<html dir="ltr" xmlns:svg="http://www.w3.org/2000/svg" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape" gpmc_reportInitialized="false">
<head>
<meta http-equiv="X-UA-Compatible" content="IE=edge" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-16" />
<title>MKSKP-PO-WIN-U-PCI_GECSP_Restrictions</title>
<!-- Styles -->
<style type="text/css">
                body    { background-color:#FFFFFF; border:1px solid #666666; color:#000000; font-size:68%; font-family:MS Shell Dlg; margin:0,0,10px,0; word-break:normal; word-wrap:break-word; }

                table   { font-size:100%; table-layout:fixed; width:100%; }

                td,th   { overflow:visible; text-align:left; vertical-align:top; white-space:normal; }

                .title  { background:#FFFFFF; border:none; color:#333333; display:inline-table; height:24px; margin:0px,0px,0px,0px; padding-top:0px; position:relative; table-layout:fixed; z-index:5; }

                .he0_expanded    { background-color:#FEF7D6; border:1px solid #BBBBBB; color:#3333CC; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:0px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; }

                .he1_expanded    { background-color:#A0BACB; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:20px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; }

                .he0h_expanded   { background-color: #FEF0D0; border: 1px solid #BBBBBB; color: #000000; cursor: hand; display: block; font-family: MS Shell Dlg; font-size: 100%; font-weight: bold; height: 2.25em; margin-bottom: -1px; margin-left: 5px; margin-right: 0px; padding-left: 8px; padding-right: 5em; padding-top: 4px; position: relative;  }
                .he1h_expanded   { background-color: #7197B3; border: 1px solid #BBBBBB; color: #000000; cursor: hand; display: block; font-family: MS Shell Dlg; font-size: 100%; font-weight: bold; height: 2.25em; margin-bottom: -1px; margin-left: 10px; margin-right: 0px; padding-left: 8px; padding-right: 5em; padding-top: 4px; position: relative; }

                .he1    { background-color:#A0BACB; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:20px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; }

                .he2    { background-color:#C0D2DE; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:30px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; }

                .he3    { background-color:#D9E3EA; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:40px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; }

                .he4    { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:50px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; }

                .he4h   { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:55px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; }

                .he4i   { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:55px; margin-right:0px; padding-bottom:5px; padding-left:21px; padding-top:4px; position:relative; }

                .he2i   { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:35px; margin-right:0px; padding-bottom:5px; padding-left:21px; padding-top:4px; position:relative;}
                .he5    { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:60px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; }

                .he5h   { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; padding-right:5em; padding-top:4px; margin-bottom:-1px; margin-left:65px; margin-right:0px; position:relative; }

                .he5i   { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:65px; margin-right:0px; padding-left:21px; padding-bottom:5px; padding-top: 4px; position:relative; }

                div .expando { color:#000000; text-decoration:none; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:normal; position:absolute; right:10px; text-decoration:underline; z-index: 0; }

                .he0 .expando { font-size:100%; }

                .info, .info3, .info4, .disalign  { line-height:1.6em; padding:0px,0px,0px,0px; margin:0px,0px,0px,0px; }

                .disalign TD                      { padding-bottom:5px; padding-right:10px; }

                .info TD                          { padding-right:10px; width:50%; }

                .info3 TD                         { padding-right:10px; width:33%; }

                .info4 TD, .info4 TH              { padding-right:10px; width:25%; }

                .info TH, .info3 TH, .info4 TH, .disalign TH { border-bottom:1px solid #CCCCCC; padding-right:10px; }

                .subtable, .subtable3             { border:1px solid #CCCCCC; margin-left:0px; background:#FFFFFF; margin-bottom:10px; }

                .subtable TD, .subtable3 TD       { padding-left:10px; padding-right:5px; padding-top:3px; padding-bottom:3px; line-height:1.1em; }

                .subtable TH, .subtable3 TH       { border-bottom:1px solid #CCCCCC; font-weight:normal; padding-left:10px; line-height:1.6em;  }

                .subtable .footnote               { border-top:1px solid #CCCCCC; }

                .subtable3 .footnote, .subtable .footnote { border-top:1px solid #CCCCCC; }

                .subtable_frame     { background:#D9E3EA; border:1px solid #CCCCCC; margin-bottom:10px; margin-left:15px; }

                .subtable_frame TD  { line-height:1.1em; padding-bottom:3px; padding-left:10px; padding-right:15px; padding-top:3px; }

                .subtable_frame TH  { border-bottom:1px solid #CCCCCC; font-weight:normal; padding-left:10px; line-height:1.6em; }

                .subtableInnerHead { border-bottom:1px solid #CCCCCC; border-top:1px solid #CCCCCC; }

                .explainlink            { color:#0000FF; text-decoration:none; cursor:hand; }

                .explainlink:hover      { color:#0000FF; text-decoration:underline; }

                .spacer { background:transparent; border:1px solid #BBBBBB; color:#FFFFFF; display:block; font-family:MS Shell Dlg; font-size:100%; height:10px; margin-bottom:-1px; margin-left:43px; margin-right:0px; padding-top: 4px; position:relative; }

                .filler { background:transparent; border:none; color:#FFFFFF; display:block; font:100% MS Shell Dlg; line-height:8px; margin-bottom:-1px; margin-left:53px; margin-right:0px; padding-top:4px; position:relative; }

                .container { display:block; position:relative; }

                .rsopheader { background-color:#A0BACB; border-bottom:1px solid black; color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-bottom:5px; text-align:center; }

                .rsopname { color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-left:11px; }

                .gponame{ color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-left:11px; }

                .gpotype{ color:#333333; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; padding-left:11px; }

                #uri    { color:#333333; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; }

                #dtstamp{ color:#333333; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; text-align:left; width:30%; }

                #objshowhide { color:#000000; cursor:hand; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; margin-right:0px; padding-right:10px; text-align:right; text-decoration:underline; z-index:2; word-wrap:normal; }

                #gposummary { display:block; }

                #gpoinformation { display:block; }

                @media print {

                    #objshowhide{ display:none; }

                    body    { color:#000000; border:1px solid #000000; }

                    .title  { color:#000000; border:1px solid #000000; }

                    .he0_expanded    { color:#000000; border:1px solid #000000; }

                    .he1h_expanded   { color:#000000; border:1px solid #000000; }

                    .he1_expanded    { color:#000000; border:1px solid #000000; }

                    .he1    { color:#000000; border:1px solid #000000; }

                    .he2    { color:#000000; background:#EEEEEE; border:1px solid #000000; }

                    .he3    { color:#000000; border:1px solid #000000; }

                    .he4    { color:#000000; border:1px solid #000000; }

                    .he4h   { color:#000000; border:1px solid #000000; }

                    .he4i   { color:#000000; border:1px solid #000000; }

                    .he5    { color:#000000; border:1px solid #000000; }

                    .he5h   { color:#000000; border:1px solid #000000; }

                    .he5i   { color:#000000; border:1px solid #000000; }

                    }

</style>
<!-- Scripts -->
<script type="text/javascript" language="javascript">
/*
String "strShowHide(0/1)"
0 = Hide all mode.
1 = Show all mode.
*/

var windowsArray = new Array();
var strShowHide = 1;

//Localized strings

var strShow = "show";
var strHide = "hide";
var strShowAll = "show all";
var strHideAll = "hide all";
var strShown = "shown";
var strHidden = "hidden";
var strExpandoNumPixelsFromEdge = "10px";


function IsSectionHeader(obj) {
    return (obj.className === "he0_expanded") || (obj.className === "he0h_expanded") || (obj.className === "he1h_expanded") || (obj.className === "he1_expanded") || (obj.className === "he1") || (obj.className === "he2") || (obj.className === "he3") || (obj.className === "he4") || (obj.className === "he4h") || (obj.className === "he5") || (obj.className === "he5h");
}

function IsSectionExpandedByDefault(objHeader) {
    if (objHeader === null) {
        return false;
    } else {
        return (objHeader.className.slice(objHeader.className.lastIndexOf("_")) === "_expanded");
    }
}

function SetSectionState(objHeader, strState) {
    var i = 0;
    var j;
    var all = objHeader.parentElement.ownerDocument.all;

    if (all === null) {
        return;
    }

    for (j = 0; j < all.length; j++) {
        if (all[j] === objHeader) {
            break;
        }
        i = i + 1;
    }

    for (j = i; j < all.length; j++) {
        if (all[i].className === "container") {
            break;
        }
        i = i + 1;
    }

    var objContainer = all[i];

    if (strState === "toggle") {
        if (objContainer.style.display === "none") {
            SetSectionState(objHeader, "show");
        }
        else {
            SetSectionState(objHeader, "hide");
        }
    }
    else {
        var objExpando = objHeader.children[1];

        if (strState === "show") {
            objContainer.style.display = "block";
            objExpando.innerText = strHide;
        }
        else if (strState === "hide") {
            objContainer.style.display = "none";
            objExpando.innerText = strShow;
        }
    }
}

function ShowSection(objHeader) {
    SetSectionState(objHeader, "show");
}

function HideSection(objHeader) {
    SetSectionState(objHeader, "hide");
}

function ToggleSection(objHeader) {
    SetSectionState(objHeader, "toggle");
}

/*================================================================================
' link at the top of the page to collapse/expand all collapsable elements
'================================================================================
*/
function objshowhide_onClick() {
    var obji;
    var objBody = document.body.getElementsByTagName("*");

    if (objBody === null) {
        return;
    }
    
    switch (strShowHide) {
        case 0:
            strShowHide = 1;
            window.objshowhide.innerText = strShowAll;
            for (obji = 0; obji < objBody.length; obji++) {
                if (objBody[obji].className !== 'undefined' && IsSectionHeader(objBody[obji])) {
                    HideSection(objBody[obji]);
                }
            }
            break;
        case 1:
            strShowHide = 0;
            window.objshowhide.innerText = strHideAll;
            for (obji = 0; obji < objBody.length; obji++) {
                if (objBody[obji].className !== 'undefined' && IsSectionHeader(objBody[obji])) {
                    ShowSection(objBody[obji]);
                }
            }
            break;
    }
}

/*================================================================================
' onload collapse all except the first two levels of headers (he0, he1)
'================================================================================*/
function window_onload() {
    // Only initialize once.  The UI may reinsert a report into the webbrowser control,
    // firing onLoad multiple times.
    if (document.documentElement.getAttribute("gpmc_reportInitialized").toUpperCase() !== "TRUE") {
        // Set text direction
        fDetDir(document.dir.toUpperCase());

        // Initialize sections to default expanded/collapsed state.
        var objBody = document.body.getElementsByTagName("*");

        if (objBody === null) {
            return;
        }

        for (var obji = 0; obji < objBody.length; obji++) {
            if (IsSectionHeader(objBody[obji])) {
                if (IsSectionExpandedByDefault(objBody[obji])) {
                    ShowSection(objBody[obji]);
                }
                else {
                    HideSection(objBody[obji]);
                }
            }
        }

        objshowhide.innerText = strShowAll;

        document.documentElement.setAttribute("gpmc_reportInitialized", "true");
    }
}

/*'================================================================================
' When direction (LTR/RTL) changes, change adjust for readability
'================================================================================
*/
function document_onPropertyChange() {
    if (window.event.propertyName === "dir") {
        fDetDir(document.dir.toUpperCase());
    }
}

function fDetDir(strDir) {
    var colRules;
    var nug;
    var i;
    var strClass;

    switch (strDir.toUpperCase()) {
        case "LTR":
            colRules = document.styleSheets[0].cssRules;
            if (colRules !== null && colRules !== undefined ) {            
                for (i = 0; i < colRules.length - 1; i++) {
                    nug = colRules[i];
                    strClass = nug.selectorText;
                    if (nug.style.textAlign === "right") {
                        nug.style.textAlign = "left";
                    }
                    switch (strClass) {
                        case "div .expando":
                            nug.style.Left = "";
                            nug.style.Right = strExpandoNumPixelsFromEdge;
                            break;
                        case "#objshowhide":
                            nug.style.textAlign = "right";
                            break;
                    }
                }
            }
            break;
        case "RTL":
            colRules = document.styleSheets[0].cssRules;
            if (colRules !== null && colRules !== undefined ) {            
                for (i = 0; i < colRules.length - 1; i++) {
                    nug = colRules[i];
                    strClass = nug.selectorText;
                    if (nug.style.textAlign === "left") {
                        nug.style.textAlign = "right";
                    }
                    switch (strClass) {
                        case "div .expando":
                            nug.style.Left = strExpandoNumPixelsFromEdge;
                            nug.style.Right = "";
                            break;
                        case "#objshowhide":
                            nug.style.textAlign = "left";
                            break;
                    }
                }
            }
            break;
    }
}

/*'================================================================================
'When printing reports, if a given section is expanded, let's says "shown" (instead of "hide" in the UI).
'================================================================================
*/
function window_onbeforeprint() {
    var obji;
    for (obji in document.all) {
        if (document.all.hasOwnProperty(obji)) {
            if (obji.className === "expando") {
                if (obji.innerText === strHide) {
                    obji.innerText = strShown;
                }
                if (obji.innerText === strShow) {
                    obji.innerText = strHidden;
                }
            }
        }
    }
}

/*================================================================================
'If a section is collapsed, change to "hidden" in the printout (instead of "show").
'================================================================================
*/
function window_onafterprint() {
    var obji;
    for (obji in document.all) {
        if (document.all.hasOwnProperty(obji)) {
            if (obji.className === "expando") {
                if (obji.innerText === strShown) {
                    obji.innerText = strHide;
                }
                if (obji.innerText === strHidden) {
                    obji.innerText = strShow;
                }
            }
        }
    }
}

/*================================================================================
' Adding keypress support for accessibility
'================================================================================
*/
function document_onkeypress(event) {
    var chCode = ('charCode' in event) ? event.charCode : event.keyCode;

    //space bar (32) or carriage return (13) or line feed (10)
    if (chCode == "32" || chCode == "13" || chCode == "10") {
        if (event.srcElement.className === "expando") {
            document_onclick();
            event.returnValue = false;
        }
        if (event.srcElement.className === "sectionTitle") {
            document_onclick();
            event.returnValue = false;
        }
        if (event.srcElement.id === "objshowhide") {
            objshowhide_onClick();
            event.returnValue = false;
        }
    }
}

/*================================================================================
' When user clicks anywhere in the document body, determine if user is clicking
' on a header element.
'================================================================================
*/
function document_onclick() {
    var strsrc = window.event.srcElement;

    while (strsrc.className === "sectionTitle" || strsrc.className === "expando") {
        strsrc = strsrc.parentElement;
    }

    // Only handle clicks on headers.
    if (!IsSectionHeader(strsrc)) {
        return;
    }

    ToggleSection(strsrc);

    window.event.returnValue = false;
}

function ToggleState(e) {
    var objParentDisplayItem;
    var objDisplayItem;
    var i;

    if (e.innerText === strShow) {
        e.innerText = strHide;
        objParentDisplayItem = e.parentNode;
        objDisplayItem = objParentDisplayItem.childNodes;
        for (i = 0; i < objDisplayItem.length; i++) {
            if (objDisplayItem[i].id === "showItem") {
                objDisplayItem[i].style.display = "Block";
            }
        }
    }
    else {
        e.innerText = strShow;
        objParentDisplayItem = e.parentNode;
        objDisplayItem = objParentDisplayItem.childNodes;
        for (i = 0; i < objDisplayItem.length; i++) {
            if (objDisplayItem[i].id === "showItem") {
                objDisplayItem[i].style.display = "None";
            }
        }
    }
}

function traverseToURL(url) {
    if (url != null) {
        var urlInitialSubstr = url.substring(0, 4).toLowerCase();
        if (urlInitialSubstr === "http") {
            window.open(url, "_blank");
        }
    }
}

function getExplainWindowTitle() {
    return document.getElementById("explainText_windowTitle").innerHTML;
}

function getExplainWindowStyles() {
    return document.getElementById("explainText_windowStyles").innerHTML;
}

function getExplainWindowSettingPathLabel() {
    return document.getElementById("explainText_settingPathLabel").innerHTML;
}

function getExplainWindowExplainTextLabel() {
    return document.getElementById("explainText_explainTextLabel").innerHTML;
}

function getExplainWindowPrintButton() {
    return document.getElementById("explainText_printButton").innerHTML;
}

function getExplainWindowCloseButton() {
    return document.getElementById("explainText_closeButton").innerHTML;
}

function getNoExplainTextAvailable() {
    return document.getElementById("explainText_noExplainTextAvailable").innerHTML;
}

function getExplainWindowSupportedLabel() {
    return document.getElementById("explainText_supportedLabel").innerHTML;
}

function getNoSupportedTextAvailable() {
    return document.getElementById("explainText_noSupportedTextAvailable").innerHTML;
}

function showExplainText(srcElement)
{
    var strDiagArgs;

    var strSettingName = srcElement.getAttribute("gpmc_settingName");
    var strSettingPath = srcElement.getAttribute("gpmc_settingPath");
    var strSettingDescription = srcElement.getAttribute("gpmc_settingDescription");

    if (strSettingDescription === "")
    {
        strSettingDescription = getNoExplainTextAvailable();
    }

    var strSupported = srcElement.getAttribute("gpmc_supported");

    if (strSupported === "")
    {
        strSupported = getNoSupportedTextAvailable();
    }

    var strHtml = "<html dir=" + document.dir +  ">\n";
    strHtml += "<head>\n";
    strHtml += "<title>" + getExplainWindowTitle() + "</title>\n";
    strHtml += "<style type='text/css'>\n" + getExplainWindowStyles() + "</style>\n";
    strHtml += "</head>\n";
    strHtml += "<body>\n";
    strHtml += "<div class='head'>" + strSettingName +"</div>\n";
    strHtml += "<div class='path'><b>" + getExplainWindowSettingPathLabel() + "</b><br/>" + strSettingPath +"</div>\n";
    strHtml += "<div class='path'><b>" + getExplainWindowSupportedLabel() + "</b><br/>" + strSupported +"</div>\n";
    strHtml += "<div class='info'>\n";
    strHtml += "<div class='hdr'>" + getExplainWindowExplainTextLabel() + "</div>\n";
    strHtml += "<div class='bdy'>" + strSettingDescription + "</div>\n";
    strHtml += "<div class='btn'>";
    strHtml += getExplainWindowPrintButton();
    strHtml += getExplainWindowCloseButton();
    strHtml += "</div></body></html>";

    // IE specific method for showing the popup.
    if(navigator.userAgent.indexOf("MSIE") > 0 && window.location.toString().indexOf("file:") === -1)
    {
        strDiagArgs = "dialogHeight=360px;dialogWidth=630px;status=no;scroll=yes;resizable=yes;minimize=yes;maximize=yes;";

        var vModeless = window.showModelessDialog("about:blank", window, strDiagArgs);
        vModeless.document.write(strHtml);
        vModeless.document.close();
        vModeless.location.reload(false);
                        
        window.event.returnValue = false;
    }
    else
    {
        strDiagArgs = "height=360px, width=630px, status=no, toolbar=no, scrollbars=yes, resizable=yes ";
        
        var expWin = window.open("", "expWin", strDiagArgs);
        expWin.document.write("");
        expWin.document.close();
        expWin.document.write(strHtml);
        expWin.document.close();
        expWin.focus();
    }
    
    return false;
}

function showEvents(srcElement,bVerbose,bInformational,bWarning,bError)
{
    var strWindowId = "EventDetails_" + srcElement.getAttribute("eventLogActivityId");
    if((windowsArray[strWindowId]) && (windowsArray[strWindowId].closed === false)) {
        windowsArray[strWindowId].focus();
    } else {
        var eventIdLabelNode, eventTimeLabelNode, eventDescriptionLabelNode, eventDetailsLabelNode, eventXmlLabelNode, gpEventsTitleNode;
        var eventIdLabelNodeText, eventTimeLabelNodeText, eventDescriptionLabelNodeText, eventXmlLabelNodeText, gpEventsTitleNodeText, eventDetailsLabelNodeText;
        var singlePassEventsDetailsNode, eventRecordArray;
        var dataNotFoundWarningLabelNode, dataNotFoundWarningLabelNodeText;
        var mainSection;
        var attributeValue;
        var singlePassEventsDetails;
        var singlePassEventsDetailsChildren;
        var node;
        var children;
        var xmlDocumentRoot;
        var xmlDocument;
        var serializer;
        var itemSub;
        var doc;

        if (window.XMLSerializer) 
        {
           serializer = new XMLSerializer();
        }

        if (window.DOMParser) 
        {
           // This browser appears to support DOMParser
           parser = new DOMParser();

           doc = document.getElementById("data-island").textContent;
           xmlDocumentRoot = parser.parseFromString(doc, "application/xml");
           xmlDocument = xmlDocumentRoot.documentElement;
           itemSub = 1;
        } 
        else 
        { 
           // Internet Explorer, create a new XML document using ActiveX 
           // and use loadXML as a DOM parser. 
           try 
           {
              doc = document.getElementById("data-island");

              xmlDocumentRoot = new ActiveXObject("Msxml2.DOMDocument.6.0"); 
              xmlDocumentRoot.async = false; 
              xmlDocumentRoot.loadXML(doc.innerHTML);
              xmlDocument = xmlDocumentRoot.documentElement;
              itemSub = 0;
           } 
           catch(e) 
           {
              // Not supported.
           }
        }

        if (xmlDocument != null) {
            mainSection = xmlDocument.getElementsByTagName("MainSection")[0].childNodes;

            if (mainSection != null) {
                for (children = 0; children < mainSection.length; children++) {
                    node = mainSection[children];
                    if (node.nodeType === 1 && node.nodeName === 'Label') {
                        attributeValue = node.getAttribute("Name");
                        if (attributeValue != null) {
                            if (attributeValue === 'ComponentStatus_EventId') {
                                eventIdLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_EventTime') {
                                eventTimeLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_EventDescription') {
                                eventDescriptionLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_EventXml') {
                                eventXmlLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_EventDetails') {
                                eventDetailsLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_GPEvents') {
                                gpEventsTitleNode = node.childNodes[1];
                            }
                            if (attributeValue === 'Warning_DataNotFound') {
                                dataNotFoundWarningLabelNode = node.childNodes[1];
                            }
                        }
                    }
                }
            }

            singlePassEventsDetails = xmlDocument.getElementsByTagName("SinglePassEventsDetails");
            if (singlePassEventsDetails != null) {
                for (singlePassEventsDetailsChildren = 0; singlePassEventsDetailsChildren < singlePassEventsDetails.length; singlePassEventsDetailsChildren++) {
                    node = singlePassEventsDetails[singlePassEventsDetailsChildren];
                    attributeValue = node.getAttribute("ActivityId");
                    if (attributeValue === srcElement.getAttribute("eventLogActivityId")) {
                        singlePassEventsDetailsNode = node;
                    }
                }
            }
        }
        
        eventIdLabelNodeText = null;
        if (eventIdLabelNode != null) {
            if (eventIdLabelNode.childNodes.length > 0) {
                eventIdLabelNodeText = eventIdLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventIdLabelNodeText == null) {
            eventIdLabelNodeText = "Event ID";
        }

        eventTimeLabelNodeText = null;
        if (eventTimeLabelNode != null) {
            if (eventTimeLabelNode.firstChild.childNodes.length > 0) {
                eventTimeLabelNodeText = eventTimeLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventTimeLabelNodeText == null) {
            eventTimeLabelNodeText = "Event Time";
        }

        eventDescriptionLabelNodeText = null;
        if (eventDescriptionLabelNode != null) {
            if (eventDescriptionLabelNode.childNodes.length > 0) {
                eventDescriptionLabelNodeText = eventDescriptionLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventDescriptionLabelNodeText == null) {
            eventDescriptionLabelNodeText = "Event Description";
        }

        eventXmlLabelNodeText = null;
        if (eventXmlLabelNode != null) {
            if (eventXmlLabelNode.childNodes.length > 0) {
                eventXmlLabelNodeText = eventXmlLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventXmlLabelNodeText == null) {
            eventXmlLabelNodeText = "Event XML";
        }

        gpEventsTitleNodeText = null;
        if (gpEventsTitleNode != null) {
            if (gpEventsTitleNode.childNodes.length > 0) {
                gpEventsTitleNodeText = gpEventsTitleNode.childNodes[0].nodeValue;
            }
        }
        if (gpEventsTitleNodeText == null) {
            gpEventsTitleNodeText = "Group Policy Events";
        }

        eventDetailsLabelNodeText = null;
        if (eventDetailsLabelNode != null) {
            if (eventDetailsLabelNode.childNodes.length > 0) {
                eventDetailsLabelNodeText = eventDetailsLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventDetailsLabelNodeText == null) {
            eventDetailsLabelNodeText = "Event Details";
        }

        dataNotFoundWarningLabelNodeText = null;
        if (dataNotFoundWarningLabelNode != null) {
            if (dataNotFoundWarningLabelNode.childNodes.length > 0) {
                dataNotFoundWarningLabelNodeText = dataNotFoundWarningLabelNode.childNodes[0].nodeValue;
            }
        }
        if (dataNotFoundWarningLabelNodeText == null) {
            dataNotFoundWarningLabelNodeText = "Data Not Found";
        }
                
        if(singlePassEventsDetailsNode != null)
        {
            eventRecordArray = singlePassEventsDetailsNode.getElementsByTagName("EventRecord");
        }
        
        var htmlText = "<html dir=" + document.dir +  ">";
        htmlText = htmlText + "<head>";
        htmlText = htmlText + "<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\" />";
        htmlText = htmlText + "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-16\" />";
        htmlText = htmlText + "<title>" + gpEventsTitleNodeText + "</title>";
        htmlText = htmlText + "</head><style type=\"text/css\">";
        htmlText = htmlText + "body    { background-color:#FFFFFF; color:#000000; font-size:68%; font-family:MS Shell Dlg; margin:0,0,10px,0; word-break:normal; word-wrap:break-word; }";
        htmlText = htmlText + "table   { font-size:100%; table-layout:fixed; width:100%; }";
        htmlText = htmlText + "td,th   { overflow:visible; text-align:left; vertical-align:top; white-space:normal; }";
        htmlText = htmlText + ".he1    { text-align: center; vertical-align: middle; background-color:#C0D2DE; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:4em; position:relative; }";
        htmlText = htmlText + ".centerTxt { text-align: center; }";
        htmlText = htmlText + ".txtFormat1 { text-align: left; vertical-align:top; white-space:pre-line; }";
        htmlText = htmlText + "</style>";
      
        htmlText = htmlText + "<script> function toggle(e) {";
        htmlText = htmlText + "if (e.style.display === \"none\"){ e.style.display = \"\"; }";
        htmlText = htmlText + "else { e.style.display = \"none\"; }";
        htmlText = htmlText + "}</";
        htmlText = htmlText + "script";
        htmlText = htmlText + ">";
      
        htmlText = htmlText + "<body><table border=1><tr>";
        htmlText = htmlText + "<th class=\"he1\"><strong>" + eventIdLabelNodeText + "</strong></th>";
        htmlText = htmlText + "<th class=\"he1\"><strong>" + eventTimeLabelNodeText + "</strong></th>";
        htmlText = htmlText + "<th class=\"he1\"><strong>" + eventDescriptionLabelNodeText + "</strong></th>";
        htmlText = htmlText + "<th class=\"he1\"><strong>" + eventDetailsLabelNodeText + "</strong></th>";

        htmlText = htmlText + "</tr>";
        var i;
        var eventId;
        var eventTime;
        var eventDescription;
        var eventXml;
        var eventType;
        var displayEvent;
        var eventXmlId;
        var displayBgColor;

        if(eventRecordArray != null && eventRecordArray.length > 0)
        {
            for (i=0; i < eventRecordArray.length; i++)
            {
                displayEvent = false;
                var eventIdElements = eventRecordArray[i].getElementsByTagName("EventId");        
                if((eventIdElements != null) && (eventIdElements.length > 0) && (eventIdElements[0].firstChild != null))
                {
                    eventId =  eventIdElements[0].firstChild.nodeValue;
                }
                else
                {
                    eventId =  dataNotFoundWarningLabelNodeText;
                }
                var eventTimeElements = eventRecordArray[i].getElementsByTagName("EventTime");
                if((eventTimeElements != null) && (eventTimeElements.length > 0) && (eventTimeElements[0].firstChild != null))
                {
                    eventTime = eventTimeElements[0].firstChild.nodeValue;
                }
                else
                {
                    eventTime = dataNotFoundWarningLabelNodeText;
                }
                var eventDescriptionElements = eventRecordArray[i].getElementsByTagName("EventDescription");
                if((eventDescriptionElements != null) && (eventDescriptionElements.length > 0) && (eventDescriptionElements[0].firstChild != null))
                {
                        eventDescription = eventDescriptionElements[0].firstChild.nodeValue;
                }
                else
                {
                    eventDescription = dataNotFoundWarningLabelNodeText;
                }
                var eventXmlElements = eventRecordArray[i].getElementsByTagName("EventXml");
                if((eventXmlElements != null) && (eventXmlElements.length > 0) && (eventXmlElements[0].firstChild != null))
                {
                    if (window.XMLSerializer) 
                    {
                       var xml = serializer.serializeToString(eventXmlElements[0].firstChild);
                       eventXml = xml;
                    } 
                    else 
                    {
                       if (typeof eventXmlElements[0].firstChild.xml != "undefined") 
                       {
                          eventXml = eventXmlElements[0].firstChild.xml;
                       }
                    }
                }
                else
                {
                    eventXml = dataNotFoundWarningLabelNodeText;
                }
                var eventLevelElements = eventRecordArray[i].getElementsByTagName("EventLevel");
                if((eventLevelElements != null) && (eventLevelElements.length > 0) && (eventLevelElements[0].firstChild != null))
                {
                    eventType = eventLevelElements[0].firstChild.nodeValue;
                }
                else
                {
                    eventType = 5;
                }
                
                if((bVerbose === true)&&(eventType == 5))
                {
                    displayEvent = true;
                }
                else if((bInformational === true)&&(eventType == 4))
                {
                    displayEvent = true;
                }
                else if((bWarning === true)&&(eventType == 3))
                {
                    displayEvent = true;
                }
                else if((bError === true)&&((eventType == 1)||(eventType == 2)))
                {
                    displayEvent = true;
                }
                
                if (displayEvent === true)
                {
                    eventXmlId = "EventXml" + (i+"");
                    htmlText = htmlText + "<tr>";
                    htmlText = htmlText + "<td class=\"centerTxt\" style=\"background:" + displayBgColor +"\">" + eventId + "</td>";
                    htmlText = htmlText + "<td class=\"centerTxt\" style=\"background:" + displayBgColor +"\">" + eventTime + "</td>";
                    htmlText = htmlText + "<td class=\"txtFormat1\" style=\"background:" + displayBgColor +"\">" + eventDescription + "</td>";
                    htmlText = htmlText + "<td style=\"background:" + displayBgColor +"\"><span style=\"color:blue; cursor:hand\" onclick=\"toggle(" + eventXmlId +");\" onKeyPress=\"toggle(" + eventXmlId + ");\" tabIndex=1 >";
                    htmlText = htmlText + eventXmlLabelNodeText + "</span><br/>";
                    htmlText = htmlText + "<span style=\"display:none\" id=" + eventXmlId +">";
                    htmlText = htmlText + eventXml + "</span>";
                    htmlText = htmlText + "</td>";
                    htmlText = htmlText + "</tr>";
                }
            }
        }
        htmlText = htmlText + "</table></body></html>";

        if(windowsArray[strWindowId])
        {
            delete windowsArray[strWindowId];
        }
        
