<html dir="ltr" xmlns:svg="http://www.w3.org/2000/svg" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape" gpmc_reportInitialized="false">
<head>
<meta http-equiv="X-UA-Compatible" content="IE=edge" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-16" />
<title>LT-PO-SEC-C-Workstations common policy</title>
<!-- Styles -->
<style type="text/css">
                body    { background-color:#FFFFFF; border:1px solid #666666; color:#000000; font-size:68%; font-family:MS Shell Dlg; margin:0,0,10px,0; word-break:normal; word-wrap:break-word; }

                table   { font-size:100%; table-layout:fixed; width:100%; }

                td,th   { overflow:visible; text-align:left; vertical-align:top; white-space:normal; }

                .title  { background:#FFFFFF; border:none; color:#333333; display:inline-table; height:24px; margin:0px,0px,0px,0px; padding-top:0px; position:relative; table-layout:fixed; z-index:5; }

                .he0_expanded    { background-color:#FEF7D6; border:1px solid #BBBBBB; color:#3333CC; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:0px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; }

                .he1_expanded    { background-color:#A0BACB; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:20px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; }

                .he0h_expanded   { background-color: #FEF0D0; border: 1px solid #BBBBBB; color: #000000; cursor: hand; display: block; font-family: MS Shell Dlg; font-size: 100%; font-weight: bold; height: 2.25em; margin-bottom: -1px; margin-left: 5px; margin-right: 0px; padding-left: 8px; padding-right: 5em; padding-top: 4px; position: relative;  }
                .he1h_expanded   { background-color: #7197B3; border: 1px solid #BBBBBB; color: #000000; cursor: hand; display: block; font-family: MS Shell Dlg; font-size: 100%; font-weight: bold; height: 2.25em; margin-bottom: -1px; margin-left: 10px; margin-right: 0px; padding-left: 8px; padding-right: 5em; padding-top: 4px; position: relative; }

                .he1    { background-color:#A0BACB; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:20px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; }

                .he2    { background-color:#C0D2DE; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:30px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; }

                .he3    { background-color:#D9E3EA; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:40px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; }

                .he4    { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:50px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; }

                .he4h   { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:55px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; }

                .he4i   { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:55px; margin-right:0px; padding-bottom:5px; padding-left:21px; padding-top:4px; position:relative; }

                .he2i   { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:35px; margin-right:0px; padding-bottom:5px; padding-left:21px; padding-top:4px; position:relative;}
                .he5    { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:60px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; }

                .he5h   { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; padding-right:5em; padding-top:4px; margin-bottom:-1px; margin-left:65px; margin-right:0px; position:relative; }

                .he5i   { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:65px; margin-right:0px; padding-left:21px; padding-bottom:5px; padding-top: 4px; position:relative; }

                div .expando { color:#000000; text-decoration:none; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:normal; position:absolute; right:10px; text-decoration:underline; z-index: 0; }

                .he0 .expando { font-size:100%; }

                .info, .info3, .info4, .disalign  { line-height:1.6em; padding:0px,0px,0px,0px; margin:0px,0px,0px,0px; }

                .disalign TD                      { padding-bottom:5px; padding-right:10px; }

                .info TD                          { padding-right:10px; width:50%; }

                .info3 TD                         { padding-right:10px; width:33%; }

                .info4 TD, .info4 TH              { padding-right:10px; width:25%; }

                .info TH, .info3 TH, .info4 TH, .disalign TH { border-bottom:1px solid #CCCCCC; padding-right:10px; }

                .subtable, .subtable3             { border:1px solid #CCCCCC; margin-left:0px; background:#FFFFFF; margin-bottom:10px; }

                .subtable TD, .subtable3 TD       { padding-left:10px; padding-right:5px; padding-top:3px; padding-bottom:3px; line-height:1.1em; }

                .subtable TH, .subtable3 TH       { border-bottom:1px solid #CCCCCC; font-weight:normal; padding-left:10px; line-height:1.6em;  }

                .subtable .footnote               { border-top:1px solid #CCCCCC; }

                .subtable3 .footnote, .subtable .footnote { border-top:1px solid #CCCCCC; }

                .subtable_frame     { background:#D9E3EA; border:1px solid #CCCCCC; margin-bottom:10px; margin-left:15px; }

                .subtable_frame TD  { line-height:1.1em; padding-bottom:3px; padding-left:10px; padding-right:15px; padding-top:3px; }

                .subtable_frame TH  { border-bottom:1px solid #CCCCCC; font-weight:normal; padding-left:10px; line-height:1.6em; }

                .subtableInnerHead { border-bottom:1px solid #CCCCCC; border-top:1px solid #CCCCCC; }

                .explainlink            { color:#0000FF; text-decoration:none; cursor:hand; }

                .explainlink:hover      { color:#0000FF; text-decoration:underline; }

                .spacer { background:transparent; border:1px solid #BBBBBB; color:#FFFFFF; display:block; font-family:MS Shell Dlg; font-size:100%; height:10px; margin-bottom:-1px; margin-left:43px; margin-right:0px; padding-top: 4px; position:relative; }

                .filler { background:transparent; border:none; color:#FFFFFF; display:block; font:100% MS Shell Dlg; line-height:8px; margin-bottom:-1px; margin-left:53px; margin-right:0px; padding-top:4px; position:relative; }

                .container { display:block; position:relative; }

                .rsopheader { background-color:#A0BACB; border-bottom:1px solid black; color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-bottom:5px; text-align:center; }

                .rsopname { color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-left:11px; }

                .gponame{ color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-left:11px; }

                .gpotype{ color:#333333; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; padding-left:11px; }

                #uri    { color:#333333; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; }

                #dtstamp{ color:#333333; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; text-align:left; width:30%; }

                #objshowhide { color:#000000; cursor:hand; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; margin-right:0px; padding-right:10px; text-align:right; text-decoration:underline; z-index:2; word-wrap:normal; }

                #gposummary { display:block; }

                #gpoinformation { display:block; }

                @media print {

                    #objshowhide{ display:none; }

                    body    { color:#000000; border:1px solid #000000; }

                    .title  { color:#000000; border:1px solid #000000; }

                    .he0_expanded    { color:#000000; border:1px solid #000000; }

                    .he1h_expanded   { color:#000000; border:1px solid #000000; }

                    .he1_expanded    { color:#000000; border:1px solid #000000; }

                    .he1    { color:#000000; border:1px solid #000000; }

                    .he2    { color:#000000; background:#EEEEEE; border:1px solid #000000; }

                    .he3    { color:#000000; border:1px solid #000000; }

                    .he4    { color:#000000; border:1px solid #000000; }

                    .he4h   { color:#000000; border:1px solid #000000; }

                    .he4i   { color:#000000; border:1px solid #000000; }

                    .he5    { color:#000000; border:1px solid #000000; }

                    .he5h   { color:#000000; border:1px solid #000000; }

                    .he5i   { color:#000000; border:1px solid #000000; }

                    }

</style>
<!-- Scripts -->
<script type="text/javascript" language="javascript">
/*
String "strShowHide(0/1)"
0 = Hide all mode.
1 = Show all mode.
*/

var windowsArray = new Array();
var strShowHide = 1;

//Localized strings

var strShow = "show";
var strHide = "hide";
var strShowAll = "show all";
var strHideAll = "hide all";
var strShown = "shown";
var strHidden = "hidden";
var strExpandoNumPixelsFromEdge = "10px";


function IsSectionHeader(obj) {
    return (obj.className === "he0_expanded") || (obj.className === "he0h_expanded") || (obj.className === "he1h_expanded") || (obj.className === "he1_expanded") || (obj.className === "he1") || (obj.className === "he2") || (obj.className === "he3") || (obj.className === "he4") || (obj.className === "he4h") || (obj.className === "he5") || (obj.className === "he5h");
}

function IsSectionExpandedByDefault(objHeader) {
    if (objHeader === null) {
        return false;
    } else {
        return (objHeader.className.slice(objHeader.className.lastIndexOf("_")) === "_expanded");
    }
}

function SetSectionState(objHeader, strState) {
    var i = 0;
    var j;
    var all = objHeader.parentElement.ownerDocument.all;

    if (all === null) {
        return;
    }

    for (j = 0; j < all.length; j++) {
        if (all[j] === objHeader) {
            break;
        }
        i = i + 1;
    }

    for (j = i; j < all.length; j++) {
        if (all[i].className === "container") {
            break;
        }
        i = i + 1;
    }

    var objContainer = all[i];

    if (strState === "toggle") {
        if (objContainer.style.display === "none") {
            SetSectionState(objHeader, "show");
        }
        else {
            SetSectionState(objHeader, "hide");
        }
    }
    else {
        var objExpando = objHeader.children[1];

        if (strState === "show") {
            objContainer.style.display = "block";
            objExpando.innerText = strHide;
        }
        else if (strState === "hide") {
            objContainer.style.display = "none";
            objExpando.innerText = strShow;
        }
    }
}

function ShowSection(objHeader) {
    SetSectionState(objHeader, "show");
}

function HideSection(objHeader) {
    SetSectionState(objHeader, "hide");
}

function ToggleSection(objHeader) {
    SetSectionState(objHeader, "toggle");
}

/*================================================================================
' link at the top of the page to collapse/expand all collapsable elements
'================================================================================
*/
function objshowhide_onClick() {
    var obji;
    var objBody = document.body.getElementsByTagName("*");

    if (objBody === null) {
        return;
    }
    
    switch (strShowHide) {
        case 0:
            strShowHide = 1;
            window.objshowhide.innerText = strShowAll;
            for (obji = 0; obji < objBody.length; obji++) {
                if (objBody[obji].className !== 'undefined' && IsSectionHeader(objBody[obji])) {
                    HideSection(objBody[obji]);
                }
            }
            break;
        case 1:
            strShowHide = 0;
            window.objshowhide.innerText = strHideAll;
            for (obji = 0; obji < objBody.length; obji++) {
                if (objBody[obji].className !== 'undefined' && IsSectionHeader(objBody[obji])) {
                    ShowSection(objBody[obji]);
                }
            }
            break;
    }
}

/*================================================================================
' onload collapse all except the first two levels of headers (he0, he1)
'================================================================================*/
function window_onload() {
    // Only initialize once.  The UI may reinsert a report into the webbrowser control,
    // firing onLoad multiple times.
    if (document.documentElement.getAttribute("gpmc_reportInitialized").toUpperCase() !== "TRUE") {
        // Set text direction
        fDetDir(document.dir.toUpperCase());

        // Initialize sections to default expanded/collapsed state.
        var objBody = document.body.getElementsByTagName("*");

        if (objBody === null) {
            return;
        }

        for (var obji = 0; obji < objBody.length; obji++) {
            if (IsSectionHeader(objBody[obji])) {
                if (IsSectionExpandedByDefault(objBody[obji])) {
                    ShowSection(objBody[obji]);
                }
                else {
                    HideSection(objBody[obji]);
                }
            }
        }

        objshowhide.innerText = strShowAll;

        document.documentElement.setAttribute("gpmc_reportInitialized", "true");
    }
}

/*'================================================================================
' When direction (LTR/RTL) changes, change adjust for readability
'================================================================================
*/
function document_onPropertyChange() {
    if (window.event.propertyName === "dir") {
        fDetDir(document.dir.toUpperCase());
    }
}

function fDetDir(strDir) {
    var colRules;
    var nug;
    var i;
    var strClass;

    switch (strDir.toUpperCase()) {
        case "LTR":
            colRules = document.styleSheets[0].cssRules;
            if (colRules !== null && colRules !== undefined ) {            
                for (i = 0; i < colRules.length - 1; i++) {
                    nug = colRules[i];
                    strClass = nug.selectorText;
                    if (nug.style.textAlign === "right") {
                        nug.style.textAlign = "left";
                    }
                    switch (strClass) {
                        case "div .expando":
                            nug.style.Left = "";
                            nug.style.Right = strExpandoNumPixelsFromEdge;
                            break;
                        case "#objshowhide":
                            nug.style.textAlign = "right";
                            break;
                    }
                }
            }
            break;
        case "RTL":
            colRules = document.styleSheets[0].cssRules;
            if (colRules !== null && colRules !== undefined ) {            
                for (i = 0; i < colRules.length - 1; i++) {
                    nug = colRules[i];
                    strClass = nug.selectorText;
                    if (nug.style.textAlign === "left") {
                        nug.style.textAlign = "right";
                    }
                    switch (strClass) {
                        case "div .expando":
                            nug.style.Left = strExpandoNumPixelsFromEdge;
                            nug.style.Right = "";
                            break;
                        case "#objshowhide":
                            nug.style.textAlign = "left";
                            break;
                    }
                }
            }
            break;
    }
}

/*'================================================================================
'When printing reports, if a given section is expanded, let's says "shown" (instead of "hide" in the UI).
'================================================================================
*/
function window_onbeforeprint() {
    var obji;
    for (obji in document.all) {
        if (document.all.hasOwnProperty(obji)) {
            if (obji.className === "expando") {
                if (obji.innerText === strHide) {
                    obji.innerText = strShown;
                }
                if (obji.innerText === strShow) {
                    obji.innerText = strHidden;
                }
            }
        }
    }
}

/*================================================================================
'If a section is collapsed, change to "hidden" in the printout (instead of "show").
'================================================================================
*/
function window_onafterprint() {
    var obji;
    for (obji in document.all) {
        if (document.all.hasOwnProperty(obji)) {
            if (obji.className === "expando") {
                if (obji.innerText === strShown) {
                    obji.innerText = strHide;
                }
                if (obji.innerText === strHidden) {
                    obji.innerText = strShow;
                }
            }
        }
    }
}

/*================================================================================
' Adding keypress support for accessibility
'================================================================================
*/
function document_onkeypress(event) {
    var chCode = ('charCode' in event) ? event.charCode : event.keyCode;

    //space bar (32) or carriage return (13) or line feed (10)
    if (chCode == "32" || chCode == "13" || chCode == "10") {
        if (event.srcElement.className === "expando") {
            document_onclick();
            event.returnValue = false;
        }
        if (event.srcElement.className === "sectionTitle") {
            document_onclick();
            event.returnValue = false;
        }
        if (event.srcElement.id === "objshowhide") {
            objshowhide_onClick();
            event.returnValue = false;
        }
    }
}

/*================================================================================
' When user clicks anywhere in the document body, determine if user is clicking
' on a header element.
'================================================================================
*/
function document_onclick() {
    var strsrc = window.event.srcElement;

    while (strsrc.className === "sectionTitle" || strsrc.className === "expando") {
        strsrc = strsrc.parentElement;
    }

    // Only handle clicks on headers.
    if (!IsSectionHeader(strsrc)) {
        return;
    }

    ToggleSection(strsrc);

    window.event.returnValue = false;
}

function ToggleState(e) {
    var objParentDisplayItem;
    var objDisplayItem;
    var i;

    if (e.innerText === strShow) {
        e.innerText = strHide;
        objParentDisplayItem = e.parentNode;
        objDisplayItem = objParentDisplayItem.childNodes;
        for (i = 0; i < objDisplayItem.length; i++) {
            if (objDisplayItem[i].id === "showItem") {
                objDisplayItem[i].style.display = "Block";
            }
        }
    }
    else {
        e.innerText = strShow;
        objParentDisplayItem = e.parentNode;
        objDisplayItem = objParentDisplayItem.childNodes;
        for (i = 0; i < objDisplayItem.length; i++) {
            if (objDisplayItem[i].id === "showItem") {
                objDisplayItem[i].style.display = "None";
            }
        }
    }
}

function traverseToURL(url) {
    if (url != null) {
        var urlInitialSubstr = url.substring(0, 4).toLowerCase();
        if (urlInitialSubstr === "http") {
            window.open(url, "_blank");
        }
    }
}

function getExplainWindowTitle() {
    return document.getElementById("explainText_windowTitle").innerHTML;
}

function getExplainWindowStyles() {
    return document.getElementById("explainText_windowStyles").innerHTML;
}

function getExplainWindowSettingPathLabel() {
    return document.getElementById("explainText_settingPathLabel").innerHTML;
}

function getExplainWindowExplainTextLabel() {
    return document.getElementById("explainText_explainTextLabel").innerHTML;
}

function getExplainWindowPrintButton() {
    return document.getElementById("explainText_printButton").innerHTML;
}

function getExplainWindowCloseButton() {
    return document.getElementById("explainText_closeButton").innerHTML;
}

function getNoExplainTextAvailable() {
    return document.getElementById("explainText_noExplainTextAvailable").innerHTML;
}

function getExplainWindowSupportedLabel() {
    return document.getElementById("explainText_supportedLabel").innerHTML;
}

function getNoSupportedTextAvailable() {
    return document.getElementById("explainText_noSupportedTextAvailable").innerHTML;
}

function showExplainText(srcElement)
{
    var strDiagArgs;

    var strSettingName = srcElement.getAttribute("gpmc_settingName");
    var strSettingPath = srcElement.getAttribute("gpmc_settingPath");
    var strSettingDescription = srcElement.getAttribute("gpmc_settingDescription");

    if (strSettingDescription === "")
    {
        strSettingDescription = getNoExplainTextAvailable();
    }

    var strSupported = srcElement.getAttribute("gpmc_supported");

    if (strSupported === "")
    {
        strSupported = getNoSupportedTextAvailable();
    }

    var strHtml = "<html dir=" + document.dir +  ">\n";
    strHtml += "<head>\n";
    strHtml += "<title>" + getExplainWindowTitle() + "</title>\n";
    strHtml += "<style type='text/css'>\n" + getExplainWindowStyles() + "</style>\n";
    strHtml += "</head>\n";
    strHtml += "<body>\n";
    strHtml += "<div class='head'>" + strSettingName +"</div>\n";
    strHtml += "<div class='path'><b>" + getExplainWindowSettingPathLabel() + "</b><br/>" + strSettingPath +"</div>\n";
    strHtml += "<div class='path'><b>" + getExplainWindowSupportedLabel() + "</b><br/>" + strSupported +"</div>\n";
    strHtml += "<div class='info'>\n";
    strHtml += "<div class='hdr'>" + getExplainWindowExplainTextLabel() + "</div>\n";
    strHtml += "<div class='bdy'>" + strSettingDescription + "</div>\n";
    strHtml += "<div class='btn'>";
    strHtml += getExplainWindowPrintButton();
    strHtml += getExplainWindowCloseButton();
    strHtml += "</div></body></html>";

