied)</td><td>Enabled</td></tr>
<tr><td>Delete all files in the folder(s)</td><td>Enabled</td></tr>
<tr><td>Allow deletion of read-only files/folders</td><td>Enabled</td></tr>
<tr><td>Ignore errors for files/folders that cannot be deleted</td><td>Enabled</td></tr>
</table>
</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Folder (Path: C:\Users\%Username%\AppData\Local\Microsoft\Windows\WinX\Group4)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">Group4 (Order: 3)</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Delete</td></tr>
</table>
<b>Attributes</b><table class="subtable" ><tr><td>Path</td><td>C:\Users\%Username%\AppData\Local\Microsoft\Windows\WinX\Group4</td></tr>
</table><table class="info" >
<tr><td>Delete this folder (if emptied)</td><td>Enabled</td></tr>
<tr><td>Recursively delete all subfolders (if emptied)</td><td>Enabled</td></tr>
<tr><td>Delete all files in the folder(s)</td><td>Enabled</td></tr>
<tr><td>Allow deletion of read-only files/folders</td><td>Enabled</td></tr>
<tr><td>Ignore errors for files/folders that cannot be deleted</td><td>Enabled</td></tr>
</table>
</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Folder (Path: C:\Users\%Username%\AppData\Local\Microsoft\OneDrive)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">OneDrive (Order: 4)</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Delete</td></tr>
</table>
<b>Attributes</b><table class="subtable" ><tr><td>Path</td><td>C:\Users\%Username%\AppData\Local\Microsoft\OneDrive</td></tr>
</table><table class="info" >
<tr><td>Delete this folder (if emptied)</td><td>Enabled</td></tr>
<tr><td>Recursively delete all subfolders (if emptied)</td><td>Enabled</td></tr>
<tr><td>Delete all files in the folder(s)</td><td>Enabled</td></tr>
<tr><td>Allow deletion of read-only files/folders</td><td>Enabled</td></tr>
<tr><td>Ignore errors for files/folders that cannot be deleted</td><td>Enabled</td></tr>
</table>
</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Folder (Path: C:\Users\%Username%\OneDrive)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">OneDrive (Order: 5)</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Delete</td></tr>
</table>
<b>Attributes</b><table class="subtable" ><tr><td>Path</td><td>C:\Users\%Username%\OneDrive</td></tr>
</table><table class="info" >
<tr><td>Delete this folder (if emptied)</td><td>Enabled</td></tr>
<tr><td>Recursively delete all subfolders (if emptied)</td><td>Enabled</td></tr>
<tr><td>Delete all files in the folder(s)</td><td>Enabled</td></tr>
<tr><td>Allow deletion of read-only files/folders</td><td>Enabled</td></tr>
<tr><td>Ignore errors for files/folders that cannot be deleted</td><td>Enabled</td></tr>
</table>
</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Folder (Path: C:\Users\%Username%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">Programs (Order: 6)</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Delete</td></tr>
</table>
<b>Attributes</b><table class="subtable" ><tr><td>Path</td><td>C:\Users\%Username%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs</td></tr>
</table><table class="info" >
<tr><td>Delete this folder (if emptied)</td><td>Enabled</td></tr>
<tr><td>Recursively delete all subfolders (if emptied)</td><td>Enabled</td></tr>
<tr><td>Delete all files in the folder(s)</td><td>Enabled</td></tr>
<tr><td>Allow deletion of read-only files/folders</td><td>Enabled</td></tr>
<tr><td>Ignore errors for files/folders that cannot be deleted</td><td>Enabled</td></tr>
</table>
</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div></div></div><div class="he2"><span class="sectionTitle" tabindex="0">Registry</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">ShellFeedsTaskbarViewMode (Order: 1)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_CURRENT_USER</td></tr>
<tr><td>Key path</td><td>SOFTWARE\Microsoft\Windows\CurrentVersion\Feeds</td></tr>
<tr><td>Value name</td><td>ShellFeedsTaskbarViewMode</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x2 (2)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">DisableNotificationCenter (Order: 2)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_CURRENT_USER</td></tr>
<tr><td>Key path</td><td>Software\Policies\Microsoft\Windows\Explorer</td></tr>
<tr><td>Value name</td><td>DisableNotificationCenter</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x1 (1)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Enabled (Order: 3)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_CURRENT_USER</td></tr>
<tr><td>Key path</td><td>Software\Microsoft\Windows\CurrentVersion\Explorer\MultiTaskingView\AllUpView</td></tr>
<tr><td>Value name</td><td>Enabled</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x0 (0)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">EnableProactive (Order: 4)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_CURRENT_USER</td></tr>
<tr><td>Key path</td><td>Software\Microsoft\Windows\CurrentVersion\Search</td></tr>
<tr><td>Value name</td><td>EnableProactive</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x0 (0)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">NoStartMenuMorePrograms (Order: 5)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_CURRENT_USER</td></tr>
<tr><td>Key path</td><td>SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer</td></tr>
<tr><td>Value name</td><td>NoStartMenuMorePrograms</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x1 (1)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">SearchboxTaskbarMode (Order: 6)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_CURRENT_USER</td></tr>
<tr><td>Key path</td><td>Software\Microsoft\Windows\CurrentVersion\Search</td></tr>
<tr><td>Value name</td><td>SearchboxTaskbarMode</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x0 (0)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Collection: Registry Wizard Values/HKEY_CURRENT_USER/Software/Microsoft/Windows/CurrentVersion/Explorer/Advanced</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div><div class="he4"><span class="sectionTitle" tabindex="0">Registry item: DisabledHotkeys</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_CURRENT_USER</td></tr>
<tr><td>Key path</td><td>Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced</td></tr>
<tr><td>Value name</td><td>DisabledHotkeys</td></tr>
<tr><td>Value type</td><td>REG_SZ</td></tr>
<tr><td>Value data</td><td>S</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div></div></div></div></div></div>
</body></html>