        // IE specific method for showing the popup.
        if(navigator.userAgent.indexOf("MSIE") > 0 && window.location.toString().indexOf("file:") === -1)
        {
            var strDiagArgs = "dialogHeight=360px;dialogWidth=630px;status=no;scroll=yes;resizable=yes;minimize=yes;maximize=yes;";

            var vModeless = window.showModelessDialog("about:blank", window, strDiagArgs);
            vModeless.document.write(htmlText);
            vModeless.document.close();
            vModeless.location.reload(false);
            windowsArray[strWindowId] = vModeless;            
        }
        else
        {
            var strDiagArgs = "height=360px, width=630px, status=no, toolbar=no, scrollbars=yes, resizable=yes";
        
            windowsArray[strWindowId] = window.open("", "", strDiagArgs);
            windowsArray[strWindowId].document.write(htmlText);
            windowsArray[strWindowId].focus();
        } 
    }

    xmlDocumentRoot = null;
}

function cleanUp() {
    var windowsArray = this.windowsArray;
    for (var currentWindow in windowsArray) {
        if (windowsArray.hasOwnProperty(currentWindow)) {
            windowsArray[currentWindow].close();
        }
    }
}

function getMessageText(messageNode) {
    if (messageNode != null) {
        if (messageNode.firstChild != null) {
            if (messageNode.firstChild.nodeType === 3) {
                for (var i = 0; i < messageNode.childNodes.length; i++) 
                {
                    var curNode = messageNode.childNodes[i];
                    if(curNode.nodeType === 1){
                        return curNode.childNodes[0].nodeValue;
                    }
                }
            } else {
                return messageNode.firstChild.childNodes[0].nodeValue;
            }
        }
    }
    return null;
}

function showComponentProcessingDetails(srcElement) {
    var strWindowId = "ProcessingDetails_" + srcElement.getAttribute("eventLogActivityId");
    if ((windowsArray[strWindowId]) && (windowsArray[strWindowId].closed === false)) {
        windowsArray[strWindowId].focus();
    } else {
        var doc;
        var parser;
        var xmlDocumentRoot;
        var xmlDocument;

        var extensionsProcessedLabelNode, slowLinkThresholdLabelNode, linkSpeedLabelNode, extensionsProcessedTimeTakenNode;
        var domainControllerIpLabelNode, domainControllerNameLabelNode, processingTypeLabelNode, loopbackModeLabelNode;
        var processingTriggerLabelNode, extensionNameLabelNode, timeTakenLabelNode;
        var dataNotFoundWarningLabelNode;
        var singlePassEventsDetailsNode, totalProcessingTimeLabelNode, refreshMessageLabelNode;
        var processingDetailsUserTitleNode, processingDetailsComputerTitleNode;
        var policySectionNode;
        var policyEventsDetailsNode, detailsLabelNode;

        var extensionsProcessedLabelNodeText, slowLinkThresholdLabelNodeText, linkSpeedLabelNodeText, extensionsProcessedTimeTakenNodeText;
        var domainControllerIpLabelNodeText, domainControllerNameLabelNodeText, processingTypeLabelNodeText, loopbackModeLabelNodeText;
        var processingTriggerLabelNodeText, extensionNameLabelNodeText, timeTakenLabelNodeText;
        var dataNotFoundWarningLabelNodeText, totalProcessingTimeLabelNodeText, refreshMessageLabelNodeText;
        var processingDetailsUserTitleNodeText, processingDetailsComputerTitleNodeText;
        var detailsLabelNodeText;

        var slowLinkThresholdValue, linkSpeedValue, domainControllerIpValue, domainControllerNameValue;
        var processingTypeValue, loopbackModeValue, processingTriggerValue, totalPolicyProcessingTime, extensionProcessingTimeArray;
        var cseNameArray = new Array();
        var cseElapsedTimeArray = new Array();
        var policyApplicationFinishedTime;

        var isComputerProcessing;
        var strDiagArgs;
        var mainSection;
        var attributeValue;
        var singlePassEventsDetails;
        var singlePassEventsDetailsChildren;
        var node;
        var children;
        var itemSub;

        if (window.DOMParser) 
        {
           // This browser appears to support DOMParser
           parser = new DOMParser();
           doc = document.getElementById("data-island").textContent;

           xmlDocumentRoot = parser.parseFromString(doc, "application/xml");

           xmlDocument = xmlDocumentRoot.documentElement;

           itemSub = 1;
        } 
        else 
        { 
           // Internet Explorer, create a new XML document using ActiveX 
           // and use loadXML as a DOM parser. 
           try 
           {
              doc = document.getElementById("data-island");

              xmlDocumentRoot = new ActiveXObject("Msxml2.DOMDocument.6.0"); 
              xmlDocumentRoot.async = false; 
              xmlDocumentRoot.loadXML(doc.innerHTML);
              xmlDocument = xmlDocumentRoot.documentElement;
              itemSub = 0;
           } 
           catch(e) 
           {
              // Not supported.
           }
        }

        if (xmlDocument != null) {
            mainSection = xmlDocument.getElementsByTagName("MainSection")[0].childNodes;

            if (mainSection != null) {
                for (children = 0; children < mainSection.length; children++) {
                    node = mainSection[children];
                    if (node.nodeType === 1 && node.nodeName === 'Label') {
                        attributeValue = node.getAttribute("Name")
                        if (attributeValue != null) {
                            if (attributeValue === 'ComponentStatus_ExtensionsProcessed') {
                                extensionsProcessedLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_SlowLinkThreshold') {
                                slowLinkThresholdLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_LinkSpeed') {
                                linkSpeedLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_TimeTaken') {
                                extensionsProcessedTimeTakenNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_DomainControllerIP') {
                                domainControllerIpLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_DomainControllerName') {
                                domainControllerNameLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ProcessingTrigger') {
                                processingTriggerLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ExtensionName') {
                                extensionNameLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_TimeTaken') {
                                timeTakenLabelNode = node;
                            }
                            if (attributeValue === 'Warning_DataNotFound') {
                                dataNotFoundWarningLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_TotalProcessingTime') {
                                totalProcessingTimeLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_RefreshMessage') {
                                refreshMessageLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_UserProcessingDetails') {
                                processingDetailsUserTitleNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ComputerProcessingDetails') {
                                detailsLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ProcessingType') {
                                processingTypeLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_LoopbackMode') {
                                loopbackModeLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_UserProcessingDetails') {
                                processingDetailsUserTitleNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ComputerProcessingDetails') {
                                processingDetailsComputerTitleNode = node;
                            }
                        }
                    }
                }
            }

            singlePassEventsDetails = xmlDocument.getElementsByTagName("SinglePassEventsDetails");
            if (singlePassEventsDetails != null) {
                for (singlePassEventsDetailsChildren = 0; singlePassEventsDetailsChildren < singlePassEventsDetails.length; singlePassEventsDetailsChildren++) {
                    node = singlePassEventsDetails[singlePassEventsDetailsChildren];
                    if (node.getAttribute("ActivityId") === srcElement.getAttribute("eventLogActivityId")) {
                        singlePassEventsDetailsNode = node;
                    }
                }
            }

            if (singlePassEventsDetailsNode) {
                policyEventsDetailsNode = singlePassEventsDetailsNode.parentNode;
                if (policyEventsDetailsNode) {
                    policySectionNode = policyEventsDetailsNode.parentNode;
                    if (policySectionNode) {
                        if (policySectionNode.nodeName === 'UserPolicySection') {
                            isComputerProcessing = false;
                        }
                        if (policySectionNode.nodeName === 'ComputerPolicySection') {
                            isComputerProcessing = true;
                        }
                    }
                }
            }
        }

        
        extensionsProcessedLabelNodeText = getMessageText(extensionsProcessedLabelNode);
        slowLinkThresholdLabelNodeText = getMessageText(slowLinkThresholdLabelNode);
        linkSpeedLabelNodeText = getMessageText(linkSpeedLabelNode);
        domainControllerIpLabelNodeText = getMessageText(domainControllerIpLabelNode);
        domainControllerNameLabelNodeText = getMessageText(domainControllerNameLabelNode);
        processingTypeLabelNodeText = getMessageText(processingTypeLabelNode);
        loopbackModeLabelNodeText = getMessageText(loopbackModeLabelNode);
        processingTriggerLabelNodeText = getMessageText(processingTriggerLabelNode);
        extensionNameLabelNodeText = getMessageText(extensionNameLabelNode);
        timeTakenLabelNodeText = getMessageText(timeTakenLabelNode);
        processingDetailsUserTitleNodeText = getMessageText(processingDetailsUserTitleNode);
        processingDetailsComputerTitleNodeText = getMessageText(processingDetailsComputerTitleNode);
        dataNotFoundWarningLabelNodeText = getMessageText(dataNotFoundWarningLabelNode);
        totalProcessingTimeLabelNodeText = getMessageText(totalProcessingTimeLabelNode);
        refreshMessageLabelNodeText = getMessageText(refreshMessageLabelNode);
        detailsLabelNodeText = getMessageText(detailsLabelNode);
     

        slowLinkThresholdValue = null;
        linkSpeedValue = null;
        domainControllerIpValue = null;
        domainControllerNameValue = null;
        processingTypeValue = null;
        loopbackModeValue = null;
        processingTriggerValue = null;

        if (singlePassEventsDetailsNode != null) {
            slowLinkThresholdValue = singlePassEventsDetailsNode.getAttribute("SlowLinkThresholdInKbps");
            linkSpeedValue = singlePassEventsDetailsNode.getAttribute("LinkSpeedInKbps");
            domainControllerIpValue = singlePassEventsDetailsNode.getAttribute("DomainControllerIPAddress");
            domainControllerNameValue = singlePassEventsDetailsNode.getAttribute("DomainControllerName");
            processingTypeValue = singlePassEventsDetailsNode.getAttribute("ProcessingAppMode");
            loopbackModeValue = singlePassEventsDetailsNode.getAttribute("PolicyProcessingMode");
            processingTriggerValue = singlePassEventsDetailsNode.getAttribute("ProcessingTrigger");
            totalPolicyProcessingTime = singlePassEventsDetailsNode.getAttribute("PolicyElapsedTime");
            extensionProcessingTimeArray = singlePassEventsDetailsNode.getElementsByTagName("ExtensionProcessingTime");
        }
        if (slowLinkThresholdValue == null) {
            slowLinkThresholdValue = dataNotFoundWarningLabelNodeText;
        }
        if (linkSpeedValue == null) {
            linkSpeedValue = dataNotFoundWarningLabelNodeText;
        }
        if (domainControllerIpValue == null) {
            domainControllerIpValue = dataNotFoundWarningLabelNodeText;
        }
        else {
            domainControllerIpValue = domainControllerIpValue.replace(/^\\\\/, "");
        }
        if (domainControllerNameValue == null) {
            domainControllerNameValue = dataNotFoundWarningLabelNodeText;
        }
        else {
            domainControllerNameValue = domainControllerNameValue.replace(/^\\\\/, "");
        }
        if (processingTypeValue == null) {
            processingTypeValue = dataNotFoundWarningLabelNodeText;
        }
        if (loopbackModeValue == null) {
            loopbackModeValue = dataNotFoundWarningLabelNodeText;
        }
        if (processingTriggerValue == null) {
            processingTriggerValue = dataNotFoundWarningLabelNodeText;
        }

        if (extensionProcessingTimeArray != null && extensionProcessingTimeArray.length > 0) {
            var cseName;
            var cseElapsedTime;
            var cseProcessedTime;
            var cseId;
            var i;
            var index = 0;
            for (i = 0; i < extensionProcessingTimeArray.length; i++) {
                var cseNameElements = extensionProcessingTimeArray[i].getElementsByTagName("ExtensionName");
                var cseElapsedTimeElements = extensionProcessingTimeArray[i].getElementsByTagName("ElapsedTime");
                var cseProcessedTimeElements = extensionProcessingTimeArray[i].getElementsByTagName("ProcessedTime");
                var cseIdElements = extensionProcessingTimeArray[i].getElementsByTagName("ExtensionGuid");
                if ((cseNameElements.length > 0) && (cseElapsedTimeElements.length > 0) && (cseProcessedTimeElements.length > 0) && (cseIdElements.length > 0)) {
                    if ((cseNameElements[0].firstChild != null) && (cseElapsedTimeElements[0].firstChild != null) && (cseProcessedTimeElements[0].firstChild != null) && (cseIdElements[0].firstChild != null)) {
                        cseName = cseNameElements[0].firstChild.nodeValue;
                        cseElapsedTime = cseElapsedTimeElements[0].firstChild.nodeValue;
                        cseProcessedTime = cseProcessedTimeElements[0].firstChild.nodeValue;
                        cseId = cseIdElements[0].firstChild.nodeValue;
                        if ((cseName != null) && (cseElapsedTime != null) && (cseProcessedTime != null) && (cseId != null)) {
                            cseNameArray[index] = cseName;
                            cseElapsedTimeArray[index] = cseElapsedTime;
                            index = index + 1;
                            if (cseId === '{00000000-0000-0000-0000-000000000000}') {
                                policyApplicationFinishedTime = cseProcessedTime;
                            }
                        }
                    }
                }
            }
        }
          
        var htmlText = "<html dir=" + document.dir +  ">";
        htmlText = htmlText + "<head>";
        htmlText = htmlText + "<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\" />";
        htmlText = htmlText + "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-16\" />";
        if(isComputerProcessing != null)
        {
            if(isComputerProcessing === true)
            {
                htmlText = htmlText + "<title>" + processingDetailsComputerTitleNodeText + "</title>";
            }
            else
            {
                htmlText = htmlText + "<title>" + processingDetailsUserTitleNodeText + "</title>";
            }
        }
        

        htmlText = htmlText + "</head><style type=\"text/css\">";
        htmlText = htmlText + "body    { background-color:#FFFFFF; color:#000000; font-size:68%; font-family:MS Shell Dlg; margin:0,0,10px,0; word-break:normal; word-wrap:break-word; }";
        htmlText = htmlText + "table   { font-size:100%; table-layout:fixed; width:100%; }";
        htmlText = htmlText + "td,th   { overflow:visible; text-align:left; vertical-align:top; white-space:normal; }";
        htmlText = htmlText + ".he0    { background-color:#FEF7D6; border:1px solid #BBBBBB; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:0px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; width:100%; }";
        htmlText = htmlText + ".he1    { color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2em;margin-left: 5 px; margin-top: 5 px; position:relative; width:100%; }";
        htmlText = htmlText + ".tblspecialfmt { border:1px solid black;border-collapse:collapse; }";
        htmlText = htmlText + ".tblfirstcolfmt { border-left-width: 1px;border-top-width: 1px;border-bottom-width: 1px;border-right-width: 0px;border-style: solid; border-color: black; }";
        htmlText = htmlText + ".tblsecondcolfmt { border-left-width: 0px;border-top-width: 1px;border-bottom-width: 1px;border-right-width: 1px;border-style: solid; border-color: black; }";
        htmlText = htmlText + "</style>";
        htmlText = htmlText + "<body>";
        htmlText = htmlText + "<span class=\"he1\">" + refreshMessageLabelNodeText + " " + policyApplicationFinishedTime + "</span>" ;
        htmlText = htmlText + "<div class=\"he0\">" + detailsLabelNodeText + "</div>"
        htmltext = htmlText + "<table><tr>";

        htmlText = htmlText + "<td>";
        htmlText = htmlText + "<table>";
        htmlText = htmlText + "<tr><td colspan=\"2\">&nbsp;</td></tr>";


        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + processingTypeLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + processingTypeValue + "</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + loopbackModeLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + loopbackModeValue + "</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + linkSpeedLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + linkSpeedValue + "</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + slowLinkThresholdLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + slowLinkThresholdValue + "</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + domainControllerNameLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + domainControllerNameValue +"</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + domainControllerIpLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + domainControllerIpValue +"</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + processingTriggerLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + processingTriggerValue + "</td></tr>";

        htmlText = htmlText + "</table></td></tr>";
        htmlText = htmlText + "<tr ><td ><table>";


        htmlText = htmlText + "<tr><td><span class=\"he1\" >" + extensionsProcessedLabelNodeText +"</span></td></tr>";
        htmlText = htmlText + "<tr><td><table class=\"tblspecialfmt\" >";
        htmlText = htmlText + "<tr><td class=\"tblfirstcolfmt\" style=\"width: 50%;background-color:#FEF7D6;\"><strong>" + extensionNameLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td class=\"tblsecondcolfmt\" style=\"background-color:#FEF7D6;\" ><strong>" + timeTakenLabelNodeText + "</strong></td></tr>";

        for (var idx in cseNameArray)
        {
            htmlText = htmlText + "<tr><td style=\"width: 50%\">" + cseNameArray[idx] + "</td>";                   
            htmlText = htmlText + "<td>" + cseElapsedTimeArray[idx] + "</td></tr>";
        }

        if (totalPolicyProcessingTime != null)
        {
            htmlText = htmlText + "<tr><td class=\"tblfirstcolfmt\" style=\"width: 50%\" >" + totalProcessingTimeLabelNodeText +":</td>";
            htmlText = htmlText + "<td class=\"tblsecondcolfmt\">" + totalPolicyProcessingTime + "</td></tr>";
        }
        htmlText = htmlText + "</table></td></tr></table></td></tr></table></body></html>";

        if(windowsArray[strWindowId])
        {
            delete windowsArray[strWindowId];
        }
         
        // IE specific method for showing the popup.
        if(navigator.userAgent.indexOf("MSIE") > 0 && window.location.toString().indexOf("file:") === -1)
        {
            strDiagArgs = "dialogHeight=360px;dialogWidth=630px;status=no;scroll=yes;resizable=yes;minimize=yes;maximize=yes;";

            var vModeless = window.showModelessDialog("about:blank", window, strDiagArgs);
            vModeless.document.write(htmlText);
            vModeless.document.close();
            vModeless.location.reload(false);
            windowsArray[strWindowId] = vModeless;                      
        }
        else
        {
            strDiagArgs = "height=360px, width=630px, status=no, toolbar=no, scrollbars=yes, resizable=yes";
        
            windowsArray[strWindowId] = window.open("", "" , strDiagArgs);
            windowsArray[strWindowId].document.write(htmlText);
            windowsArray[strWindowId].focus();
        }
    }

    xmlDocumentRoot = null;
}
</script>
</head>

<body onload="window_onload();" onclick="document_onclick();" onkeypress="document_onkeypress(event);" onunload="cleanUp();">

<!-- HTML resources -->
<div style="display:none;">
        <div id="explainText_windowTitle">Group Policy Management</div>
        <div id="explainText_windowStyles">
        
                            body  { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; }

                            .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; }

                            .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; }

                            .info { padding-left:10px;width:100%; }

                            table { font-size:100%; width:100%; border:1px solid #999999; }

                            th    { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; }

                            td    { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; }

                            .btn  { width:100%; text-align:right; margin-top:16px; }

                            .hdr  { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; }

                            .bdy  { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; }

                            button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; }

                            @media print {

                                .bdy { display:block; overflow:visible; }

                                button { display:none; }

                                .head { color:#000000; background:#FFFFFF; border:1px solid #000000; }

                            }

                
        </div>
        <div id="explainText_settingPathLabel">Setting Path:</div>
        <div id="explainText_explainTextLabel">Explanation</div>
        <div id="explainText_printButton">
        <button name="Print" onClick="window.print()" accesskey="P"><u>P</u>rint</button>

        </div>
        <div id="explainText_closeButton">
        <button name="Close" onClick="window.close()" accesskey="C"><u>C</u>lose</button>
                
        </div>
        <div id="explainText_noExplainTextAvailable">No explanation is available for this setting.</div>
        <div id="explainText_supportedLabel">Supported On:</div>
        <div id="explainText_noSupportedTextAvailable">Not available</div>
</div><table class="title" >
<tr><td colspan="2" class="gponame">MKSKP-PO-WIN-U-PCI_GECSP_Restrictions</td></tr>
<tr>
    <td id="dtstamp">Data collected on: 2-9-2025 09:55:18</td>
    <td><div id="objshowhide" tabindex="0" onclick="objshowhide_onClick();return false;"></div></td>
</tr>
</table>

<div class="gposummary">
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1"><span class="sectionTitle" tabindex="0">Details</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td scope="row">Domain</td><td>emea.tpg.ads</td></tr>
<tr><td scope="row">Owner</td><td>EMEA\bahtiri.5-adm</td></tr>
<tr><td scope="row">Created</td><td>26-3-2021 12:26:26</td></tr>
<tr><td scope="row">Modified</td><td>9-2-2023 15:01:00</td></tr>
<tr><td scope="row">User Revisions</td><td>1 (AD), 1 (SYSVOL)</td></tr>
<tr><td scope="row">Computer Revisions</td><td>1 (AD), 1 (SYSVOL)</td></tr>
<tr><td scope="row">Unique ID</td><td>{d3e819e5-1b60-4568-9dbd-e2b26f5b23fe}</td></tr>
<tr><td scope="row">GPO Status</td><td>Enabled</td></tr>
</table></div></div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Links</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" ><tr><th scope="col">Location</th><th scope="col">Enforced</th><th scope="col">Link Status</th><th scope="col">Path</th></tr>
    <tr><td>MK</td><td>No</td><td>Enabled</td><td>emea.tpg.ads/MK</td></tr>
    </table>
    <br/>This list only includes links in the domain of the GPO.</div></div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Security Filtering</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>The settings in this GPO can only apply to the following groups, users, and computers:</b></div>
<div class="he4i">
<table class="info" ><tr><th scope="col">Name</th></tr><tr><td>EMEA\MK-L-SEC-User Restrictions PCI_GESCP</td></tr></table>
</div>
</div>
<div class="filler"></div>

<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Delegation</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>These groups and users have the specified permission for this GPO</b></div>
<div class="he4i">
<table class="info3" >
<tr><th scope="col">Name</th><th scope="col">Allowed Permissions</th><th scope="col">Inherited</th></tr>
<tr><td>EMEA\bahtiri.5-adm</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>EMEA\Domain Admins</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>EMEA\Domain Computers</td><td>Read</td><td>No</td></tr>
<tr><td>EMEA\MK-L-SEC-Delegation Full Access</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>EMEA\MK-L-SEC-Delegation Read Group Policy results Data Access</td><td>Read</td><td>No</td></tr>
<tr><td>EMEA\MK-L-SEC-User Restrictions PCI_GESCP</td><td>Read (from Security Filtering)</td><td>No</td></tr>
<tr><td>NT AUTHORITY\Authenticated Users</td><td>Read</td><td>No</td></tr>
<tr><td>NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS</td><td>Read</td><td>No</td></tr>
<tr><td>NT AUTHORITY\SYSTEM</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>ROOT\Enterprise Admins</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
</table>