    // IE specific method for showing the popup.
    if(navigator.userAgent.indexOf("MSIE") > 0 && window.location.toString().indexOf("file:") === -1)
    {
        strDiagArgs = "dialogHeight=360px;dialogWidth=630px;status=no;scroll=yes;resizable=yes;minimize=yes;maximize=yes;";

        var vModeless = window.showModelessDialog("about:blank", window, strDiagArgs);
        vModeless.document.write(strHtml);
        vModeless.document.close();
        vModeless.location.reload(false);
                        
        window.event.returnValue = false;
    }
    else
    {
        strDiagArgs = "height=360px, width=630px, status=no, toolbar=no, scrollbars=yes, resizable=yes ";
        
        var expWin = window.open("", "expWin", strDiagArgs);
        expWin.document.write("");
        expWin.document.close();
        expWin.document.write(strHtml);
        expWin.document.close();
        expWin.focus();
    }
    
    return false;
}

function showEvents(srcElement,bVerbose,bInformational,bWarning,bError)
{
    var strWindowId = "EventDetails_" + srcElement.getAttribute("eventLogActivityId");
    if((windowsArray[strWindowId]) && (windowsArray[strWindowId].closed === false)) {
        windowsArray[strWindowId].focus();
    } else {
        var eventIdLabelNode, eventTimeLabelNode, eventDescriptionLabelNode, eventDetailsLabelNode, eventXmlLabelNode, gpEventsTitleNode;
        var eventIdLabelNodeText, eventTimeLabelNodeText, eventDescriptionLabelNodeText, eventXmlLabelNodeText, gpEventsTitleNodeText, eventDetailsLabelNodeText;
        var singlePassEventsDetailsNode, eventRecordArray;
        var dataNotFoundWarningLabelNode, dataNotFoundWarningLabelNodeText;
        var mainSection;
        var attributeValue;
        var singlePassEventsDetails;
        var singlePassEventsDetailsChildren;
        var node;
        var children;
        var xmlDocumentRoot;
        var xmlDocument;
        var serializer;
        var itemSub;
        var doc;

        if (window.XMLSerializer) 
        {
           serializer = new XMLSerializer();
        }

        if (window.DOMParser) 
        {
           // This browser appears to support DOMParser
           parser = new DOMParser();

           doc = document.getElementById("data-island").textContent;
           xmlDocumentRoot = parser.parseFromString(doc, "application/xml");
           xmlDocument = xmlDocumentRoot.documentElement;
           itemSub = 1;
        } 
        else 
        { 
           // Internet Explorer, create a new XML document using ActiveX 
           // and use loadXML as a DOM parser. 
           try 
           {
              doc = document.getElementById("data-island");

              xmlDocumentRoot = new ActiveXObject("Msxml2.DOMDocument.6.0"); 
              xmlDocumentRoot.async = false; 
              xmlDocumentRoot.loadXML(doc.innerHTML);
              xmlDocument = xmlDocumentRoot.documentElement;
              itemSub = 0;
           } 
           catch(e) 
           {
              // Not supported.
           }
        }

        if (xmlDocument != null) {
            mainSection = xmlDocument.getElementsByTagName("MainSection")[0].childNodes;

            if (mainSection != null) {
                for (children = 0; children < mainSection.length; children++) {
                    node = mainSection[children];
                    if (node.nodeType === 1 && node.nodeName === 'Label') {
                        attributeValue = node.getAttribute("Name");
                        if (attributeValue != null) {
                            if (attributeValue === 'ComponentStatus_EventId') {
                                eventIdLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_EventTime') {
                                eventTimeLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_EventDescription') {
                                eventDescriptionLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_EventXml') {
                                eventXmlLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_EventDetails') {
                                eventDetailsLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_GPEvents') {
                                gpEventsTitleNode = node.childNodes[1];
                            }
                            if (attributeValue === 'Warning_DataNotFound') {
                                dataNotFoundWarningLabelNode = node.childNodes[1];
                            }
                        }
                    }
                }
            }

            singlePassEventsDetails = xmlDocument.getElementsByTagName("SinglePassEventsDetails");
            if (singlePassEventsDetails != null) {
                for (singlePassEventsDetailsChildren = 0; singlePassEventsDetailsChildren < singlePassEventsDetails.length; singlePassEventsDetailsChildren++) {
                    node = singlePassEventsDetails[singlePassEventsDetailsChildren];
                    attributeValue = node.getAttribute("ActivityId");
                    if (attributeValue === srcElement.getAttribute("eventLogActivityId")) {
                        singlePassEventsDetailsNode = node;
                    }
                }
            }
        }
        
        eventIdLabelNodeText = null;
        if (eventIdLabelNode != null) {
            if (eventIdLabelNode.childNodes.length > 0) {
                eventIdLabelNodeText = eventIdLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventIdLabelNodeText == null) {
            eventIdLabelNodeText = "Event ID";
        }

        eventTimeLabelNodeText = null;
        if (eventTimeLabelNode != null) {
            if (eventTimeLabelNode.firstChild.childNodes.length > 0) {
                eventTimeLabelNodeText = eventTimeLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventTimeLabelNodeText == null) {
            eventTimeLabelNodeText = "Event Time";
        }

        eventDescriptionLabelNodeText = null;
        if (eventDescriptionLabelNode != null) {
            if (eventDescriptionLabelNode.childNodes.length > 0) {
                eventDescriptionLabelNodeText = eventDescriptionLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventDescriptionLabelNodeText == null) {
            eventDescriptionLabelNodeText = "Event Description";
        }

        eventXmlLabelNodeText = null;
        if (eventXmlLabelNode != null) {
            if (eventXmlLabelNode.childNodes.length > 0) {
                eventXmlLabelNodeText = eventXmlLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventXmlLabelNodeText == null) {
            eventXmlLabelNodeText = "Event XML";
        }

        gpEventsTitleNodeText = null;
        if (gpEventsTitleNode != null) {
            if (gpEventsTitleNode.childNodes.length > 0) {
                gpEventsTitleNodeText = gpEventsTitleNode.childNodes[0].nodeValue;
            }
        }
        if (gpEventsTitleNodeText == null) {
            gpEventsTitleNodeText = "Group Policy Events";
        }

        eventDetailsLabelNodeText = null;
        if (eventDetailsLabelNode != null) {
            if (eventDetailsLabelNode.childNodes.length > 0) {
                eventDetailsLabelNodeText = eventDetailsLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventDetailsLabelNodeText == null) {
            eventDetailsLabelNodeText = "Event Details";
        }

        dataNotFoundWarningLabelNodeText = null;
        if (dataNotFoundWarningLabelNode != null) {
            if (dataNotFoundWarningLabelNode.childNodes.length > 0) {
                dataNotFoundWarningLabelNodeText = dataNotFoundWarningLabelNode.childNodes[0].nodeValue;
            }
        }
        if (dataNotFoundWarningLabelNodeText == null) {
            dataNotFoundWarningLabelNodeText = "Data Not Found";
        }
                
        if(singlePassEventsDetailsNode != null)
        {
            eventRecordArray = singlePassEventsDetailsNode.getElementsByTagName("EventRecord");
        }
        
        var htmlText = "<html dir=" + document.dir +  ">";
        htmlText = htmlText + "<head>";
        htmlText = htmlText + "<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\" />";
        htmlText = htmlText + "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-16\" />";
        htmlText = htmlText + "<title>" + gpEventsTitleNodeText + "</title>";
        htmlText = htmlText + "</head><style type=\"text/css\">";
        htmlText = htmlText + "body    { background-color:#FFFFFF; color:#000000; font-size:68%; font-family:MS Shell Dlg; margin:0,0,10px,0; word-break:normal; word-wrap:break-word; }";
        htmlText = htmlText + "table   { font-size:100%; table-layout:fixed; width:100%; }";
        htmlText = htmlText + "td,th   { overflow:visible; text-align:left; vertical-align:top; white-space:normal; }";
        htmlText = htmlText + ".he1    { text-align: center; vertical-align: middle; background-color:#C0D2DE; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:4em; position:relative; }";
        htmlText = htmlText + ".centerTxt { text-align: center; }";
        htmlText = htmlText + ".txtFormat1 { text-align: left; vertical-align:top; white-space:pre-line; }";
        htmlText = htmlText + "</style>";
      
        htmlText = htmlText + "<script> function toggle(e) {";
        htmlText = htmlText + "if (e.style.display === \"none\"){ e.style.display = \"\"; }";
        htmlText = htmlText + "else { e.style.display = \"none\"; }";
        htmlText = htmlText + "}</";
        htmlText = htmlText + "script";
        htmlText = htmlText + ">";
      
        htmlText = htmlText + "<body><table border=1><tr>";
        htmlText = htmlText + "<th class=\"he1\"><strong>" + eventIdLabelNodeText + "</strong></th>";
        htmlText = htmlText + "<th class=\"he1\"><strong>" + eventTimeLabelNodeText + "</strong></th>";
        htmlText = htmlText + "<th class=\"he1\"><strong>" + eventDescriptionLabelNodeText + "</strong></th>";
        htmlText = htmlText + "<th class=\"he1\"><strong>" + eventDetailsLabelNodeText + "</strong></th>";

        htmlText = htmlText + "</tr>";
        var i;
        var eventId;
        var eventTime;
        var eventDescription;
        var eventXml;
        var eventType;
        var displayEvent;
        var eventXmlId;
        var displayBgColor;

        if(eventRecordArray != null && eventRecordArray.length > 0)
        {
            for (i=0; i < eventRecordArray.length; i++)
            {
                displayEvent = false;
                var eventIdElements = eventRecordArray[i].getElementsByTagName("EventId");        
                if((eventIdElements != null) && (eventIdElements.length > 0) && (eventIdElements[0].firstChild != null))
                {
                    eventId =  eventIdElements[0].firstChild.nodeValue;
                }
                else
                {
                    eventId =  dataNotFoundWarningLabelNodeText;
                }
                var eventTimeElements = eventRecordArray[i].getElementsByTagName("EventTime");
                if((eventTimeElements != null) && (eventTimeElements.length > 0) && (eventTimeElements[0].firstChild != null))
                {
                    eventTime = eventTimeElements[0].firstChild.nodeValue;
                }
                else
                {
                    eventTime = dataNotFoundWarningLabelNodeText;
                }
                var eventDescriptionElements = eventRecordArray[i].getElementsByTagName("EventDescription");
                if((eventDescriptionElements != null) && (eventDescriptionElements.length > 0) && (eventDescriptionElements[0].firstChild != null))
                {
                        eventDescription = eventDescriptionElements[0].firstChild.nodeValue;
                }
                else
                {
                    eventDescription = dataNotFoundWarningLabelNodeText;
                }
                var eventXmlElements = eventRecordArray[i].getElementsByTagName("EventXml");
                if((eventXmlElements != null) && (eventXmlElements.length > 0) && (eventXmlElements[0].firstChild != null))
                {
                    if (window.XMLSerializer) 
                    {
                       var xml = serializer.serializeToString(eventXmlElements[0].firstChild);
                       eventXml = xml;
                    } 
                    else 
                    {
                       if (typeof eventXmlElements[0].firstChild.xml != "undefined") 
                       {
                          eventXml = eventXmlElements[0].firstChild.xml;
                       }
                    }
                }
                else
                {
                    eventXml = dataNotFoundWarningLabelNodeText;
                }
                var eventLevelElements = eventRecordArray[i].getElementsByTagName("EventLevel");
                if((eventLevelElements != null) && (eventLevelElements.length > 0) && (eventLevelElements[0].firstChild != null))
                {
                    eventType = eventLevelElements[0].firstChild.nodeValue;
                }
                else
                {
                    eventType = 5;
                }
                
                if((bVerbose === true)&&(eventType == 5))
                {
                    displayEvent = true;
                }
                else if((bInformational === true)&&(eventType == 4))
                {
                    displayEvent = true;
                }
                else if((bWarning === true)&&(eventType == 3))
                {
                    displayEvent = true;
                }
                else if((bError === true)&&((eventType == 1)||(eventType == 2)))
                {
                    displayEvent = true;
                }
                
                if (displayEvent === true)
                {
                    eventXmlId = "EventXml" + (i+"");
                    htmlText = htmlText + "<tr>";
                    htmlText = htmlText + "<td class=\"centerTxt\" style=\"background:" + displayBgColor +"\">" + eventId + "</td>";
                    htmlText = htmlText + "<td class=\"centerTxt\" style=\"background:" + displayBgColor +"\">" + eventTime + "</td>";
                    htmlText = htmlText + "<td class=\"txtFormat1\" style=\"background:" + displayBgColor +"\">" + eventDescription + "</td>";
                    htmlText = htmlText + "<td style=\"background:" + displayBgColor +"\"><span style=\"color:blue; cursor:hand\" onclick=\"toggle(" + eventXmlId +");\" onKeyPress=\"toggle(" + eventXmlId + ");\" tabIndex=1 >";
                    htmlText = htmlText + eventXmlLabelNodeText + "</span><br/>";
                    htmlText = htmlText + "<span style=\"display:none\" id=" + eventXmlId +">";
                    htmlText = htmlText + eventXml + "</span>";
                    htmlText = htmlText + "</td>";
                    htmlText = htmlText + "</tr>";
                }
            }
        }
        htmlText = htmlText + "</table></body></html>";

        if(windowsArray[strWindowId])
        {
            delete windowsArray[strWindowId];
        }
        
        // IE specific method for showing the popup.
        if(navigator.userAgent.indexOf("MSIE") > 0 && window.location.toString().indexOf("file:") === -1)
        {
            var strDiagArgs = "dialogHeight=360px;dialogWidth=630px;status=no;scroll=yes;resizable=yes;minimize=yes;maximize=yes;";

            var vModeless = window.showModelessDialog("about:blank", window, strDiagArgs);
            vModeless.document.write(htmlText);
            vModeless.document.close();
            vModeless.location.reload(false);
            windowsArray[strWindowId] = vModeless;            
        }
        else
        {
            var strDiagArgs = "height=360px, width=630px, status=no, toolbar=no, scrollbars=yes, resizable=yes";
        
            windowsArray[strWindowId] = window.open("", "", strDiagArgs);
            windowsArray[strWindowId].document.write(htmlText);
            windowsArray[strWindowId].focus();
        } 
    }

    xmlDocumentRoot = null;
}

function cleanUp() {
    var windowsArray = this.windowsArray;
    for (var currentWindow in windowsArray) {
        if (windowsArray.hasOwnProperty(currentWindow)) {
            windowsArray[currentWindow].close();
        }
    }
}

function getMessageText(messageNode) {
    if (messageNode != null) {
        if (messageNode.firstChild != null) {
            if (messageNode.firstChild.nodeType === 3) {
                for (var i = 0; i < messageNode.childNodes.length; i++) 
                {
                    var curNode = messageNode.childNodes[i];
                    if(curNode.nodeType === 1){
                        return curNode.childNodes[0].nodeValue;
                    }
                }
            } else {
                return messageNode.firstChild.childNodes[0].nodeValue;
            }
        }
    }
    return null;
}

function showComponentProcessingDetails(srcElement) {
    var strWindowId = "ProcessingDetails_" + srcElement.getAttribute("eventLogActivityId");
    if ((windowsArray[strWindowId]) && (windowsArray[strWindowId].closed === false)) {
        windowsArray[strWindowId].focus();
    } else {
        var doc;
        var parser;
        var xmlDocumentRoot;
        var xmlDocument;

        var extensionsProcessedLabelNode, slowLinkThresholdLabelNode, linkSpeedLabelNode, extensionsProcessedTimeTakenNode;
        var domainControllerIpLabelNode, domainControllerNameLabelNode, processingTypeLabelNode, loopbackModeLabelNode;
        var processingTriggerLabelNode, extensionNameLabelNode, timeTakenLabelNode;
        var dataNotFoundWarningLabelNode;
        var singlePassEventsDetailsNode, totalProcessingTimeLabelNode, refreshMessageLabelNode;
        var processingDetailsUserTitleNode, processingDetailsComputerTitleNode;
        var policySectionNode;
        var policyEventsDetailsNode, detailsLabelNode;

        var extensionsProcessedLabelNodeText, slowLinkThresholdLabelNodeText, linkSpeedLabelNodeText, extensionsProcessedTimeTakenNodeText;
        var domainControllerIpLabelNodeText, domainControllerNameLabelNodeText, processingTypeLabelNodeText, loopbackModeLabelNodeText;
        var processingTriggerLabelNodeText, extensionNameLabelNodeText, timeTakenLabelNodeText;
        var dataNotFoundWarningLabelNodeText, totalProcessingTimeLabelNodeText, refreshMessageLabelNodeText;
        var processingDetailsUserTitleNodeText, processingDetailsComputerTitleNodeText;
        var detailsLabelNodeText;

        var slowLinkThresholdValue, linkSpeedValue, domainControllerIpValue, domainControllerNameValue;
        var processingTypeValue, loopbackModeValue, processingTriggerValue, totalPolicyProcessingTime, extensionProcessingTimeArray;
        var cseNameArray = new Array();
        var cseElapsedTimeArray = new Array();
        var policyApplicationFinishedTime;

        var isComputerProcessing;
        var strDiagArgs;
        var mainSection;
        var attributeValue;
        var singlePassEventsDetails;
        var singlePassEventsDetailsChildren;
        var node;
        var children;
        var itemSub;

        if (window.DOMParser) 
        {
           // This browser appears to support DOMParser
           parser = new DOMParser();
           doc = document.getElementById("data-island").textContent;

           xmlDocumentRoot = parser.parseFromString(doc, "application/xml");

           xmlDocument = xmlDocumentRoot.documentElement;

           itemSub = 1;
        } 
        else 
        { 
           // Internet Explorer, create a new XML document using ActiveX 
           // and use loadXML as a DOM parser. 
           try 
           {
              doc = document.getElementById("data-island");

              xmlDocumentRoot = new ActiveXObject("Msxml2.DOMDocument.6.0"); 
              xmlDocumentRoot.async = false; 
              xmlDocumentRoot.loadXML(doc.innerHTML);
              xmlDocument = xmlDocumentRoot.documentElement;
              itemSub = 0;
           } 
           catch(e) 
           {
              // Not supported.
           }
        }

        if (xmlDocument != null) {
            mainSection = xmlDocument.getElementsByTagName("MainSection")[0].childNodes;