</div></div></div>
<div class="filler"></div>
</div>
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">Computer Configuration (Enabled)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">No settings defined.</div></div>
<div class="filler"></div>
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">User Configuration (Enabled)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1h_expanded"><span class="sectionTitle" tabindex="0">Policies</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1_expanded"><span class="sectionTitle" tabindex="0">Windows Settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he2"><span class="sectionTitle" tabindex="0">Security Settings</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">Software Restriction Policies</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td><b>Enforcement</b></td></tr>
<tr><td colspan="1">
    <table class="subtable3" >
    <tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
    <tr><td>Apply Software Restriction Policies to the following</td><td>All software files except libraries (such as DLLs)</td></tr>
    <tr><td>Apply Software Restriction Policies to the following users</td><td>All users</td></tr>
    <tr><td>When applying Software Restriction Policies</td><td>Ignore certificate rules</td></tr>
    </table>
</td></tr>
<tr><td><b>Designated File Types</b></td></tr>
<tr><td colspan="1">
<table class="subtable" ><tr><th scope="col">File Extension</th><th scope="col">File Type</th></tr>
<tr><td>ADE</td><td>ADE File</td></tr>
<tr><td>ADP</td><td>ADP File</td></tr>
<tr><td>BAS</td><td>BAS File</td></tr>
<tr><td>BAT</td><td>Windows Batch File</td></tr>
<tr><td>CHM</td><td>Compiled HTML Help file</td></tr>
<tr><td>CMD</td><td>Windows Command Script</td></tr>
<tr><td>COM</td><td>MS-DOS Application</td></tr>
<tr><td>CPL</td><td>Control panel item</td></tr>
<tr><td>CRT</td><td>Security Certificate</td></tr>
<tr><td>EXE</td><td>Application</td></tr>
<tr><td>HLP</td><td>Help file</td></tr>
<tr><td>HTA</td><td>HTML Application</td></tr>
<tr><td>INF</td><td>Setup Information</td></tr>
<tr><td>INS</td><td>INS File</td></tr>
<tr><td>ISP</td><td>ISP File</td></tr>
<tr><td>LNK</td><td>Shortcut</td></tr>
<tr><td>MDB</td><td>MDB File</td></tr>
<tr><td>MDE</td><td>MDE File</td></tr>
<tr><td>MSC</td><td>Microsoft Common Console Document</td></tr>
<tr><td>MSI</td><td>Windows Installer Package</td></tr>
<tr><td>MSP</td><td>Windows Installer Patch</td></tr>
<tr><td>MST</td><td>MST File</td></tr>
<tr><td>OCX</td><td>ActiveX control</td></tr>
<tr><td>PCD</td><td>PCD File</td></tr>
<tr><td>PIF</td><td>Shortcut to MS-DOS Program</td></tr>
<tr><td>REG</td><td>Registration Entries</td></tr>
<tr><td>SCR</td><td>Screen saver</td></tr>
<tr><td>SHS</td><td>SHS File</td></tr>
<tr><td>URL</td><td>Internet Shortcut</td></tr>
<tr><td>VB</td><td>Visual Basic Source File</td></tr>
<tr><td>WSC</td><td>Windows Script Component</td></tr>
</table>
</td></tr>
<tr><td><b>Trusted Publishers</b></td></tr>
<tr><td colspan="1">
    <table class="subtable" >
    <tr><td scope="row">Trusted publisher management</td><td>Allow all administrators and users to manage user's own Trusted Publishers</td></tr>
    <tr><td scope="row">Certificate verification</td><td>None</td></tr>
    </table>
</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Software Restriction Policies/Security Levels</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">
      <table class="info" >
      <tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
      <tr><td>Default Security Level</td><td>Unrestricted</td></tr>
      </table>
    </div></div><div class="he3"><span class="sectionTitle" tabindex="0">Software Restriction Policies/Additional Rules</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">Hash Rules</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" ><tr><td><b>Help.Exe (6.3.9600.17415); Help; Command Line Help Utility; Microsoft&#174; Windows&#174; Operating System; Microsoft Corporation</b></td></tr><tr><td><table class="subtable" >
<tr><td scope="row">Security Level</td><td>Disallowed</td></tr>
<tr><td scope="row">Description</td><td></td></tr>
<tr><td scope="row">Date last modified</td><td>11-7-2018 12:08:16</td></tr>
</table>
</td></tr><tr><td><b>MSPAINT.EXE (6.3.9600.17415); MSPAINT; Paint; Microsoft&#174; Windows&#174; Operating System; Microsoft Corporation</b></td></tr><tr><td><table class="subtable" >
<tr><td scope="row">Security Level</td><td>Disallowed</td></tr>
<tr><td scope="row">Description</td><td></td></tr>
<tr><td scope="row">Date last modified</td><td>11-7-2018 16:49:47</td></tr>
</table>
</td></tr></table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Path Rules</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" ><tr><td><b>%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%</b></td></tr><tr><td><table class="subtable" >
<tr><td scope="row">Security Level</td><td>Unrestricted</td></tr>
<tr><td scope="row">Description</td><td></td></tr>
<tr><td scope="row">Date last modified</td><td>11-7-2018 12:07:11</td></tr>
</table>
</td></tr><tr><td><b>%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir%</b></td></tr><tr><td><table class="subtable" >
<tr><td scope="row">Security Level</td><td>Unrestricted</td></tr>
<tr><td scope="row">Description</td><td></td></tr>
<tr><td scope="row">Date last modified</td><td>11-7-2018 12:07:11</td></tr>
</table>
</td></tr><tr><td><b>C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy</b></td></tr><tr><td><table class="subtable" >
<tr><td scope="row">Security Level</td><td>Disallowed</td></tr>
<tr><td scope="row">Description</td><td>Disable Local Cortana Search</td></tr>
<tr><td scope="row">Date last modified</td><td>22-12-2018 14:32:20</td></tr>
</table>
</td></tr></table></div></div></div></div></div><div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Administrative Templates</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">Policy definitions (ADMX files) retrieved from the central store.</div><div class="he3"><span class="sectionTitle" tabindex="0">Control Panel</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Always open All Control Panel Items when opening Control Panel" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel" gpmc_settingDescription="This policy setting controls the default Control Panel view, whether by category or icons.&lt;br/&gt;&lt;br/&gt;If this policy setting is enabled, the Control Panel opens to the icon view.&lt;br/&gt;&lt;br/&gt;If this policy setting is disabled, the Control Panel opens to the category view.&lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the Control Panel opens to the view used in the last Control Panel session.&lt;br/&gt;Note: Icon size is dependent upon what the user has set it to in the previous session." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Always open All Control Panel Items when opening Control Panel</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit access to Control Panel and PC settings" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel" gpmc_settingDescription="Disables all Control Panel programs and the PC settings app.&lt;br/&gt;&lt;br/&gt;This setting prevents Control.exe and SystemSettings.exe, the program files for Control Panel and PC settings, from starting. As a result, users cannot start Control Panel or PC settings, or run any of their items.&lt;br/&gt;&lt;br/&gt;This setting removes Control Panel from:&lt;br/&gt;The Start screen&lt;br/&gt;File Explorer&lt;br/&gt;&lt;br/&gt;This setting removes PC settings from:&lt;br/&gt;The Start screen&lt;br/&gt;Settings charm&lt;br/&gt;Account picture&lt;br/&gt;Search results&lt;br/&gt;&lt;br/&gt;If users try to select a Control Panel item from the Properties item on a context menu, a message appears explaining that a setting prevents the action." gpmc_supported="At least Windows 2000">Prohibit access to Control Panel and PC settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Show only specified Control Panel items" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel" gpmc_settingDescription="This policy setting controls which Control Panel items such as Mouse, System, or Personalization, are displayed on the Control Panel window and the Start screen. The only items displayed in Control Panel are those you specify in this setting. This setting affects the Start screen and Control Panel, as well as other ways to access Control Panel items such as shortcuts in Help and Support or command lines that use control.exe. This policy has no effect on items displayed in PC settings.&lt;br/&gt;&lt;br/&gt;To display a Control Panel item, enable this policy setting and click Show to access the list of allowed Control Panel items. In the Show Contents dialog box in the Value column, enter the Control Panel item&amp;#39;s canonical name. For example, enter Microsoft.Mouse, Microsoft.System, or Microsoft.Personalization.&lt;br/&gt;&lt;br/&gt;Note: For Windows Vista, Windows Server 2008, and earlier versions of Windows, the module name, for example timedate.cpl or inetcpl.cpl, should be entered. If a Control Panel item does not have a CPL file, or the CPL file contains multiple applets, then its module name and string resource identification number should be entered. For example, enter @systemcpl.dll,-1 for System or @themecpl.dll,-1 for Personalization. A complete list of canonical and module names of Control Panel items can be found in MSDN by searching &amp;quot;Control Panel items&amp;quot;.&lt;br/&gt;&lt;br/&gt;If both the &amp;quot;Hide specified Control Panel items&amp;quot; setting and the &amp;quot;Show only specified Control Panel items&amp;quot; setting are enabled, the &amp;quot;Show only specified Control Panel items&amp;quot; setting is ignored.&lt;br/&gt;&lt;br/&gt;Note: The Display Control Panel item cannot be hidden in the Desktop context menu by using this setting. To hide the Display Control Panel item and prevent users from modifying the computer&amp;#39;s display settings use the &amp;quot;Disable Display Control Panel&amp;quot; setting instead.&lt;br/&gt;&lt;br/&gt;Note: To hide pages in the System Settings app, use the &amp;quot;Settings Page Visibility&amp;quot; setting under Computer Configuration." gpmc_supported="At least Windows 2000">Show only specified Control Panel items</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td colspan="2"><table class="subtable" >
<tr><th scope="col">List of allowed Control Panel items</th></tr>
<tr><td>Microsoft.AudioDevicesAndSoundThemes</td></tr>
<tr><td>Microsoft.Keyboard</td></tr>
<tr><td>Microsoft.Mouse</td></tr>
<tr><td>Microsoft.RegionalAndLanguageOptions</td></tr>
</table></td></tr></table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Control Panel/Add or Remove Programs</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Add/Remove Windows Components page" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Add or Remove Programs" gpmc_settingDescription="Removes the Add/Remove Windows Components button from the Add or Remove Programs bar. As a result, users cannot view or change the associated page.&lt;br/&gt;&lt;br/&gt;The Add/Remove Windows Components button lets users configure installed services and use the Windows Component Wizard to add, remove, and configure components of Windows from the installation files.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Add/Remove Windows Components button is available to all users.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other tools and methods to configure services or add or remove program components. However, this setting blocks user access to the Windows Component Wizard." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Hide Add/Remove Windows Components page</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Control Panel/Display</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Display Control Panel" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Display" gpmc_settingDescription="Disables the Display Control Panel.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Display Control Panel does not run. When users try to start Display, a message appears explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Prohibit access to the Control Panel&amp;quot; (User Configuration\Administrative Templates\Control Panel) and &amp;quot;Remove programs on Settings menu&amp;quot; (User Configuration\Administrative Templates\Start Menu &amp;amp; Taskbar) settings." gpmc_supported="At least Windows 2000">Disable the Display Control Panel</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Settings tab" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Display" gpmc_settingDescription="Removes the Settings tab from Display in Control Panel.&lt;br/&gt;&lt;br/&gt;This setting prevents users from using Control Panel to add, configure, or change the display settings on the computer." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Hide Settings tab</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Control Panel/Personalization</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable screen saver" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="Enables desktop screen savers.&lt;br/&gt;&lt;br/&gt;If you disable this setting, screen savers do not run. Also, this setting disables the Screen Saver section of the Screen Saver dialog in the Personalization or Display Control Panel. As a result, users cannot change the screen saver options.&lt;br/&gt;&lt;br/&gt;If you do not configure it, this setting has no effect on the system.&lt;br/&gt;&lt;br/&gt;If you enable it, a screen saver runs, provided the following two conditions hold: First, a valid screen saver on the client is specified through the &amp;quot;Screen Saver executable name&amp;quot; setting or through Control Panel on the client computer. Second, the screen saver timeout is set to a nonzero value through the setting or Control Panel.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Prevent changing Screen Saver&amp;quot; setting." gpmc_supported="At least Windows 2000 Service Pack 1">Enable screen saver</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Password protect the screen saver" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="Determines whether screen savers used on the computer are password protected.&lt;br/&gt;&lt;br/&gt;If you enable this setting, all screen savers are password protected. If you disable this setting, password protection cannot be set on any screen saver.&lt;br/&gt;&lt;br/&gt;This setting also disables the &amp;quot;Password protected&amp;quot; checkbox on the Screen Saver dialog in the Personalization or Display Control Panel, preventing users from changing the password protection setting.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, users can choose whether or not to set password protection on each screen saver.&lt;br/&gt;&lt;br/&gt;To ensure that a computer will be password protected, enable the &amp;quot;Enable Screen Saver&amp;quot; setting and specify a timeout via the &amp;quot;Screen Saver timeout&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Note: To remove the Screen Saver dialog, use the &amp;quot;Prevent changing Screen Saver&amp;quot; setting." gpmc_supported="At least Windows 2000 Service Pack 1">Password protect the screen saver</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing color and appearance" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="Disables the Color (or Window Color) page in the Personalization Control Panel, or the Color Scheme dialog in the Display Control Panel on systems where the Personalization feature is not available.&lt;br/&gt;&lt;br/&gt;This setting prevents users from using Control Panel to change the window border and taskbar color (on Windows 8), glass color (on Windows Vista and Windows 7), system colors, or color scheme of the desktop and windows.&lt;br/&gt;&lt;br/&gt;If this setting is disabled or not configured, the Color (or Window Color) page or Color Scheme dialog is available in the Personalization or Display Control Panel.&lt;br/&gt;&lt;br/&gt;For systems prior to Windows Vista, this setting hides the Appearance and Themes tabs in the in Display in Control Panel." gpmc_supported="At least Windows 2000">Prevent changing color and appearance</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing color scheme" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="This setting forces the theme color scheme to be the default color scheme.&lt;br/&gt;&lt;br/&gt;If you enable this setting, a user cannot change the color scheme of the current desktop theme.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, a user may change the color scheme of the current desktop theme.&lt;br/&gt;&lt;br/&gt;For Windows 7 and later, use the &amp;quot;Prevent changing color and appearance&amp;quot; setting." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows Vista, and Windows XP">Prevent changing color scheme</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing desktop background" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="Prevents users from adding or changing the background design of the desktop.&lt;br/&gt;&lt;br/&gt;By default, users can use the Desktop Background page in the Personalization or Display Control Panel to add a background design (wallpaper) to their desktop.&lt;br/&gt;&lt;br/&gt;If you enable this setting, none of the Desktop Background settings can be changed by the user.&lt;br/&gt;&lt;br/&gt;To specify wallpaper for a group, use the &amp;quot;Desktop Wallpaper&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Note: You must also enable the &amp;quot;Desktop Wallpaper&amp;quot; setting to prevent users from changing the desktop wallpaper. Refer to KB article: Q327998 for more information.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Allow only bitmapped wallpaper&amp;quot; setting." gpmc_supported="At least Windows 2000">Prevent changing desktop background</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing desktop icons" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="Prevents users from changing the desktop icons.&lt;br/&gt;&lt;br/&gt;By default, users can use the Desktop Icon Settings dialog in the Personalization or Display Control Panel to show, hide, or change the desktop icons.&lt;br/&gt;&lt;br/&gt;If you enable this setting, none of the desktop icons can be changed by the user.&lt;br/&gt;&lt;br/&gt;For systems prior to Windows Vista, this setting also hides the Desktop tab in the Display Control Panel." gpmc_supported="At least Windows 2000">Prevent changing desktop icons</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing mouse pointers" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="Prevents users from changing the mouse pointers.&lt;br/&gt;&lt;br/&gt;By default, users can use the Pointers tab in the Mouse Control Panel to add, remove, or change the mouse pointers.&lt;br/&gt;&lt;br/&gt;If you enable this setting, none of the mouse pointer scheme settings can be changed by the user." gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Prevent changing mouse pointers</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing screen saver" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="Prevents the Screen Saver dialog from opening in the Personalization or Display Control Panel.&lt;br/&gt;      &lt;br/&gt;This setting prevents users from using Control Panel to add, configure, or change the screen saver on the computer. It does not prevent a screen saver from running.&lt;br/&gt;      " gpmc_supported="At least Windows 2000">Prevent changing screen saver</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing theme" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="This setting disables the theme gallery in the Personalization Control Panel.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users cannot change or save a theme.  Elements of a theme such as the desktop background, color, sounds, and screen saver can still be changed (unless policies are set to turn them off).&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, there is no effect.&lt;br/&gt;&lt;br/&gt;Note: If you enable this setting but do not specify a theme using the &amp;quot;load a specific theme&amp;quot; setting, the theme defaults to whatever the user previously set or the system default." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Prevent changing theme</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing visual style for windows and buttons" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="Prevents users or applications from changing the visual style of the windows and buttons displayed on their screens.&lt;br/&gt;&lt;br/&gt;When enabled on Windows XP, this setting disables the &amp;quot;Windows and buttons&amp;quot; drop-down list on the Appearance tab in Display Properties.&lt;br/&gt;&lt;br/&gt;When enabled on Windows XP and later systems, this setting prevents users and applications from changing the visual style through the command line.  Also, a user may not apply a different visual style when changing themes." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Prevent changing visual style for windows and buttons</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit selection of visual style font size" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="Prevents users from changing the size of the font in the windows and buttons displayed on their screens.&lt;br/&gt;&lt;br/&gt;If this setting is enabled, the &amp;quot;Font size&amp;quot; drop-down list on the Appearance tab in Display Properties is disabled. &lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, a user may change the font size using the &amp;quot;Font size&amp;quot; drop-down list on the Appearance tab." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Prohibit selection of visual style font size</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Screen saver timeout" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="Specifies how much user idle time must elapse before the screen saver is launched.&lt;br/&gt;&lt;br/&gt;When configured, this idle time can be set from a minimum of 1 second to a maximum of 86,400 seconds, or 24 hours. If set to zero, the screen saver will not be started.&lt;br/&gt;&lt;br/&gt;This setting has no effect under any of the following circumstances:&lt;br/&gt;&lt;br/&gt;    - The setting is disabled or not configured.&lt;br/&gt;&lt;br/&gt;    - The wait time is set to zero.&lt;br/&gt;&lt;br/&gt;    - The &amp;quot;Enable Screen Saver&amp;quot; setting is disabled.&lt;br/&gt;&lt;br/&gt;    - Neither the &amp;quot;Screen saver executable name&amp;quot; setting nor the Screen Saver dialog of the client computer&amp;#39;s Personalization or Display Control Panel specifies a valid existing screen saver program on the client.&lt;br/&gt;&lt;br/&gt;When not configured, whatever wait time is set on the client through the Screen Saver dialog in the Personalization or Display Control Panel is used. The default is 15 minutes." gpmc_supported="At least Windows 2000 Service Pack 1">Screen saver timeout</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td colspan="2">Number of seconds to wait to enable the screen saver</td></tr><tr><td colspan="2"> </td></tr><tr><td>Seconds:</td><td>300</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Control Panel/Printers</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Browse a common web site to find printers" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Printers" gpmc_settingDescription="Adds a link to an Internet or intranet Web page to the Add Printer Wizard.&lt;br/&gt;&lt;br/&gt;          You can use this setting to direct users to a Web page from which they can install printers.&lt;br/&gt;&lt;br/&gt;          If you enable this setting and type an Internet or intranet address in the text box, the system adds a Browse button to the &amp;quot;Specify a Printer&amp;quot; page in the Add Printer Wizard. The Browse button appears beside the &amp;quot;Connect to a printer on the Internet or on a home or office network&amp;quot; option. When users click Browse, the system opens an Internet browser and navigates to the specified URL address to display the available printers.&lt;br/&gt;&lt;br/&gt;          This setting makes it easy for users to find the printers you want them to add.&lt;br/&gt;&lt;br/&gt;          Also, see the &amp;quot;Custom support URL in the Printers folder&amp;#39;s left pane&amp;quot; and &amp;quot;Activate Internet printing&amp;quot; settings in &amp;quot;Computer Configuration\Administrative Templates\Printers.&amp;quot;" gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Browse a common web site to find printers</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Browse the network to find printers" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Printers" gpmc_settingDescription="Allows users to use the Add Printer Wizard to search the network for shared printers.&lt;br/&gt;&lt;br/&gt;If you enable this setting or do not configure it, when users choose to add a network printer by selecting the &amp;quot;A network printer, or a printer attached to another computer&amp;quot; radio button on Add Printer Wizard&amp;#39;s page 2, and also check the &amp;quot;Connect to this printer (or to browse for a printer, select this option and click Next)&amp;quot; radio button on Add Printer Wizard&amp;#39;s page 3, and do not specify a printer name in the adjacent &amp;quot;Name&amp;quot; edit box, then Add Printer Wizard displays the list of shared printers on the network and invites to choose a printer from the shown list.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the network printer browse page is removed from within the Add Printer Wizard, and users cannot search the network but must type a printer name.&lt;br/&gt;&lt;br/&gt;Note: This setting affects the Add Printer Wizard only. It does not prevent users from using other programs to search for shared printers or to connect to network printers." gpmc_supported="At least Windows 2000">Browse the network to find printers</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Default Active Directory path when searching for printers" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Printers" gpmc_settingDescription="Specifies the Active Directory location where searches for printers begin.&lt;br/&gt;&lt;br/&gt;          The Add Printer Wizard gives users the option of searching Active Directory for a shared printer.&lt;br/&gt;&lt;br/&gt;          If you enable this policy setting, these searches begin at the location you specify in the &amp;quot;Default Active Directory path&amp;quot; box. Otherwise, searches begin at the root of Active Directory.&lt;br/&gt;&lt;br/&gt;          This setting only provides a starting point for Active Directory searches for printers. It does not restrict user searches through Active Directory." gpmc_supported="At least Windows 2000">Default Active Directory path when searching for printers</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Package Point and print - Approved servers" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Printers" gpmc_settingDescription="Restricts package point and print to approved servers.&lt;br/&gt;&lt;br/&gt;This policy setting restricts package point and print connections to approved servers. This setting only applies to Package Point and Print connections, and is completely independent from the &amp;quot;Point and Print Restrictions&amp;quot; policy that governs the behavior of non-package point and print connections.&lt;br/&gt;&lt;br/&gt;Windows Vista and later clients will attempt to make a non-package point and print connection anytime a package point and print connection fails, including attempts that are blocked by this policy. Administrators may need to set both policies to block all print connections to a specific print server.&lt;br/&gt;&lt;br/&gt;If this setting is enabled, users will only be able to package point and print to print servers approved by the network administrator. When using package point and print, client computers will check the driver signature of all drivers that are downloaded from print servers.&lt;br/&gt;&lt;br/&gt;If this setting is disabled, or not configured, package point and print will not be restricted to specific print servers." gpmc_supported="Windows Server 2008 and Windows Vista">Package Point and print - Approved servers</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Point and Print Restrictions" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Printers" gpmc_settingDescription="This policy setting controls the client Point and Print behavior, including the security prompts for Windows Vista computers. The policy setting applies only to non-Print Administrator clients, and only to computers that are members of a domain.&lt;br/&gt;&lt;br/&gt;          If you enable this policy setting:&lt;br/&gt;          -Windows XP and later clients will only download print driver components from a list of explicitly named servers. If a compatible print driver is available on the client, a printer connection will be made. If a compatible print driver is not available on the client, no connection will be made.&lt;br/&gt;          -You can configure Windows Vista clients so that security warnings and elevated command prompts do not appear when users Point and Print, or when printer connection drivers need to be updated.&lt;br/&gt;&lt;br/&gt;          If you do not configure this policy setting:&lt;br/&gt;          -Windows Vista client computers can point and print to any server.&lt;br/&gt;          -Windows Vista computers will show a warning and an elevated command prompt when users create a printer connection to any server using Point and Print.&lt;br/&gt;          -Windows Vista computers will show a warning and an elevated command prompt when an existing printer connection driver needs to be updated.&lt;br/&gt;          -Windows Server 2003 and Windows XP client computers can create a printer connection to any server in their forest using Point and Print.&lt;br/&gt;&lt;br/&gt;          If you disable this policy setting:&lt;br/&gt;          -Windows Vista client computers can create a printer connection to any server using Point and Print.&lt;br/&gt;          -Windows Vista computers will not show a warning or an elevated command prompt when users create a printer connection to any server using Point and Print.&lt;br/&gt;          -Windows Vista computers will not show a warning or an elevated command prompt when an existing printer connection driver needs to be updated.&lt;br/&gt;          -Windows Server 2003 and Windows XP client computers can create a printer connection to any server using Point and Print.&lt;br/&gt;          -The &amp;quot;Users can only point and print to computers in their forest&amp;quot; setting applies only to Windows Server 2003 and Windows XP SP1 (and later service packs)." gpmc_supported="Supported Windows XP SP1 through Windows Server 2008 RTM">Point and Print Restrictions</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent addition of printers" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Printers" gpmc_settingDescription="Prevents users from using familiar methods to add local and network printers.&lt;br/&gt;&lt;br/&gt;          If this policy setting is enabled, it removes the Add Printer option from the Start menu. (To find the Add Printer option, click Start, click Printers, and then click Add Printer.) This setting also removes Add Printer from the Printers folder in Control Panel.&lt;br/&gt;&lt;br/&gt;          Also, users cannot add printers by dragging a printer icon into the Printers folder. If they try, a message appears explaining that the setting prevents the action.&lt;br/&gt;&lt;br/&gt;          However, this setting does not prevent users from using the Add Hardware Wizard to add a printer. Nor does it prevent users from running other programs to add printers.&lt;br/&gt;&lt;br/&gt;          This setting does not delete printers that users have already added. However, if users have not added a printer when this setting is applied, they cannot print.&lt;br/&gt;&lt;br/&gt;          Note: You can use printer permissions to restrict the use of printers without specifying a setting. In the Printers folder, right-click a printer, click Properties, and then click the Security tab.&lt;br/&gt;&lt;br/&gt;          If this policy is disabled, or not configured, users can add printers using the methods described above." gpmc_supported="At least Windows 2000">Prevent addition of printers</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent deletion of printers" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Printers" gpmc_settingDescription="If this policy setting is enabled, it prevents users from deleting local and network printers.&lt;br/&gt;&lt;br/&gt;          If a user tries to delete a printer, such as by using the Delete option in Printers in Control Panel, a message appears explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt;          This setting does not prevent users from running other programs to delete a printer.&lt;br/&gt;&lt;br/&gt;          If this policy is disabled, or not configured, users can delete printers using the methods described above." gpmc_supported="At least Windows 2000">Prevent deletion of printers</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Desktop</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not add shares of recently opened documents to Network Locations" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Remote shared folders are not added to Network Locations whenever you open a document in the shared folder.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, when you open a document in a remote shared folder, the system adds a connection to the shared folder to Network Locations.&lt;br/&gt;&lt;br/&gt;If you enable this setting, shared folders are not added to Network Locations automatically when you open a document in the shared folder." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Do not add shares of recently opened documents to Network Locations</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Don&amp;#39;t save settings at exit" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Prevents users from saving certain changes to the desktop.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users can change the desktop, but some changes, such as the position of open windows or the size and position of the taskbar, are not saved when users log off. However, shortcuts placed on the desktop are always saved." gpmc_supported="At least Windows 2000">Don&#39;t save settings at exit</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide and disable all items on the desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes icons, shortcuts, and other default and user-defined items from the desktop, including Briefcase, Recycle Bin, Computer, and Network Locations.&lt;br/&gt;&lt;br/&gt;Removing icons and shortcuts does not prevent the user from using another method to start the programs or opening the items they represent.&lt;br/&gt;&lt;br/&gt;Also, see &amp;quot;Items displayed in Places Bar&amp;quot; in User Configuration\Administrative Templates\Windows Components\Common Open File Dialog to remove the Desktop icon from the Places Bar. This will help prevent users from saving data to the Desktop." gpmc_supported="At least Windows 2000">Hide and disable all items on the desktop</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Network Locations icon on desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes the Network Locations icon from the desktop.&lt;br/&gt;&lt;br/&gt;This setting only affects the desktop icon. It does not prevent users from connecting to the network or browsing for shared computers on the network.&lt;br/&gt;&lt;br/&gt;Note: In operating systems earlier than Microsoft Windows Vista, this policy applies to the My Network Places icon." gpmc_supported="At least Windows 2000">Hide Network Locations icon on desktop</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent adding, dragging, dropping and closing the Taskbar&amp;#39;s toolbars" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Prevents users from manipulating desktop toolbars.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users cannot add or remove toolbars from the desktop. Also, users cannot drag toolbars on to or off of docked toolbars.&lt;br/&gt;&lt;br/&gt;Note: If users have added or removed toolbars, this setting prevents them from restoring the default configuration.&lt;br/&gt;&lt;br/&gt;Tip: To view the toolbars that can be added to the desktop, right-click a docked toolbar (such as the taskbar beside the Start button), and point to &amp;quot;Toolbars.&amp;quot;&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Prohibit adjusting desktop toolbars&amp;quot; setting." gpmc_supported="At least Windows 2000">Prevent adding, dragging, dropping and closing the Taskbar&#39;s toolbars</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit adjusting desktop toolbars" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Prevents users from adjusting the length of desktop toolbars. Also, users cannot reposition items or toolbars on docked toolbars.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from adding or removing toolbars on the desktop.&lt;br/&gt;&lt;br/&gt;Note: If users have adjusted their toolbars, this setting prevents them from restoring the default configuration.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Prevent adding, dragging, dropping and closing the Taskbar&amp;#39;s toolbars&amp;quot; setting." gpmc_supported="At least Windows 2000">Prohibit adjusting desktop toolbars</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit User from manually redirecting Profile Folders" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Prevents users from changing the path to their profile folders.&lt;br/&gt;&lt;br/&gt;By default, a user can change the location of their individual profile folders like Documents, Music etc. by typing a new path in the Locations tab of the folder&amp;#39;s Properties dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users are unable to type a new location in the Target box." gpmc_supported="At least Windows 2000">Prohibit User from manually redirecting Profile Folders</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Computer icon on the desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="This setting hides Computer from the desktop and from the new Start menu. It also hides links to Computer in the Web view of all Explorer windows, and it hides Computer in the Explorer folder tree pane. If the user navigates into Computer via the &amp;quot;Up&amp;quot; button while this setting is enabled, they view an empty Computer folder. This setting allows administrators to restrict their users from seeing Computer in the shell namespace, allowing them to present their users with a simpler desktop environment.&lt;br/&gt;&lt;br/&gt;If you enable this setting, Computer is hidden on the desktop, the new Start menu, the Explorer folder tree pane, and the Explorer Web views. If the user manages to navigate to Computer, the folder will be empty.&lt;br/&gt;&lt;br/&gt;If you disable this setting, Computer is displayed as usual, appearing as normal on the desktop, Start menu, folder tree pane, and Web views, unless restricted by another setting.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, the default is to display Computer as usual.&lt;br/&gt;&lt;br/&gt;Note: In operating systems earlier than Microsoft Windows Vista, this policy applies to the My Computer icon. Hiding Computer and its contents does not hide the contents of the child folders of Computer. For example, if the users navigate into one of their hard drives, they see all of their folders and files there, even if this setting is enabled." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Remove Computer icon on the desktop</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove My Documents icon on the desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes most occurrences of the My Documents icon.&lt;br/&gt;&lt;br/&gt;This setting removes the My Documents icon from the desktop, from File Explorer, from programs that use the File Explorer windows, and from the standard Open dialog box.&lt;br/&gt;&lt;br/&gt;This setting does not prevent the user from using other methods to gain access to the contents of the My Documents folder.&lt;br/&gt;&lt;br/&gt;This setting does not remove the My Documents icon from the Start menu. To do so, use the &amp;quot;Remove My Documents icon from Start Menu&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Note: To make changes to this setting effective, you must log off from and log back on to Windows 2000 Professional." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Remove My Documents icon on the desktop</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Properties from the Computer icon context menu" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="This setting hides Properties on the context menu for Computer.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Properties option will not be present when the user right-clicks My Computer or clicks Computer and then goes to the File menu.  Likewise, Alt-Enter does nothing when Computer is selected.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Properties option is displayed as usual." gpmc_supported="At least Windows 2000 Service Pack 3">Remove Properties from the Computer icon context menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Properties from the Documents icon context menu" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="This policy setting hides the Properties menu command on the shortcut menu for the My Documents icon.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Properties menu command will not be displayed when the user does any of the following:&lt;br/&gt;&lt;br/&gt;Right-clicks the My Documents icon.&lt;br/&gt;Clicks the My Documents icon, and then opens the File menu.&lt;br/&gt;Clicks the My Documents icon, and then presses ALT+ENTER.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Properties menu command is displayed." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Remove Properties from the Documents icon context menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Properties from the Recycle Bin context menu" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes the Properties option from the Recycle Bin context menu.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Properties option will not be present when the user right-clicks on Recycle Bin or opens Recycle Bin and then clicks File. Likewise, Alt-Enter does nothing when Recycle Bin is selected.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Properties option is displayed as usual." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Remove Properties from the Recycle Bin context menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Recycle Bin icon from desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes most occurrences of the Recycle Bin icon.&lt;br/&gt;&lt;br/&gt;This setting removes the Recycle Bin icon from the desktop, from File Explorer, from programs that use the File Explorer windows, and from the standard Open dialog box.&lt;br/&gt;&lt;br/&gt;This setting does not prevent the user from using other methods to gain access to the contents of the Recycle Bin folder.&lt;br/&gt;&lt;br/&gt;Note: To make changes to this setting effective, you must log off and then log back on." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Remove Recycle Bin icon from desktop</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove the Desktop Cleanup Wizard" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Prevents users from using the Desktop Cleanup Wizard.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Desktop Cleanup wizard does not automatically run on a users workstation every 60 days. The user will also not be able to access the Desktop Cleanup Wizard.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the default behavior of the Desktop Clean Wizard running every 60 days occurs.&lt;br/&gt;&lt;br/&gt;Note: When this setting is not enabled, users can run the Desktop Cleanup Wizard, or have it run automatically every 60 days from Display, by clicking the Desktop tab and then clicking the Customize Desktop button." gpmc_supported="Windows Server 2003 and Windows XP only">Remove the Desktop Cleanup Wizard</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Desktop/Active Directory</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Active Directory folder" gpmc_settingPath="User Configuration/Administrative Templates/Desktop/Active Directory" gpmc_settingDescription="Hides the Active Directory folder in Network Locations.&lt;br/&gt;&lt;br/&gt;The Active Directory folder displays Active Directory objects in a browse window.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Active Directory folder does not appear in the Network Locations folder.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Active Directory folder appears in the Network Locations folder.&lt;br/&gt;&lt;br/&gt;This setting is designed to let users search Active Directory but not tempt them to casually browse Active Directory.&lt;br/&gt;" gpmc_supported="Windows 2000 only">Hide Active Directory folder</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Maximum size of Active Directory searches" gpmc_settingPath="User Configuration/Administrative Templates/Desktop/Active Directory" gpmc_settingDescription="Specifies the maximum number of objects the system displays in response to a command to browse or search Active Directory. This setting affects all browse displays associated with Active Directory, such as those in Local Users and Groups, Active Directory Users and Computers, and dialog boxes used to set permissions for user or group objects in Active Directory.&lt;br/&gt;&lt;br/&gt;If you enable this setting, you can use the &amp;quot;Number of objects returned&amp;quot; box to limit returns from an Active Directory search.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the system displays up to 10,000 objects. This consumes approximately 2 MB of memory or disk space.&lt;br/&gt;&lt;br/&gt;This setting is designed to protect the network and the domain controller from the effect of expansive searches." gpmc_supported="At least Windows 2000">Maximum size of Active Directory searches</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Number of objects returned:  </td><td>0</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Desktop/Desktop</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable all items" gpmc_settingPath="User Configuration/Administrative Templates/Desktop/Desktop" gpmc_settingDescription="Removes Active Desktop content and prevents users from adding Active Desktop content. &lt;br/&gt;&lt;br/&gt;This setting removes all Active Desktop items from the desktop. It also removes the Web tab from Display in Control Panel. As a result, users cannot add Web pages or  pictures from the Internet or an intranet to the desktop.&lt;br/&gt;&lt;br/&gt;Note: This setting does not disable Active Desktop. Users can  still use image formats, such as JPEG and GIF, for their desktop wallpaper." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Disable all items</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit adding items" gpmc_settingPath="User Configuration/Administrative Templates/Desktop/Desktop" gpmc_settingDescription="Prevents users from adding Web content to their Active Desktop.&lt;br/&gt;&lt;br/&gt;This setting removes the &amp;quot;New&amp;quot; button from Web tab in Display in Control Panel. As a result, users cannot add Web pages or pictures from the Internet or an intranet to the desktop. This setting does not remove existing Web content from their Active Desktop, or prevent users from removing existing Web content.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Disable all items&amp;quot; setting." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Prohibit adding items</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit changes" gpmc_settingPath="User Configuration/Administrative Templates/Desktop/Desktop" gpmc_settingDescription="Prevents the user from enabling or disabling Active Desktop or changing the Active Desktop configuration.&lt;br/&gt;&lt;br/&gt;This is a comprehensive setting that locks down the configuration you establish by using other policies in this folder. This setting removes the Web tab from Display in Control Panel. As a result, users cannot enable or disable Active Desktop. If Active Desktop is already enabled, users cannot add, remove, or edit Web content or disable, lock, or synchronize Active Desktop components." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Prohibit changes</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit deleting items" gpmc_settingPath="User Configuration/Administrative Templates/Desktop/Desktop" gpmc_settingDescription="Prevents users from deleting Web content from their Active Desktop.&lt;br/&gt;&lt;br/&gt;This setting removes the Delete button from the Web tab in Display in Control Panel. As a result, users can temporarily remove, but not delete, Web content from their Active Desktop.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from adding Web content to their Active Desktop.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Prohibit closing items&amp;quot; and &amp;quot;Disable all items&amp;quot; settings." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Prohibit deleting items</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit editing items" gpmc_settingPath="User Configuration/Administrative Templates/Desktop/Desktop" gpmc_settingDescription="Prevents users from changing the properties of Web content items on their Active Desktop.&lt;br/&gt;&lt;br/&gt;This setting disables the Properties button on the Web tab in Display in Control Panel. Also, it removes the Properties item from the menu for each item on the Active Desktop. As a result, users cannot change the properties of an item, such as its synchronization schedule, password, or display characteristics." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Prohibit editing items</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Google/Google Chrome/Deprecated policies</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Choose how to specify proxy server settings" gpmc_settingPath="User Configuration/Administrative Templates/Google/Google Chrome/Deprecated policies" gpmc_settingDescription="This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500&lt;br/&gt;&lt;br/&gt;Example value: direct" gpmc_supported="Microsoft Windows 7 or later">Choose how to specify proxy server settings</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Choose how to specify proxy server settings</td><td>Use system proxy settings</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="URL to a proxy .pac file" gpmc_settingPath="User Configuration/Administrative Templates/Google/Google Chrome/Deprecated policies" gpmc_settingDescription="This policy is deprecated. Its usage is discouraged. Read more at https://support.google.com/chrome/a/answer/7643500&lt;br/&gt;&lt;br/&gt;Example value: https://internal.site/example.pac" gpmc_supported="Microsoft Windows 7 or later">URL to a proxy .pac file</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>URL to a proxy .pac file</td><td>http://deffmproxyrr.emea.tpg.ads/cfg/config.pac</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Mozilla/Firefox</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Blocked websites" gpmc_settingPath="User Configuration/Administrative Templates/Mozilla/Firefox" gpmc_settingDescription="If this policy is enabled, you can specify match patterns that indicate sites to be blocked. The match patterns are documented at https://developer.mozilla.org/en-US/Add-ons/WebExtensions/Match_patterns. There is a 1000 entry limit.&lt;br/&gt;&lt;br/&gt;If this policy is disabled or not configured, no websites are blocked." gpmc_supported="Firefox 60 or later, Firefox 60 ESR or later">Blocked websites</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td colspan="2"><table class="subtable" >
<tr><th scope="col"></th></tr>
<tr><td>file://c:/</td></tr>
<tr><td>file:///c:/</td></tr>
<tr><td>c:\</td></tr>
</table></td></tr></table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable Firefox Accounts" gpmc_settingPath="User Configuration/Administrative Templates/Mozilla/Firefox" gpmc_settingDescription="If this policy is enabled, Firefox Accounts is disabled which includes disabling Sync.&lt;br/&gt;&lt;br/&gt;If this policy is disabled or not configured, Firefox Accounts and Sync are available." gpmc_supported="Firefox 60 or later, Firefox 60 ESR or later">Disable Firefox Accounts</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable Private Browsing" gpmc_settingPath="User Configuration/Administrative Templates/Mozilla/Firefox" gpmc_settingDescription="If this policy is enabled, private browsing is not allowed.&lt;br/&gt;&lt;br/&gt;If this policy is disabled or not configured, private browsing is allowed." gpmc_supported="Firefox 60 or later, Firefox 60 ESR or later">Disable Private Browsing</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Display Menu Bar (Deprecated)" gpmc_settingPath="User Configuration/Administrative Templates/Mozilla/Firefox" gpmc_settingDescription="If this policy is enabled, the menu bar is displayed by default. The user can still hide it.&lt;br/&gt;&lt;br/&gt;If this policy is disabled or not configured, the menu bar is not displayed by default." gpmc_supported="Firefox 60 or later, Firefox 60 ESR or later">Display Menu Bar (Deprecated)</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Mozilla/Firefox/Proxy Settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Automatic proxy configuration URL" gpmc_settingPath="User Configuration/Administrative Templates/Mozilla/Firefox/Proxy Settings" gpmc_settingDescription="If this policy is enabled, you can set the automatic proxy configuration URL.&lt;br/&gt;&lt;br/&gt;If this policy is disabled or not configured, Firefox does not use an automatic proxy configuration URL." gpmc_supported="Firefox 60 or later, Firefox 60 ESR or later">Automatic proxy configuration URL</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>URL:</td><td>http://deffmproxyrr.emea.tpg.ads/cfg/config.pac</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Connection Type" gpmc_settingPath="User Configuration/Administrative Templates/Mozilla/Firefox/Proxy Settings" gpmc_settingDescription="If this policy is enabled, you can set the connection type.&lt;br/&gt;&lt;br/&gt;If this policy is disabled or not configured, Firefox defaults to using the system proxy." gpmc_supported="Firefox 60 or later, Firefox 60 ESR or later">Connection Type</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td></td><td>Use system proxy settings</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not allow proxy settings to be changed" gpmc_settingPath="User Configuration/Administrative Templates/Mozilla/Firefox/Proxy Settings" gpmc_settingDescription="If this policy is enabled, proxy settings cannot be changed by the user.&lt;br/&gt;&lt;br/&gt;If this policy is disabled or not configured, the user can change their proxy settings." gpmc_supported="Firefox 60 or later, Firefox 60 ESR or later">Do not allow proxy settings to be changed</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not prompt for authentication if password is saved" gpmc_settingPath="User Configuration/Administrative Templates/Mozilla/Firefox/Proxy Settings" gpmc_settingDescription="If this policy is enabled, Firefox will not prompt for proxy authentication when a password is saved.&lt;br/&gt;&lt;br/&gt;If this policy is disabled or not configured, Firefox will always prompt for proxy authentication." gpmc_supported="Firefox 60 or later, Firefox 60 ESR or later">Do not prompt for authentication if password is saved</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="HTTP Proxy" gpmc_settingPath="User Configuration/Administrative Templates/Mozilla/Firefox/Proxy Settings" gpmc_settingDescription="If this policy is enabled, you can set the HTTP Proxy used when manual proxy configuration is specified.&lt;br/&gt;&lt;br/&gt;If this policy is disabled or not configured, Firefox does not use an HTTP Proxy." gpmc_supported="Firefox 60 or later, Firefox 60 ESR or later">HTTP Proxy</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Host including port:</td><td>http://deffmproxyrr.emea.tpg.ads/cfg/config.pac</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="HTTPS Proxy" gpmc_settingPath="User Configuration/Administrative Templates/Mozilla/Firefox/Proxy Settings" gpmc_settingDescription="If this policy is enabled, you can set the HTTPS Proxy used when manual proxy configuration is specified.&lt;br/&gt;&lt;br/&gt;If this policy is disabled or not configured, Firefox does not use an HTTPS Proxy." gpmc_supported="Firefox 60 or later, Firefox 60 ESR or later">HTTPS Proxy</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Host including port:</td><td></td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Proxy DNS when using SOCKS v5" gpmc_settingPath="User Configuration/Administrative Templates/Mozilla/Firefox/Proxy Settings" gpmc_settingDescription="If this policy is enabled, DNS is proxied when using SOCKS v5.&lt;br/&gt;&lt;br/&gt;If this policy is disabled or not configured, DNS is not proxied when using SOCKS v5." gpmc_supported="Firefox 60 or later, Firefox 60 ESR or later">Proxy DNS when using SOCKS v5</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Proxy Passthrough" gpmc_settingPath="User Configuration/Administrative Templates/Mozilla/Firefox/Proxy Settings" gpmc_settingDescription="If this policy is enabled, the proxy settings are bypassed for the locations specified.&lt;br/&gt;&lt;br/&gt;If this policy is disabled or not configured, Firefox does not bypass the proxy." gpmc_supported="Firefox 60 or later, Firefox 60 ESR or later">Proxy Passthrough</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td colspan="2">No proxy for</td></tr><tr><td></td><td></td></tr>
<tr><td colspan="2">Example: .mozilla.org, .net.nz, 192.168.1.0/24</td></tr><tr><td colspan="2">Connections to localhost, 127.0.0.1/8, and ::1 are never proxied.</td></tr></table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="SOCKS Host" gpmc_settingPath="User Configuration/Administrative Templates/Mozilla/Firefox/Proxy Settings" gpmc_settingDescription="If this policy is enabled, you can set the SOCKS Host and version used when manual proxy configuration is specified.&lt;br/&gt;&lt;br/&gt;If this policy is disabled or not configured, Firefox does not use a SOCKS Host." gpmc_supported="Firefox 60 or later, Firefox 60 ESR or later">SOCKS Host</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td colspan="2">Host including port:</td></tr><tr><td></td><td></td></tr>
<tr><td colspan="2">SOCKS Version:</td></tr><tr><td></td><td>SOCKS v4</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Use HTTP proxy for HTTPS" gpmc_settingPath="User Configuration/Administrative Templates/Mozilla/Firefox/Proxy Settings" gpmc_settingDescription="If this policy is enabled, the HTTP Proxy is used for HTTPS when manual proxy configuration is specified.&lt;br/&gt;&lt;br/&gt;If this policy is disabled or not configured, Firefox does not use an HTTPS Proxy unless specified." gpmc_supported="Firefox 60 or later, Firefox 60 ESR or later">Use HTTP proxy for HTTPS</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Network/Network Connections</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Ability to change properties of an all user remote access connection" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether a user can view and change the properties of remote access connections that are available to all users of the computer.&lt;br/&gt;&lt;br/&gt;To create an all-user remote access connection, on the Connection Availability page in the New Connection Wizard, click the &amp;quot;For all users&amp;quot; option.&lt;br/&gt;&lt;br/&gt;This setting determines whether the Properties menu item is enabled, and thus, whether the Remote Access Connection Properties dialog box is available to users.&lt;br/&gt;&lt;br/&gt;If you enable this setting, a Properties menu item appears when any user right-clicks the icon for a remote access connection. Also, when any user selects the connection, Properties appears on the File menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Properties menu items are disabled, and users (including administrators) cannot open the remote access connection properties dialog box.&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, only Administrators and Network Configuration Operators can change properties of all-user remote access connections.&lt;br/&gt;&lt;br/&gt;Note: This setting takes precedence over settings that manipulate the availability of features inside the Remote Access Connection Properties dialog box. If this setting is disabled, nothing within the properties dialog box for a remote access connection will be available to users.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting." gpmc_supported="At least Windows 2000 Service Pack 1">Ability to change properties of an all user remote access connection</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Ability to Enable/Disable a LAN connection" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether users can enable/disable LAN connections.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Enable and Disable options for LAN connections are available to users (including nonadministrators). Users can enable/disable a LAN connection by double-clicking the icon representing the connection, by right-clicking it, or by using the File menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), double-clicking the icon has no effect, and the Enable and Disable menu items are disabled for all users (including administrators).&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, only Administrators and Network Configuration Operators can enable/disable LAN connections.&lt;br/&gt;&lt;br/&gt;Note: Administrators can still enable/disable LAN connections from Device Manager when this setting is disabled." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Ability to Enable/Disable a LAN connection</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Ability to rename all user remote access connections" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether nonadministrators can rename all-user remote access connections.&lt;br/&gt;&lt;br/&gt;To create an all-user connection, on the Connection Availability page in the New Connection Wizard, click the &amp;quot;For all users&amp;quot; option.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Rename option is enabled for all-user remote access connections. Any user can rename all-user connections by clicking an icon representing the connection or by using the File menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the Rename option is disabled for nonadministrators only.&lt;br/&gt;&lt;br/&gt;If you do not configure the setting, only Administrators and Network Configuration Operators can rename all-user remote access connections.&lt;br/&gt;&lt;br/&gt;Note: This setting does not apply to Administrators&lt;br/&gt;&lt;br/&gt;Note: When the &amp;quot;Ability to rename LAN connections or remote access connections available to all users&amp;quot; setting is configured (set to either Enabled or Disabled), this setting does not apply.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Ability to rename all user remote access connections</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Ability to rename LAN connections" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether nonadministrators can rename a LAN connection.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Rename option is enabled for LAN connections. Nonadministrators can rename LAN connections by clicking an icon representing the connection or by using the File menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the Rename option is disabled for nonadministrators only.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, only Administrators and Network Configuration Operators can rename LAN connections&lt;br/&gt;&lt;br/&gt;Note: This setting does not apply to Administrators.&lt;br/&gt;&lt;br/&gt;Note: When the &amp;quot;Ability to rename LAN connections or remote access connections available to all users&amp;quot; setting is configured (set to either enabled or disabled), this setting does not apply." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Ability to rename LAN connections</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Ability to rename LAN connections or remote access connections available to all users" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether users can rename LAN or all user remote access connections.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Rename option is enabled for all users. Users can rename connections by clicking the icon representing a connection or by using the File menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Rename option for LAN and all user remote access connections is disabled for all users (including Administrators and Network Configuration Operators).&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If this setting is not configured, only Administrators and Network Configuration Operators have the right to rename LAN or all user remote access connections.&lt;br/&gt;&lt;br/&gt;Note: When configured, this setting always takes precedence over the &amp;quot;Ability to rename LAN connections&amp;quot; and &amp;quot;Ability to rename all user remote access connections&amp;quot; settings.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent users from using other programs, such as Internet Explorer, to rename remote access connections." gpmc_supported="Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only">Ability to rename LAN connections or remote access connections available to all users</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit access to properties of a LAN connection" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether users can change the properties of a LAN connection.&lt;br/&gt;&lt;br/&gt;This setting determines whether the Properties menu item is enabled, and thus, whether the Local Area Connection Properties dialog box is available to users.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Properties menu items are disabled for all users, and users cannot open the Local Area Connection Properties dialog box.&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, a Properties menu item appears when users right-click the icon representing a LAN connection. Also, when users select the connection, Properties is enabled on the File menu.&lt;br/&gt;&lt;br/&gt;Note: This setting takes precedence over settings that manipulate the availability of features inside the Local Area Connection Properties dialog box. If this setting is enabled, nothing within the properties dialog box for a LAN connection is available to users.&lt;br/&gt;&lt;br/&gt;Note: Nonadministrators have the right to view the properties dialog box for a connection but not to make changes, regardless of this setting." gpmc_supported="At least Windows 2000 Service Pack 1">Prohibit access to properties of a LAN connection</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit access to properties of components of a LAN connection" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether Administrators and Network Configuration Operators can change the properties of components used by a LAN connection.&lt;br/&gt;&lt;br/&gt;This setting determines whether the Properties button for components of a LAN connection is enabled.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Properties button is disabled for Administrators. Network Configuration Operators are prohibited from accessing connection components, regardless of the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting does not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Properties button is enabled for administrators and Network Configuration Operators.&lt;br/&gt;&lt;br/&gt;The Local Area Connection Properties dialog box includes a list of the network components that the connection uses. To view or change the properties of a component, click the name of the component, and then click the Properties button beneath the component list.&lt;br/&gt;&lt;br/&gt;Note: Not all network components have configurable properties. For components that are not configurable, the Properties button is always disabled.&lt;br/&gt;&lt;br/&gt;Note: When the &amp;quot;Prohibit access to properties of a LAN connection&amp;quot; setting is enabled, users are blocked from accessing the Properties button for LAN connection components.&lt;br/&gt;&lt;br/&gt;Note: Network Configuration Operators only have permission to change TCP/IP properties. Properties for all other components are unavailable to these users.&lt;br/&gt;&lt;br/&gt;Note: Nonadministrators are already prohibited from accessing properties of components for a LAN connection, regardless of this setting." gpmc_supported="Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only">Prohibit access to properties of components of a LAN connection</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit access to properties of components of a remote access connection" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether users can view and change the properties of components used by a private or all-user remote access connection.&lt;br/&gt;&lt;br/&gt;This setting determines whether the Properties button for components used by a private or all-user remote access connection is enabled.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Properties button is disabled for all users (including administrators).&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting does not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Properties button is enabled for all users.&lt;br/&gt;&lt;br/&gt;The Networking tab of the Remote Access Connection Properties dialog box includes a list of the network components that the connection uses. To view or change the properties of a component, click the name of the component, and then click the Properties button beneath the component list.&lt;br/&gt;&lt;br/&gt;Note: Not all network components have configurable properties. For components that are not configurable, the Properties button is always disabled.&lt;br/&gt;&lt;br/&gt;Note: When the &amp;quot;Ability to change properties of an all user remote access connection&amp;quot; or &amp;quot;Prohibit changing properties of a private remote access connection&amp;quot; settings are set to deny access to the Remote Access Connection Properties dialog box, the Properties button for remote access connection components is blocked.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting." gpmc_supported="Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only">Prohibit access to properties of components of a remote access connection</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit access to the Advanced Settings item on the Advanced menu" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether the Advanced Settings item on the Advanced menu in Network Connections is enabled for administrators.&lt;br/&gt;&lt;br/&gt;The Advanced Settings item lets users view and change bindings and view and change the order in which the computer accesses connections, network providers, and print providers.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Advanced Settings item is disabled for administrators.&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Advanced Settings item is enabled for administrators.&lt;br/&gt;&lt;br/&gt;Note: Nonadministrators are already prohibited from accessing the Advanced Settings dialog box, regardless of this setting." gpmc_supported="Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only">Prohibit access to the Advanced Settings item on the Advanced menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit access to the New Connection Wizard" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether users can use the New Connection Wizard, which creates new network connections.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Make New Connection icon does not appear in the Start Menu on in the Network Connections folder. As a result, users (including administrators) cannot start the New Connection Wizard.&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Make New Connection icon appears in the Start menu and in the Network Connections folder for all users. Clicking the Make New Connection icon starts the New Connection Wizard.&lt;br/&gt;&lt;br/&gt;Note: Changing this setting from Enabled to Not Configured does not restore the Make New Connection icon until the user logs off or on. When other changes to this setting are applied, the icon does not appear or disappear in the Network Connections folder until the folder is refreshed.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent users from using other programs, such as Internet Explorer, to bypass this setting." gpmc_supported="Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only">Prohibit access to the New Connection Wizard</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit access to the Remote Access Preferences item on the Advanced menu" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether the Remote Acccess Preferences item on the Advanced menu in Network Connections folder is enabled.&lt;br/&gt;&lt;br/&gt;The Remote Access Preferences item lets users create and change connections before logon and configure automatic dialing and callback features.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Remote Access Preferences item is disabled for all users (including administrators).&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Remote Access Preferences item is enabled for all users." gpmc_supported="At least Windows 2000 Service Pack 1">Prohibit access to the Remote Access Preferences item on the Advanced menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit adding and removing components for a LAN or remote access connection" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether administrators can add and remove network components for a LAN or remote access connection. This setting has no effect on nonadministrators.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Install and Uninstall buttons for components of connections are disabled, and administrators are not permitted to access network components in the Windows Components Wizard.&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Install and Uninstall buttons for components of connections in the Network Connections folder are enabled. Also, administrators can gain access to network components in the Windows Components Wizard.&lt;br/&gt;&lt;br/&gt;The Install button opens the dialog boxes used to add network components. Clicking the Uninstall button removes the selected component in the components list (above the button).&lt;br/&gt;&lt;br/&gt;The Install and Uninstall buttons appear in the properties dialog box for connections. These buttons are on the General tab for LAN connections and on the Networking tab for remote access connections.&lt;br/&gt;&lt;br/&gt;Note: When the &amp;quot;Prohibit access to properties of a LAN connection&amp;quot;, &amp;quot;Ability to change properties of an all user remote access connection&amp;quot;, or &amp;quot;Prohibit changing properties of a private remote access connection&amp;quot; settings are set to deny access to the connection properties dialog box, the Install and Uninstall buttons for connections are blocked.&lt;br/&gt;&lt;br/&gt;Note: Nonadministrators are already prohibited from adding and removing connection components, regardless of this setting." gpmc_supported="Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only">Prohibit adding and removing components for a LAN or remote access connection</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit connecting and disconnecting a remote access connection" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether users can connect and disconnect remote access connections.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), double-clicking the icon has no effect, and the Connect and Disconnect menu items are disabled for all users (including administrators).&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Connect and Disconnect options for remote access connections are available to all users. Users can connect or disconnect a remote access connection by double-clicking the icon representing the connection, by right-clicking it, or by using the File menu." gpmc_supported="At least Windows 2000 Service Pack 1">Prohibit connecting and disconnecting a remote access connection</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit Enabling/Disabling components of a LAN connection" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether administrators can enable and disable the components used by LAN connections.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the check boxes for enabling and disabling components are disabled. As a result, administrators cannot enable or disable the components that a connection uses.&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Properties dialog box for a connection includes a check box beside the name of each component that the connection uses. Selecting the check box enables the component, and clearing the check box disables the component.&lt;br/&gt;&lt;br/&gt;Note: When the &amp;quot;Prohibit access to properties of a LAN connection&amp;quot; setting is enabled, users are blocked from accessing the check boxes for enabling and disabling the components of a LAN connection.&lt;br/&gt;&lt;br/&gt;Note: Nonadministrators are already prohibited from enabling or disabling components for a LAN connection, regardless of this setting." gpmc_supported="Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only">Prohibit Enabling/Disabling components of a LAN connection</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit TCP/IP advanced configuration" gpmc_settingPath="User Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Determines whether users can configure advanced TCP/IP settings.&lt;br/&gt;&lt;br/&gt;If you enable this setting (and enable the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; setting), the Advanced button on the Internet Protocol (TCP/IP) Properties dialog box is disabled for all users (including administrators). As a result, users cannot open the Advanced TCP/IP Settings Properties page and modify IP settings, such as DNS and WINS server information.&lt;br/&gt;&lt;br/&gt;Important: If the &amp;quot;Enable Network Connections settings for Administrators&amp;quot; is disabled or not configured, this setting will not apply to administrators on post-Windows 2000 computers.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the Advanced button is enabled, and all users can open the Advanced TCP/IP Setting dialog box.&lt;br/&gt;&lt;br/&gt;Note: This setting is superseded by settings that prohibit access to properties of connections or connection components. When these policies are set to deny access to the connection properties dialog box or Properties button for connection components, users cannot gain access to the Advanced button for TCP/IP configuration.&lt;br/&gt;&lt;br/&gt;Note: Nonadministrators (excluding Network Configuration Operators) do not have permission to access TCP/IP advanced configuration for a LAN connection, regardless of this setting.&lt;br/&gt;&lt;br/&gt;Tip: To open the Advanced TCP/IP Setting dialog box, in the Network Connections folder, right-click a connection icon, and click Properties. For remote access connections, click the Networking tab.  In the &amp;quot;Components checked are used by this connection&amp;quot; box, click Internet Protocol (TCP/IP), click the Properties button, and then click the Advanced button.&lt;br/&gt;&lt;br/&gt;Note: Changing this setting from Enabled to Not Configured does not enable the Advanced button until the user logs off." gpmc_supported="Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only">Prohibit TCP/IP advanced configuration</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Start Menu and Taskbar</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Add &amp;quot;Run in Separate Memory Space&amp;quot; check box to Run dialog box" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Lets users run a 16-bit program in a dedicated (not shared) Virtual DOS Machine (VDM) process.&lt;br/&gt;&lt;br/&gt;All DOS and 16-bit programs run on Windows 2000 Professional and Windows XP Professional in the Windows Virtual DOS Machine program. VDM simulates a 16-bit environment, complete with the DLLs required by 16-bit programs. By default, all 16-bit programs run as threads in a single, shared VDM process. As such, they share the memory space allocated to the VDM process and cannot run simultaneously.&lt;br/&gt;&lt;br/&gt;Enabling this setting adds a check box to the Run dialog box, giving users the option of running a 16-bit program in its own dedicated NTVDM process. The additional check box is enabled only when a user enters a 16-bit program in the Run dialog box." gpmc_supported="At least Windows 2000">Add &quot;Run in Separate Memory Space&quot; check box to Run dialog box</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Add Logoff to the Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy only applies to the classic version of the start menu and does not affect the new style start menu.&lt;br/&gt;&lt;br/&gt;Adds the &amp;quot;Log Off &amp;lt;username&amp;gt;&amp;quot; item to the Start menu and prevents users from removing it.