            if (mainSection != null) {
                for (children = 0; children < mainSection.length; children++) {
                    node = mainSection[children];
                    if (node.nodeType === 1 && node.nodeName === 'Label') {
                        attributeValue = node.getAttribute("Name")
                        if (attributeValue != null) {
                            if (attributeValue === 'ComponentStatus_ExtensionsProcessed') {
                                extensionsProcessedLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_SlowLinkThreshold') {
                                slowLinkThresholdLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_LinkSpeed') {
                                linkSpeedLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_TimeTaken') {
                                extensionsProcessedTimeTakenNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_DomainControllerIP') {
                                domainControllerIpLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_DomainControllerName') {
                                domainControllerNameLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ProcessingTrigger') {
                                processingTriggerLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ExtensionName') {
                                extensionNameLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_TimeTaken') {
                                timeTakenLabelNode = node;
                            }
                            if (attributeValue === 'Warning_DataNotFound') {
                                dataNotFoundWarningLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_TotalProcessingTime') {
                                totalProcessingTimeLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_RefreshMessage') {
                                refreshMessageLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_UserProcessingDetails') {
                                processingDetailsUserTitleNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ComputerProcessingDetails') {
                                detailsLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ProcessingType') {
                                processingTypeLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_LoopbackMode') {
                                loopbackModeLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_UserProcessingDetails') {
                                processingDetailsUserTitleNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ComputerProcessingDetails') {
                                processingDetailsComputerTitleNode = node;
                            }
                        }
                    }
                }
            }

            singlePassEventsDetails = xmlDocument.getElementsByTagName("SinglePassEventsDetails");
            if (singlePassEventsDetails != null) {
                for (singlePassEventsDetailsChildren = 0; singlePassEventsDetailsChildren < singlePassEventsDetails.length; singlePassEventsDetailsChildren++) {
                    node = singlePassEventsDetails[singlePassEventsDetailsChildren];
                    if (node.getAttribute("ActivityId") === srcElement.getAttribute("eventLogActivityId")) {
                        singlePassEventsDetailsNode = node;
                    }
                }
            }

            if (singlePassEventsDetailsNode) {
                policyEventsDetailsNode = singlePassEventsDetailsNode.parentNode;
                if (policyEventsDetailsNode) {
                    policySectionNode = policyEventsDetailsNode.parentNode;
                    if (policySectionNode) {
                        if (policySectionNode.nodeName === 'UserPolicySection') {
                            isComputerProcessing = false;
                        }
                        if (policySectionNode.nodeName === 'ComputerPolicySection') {
                            isComputerProcessing = true;
                        }
                    }
                }
            }
        }

        
        extensionsProcessedLabelNodeText = getMessageText(extensionsProcessedLabelNode);
        slowLinkThresholdLabelNodeText = getMessageText(slowLinkThresholdLabelNode);
        linkSpeedLabelNodeText = getMessageText(linkSpeedLabelNode);
        domainControllerIpLabelNodeText = getMessageText(domainControllerIpLabelNode);
        domainControllerNameLabelNodeText = getMessageText(domainControllerNameLabelNode);
        processingTypeLabelNodeText = getMessageText(processingTypeLabelNode);
        loopbackModeLabelNodeText = getMessageText(loopbackModeLabelNode);
        processingTriggerLabelNodeText = getMessageText(processingTriggerLabelNode);
        extensionNameLabelNodeText = getMessageText(extensionNameLabelNode);
        timeTakenLabelNodeText = getMessageText(timeTakenLabelNode);
        processingDetailsUserTitleNodeText = getMessageText(processingDetailsUserTitleNode);
        processingDetailsComputerTitleNodeText = getMessageText(processingDetailsComputerTitleNode);
        dataNotFoundWarningLabelNodeText = getMessageText(dataNotFoundWarningLabelNode);
        totalProcessingTimeLabelNodeText = getMessageText(totalProcessingTimeLabelNode);
        refreshMessageLabelNodeText = getMessageText(refreshMessageLabelNode);
        detailsLabelNodeText = getMessageText(detailsLabelNode);
     

        slowLinkThresholdValue = null;
        linkSpeedValue = null;
        domainControllerIpValue = null;
        domainControllerNameValue = null;
        processingTypeValue = null;
        loopbackModeValue = null;
        processingTriggerValue = null;

        if (singlePassEventsDetailsNode != null) {
            slowLinkThresholdValue = singlePassEventsDetailsNode.getAttribute("SlowLinkThresholdInKbps");
            linkSpeedValue = singlePassEventsDetailsNode.getAttribute("LinkSpeedInKbps");
            domainControllerIpValue = singlePassEventsDetailsNode.getAttribute("DomainControllerIPAddress");
            domainControllerNameValue = singlePassEventsDetailsNode.getAttribute("DomainControllerName");
            processingTypeValue = singlePassEventsDetailsNode.getAttribute("ProcessingAppMode");
            loopbackModeValue = singlePassEventsDetailsNode.getAttribute("PolicyProcessingMode");
            processingTriggerValue = singlePassEventsDetailsNode.getAttribute("ProcessingTrigger");
            totalPolicyProcessingTime = singlePassEventsDetailsNode.getAttribute("PolicyElapsedTime");
            extensionProcessingTimeArray = singlePassEventsDetailsNode.getElementsByTagName("ExtensionProcessingTime");
        }
        if (slowLinkThresholdValue == null) {
            slowLinkThresholdValue = dataNotFoundWarningLabelNodeText;
        }
        if (linkSpeedValue == null) {
            linkSpeedValue = dataNotFoundWarningLabelNodeText;
        }
        if (domainControllerIpValue == null) {
            domainControllerIpValue = dataNotFoundWarningLabelNodeText;
        }
        else {
            domainControllerIpValue = domainControllerIpValue.replace(/^\\\\/, "");
        }
        if (domainControllerNameValue == null) {
            domainControllerNameValue = dataNotFoundWarningLabelNodeText;
        }
        else {
            domainControllerNameValue = domainControllerNameValue.replace(/^\\\\/, "");
        }
        if (processingTypeValue == null) {
            processingTypeValue = dataNotFoundWarningLabelNodeText;
        }
        if (loopbackModeValue == null) {
            loopbackModeValue = dataNotFoundWarningLabelNodeText;
        }
        if (processingTriggerValue == null) {
            processingTriggerValue = dataNotFoundWarningLabelNodeText;
        }

        if (extensionProcessingTimeArray != null && extensionProcessingTimeArray.length > 0) {
            var cseName;
            var cseElapsedTime;
            var cseProcessedTime;
            var cseId;
            var i;
            var index = 0;
            for (i = 0; i < extensionProcessingTimeArray.length; i++) {
                var cseNameElements = extensionProcessingTimeArray[i].getElementsByTagName("ExtensionName");
                var cseElapsedTimeElements = extensionProcessingTimeArray[i].getElementsByTagName("ElapsedTime");
                var cseProcessedTimeElements = extensionProcessingTimeArray[i].getElementsByTagName("ProcessedTime");
                var cseIdElements = extensionProcessingTimeArray[i].getElementsByTagName("ExtensionGuid");
                if ((cseNameElements.length > 0) && (cseElapsedTimeElements.length > 0) && (cseProcessedTimeElements.length > 0) && (cseIdElements.length > 0)) {
                    if ((cseNameElements[0].firstChild != null) && (cseElapsedTimeElements[0].firstChild != null) && (cseProcessedTimeElements[0].firstChild != null) && (cseIdElements[0].firstChild != null)) {
                        cseName = cseNameElements[0].firstChild.nodeValue;
                        cseElapsedTime = cseElapsedTimeElements[0].firstChild.nodeValue;
                        cseProcessedTime = cseProcessedTimeElements[0].firstChild.nodeValue;
                        cseId = cseIdElements[0].firstChild.nodeValue;
                        if ((cseName != null) && (cseElapsedTime != null) && (cseProcessedTime != null) && (cseId != null)) {
                            cseNameArray[index] = cseName;
                            cseElapsedTimeArray[index] = cseElapsedTime;
                            index = index + 1;
                            if (cseId === '{00000000-0000-0000-0000-000000000000}') {
                                policyApplicationFinishedTime = cseProcessedTime;
                            }
                        }
                    }
                }
            }
        }
          
        var htmlText = "<html dir=" + document.dir +  ">";
        htmlText = htmlText + "<head>";
        htmlText = htmlText + "<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\" />";
        htmlText = htmlText + "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-16\" />";
        if(isComputerProcessing != null)
        {
            if(isComputerProcessing === true)
            {
                htmlText = htmlText + "<title>" + processingDetailsComputerTitleNodeText + "</title>";
            }
            else
            {
                htmlText = htmlText + "<title>" + processingDetailsUserTitleNodeText + "</title>";
            }
        }
        

        htmlText = htmlText + "</head><style type=\"text/css\">";
        htmlText = htmlText + "body    { background-color:#FFFFFF; color:#000000; font-size:68%; font-family:MS Shell Dlg; margin:0,0,10px,0; word-break:normal; word-wrap:break-word; }";
        htmlText = htmlText + "table   { font-size:100%; table-layout:fixed; width:100%; }";
        htmlText = htmlText + "td,th   { overflow:visible; text-align:left; vertical-align:top; white-space:normal; }";
        htmlText = htmlText + ".he0    { background-color:#FEF7D6; border:1px solid #BBBBBB; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:0px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; width:100%; }";
        htmlText = htmlText + ".he1    { color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2em;margin-left: 5 px; margin-top: 5 px; position:relative; width:100%; }";
        htmlText = htmlText + ".tblspecialfmt { border:1px solid black;border-collapse:collapse; }";
        htmlText = htmlText + ".tblfirstcolfmt { border-left-width: 1px;border-top-width: 1px;border-bottom-width: 1px;border-right-width: 0px;border-style: solid; border-color: black; }";
        htmlText = htmlText + ".tblsecondcolfmt { border-left-width: 0px;border-top-width: 1px;border-bottom-width: 1px;border-right-width: 1px;border-style: solid; border-color: black; }";
        htmlText = htmlText + "</style>";
        htmlText = htmlText + "<body>";
        htmlText = htmlText + "<span class=\"he1\">" + refreshMessageLabelNodeText + " " + policyApplicationFinishedTime + "</span>" ;
        htmlText = htmlText + "<div class=\"he0\">" + detailsLabelNodeText + "</div>"
        htmltext = htmlText + "<table><tr>";

        htmlText = htmlText + "<td>";
        htmlText = htmlText + "<table>";
        htmlText = htmlText + "<tr><td colspan=\"2\">&nbsp;</td></tr>";


        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + processingTypeLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + processingTypeValue + "</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + loopbackModeLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + loopbackModeValue + "</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + linkSpeedLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + linkSpeedValue + "</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + slowLinkThresholdLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + slowLinkThresholdValue + "</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + domainControllerNameLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + domainControllerNameValue +"</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + domainControllerIpLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + domainControllerIpValue +"</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + processingTriggerLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + processingTriggerValue + "</td></tr>";

        htmlText = htmlText + "</table></td></tr>";
        htmlText = htmlText + "<tr ><td ><table>";


        htmlText = htmlText + "<tr><td><span class=\"he1\" >" + extensionsProcessedLabelNodeText +"</span></td></tr>";
        htmlText = htmlText + "<tr><td><table class=\"tblspecialfmt\" >";
        htmlText = htmlText + "<tr><td class=\"tblfirstcolfmt\" style=\"width: 50%;background-color:#FEF7D6;\"><strong>" + extensionNameLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td class=\"tblsecondcolfmt\" style=\"background-color:#FEF7D6;\" ><strong>" + timeTakenLabelNodeText + "</strong></td></tr>";

        for (var idx in cseNameArray)
        {
            htmlText = htmlText + "<tr><td style=\"width: 50%\">" + cseNameArray[idx] + "</td>";                   
            htmlText = htmlText + "<td>" + cseElapsedTimeArray[idx] + "</td></tr>";
        }

        if (totalPolicyProcessingTime != null)
        {
            htmlText = htmlText + "<tr><td class=\"tblfirstcolfmt\" style=\"width: 50%\" >" + totalProcessingTimeLabelNodeText +":</td>";
            htmlText = htmlText + "<td class=\"tblsecondcolfmt\">" + totalPolicyProcessingTime + "</td></tr>";
        }
        htmlText = htmlText + "</table></td></tr></table></td></tr></table></body></html>";

        if(windowsArray[strWindowId])
        {
            delete windowsArray[strWindowId];
        }
         
        // IE specific method for showing the popup.
        if(navigator.userAgent.indexOf("MSIE") > 0 && window.location.toString().indexOf("file:") === -1)
        {
            strDiagArgs = "dialogHeight=360px;dialogWidth=630px;status=no;scroll=yes;resizable=yes;minimize=yes;maximize=yes;";

            var vModeless = window.showModelessDialog("about:blank", window, strDiagArgs);
            vModeless.document.write(htmlText);
            vModeless.document.close();
            vModeless.location.reload(false);
            windowsArray[strWindowId] = vModeless;                      
        }
        else
        {
            strDiagArgs = "height=360px, width=630px, status=no, toolbar=no, scrollbars=yes, resizable=yes";
        
            windowsArray[strWindowId] = window.open("", "" , strDiagArgs);
            windowsArray[strWindowId].document.write(htmlText);
            windowsArray[strWindowId].focus();
        }
    }

    xmlDocumentRoot = null;
}
</script>
</head>

<body onload="window_onload();" onclick="document_onclick();" onkeypress="document_onkeypress(event);" onunload="cleanUp();">

<!-- HTML resources -->
<div style="display:none;">
        <div id="explainText_windowTitle">Group Policy Management</div>
        <div id="explainText_windowStyles">
        
                            body  { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; }

                            .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; }

                            .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; }

                            .info { padding-left:10px;width:100%; }

                            table { font-size:100%; width:100%; border:1px solid #999999; }

                            th    { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; }

                            td    { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; }

                            .btn  { width:100%; text-align:right; margin-top:16px; }

                            .hdr  { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; }

                            .bdy  { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; }

                            button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; }

                            @media print {

                                .bdy { display:block; overflow:visible; }

                                button { display:none; }

                                .head { color:#000000; background:#FFFFFF; border:1px solid #000000; }

                            }

                
        </div>
        <div id="explainText_settingPathLabel">Setting Path:</div>
        <div id="explainText_explainTextLabel">Explanation</div>
        <div id="explainText_printButton">
        <button name="Print" onClick="window.print()" accesskey="P"><u>P</u>rint</button>

        </div>
        <div id="explainText_closeButton">
        <button name="Close" onClick="window.close()" accesskey="C"><u>C</u>lose</button>
                
        </div>
        <div id="explainText_noExplainTextAvailable">No explanation is available for this setting.</div>
        <div id="explainText_supportedLabel">Supported On:</div>
        <div id="explainText_noSupportedTextAvailable">Not available</div>
</div><table class="title" >
<tr><td colspan="2" class="gponame">LT-PO-SEC-C-Workstations common policy</td></tr>
<tr>
    <td id="dtstamp">Data collected on: 2-9-2025 09:03:28</td>
    <td><div id="objshowhide" tabindex="0" onclick="objshowhide_onClick();return false;"></div></td>
</tr>
</table>

<div class="gposummary">
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1"><span class="sectionTitle" tabindex="0">Details</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td scope="row">Domain</td><td>emea.tpg.ads</td></tr>
<tr><td scope="row">Owner</td><td>EMEA\efimov.6</td></tr>
<tr><td scope="row">Created</td><td>17-5-2017 09:34:04</td></tr>
<tr><td scope="row">Modified</td><td>27-2-2025 11:30:40</td></tr>
<tr><td scope="row">User Revisions</td><td>1 (AD), 1 (SYSVOL)</td></tr>
<tr><td scope="row">Computer Revisions</td><td>72 (AD), 72 (SYSVOL)</td></tr>
<tr><td scope="row">Unique ID</td><td>{6636b63d-ca63-4f64-a003-265e12086e82}</td></tr>
<tr><td scope="row">GPO Status</td><td>User settings disabled</td></tr>
</table></div></div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Links</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" ><tr><th scope="col">Location</th><th scope="col">Enforced</th><th scope="col">Link Status</th><th scope="col">Path</th></tr>
    <tr><td>Clients</td><td>No</td><td>Enabled</td><td>emea.tpg.ads/LT/Systems/Clients</td></tr>
    </table>
    <br/>This list only includes links in the domain of the GPO.</div></div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Security Filtering</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>The settings in this GPO can only apply to the following groups, users, and computers:</b></div>
<div class="he4i">
<table class="info" ><tr><th scope="col">Name</th></tr><tr><td>NT AUTHORITY\Authenticated Users</td></tr></table>
</div>
</div>
<div class="filler"></div>

<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Delegation</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>These groups and users have the specified permission for this GPO</b></div>
<div class="he4i">
<table class="info3" >
<tr><th scope="col">Name</th><th scope="col">Allowed Permissions</th><th scope="col">Inherited</th></tr>
<tr><td>EMEA\Domain Admins</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>EMEA\efimov.6</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>EMEA\LT-L-SEC-Delegation Group Policy Objects Modify Access</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>NT AUTHORITY\Authenticated Users</td><td>Read (from Security Filtering)</td><td>No</td></tr>
<tr><td>NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS</td><td>Read</td><td>No</td></tr>
<tr><td>NT AUTHORITY\SYSTEM</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>ROOT\Enterprise Admins</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
</table>