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Log Off &amp;lt;username&amp;gt; item appears in the Start menu. This setting also removes the Display Logoff item from Start Menu Options. As a result, users cannot remove the Log Off &amp;lt;username&amp;gt; item from the Start Menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, users can use the Display Logoff item to add and remove the Log Off item.&lt;br/&gt;&lt;br/&gt;This setting affects the Start menu only. It does not affect the Log Off item on the Windows Security dialog box that appears when you press Ctrl+Alt+Del.&lt;br/&gt;&lt;br/&gt;Note: To add or remove the Log Off item on a computer, click Start, click Settings, click Taskbar and Start Menu, click the Start Menu Options tab, and then, in the Start Menu Settings box, click Display Logoff.&lt;br/&gt;&lt;br/&gt;Also, see &amp;quot;Remove Logoff&amp;quot; in User Configuration\Administrative Templates\System\Logon/Logoff." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows Vista, Windows XP, and Windows 2000">Add Logoff to the Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Add Search Internet link to Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="&lt;br/&gt;If you enable this policy, a &amp;quot;Search the Internet&amp;quot; link is shown when the user performs a search in the start menu search box.  This button launches the default browser with the search terms.&lt;br/&gt;&lt;br/&gt;If you disable this policy, there will not be a &amp;quot;Search the Internet&amp;quot; link when the user performs a search in the start menu search box.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy (default), there will not be a &amp;quot;Search the Internet&amp;quot; link on the start menu." gpmc_supported="Windows Server 2008 R2 and Windows 7">Add Search Internet link to Start Menu</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Add the Run command to the Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this setting, the Run command is added to the Start menu.  If you disable or do not configure this setting, the Run command is not visible on the Start menu by default, but it can be added from the Taskbar and Start menu properties. If the Remove Run link from Start Menu policy is set, the Add the Run command to the Start menu policy has no effect." gpmc_supported="Windows Server 2008, Windows 7, and Windows Vista">Add the Run command to the Start Menu</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Change Start Menu power button" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Set the default action of the power button on the Start menu.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Start Menu will set the power button to the chosen action, and not let the user change this action.&lt;br/&gt;&lt;br/&gt;If you set the button to either Sleep or Hibernate, and that state is not supported on a computer, then the button will fall back to Shut Down.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Start Menu power button will be set to Shut Down by default, and the user can change this setting to another action." gpmc_supported="Windows Server 2008 R2 and Windows 7">Change Start Menu power button</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Choose one of the following actions</td><td>Log off</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Clear history of recently opened documents on exit" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Clear history of recently opened documents on exit.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system deletes shortcuts to recently used document files when the user logs off. As a result, the Recent Items menu on the Start menu is always empty when the user logs on. In addition, recently and frequently used items in the Jump Lists off of programs in the Start Menu and Taskbar will be cleared when the user logs off.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the system retains document shortcuts, and when a user logs on, the Recent Items menu and the Jump Lists appear just as it did when the user logged off.&lt;br/&gt;&lt;br/&gt;Note: The system saves document shortcuts in the user profile in the System-drive\Users\User-name\Recent folder.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Remove Recent Items menu from Start Menu&amp;quot; and &amp;quot;Do not keep history of recently opened documents&amp;quot; policies in this folder. The system only uses this setting when neither of these related settings are selected.&lt;br/&gt;&lt;br/&gt;This setting does not clear the list of recent files that Windows programs display at the bottom of the File menu. See the &amp;quot;Do not keep history of recently opened documents&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;This policy setting also does not hide document shortcuts displayed in the Open dialog box. See the &amp;quot;Hide the dropdown list of recent files&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;This policy also does not clear items that the user may have pinned to the Jump Lists, or Tasks that the application has provided for their menu. See the &amp;quot;Do not allow pinning items in Jump Lists&amp;quot; setting." gpmc_supported="At least Windows 2000">Clear history of recently opened documents on exit</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Clear the recent programs list for new users" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy setting, the recent programs list in the start menu will be blank for each new user.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, the start menu recent programs list will be pre-populated with programs for each new user." gpmc_supported="Windows Server 2008, Windows 7, Windows Vista, and Windows 10">Clear the recent programs list for new users</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Clear tile notifications during log on" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this setting, the system deletes tile notifications when the user logs on. As a result, the Tiles in the start view will always show their default content when the user logs on. In addition, any cached versions of these notifications will be cleared when the user logs on.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the system retains notifications, and when a user logs on, the tiles appear just as they did when the user logged off, including the history of previous notifications for each tile.&lt;br/&gt;&lt;br/&gt;This setting does not prevent new notifications from appearing. See the &amp;quot;Turn off Application Notifications&amp;quot; setting to prevent new notifications." gpmc_supported="At least Windows Server 2012, Windows 8 or Windows RT">Clear tile notifications during log on</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable showing balloon notifications as toasts." gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy disables the functionality that converts balloons to toast notifications.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, system and application notifications will render as balloons instead of toast notifications.&lt;br/&gt;&lt;br/&gt;Enable this policy setting if a specific app or system component that uses balloon notifications has compatibility issues with toast notifications.&lt;br/&gt;&lt;br/&gt;If you disable or don’t configure this policy setting, all notifications will appear as toast notifications.&lt;br/&gt;&lt;br/&gt;A reboot is required for this policy setting to take effect." gpmc_supported="At least Windows Server 2016, Windows 10">Disable showing balloon notifications as toasts.</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not allow pinning programs to the Taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to control pinning programs to the Taskbar.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users cannot change the programs currently pinned to the Taskbar. If any programs are already pinned to the Taskbar, these programs continue to show in the Taskbar. However, users cannot unpin these programs already pinned to the Taskbar, and they cannot pin new programs to the Taskbar.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can change the programs currently pinned to the Taskbar." gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Do not allow pinning programs to the Taskbar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not allow pinning Store app to the Taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="&lt;br/&gt;This policy setting allows you to control pinning the Store app to the Taskbar.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users cannot pin the Store app to the Taskbar. If the Store app is already pinned to the Taskbar, it will be removed from the Taskbar on next login.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can pin the Store app to the Taskbar." gpmc_supported="At least Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1">Do not allow pinning Store app to the Taskbar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not display any custom toolbars in the taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This setting affects the taskbar.&lt;br/&gt;&lt;br/&gt;The taskbar includes the Start button, buttons for currently running tasks, custom toolbars, the notification area, and the system clock. Toolbars include Quick Launch, Address, Links, Desktop, and other custom toolbars created by the user or by an application.&lt;br/&gt;&lt;br/&gt;If this setting is enabled, the taskbar does not display any custom toolbars, and the user cannot add any custom toolbars to the taskbar. Moreover, the &amp;quot;Toolbars&amp;quot; menu command and submenu are removed from the context menu. The taskbar displays only the Start button, taskbar buttons, the notification area, and the system clock.&lt;br/&gt;&lt;br/&gt;If this setting is disabled or is not configured, the taskbar displays all toolbars. Users can add or remove custom toolbars, and the &amp;quot;Toolbars&amp;quot; command appears in the context menu." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Do not display any custom toolbars in the taskbar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not keep history of recently opened documents" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Prevents the operating system and installed programs from creating and displaying shortcuts to recently opened documents.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system and Windows programs do not create shortcuts to documents opened while the setting is in effect. Also, they retain but do not display existing document shortcuts. The system empties the Recent Items menu on the Start menu, and Windows programs do not display shortcuts at the bottom of the File menu. In addition, the Jump Lists off of programs in the Start Menu and Taskbar do not show lists of recently or frequently used files, folders, or websites.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the system will store and display shortcuts to recently and frequently used files, folders, and websites.&lt;br/&gt;&lt;br/&gt;Note: The system saves document shortcuts in the user profile in the System-drive\Users\User-name\Recent folder.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Remove Recent Items menu from Start Menu&amp;quot; and &amp;quot;Clear history of recently opened documents on exit&amp;quot; policies in this folder.&lt;br/&gt;&lt;br/&gt;If you enable this setting but do not enable the &amp;quot;Remove Recent Items menu from Start Menu&amp;quot; setting, the Recent Items menu appears on the Start menu, but it is empty.&lt;br/&gt;&lt;br/&gt;If you enable this setting, but then later disable it or set it to Not Configured, the document shortcuts saved before the setting was enabled reappear in the Recent Items menu and program File menus, and Jump Lists.&lt;br/&gt;&lt;br/&gt;This setting does not hide or prevent the user from pinning files, folders, or websites to the Jump Lists. See the &amp;quot;Do not allow pinning items in Jump Lists&amp;quot; setting. This policy also does not hide Tasks that the application has provided for their Jump List. This setting does not hide document shortcuts displayed in the Open dialog box. See the &amp;quot;Hide the dropdown list of recent files&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Note: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="At least Windows 2000">Do not keep history of recently opened documents</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not search communications" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy the start menu search box will not search for communications.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, the start menu will search for communications, unless the user chooses not to in the start menu control panel." gpmc_supported="Windows Server 2008, Windows 7, and Windows Vista">Do not search communications</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not search for files" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy setting the Start menu search box will not search for files.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Start menu will search for files, unless the user chooses not to do so directly in Control Panel.  If you enable this policy, a &amp;quot;See more results&amp;quot; / &amp;quot;Search Everywhere&amp;quot; link will not be shown when the user performs a search in the start menu search box." gpmc_supported="Windows Server 2008, Windows 7, and Windows Vista">Do not search for files</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not search Internet" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy the start menu search box will not search for internet history or favorites.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, the start menu will search for for internet history or favorites, unless the user chooses not to in the start menu control panel." gpmc_supported="Windows Server 2008 and Windows Vista">Do not search Internet</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not search programs and Control Panel items" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy setting the Start menu search box will not search for programs or Control Panel items.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Start menu search box will search for programs and Control Panel items, unless the user chooses not to do so directly in Control Panel." gpmc_supported="Windows Server 2008, Windows 7, and Windows Vista">Do not search programs and Control Panel items</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Force classic Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This setting affects the presentation of the Start menu.&lt;br/&gt;&lt;br/&gt;The classic Start menu in Windows 2000 Professional allows users to begin common tasks, while the new Start menu consolidates common items onto one menu. When the classic Start menu is used, the following icons are placed on the desktop: Documents, Pictures, Music, Computer, and Network. The new Start menu starts them directly.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Start menu displays the classic Start menu in the Windows 2000 style and displays the standard desktop icons.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the Start menu only displays in the new style, meaning the desktop icons are now on the Start page.&lt;br/&gt;&lt;br/&gt;If you do not configure this setting, the default is the new style, and the user can change the view." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows Vista, and Windows XP">Force classic Start Menu</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Force Start to be either full screen size or menu size" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy and set it to Start menu or full screen Start, Start will be that size and users will be unable to change the size of Start in Settings.&lt;br/&gt;&lt;br/&gt;If you disable or don’t configure this policy setting, Windows will automatically select the size based on hardware form factor and users will be able to change the size of Start in Settings." gpmc_supported="At least Windows Server 2016 or Windows 10">Force Start to be either full screen size or menu size</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Choose one of the following sizes</td><td>Start menu</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Gray unavailable Windows Installer programs Start Menu shortcuts" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Displays Start menu shortcuts to partially installed programs in gray text.&lt;br/&gt;&lt;br/&gt;This setting makes it easier for users to distinguish between programs that are fully installed and those that are only partially installed.&lt;br/&gt;&lt;br/&gt;Partially installed programs include those that a system administrator assigns using Windows Installer and those that users have configured for full installation upon first use.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, all Start menu shortcuts appear as black text.&lt;br/&gt;&lt;br/&gt;Note: Enabling this setting can make the Start menu slow to open." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, and Windows 2000">Gray unavailable Windows Installer programs Start Menu shortcuts</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changes to Taskbar and Start Menu Settings" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to prevent changes to Taskbar and Start Menu Settings.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, The user will be prevented from opening the Taskbar Properties dialog box.&lt;br/&gt;&lt;br/&gt;If the user right-clicks the taskbar and then clicks Properties, a message appears explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Taskbar and Start Menu items are available from Settings on the Start menu." gpmc_supported="At least Windows 2000">Prevent changes to Taskbar and Start Menu Settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent grouping of taskbar items" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This setting affects the taskbar buttons used to switch between running programs.&lt;br/&gt;&lt;br/&gt;Taskbar grouping consolidates similar applications when there is no room on the taskbar. It kicks in when the user&amp;#39;s taskbar is full.&lt;br/&gt;&lt;br/&gt;If you enable this setting, it prevents the taskbar from grouping items that share the same program name. By default, this setting is always enabled.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure it, items on the taskbar that share the same program are grouped together. The users have the option to disable grouping if they choose." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Prevent grouping of taskbar items</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent users from adding or removing toolbars" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to prevent users from adding or removing toolbars.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user is not allowed to add or remove any toolbars to the taskbar. Applications are not able to add toolbars either.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the users and applications are able to add toolbars to the taskbar." gpmc_supported="At least Windows Vista">Prevent users from adding or removing toolbars</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent users from customizing their Start Screen" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to prevent users from changing their Start screen layout.&lt;br/&gt;&lt;br/&gt;If you enable this setting, you will prevent a user from selecting an app, resizing a tile, pinning/unpinning a tile or a secondary tile, entering the customize mode and rearranging tiles within Start and Apps.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, you will allow a user to select an app, resize a tile, pin/unpin a tile or a secondary tile, enter the customize mode and rearrange tiles within Start and Apps." gpmc_supported="At least Windows 2000">Prevent users from customizing their Start Screen</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent users from moving taskbar to another screen dock location" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to prevent users from moving taskbar to another screen dock location.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users are not able to drag their taskbar to another area of the monitor(s).&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users are able to drag their taskbar to another area of the monitor unless prevented by another policy setting." gpmc_supported="At least Windows Vista">Prevent users from moving taskbar to another screen dock location</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent users from rearranging toolbars" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to prevent users from rearranging toolbars.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users are not able to drag or drop toolbars to the taskbar.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users are able to rearrange the toolbars on the taskbar." gpmc_supported="At least Windows Vista">Prevent users from rearranging toolbars</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent users from uninstalling applications from Start" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this setting, users cannot uninstall apps from Start.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, users can access the uninstall command from Start" gpmc_supported="At least Windows Server 2012, Windows 8 or Windows RT">Prevent users from uninstalling applications from Start</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove access to the context menus for the taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove access to the context menus for the taskbar.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the menus that appear when you right-click the taskbar and items on the taskbar are hidden, such as the Start button, the clock, and the taskbar buttons.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the context menus for the taskbar are available.&lt;br/&gt;&lt;br/&gt;This policy setting does not prevent users from using other methods to issue the commands that appear on these menus." gpmc_supported="At least Windows 2000">Remove access to the context menus for the taskbar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove All Programs list from the Start menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this setting, the Start Menu will either collapse or remove the all apps list from the Start menu.&lt;br/&gt;&lt;br/&gt;Selecting &amp;quot;Collapse&amp;quot; will not display the app list next to the pinned tiles in Start. An &amp;quot;All apps&amp;quot; button will be displayed on Start to open the all apps list. This is equivalent to setting the &amp;quot;Show app list in Start&amp;quot; in Settings to Off.&lt;br/&gt;&lt;br/&gt;Selecting &amp;quot;Collapse and disable setting&amp;quot; will do the same as the collapse option and disable the &amp;quot;Show app list in Start menu&amp;quot; in Settings, so users cannot turn it to On.&lt;br/&gt;&lt;br/&gt;Selecting &amp;quot;Remove and disable setting&amp;quot; will remove the all apps list from Start and disable the &amp;quot;Show app list in Start menu&amp;quot; in Settings, so users cannot turn it to On. Select this option for compatibility with earlier versions of Windows.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the all apps list will be visible by default, and the user can change &amp;quot;Show app list in Start&amp;quot; in Settings." gpmc_supported="At least Windows Server 2016, Windows 10">Remove All Programs list from the Start menu</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Choose one of the following actions</td><td>Remove and disable setting</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Balloon Tips on Start Menu items" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Hides pop-up text on the Start menu and in the notification area.&lt;br/&gt;&lt;br/&gt;When you hold the cursor over an item on the Start menu or in the notification area, the system displays pop-up text providing additional information about the object.&lt;br/&gt;&lt;br/&gt;If you enable this setting, some of this pop-up text is not displayed. The pop-up text affected by this setting includes &amp;quot;Click here to begin&amp;quot; on the Start button, &amp;quot;Where have all my programs gone&amp;quot; on the Start menu, and &amp;quot;Where have my icons gone&amp;quot; in the notification area.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, all pop-up text is displayed on the Start menu and in the notification area." gpmc_supported="Windows Server 2003 and Windows XP only">Remove Balloon Tips on Start Menu items</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove common program groups from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes items in the All Users profile from the Programs menu on the Start menu.&lt;br/&gt;&lt;br/&gt;By default, the Programs menu contains items from the All Users profile and items from the user&amp;#39;s profile. If you enable this setting, only items in the user&amp;#39;s profile appear in the Programs menu.&lt;br/&gt;&lt;br/&gt;Tip: To see the Program menu items in the All Users profile, on the system drive, go to ProgramData\Microsoft\Windows\Start Menu\Programs." gpmc_supported="At least Windows 2000">Remove common program groups from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Default Programs link from the Start menu." gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Default Programs link from the Start menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Default Programs link is removed from the Start menu.&lt;br/&gt;&lt;br/&gt;Clicking the Default Programs link from the Start menu opens the Default Programs control panel and provides administrators the ability to specify default programs for certain activities, such as Web browsing or sending e-mail, as well as which programs are accessible from the Start menu, desktop, and other locations.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Default Programs link is available from the Start menu.&lt;br/&gt;&lt;br/&gt;Note: This policy setting does not prevent the Set Default Programs for This Computer option from appearing in the Default Programs control panel." gpmc_supported="Windows Server 2012 R2, Windows 8.1, Windows RT 8.1, Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP Professional Service Pack 1 and Windows 2000 Service Pack 3">Remove Default Programs link from the Start menu.</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Documents icon from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Documents icon from the Start menu and its submenus.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Documents icon is removed from the Start menu and its submenus. Enabling this policy setting only removes the icon. It does not prevent the user from using other methods to gain access to the contents of the Documents folder.&lt;br/&gt;&lt;br/&gt;Note: To make changes to this policy setting effective, you must log off and then log on.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, he Documents icon is available from the Start menu.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Remove Documents icon on the desktop&amp;quot; policy setting." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, and Windows 2000">Remove Documents icon from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Downloads link from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Downloads link from the Start Menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Start Menu does not show a link to the Downloads folder.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Downloads link is available from the Start Menu." gpmc_supported="Windows Server 2008 R2 and Windows 7">Remove Downloads link from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Favorites menu from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Prevents users from adding the Favorites menu to the Start menu or classic Start menu.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Display Favorites item does not appear in the Advanced Start menu options box.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Display Favorite item is available.&lt;br/&gt;&lt;br/&gt;Note:The Favorities menu does not appear on the Start menu by default. To display the Favorites menu, right-click Start, click Properties, and then click Customize.  If you are using Start menu, click the Advanced tab, and then, under Start menu items, click the Favorites menu. If you are using the classic Start menu, click Display Favorites under Advanced Start menu options.&lt;br/&gt;&lt;br/&gt;Note:The items that appear in the Favorites menu when you install Windows are preconfigured by the system to appeal to most users. However, users can add and remove items from this menu, and system administrators can create a customized Favorites menu for a user group.&lt;br/&gt;&lt;br/&gt;Note:This setting only affects the Start menu. The Favorites item still appears in File Explorer and in Internet Explorer." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, and Windows 2000">Remove Favorites menu from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Games link from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy the start menu will not show a link to the Games folder.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, the start menu will show a link to the Games folder, unless the user chooses to remove it in the start menu control panel." gpmc_supported="Windows Server 2008, Windows 7, and Windows Vista">Remove Games link from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Help menu from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Help command from the Start menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Help command is removed from the Start menu.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Help command is available from the Start menu.&lt;br/&gt;&lt;br/&gt;This policy setting only affects the Start menu. It does not remove the Help menu from File Explorer and does not prevent users from running Help." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, and Windows 2000">Remove Help menu from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Homegroup link from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy the Start menu will not show a link to Homegroup. It also removes the homegroup item from the Start Menu options. As a result, users cannot add the homegroup link to the Start Menu.&lt;br/&gt;&lt;br/&gt;      If you disable or do not configure this policy, users can use the Start Menu options to add or remove the homegroup link from the Start Menu." gpmc_supported="Windows Server 2008 R2 and Windows 7">Remove Homegroup link from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove links and access to Windows Update" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove links and access to Windows Update.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users are prevented from connecting to the Windows Update Web site.&lt;br/&gt;&lt;br/&gt;Enabling this policy setting blocks user access to the Windows Update Web site at http://windowsupdate.microsoft.com. Also, the policy setting removes the Windows Update hyperlink from the Start menu and from the Tools menu in Internet Explorer.&lt;br/&gt;&lt;br/&gt;Windows Update, the online extension of Windows, offers software updates to keep a user’s system up-to-date. The Windows Update Product Catalog determines any system files, security fixes, and Microsoft updates that users need and shows the newest versions available for download.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Windows Update hyperlink is available from the Start menu and from the Tools menu in Internet Explorer.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Hide the &amp;quot;Add programs from Microsoft&amp;quot; option&amp;quot; policy setting." gpmc_supported="At least Windows 2000 through Windows 8.1 or Windows Server 2012 R2">Remove links and access to Windows Update</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Music icon from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Music icon from Start Menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Music icon is no longer available from Start Menu.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Music icon is available from Start Menu." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, and Windows XP">Remove Music icon from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Network Connections from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove Network Connections from the Start Menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users are prevented from running Network Connections.&lt;br/&gt;&lt;br/&gt;Enabling this policy setting prevents the Network Connections folder from opening. This policy setting also removes Network Connections from Settings on the Start menu.&lt;br/&gt;&lt;br/&gt;Network Connections still appears in Control Panel and in File Explorer, but if users try to start it, a message appears explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Network Connections is available from the Start Menu.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Disable programs on Settings menu&amp;quot; and &amp;quot;Disable Control Panel&amp;quot; policy settings and the policy settings in the Network Connections folder (Computer Configuration and User Configuration\Administrative Templates\Network\Network Connections)." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows Vista, Windows XP, and Windows 2000">Remove Network Connections from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Network icon from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Network icon from Start Menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Network icon is no longer available from Start Menu.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Network icon is available from Start Menu." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, and Windows XP">Remove Network icon from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Notifications and Action Center" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting removes Notifications and Action Center from the notification area on the taskbar.&lt;br/&gt;&lt;br/&gt;The notification area is located at the far right end of the taskbar and includes icons for current notifications and the system clock.&lt;br/&gt;&lt;br/&gt;If this setting is enabled, Notifications and Action Center is not displayed in the notification area. The user will be able to read notifications when they appear, but they won’t be able to review any notifications they miss.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Notification and Security and Maintenance will be displayed on the taskbar.&lt;br/&gt;&lt;br/&gt;A reboot is required for this policy setting to take effect." gpmc_supported="At least Windows Server 2016, Windows 10">Remove Notifications and Action Center</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Pictures icon from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Pictures icon from Start Menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Pictures icon is no longer available from Start Menu.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Pictures icon is available from Start Menu." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, and Windows XP">Remove Pictures icon from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove pinned programs from the Taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove pinned programs from the taskbar.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, pinned programs are prevented from being shown on the Taskbar. Users cannot pin programs to the Taskbar.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can pin programs so that the program shortcuts stay on the Taskbar." gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Remove pinned programs from the Taskbar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove programs on Settings menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove programs on Settings menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Control Panel, Printers, and Network and Connection folders are removed from Settings on the Start menu, and from Computer and File Explorer. It also prevents the programs represented by these folders (such as Control.exe) from running.&lt;br/&gt;&lt;br/&gt;However, users can still start Control Panel items by using other methods, such as right-clicking the desktop to start Display or right-clicking Computer to start System.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Control Panel, Printers, and Network and Connection folders from Settings are available on the Start menu, and from Computer and File Explorer.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Disable Control Panel,&amp;quot; &amp;quot;Disable Display in Control Panel,&amp;quot; and &amp;quot;Remove Network Connections from Start Menu&amp;quot; policy settings." gpmc_supported="Windows Server 2012 R2, Windows 8.1, Windows RT 8.1, Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, and Windows 2000">Remove programs on Settings menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Recorded TV link from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Recorded TV link from the Start Menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Start Menu does not show a link to the Recorded TV library.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Recorded TV link is available from the Start Menu." gpmc_supported="Windows Server 2008 R2 and Windows 7">Remove Recorded TV link from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Run menu from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Allows you to remove the Run command from the Start menu, Internet Explorer, and Task Manager.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the following changes occur:&lt;br/&gt;&lt;br/&gt;(1) The Run command is removed from the Start menu.&lt;br/&gt;&lt;br/&gt;(2) The New Task (Run) command is removed from Task Manager.&lt;br/&gt;&lt;br/&gt;(3) The user will be blocked from entering the following into the Internet Explorer Address Bar:&lt;br/&gt;&lt;br/&gt;--- A UNC path: \\&amp;lt;server&amp;gt;\&amp;lt;share&amp;gt;&lt;br/&gt;&lt;br/&gt;---Accessing local drives:  e.g., C:&lt;br/&gt;&lt;br/&gt;--- Accessing local folders: e.g., \temp&amp;gt;&lt;br/&gt;&lt;br/&gt;Also, users with extended keyboards will no longer be able to display the Run dialog box by pressing the Application key (the key with the Windows logo) + R.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, users will be able to access the Run command in the Start menu and in Task Manager and use the Internet Explorer Address Bar.&lt;br/&gt;&lt;br/&gt;&lt;br/&gt;&lt;br/&gt;Note:This setting affects the specified interface only. It does not prevent users from using other methods to run programs.&lt;br/&gt;&lt;br/&gt;Note: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="Windows Server 2012 R2, Windows 8.1, Windows RT 8.1, Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, and Windows 2000">Remove Run menu from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Search Computer link" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy, the &amp;quot;See all results&amp;quot; link will not be shown when the user performs a search in the start menu search box.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, the &amp;quot;See all results&amp;quot; link will be shown when the user performs a search in the start menu search box." gpmc_supported="Windows Vista only">Remove Search Computer link</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Search link from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Search link from the Start menu, and disables some File Explorer search elements.  Note that this does not remove the search box from the new style Start menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Search item is removed from the Start menu and from the context menu that appears when you right-click the Start menu. Also, the system does not respond when users press the Application key (the key with the Windows logo)+ F.&lt;br/&gt;&lt;br/&gt;Note: Enabling this policy setting also prevents the user from using the F3 key.&lt;br/&gt;&lt;br/&gt;In File Explorer, the Search item still appears on the Standard buttons toolbar, but the system does not respond when the user presses Ctrl+F. Also, Search does not appear in the context menu when you right-click an icon representing a drive or a folder.&lt;br/&gt;&lt;br/&gt;This policy setting affects the specified user interface elements only. It does not affect Internet Explorer and does not prevent the user from using other methods to search.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Search link is available from the Start menu." gpmc_supported="Windows Server 2003 and Windows XP only">Remove Search link from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove See More Results / Search Everywhere link" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="&lt;br/&gt;          If you enable this policy, a &amp;quot;See more results&amp;quot; / &amp;quot;Search Everywhere&amp;quot; link will not be shown when the user performs a search in the start menu search box.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, a &amp;quot;See more results&amp;quot; link will be shown when the user performs a search in the start menu search box.  If a 3rd party protocol handler is installed, a &amp;quot;Search Everywhere&amp;quot; link will be shown instead of the &amp;quot;See more results&amp;quot; link." gpmc_supported="At least Windows Server 2008 R2 or Windows 7. Not supported on Windows 10 or later">Remove See More Results / Search Everywhere link</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove the People Bar from the taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy allows you to remove the People Bar from the taskbar and disables the My People experience.&lt;br/&gt;&lt;br/&gt;If you enable this policy the people icon will be removed from the taskbar, the corresponding settings toggle is removed from the taskbar settings page, and users will not be able to pin people to the taskbar." gpmc_supported="At least Windows Server 2016, Windows 10 Version 1703">Remove the People Bar from the taskbar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove the Security and Maintenance icon" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove Security and Maintenance from the system control area.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Security and Maintenance icon is not displayed in the system notification area.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Security and Maintenance icon is displayed in the system notification area." gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Remove the Security and Maintenance icon</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove user folder link from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy the start menu will not show a link to the user&amp;#39;s storage folder.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, the start menu will display a link, unless the user chooses to remove it in the start menu control panel." gpmc_supported="Windows Server 2008, Windows 7, and Windows Vista">Remove user folder link from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove user&amp;#39;s folders from the Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Hides all folders on the user-specific (top) section of the Start menu. Other items appear, but folders are hidden.&lt;br/&gt;&lt;br/&gt;This setting is designed for use with redirected folders. Redirected folders appear on the main (bottom) section of the Start menu. However, the original, user-specific version of the folder still appears on the top section of the Start menu. Because the appearance of two folders with the same name might confuse users, you can use this setting to hide user-specific folders.&lt;br/&gt;&lt;br/&gt;Note that this setting hides all user-specific folders, not just those associated with redirected folders.&lt;br/&gt;&lt;br/&gt;If you enable this setting, no folders appear on the top section of the Start menu. If users add folders to the Start Menu directory in their user profiles, the folders appear in the directory but not on the Start menu.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configured it, Windows 2000 Professional and Windows XP Professional display folders on both sections of the Start menu." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, Windows XP, Windows 2000, and Windows 10">Remove user&#39;s folders from the Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Videos link from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Videos link from the Start Menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Start Menu does not show a link to the Videos library.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Videos link is available from the Start Menu." gpmc_supported="Windows Server 2008 R2 and Windows 7">Remove Videos link from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Search just apps from the Apps view" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting prevents the user from searching apps, files, settings (and the web if enabled) when the user searches from the Apps view.&lt;br/&gt;&lt;br/&gt;This policy setting is only applied when the Apps view is set as the default view for Start.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, searching from the Apps view will only search the list of installed apps.&lt;br/&gt;&lt;br/&gt;If you disable or don’t configure this policy setting, the user can configure this setting." gpmc_supported="Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1 only">Search just apps from the Apps view</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Show &amp;quot;Run as different user&amp;quot; command on Start" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting shows or hides the &amp;quot;Run as different user&amp;quot; command on the Start application bar.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users can access the &amp;quot;Run as different user&amp;quot; command from Start for applications which support this functionality.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, users cannot access the &amp;quot;Run as different user&amp;quot; command from Start for any applications.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent users from using other methods, such as the shift right-click menu on application&amp;#39;s jumplists in the taskbar to issue the &amp;quot;Run as different user&amp;quot; command." gpmc_supported="At least Windows Server 2012, Windows 8 or Windows RT">Show &quot;Run as different user&quot; command on Start</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Show QuickLaunch on Taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting controls whether the QuickLaunch bar is displayed in the Taskbar.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the QuickLaunch bar will be visible and cannot be turned off.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the QuickLaunch bar will be hidden and cannot be turned on.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, then users will be able to turn the QuickLaunch bar on and off." gpmc_supported="Windows Vista only">Show QuickLaunch on Taskbar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Show the Apps view automatically when the user goes to Start" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows the Apps view to be opened by default when the user goes to Start.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Apps view will appear whenever the user goes to Start.  Users will still be able to switch between the Apps view and the Start screen.&lt;br/&gt;&lt;br/&gt;If you disable or don’t configure this policy setting, the Start screen will appear by default whenever the user goes to Start, and the user will be able to switch between the Apps view and the Start screen. Also, the user will be able to configure this setting." gpmc_supported="Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1 only">Show the Apps view automatically when the user goes to Start</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Show Windows Store apps on the taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="&lt;br/&gt;This policy setting allows users to see Windows Store apps on the taskbar.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users will see Windows Store apps on the taskbar.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, users won’t see Windows Store apps on the taskbar.&lt;br/&gt;&lt;br/&gt;If you don’t configure this policy setting, the default setting for the user’s device will be used, and the user can choose to change it." gpmc_supported="At least Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1">Show Windows Store apps on the taskbar</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Start Layout" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Specifies the Start layout for users.&lt;br/&gt;&lt;br/&gt;This setting lets you specify the Start layout for users and prevents them from changing its configuration. The Start layout you specify must be stored in an XML file that was generated by the Export-StartLayout PowerShell cmdlet.&lt;br/&gt;To use this setting, you must first manually configure a device&amp;#39;s Start layout to the desired look and feel. Once you are done, run the Export-StartLayout PowerShell cmdlet on that same device. The cmdlet will generate an XML file representing the layout you configured.&lt;br/&gt;&lt;br/&gt;Once the XML file is generated and moved to the desired file path, type the fully qualified path and name of the XML file. You can type a local path, such as C:\StartLayouts\myLayout.xml or a UNC path, such as \\Server\Share\Layout.xml. If the specified file is not available when the user logs on, the layout won&amp;#39;t be changed. Users cannot customize their Start screen while this setting is enabled.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Start screen layout won&amp;#39;t be changed and users will be able to customize it." gpmc_supported="At least Windows Server 2016, Windows 10">Start Layout</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Start Layout File</td><td>\\emea.tpg.ads\MK\Skopje\Public\Start.xml</td></tr>
<tr><td>Reapply layout at every logon</td><td>&nbsp;</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off all balloon notifications" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to turn off all notification balloons.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, no notification balloons are shown to the user.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, notification balloons are shown to the user." gpmc_supported="At least Windows Vista">Turn off all balloon notifications</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off automatic promotion of notification icons to the taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to turn off automatic promotion of notification icons to the taskbar.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, newly added notification icons are not temporarily promoted to the Taskbar. Users can still configure icons to be shown or hidden in the Notification Control Panel.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, newly added notification icons are temporarily promoted to the Taskbar." gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Turn off automatic promotion of notification icons to the taskbar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off feature advertisement balloon notifications" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to turn off feature advertisement balloon notifications.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, certain notification balloons that are marked as feature advertisements are not shown.&lt;br/&gt;&lt;br/&gt;If you disable do not configure this policy setting, feature advertisement balloons are shown." gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Turn off feature advertisement balloon notifications</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off notification area cleanup" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This setting affects the notification area, also called the &amp;quot;system tray.&amp;quot;&lt;br/&gt;&lt;br/&gt;The notification area is located in the task bar, generally at the bottom of the screen, and it includes the clock and current notifications. This setting determines whether the items are always expanded or always collapsed. By default, notifications are collapsed. The notification cleanup &amp;lt;&amp;lt; icon can be referred to as the &amp;quot;notification chevron.&amp;quot;&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system notification area expands to show all of the notifications that use this area.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the system notification area will always collapse notifications.&lt;br/&gt;&lt;br/&gt;If you do not configure it, the user can choose if they want notifications collapsed." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Turn off notification area cleanup</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Start Menu and Taskbar/Notifications</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off tile notifications" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar/Notifications" gpmc_settingDescription="&lt;br/&gt;          This policy setting turns off tile notifications.&lt;br/&gt;&lt;br/&gt;          If you enable this policy setting, applications and system features will not be able to update their tiles and tile badges in the Start screen.&lt;br/&gt;&lt;br/&gt;          If you disable or do not configure this policy setting, tile and badge notifications are enabled and can be turned off by the administrator or user.&lt;br/&gt;&lt;br/&gt;          No reboots or service restarts are required for this policy setting to take effect.&lt;br/&gt;      " gpmc_supported="At least Windows Server 2012, Windows 8 or Windows RT">Turn off tile notifications</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off toast notifications" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar/Notifications" gpmc_settingDescription="&lt;br/&gt;          This policy setting turns off toast notifications for applications.&lt;br/&gt;&lt;br/&gt;          If you enable this policy setting, applications will not be able to raise toast notifications.&lt;br/&gt;&lt;br/&gt;          Note that this policy does not affect taskbar notification balloons.&lt;br/&gt;&lt;br/&gt;          Note that Windows system features are not affected by this policy.  You must enable/disable system features individually to stop their ability to raise toast notifications.&lt;br/&gt;&lt;br/&gt;          If you disable or do not configure this policy setting, toast notifications are enabled and can be turned off by the administrator or user.&lt;br/&gt;&lt;br/&gt;          No reboots or service restarts are required for this policy setting to take effect.&lt;br/&gt;      " gpmc_supported="At least Windows Server 2012, Windows 8 or Windows RT">Turn off toast notifications</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not display the Getting Started welcome screen at logon" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="This policy setting hides the welcome screen that is displayed on Windows 2000 Professional each time the user logs on.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the welcome screen is hidden from the user logging on to a computer where this policy is applied.&lt;br/&gt;&lt;br/&gt;Users can still display the welcome screen by selecting it on the Start menu or by typing &amp;quot;&amp;quot;Welcome&amp;quot;&amp;quot; in the Run dialog box.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, the welcome screen is displayed each time a user logs on to the computer.&lt;br/&gt;&lt;br/&gt;This setting applies only to Windows 2000 Professional. It does not affect the &amp;quot;&amp;quot;Configure Your Server on a Windows 2000 Server&amp;quot;&amp;quot; screen on Windows 2000 Server.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Tip: To display the welcome screen, click Start, point to Programs, point to Accessories, point to System Tools, and then click &amp;quot;&amp;quot;Getting Started.&amp;quot;&amp;quot; To suppress the welcome screen without specifying a setting, clear the &amp;quot;&amp;quot;Show this screen at startup&amp;quot;&amp;quot; check box on the welcome screen." gpmc_supported="Windows 2000 only">Do not display the Getting Started welcome screen at logon</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Don&amp;#39;t run specified Windows applications" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="Prevents Windows from running the programs you specify in this policy setting.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users cannot run programs that you add to the list of disallowed applications.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting or do not configure it, users can run any programs.&lt;br/&gt;&lt;br/&gt;This policy setting only prevents users from running programs that are started by the File Explorer process. It does not prevent users from running programs, such as Task Manager, which are started by the system process or by other processes.  Also, if users have access to the command prompt (Cmd.exe), this policy setting does not prevent them from starting programs in the command window even though they would be prevented from doing so using File Explorer.&lt;br/&gt;&lt;br/&gt;Note: Non-Microsoft applications with Windows 2000 or later certification are required to comply with this policy setting.&lt;br/&gt;Note: To create a list of allowed applications, click Show.  In the Show Contents dialog box, in the Value column, type the application executable name (e.g., Winword.exe, Poledit.exe, Powerpnt.exe)." gpmc_supported="At least Windows 2000">Don&#39;t run specified Windows applications</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td colspan="2"><table class="subtable" >
<tr><th scope="col">List of disallowed applications</th></tr>
<tr><td>cmd.exe</td></tr>
<tr><td>HELPCTR.EXE</td></tr>
<tr><td>helppane.exe</td></tr>
<tr><td>msimn.exe</td></tr>
<tr><td>notepad.exe</td></tr>
<tr><td>paint.exe</td></tr>
<tr><td>powershell.exe</td></tr>
<tr><td>powershell_ise.exe</td></tr>
<tr><td>Winhlp32.exe</td></tr>
<tr><td>wmplayer.exe</td></tr>
<tr><td>wordpad.exe</td></tr>
<tr><td>wmplayer.exe</td></tr>
<tr><td>mspaint.exe</td></tr>
<tr><td>StikyNot.exe</td></tr>
</table></td></tr></table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent access to registry editing tools" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="Disables the Windows registry editor Regedit.exe.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting and the user tries to start Regedit.exe, a message appears explaining that a policy setting prevents the action.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting or do not configure it, users can run Regedit.exe normally.&lt;br/&gt;&lt;br/&gt;To prevent users from using other administrative tools, use the &amp;quot;Run only specified Windows applications&amp;quot; policy setting." gpmc_supported="At least Windows 2000">Prevent access to registry editing tools</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Disable regedit from running silently?</td><td>No</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent access to the command prompt" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="This policy setting prevents users from running the interactive command prompt, Cmd.exe.  This policy setting also determines whether batch files (.cmd and .bat) can run on the computer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting and the user tries to open a command window, the system displays a message explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting or do not configure it, users can run Cmd.exe and batch files normally.&lt;br/&gt;&lt;br/&gt;Note: Do not prevent the computer from running batch files if the computer uses logon, logoff, startup, or shutdown batch file scripts, or for users that use Remote Desktop Services." gpmc_supported="At least Windows 2000">Prevent access to the command prompt</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Disable the command prompt script processing also?</td><td>No</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Restrict these programs from being launched from Help" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="&lt;br/&gt;        This policy setting allows you to restrict programs from being run from online Help.&lt;br/&gt;        &lt;br/&gt;        If you enable this policy setting, you can prevent specified programs from being run from Help. When you enable this policy setting, enter the file names names of the programs you want to restrict, separated by commas.&lt;br/&gt;        &lt;br/&gt;        If you disable or do not configure this policy setting, users can run all applications from online Help.&lt;br/&gt;        &lt;br/&gt;        Note: You can also restrict users from running applications by using the Software Restriction Policy settings available in Computer Configuration\Security Settings.&lt;br/&gt;        &lt;br/&gt;        Note: This policy setting is available under Computer Configuration and User Configuration. If both are settings are used, any programs listed in either of these locations cannot launched from Help&lt;br/&gt;      " gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Restrict these programs from being launched from Help</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Enter executables separated by commas:</td><td>paint.exe,powershell.exe,cmd.exe,notepad.exe</td></tr>
<tr><td colspan="2">Example: calc.exe,paint.exe</td></tr></table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Ctrl+Alt+Del Options</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Task Manager" gpmc_settingPath="User Configuration/Administrative Templates/System/Ctrl+Alt+Del Options" gpmc_settingDescription="This policy setting prevents users from starting Task Manager.&lt;br/&gt;&lt;br/&gt;Task Manager (taskmgr.exe) lets users start and stop programs; monitor the performance of their computers; view and monitor all programs running on their computers, including system services; find the executable names of programs; and change the priority of the process in which programs run.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users will not be able to access Task Manager. If users try to start Task Manager, a message appears explaining that a policy prevents the action.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can access Task Manager to  start and stop programs, monitor the performance of their computers, view and monitor all programs running on their computers, including system services, find the executable names of programs, and change the priority of the process in which programs run." gpmc_supported="At least Windows 2000">Remove Task Manager</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Internet Communication Management</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Restrict Internet communication" gpmc_settingPath="User Configuration/Administrative Templates/System/Internet Communication Management" gpmc_settingDescription="This policy setting specifies whether Windows can access the Internet to accomplish tasks that require Internet resources.&lt;br/&gt;&lt;br/&gt;If you enable this setting, all of the the policy settings listed in the &amp;quot;Internet Communication settings&amp;quot; section are set such that their respective features cannot access the Internet.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, all of the the policy settings listed in the &amp;quot;Internet Communication settings&amp;quot; section are set such that their respective features can access the Internet.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, all of the the policy settings in the &amp;quot;Internet Communication settings&amp;quot; section are set to not configured." gpmc_supported="At least Windows XP Professional with SP2">Restrict Internet communication</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Internet Communication Management/Internet Communication settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off downloading of print drivers over HTTP" gpmc_settingPath="User Configuration/Administrative Templates/System/Internet Communication Management/Internet Communication settings" gpmc_settingDescription="This policy setting specifies whether to allow this client to download print driver packages over HTTP.&lt;br/&gt;&lt;br/&gt;To set up HTTP printing, non-inbox drivers need to be downloaded over HTTP.&lt;br/&gt;&lt;br/&gt;Note: This policy setting does not prevent the client from printing to printers on the Intranet or the Internet over HTTP.  It only prohibits downloading drivers that are not already installed locally.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, print drivers cannot be downloaded over HTTP.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can download print drivers over HTTP." gpmc_supported="At least Windows XP Professional with SP2">Turn off downloading of print drivers over HTTP</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off handwriting personalization data sharing" gpmc_settingPath="User Configuration/Administrative Templates/System/Internet Communication Management/Internet Communication settings" gpmc_settingDescription="Turns off data sharing from the handwriting recognition personalization tool.&lt;br/&gt;&lt;br/&gt;The handwriting recognition personalization tool tool enables Tablet PC users to adapt handwriting recognition to their own writing style by providing writing samples. The tool can optionally share user writing samples with Microsoft to improve handwriting recognition in future versions of Windows. The tool generates reports and transmits them to Microsoft over a secure connection.&lt;br/&gt;&lt;br/&gt;If you enable this policy, Tablet PC users cannot choose to share writing samples from the handwriting recognition personalization tool with Microsoft.&lt;br/&gt;&lt;br/&gt;If you disable this policy, Tablet PC user writing samples from the handwriting recognition personalization tool will automatically be shared with Microsoft.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy, Tablet PC users can choose whether or not they want to share their writing samples from the handwriting recognition personalization tool with Microsoft." gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Turn off handwriting personalization data sharing</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off handwriting recognition error reporting" gpmc_settingPath="User Configuration/Administrative Templates/System/Internet Communication Management/Internet Communication settings" gpmc_settingDescription="Turns off the handwriting recognition error reporting tool.&lt;br/&gt;&lt;br/&gt;The handwriting recognition error reporting tool enables users to report errors encountered in Tablet PC Input Panel. The tool generates error reports and transmits them to Microsoft over a secure connection. Microsoft uses these error reports to improve handwriting recognition in future versions of Windows.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users cannot start the handwriting recognition error reporting tool or send error reports to Microsoft.&lt;br/&gt;&lt;br/&gt;If you disable this policy, Tablet PC users can report handwriting recognition errors to Microsoft.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy Tablet PC users can report handwriting recognition errors to Microsoft." gpmc_supported="At least Windows Vista">Turn off handwriting recognition error reporting</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Help Experience Improvement Program" gpmc_settingPath="User Configuration/Administrative Templates/System/Internet Communication Management/Internet Communication settings" gpmc_settingDescription="This policy setting specifies whether users can participate in the Help Experience Improvement program. The Help Experience Improvement program collects information about how customers use Windows Help so that Microsoft can improve it.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users cannot participate in the Help Experience Improvement program.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can turn on the Help Experience Improvement program feature from the Help and Support settings page." gpmc_supported="At least Windows Vista">Turn off Help Experience Improvement Program</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Help Ratings" gpmc_settingPath="User Configuration/Administrative Templates/System/Internet Communication Management/Internet Communication settings" gpmc_settingDescription="This policy setting specifies whether users can provide ratings for Help content.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, ratings controls are not added to Help content.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, ratings controls are added to Help topics.&lt;br/&gt;&lt;br/&gt;Users can use the control to provide feedback on the quality and usefulness of the Help and Support content." gpmc_supported="At least Windows Vista">Turn off Help Ratings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Internet download for Web publishing and online ordering wizards" gpmc_settingPath="User Configuration/Administrative Templates/System/Internet Communication Management/Internet Communication settings" gpmc_settingDescription="This policy setting specifies whether Windows should download a list of providers for the web publishing and online ordering wizards.&lt;br/&gt;&lt;br/&gt;These wizards allow users to select from a list of companies that provide services such as online storage and photographic printing. By default, Windows displays providers downloaded from a Windows website in addition to providers specified in the registry.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows does not download providers, and only the service providers that are cached in the local registry are displayed.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, a list of providers are downloaded when the user uses the web publishing or online ordering wizards.&lt;br/&gt;&lt;br/&gt;See the documentation for the web publishing and online ordering wizards for more information, including details on specifying service providers in the registry." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional with SP2">Turn off Internet download for Web publishing and online ordering wizards</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Internet File Association service" gpmc_settingPath="User Configuration/Administrative Templates/System/Internet Communication Management/Internet Communication settings" gpmc_settingDescription="This policy setting specifies whether to use the Microsoft Web service for finding an application to open a file with an unhandled file association.&lt;br/&gt;&lt;br/&gt;When a user opens a file that has an extension that is not associated with any applications on the computer, the user is given the choice to select a local application or use the Web service to find an application.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the link and the dialog for using the Web service to open an unhandled file association are removed.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the user is allowed to use the Web service." gpmc_supported="Windows Server 2008, Windows Server 2003, Windows 7, Windows Vista, and Windows XP">Turn off Internet File Association service</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off printing over HTTP" gpmc_settingPath="User Configuration/Administrative Templates/System/Internet Communication Management/Internet Communication settings" gpmc_settingDescription="This policy setting specifies whether to allow printing over HTTP from this client.&lt;br/&gt;&lt;br/&gt;Printing over HTTP allows a client to print to printers on the intranet as well as the Internet.&lt;br/&gt;&lt;br/&gt;Note: This policy setting affects the client side of Internet printing only. It does not prevent this computer from acting as an Internet Printing server and making its shared printers available via HTTP.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, it prevents this client from printing to Internet printers over HTTP.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can choose to print to Internet printers over HTTP.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Web-based printing&amp;quot; policy setting in Computer Configuration/Administrative Templates/Printers." gpmc_supported="At least Windows XP Professional with SP2">Turn off printing over HTTP</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off the &amp;quot;Order Prints&amp;quot; picture task" gpmc_settingPath="User Configuration/Administrative Templates/System/Internet Communication Management/Internet Communication settings" gpmc_settingDescription="This policy setting specifies whether the &amp;quot;Order Prints Online&amp;quot; task is available from Picture Tasks in Windows folders.&lt;br/&gt;&lt;br/&gt;The Order Prints Online Wizard is used to download a list of providers and allow users to order prints online.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the task &amp;quot;Order Prints Online&amp;quot; is removed from Picture Tasks in File Explorer folders.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the task is displayed." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional with SP2">Turn off the &quot;Order Prints&quot; picture task</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off the &amp;quot;Publish to Web&amp;quot; task for files and folders" gpmc_settingPath="User Configuration/Administrative Templates/System/Internet Communication Management/Internet Communication settings" gpmc_settingDescription="This policy setting specifies whether the tasks &amp;quot;Publish this file to the Web,&amp;quot; &amp;quot;Publish this folder to the Web,&amp;quot; and &amp;quot;Publish the selected items to the Web&amp;quot; are available from File and Folder Tasks in Windows folders.&lt;br/&gt;&lt;br/&gt;The Web Publishing Wizard is used to download a list of providers and allow users to publish content to the web.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, these tasks are removed from the File and Folder tasks in Windows folders.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the tasks are shown." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional with SP2">Turn off the &quot;Publish to Web&quot; task for files and folders</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off the Windows Messenger Customer Experience Improvement Program" gpmc_settingPath="User Configuration/Administrative Templates/System/Internet Communication Management/Internet Communication settings" gpmc_settingDescription="This policy setting specifies whether Windows Messenger collects anonymous information about how Windows Messenger software and service is used.&lt;br/&gt;&lt;br/&gt;With the Customer Experience Improvement program, users can allow Microsoft to collect anonymous information about how the product is used.  This information is used to improve the product in future releases.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows Messenger does not collect usage information, and the user settings to enable the collection of usage information are not shown.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Windows Messenger collects anonymous usage information, and the setting is not shown.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, users have the choice to opt in and allow information to be collected." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional with SP2">Turn off the Windows Messenger Customer Experience Improvement Program</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Windows Online" gpmc_settingPath="User Configuration/Administrative Templates/System/Internet Communication Management/Internet Communication settings" gpmc_settingDescription="This policy setting specifies whether users can search and view content from Windows Online in Help and Support. Windows Online provides the most up-to-date Help content for Windows.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users are prevented from accessing online assistance content from Windows Online.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can access online assistance if they have a connection to the Internet and have not disabled Windows Online from the Help and Support Options page." gpmc_supported="At least Windows Vista">Turn off Windows Online</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Removable Storage Access</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="All Removable Storage classes: Deny all access" gpmc_settingPath="User Configuration/Administrative Templates/System/Removable Storage Access" gpmc_settingDescription="Configure access to all removable storage classes.&lt;br/&gt;&lt;br/&gt;This policy setting takes precedence over any individual removable storage policy settings. To manage individual classes, use the policy settings available for each class.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, no access is allowed to any removable storage class.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, write and read accesses are allowed to all removable storage classes." gpmc_supported="At least Windows Vista">All Removable Storage classes: Deny all access</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="CD and DVD: Deny read access" gpmc_settingPath="User Configuration/Administrative Templates/System/Removable Storage Access" gpmc_settingDescription="This policy setting denies read access to the CD and DVD removable storage class.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, read access is denied to this removable storage class.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, read access is allowed to this removable storage class." gpmc_supported="At least Windows Vista">CD and DVD: Deny read access</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="CD and DVD: Deny write access" gpmc_settingPath="User Configuration/Administrative Templates/System/Removable Storage Access" gpmc_settingDescription="This policy setting denies write access to the CD and DVD removable storage class.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, write access is denied to this removable storage class.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, write access is allowed to this removable storage class." gpmc_supported="At least Windows Vista">CD and DVD: Deny write access</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Floppy Drives: Deny read access" gpmc_settingPath="User Configuration/Administrative Templates/System/Removable Storage Access" gpmc_settingDescription="This policy setting denies read access to the Floppy Drives removable storage class, including USB Floppy Drives.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, read access is denied to this removable storage class.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, read access is allowed to this removable storage class." gpmc_supported="At least Windows Vista">Floppy Drives: Deny read access</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Floppy Drives: Deny write access" gpmc_settingPath="User Configuration/Administrative Templates/System/Removable Storage Access" gpmc_settingDescription="This policy setting denies write access to the Floppy Drives removable storage class, including USB Floppy Drives.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, write access is denied to this removable storage class.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, write access is allowed to this removable storage class." gpmc_supported="At least Windows Vista">Floppy Drives: Deny write access</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Removable Disks: Deny read access" gpmc_settingPath="User Configuration/Administrative Templates/System/Removable Storage Access" gpmc_settingDescription="This policy setting denies read access to removable disks.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, read access is denied to this removable storage class.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, read access is allowed to this removable storage class." gpmc_supported="At least Windows Vista">Removable Disks: Deny read access</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Removable Disks: Deny write access" gpmc_settingPath="User Configuration/Administrative Templates/System/Removable Storage Access" gpmc_settingDescription="This policy setting denies write access to removable disks.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, write access is denied to this removable storage class.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, write access is allowed to this removable storage class.&lt;br/&gt;&lt;br/&gt;Note: To require that users write data to BitLocker-protected storage, enable the policy setting &amp;quot;Deny write access to drives not protected by BitLocker,&amp;quot; which is located in &amp;quot;Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives.&amp;quot;" gpmc_supported="At least Windows Vista">Removable Disks: Deny write access</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Tape Drives: Deny read access" gpmc_settingPath="User Configuration/Administrative Templates/System/Removable Storage Access" gpmc_settingDescription="This policy setting denies read access to the Tape Drive removable storage class.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, read access is denied to this removable storage class.