</div></div></div>
<div class="filler"></div>
</div>
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">Computer Configuration (Enabled)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1h_expanded"><span class="sectionTitle" tabindex="0">Policies</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1_expanded"><span class="sectionTitle" tabindex="0">Windows Settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he2"><span class="sectionTitle" tabindex="0">Security Settings</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">Local Policies/Security Options</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">Accounts</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Accounts: Guest account status</td><td>Disabled</td></tr>
<tr><td>Accounts: Rename guest account</td><td>&quot;xGuest&quot;</td></tr>
</table>
</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Network Access</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Network access: Let Everyone permissions apply to anonymous users</td><td>Disabled</td></tr>
</table>
</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Network Security</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Network security: Do not store LAN Manager hash value on next password change</td><td>Enabled</td></tr>
<tr><td>Network security: LAN Manager authentication level</td><td>Send NTLMv2 response only. Refuse LM &amp; NTLM</td></tr>
</table>
</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Shutdown</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Shutdown: Clear virtual memory pagefile</td><td>Enabled</td></tr>
</table>
</div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Event Log</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Maximum security log size</td><td>3145728 kilobytes</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System Services</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">Offline Files (Startup Mode: Disabled)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Permissions</b><br/>No permissions specified</div><div class="he4i"><b>Auditing</b><br/>No auditing specified</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Windows Defender Firewall (Startup Mode: Automatic)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Permissions</b><br/>No permissions specified</div><div class="he4i"><b>Auditing</b><br/>No auditing specified</div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Registry</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">CLASSES_ROOT\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\ShellFolder</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">Configure this key then: Propagate inheritable permissions to all subkeys</div><div class="he4i"><table class="info" >
<tr><td scope="row"><b>Owner</b></td><td></td></tr>
</table>
</div><div class="he4i"><b>Permissions</b><table class="subtable3" >
<tr><th scope="col">Type</th><th scope="col">Name</th><th scope="col">Permission</th><th scope="col">Apply To</th></tr><tr><td>Allow</td><td>APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES</td><td>Full control</td><td>This key and subkeys</td></tr><tr><td>Allow</td><td>CREATOR OWNER</td><td>Full control</td><td>Subkeys only</td></tr><tr><td>Allow</td><td>NT AUTHORITY\SYSTEM</td><td>Full control</td><td>This key and subkeys</td></tr><tr><td>Allow</td><td>BUILTIN\Administrators</td><td>Full control</td><td>This key and subkeys</td></tr><tr><td>Allow</td><td>BUILTIN\Users</td><td>Read</td><td>This key and subkeys</td></tr></table>
<table class="subtable">
<tr><td scope="row">Allow inheritable permissions from the parent to propagate to this object and all child objects</td><td>Disabled</td></tr>
</table>
</div><div class="he4i"><b>Auditing</b><br/>No auditing specified</div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Public Key Policies/Trusted Root Certification Authorities</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">Certificates</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" ><tr><th scope="col">Issued To</th><th scope="col">Issued By</th><th scope="col">Expiration Date</th><th scope="col">Intended Purposes</th></tr>
    <tr><td>plwa2fwvip.emea.tpg.ads</td><td>plwa2fwvip.emea.tpg.ads</td><td>31-3-2025 11:35:16</td><td>&lt;All&gt;</td></tr>
    <tr><td>Zscaler Root CA</td><td>Zscaler Root CA</td><td>6-5-2042 02:27:55</td><td>&lt;All&gt;</td></tr>
    </table>
    <br/>For additional information about individual settings, launch the Local Group Policy Object Editor.</div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Public Key Policies/Trusted Publishers Certificates</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" ><tr><th scope="col">Issued To</th><th scope="col">Issued By</th><th scope="col">Expiration Date</th><th scope="col">Intended Purposes</th></tr>
    <tr><td>plwa2fwvip.emea.tpg.ads</td><td>plwa2fwvip.emea.tpg.ads</td><td>31-3-2025 11:35:16</td><td>&lt;All&gt;</td></tr>
    </table>
    <br/>For additional information about individual settings, launch the Local Group Policy Object Editor.</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Firewall with Advanced Security</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">Global Settings</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4i"><table class="info" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Policy version</td><td>2.22</td></tr>
<tr><td>Disable stateful FTP</td><td>Not Configured</td></tr>
<tr><td>Disable stateful PPTP</td><td>Not Configured</td></tr>
<tr><td>IPsec exempt</td><td>Not Configured</td></tr>
<tr><td>IPsec through NAT</td><td>Not Configured</td></tr>
<tr><td>Preshared key encoding</td><td>Not Configured</td></tr>
<tr><td>SA idle time</td><td>Not Configured</td></tr>
<tr><td>Strong CRL check</td><td>Not Configured</td></tr>
</table>
</div></div><div class="he4"><span class="sectionTitle" tabindex="0">Domain Profile Settings</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4i"><table class="info" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Firewall state</td><td>Off</td></tr>
<tr><td>Inbound connections</td><td>Allow</td></tr>
<tr><td>Outbound connections</td><td>Allow</td></tr>
<tr><td>Apply local firewall rules</td><td>Not Configured</td></tr>
<tr><td>Apply local connection security rules</td><td>Not Configured</td></tr>
<tr><td>Display notifications</td><td>Not Configured</td></tr>
<tr><td>Allow unicast responses</td><td>Not Configured</td></tr>
<tr><td>Log dropped packets</td><td>Not Configured</td></tr>
<tr><td>Log successful connections</td><td>Not Configured</td></tr>
<tr><td>Log file path</td><td>Not Configured</td></tr>
<tr><td>Log file maximum size (KB)</td><td>Not Configured</td></tr>
</table>
</div></div><div class="he4"><span class="sectionTitle" tabindex="0">Private Profile Settings</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4i"><table class="info" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Firewall state</td><td>Off</td></tr>
<tr><td>Inbound connections</td><td>Allow</td></tr>
<tr><td>Outbound connections</td><td>Allow</td></tr>
<tr><td>Apply local firewall rules</td><td>Not Configured</td></tr>
<tr><td>Apply local connection security rules</td><td>Not Configured</td></tr>
<tr><td>Display notifications</td><td>Not Configured</td></tr>
<tr><td>Allow unicast responses</td><td>Not Configured</td></tr>
<tr><td>Log dropped packets</td><td>Not Configured</td></tr>
<tr><td>Log successful connections</td><td>Not Configured</td></tr>
<tr><td>Log file path</td><td>Not Configured</td></tr>
<tr><td>Log file maximum size (KB)</td><td>Not Configured</td></tr>
</table>
</div></div><div class="he4"><span class="sectionTitle" tabindex="0">Public Profile Settings</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4i"><table class="info" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td>Firewall state</td><td>Off</td></tr>
<tr><td>Inbound connections</td><td>Allow</td></tr>
<tr><td>Outbound connections</td><td>Allow</td></tr>
<tr><td>Apply local firewall rules</td><td>Not Configured</td></tr>
<tr><td>Apply local connection security rules</td><td>Not Configured</td></tr>
<tr><td>Display notifications</td><td>Not Configured</td></tr>
<tr><td>Allow unicast responses</td><td>Not Configured</td></tr>
<tr><td>Log dropped packets</td><td>Not Configured</td></tr>
<tr><td>Log successful connections</td><td>Not Configured</td></tr>
<tr><td>Log file path</td><td>Not Configured</td></tr>
<tr><td>Log file maximum size (KB)</td><td>Not Configured</td></tr>
</table>
</div></div><div class="he4"><span class="sectionTitle" tabindex="0">Connection Security Settings</span><a class="expando" href="#"></a></div>
    <div class="container">
</div></div></div></div><div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Administrative Templates</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">Policy definitions (ADMX files) retrieved from the central store.</div><div class="he3"><span class="sectionTitle" tabindex="0">Network/DNS Client</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Connection-specific DNS suffix" gpmc_settingPath="Computer Configuration/Administrative Templates/Network/DNS Client" gpmc_settingDescription="Specifies a connection-specific DNS suffix. This policy setting supersedes local connection-specific DNS suffixes, and those configured using DHCP.&lt;br/&gt;&lt;br/&gt;To use this policy setting, click Enabled, and then enter a string value representing the DNS suffix.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the DNS suffix that you enter will be applied to all network connections used by computers that receive this policy setting.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, or if you do not configure this policy setting, computers will use the local or DHCP supplied connection specific DNS suffix, if configured." gpmc_supported="Windows XP Professional only">Connection-specific DNS suffix</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>DNS suffix:</td><td>emea.tpg.ads</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Dynamic update" gpmc_settingPath="Computer Configuration/Administrative Templates/Network/DNS Client" gpmc_settingDescription="Specifies if DNS dynamic update is enabled. Computers configured for DNS dynamic update automatically register and update their DNS resource records with a DNS server.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, or you do not configure this policy setting, computers will attempt to use dynamic DNS registration on all network connections that have connection-specific dynamic DNS registration enabled. For a dynamic DNS registration to be enabled on a network connection, the connection-specific configuration must allow dynamic DNS registration, and this policy setting must not be disabled.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, computers may not use dynamic DNS registration for any of their network connections, regardless of the configuration for individual network connections." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Dynamic update</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Primary DNS suffix" gpmc_settingPath="Computer Configuration/Administrative Templates/Network/DNS Client" gpmc_settingDescription="Specifies the primary DNS suffix used by computers in DNS name registration and DNS name resolution.&lt;br/&gt;&lt;br/&gt;To use this policy setting, click Enabled and enter the entire primary DNS suffix you want to assign. For example: microsoft.com.&lt;br/&gt;&lt;br/&gt;Important: In order for changes to this policy setting to be applied on computers that receive it, you must restart Windows.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, it supersedes the primary DNS suffix configured in the DNS Suffix and NetBIOS Computer Name dialog box using the System control panel.&lt;br/&gt;&lt;br/&gt;You can use this policy setting to prevent users, including local administrators, from changing the primary DNS suffix.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, or if you do not configure this policy setting, each computer uses its local primary DNS suffix, which is usually the DNS name of Active Directory domain to which it is joined." gpmc_supported="At least Windows 2000">Primary DNS suffix</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Enter a primary DNS suffix:</td><td>emea.tpg.ads</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Register DNS records with connection-specific DNS suffix" gpmc_settingPath="Computer Configuration/Administrative Templates/Network/DNS Client" gpmc_settingDescription="Specifies if a computer performing dynamic DNS registration will register A and PTR resource records with a concatenation of its computer name and a connection-specific DNS suffix, in addition to registering these records with a concatenation of its computer name and the primary DNS suffix.&lt;br/&gt;&lt;br/&gt;By default, a DNS client performing dynamic DNS registration registers A and PTR resource records with a concatenation of its computer name and the primary DNS suffix. For example, a computer name of mycomputer and a primary DNS suffix of microsoft.com will be registered as: mycomputer.microsoft.com.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, a computer will register A and PTR resource records with its connection-specific DNS suffix, in addition to the primary DNS suffix. This applies to all network connections used by computers that receive this policy setting.&lt;br/&gt;&lt;br/&gt;For example, with a computer name of mycomputer, a primary DNS suffix of microsoft.com, and a connection specific DNS suffix of VPNconnection, a computer will register A and PTR resource records for mycomputer.VPNconnection and mycomputer.microsoft.com when this policy setting is enabled.&lt;br/&gt;&lt;br/&gt;Important: This policy setting is ignored on a DNS client computer if dynamic DNS registration is disabled.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, or if you do not configure this policy setting, a DNS client computer will not register any A and PTR resource records using a connection-specific DNS suffix." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Register DNS records with connection-specific DNS suffix</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Register PTR records" gpmc_settingPath="Computer Configuration/Administrative Templates/Network/DNS Client" gpmc_settingDescription="Specifies if DNS client computers will register PTR resource records.&lt;br/&gt;&lt;br/&gt;By default, DNS clients configured to perform dynamic DNS registration will attempt to register PTR resource record only if they successfully registered the corresponding A resource record.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, registration of PTR records will be determined by the option that you choose under Register PTR records.&lt;br/&gt;&lt;br/&gt;To use this policy setting, click Enabled, and then select one of the following options from the drop-down list:&lt;br/&gt;&lt;br/&gt;Do not register:  Computers will not attempt to register PTR resource records.&lt;br/&gt;&lt;br/&gt;Register: Computers will attempt to register PTR resource records even if registration of the corresponding A records was not successful.&lt;br/&gt;&lt;br/&gt;Register only if A record registration succeeds:  Computers will attempt to register PTR resource records only if registration of the corresponding A records was successful.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, or if you do not configure this policy setting, computers will use locally configured settings." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Register PTR records</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Register PTR records:</td><td>Register only if A record registration succeeds</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Network/IPv6 Configuration</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="IPv6 Configuration Policy" gpmc_settingPath="Computer Configuration/Administrative Templates/Network/IPv6 Configuration" gpmc_settingDescription="This policy configures IPv6 on network interfaces.  By default, Windows 7, Windows Server 2008 and Windows Vista enable and use IPv6 as the default protocol.&lt;br/&gt;&lt;br/&gt;If you enable this policy, you can specify how Windows uses IPv6.  To fully disable IPv6 functionality, select &amp;quot;Disable all IPv6 components.&amp;quot;  Other settings disable IPv6 on specific interfaces.&lt;br/&gt;&lt;br/&gt;Note: You cannot disable IPv6 on the loopback adapter.&lt;br/&gt;&lt;br/&gt;If you disable this policy, IPv6 will be fully enabled on the computer.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy, IPv6 settings will not be configured or enforced and the computer will continue to use its current configuration.  Read the note about preferences below.&lt;br/&gt;&lt;br/&gt;See http://support.microsoft.com/default.aspx/kb/929852 for more information." gpmc_supported="At least Windows Vista">IPv6 Configuration Policy</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>IPv6 Configuration</td><td>Disable all IPv6 components</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Network/Network Connections</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit use of Internet Connection Firewall on your DNS domain network" gpmc_settingPath="Computer Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Prohibits use of Internet Connection Firewall on your DNS domain network.&lt;br/&gt;&lt;br/&gt;Determines whether users can enable the Internet Connection Firewall feature on a connection, and if the Internet Connection Firewall service can run on a computer.&lt;br/&gt;&lt;br/&gt;Important: This setting is location aware. It only applies when a computer is connected to the same DNS domain network it was connected to when the setting was refreshed on that computer. If a computer is connected to a DNS domain network other than the one it was connected to when the setting was refreshed, this setting does not apply.&lt;br/&gt;&lt;br/&gt;The Internet Connection Firewall is a stateful packet filter for home and small office users to protect them from Internet network security threats.&lt;br/&gt;&lt;br/&gt;If you enable this setting, Internet Connection Firewall cannot be enabled or configured by users (including administrators), and the Internet Connection Firewall service cannot run on the computer. The option to enable the Internet Connection Firewall through the Advanced tab is removed. In addition, the Internet Connection Firewall is not enabled for remote access connections created through the Make New Connection Wizard. The Network Setup Wizard is disabled.&lt;br/&gt;&lt;br/&gt;Note: If you enable the &amp;quot;Windows Firewall: Protect all network connections&amp;quot; policy setting, the &amp;quot;Prohibit use of Internet Connection Firewall on your DNS domain network&amp;quot; policy setting has no effect on computers that are running Windows Firewall, which replaces Internet Connection Firewall when you install Windows XP Service Pack 2.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Internet Connection Firewall is disabled when a LAN Connection or VPN connection is created, but users can use the Advanced tab in the connection properties to enable it. The Internet Connection Firewall is enabled by default on the connection for which Internet Connection Sharing is enabled. In addition, remote access connections created through the Make New Connection Wizard have the Internet Connection Firewall enabled." gpmc_supported="Windows Server 2003 and Windows XP only">Prohibit use of Internet Connection Firewall on your DNS domain network</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Network/Network Connections/Windows Defender Firewall/Domain Profile</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Windows Defender Firewall: Protect all network connections" gpmc_settingPath="Computer Configuration/Administrative Templates/Network/Network Connections/Windows Defender Firewall/Domain Profile" gpmc_settingDescription="Turns on Windows Defender Firewall.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows Defender Firewall runs and ignores the &amp;quot;Computer Configuration\Administrative Templates\Network\Network Connections\Prohibit use of Internet Connection Firewall on your DNS domain network&amp;quot; policy setting.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Windows Defender Firewall does not run. This is the only way to ensure that Windows Defender Firewall does not run and administrators who log on locally cannot start it.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, administrators can use the Windows Defender Firewall component in Control Panel to turn Windows Defender Firewall on or off, unless the &amp;quot;Prohibit use of Internet Connection Firewall on your DNS domain network&amp;quot; policy setting overrides." gpmc_supported="At least Windows XP Professional with SP2">Windows Defender Firewall: Protect all network connections</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Network/Network Connections/Windows Defender Firewall/Standard Profile</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Windows Defender Firewall: Protect all network connections" gpmc_settingPath="Computer Configuration/Administrative Templates/Network/Network Connections/Windows Defender Firewall/Standard Profile" gpmc_settingDescription="Turns on Windows Defender Firewall.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows Defender Firewall runs and ignores the &amp;quot;Computer Configuration\Administrative Templates\Network\Network Connections\Prohibit use of Internet Connection Firewall on your DNS domain network&amp;quot; policy setting.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Windows Defender Firewall does not run. This is the only way to ensure that Windows Defender Firewall does not run and administrators who log on locally cannot start it.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, administrators can use the Windows Defender Firewall component in Control Panel to turn Windows Defender Firewall on or off, unless the &amp;quot;Prohibit use of Internet Connection Firewall on your DNS domain network&amp;quot; policy setting overrides." gpmc_supported="At least Windows XP Professional with SP2">Windows Defender Firewall: Protect all network connections</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Device Installation/Device Installation Restrictions</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow administrators to override Device Installation Restriction policies" gpmc_settingPath="Computer Configuration/Administrative Templates/System/Device Installation/Device Installation Restrictions" gpmc_settingDescription="This policy setting allows you to determine whether members of the Administrators group can install and update the drivers for any device, regardless of other policy settings.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, members of the Administrators group can use the Add Hardware wizard or the Update Driver wizard to install and update the drivers for any device. If you enable this policy setting on a remote desktop server, the policy setting affects redirection of the specified devices from a remote desktop client to the remote desktop server.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, members of the Administrators group are subject to all policy settings that restrict device installation." gpmc_supported="At least Windows Vista">Allow administrators to override Device Installation Restriction policies</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent installation of devices not described by other policy settings" gpmc_settingPath="Computer Configuration/Administrative Templates/System/Device Installation/Device Installation Restrictions" gpmc_settingDescription="This policy setting allows you to prevent the installation of devices that are not specifically described by any other policy setting.&lt;br/&gt;&lt;br/&gt;NOTE: This policy setting has been replaced by the &amp;quot;Apply layered order of evaluation for Allow and Prevent device installation policies across all device match criteria&amp;quot; policy setting to provide more granular control. It is recommended that you use the &amp;quot;Apply layered order of evaluation for Allow and Prevent device installation policies across all device match criteria&amp;quot; policy setting instead of this policy setting.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows is prevented from installing or updating the driver package for any device that is not described by either the &amp;quot;Allow installation of devices that match any of these device IDs&amp;quot;, the &amp;quot;Allow installation of devices for these device classes&amp;quot;, or the &amp;quot;Allow installation of devices that match any of these device instance IDs&amp;quot; policy setting.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Windows is allowed to install or update the driver package for any device that is not described by the &amp;quot;Prevent installation of devices that match any of these device IDs&amp;quot;, &amp;quot;Prevent installation of devices for these device classes&amp;quot; policy setting, &amp;quot;Prevent installation of devices that match any of these device instance IDs&amp;quot;, or &amp;quot;Prevent installation of removable devices&amp;quot; policy setting." gpmc_supported="At least Windows Vista">Prevent installation of devices not described by other policy settings</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Group Policy</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Specify startup policy processing wait time" gpmc_settingPath="Computer Configuration/Administrative Templates/System/Group Policy" gpmc_settingDescription="This policy setting specifies how long Group Policy should wait for network availability notifications during startup policy processing. If the startup policy processing is synchronous, the computer is blocked until the network is available or the default wait time is reached. If the startup policy processing is asynchronous, the computer is not blocked and policy processing will occur in the background. In either case, configuring this policy setting overrides any system-computed wait times.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Group Policy will use this administratively configured maximum wait time and override any default or system-computed wait time.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Group Policy will use the default wait time of 30 seconds on computers running Windows Vista operating system.&lt;br/&gt;" gpmc_supported="At least Windows Vista">Specify startup policy processing wait time</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Amount of time to wait (in seconds):</td><td>120</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Logon</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Always wait for the network at computer startup and logon" gpmc_settingPath="Computer Configuration/Administrative Templates/System/Logon" gpmc_settingDescription="This policy setting determines whether Group Policy processing is synchronous (that is, whether computers wait for the network to be fully initialized during computer startup and user logon). By default, on client computers, Group Policy processing is not synchronous; client computers typically do not wait for the network to be fully initialized at startup and logon. Existing users are logged on using cached credentials, which results in shorter logon times. Group Policy is applied in the background after the network becomes available. &lt;br/&gt;&lt;br/&gt;Note that because this is a background refresh, extensions such as Software Installation and Folder Redirection take two logons to apply changes. To be able to operate safely, these extensions require that no users be logged on. Therefore, they must be processed in the foreground before users are actively using the computer. In addition, changes that are made to the user object, such as adding a roaming profile path, home directory, or user object logon script, may take up to two logons to be detected.&lt;br/&gt;&lt;br/&gt;If a user with a roaming profile, home directory, or user object logon script logs on to a computer, computers always wait for the network to be initialized before logging the user on. If a user has never logged on to this computer before, computers always wait for the network to be initialized.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, computers wait for the network to be fully initialized before users are logged on. Group Policy is applied in the foreground, synchronously. &lt;br/&gt;&lt;br/&gt;On servers running Windows Server 2008 or later, this policy setting is ignored during Group Policy processing at computer startup and Group Policy processing will be synchronous (these servers wait for the network to be initialized during computer startup). &lt;br/&gt;&lt;br/&gt;If the server is configured as follows, this policy setting takes effect during Group Policy processing at user logon:&lt;br/&gt;•  The server is configured as a terminal server (that is, the Terminal Server role service is installed and configured on the server); and&lt;br/&gt;•  The “Allow asynchronous user Group Policy processing when logging on through Terminal Services” policy setting is enabled. This policy setting is located under Computer Configuration\Policies\Administrative templates\System\Group Policy\.&lt;br/&gt;&lt;br/&gt;If this configuration is not implemented on the server, this policy setting is ignored. In this case, Group Policy processing at user logon is synchronous (these servers wait for the network to be initialized during user logon).&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting and users log on to a client computer or a server running Windows Server 2008 or later and that is configured as described earlier, the computer typically does not wait for the network to be fully initialized. In this case, users are logged on with cached credentials. Group Policy is applied asynchronously in the background.