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, read access is allowed to this removable storage class." gpmc_supported="At least Windows Vista">Tape Drives: Deny read access</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Tape Drives: Deny write access" gpmc_settingPath="User Configuration/Administrative Templates/System/Removable Storage Access" gpmc_settingDescription="This policy setting denies write access to the Tape Drive removable storage class.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, write access is denied to this removable storage class.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, write access is allowed to this removable storage class." gpmc_supported="At least Windows Vista">Tape Drives: Deny write access</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="WPD Devices: Deny read access" gpmc_settingPath="User Configuration/Administrative Templates/System/Removable Storage Access" gpmc_settingDescription="This policy setting denies read access to removable disks, which may include media players, cellular phones, auxiliary displays, and CE devices.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, read access is denied to this removable storage class.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, read access is allowed to this removable storage class." gpmc_supported="At least Windows Vista">WPD Devices: Deny read access</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="WPD Devices: Deny write access" gpmc_settingPath="User Configuration/Administrative Templates/System/Removable Storage Access" gpmc_settingDescription="This policy setting denies write access to removable disks, which may include media players, cellular phones, auxiliary displays, and CE devices.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, write access is denied to this removable storage class.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, write access is allowed to this removable storage class." gpmc_supported="At least Windows Vista">WPD Devices: Deny write access</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Windows HotStart</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Windows HotStart" gpmc_settingPath="User Configuration/Administrative Templates/System/Windows HotStart" gpmc_settingDescription="This policy setting allows you to manage whether HotStart buttons can be used to launch applications.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, applications cannot be launched using the HotStart buttons.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, applications can be launched using the HotStart buttons." gpmc_supported="At least Windows Vista">Turn off Windows HotStart</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Add features to Windows 10</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent the wizard from running." gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Add features to Windows 10" gpmc_settingDescription="By default, Add features to Windows 10 is available for all administrators. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the wizard will not run.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting or set it to Not Configured, the wizard will run." gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Prevent the wizard from running.</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/AutoPlay Policies</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Set the default behavior for AutoRun" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/AutoPlay Policies" gpmc_settingDescription="This policy setting sets the default behavior for Autorun commands.&lt;br/&gt;&lt;br/&gt;          Autorun commands are generally stored in autorun.inf files. They often launch the installation program or other routines.&lt;br/&gt;&lt;br/&gt;          Prior to Windows Vista, when media containing an autorun command is inserted, the system will automatically execute the program without user intervention.&lt;br/&gt;&lt;br/&gt;          This creates a major security concern as code may be executed without user&amp;#39;s knowledge. The default behavior starting with Windows Vista is to prompt the user whether autorun command is to be run. The autorun command is represented as a handler in the Autoplay dialog.&lt;br/&gt;&lt;br/&gt;          If you enable this policy setting, an Administrator can change the default Windows Vista or later behavior for autorun to:&lt;br/&gt;&lt;br/&gt;          a) Completely disable autorun commands, or&lt;br/&gt;          b) Revert back to pre-Windows Vista behavior of automatically executing the autorun command.&lt;br/&gt;&lt;br/&gt;          If you disable or not configure this policy setting, Windows Vista or later will prompt the user whether autorun command is to be run." gpmc_supported="At least Windows Vista">Set the default behavior for AutoRun</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Default AutoRun Behavior</td><td>Do not execute any autorun commands</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Autoplay" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/AutoPlay Policies" gpmc_settingDescription="This policy setting allows you to turn off the Autoplay feature.&lt;br/&gt;&lt;br/&gt;          Autoplay begins reading from a drive as soon as you insert media in the drive. As a result, the setup file of programs and the music on audio media start immediately.&lt;br/&gt;&lt;br/&gt;          Prior to Windows XP SP2, Autoplay is disabled by default on removable drives, such as the floppy disk drive (but not the CD-ROM drive), and on network drives.&lt;br/&gt;&lt;br/&gt;          Starting with Windows XP SP2, Autoplay is enabled for removable drives as well, including Zip drives and some USB mass storage devices.&lt;br/&gt;&lt;br/&gt;          If you enable this policy setting, Autoplay is disabled on CD-ROM and removable media drives, or disabled on all drives.&lt;br/&gt;&lt;br/&gt;          This policy setting disables Autoplay on additional types of drives. You cannot use this setting to enable Autoplay on drives on which it is disabled by default.&lt;br/&gt;&lt;br/&gt;          If you disable or do not configure this policy setting, AutoPlay is enabled.&lt;br/&gt;&lt;br/&gt;          Note: This policy setting appears in both the Computer Configuration and User Configuration folders. If the policy settings conflict, the policy setting in Computer Configuration takes precedence over the policy setting in User Configuration." gpmc_supported="At least Windows 2000">Turn off Autoplay</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Turn off Autoplay on:</td><td>All drives</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Desktop Gadgets</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Restrict unpacking and installation of gadgets that are not digitally signed." gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Desktop Gadgets" gpmc_settingDescription="This policy setting allows you to restrict the installation of unsigned gadgets.  Desktop gadgets can be deployed as compressed  files, either digitally signed or unsigned.&lt;br/&gt;If you enable this setting, gadgets that have not been digitally signed will not be extracted.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, both signed and unsigned gadgets will be extracted.&lt;br/&gt;The default is for Windows to extract both signed and unsigned gadgets." gpmc_supported="Windows Server 2008, Windows 7, and Windows Vista">Restrict unpacking and installation of gadgets that are not digitally signed.</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off desktop gadgets" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Desktop Gadgets" gpmc_settingDescription="This policy setting allows you to turn off desktop gadgets. Gadgets are small applets that display information or utilities on the  desktop.&lt;br/&gt;&lt;br/&gt;If you enable this setting, desktop gadgets will be turned off.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, desktop gadgets will be turned on.&lt;br/&gt;&lt;br/&gt;The default is for desktop gadgets to be turned on." gpmc_supported="Windows Server 2008, Windows 7, and Windows Vista">Turn off desktop gadgets</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn Off user-installed desktop gadgets" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Desktop Gadgets" gpmc_settingDescription="This policy setting allows you to turn off desktop gadgets that have been installed by the user.&lt;br/&gt;&lt;br/&gt;If you enable this setting, Windows will not run any user-installed gadgets.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, Windows will run user-installed gadgets.&lt;br/&gt;&lt;br/&gt;The default is for Windows to run user installed gadgets." gpmc_supported="Windows Server 2008, Windows 7, and Windows Vista">Turn Off user-installed desktop gadgets</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Desktop Window Manager/Window Frame Coloring</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not allow color changes" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Desktop Window Manager/Window Frame Coloring" gpmc_settingDescription="This policy setting controls the ability to change the color of window frames. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, you prevent users from changing the default window frame color. &lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, you allow users to change the default window frame color. &lt;br/&gt;&lt;br/&gt;Note: This policy setting can be used in conjunction with the &amp;quot;Specify a default color for window frames&amp;quot; policy setting, to enforce a specific color for window frames that cannot be changed by users." gpmc_supported="At least Windows Vista">Do not allow color changes</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Edge UI</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow edge swipe" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Edge UI" gpmc_settingDescription="If you disable this policy setting, users will not be able to invoke any system UI by swiping in from any screen edge.&lt;br/&gt;&lt;br/&gt;If you enable or do not configure this policy setting, users will be able to invoke system UI by swiping in from the screen edges.&lt;br/&gt;      " gpmc_supported="At least Windows Server 2016, Windows 10">Allow edge swipe</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable help tips" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Edge UI" gpmc_settingDescription="Disables help tips that Windows shows to the user.&lt;br/&gt;&lt;br/&gt;By default, Windows will show the user help tips until the user has successfully completed the scenarios.&lt;br/&gt;&lt;br/&gt;If this setting is enabled, Windows will not show any help tips to the user.&lt;br/&gt;      " gpmc_supported="At least Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1">Disable help tips</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not show recent apps when the mouse is pointing to the upper-left corner of the screen" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Edge UI" gpmc_settingDescription="This policy setting allows you to prevent the last app and the list of recent apps from appearing when the mouse is pointing to the upper-left corner of the screen.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user will no longer be able to switch to recent apps using the mouse.  The user will still be able to switch apps using touch gestures, keyboard shortcuts, and the Start screen.&lt;br/&gt;&lt;br/&gt;If you disable or don&amp;#39;t configure this policy setting, the recent apps will be available by default, and the user can configure this setting." gpmc_supported="At least Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1">Do not show recent apps when the mouse is pointing to the upper-left corner of the screen</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent users from replacing the Command Prompt with Windows PowerShell in the menu they see when they right-click the lower-left corner or press the Windows logo key+X" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Edge UI" gpmc_settingDescription="This policy setting allows you to prevent users from replacing the Command Prompt with Windows PowerShell in the menu they see when they right-click the lower-left corner or press the Windows logo key + X.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Command Prompt will always be listed in that menu, and users won&amp;#39;t be able to replace it with Windows PowerShell. Users will still be able to access Windows PowerShell, but not from that menu.&lt;br/&gt;&lt;br/&gt;If you disable or don&amp;#39;t configure this policy setting, Command Prompt will be listed in the menu by default, and users can configure this setting." gpmc_supported="At least Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1">Prevent users from replacing the Command Prompt with Windows PowerShell in the menu they see when they right-click the lower-left corner or press the Windows logo key+X</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Search, Share, Start, Devices, and Settings don&amp;#39;t appear when the mouse is pointing to the upper-right corner of the screen" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Edge UI" gpmc_settingDescription="This policy setting allows you to prevent Search, Share, Start, Devices, and Settings from appearing when the mouse is pointing to the upper-right corner of the screen.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Search, Share, Start, Devices, and Settings will no longer appear when the mouse is pointing to the upper-right corner. They&amp;#39;ll still be available if the mouse is pointing to the lower-right corner.&lt;br/&gt;&lt;br/&gt;If you disable or don&amp;#39;t configure this policy setting, Search, Share, Start, Devices, and Settings will be available by default, and the user can configure this setting." gpmc_supported="At least Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1">Search, Share, Start, Devices, and Settings don&#39;t appear when the mouse is pointing to the upper-right corner of the screen</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off switching between recent apps" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Edge UI" gpmc_settingDescription="If you enable this setting, users will not be allowed to switch between recent apps. The App Switching option in the PC settings app will be disabled as well.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users will be allowed to switch between recent apps." gpmc_supported="At least Windows Server 2012, Windows 8 or Windows RT">Turn off switching between recent apps</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off tracking of app usage" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Edge UI" gpmc_settingDescription="This policy setting prevents Windows from keeping track of the apps that are used and searched most frequently. If you enable this policy setting, apps will be sorted alphabetically in:&lt;br/&gt;      - search results&lt;br/&gt;      - the Search and Share panes&lt;br/&gt;      - the drop-down app list in the Picker&lt;br/&gt;&lt;br/&gt;      If you disable or don&amp;#39;t configure this policy setting, Windows will keep track of the apps that are used and searched most frequently. Most frequently used apps will appear at the top." gpmc_supported="At least Windows Server 2012, Windows 8 or Windows RT">Turn off tracking of app usage</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/File Explorer</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Display the menu bar in File Explorer " gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting configures File Explorer to always display the menu bar.&lt;br/&gt;&lt;br/&gt;Note: By default, the menu bar is not displayed in File Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the menu bar will be displayed in File Explorer.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the menu bar will not be displayed in File Explorer.&lt;br/&gt;&lt;br/&gt;Note: When the menu bar is not displayed, users can access the menu bar by pressing the &amp;#39;ALT&amp;#39; key." gpmc_supported="At least Windows Vista">Display the menu bar in File Explorer </span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not move deleted files to the Recycle Bin" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="When a file or folder is deleted in File Explorer, a copy of the file or folder is placed in the Recycle Bin. Using this setting, you can change this behavior.&lt;br/&gt;&lt;br/&gt;If you enable this setting, files and folders that are deleted using File Explorer will not be placed in the Recycle Bin and will therefore be permanently deleted.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, files and folders deleted using File Explorer will be placed in the Recycle Bin." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Do not move deleted files to the Recycle Bin</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide these specified drives in My Computer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to hide these specified drives in My Computer.&lt;br/&gt;&lt;br/&gt;This policy setting allows you to remove the icons representing selected hard drives from My Computer and File Explorer. Also, the drive letters representing the selected drives do not appear in the standard Open dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, select a drive or combination of drives in the drop-down list.&lt;br/&gt;&lt;br/&gt;Note: This policy setting removes the drive icons. Users can still gain access to drive contents by using other methods, such as by typing the path to a directory on the drive in the Map Network Drive dialog box, in the Run dialog box, or in a command window.&lt;br/&gt;&lt;br/&gt;Also, this policy setting does not prevent users from using programs to access these drives or their contents. And, it does not prevent users from using the Disk Management snap-in to view and change drive characteristics.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, all drives are displayed, or select the &amp;quot;Do not restrict drives&amp;quot; option in the drop-down list.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Prevent access to drives from My Computer&amp;quot; policy setting." gpmc_supported="At least Windows 2000">Hide these specified drives in My Computer</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Pick one of the following combinations</td><td>Restrict all drives</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hides the Manage item on the File Explorer context menu" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Removes the Manage item from the File Explorer context menu. This context menu appears when you right-click File Explorer or My Computer.&lt;br/&gt;&lt;br/&gt;The Manage item opens Computer Management (Compmgmt.msc), a console tool that includes many of the primary Windows 2000 administrative tools, such as Event Viewer, Device Manager, and Disk Management. You must be an administrator to use many of the features of these tools.&lt;br/&gt;&lt;br/&gt;This setting does not remove the Computer Management item from the Start menu (Start, Programs, Administrative Tools, Computer Management), nor does it prevent users from using other methods to start Computer Management.&lt;br/&gt;&lt;br/&gt;Tip: To hide all context menus, use the &amp;quot;Remove File Explorer&amp;#39;s default context menu&amp;quot; setting." gpmc_supported="At least Windows 2000">Hides the Manage item on the File Explorer context menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="No Computers Near Me in Network Locations" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to remove computers in the user&amp;#39;s workgroup and domain from lists of network resources in File Explorer and Network Locations.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the system removes the &amp;quot;Computers Near Me&amp;quot; option and the icons representing nearby computers from Network Locations. This policy setting also removes these icons from the Map Network Drive browser.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, computers in the user&amp;#39;s workgroup and domain appear in lists of network resources in File Explorer and Network Locations.&lt;br/&gt;&lt;br/&gt;This policy setting does not prevent users from connecting to computers in their workgroup or domain by other commonly used methods, such as typing the share name in the Run dialog box or the Map Network Drive dialog box.&lt;br/&gt;&lt;br/&gt;To remove network computers from lists of network resources, use the &amp;quot;No Entire Network in Network Locations&amp;quot; policy setting.&lt;br/&gt;" gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">No Computers Near Me in Network Locations</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="No Entire Network in Network Locations" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Removes all computers outside of the user&amp;#39;s workgroup or local domain from lists of network resources in File Explorer and Network Locations.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system removes the Entire Network option and the icons representing networked computers from Network Locations and from the browser associated with the Map Network Drive option.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from viewing or connecting to computers in their workgroup or domain. It also does not prevent users from connecting to remote computers by other commonly used methods, such as by typing the share name in the Run dialog box or the Map Network Drive dialog box.&lt;br/&gt;&lt;br/&gt;To remove computers in the user&amp;#39;s workgroup or domain from lists of network resources, use the &amp;quot;No Computers Near Me in Network Locations&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Note: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">No Entire Network in Network Locations</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent access to drives from My Computer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Prevents users from using My Computer to gain access to the content of selected drives.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users can browse the directory structure of the selected drives in My Computer or File Explorer, but they cannot open folders and access the contents. Also, they cannot use the Run dialog box or the Map Network Drive dialog box to view the directories on these drives.&lt;br/&gt;&lt;br/&gt;To use this setting, select a drive or combination of drives from the drop-down list. To allow access to all drive directories, disable this setting or select the &amp;quot;Do not restrict drives&amp;quot; option from the drop-down list.&lt;br/&gt;&lt;br/&gt;Note: The icons representing the specified drives still appear in My Computer, but if users double-click the icons, a message appears explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt; Also, this setting does not prevent users from using programs to access local and network drives. And, it does not prevent them from using the Disk Management snap-in to view and change drive characteristics.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Hide these specified drives in My Computer&amp;quot; setting." gpmc_supported="At least Windows 2000">Prevent access to drives from My Computer</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Pick one of the following combinations</td><td>Restrict all drives</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent users from adding files to the root of their Users Files folder." gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows administrators to prevent users from adding new items such as files or folders to the root of their Users Files folder in File Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users will no longer be able to add new items such as files or folders to the root of their Users Files folder in File Explorer.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users will be able to add new items such as files or folders to the root of their Users Files folder in File Explorer.&lt;br/&gt;&lt;br/&gt;&lt;br/&gt;Note: Enabling this policy setting does not prevent the user from being able to add new items such as files and folders to their actual file system profile folder at %userprofile%." gpmc_supported="At least Windows Vista">Prevent users from adding files to the root of their Users Files folder.</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove &amp;quot;Map Network Drive&amp;quot; and &amp;quot;Disconnect Network Drive&amp;quot;" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Prevents users from using File Explorer or Network Locations to map or disconnect network drives.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system removes the Map Network Drive and Disconnect Network Drive commands from the toolbar and Tools menus in File Explorer and Network Locations and from menus that appear when you right-click the File Explorer or Network Locations icons.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from connecting to another computer by typing the name of a shared folder in the Run dialog box.&lt;br/&gt;&lt;br/&gt;Note:&lt;br/&gt;&lt;br/&gt;This setting was documented incorrectly on the Explain tab in Group Policy for Windows 2000. The Explain tab states incorrectly that this setting prevents users from connecting and disconnecting drives.&lt;br/&gt;&lt;br/&gt;Note: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="At least Windows 2000">Remove &quot;Map Network Drive&quot; and &quot;Disconnect Network Drive&quot;</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove CD Burning features" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to remove CD Burning features. File Explorer allows you to create and modify re-writable CDs if you have a CD writer connected to your PC.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, all features in the File Explorer that allow you to use your CD writer are removed.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users are able to use the File Explorer CD burning features.&lt;br/&gt;&lt;br/&gt;Note: This policy setting does not prevent users from using third-party applications to create or modify CDs using a CD writer." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Remove CD Burning features</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove File Explorer&amp;#39;s default context menu" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Removes shortcut menus from the desktop and File Explorer. Shortcut menus appear when you right-click an item.&lt;br/&gt;&lt;br/&gt;If you enable this setting, menus do not appear when you right-click the desktop or when you right-click the items in File Explorer. This setting does not prevent users from using other methods to issue commands available on the shortcut menus." gpmc_supported="At least Windows 2000">Remove File Explorer&#39;s default context menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove File menu from File Explorer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Removes the File menu from My Computer and File Explorer.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other methods to perform tasks available on the File menu." gpmc_supported="At least Windows 2000">Remove File menu from File Explorer</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Hardware tab" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Removes the Hardware tab.&lt;br/&gt;&lt;br/&gt;This setting removes the Hardware tab from Mouse, Keyboard, and Sounds and Audio Devices in Control Panel. It also removes the Hardware tab from the Properties dialog box for all local drives, including hard drives, floppy disk drives, and CD-ROM drives. As a result, users cannot use the Hardware tab to view or change the device list or device properties, or use the Troubleshoot button to resolve problems with the device." gpmc_supported="At least Windows 2000">Remove Hardware tab</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Search button from File Explorer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to remove the Search button from the File Explorer toolbar.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Search button is removed from the Standard Buttons toolbar that appears in File Explorer and other programs that use the File Explorer window, such as My Computer and Network Locations.&lt;br/&gt;&lt;br/&gt;Enabling this policy setting does not remove the Search button or affect any search features of Internet browser windows, such as the Internet Explorer window.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Search button is available from the File Explorer toolbar.&lt;br/&gt;&lt;br/&gt;This policy setting does not affect the Search items on the File Explorer context menu or on the Start menu. To remove Search from the Start menu, use the &amp;quot;Remove Search menu from Start menu&amp;quot; policy setting (in User Configuration\Administrative Templates\Start Menu and Taskbar). To hide all context menus, use the &amp;quot;Remove File Explorer&amp;#39;s default context menu&amp;quot; policy setting." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Remove Search button from File Explorer</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Security tab" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Removes the Security tab from File Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users opening the Properties dialog box for all file system objects, including folders, files, shortcuts, and drives, will not be able to access the Security tab. As a result, users will be able to neither change the security settings nor view a list of all users that have access to the resource in question.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, users will be able to access the security tab." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Remove Security tab</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Shared Documents from My Computer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to remove the Shared Documents folder from My Computer.&lt;br/&gt;&lt;br/&gt;When a Windows client is in a workgroup, a Shared Documents icon appears in the File Explorer Web view under &amp;quot;Other Places&amp;quot; and also under &amp;quot;Files Stored on This Computer&amp;quot; in My Computer. Using this policy setting, you can choose not to have these items displayed.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Shared Documents folder is not displayed in the Web view or in My Computer.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Shared Documents folder is displayed in Web view and also in My Computer when the client is part of a workgroup.&lt;br/&gt;&lt;br/&gt;Note:  The ability to remove the Shared Documents folder via Group Policy is only available on Windows XP Professional." gpmc_supported="Windows XP Professional only">Remove Shared Documents from My Computer</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove the Search the Internet &amp;quot;Search again&amp;quot; link" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="If you enable this policy, the &amp;quot;Internet&amp;quot; &amp;quot;Search again&amp;quot; link will not be shown when the user performs a search in the Explorer window.&lt;br/&gt;&lt;br/&gt;If you disable this policy, there will be an &amp;quot;Internet&amp;quot; &amp;quot;Search again&amp;quot; link when the user performs a search in the Explorer window.  This button launches a search in the default browser with the search terms.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy (default), there will be an &amp;quot;Internet&amp;quot; link when the user performs a search in the Explorer window." gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Remove the Search the Internet &quot;Search again&quot; link</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove UI to change keyboard navigation indicator setting" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Disables the &amp;quot;Hide keyboard navigation indicators until I use the ALT key&amp;quot; option in Display in Control Panel.&lt;br/&gt;&lt;br/&gt;When this Display Properties option is selected, the underlining that indicates a keyboard shortcut character (hot key) does not appear on menus until you press ALT.&lt;br/&gt;&lt;br/&gt;Effects, such as transitory underlines, are designed to enhance the user&amp;#39;s experience but might be confusing or distracting to some users." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Remove UI to change keyboard navigation indicator setting</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove UI to change menu animation setting" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to prevent users from enabling or disabling minor animations in the operating system for the movement of windows, menus, and lists.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the &amp;quot;Use transition effects for menus and tooltips&amp;quot; option in Display in Control Panel is disabled, and cannot be toggled by users.&lt;br/&gt;&lt;br/&gt;Effects, such as animation, are designed to enhance the user&amp;#39;s experience but might be confusing or distracting to some users.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users are allowed to turn on or off these minor system animations using the &amp;quot;Use transition effects for menus and tooltips&amp;quot; option in Display in Control Panel." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Remove UI to change menu animation setting</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off the caching of thumbnails in hidden thumbs.db files" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Turns off the caching of thumbnails in hidden thumbs.db files.&lt;br/&gt;&lt;br/&gt;This policy setting allows you to configure File Explorer to cache thumbnails of items residing in network folders in hidden thumbs.db files.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, File Explorer does not create, read from, or write to thumbs.db files.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, File Explorer creates, reads from, and writes to thumbs.db files.&lt;br/&gt;" gpmc_supported="Windows Vista Service Pack 1">Turn off the caching of thumbnails in hidden thumbs.db files</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Windows Key hotkeys" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Turn off Windows Key hotkeys.&lt;br/&gt;&lt;br/&gt;Keyboards with a Windows key provide users with shortcuts to common shell features. For example, pressing the keyboard sequence Windows+R opens the Run dialog box; pressing Windows+E starts File Explorer. By using this setting, you can disable these Windows Key hotkeys.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Windows Key hotkeys are unavailable.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Windows Key hotkeys are available." gpmc_supported="At least Windows Server 2003">Turn off Windows Key hotkeys</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/File Explorer/Common Open File Dialog</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the dropdown list of recent files" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer/Common Open File Dialog" gpmc_settingDescription="Removes the list of most recently used files from the Open dialog box.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the &amp;quot;File name&amp;quot; field includes a drop-down list of recently used files. If you enable this setting, the &amp;quot;File name&amp;quot; field is a simple text box. Users must browse directories to find a file or type a file name in the text box.&lt;br/&gt;&lt;br/&gt;This setting, and others in this folder, lets you remove new features added in Windows 2000 Professional, so that the Open dialog box looks like it did in Windows NT 4.0 and earlier. These policies only affect programs that use the standard Open dialog box provided to developers of Windows programs.&lt;br/&gt;&lt;br/&gt;To see an example of the standard Open dialog box, start Wordpad and, on the File menu, click Open.&lt;br/&gt;&lt;br/&gt;Note: In Windows Vista, this policy  setting applies only to applications that are using the Windows XP common dialog box style. This policy setting does not apply to the new Windows Vista common dialog box style. It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="At least Windows 2000">Hide the dropdown list of recent files</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Items displayed in Places Bar" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer/Common Open File Dialog" gpmc_settingDescription="Configures the list of items displayed in the Places Bar in the Windows File/Open dialog. If enable this setting you can specify from 1 to 5 items to be displayed in the Places Bar.&lt;br/&gt;&lt;br/&gt;The valid items you may display in the Places Bar are:&lt;br/&gt;&lt;br/&gt;1) Shortcuts to a local folders -- (ex. C:\Windows)&lt;br/&gt;&lt;br/&gt;2) Shortcuts to remote folders -- (\\server\share)&lt;br/&gt;&lt;br/&gt;3) FTP folders&lt;br/&gt;&lt;br/&gt;4) web folders&lt;br/&gt;&lt;br/&gt;5) Common Shell folders.&lt;br/&gt;&lt;br/&gt;The list of Common Shell Folders that may be specified:&lt;br/&gt;&lt;br/&gt;Desktop, Recent Places, Documents, Pictures, Music, Recently Changed, Attachments and Saved Searches.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting the default list of items will be displayed in the Places Bar.&lt;br/&gt;&lt;br/&gt;Note: In Windows Vista, this policy  setting applies only to applications that are using the Windows XP common dialog box style. This policy setting does not apply to the new Windows Vista common dialog box style." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Items displayed in Places Bar</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td colspan="2">Places to display:</td></tr><tr><td>Item 1</td><td></td></tr>
<tr><td>Item 2</td><td></td></tr>
<tr><td>Item 3</td><td></td></tr>
<tr><td>Item 4</td><td></td></tr>
<tr><td>Item 5</td><td></td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/File Explorer/Explorer Frame Pane</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Preview Pane" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer/Explorer Frame Pane" gpmc_settingDescription="Hides the Preview Pane in File Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Preview Pane in File Explorer is hidden and cannot be turned on by the user.&lt;br/&gt;&lt;br/&gt;If you disable, or do not configure this setting, the Preview Pane is hidden by default and can be displayed by the user.&lt;br/&gt;" gpmc_supported="At least Windows Vista">Turn off Preview Pane</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn on or off details pane" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer/Explorer Frame Pane" gpmc_settingDescription="This policy setting shows or hides the Details Pane in File Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting and configure it to hide the pane, the Details Pane in File Explorer is hidden and cannot be turned on by the user.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting and configure it to show the pane, the Details Pane is always visible and cannot be hidden by the user. Note: This has a side effect of not being able to toggle to the Preview Pane since the two cannot be displayed at the same time.&lt;br/&gt;&lt;br/&gt;If you disable, or do not configure this policy setting, the Details Pane is hidden by default and can be displayed by the user. This is the default policy setting.&lt;br/&gt;" gpmc_supported="At least Windows Vista">Turn on or off details pane</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Configure details pane</td><td>Always hide</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/File Explorer/Previous Versions</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide previous versions list for local files" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer/Previous Versions" gpmc_settingDescription="This policy setting lets you hide the list of previous versions of files that are on local disks. The previous versions could come from the on-disk restore points or from backup media.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users cannot list or restore previous versions of files on local disks.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, users cannot list and restore previous versions of files on local disks.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, it defaults to disabled." gpmc_supported="Supported Windows Vista through Windows 7">Hide previous versions list for local files</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Search: Disable Search Customization" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer" gpmc_settingDescription="Makes the Customize button in the Search Assistant appear dimmed.&lt;br/&gt;&lt;br/&gt;The Search Assistant is a tool that appears in the Search bar to help users search the Internet.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users cannot change their Search Assistant settings, such as setting default search engines for specific tasks.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can change their settings for the Search Assistant.&lt;br/&gt;&lt;br/&gt;This policy is designed to help administrators maintain consistent settings for searching across an organization." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Search: Disable Search Customization</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Browser menus</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="File menu: Disable Save As Web Page Complete" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents users from saving the complete contents that are displayed on or run from a Web page, including the graphics, scripts, linked files, and other elements. It does not prevent users from saving the text of a Web page.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Web Page, Complete file type option will be removed from the Save as Type box in the Save Web Page dialog box. Users can still save Web pages as hypertext markup language (HTML) files or as text files, but graphics, scripts, and other elements are not saved. To display the Save Web Page dialog box, users click the File menu, and then click the Save As command.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can save all elements on a Web page.&lt;br/&gt;&lt;br/&gt;The &amp;quot;File menu: Disable Save As... menu option&amp;quot; policy, which removes the Save As command, takes precedence over this policy. If it is enabled, this policy is ignored." gpmc_supported="At least Internet Explorer 5.0">File menu: Disable Save As Web Page Complete</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="File menu: Disable Save As... menu option" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents users from saving Web pages from the browser File menu to their hard disk or to a network share.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Save As command on the File menu will be removed.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can save Web pages for later viewing.&lt;br/&gt;&lt;br/&gt;This policy takes precedence over the &amp;quot;File Menu: Disable Save As Web Page Complete&amp;quot; policy, which prevents users from saving the entire contents that are displayed or run from a Web Page, such as graphics, scripts, and linked files, but does not prevent users from saving the text of a Web page.&lt;br/&gt;&lt;br/&gt;Caution: If you enable this policy, users are not prevented from saving Web content by pointing to a link on a Web page, clicking the right mouse button, and then clicking Save Target As." gpmc_supported="At least Internet Explorer 5.0">File menu: Disable Save As... menu option</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Help menu: Remove &amp;#39;For Netscape Users&amp;#39; menu option" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents users from displaying tips for users who are switching from Netscape.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the For Netscape Users command is removed from the Help menu.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can display content about switching from Netscape by clicking the For Netscape Users command on the Help menu.&lt;br/&gt;&lt;br/&gt;Caution: Enabling this policy does not remove the tips for Netscape users from the Microsoft Internet Explorer Help file." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Help menu: Remove &#39;For Netscape Users&#39; menu option</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Help menu: Remove &amp;#39;Send Feedback&amp;#39; menu option" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents users from sending feedback to Microsoft by clicking the Send Feedback command on the Help menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Send Feedback command is removed from the Help menu.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can fill out an Internet form to provide feedback about Microsoft products." gpmc_supported="At least Internet Explorer 5.0">Help menu: Remove &#39;Send Feedback&#39; menu option</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Help menu: Remove &amp;#39;Tip of the Day&amp;#39; menu option" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents users from viewing or changing the Tip of the Day interface in Microsoft Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Tip of the Day command is removed from the Help menu.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can enable or disable the Tip of the Day, which appears at the bottom of the browser." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Help menu: Remove &#39;Tip of the Day&#39; menu option</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Help menu: Remove &amp;#39;Tour&amp;#39; menu option" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Browser menus" gpmc_settingDescription="Prevents users from running the Internet Explorer Tour from the Help menu in Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Tour command is removed from the Help menu.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can run the tour from the Help menu." gpmc_supported="At least Internet Explorer 7.0">Help menu: Remove &#39;Tour&#39; menu option</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Delete Browsing History</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow deleting browsing history on exit" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Delete Browsing History" gpmc_settingDescription="This policy setting allows the automatic deletion of specified items when the last browser window closes. The preferences selected in the Delete Browsing History dialog box (such as deleting temporary Internet files, cookies, history, form data, and passwords) are applied, and those items are deleted.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, deleting browsing history on exit is turned on.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, deleting browsing history on exit is turned off.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, it can be configured on the General tab in Internet Options.&lt;br/&gt;&lt;br/&gt;If the &amp;quot;Prevent access to Delete Browsing History&amp;quot; policy setting is enabled, this policy setting has no effect." gpmc_supported="At least Internet Explorer 8.0">Allow deleting browsing history on exit</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable &amp;quot;Configuring History&amp;quot;" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Delete Browsing History" gpmc_settingDescription="This setting specifies the number of days that Internet Explorer tracks views of pages in the History List. To access the Temporary Internet Files and History Settings dialog box, from the Menu bar, on the Tools menu, click Internet Options, click the General tab, and then click Settings under Browsing history.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, a user cannot set the number of days that Internet Explorer tracks views of the pages in the History List. You must specify the number of days that Internet Explorer tracks views of pages in the History List. Users can not delete browsing history.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, a user can set the number of days that Internet Explorer tracks views of pages in the History list. Users can delete browsing history." gpmc_supported="At least Internet Explorer 5.0">Disable &quot;Configuring History&quot;</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Days to keep pages in History</td><td>0</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Internet Control Panel</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Advanced page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="Removes the Advanced tab from the interface in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users are prevented from seeing and changing advanced Internet settings, such as security, multimedia, and printing.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings.&lt;br/&gt;&lt;br/&gt;When you set this policy, you do not need to set the &amp;quot;Disable changing Advanced page settings&amp;quot; policy (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\), because this policy removes the Advanced tab from the interface." gpmc_supported="At least Internet Explorer 5.0">Disable the Advanced page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Connections page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="Removes the Connections tab from the interface in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users are prevented from seeing and changing connection and proxy settings.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings.&lt;br/&gt;&lt;br/&gt;When you set this policy, you do not need to set the following policies for the Content tab, because this policy removes the Connections tab from the interface:&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable Internet Connection Wizard&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing connection settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Prevent changing proxy settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing Automatic Configuration settings&amp;quot;" gpmc_supported="At least Internet Explorer 5.0">Disable the Connections page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Content page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="If you enable this policy setting, users are prevented from seeing and changing ratings, certificates, AutoComplete, Wallet, and Profile Assistant settings.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings." gpmc_supported="At least Internet Explorer 5.0">Disable the Content page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the General page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="Removes the General tab from the interface in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users are unable to see and change settings for the home page, the cache, history, Web page appearance, and accessibility.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings.&lt;br/&gt;&lt;br/&gt;When you set this policy, you do not need to set the following Internet Explorer policies (located in \User Configuration\Administrative Templates\Windows Components\Internet Explorer\), because this policy removes the General tab from the interface:&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing home page settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing Temporary Internet files settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing history settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing color settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing link color settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing font settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing language settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing accessibility settings&amp;quot;" gpmc_supported="At least Internet Explorer 5.0">Disable the General page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Privacy page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="Removes the Privacy tab from the interface in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users are prevented from seeing and changing default settings for privacy.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings." gpmc_supported="At least Internet Explorer 5.0">Disable the Privacy page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Programs page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="Removes the Programs tab from the interface in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, users are prevented from seeing and changing default settings for Internet programs.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings.&lt;br/&gt;&lt;br/&gt;When you set this policy, you do not need to set the following policies for the Programs tab, because this policy removes the Programs tab from the interface:&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing Messaging settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing Calendar and Contact settings&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable the Reset Web Settings feature&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Disable changing default browser check&amp;quot;" gpmc_supported="At least Internet Explorer 5.0">Disable the Programs page</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable the Security page" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel" gpmc_settingDescription="Removes the Security tab from the interface in the Internet Options dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy, it prevents users from seeing and changing settings for security zones, such as scripting, downloads, and user authentication.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can see and change these settings.&lt;br/&gt;&lt;br/&gt;When you set this policy, you do not need to set the following Internet Explorer policies, because this policy removes the Security tab from the interface:&lt;br/&gt;&lt;br/&gt;&amp;quot;Security zones: Do not allow users to change policies&amp;quot;&lt;br/&gt;&lt;br/&gt;&amp;quot;Security zones: Do not allow users to add/delete sites&amp;quot;" gpmc_supported="At least Internet Explorer 5.0">Disable the Security page</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Internet Control Panel/General Page/Browsing History</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow websites to store application caches on client computers" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/General Page/Browsing History" gpmc_settingDescription="This policy setting allows websites to store file resources in application caches on client computers.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, websites will be able to store application caches on client computers. Allow website database and caches on Website Data Settings will be unavailable to users.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, websites will not be able to store application caches on client computers. Allow website database and caches on Website Data Settings will be unavailable to users.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, websites will be able to store application caches on client computers. Allow website database and caches on Website Data Settings will be available to users. Users can choose whether or not to allow websites to store data on their computers." gpmc_supported="At least Internet Explorer 10.0">Allow websites to store application caches on client computers</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Set application caches expiration time limit for individual domains" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Internet Control Panel/General Page/Browsing History" gpmc_settingDescription="This policy setting sets the number of days an inactive application cache will exist before it is removed. If the application cache is used before the expiration time limit, it will not be automatically removed. When you set this policy setting, you provide the expiration time limit in days.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Internet Explorer will remove application caches that haven&amp;#39;t been used within the timeframe set in this policy setting.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Internet Explorer will use the default application cache expiration time limit for all application caches. The default is 30 days." gpmc_supported="At least Internet Explorer 10.0">Set application caches expiration time limit for individual domains</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Number of days</td><td>1</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Internet Explorer/Toolbars</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Configure Toolbar Buttons" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Toolbars" gpmc_settingDescription="Specifies which buttons will be displayed on the standard toolbar in Microsoft Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy, you can specify whether or not each button will be displayed by selecting or clearing the check boxes for each button.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, the standard toolbar will be displayed with its default settings, unless users customize it." gpmc_supported="Only Internet Explorer 5.0 and Internet Explorer 6.0">Configure Toolbar Buttons</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Show Back button</td><td>Enabled</td></tr>
<tr><td>Show Forward button</td><td>Enabled</td></tr>
<tr><td>Show Stop button</td><td>Enabled</td></tr>
<tr><td>Show Refresh button</td><td>Enabled</td></tr>
<tr><td>Show Home button</td><td>Enabled</td></tr>
<tr><td>Show Search button</td><td>Disabled</td></tr>
<tr><td>Show Favorites button</td><td>Enabled</td></tr>
<tr><td>Show History button</td><td>Disabled</td></tr>
<tr><td>Show Folders button</td><td>Disabled</td></tr>
<tr><td>Show Fullscreen button</td><td>Disabled</td></tr>
<tr><td>Show Tools button</td><td>Disabled</td></tr>
<tr><td>Show Mail button</td><td>Disabled</td></tr>
<tr><td>Show Font size button</td><td>Disabled</td></tr>
<tr><td>Show Print button</td><td>Disabled</td></tr>
<tr><td>Show Edit button</td><td>Disabled</td></tr>
<tr><td>Show Discussions button</td><td>Disabled</td></tr>
<tr><td>Show Cut button</td><td>Disabled</td></tr>
<tr><td>Show Copy button</td><td>Disabled</td></tr>
<tr><td>Show Paste button</td><td>Disabled</td></tr>
<tr><td>Show Encoding button</td><td>Disabled</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable customizing browser toolbar buttons" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Toolbars" gpmc_settingDescription="Prevents users from determining which buttons appear on the Microsoft Internet Explorer and File Explorer standard toolbars. The buttons appearing on the toolbar can be customized by the &amp;quot;Customize&amp;quot; option. This is present under the Toolbars submenu of the View menu in Internet Explorer 6 and under the Toolbars submenu of the Tools menu in the Command bar in subsequent versions of Internet Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Customize option will be removed from the menu.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can customize which buttons appear on the Internet Explorer and File Explorer toolbars.&lt;br/&gt;&lt;br/&gt;This policy can be used in coordination with the &amp;quot;Disable customizing browser toolbars&amp;quot; policy, which prevents users from determining which toolbars are displayed in Internet Explorer and File Explorer." gpmc_supported="At least Internet Explorer 5.0">Disable customizing browser toolbar buttons</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable customizing browser toolbars" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Toolbars" gpmc_settingDescription="Prevents users from determining which toolbars are displayed in Microsoft Internet Explorer and File Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the list of toolbars, which users can display by clicking the View menu and then pointing to the Toolbars command, will appear dimmed.&lt;br/&gt;&lt;br/&gt;If you disable this policy or do not configure it, users can determine which toolbars are displayed in File Explorer and Internet Explorer.&lt;br/&gt;&lt;br/&gt;This policy can be used in coordination with the &amp;quot;Disable customizing browser toolbar buttons&amp;quot; policy, which prevents users from adding or removing toolbars from Internet Explorer." gpmc_supported="At least Internet Explorer 5.0">Disable customizing browser toolbars</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Display tabs on a separate row" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Toolbars" gpmc_settingDescription="This policy setting allows you to manage where tabs are displayed.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, tabs are displayed on a separate row.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, tabs are not displayed on a separate row.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the user can change where tabs are displayed." gpmc_supported="At least Internet Explorer 9.0">Display tabs on a separate row</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Lock all toolbars" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Internet Explorer/Toolbars" gpmc_settingDescription="This policy setting allows you to lock or unlock the toolbars on the user interface.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the toolbars are locked and the user cannot move them.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the toolbars are unlocked and the user can move them.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the toolbars are locked by default, but the user can unlock them through the shortcut menu of the Command bar." gpmc_supported="At least Internet Explorer 8.0">Lock all toolbars</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Microsoft Edge</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent Microsoft Edge from gathering Live Tile information when pinning a site to Start" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Edge" gpmc_settingDescription="This policy lets you decide whether Microsoft Edge can gather Live Tile metadata from the ieonline.microsoft.com service to provide a better experience while pinning a Live Tile to the Start menu.&lt;br/&gt;&lt;br/&gt;If you enable this setting, Microsoft Edge won&amp;#39;t gather the Live Tile metadata, providing a minimal experience when a user pins a Live Tile to the Start menu.&lt;br/&gt;&lt;br/&gt;If you disable or don&amp;#39;t configure this setting, Microsoft Edge gathers the Live Tile metadata, providing a fuller and more complete experience when a user pins a Live Tile to the Start menu." gpmc_supported="Microsoft Edge on Windows 10, Version 1703 or later">Prevent Microsoft Edge from gathering Live Tile information when pinning a site to Start</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent the First Run webpage from opening on Microsoft Edge" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Edge" gpmc_settingDescription="&lt;br/&gt;This policy setting lets you decide whether employees see Microsoft&amp;#39;s First Run webpage when opening Microsoft Edge for the first time.&lt;br/&gt;&lt;br/&gt;If you enable this setting, employees won&amp;#39;t see the First Run page when opening Microsoft Edge for the first time.&lt;br/&gt;&lt;br/&gt;If you disable or don&amp;#39;t configure this setting, employees will see the First Run page when opening Microsoft Edge for the first time." gpmc_supported="Microsoft Edge on Windows 10, Version 1703 or later">Prevent the First Run webpage from opening on Microsoft Edge</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Store</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off the Store application" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Store" gpmc_settingDescription="Denies or allows access to the Store application.&lt;br/&gt;&lt;br/&gt;If you enable this setting, access to the Store application is denied. Access to the Store is required for installing app updates.&lt;br/&gt;&lt;br/&gt;If you disable or don&amp;#39;t configure this setting, access to the Store application is allowed." gpmc_supported="At least Windows Server 2012, Windows 8 or Windows RT">Turn off the Store application</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Task Scheduler</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit New Task Creation" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Task Scheduler" gpmc_settingDescription="Prevents users from creating new tasks.&lt;br/&gt;&lt;br/&gt;This setting removes the Add Scheduled Task item that starts the New Task Wizard. Also, the system does not respond when users try to move, paste, or drag programs or documents into the Scheduled Tasks folder.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Important: This setting does not prevent administrators of a computer from using At.exe to create new tasks or prevent administrators from submitting tasks from remote computers." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Prohibit New Task Creation</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Defender SmartScreen/Microsoft Edge</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Configure Windows Defender SmartScreen" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Defender SmartScreen/Microsoft Edge" gpmc_settingDescription="This policy setting lets you configure whether to turn on Windows Defender SmartScreen. Windows Defender SmartScreen provides warning messages to help protect your employees from potential phishing scams and malicious software. By default, Windows Defender SmartScreen is turned on.&lt;br/&gt;&lt;br/&gt;If you enable this setting, Windows Defender SmartScreen is turned on and employees can&amp;#39;t turn it off.&lt;br/&gt;&lt;br/&gt;If you disable this setting, Windows Defender SmartScreen is turned off and employees can&amp;#39;t turn it on.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this setting, employees can choose whether to use Windows Defender SmartScreen." gpmc_supported="Microsoft Edge on Windows 10 or later">Configure Windows Defender SmartScreen</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Error Reporting</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not send additional data" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Error Reporting" gpmc_settingDescription="This policy setting controls whether additional data in support of error reports can be sent to Microsoft automatically.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, any additional data requests from Microsoft in response to a Windows Error Reporting report are automatically declined, without notification to the user.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, then consent policy settings in Computer Configuration/Administrative Templates/Windows Components/Windows Error Reporting/Consent take precedence." gpmc_supported="At least Windows Vista">Do not send additional data</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Installer</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent removable media source for any installation" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Installer" gpmc_settingDescription="This policy setting prevents users from installing any programs from removable media.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, if a user tries to install a program from removable media, such as CD-ROMs, floppy disks, and DVDs, a message appears stating that the feature cannot be found.&lt;br/&gt;&lt;br/&gt;This policy setting applies even when the installation is running in the user&amp;#39;s security context.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can install from removable media when the installation is running in their own security context, but only system administrators can use removable media when an installation is running with elevated system privileges, such as installations offered on the desktop or in Add or Remove Programs.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Enable user to use media source while elevated&amp;quot; and &amp;quot;Hide the &amp;#39;Add a program from CD-ROM or floppy disk&amp;#39; option&amp;quot; policy settings." gpmc_supported="At least Windows 2000">Prevent removable media source for any installation</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Logon Options</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Report when logon server was not available during user logon" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Logon Options" gpmc_settingDescription="This policy controls whether the logged on user should be notified if the logon server could not be contacted during logon and he has been logged on using previously stored account information.&lt;br/&gt;&lt;br/&gt;If enabled, a notification popup will be displayed to the user when the user logs on with cached credentials.&lt;br/&gt;&lt;br/&gt;If disabled or not configured, no popup will be displayed to the user." gpmc_supported="At least Windows Vista">Report when logon server was not available during user logon</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Mail</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Windows Mail application" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Mail" gpmc_settingDescription="Denies or allows access to the Windows Mail application.&lt;br/&gt;&lt;br/&gt;If you enable this setting, access to the Windows Mail application is denied.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, access to the Windows Mail application is allowed." gpmc_supported="At least Windows Vista">Turn off Windows Mail application</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Media Center</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not allow Windows Media Center to run" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Center" gpmc_settingDescription="This policy setting allows or prevents Windows Media Center to run.&lt;br/&gt;&lt;br/&gt;Windows Media Center is a digital media player and video recorder that allows users to organize and play music and videos, and to view and record live television.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows Media Center will not run.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Windows Media Center can be run." gpmc_supported="At least Windows Vista">Do not allow Windows Media Center to run</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Media Player</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent CD and DVD Media Information Retrieval" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Player" gpmc_settingDescription="This policy setting allows you to prevent media information for CDs and DVDs from being retrieved from the Internet.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Player is prevented from automatically obtaining media information from the Internet for CDs and DVDs played by users. In addition, the Retrieve media information for CDs and DVDs from the Internet check box on the Privacy Options tab in the first use dialog box and on the Privacy tab in the Player are not selected and are not available.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can change the setting of the Retrieve media information for CDs and DVDs from the Internet check box." gpmc_supported="Windows Media Player 9 Series and later.">Prevent CD and DVD Media Information Retrieval</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent Music File Media Information Retrieval" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Player" gpmc_settingDescription="This policy setting allows you to prevent media information for music files from being retrieved from the Internet.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Player is prevented from automatically obtaining media information for music files such as Windows Media Audio (WMA) and MP3 files from the Internet. In addition, the Update my music files (WMA and MP3 files) by retrieving missing media information from the Internet check box in the first use dialog box and on the Privacy and Media Library tabs in the Player are not selected and are not available.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can change the setting of the Update my music files (WMA and MP3 files) by retrieving missing media information from the Internet check box." gpmc_supported="Windows Media Player 9 Series and later.">Prevent Music File Media Information Retrieval</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent Radio Station Preset Retrieval" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Player" gpmc_settingDescription="This policy setting allows you to prevent radio station presets from being retrieved from the Internet.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Player is prevented from automatically retrieving radio station presets from the Internet and displaying them in Media Library. In addition, presets that exist before the policy is configured are not be updated, and presets a user adds are not be displayed.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Player automatically retrieves radio station presets from the Internet." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Prevent Radio Station Preset Retrieval</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Media Player/User Interface</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do Not Show Anchor" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Media Player/User Interface" gpmc_settingDescription="Prevents the anchor window from being displayed when Windows Media Player is in skin mode.&lt;br/&gt;&lt;br/&gt;This policy hides the anchor window when the Player is in skin mode. In addition, the option on the Player tab in the Player that enables users to choose whether the anchor window displays is not available.&lt;br/&gt;&lt;br/&gt;When this policy is not configured or disabled, users can show or hide the anchor window when the Player is in skin mode by using the Player tab in the Player.&lt;br/&gt;&lt;br/&gt;When this policy is not configured and the Set and Lock Skin policy is enabled, some options in the anchor window are not available." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Do Not Show Anchor</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Messenger</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not allow Windows Messenger to be run" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Messenger" gpmc_settingDescription="This policy setting allows you to prevent Windows Messenger from running.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows Messenger does not run.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Windows Messenger can be used.&lt;br/&gt;&lt;br/&gt;Note: If you enable this policy setting, Remote Assistance also cannot use Windows Messenger.&lt;br/&gt;&lt;br/&gt;Note: This policy setting is available under both Computer Configuration and User Configuration. If both are present, the Computer Configuration version of this policy setting takes precedence." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Do not allow Windows Messenger to be run</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not automatically start Windows Messenger initially" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Messenger" gpmc_settingDescription="This policy setting prevents Windows Messenger from automatically running at logon. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows Messenger is not loaded automatically when a user logs on.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Windows Messenger will be loaded automatically at logon.&lt;br/&gt;&lt;br/&gt;Note: This policy setting simply prevents Windows Messenger from running initially. If the user invokes and uses Windows Messenger from that point on, Windows Messenger will be loaded.&lt;br/&gt;&lt;br/&gt;The user can also configure this behavior on the Preferences tab on the Tools menu in the Windows Messenger user interface.&lt;br/&gt;&lt;br/&gt;Note: If you do not want users to use Windows Messenger, enable the &amp;quot;Do not allow Windows Messenger to run&amp;quot; policy setting.&lt;br/&gt;&lt;br/&gt;Note: This policy setting is available under both Computer Configuration and User Configuration. If both are present, the Computer Configuration version of this policy setting takes precedence." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Do not automatically start Windows Messenger initially</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Mobility Center</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Windows Mobility Center" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Mobility Center" gpmc_settingDescription="This policy setting turns off Windows Mobility Center.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user is unable to invoke Windows Mobility Center. The Windows Mobility Center UI is removed from all shell entry points and the .exe file does not launch it.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the user is able to invoke Windows Mobility Center and the .exe file launches it.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, Windows Mobility Center is on by default." gpmc_supported="At least Windows Vista">Turn off Windows Mobility Center</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows PowerShell</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn on Script Execution" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows PowerShell" gpmc_settingDescription="This policy setting lets you configure the script execution policy, controlling which scripts are allowed to run.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the scripts selected in the drop-down list are allowed to run.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Allow only signed scripts&amp;quot; policy setting allows scripts to execute only if they are signed by a trusted publisher.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Allow local scripts and remote signed scripts&amp;quot; policy setting allows any local scrips to run; scripts that originate from the Internet must be signed by a trusted publisher.&lt;br/&gt;&lt;br/&gt;The &amp;quot;Allow all scripts&amp;quot; policy setting allows all scripts to run.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, no scripts are allowed to run.&lt;br/&gt;&lt;br/&gt;Note: This policy setting exists under both &amp;quot;Computer Configuration&amp;quot; and &amp;quot;User Configuration&amp;quot; in the Local Group Policy Editor. The &amp;quot;Computer Configuration&amp;quot; has precedence over &amp;quot;User Configuration.&amp;quot;&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, it reverts to a per-machine preference setting; the default if that is not configured is &amp;quot;No scripts allowed.&amp;quot;" gpmc_supported="At least Microsoft Windows 7 or Windows Server 2008 family">Turn on Script Execution</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows SideShow</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Windows SideShow" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows SideShow" gpmc_settingDescription="This policy setting turns off Windows SideShow.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Windows SideShow Control Panel will be disabled and data from Windows SideShow-compatible gadgets (applications) will not be sent to connected devices. &lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Windows SideShow is on by default." gpmc_supported="At least Windows Vista">Turn off Windows SideShow</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Update/Manage updates offered from Windows Server Update Service</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove access to use all Windows Update features" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Update/Manage updates offered from Windows Server Update Service" gpmc_settingDescription="This setting allows you to remove access to Windows Update.&lt;br/&gt;&lt;br/&gt;If you enable this setting, all Windows Update features are removed. This includes blocking access to the Windows Update Web site at http://windowsupdate.microsoft.com, from the Windows Update hyperlink on the Start menu, and also on the Tools menu in Internet Explorer. Windows automatic updating is also disabled; you will neither be notified about nor will you receive critical updates from Windows Update. This setting also prevents Device Manager from automatically installing driver updates from the Windows Update Web site.&lt;br/&gt;&lt;br/&gt;If enabled you can configure one of the following notification options:&lt;br/&gt;&lt;br/&gt;0 = Do not show any notifications&lt;br/&gt;&lt;br/&gt;This setting will remove all access to Windows Update features and no notifications will be shown.&lt;br/&gt;&lt;br/&gt;1 = Show restart required notifications&lt;br/&gt;&lt;br/&gt;This setting will show notifications about restarts that are required to complete an installation.&lt;br/&gt;&lt;br/&gt;On Windows 8 and Windows RT, if this policy is Enabled, then only notifications related to restarts and the inability to detect updates will be shown. The notification options are not supported. Notifications on the login screen will always show up." gpmc_supported="At least Windows XP Professional Service Pack 1 or At least Windows 2000 Service Pack 3 through Windows 8.1 or Windows Server 2012 R2 with most current service pack. Not supported on Windows 10 and above.">Remove access to use all Windows Update features</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Configure notifications:</td><td>1 - Show restart required notifications</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Extra Registry Settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">Display names for some settings cannot be found. You might be able to resolve this issue by updating the .ADM files used by Group Policy Management.<br/><br/><table class="info" >
<tr><th scope="col">Setting</th><th scope="col">State</th></tr>
<tr><td>Software\Policies\Mozilla\Firefox\Proxy\FTPProxy</td><td></td></tr>
</table>
</div></div></div></div></div>
</body></html>