&lt;br/&gt;&lt;br/&gt;Notes: &lt;br/&gt;-If you want to guarantee the application of Folder Redirection, Software Installation, or roaming user profile settings in just one logon, enable this policy setting to ensure that Windows waits for the network to be available before applying policy. &lt;br/&gt;-If Folder Redirection policy will apply during the next logon, security policies will be applied asynchronously during the next update cycle, if network connectivity is available." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Always wait for the network at computer startup and logon</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/User Profiles</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not log users on with temporary profiles" gpmc_settingPath="Computer Configuration/Administrative Templates/System/User Profiles" gpmc_settingDescription="This policy setting will automatically log off a user when Windows cannot load their profile. &lt;br/&gt;&lt;br/&gt;If Windows cannot access the user profile folder or the profile contains errors that prevent it from loading, Windows logs on the user with a temporary profile. This policy setting allows the administrator to disable this behavior, preventing Windows from loggin on the user with a temporary profile.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows will not log on a user with a temporary profile. Windows logs the user off if their profile cannot be loaded.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting or do not configure it, Windows logs on the user with a temporary profile when Windows cannot load their user profile.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Delete cached copies of roaming profiles&amp;quot; policy setting." gpmc_supported="At least Windows 2000">Do not log users on with temporary profiles</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Wait for remote user profile" gpmc_settingPath="Computer Configuration/Administrative Templates/System/User Profiles" gpmc_settingDescription="This policy setting directs the system to wait for the remote copy of the roaming user profile to load, even when loading is slow. Also, the system waits for the remote copy when the user is notified about a slow connection, but does not respond in the time allowed.&lt;br/&gt;&lt;br/&gt;This policy setting and related policy settings in this folder together define the system&amp;#39;s response when roaming user profiles are slow to load.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the system waits for the remote copy of the roaming user profile to load, even when loading is slow.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting or do not configure it, when a remote profile is slow to load, the system loads the local copy of the roaming user profile. The local copy is also used when the user is consulted (as set in the &amp;quot;Prompt user when slow link is detected&amp;quot; policy setting), but does not respond in the time allowed (as set in the &amp;quot;Timeout for dialog boxes&amp;quot; policy setting).&lt;br/&gt;&lt;br/&gt;Waiting for the remote profile is appropriate when users move between computers frequently and the local copy of their profile is not always current. Using the local copy is desirable when quick logging on is a priority.&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Do not detect slow network connections&amp;quot; policy setting is enabled, this policy setting is ignored. Also, if the &amp;quot;Delete cached copies of roaming profiles&amp;quot; policy setting is enabled, there is no local copy of the roaming profile to load when the system detects a slow connection." gpmc_supported="At least Windows 2000">Wait for remote user profile</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/App Package Deployment</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow all trusted apps to install" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/App Package Deployment" gpmc_settingDescription="This policy setting allows you to manage the installation of trusted line-of-business (LOB) or developer-signed Windows Store apps.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, you can install any LOB or developer-signed Windows Store app (which must be signed with a certificate chain that can be successfully validated by the local computer).&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, you cannot install LOB or developer-signed Windows Store apps." gpmc_supported="At least Windows Server 2012, Windows 8 or Windows RT">Allow all trusted apps to install</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent non-admin users from installing packaged Windows apps" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/App Package Deployment" gpmc_settingDescription="Manages non-Administrator users&amp;#39; ability to install Windows app packages.&lt;br/&gt;&lt;br/&gt;        If you enable this policy, non-Administrators will be unable to initiate installation of Windows app packages. Administrators who wish to install an app will need to do so from an Administrator context (for example, an Administrator PowerShell window). All users will still be able to install Windows app packages via the Microsoft Store, if permitted by other policies.&lt;br/&gt;&lt;br/&gt;        If you disable or do not configure this policy, all users will be able to initiate installation of Windows app packages.&lt;br/&gt;      " gpmc_supported="At least Windows Server 2016, Windows 10">Prevent non-admin users from installing packaged Windows apps</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/App Privacy</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Let Windows apps access the calendar" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/App Privacy" gpmc_settingDescription="This policy setting specifies whether Windows apps can access the calendar.&lt;br/&gt;&lt;br/&gt;You can specify either a default setting for all apps or a per-app setting by specifying a Package Family Name. You can get the Package Family Name for an app by using the Get-AppPackage Windows PowerShell cmdlet. A per-app setting overrides the default setting.&lt;br/&gt;&lt;br/&gt;If you choose the &amp;quot;User is in control&amp;quot; option, employees in your organization can decide whether Windows apps can access the calendar by using Settings &amp;gt; Privacy on the device.&lt;br/&gt;&lt;br/&gt;If you choose the &amp;quot;Force Allow&amp;quot; option, Windows apps are allowed to access the calendar and employees in your organization cannot change it.&lt;br/&gt;&lt;br/&gt;If you choose the &amp;quot;Force Deny&amp;quot; option, Windows apps are not allowed to access the calendar and employees in your organization cannot change it.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, employees in your organization can decide whether Windows apps can access the calendar by using Settings &amp;gt; Privacy on the device.&lt;br/&gt;&lt;br/&gt;If an app is open when this Group Policy object is applied on a device, employees must restart the app or device for the policy changes to be applied to the app.&lt;br/&gt;      " gpmc_supported="At least Windows Server 2016, Windows 10">Let Windows apps access the calendar</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Default for all apps:</td><td>Force Deny</td></tr>
<tr><td colspan="2">Put user in control of these specific apps (use Package Family Names):</td></tr><tr><td></td><td></td></tr>
<tr><td colspan="2">Force allow these specific apps (use Package Family Names):</td></tr><tr><td></td><td></td></tr>
<tr><td colspan="2">Force deny these specific apps (use Package Family Names):</td></tr><tr><td></td><td></td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/AutoPlay Policies</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Autoplay" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/AutoPlay Policies" gpmc_settingDescription="This policy setting allows you to turn off the Autoplay feature.&lt;br/&gt;&lt;br/&gt;          Autoplay begins reading from a drive as soon as you insert media in the drive. As a result, the setup file of programs and the music on audio media start immediately.&lt;br/&gt;&lt;br/&gt;          Prior to Windows XP SP2, Autoplay is disabled by default on removable drives, such as the floppy disk drive (but not the CD-ROM drive), and on network drives.&lt;br/&gt;&lt;br/&gt;          Starting with Windows XP SP2, Autoplay is enabled for removable drives as well, including Zip drives and some USB mass storage devices.&lt;br/&gt;&lt;br/&gt;          If you enable this policy setting, Autoplay is disabled on CD-ROM and removable media drives, or disabled on all drives.&lt;br/&gt;&lt;br/&gt;          This policy setting disables Autoplay on additional types of drives. You cannot use this setting to enable Autoplay on drives on which it is disabled by default.&lt;br/&gt;&lt;br/&gt;          If you disable or do not configure this policy setting, AutoPlay is enabled.&lt;br/&gt;&lt;br/&gt;          Note: This policy setting appears in both the Computer Configuration and User Configuration folders. If the policy settings conflict, the policy setting in Computer Configuration takes precedence over the policy setting in User Configuration." gpmc_supported="At least Windows 2000">Turn off Autoplay</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Turn off Autoplay on:</td><td>All drives</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/BitLocker Drive Encryption/Operating System Drives</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Require additional authentication at startup" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/BitLocker Drive Encryption/Operating System Drives" gpmc_settingDescription="This policy setting allows you to configure whether BitLocker requires additional authentication each time the computer starts and whether you are using BitLocker with or without a Trusted Platform Module (TPM). This policy setting is applied when you turn on BitLocker.&lt;br/&gt;&lt;br/&gt;Note: Only one of the additional authentication options can be required at startup, otherwise a policy error occurs.&lt;br/&gt;&lt;br/&gt;If you want to use BitLocker on a computer without a TPM, select the &amp;quot;Allow BitLocker without a compatible TPM&amp;quot; check box. In this mode either a password or a USB drive is required for start-up. When using a startup key, the key information used to encrypt the drive is stored on the USB drive, creating a USB key. When the USB key is inserted the access to the drive is authenticated and the drive is accessible. If the USB key is lost or unavailable or if you have forgotten the password then you will need to use one of the BitLocker recovery options to access the drive.&lt;br/&gt;&lt;br/&gt;On a computer with a compatible TPM, four types of authentication methods can be used at startup to provide added protection for encrypted data. When the computer starts, it can use only the TPM for authentication, or it can also require insertion of a USB flash drive containing a startup key, the entry of a 6-digit to 20-digit personal identification number (PIN), or both.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users can configure advanced startup options in the BitLocker setup wizard.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can configure only basic options on computers with a TPM.&lt;br/&gt;&lt;br/&gt;Note: If you want to require the use of a startup PIN and a USB flash drive, you must configure BitLocker settings using the command-line tool manage-bde instead of the BitLocker Drive Encryption setup wizard.&lt;br/&gt;&lt;br/&gt;" gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Require additional authentication at startup</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Allow BitLocker without a compatible TPM (requires a password or a startup key on a USB flash drive)</td><td>Enabled</td></tr>
<tr><td colspan="2">Settings for computers with a TPM:</td></tr><tr><td>Configure TPM startup:</td><td>Allow TPM</td></tr>
<tr><td>Configure TPM startup PIN:</td><td>Allow startup PIN with TPM</td></tr>
<tr><td>Configure TPM startup key:</td><td>Allow startup key with TPM</td></tr>
<tr><td>Configure TPM startup key and PIN:</td><td>Allow startup key and PIN with TPM</td></tr>
<tr><td colspan="2"></td></tr></table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Desktop App Installer</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable App Installer ms-appinstaller protocol" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Desktop App Installer" gpmc_settingDescription="This policy controls whether users can install packages from a website that is using the ms-appinstaller protocol.&lt;br/&gt;      &lt;br/&gt;If you enable or do not configure this setting, users will be able to install packages from websites that use this protocol. &lt;br/&gt;&lt;br/&gt;If you disable this setting, users will not be able to install packages from websites that use this protocol." gpmc_supported="At least Windows Server 2016, Windows 10 Version 1809">Enable App Installer ms-appinstaller protocol</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Edge UI</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable help tips" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Edge UI" gpmc_settingDescription="Disables help tips that Windows shows to the user.&lt;br/&gt;&lt;br/&gt;By default, Windows will show the user help tips until the user has successfully completed the scenarios.&lt;br/&gt;&lt;br/&gt;If this setting is enabled, Windows will not show any help tips to the user.&lt;br/&gt;      " gpmc_supported="At least Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1">Disable help tips</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Internet Control Panel/Security Page</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Intranet Sites: Include all network paths (UNCs)" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page" gpmc_settingDescription="This policy setting controls whether URLs representing UNCs are mapped into the local Intranet security zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, all network paths are mapped into the Intranet Zone.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, network paths are not necessarily mapped into the Intranet Zone (other rules might map one there).&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users choose whether network paths are mapped into the Intranet Zone." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Intranet Sites: Include all network paths (UNCs)</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Intranet Sites: Include all sites that bypass the proxy server" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page" gpmc_settingDescription="This policy setting controls whether sites which bypass the proxy server are mapped into the local Intranet security zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, sites which bypass the proxy server are mapped into the Intranet Zone.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, sites which bypass the proxy server aren&amp;#39;t necessarily mapped into the Intranet Zone (other rules might map one there).&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users choose whether sites which bypass the proxy server are mapped into the Intranet Zone." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Intranet Sites: Include all sites that bypass the proxy server</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Intranet Zone Template" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page" gpmc_settingDescription="This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Medium, or High.&lt;br/&gt;&lt;br/&gt;If you enable this template policy setting and select a security level, all values for individual settings in the zone will be overwritten by the standard template defaults.&lt;br/&gt;&lt;br/&gt;If you disable this template policy setting, no security level is configured.&lt;br/&gt;&lt;br/&gt;If you do not configure this template policy setting, no security level is configured.&lt;br/&gt;&lt;br/&gt;Note. Local Machine Zone Lockdown Security and Network Protocol Lockdown operate by comparing the settings in the active URL&amp;#39;s zone against those in the Locked-Down equivalent zone. If you select a security level for any zone (including selecting no security), the same change should be made to the Locked-Down equivalent.&lt;br/&gt;&lt;br/&gt;Note. It is recommended to configure template policy settings in one Group Policy object (GPO) and configure any related individual policy settings in a separate GPO. You can then use Group Policy management features (for example, precedence, inheritance, or enforce) to apply individual settings to specific targets." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Intranet Zone Template</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Intranet</td><td>High</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Site to Zone Assignment List" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page" gpmc_settingDescription="This policy setting allows you to manage a list of sites that you want to associate with a particular security zone. These zone numbers have associated security settings that apply to all of the sites in the zone.&lt;br/&gt;&lt;br/&gt;Internet Explorer has 4 security zones, numbered 1-4, and these are used by this policy setting to associate sites to zones. They are: (1) Intranet zone, (2) Trusted Sites zone, (3) Internet zone, and (4) Restricted Sites zone. Security settings can be set for each of these zones through other policy settings, and their default settings are: Trusted Sites zone (Low template), Intranet zone (Medium-Low template), Internet zone (Medium template), and Restricted Sites zone (High template). (The Local Machine zone and its locked down equivalent have special security settings that protect your local computer.)&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, you can enter a list of sites and their related zone numbers. The association of a site with a zone will ensure that the security settings for the specified zone are applied to the site.&amp;#160; For each entry that you add to the list, enter the following information:&lt;br/&gt;&lt;br/&gt;Valuename – A host for an intranet site, or a fully qualified domain name for other sites. The valuename may also include&amp;#160;a specific&amp;#160;protocol. For example, if you enter http://www.contoso.com&amp;#160;as the valuename, other protocols are not affected.&amp;#160;If you enter just www.contoso.com,&amp;#160;then all protocols&amp;#160;are affected for that site, including http, https, ftp, and so on. The site may also be expressed as an IP address (e.g., 127.0.0.1) or range (e.g., 127.0.0.1-10). To avoid creating conflicting policies, do not include additional characters after the domain such as trailing slashes or URL path. For example, policy settings for www.contoso.com and www.contoso.com/mail would be treated as the same policy setting by Internet Explorer, and would therefore be in conflict.&lt;br/&gt;&lt;br/&gt;Value - A number indicating the zone with which this site should be associated for security settings. The Internet Explorer zones described above are 1-4.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, users may choose their own site-to-zone assignments." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Site to Zone Assignment List</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td colspan="2"><table class="subtable" >
<tr><th scope="col">Enter the zone assignments here.</th><th scope="col">&nbsp;</th></tr>
<tr><td>*.emea.tpg.ads</td><td>1</td></tr>
<tr><td>*.microsoft.com</td><td>2</td></tr>
<tr><td>*.dstver.ru</td><td>1</td></tr>
<tr><td>*.teleperformance.de</td><td>2</td></tr>
</table></td></tr></table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Trusted Sites Zone Template" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page" gpmc_settingDescription="This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for example, Low, Medium Low, Medium, or High.&lt;br/&gt;&lt;br/&gt;If you enable this template policy setting and select a security level, all values for individual settings in the zone will be overwritten by the standard template defaults.&lt;br/&gt;&lt;br/&gt;If you disable this template policy setting, no security level is configured.&lt;br/&gt;&lt;br/&gt;If you do not configure this template policy setting, no security level is configured.&lt;br/&gt;&lt;br/&gt;Note. Local Machine Zone Lockdown Security and Network Protocol Lockdown operate by comparing the settings in the active URL&amp;#39;s zone against those in the Locked-Down equivalent zone. If you select a security level for any zone (including selecting no security), the same change should be made to the Locked-Down equivalent.&lt;br/&gt;&lt;br/&gt;Note. It is recommended to configure template policy settings in one Group Policy object (GPO) and configure any related individual policy settings in a separate GPO. You can then use Group Policy management features (for example, precedence, inheritance, or enforce) to apply individual settings to specific targets." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Trusted Sites Zone Template</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Trusted Sites</td><td>High</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Access data sources across domains" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO).&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone. If you select Prompt in the drop-down box, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Access data sources across domains</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Access data sources across domains</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow active content over restricted protocols to access my computer" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage whether a resource hosted on an admin-restricted protocol in the Intranet Zone can run active content such as script, ActiveX, Java and Binary Behaviors. The list of restricted protocols may be set in the Intranet Zone Restricted Protocols section under Network Protocol Lockdown policy.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, no Intranet Zone content accessed is affected, even for protocols on the restricted list. If you select Prompt from the drop-down box, the Notification bar will appear to allow control over questionable content accessed over any restricted protocols; content over other protocols is unaffected.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, all attempts to access such content over the restricted protocols is blocked.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the Notification bar will appear to allow control over questionable content accessed over any restricted protocols when the Network Protocol Lockdown security feature is enabled." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Allow active content over restricted protocols to access my computer</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Allow active content over restricted protocols to access my computer</td><td>Prompt</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow active scripting" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage whether script code on pages in the zone is run.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, script code on pages in the zone can run automatically. If you select Prompt in the drop-down box, users are queried to choose whether to allow script code on pages in the zone to run.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, script code on pages in the zone is prevented from running.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, script code on pages in the zone can run automatically." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Allow active scripting</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Allow active scripting</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow binary and script behaviors" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage dynamic binary and script behaviors: components that encapsulate specific functionality for HTML elements to which they were attached.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, binary and script behaviors are available. If you select Administrator approved in the drop-down box, only behaviors listed in the Admin-approved Behaviors under Binary Behaviors Security Restriction policy are available.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, binary and script behaviors are not available unless applications have implemented a custom security manager.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, binary and script behaviors are available." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Allow binary and script behaviors</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Allow Binary and Script Behaviors</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow cut, copy or paste operations from the clipboard via script" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage whether scripts can perform a clipboard operation (for example, cut, copy, and paste) in a specified region.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, a script can perform a clipboard operation.&lt;br/&gt;&lt;br/&gt;If you select Prompt in the drop-down box, users are queried as to whether to perform clipboard operations.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, a script cannot perform a clipboard operation.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, a script can perform a clipboard operation." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Allow cut, copy or paste operations from the clipboard via script</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Allow paste operations via script</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow drag and drop or copy and paste files" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage whether users can drag files or copy and paste files from a source within the zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users can drag files or copy and paste files from this zone automatically. If you select Prompt in the drop-down box, users are queried to choose whether to drag or copy files from this zone.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, users are prevented from dragging files or copying and pasting files from this zone.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users can drag files or copy and paste files from this zone automatically." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Allow drag and drop or copy and paste files</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Allow drag and drop or copy and paste files</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow file downloads" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage whether file downloads are permitted from the zone. This option is determined by the zone of the page with the link causing the download, not the zone from which the file is delivered.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, files can be downloaded from the zone.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, files are prevented from being downloaded from the zone.&lt;br/&gt;&lt;br/&gt; If you do not configure this policy setting, files can be downloaded from the zone." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Allow file downloads</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Allow file downloads</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow font downloads" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage whether pages of the zone may download HTML fonts.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, HTML fonts are prevented from downloading.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, HTML fonts can be downloaded automatically." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Allow font downloads</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Allow font downloads</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow installation of desktop items" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage whether users can install Active Desktop items from this zone. The settings for this option are: If you enable this policy setting, users can install desktop items from this zone automatically.&lt;br/&gt;&lt;br/&gt;If you select Prompt in the drop-down box, users are queried to choose whether to install desktop items from this zone.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, users are prevented from installing desktop items from this zone.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users are queried to choose whether to install desktop items from this zone." gpmc_supported="Only Internet Explorer 6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1 through IE8 inclusive">Allow installation of desktop items</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Allow installation of desktop items</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow loading of XAML Browser Applications" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage the loading of XAML Browser Applications (XBAPs). These are browser-hosted, ClickOnce-deployed applications built via WinFX. These applications run in a security sandbox and take advantage of the Windows Presentation Foundation platform for the web.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting and set the drop-down box to Enable, XBAPs are automatically loaded inside Internet Explorer. The user cannot change this behavior. If you set the drop-down box to Prompt, the user is prompted for loading XBAPs.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, XBAPs are not loaded inside Internet Explorer. The user cannot change this behavior.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can decide whether to load XBAPs inside Internet Explorer." gpmc_supported="At least Internet Explorer 7.0">Allow loading of XAML Browser Applications</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>XAML browser applications</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow loading of XAML files" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage the loading of Extensible Application Markup Language (XAML) files. XAML is an XML-based declarative markup language commonly used for creating rich user interfaces and graphics that take advantage of the Windows Presentation Foundation.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting and set the drop-down box to Enable, XAML files are automatically loaded inside Internet Explorer. The user cannot change this behavior. If you set the drop-down box to Prompt, the user is prompted for loading XAML files.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, XAML files are not loaded inside Internet Explorer. The user cannot change this behavior.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can decide whether to load XAML files inside Internet Explorer." gpmc_supported="At least Internet Explorer 7.0">Allow loading of XAML files</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>XAML Files</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow loading of XPS files" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage the loading of XPS files. These files contain a fixed-layout representation of paginated content and are portable across platforms, devices, and applications.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting and set the drop-down box to Enable, XPS files are automatically loaded inside Internet Explorer. The user cannot change this behavior. If you set the drop-down box to Prompt, the user is prompted for loading XPS files.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, XPS files are not loaded inside Internet Explorer. The user cannot change this behavior.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can decide whether to load XPS files inside Internet Explorer." gpmc_supported="At least Internet Explorer 7.0">Allow loading of XPS files</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>XPS documents</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow META REFRESH" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage whether a user&amp;#39;s browser can be redirected to another Web page if the author of the Web page uses the Meta Refresh setting (tag) to redirect browsers to another Web page.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, a user&amp;#39;s browser that loads a page containing an active Meta Refresh setting can be redirected to another Web page.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, a user&amp;#39;s browser that loads a page containing an active Meta Refresh setting cannot be redirected to another Web page.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, a user&amp;#39;s browser that loads a page containing an active Meta Refresh setting can be redirected to another Web page." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Allow META REFRESH</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Allow META REFRESH</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow only approved domains to use ActiveX controls without prompt" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting controls whether or not the user is prompted to allow ActiveX controls to run on websites other than the website that installed the ActiveX control.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user is prompted before ActiveX controls can run from websites in this zone. The user can choose to allow the control to run from the current site or from all sites.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the user does not see the per-site ActiveX prompt, and ActiveX controls can run from all sites in this zone." gpmc_supported="At least Internet Explorer 8.0">Allow only approved domains to use ActiveX controls without prompt</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Only allow approved domains to use ActiveX controls without prompt</td><td>Disable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow scripting of Internet Explorer WebBrowser controls" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting determines whether a page can control embedded WebBrowser controls via script.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, script access to the WebBrowser control is allowed.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, script access to the WebBrowser control is not allowed.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can enable or disable script access to the WebBrowser control. By default, script access to the WebBrowser control is allowed only in the Local Machine and Intranet zones." gpmc_supported="At least Internet Explorer 7.0">Allow scripting of Internet Explorer WebBrowser controls</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Internet Explorer web browser control</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow script-initiated windows without size or position constraints" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage restrictions on script-initiated pop-up windows and windows that include the title and status bars.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows Restrictions security will not apply in this zone. The security zone runs without the added layer of security provided by this feature.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the possible harmful actions contained in script-initiated pop-up windows and windows that include the title and status bars cannot be run. This Internet Explorer security feature will be on in this zone as dictated by the Scripted Windows Security Restrictions feature control setting for the process.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, Windows Restrictions security will not apply in this zone. The security zone runs without the added layer of security provided by this feature." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Allow script-initiated windows without size or position constraints</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Allow script-initiated windows without size or position constraints</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow scriptlets" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage whether the user can run scriptlets.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user can run scriptlets.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the user cannot run scriptlets.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can enable or disable scriptlets." gpmc_supported="At least Internet Explorer 7.0">Allow scriptlets</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Scriptlets</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow updates to status bar via script" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage whether script is allowed to update the status bar within the zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, script is allowed to update the status bar.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, script is allowed to update the status bar." gpmc_supported="At least Internet Explorer 7.0">Allow updates to status bar via script</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Status bar updates via script</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow video and animation on a webpage that uses an older media player" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows the playing of video and animation through older media players in specified zones. Video and animation playback through the object tag may still be allowed, because this involves external controls or media players.&lt;br/&gt;&lt;br/&gt;The dynsrc attribute on the img tag specifies an older media player. Also, as of Internet Explorer 8, this policy setting controls HTML+TIME media elements that refer to audio and video files.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, video and animation can be played through older media players in specified zones.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, video and animation cannot be played through older media players.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, video and animation can be played through older media players in specified zones." gpmc_supported="At least Internet Explorer 7.0">Allow video and animation on a webpage that uses an older media player</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Allow video and animation on a Web page that uses a legacy media player</td><td>Disable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow websites to open windows without status bar or Address bar" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting controls whether websites can open new Internet Explorer windows that have no status bar or Address bar.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, websites can open new Internet Explorer windows that have no status bar or Address bar.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, websites cannot open new Internet Explorer windows that have no status bar or Address bar.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can choose whether websites can open new Internet Explorer Windows that have no status bar or Address bar." gpmc_supported="At least Internet Explorer 7.0">Allow websites to open windows without status bar or Address bar</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Open windows without address or status bars</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow websites to prompt for information by using scripted windows" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting determines whether scripted windows are automatically displayed.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, scripted windows are displayed.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the user must choose to display any scripted windows by using the Notification bar.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can enable or disable the Notification bar behavior." gpmc_supported="At least Internet Explorer 7.0">Allow websites to prompt for information by using scripted windows</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Prompt for information using scripted windows</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Automatic prompting for ActiveX controls" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting manages whether users will be automatically prompted for ActiveX control installations.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Automatic prompting for ActiveX controls</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Automatic prompting for ActiveX controls</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Automatic prompting for file downloads" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users will receive a file download dialog for automatic download attempts.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, users will receive a file download dialog for automatic download attempts." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Automatic prompting for file downloads</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Automatic prompting for file downloads</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Display mixed content" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage whether users can display nonsecure items and manage whether users receive a security information message to display pages containing both secure and nonsecure items.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, and the drop-down box is set to Enable, the user does not receive a security information message (This page contains both secure and nonsecure items. Do you want to display the nonsecure items?) and nonsecure content can be displayed.&lt;br/&gt;&lt;br/&gt;If the drop-down box is set to Prompt, the user will receive the security information message on the Web pages that contain both secure (https://) and nonsecure (http://) content.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, users cannot receive the security information message and nonsecure content cannot be displayed.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user will receive the security information message on the Web pages that contain both secure (https://) and nonsecure (http://) content." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Display mixed content</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Display mixed content</td><td>Prompt</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not prompt for client certificate selection when no certificates or only one certificate exists." gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage whether users are prompted to select a certificate when no certificate or only one certificate exists.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Internet Explorer does not prompt users with a &amp;quot;Client Authentication&amp;quot; message when they connect to a Web site that has no certificate or only one certificate.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Internet Explorer prompts users with a &amp;quot;Client Authentication&amp;quot; message when they connect to a Web site that has no certificate or only one certificate.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, Internet Explorer does not prompt users with a &amp;quot;Client Authentication&amp;quot; message when they connect to a Web site that has no certificate or only one certificate." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Do not prompt for client certificate selection when no certificates or only one certificate exists.</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Do not prompt for client certificate selection when no certificates or only one certificate exists.</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Download signed ActiveX controls" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage whether users may download signed ActiveX controls from a page in the zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users can download signed controls without user intervention. If you select Prompt in the drop-down box, users are queried whether to download controls signed by publishers who aren&amp;#39;t trusted. Code signed by trusted publishers is silently downloaded.&lt;br/&gt;&lt;br/&gt;If you disable the policy setting, signed controls cannot be downloaded.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users are queried whether to download controls signed by publishers who aren&amp;#39;t trusted.  Code signed by trusted publishers is silently downloaded." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Download signed ActiveX controls</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Download signed ActiveX controls</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Download unsigned ActiveX controls" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage whether users may download unsigned ActiveX controls from the zone. Such code is potentially harmful, especially when coming from an untrusted zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users can run unsigned controls without user intervention. If you select Prompt in the drop-down box, users are queried to choose whether to allow the unsigned control to run.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, users cannot run unsigned controls.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users cannot run unsigned controls." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Download unsigned ActiveX controls</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Download unsigned ActiveX controls</td><td>Prompt</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable MIME Sniffing" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage MIME sniffing for file promotion from one type to another based on a MIME sniff. A MIME sniff is the recognition by Internet Explorer of the file type based on a bit signature.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the MIME Sniffing Safety Feature will not apply in this zone. The security zone will run without the added layer of security provided by this feature.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the actions that may be harmful cannot run; this Internet Explorer security feature will be turned on in this zone, as dictated by the feature control setting for the process.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the MIME Sniffing Safety Feature will not apply in this zone." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Enable MIME Sniffing</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Enable MIME Sniffing</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Include local path when user is uploading files to a server" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting controls whether or not local path information is sent when the user is uploading a file via an HTML form. If the local path information is sent, some information may be unintentionally revealed to the server. For instance, files sent from the user&amp;#39;s desktop may contain the user name as a part of the path.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, path information is sent when the user is uploading a file via an HTML form.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, path information is removed when the user is uploading a file via an HTML form.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can choose whether path information is sent when he or she is uploading a file via an HTML form. By default, path information is sent." gpmc_supported="At least Internet Explorer 7.0">Include local path when user is uploading files to a server</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Include local directory path when uploading files to a server</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Initialize and script ActiveX controls not marked as safe" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage ActiveX controls not marked as safe.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Initialize and script ActiveX controls not marked as safe</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Initialize and script ActiveX controls not marked as safe</td><td>Prompt</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Java permissions" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage permissions for Java applets.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.&lt;br/&gt;&lt;br/&gt;Low Safety enables applets to perform all operations.&lt;br/&gt;&lt;br/&gt;Medium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O.&lt;br/&gt;&lt;br/&gt;High Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Java applets cannot run.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the permission is set to Medium Safety." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Java permissions</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Java permissions</td><td>Low safety</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Launching applications and files in an IFRAME" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage whether applications may be run and files may be downloaded from an IFRAME reference in the HTML of the pages in this zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users can run applications and download files from IFRAMEs on the pages in this zone without user intervention. If you select Prompt in the drop-down box, users are queried to choose whether to run applications and download files from IFRAMEs on the pages in this zone.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, users are prevented from running applications and downloading files from IFRAMEs on the pages in this zone.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users are queried to choose whether to run applications and download files from IFRAMEs on the pages in this zone." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Launching applications and files in an IFRAME</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Launching applications and files in an IFRAME</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Logon options" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage settings for logon options.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, you can choose from the following logon options.&lt;br/&gt;&lt;br/&gt;Anonymous logon to disable HTTP authentication and use the guest account only for the Common Internet File System (CIFS) protocol.&lt;br/&gt;&lt;br/&gt;Prompt for user name and password to query users for user IDs and passwords. After a user is queried, these values can be used silently for the remainder of the session.&lt;br/&gt;&lt;br/&gt;Automatic logon only in Intranet zone to query users for user IDs and passwords in other zones. After a user is queried, these values can be used silently for the remainder of the session.&lt;br/&gt;&lt;br/&gt;Automatic logon with current user name and password to attempt logon using Windows NT Challenge Response (also known as NTLM authentication). If Windows NT Challenge Response is supported by the server, the logon uses the user&amp;#39;s network user name and password for logon. If Windows NT Challenge Response is not supported by the server, the user is queried to provide the user name and password.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, logon is set to Automatic logon only in Intranet zone.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, logon is set to Automatic logon only in Intranet zone." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Logon options</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Logon options</td><td>Automatic logon with current username and password</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Navigate windows and frames across different domains" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage the opening of windows and frames and access of applications across different domains.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users can open windows and frames from othe domains and access applications from other domains. If you select Prompt in the drop-down box, users are queried whether to allow windows and frames to access applications from other domains.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, users cannot open windows and frames to access applications from different domains.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users can open windows and frames from othe domains and access applications from other domains." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Navigate windows and frames across different domains</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Navigate windows and frames across different domains</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Run .NET Framework-reliant components not signed with Authenticode" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Internet Explorer will not execute unsigned managed components.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, Internet Explorer will execute unsigned managed components." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Run .NET Framework-reliant components not signed with Authenticode</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Run .NET Framework-reliant components not signed with Authenticode</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Run .NET Framework-reliant components signed with Authenticode" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage whether .NET Framework components that are signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Internet Explorer will execute signed managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute signed managed components.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Internet Explorer will not execute signed managed components.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, Internet Explorer will execute signed managed components." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Run .NET Framework-reliant components signed with Authenticode</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Run .NET Framework-reliant components signed with Authenticode</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Run ActiveX controls and plugins" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage whether ActiveX controls and plug-ins can be run on pages from the specified zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, controls and plug-ins can run without user intervention.&lt;br/&gt;&lt;br/&gt;If you selected Prompt in the drop-down box, users are asked to choose whether to allow the controls or plug-in to run.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, controls and plug-ins are prevented from running.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, controls and plug-ins can run without user intervention." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Run ActiveX controls and plugins</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Run ActiveX controls and plugins</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Script ActiveX controls marked safe for scripting" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage whether an ActiveX control marked safe for scripting can interact with a script.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, script interaction can occur automatically without user intervention.&lt;br/&gt;&lt;br/&gt;If you select Prompt in the drop-down box, users are queried to choose whether to allow script interaction.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, script interaction is prevented from occurring.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, script interaction can occur automatically without user intervention." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Script ActiveX controls marked safe for scripting</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Script ActiveX controls marked safe for scripting</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Scripting of Java applets" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage whether applets are exposed to scripts within the zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, scripts can access applets automatically without user intervention.&lt;br/&gt;&lt;br/&gt;If you select Prompt in the drop-down box, users are queried to choose whether to allow scripts to access applets.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, scripts are prevented from accessing applets.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, scripts can access applets automatically without user intervention." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Scripting of Java applets</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Scripting of Java applets</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Software channel permissions" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage software channel permissions.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, you can choose the following options from the drop-down box.&lt;br/&gt;&lt;br/&gt;Low safety to allow users to be notified of software updates by e-mail, software packages to be automatically downloaded to users&amp;#39; computers, and software packages to be automatically installed on users&amp;#39; computers.&lt;br/&gt;&lt;br/&gt;Medium safety to allow users to be notified of software updates by e-mail and software packages to be automatically downloaded to (but not installed on) users&amp;#39; computers.&lt;br/&gt;&lt;br/&gt;High safety to prevent users from being notified of software updates by e-mail, software packages from being automatically downloaded to users&amp;#39; computers, and software packages from being automatically installed on users&amp;#39; computers.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, permissions are set to high safety.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, permissions are set to Medium safety." gpmc_supported="Only Internet Explorer 6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1 through IE7 inclusive">Software channel permissions</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Software channel permissions</td><td>Low safety</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Submit non-encrypted form data" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage whether data on HTML forms on pages in the zone may be submitted. Forms sent with SSL (Secure Sockets Layer) encryption are always allowed; this setting only affects non-SSL form data submission.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, information using HTML forms on pages in this zone can be submitted automatically. If you select Prompt in the drop-down box, users are queried to choose whether to allow information using HTML forms on pages in this zone to be submitted.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, information using HTML forms on pages in this zone is prevented from being submitted.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, information using HTML forms on pages in this zone can be submitted automatically." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Submit non-encrypted form data</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Submit non-encrypted form data</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off .NET Framework Setup" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting prevents the user&amp;#39;s computer from starting Microsoft .NET Framework Setup when the user is browsing to .NET Framework content in Internet Explorer. The .NET Framework is the next-generation platform for Windows. It uses the common language runtime and incorporates support from multiple developer tools. It includes the new managed code APIs for Windows.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, .NET Framework Setup is turned off. The user cannot change this behavior.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, .NET Framework Setup is turned on. The user cannot change this behavior.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, .NET Framework Setup is turned on by default. The user can change this behavior." gpmc_supported="At least Internet Explorer 7.0">Turn off .NET Framework Setup</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>.NET Framework Setup</td><td>Disable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off first-run prompt" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting controls the first-run response that the user sees on a zone-by-zone basis. When the user encounters a new control that has not previously run in Internet Explorer, he or she may be prompted to approve the control. This policy setting determines whether the user is prompted.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the first-run prompt is turned off in the corresponding zone.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the first-run prompt is turned on in the corresponding zone.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the first-run prompt is turned on by default." gpmc_supported="At least Internet Explorer 7.0">Turn off first-run prompt</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>First-Run Opt-In</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn on Cross-Site Scripting Filter" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy controls whether or not the Cross-Site Scripting (XSS) Filter will detect and prevent cross-site script injections into websites in this zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the XSS Filter is turned on for sites in this zone, and the XSS Filter attempts to block cross-site script injections.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the XSS Filter is turned off for sites in this zone, and Internet Explorer permits cross-site script injections." gpmc_supported="At least Internet Explorer 8.0">Turn on Cross-Site Scripting Filter</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Turn on Cross-Site Scripting (XSS) Filter</td><td>Disable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn on Protected Mode" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to turn on Protected Mode. Protected Mode helps protect Internet Explorer from exploited vulnerabilities by reducing the locations that Internet Explorer can write to in the registry and the file system.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Protected Mode is turned on. The user cannot turn off Protected Mode.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Protected Mode is turned off. The user cannot turn on Protected Mode.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can turn on or turn off Protected Mode." gpmc_supported="At least Internet Explorer 7.0 in Windows Vista">Turn on Protected Mode</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn on SmartScreen Filter scan" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, SmartScreen Filter scans pages in this zone for malicious content.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, SmartScreen Filter does not scan pages in this zone for malicious content.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can choose whether SmartScreen Filter scans pages in this zone for malicious content.&lt;br/&gt;&lt;br/&gt;Note: In Internet Explorer 7, this policy setting controls whether Phishing Filter scans pages in this zone for malicious content." gpmc_supported="At least Internet Explorer 7.0">Turn on SmartScreen Filter scan</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Use SmartScreen Filter</td><td>Disable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Use Pop-up Blocker" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage whether unwanted pop-up windows appear. Pop-up windows that are opened when the end user clicks a link are not blocked.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, most unwanted pop-up windows are prevented from appearing.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, pop-up windows are not prevented from appearing.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, pop-up windows are not prevented from appearing." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Use Pop-up Blocker</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Use Pop-up Blocker</td><td>Disable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Userdata persistence" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage the preservation of information in the browser&amp;#39;s history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users can preserve information in the browser&amp;#39;s history, in favorites, in an XML store, or directly within a Web page saved to disk.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, users cannot preserve information in the browser&amp;#39;s history, in favorites, in an XML store, or directly within a Web page saved to disk.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users can preserve information in the browser&amp;#39;s history, in favorites, in an XML store, or directly within a Web page saved to disk." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Userdata persistence</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Userdata persistence</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Web sites in less privileged Web content zones can navigate into this zone" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Intranet Zone" gpmc_settingDescription="This policy setting allows you to manage whether Web sites from less privileged zones, such as Restricted Sites, can navigate into this zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone.  The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Web sites in less privileged Web content zones can navigate into this zone</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Web sites in less privileged Web content zones can navigate into this zone</td><td>Enable</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Access data sources across domains" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Microsoft XML Parser (MSXML) or ActiveX Data Objects (ADO).&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone. If you select Prompt in the drop-down box, users are queried to choose whether to allow a page to be loaded in the zone that uses MSXML or ADO to access data from another site in the zone.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, users cannot load a page in the zone that uses MSXML or ADO to access data from another site in the zone.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users can load a page in the zone that uses MSXML or ADO to access data from another site in the zone." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Access data sources across domains</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Access data sources across domains</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow active content over restricted protocols to access my computer" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage whether a resource hosted on an admin-restricted protocol in the Intranet Zone can run active content such as script, ActiveX, Java and Binary Behaviors. The list of restricted protocols may be set in the Intranet Zone Restricted Protocols section under Network Protocol Lockdown policy.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, no Intranet Zone content accessed is affected, even for protocols on the restricted list. If you select Prompt from the drop-down box, the Notification bar will appear to allow control over questionable content accessed over any restricted protocols; content over other protocols is unaffected.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, all attempts to access such content over the restricted protocols is blocked.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the Notification bar will appear to allow control over questionable content accessed over any restricted protocols when the Network Protocol Lockdown security feature is enabled." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Allow active content over restricted protocols to access my computer</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Allow active content over restricted protocols to access my computer</td><td>Prompt</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow active scripting" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage whether script code on pages in the zone is run.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, script code on pages in the zone can run automatically. If you select Prompt in the drop-down box, users are queried to choose whether to allow script code on pages in the zone to run.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, script code on pages in the zone is prevented from running.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, script code on pages in the zone can run automatically." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Allow active scripting</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Allow active scripting</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow binary and script behaviors" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage dynamic binary and script behaviors: components that encapsulate specific functionality for HTML elements to which they were attached.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, binary and script behaviors are available. If you select Administrator approved in the drop-down box, only behaviors listed in the Admin-approved Behaviors under Binary Behaviors Security Restriction policy are available.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, binary and script behaviors are not available unless applications have implemented a custom security manager.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, binary and script behaviors are available." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Allow binary and script behaviors</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Allow Binary and Script Behaviors</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow cut, copy or paste operations from the clipboard via script" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage whether scripts can perform a clipboard operation (for example, cut, copy, and paste) in a specified region.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, a script can perform a clipboard operation.&lt;br/&gt;&lt;br/&gt;If you select Prompt in the drop-down box, users are queried as to whether to perform clipboard operations.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, a script cannot perform a clipboard operation.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, a script can perform a clipboard operation." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Allow cut, copy or paste operations from the clipboard via script</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Allow paste operations via script</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow drag and drop or copy and paste files" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage whether users can drag files or copy and paste files from a source within the zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users can drag files or copy and paste files from this zone automatically. If you select Prompt in the drop-down box, users are queried to choose whether to drag or copy files from this zone.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, users are prevented from dragging files or copying and pasting files from this zone.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users can drag files or copy and paste files from this zone automatically." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Allow drag and drop or copy and paste files</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Allow drag and drop or copy and paste files</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow file downloads" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage whether file downloads are permitted from the zone. This option is determined by the zone of the page with the link causing the download, not the zone from which the file is delivered.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, files can be downloaded from the zone.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, files are prevented from being downloaded from the zone.&lt;br/&gt;&lt;br/&gt; If you do not configure this policy setting, files can be downloaded from the zone." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Allow file downloads</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Allow file downloads</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow font downloads" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage whether pages of the zone may download HTML fonts.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, HTML fonts can be downloaded automatically. If you enable this policy setting and Prompt is selected in the drop-down box, users are queried whether to allow HTML fonts to download.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, HTML fonts are prevented from downloading.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, HTML fonts can be downloaded automatically." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Allow font downloads</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Allow font downloads</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow installation of desktop items" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage whether users can install Active Desktop items from this zone. The settings for this option are: If you enable this policy setting, users can install desktop items from this zone automatically.&lt;br/&gt;&lt;br/&gt;If you select Prompt in the drop-down box, users are queried to choose whether to install desktop items from this zone.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, users are prevented from installing desktop items from this zone.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users can install desktop items from this zone automatically." gpmc_supported="Only Internet Explorer 6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1 through IE8 inclusive">Allow installation of desktop items</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Allow installation of desktop items</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow loading of XAML Browser Applications" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage the loading of XAML Browser Applications (XBAPs). These are browser-hosted, ClickOnce-deployed applications built via WinFX. These applications run in a security sandbox and take advantage of the Windows Presentation Foundation platform for the web.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting and set the drop-down box to Enable, XBAPs are automatically loaded inside Internet Explorer. The user cannot change this behavior. If you set the drop-down box to Prompt, the user is prompted for loading XBAPs.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, XBAPs are not loaded inside Internet Explorer. The user cannot change this behavior.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can decide whether to load XBAPs inside Internet Explorer." gpmc_supported="At least Internet Explorer 7.0">Allow loading of XAML Browser Applications</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>XAML browser applications</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow loading of XAML files" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage the loading of Extensible Application Markup Language (XAML) files. XAML is an XML-based declarative markup language commonly used for creating rich user interfaces and graphics that take advantage of the Windows Presentation Foundation.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting and set the drop-down box to Enable, XAML files are automatically loaded inside Internet Explorer. The user cannot change this behavior. If you set the drop-down box to Prompt, the user is prompted for loading XAML files.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, XAML files are not loaded inside Internet Explorer. The user cannot change this behavior.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can decide whether to load XAML files inside Internet Explorer." gpmc_supported="At least Internet Explorer 7.0">Allow loading of XAML files</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>XAML Files</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow loading of XPS files" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage the loading of XPS files. These files contain a fixed-layout representation of paginated content and are portable across platforms, devices, and applications.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting and set the drop-down box to Enable, XPS files are automatically loaded inside Internet Explorer. The user cannot change this behavior. If you set the drop-down box to Prompt, the user is prompted for loading XPS files.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, XPS files are not loaded inside Internet Explorer. The user cannot change this behavior.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can decide whether to load XPS files inside Internet Explorer." gpmc_supported="At least Internet Explorer 7.0">Allow loading of XPS files</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>XPS documents</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow META REFRESH" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage whether a user&amp;#39;s browser can be redirected to another Web page if the author of the Web page uses the Meta Refresh setting (tag) to redirect browsers to another Web page.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, a user&amp;#39;s browser that loads a page containing an active Meta Refresh setting can be redirected to another Web page.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, a user&amp;#39;s browser that loads a page containing an active Meta Refresh setting cannot be redirected to another Web page.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, a user&amp;#39;s browser that loads a page containing an active Meta Refresh setting can be redirected to another Web page." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Allow META REFRESH</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Allow META REFRESH</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow only approved domains to use ActiveX controls without prompt" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting controls whether or not the user is prompted to allow ActiveX controls to run on websites other than the website that installed the ActiveX control.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user is prompted before ActiveX controls can run from websites in this zone. The user can choose to allow the control to run from the current site or from all sites.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the user does not see the per-site ActiveX prompt, and ActiveX controls can run from all sites in this zone." gpmc_supported="At least Internet Explorer 8.0">Allow only approved domains to use ActiveX controls without prompt</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Only allow approved domains to use ActiveX controls without prompt</td><td>Disable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow scripting of Internet Explorer WebBrowser controls" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting determines whether a page can control embedded WebBrowser controls via script.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, script access to the WebBrowser control is allowed.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, script access to the WebBrowser control is not allowed.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can enable or disable script access to the WebBrowser control. By default, script access to the WebBrowser control is allowed only in the Local Machine and Intranet zones." gpmc_supported="At least Internet Explorer 7.0">Allow scripting of Internet Explorer WebBrowser controls</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Internet Explorer web browser control</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow script-initiated windows without size or position constraints" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage restrictions on script-initiated pop-up windows and windows that include the title and status bars.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows Restrictions security will not apply in this zone. The security zone runs without the added layer of security provided by this feature.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the possible harmful actions contained in script-initiated pop-up windows and windows that include the title and status bars cannot be run. This Internet Explorer security feature will be on in this zone as dictated by the Scripted Windows Security Restrictions feature control setting for the process.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, Windows Restrictions security will not apply in this zone. The security zone runs without the added layer of security provided by this feature." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Allow script-initiated windows without size or position constraints</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Allow script-initiated windows without size or position constraints</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow scriptlets" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage whether the user can run scriptlets.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user can run scriptlets.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the user cannot run scriptlets.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can enable or disable scriptlets." gpmc_supported="At least Internet Explorer 7.0">Allow scriptlets</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Scriptlets</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow updates to status bar via script" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage whether script is allowed to update the status bar within the zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, script is allowed to update the status bar.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, script is allowed to update the status bar." gpmc_supported="At least Internet Explorer 7.0">Allow updates to status bar via script</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Status bar updates via script</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow video and animation on a webpage that uses an older media player" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows the playing of video and animation through older media players in specified zones. Video and animation playback through the object tag may still be allowed, because this involves external controls or media players.&lt;br/&gt;&lt;br/&gt;The dynsrc attribute on the img tag specifies an older media player. Also, as of Internet Explorer 8, this policy setting controls HTML+TIME media elements that refer to audio and video files.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, video and animation can be played through older media players in specified zones.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, video and animation cannot be played through older media players.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, video and animation can be played through older media players in specified zones." gpmc_supported="At least Internet Explorer 7.0">Allow video and animation on a webpage that uses an older media player</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Allow video and animation on a Web page that uses a legacy media player</td><td>Disable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow websites to open windows without status bar or Address bar" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting controls whether websites can open new Internet Explorer windows that have no status bar or Address bar.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, websites can open new Internet Explorer windows that have no status bar or Address bar.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, websites cannot open new Internet Explorer windows that have no status bar or Address bar.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can choose whether websites can open new Internet Explorer Windows that have no status bar or Address bar." gpmc_supported="At least Internet Explorer 7.0">Allow websites to open windows without status bar or Address bar</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Open windows without address or status bars</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow websites to prompt for information by using scripted windows" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting determines whether scripted windows are automatically displayed.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, scripted windows are displayed.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the user must choose to display any scripted windows by using the Notification bar.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can enable or disable the Notification bar behavior." gpmc_supported="At least Internet Explorer 7.0">Allow websites to prompt for information by using scripted windows</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Prompt for information using scripted windows</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Automatic prompting for ActiveX controls" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting manages whether users will be automatically prompted for ActiveX control installations.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, ActiveX control installations will be blocked using the Notification bar. Users can click on the Notification bar to allow the ActiveX control prompt.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users will receive a prompt when a site instantiates an ActiveX control they do not have installed." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Automatic prompting for ActiveX controls</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Automatic prompting for ActiveX controls</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Automatic prompting for file downloads" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users will receive file download dialogs for user-initiated downloads.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users will receive a file download dialog for automatic download attempts.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, users will receive a file download dialog for automatic download attempts." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Automatic prompting for file downloads</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Automatic prompting for file downloads</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Display mixed content" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage whether users can display nonsecure items and manage whether users receive a security information message to display pages containing both secure and nonsecure items.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, and the drop-down box is set to Enable, the user does not receive a security information message (This page contains both secure and nonsecure items. Do you want to display the nonsecure items?) and nonsecure content can be displayed.&lt;br/&gt;&lt;br/&gt;If the drop-down box is set to Prompt, the user will receive the security information message on the Web pages that contain both secure (https://) and nonsecure (http://) content.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, users cannot receive the security information message and nonsecure content cannot be displayed.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user will receive the security information message on the Web pages that contain both secure (https://) and nonsecure (http://) content." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Display mixed content</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Display mixed content</td><td>Prompt</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not prompt for client certificate selection when no certificates or only one certificate exists." gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage whether users are prompted to select a certificate when no certificate or only one certificate exists.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Internet Explorer does not prompt users with a &amp;quot;Client Authentication&amp;quot; message when they connect to a Web site that has no certificate or only one certificate.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Internet Explorer prompts users with a &amp;quot;Client Authentication&amp;quot; message when they connect to a Web site that has no certificate or only one certificate.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, Internet Explorer does not prompt users with a &amp;quot;Client Authentication&amp;quot; message when they connect to a Web site that has no certificate or only one certificate." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Do not prompt for client certificate selection when no certificates or only one certificate exists.</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Do not prompt for client certificate selection when no certificates or only one certificate exists.</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Download signed ActiveX controls" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage whether users may download signed ActiveX controls from a page in the zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users can download signed controls without user intervention. If you select Prompt in the drop-down box, users are queried whether to download controls signed by publishers who aren&amp;#39;t trusted. Code signed by trusted publishers is silently downloaded.&lt;br/&gt;&lt;br/&gt;If you disable the policy setting, signed controls cannot be downloaded.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users can download signed controls without user intervention." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Download signed ActiveX controls</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Download signed ActiveX controls</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Download unsigned ActiveX controls" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage whether users may download unsigned ActiveX controls from the zone. Such code is potentially harmful, especially when coming from an untrusted zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users can run unsigned controls without user intervention. If you select Prompt in the drop-down box, users are queried to choose whether to allow the unsigned control to run.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, users cannot run unsigned controls.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users are queried to choose whether to allow the unsigned control to run." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Download unsigned ActiveX controls</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Download unsigned ActiveX controls</td><td>Prompt</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable MIME Sniffing" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage MIME sniffing for file promotion from one type to another based on a MIME sniff. A MIME sniff is the recognition by Internet Explorer of the file type based on a bit signature.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the MIME Sniffing Safety Feature will not apply in this zone. The security zone will run without the added layer of security provided by this feature.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the actions that may be harmful cannot run; this Internet Explorer security feature will be turned on in this zone, as dictated by the feature control setting for the process.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the MIME Sniffing Safety Feature will not apply in this zone." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Enable MIME Sniffing</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Enable MIME Sniffing</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Include local path when user is uploading files to a server" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting controls whether or not local path information is sent when the user is uploading a file via an HTML form. If the local path information is sent, some information may be unintentionally revealed to the server. For instance, files sent from the user&amp;#39;s desktop may contain the user name as a part of the path.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, path information is sent when the user is uploading a file via an HTML form.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, path information is removed when the user is uploading a file via an HTML form.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can choose whether path information is sent when he or she is uploading a file via an HTML form. By default, path information is sent." gpmc_supported="At least Internet Explorer 7.0">Include local path when user is uploading files to a server</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Include local directory path when uploading files to a server</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Initialize and script ActiveX controls not marked as safe" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage ActiveX controls not marked as safe.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, ActiveX controls are run, loaded with parameters, and scripted without setting object safety for untrusted data or scripts. This setting is not recommended, except for secure and administered zones. This setting causes both unsafe and safe controls to be initialized and scripted, ignoring the Script ActiveX controls marked safe for scripting option.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting and select Prompt in the drop-down box, users are queried whether to allow the control to be loaded with parameters or scripted.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, ActiveX controls that cannot be made safe are not loaded with parameters or scripted.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users are queried whether to allow the control to be loaded with parameters or scripted." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Initialize and script ActiveX controls not marked as safe</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Initialize and script ActiveX controls not marked as safe</td><td>Prompt</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Java permissions" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage permissions for Java applets.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, you can choose options from the drop-down box. Custom, to control permissions settings individually.&lt;br/&gt;&lt;br/&gt;Low Safety enables applets to perform all operations.&lt;br/&gt;&lt;br/&gt;Medium Safety enables applets to run in their sandbox (an area in memory outside of which the program cannot make calls), plus capabilities like scratch space (a safe and secure storage area on the client computer) and user-controlled file I/O.&lt;br/&gt;&lt;br/&gt;High Safety enables applets to run in their sandbox. Disable Java to prevent any applets from running.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Java applets cannot run.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the permission is set to Low Safety." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Java permissions</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Java permissions</td><td>Low safety</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Launching applications and files in an IFRAME" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage whether applications may be run and files may be downloaded from an IFRAME reference in the HTML of the pages in this zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users can run applications and download files from IFRAMEs on the pages in this zone without user intervention. If you select Prompt in the drop-down box, users are queried to choose whether to run applications and download files from IFRAMEs on the pages in this zone.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, users are prevented from running applications and downloading files from IFRAMEs on the pages in this zone.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users can run applications and download files from IFRAMEs on the pages in this zone without user intervention." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Launching applications and files in an IFRAME</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Launching applications and files in an IFRAME</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Logon options" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage settings for logon options.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, you can choose from the following logon options.&lt;br/&gt;&lt;br/&gt;Anonymous logon to disable HTTP authentication and use the guest account only for the Common Internet File System (CIFS) protocol.&lt;br/&gt;&lt;br/&gt;Prompt for user name and password to query users for user IDs and passwords. After a user is queried, these values can be used silently for the remainder of the session.&lt;br/&gt;&lt;br/&gt;Automatic logon only in Intranet zone to query users for user IDs and passwords in other zones. After a user is queried, these values can be used silently for the remainder of the session.&lt;br/&gt;&lt;br/&gt;Automatic logon with current user name and password to attempt logon using Windows NT Challenge Response (also known as NTLM authentication). If Windows NT Challenge Response is supported by the server, the logon uses the user&amp;#39;s network user name and password for logon. If Windows NT Challenge Response is not supported by the server, the user is queried to provide the user name and password.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, logon is set to Automatic logon only in Intranet zone.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, logon is set to Automatic logon with current username and password." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Logon options</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Logon options</td><td>Automatic logon with current username and password</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Navigate windows and frames across different domains" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage the opening of windows and frames and access of applications across different domains.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users can open windows and frames from othe domains and access applications from other domains. If you select Prompt in the drop-down box, users are queried whether to allow windows and frames to access applications from other domains.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, users cannot open windows and frames to access applications from different domains.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users can open windows and frames from othe domains and access applications from other domains." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Navigate windows and frames across different domains</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Navigate windows and frames across different domains</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Run .NET Framework-reliant components not signed with Authenticode" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Internet Explorer will execute unsigned managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute unsigned managed components.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Internet Explorer will not execute unsigned managed components.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, Internet Explorer will execute unsigned managed components." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Run .NET Framework-reliant components not signed with Authenticode</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Run .NET Framework-reliant components not signed with Authenticode</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Run .NET Framework-reliant components signed with Authenticode" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage whether .NET Framework components that are signed with Authenticode can be executed from Internet Explorer. These components include managed controls referenced from an object tag and managed executables referenced from a link.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Internet Explorer will execute signed managed components. If you select Prompt in the drop-down box, Internet Explorer will prompt the user to determine whether to execute signed managed components.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Internet Explorer will not execute signed managed components.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, Internet Explorer will execute signed managed components." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Run .NET Framework-reliant components signed with Authenticode</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Run .NET Framework-reliant components signed with Authenticode</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Run ActiveX controls and plugins" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage whether ActiveX controls and plug-ins can be run on pages from the specified zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, controls and plug-ins can run without user intervention.&lt;br/&gt;&lt;br/&gt;If you selected Prompt in the drop-down box, users are asked to choose whether to allow the controls or plug-in to run.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, controls and plug-ins are prevented from running.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, controls and plug-ins can run without user intervention." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Run ActiveX controls and plugins</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Run ActiveX controls and plugins</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Script ActiveX controls marked safe for scripting" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage whether an ActiveX control marked safe for scripting can interact with a script.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, script interaction can occur automatically without user intervention.&lt;br/&gt;&lt;br/&gt;If you select Prompt in the drop-down box, users are queried to choose whether to allow script interaction.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, script interaction is prevented from occurring.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, script interaction can occur automatically without user intervention." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Script ActiveX controls marked safe for scripting</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Script ActiveX controls marked safe for scripting</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Scripting of Java applets" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage whether applets are exposed to scripts within the zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, scripts can access applets automatically without user intervention.&lt;br/&gt;&lt;br/&gt;If you select Prompt in the drop-down box, users are queried to choose whether to allow scripts to access applets.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, scripts are prevented from accessing applets.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, scripts can access applets automatically without user intervention." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Scripting of Java applets</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Scripting of Java applets</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Software channel permissions" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage software channel permissions.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, you can choose the following options from the drop-down box.&lt;br/&gt;&lt;br/&gt;Low safety to allow users to be notified of software updates by e-mail, software packages to be automatically downloaded to users&amp;#39; computers, and software packages to be automatically installed on users&amp;#39; computers.&lt;br/&gt;&lt;br/&gt;Medium safety to allow users to be notified of software updates by e-mail and software packages to be automatically downloaded to (but not installed on) users&amp;#39; computers.&lt;br/&gt;&lt;br/&gt;High safety to prevent users from being notified of software updates by e-mail, software packages from being automatically downloaded to users&amp;#39; computers, and software packages from being automatically installed on users&amp;#39; computers.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, permissions are set to high safety.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, permissions are set to Low safety." gpmc_supported="Only Internet Explorer 6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1 through IE7 inclusive">Software channel permissions</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Software channel permissions</td><td>Low safety</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Submit non-encrypted form data" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage whether data on HTML forms on pages in the zone may be submitted. Forms sent with SSL (Secure Sockets Layer) encryption are always allowed; this setting only affects non-SSL form data submission.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, information using HTML forms on pages in this zone can be submitted automatically. If you select Prompt in the drop-down box, users are queried to choose whether to allow information using HTML forms on pages in this zone to be submitted.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, information using HTML forms on pages in this zone is prevented from being submitted.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, information using HTML forms on pages in this zone can be submitted automatically." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Submit non-encrypted form data</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Submit non-encrypted form data</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off .NET Framework Setup" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting prevents the user&amp;#39;s computer from starting Microsoft .NET Framework Setup when the user is browsing to .NET Framework content in Internet Explorer. The .NET Framework is the next-generation platform for Windows. It uses the common language runtime and incorporates support from multiple developer tools. It includes the new managed code APIs for Windows.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, .NET Framework Setup is turned off. The user cannot change this behavior.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, .NET Framework Setup is turned on. The user cannot change this behavior.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, .NET Framework Setup is turned on by default. The user can change this behavior." gpmc_supported="At least Internet Explorer 7.0">Turn off .NET Framework Setup</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>.NET Framework Setup</td><td>Disable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off first-run prompt" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting controls the first-run response that the user sees on a zone-by-zone basis. When the user encounters a new control that has not previously run in Internet Explorer, he or she may be prompted to approve the control. This policy setting determines whether the user is prompted.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the first-run prompt is turned off in the corresponding zone.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the first-run prompt is turned on in the corresponding zone.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the first-run prompt is turned on by default." gpmc_supported="At least Internet Explorer 7.0">Turn off first-run prompt</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>First-Run Opt-In</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn on Cross-Site Scripting Filter" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy controls whether or not the Cross-Site Scripting (XSS) Filter will detect and prevent cross-site script injections into websites in this zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the XSS Filter is turned on for sites in this zone, and the XSS Filter attempts to block cross-site script injections.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the XSS Filter is turned off for sites in this zone, and Internet Explorer permits cross-site script injections." gpmc_supported="At least Internet Explorer 8.0">Turn on Cross-Site Scripting Filter</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Turn on Cross-Site Scripting (XSS) Filter</td><td>Disable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn on Protected Mode" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to turn on Protected Mode. Protected Mode helps protect Internet Explorer from exploited vulnerabilities by reducing the locations that Internet Explorer can write to in the registry and the file system.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Protected Mode is turned on. The user cannot turn off Protected Mode.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Protected Mode is turned off. The user cannot turn on Protected Mode.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can turn on or turn off Protected Mode." gpmc_supported="At least Internet Explorer 7.0 in Windows Vista">Turn on Protected Mode</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn on SmartScreen Filter scan" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, SmartScreen Filter scans pages in this zone for malicious content.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, SmartScreen Filter does not scan pages in this zone for malicious content.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can choose whether SmartScreen Filter scans pages in this zone for malicious content.&lt;br/&gt;&lt;br/&gt;Note: In Internet Explorer 7, this policy setting controls whether Phishing Filter scans pages in this zone for malicious content." gpmc_supported="At least Internet Explorer 7.0">Turn on SmartScreen Filter scan</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Use SmartScreen Filter</td><td>Disable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Use Pop-up Blocker" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage whether unwanted pop-up windows appear. Pop-up windows that are opened when the end user clicks a link are not blocked.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, most unwanted pop-up windows are prevented from appearing.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, pop-up windows are not prevented from appearing.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, pop-up windows are not prevented from appearing." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Use Pop-up Blocker</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Use Pop-up Blocker</td><td>Disable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Userdata persistence" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage the preservation of information in the browser&amp;#39;s history, in favorites, in an XML store, or directly within a Web page saved to disk. When a user returns to a persisted page, the state of the page can be restored if this policy setting is appropriately configured.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users can preserve information in the browser&amp;#39;s history, in favorites, in an XML store, or directly within a Web page saved to disk.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, users cannot preserve information in the browser&amp;#39;s history, in favorites, in an XML store, or directly within a Web page saved to disk.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users can preserve information in the browser&amp;#39;s history, in favorites, in an XML store, or directly within a Web page saved to disk." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Userdata persistence</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Userdata persistence</td><td>Enable</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Web sites in less privileged Web content zones can navigate into this zone" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/Security Page/Trusted Sites Zone" gpmc_settingDescription="This policy setting allows you to manage whether Web sites from less privileged zones, such as Restricted Sites, can navigate into this zone.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Web sites from less privileged zones can open new windows in, or navigate into, this zone.  The security zone will run without the added layer of security that is provided by the Protection from Zone Elevation security feature. If you select Prompt in the drop-down box, a warning is issued to the user that potentially risky navigation is about to occur.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the possibly harmful navigations are prevented. The Internet Explorer security feature will be on in this zone as set by Protection from Zone Elevation feature control.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, a warning is issued to the user that potentially risky navigation is about to occur." gpmc_supported="At least Internet Explorer 6.0 in Windows XP with Service Pack 2 or Windows Server 2003 with Service Pack 1">Web sites in less privileged Web content zones can navigate into this zone</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Web sites in less privileged Web content zones can navigate into this zone</td><td>Prompt</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Microsoft Defender Antivirus</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Microsoft Defender Antivirus" gpmc_settingPath="Computer Configuration/Administrative Templates/Windows Components/Microsoft Defender Antivirus" gpmc_settingDescription="This policy setting turns off Microsoft Defender Antivirus.&lt;br/&gt;    &lt;br/&gt;    If you enable this policy setting, Microsoft Defender Antivirus does not run, and will not scan computers for malware or other potentially unwanted software.&lt;br/&gt;&lt;br/&gt;    If you disable this policy setting, Microsoft Defender Antivirus will run regardless of any other installed antivirus product.&lt;br/&gt;&lt;br/&gt;    If you do not configure this policy setting, Windows will internally manage Microsoft Defender Antivirus. If you install another antivirus program, Windows automatically disables Microsoft Defender Antivirus. Otherwise, Microsoft Defender Antivirus will scan your computers for malware and other potentially unwanted software.&lt;br/&gt;&lt;br/&gt;    Enabling or disabling this policy may lead to unexpected or unsupported behavior. It is recommended that you leave this policy setting unconfigured." gpmc_supported="At least Windows Vista">Turn off Microsoft Defender Antivirus</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div></div></div><div class="filler"></div>
<div class="he1h_expanded"><span class="sectionTitle" tabindex="0">Preferences</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1_expanded"><span class="sectionTitle" tabindex="0">Windows Settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he2"><span class="sectionTitle" tabindex="0">Files</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">File (Target Path: %SystemRoot%\System32\drivers\etc\hosts)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">hosts file (Order: 1)</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Replace</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Source file(s)</td><td>\\emea.tpg.ads\SYSVOL\emea.tpg.ads\Policies\{6636B63D-CA63-4F64-A003-265E12086E82}\Machine\files\hosts</td></tr>
<tr><td>Destination file</td><td>%SystemRoot%\System32\drivers\etc\hosts</td></tr>
<tr><td>Suppress errors on individual file actions</td><td>Enabled</td></tr>
</table><b>Attributes</b><table class="subtable" ><tr><td>Read-only</td><td>Disabled</td></tr>
<tr><td>Hidden</td><td>Disabled</td></tr>
<tr><td>Archive</td><td>Enabled</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div></div></div><div class="he2"><span class="sectionTitle" tabindex="0">Registry</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">Shell (Order: 1)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon</td></tr>
<tr><td>Value name</td><td>Shell</td></tr>
<tr><td>Value type</td><td>REG_SZ</td></tr>
<tr><td>Value data</td><td>explorer.exe</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">AllowElevatedTrustAppsInBrowser (Order: 2)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Create</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SOFTWARE\Wow6432Node\Microsoft\Silverlight</td></tr>
<tr><td>Value name</td><td>AllowElevatedTrustAppsInBrowser</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x1 (1)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">AllowLaunchOfElevatedTrustApps (Order: 3)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Create</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SOFTWARE\Wow6432Node\Microsoft\Silverlight</td></tr>
<tr><td>Value name</td><td>AllowLaunchOfElevatedTrustApps</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x1 (1)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">AllowElevatedTrustAppsInBrowser (Order: 4)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Create</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SOFTWARE\Microsoft\Silverlight</td></tr>
<tr><td>Value name</td><td>AllowElevatedTrustAppsInBrowser</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x1 (1)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">AllowLaunchOfElevatedTrustApps (Order: 5)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Create</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SOFTWARE\Microsoft\Silverlight</td></tr>
<tr><td>Value name</td><td>AllowLaunchOfElevatedTrustApps</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x1 (1)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">TurnOffSidebar (Order: 6)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar</td></tr>
<tr><td>Value name</td><td>TurnOffSidebar</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x1 (1)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">System.IsPinnedToNameSpaceTree (Order: 7)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_CLASSES_ROOT</td></tr>
<tr><td>Key path</td><td>CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}</td></tr>
<tr><td>Value name</td><td>System.IsPinnedToNameSpaceTree</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x0 (0)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">System.IsPinnedToNameSpaceTree (Order: 8)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_CLASSES_ROOT</td></tr>
<tr><td>Key path</td><td>Wow6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}</td></tr>
<tr><td>Value name</td><td>System.IsPinnedToNameSpaceTree</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x0 (0)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Attributes (Order: 9)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_CLASSES_ROOT</td></tr>
<tr><td>Key path</td><td>CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\ShellFolder</td></tr>
<tr><td>Value name</td><td>Attributes</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0xB0940064 (2962489444)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div></div></div><div class="filler"></div>
<div class="he1_expanded"><span class="sectionTitle" tabindex="0">Control Panel Settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he2"><span class="sectionTitle" tabindex="0">Services</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">Service (Name: W32Time)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">W32Time (Order: 1)</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Service name</td><td>W32Time</td></tr>
<tr><td>Action</td><td>Start service</td></tr>
<tr><td>Startup type:</td><td>Automatic</td></tr>
<tr><td>Wait timeout if service is locked:</td><td>30 seconds</td></tr>
</table>
<b>Service Account</b><table class="subtable" ><tr><td>Log on service as:</td><td><i>No change</i></td></tr>
</table><b>Recovery</b><table class="subtable" ><tr><td>First failure:</td><td><i>No change</i></td></tr>
<tr><td>Second failure:</td><td><i>No change</i></td></tr>
<tr><td>Subsequent failures:</td><td><i>No change</i></td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div></div></div></div></div></div>
<div class="filler"></div>
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">User Configuration (Disabled)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">No settings defined.</div></div>
</body></html>