<html dir="ltr" xmlns:svg="http://www.w3.org/2000/svg" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape" gpmc_reportInitialized="false">
<head>
<meta http-equiv="X-UA-Compatible" content="IE=edge" />
<meta http-equiv="Content-Type" content="text/html; charset=UTF-16" />
<title>PT-PO-WIN-U-Windows 11 Hardening PCI</title>
<!-- Styles -->
<style type="text/css">
                body    { background-color:#FFFFFF; border:1px solid #666666; color:#000000; font-size:68%; font-family:MS Shell Dlg; margin:0,0,10px,0; word-break:normal; word-wrap:break-word; }

                table   { font-size:100%; table-layout:fixed; width:100%; }

                td,th   { overflow:visible; text-align:left; vertical-align:top; white-space:normal; }

                .title  { background:#FFFFFF; border:none; color:#333333; display:inline-table; height:24px; margin:0px,0px,0px,0px; padding-top:0px; position:relative; table-layout:fixed; z-index:5; }

                .he0_expanded    { background-color:#FEF7D6; border:1px solid #BBBBBB; color:#3333CC; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:0px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; }

                .he1_expanded    { background-color:#A0BACB; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:20px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; }

                .he0h_expanded   { background-color: #FEF0D0; border: 1px solid #BBBBBB; color: #000000; cursor: hand; display: block; font-family: MS Shell Dlg; font-size: 100%; font-weight: bold; height: 2.25em; margin-bottom: -1px; margin-left: 5px; margin-right: 0px; padding-left: 8px; padding-right: 5em; padding-top: 4px; position: relative;  }
                .he1h_expanded   { background-color: #7197B3; border: 1px solid #BBBBBB; color: #000000; cursor: hand; display: block; font-family: MS Shell Dlg; font-size: 100%; font-weight: bold; height: 2.25em; margin-bottom: -1px; margin-left: 10px; margin-right: 0px; padding-left: 8px; padding-right: 5em; padding-top: 4px; position: relative; }

                .he1    { background-color:#A0BACB; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:20px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; }

                .he2    { background-color:#C0D2DE; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:30px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; }

                .he3    { background-color:#D9E3EA; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:40px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; }

                .he4    { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:50px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; }

                .he4h   { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:55px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; }

                .he4i   { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:55px; margin-right:0px; padding-bottom:5px; padding-left:21px; padding-top:4px; position:relative; }

                .he2i   { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:35px; margin-right:0px; padding-bottom:5px; padding-left:21px; padding-top:4px; position:relative;}
                .he5    { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:60px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; }

                .he5h   { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; padding-right:5em; padding-top:4px; margin-bottom:-1px; margin-left:65px; margin-right:0px; position:relative; }

                .he5i   { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:65px; margin-right:0px; padding-left:21px; padding-bottom:5px; padding-top: 4px; position:relative; }

                div .expando { color:#000000; text-decoration:none; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:normal; position:absolute; right:10px; text-decoration:underline; z-index: 0; }

                .he0 .expando { font-size:100%; }

                .info, .info3, .info4, .disalign  { line-height:1.6em; padding:0px,0px,0px,0px; margin:0px,0px,0px,0px; }

                .disalign TD                      { padding-bottom:5px; padding-right:10px; }

                .info TD                          { padding-right:10px; width:50%; }

                .info3 TD                         { padding-right:10px; width:33%; }

                .info4 TD, .info4 TH              { padding-right:10px; width:25%; }

                .info TH, .info3 TH, .info4 TH, .disalign TH { border-bottom:1px solid #CCCCCC; padding-right:10px; }

                .subtable, .subtable3             { border:1px solid #CCCCCC; margin-left:0px; background:#FFFFFF; margin-bottom:10px; }

                .subtable TD, .subtable3 TD       { padding-left:10px; padding-right:5px; padding-top:3px; padding-bottom:3px; line-height:1.1em; }

                .subtable TH, .subtable3 TH       { border-bottom:1px solid #CCCCCC; font-weight:normal; padding-left:10px; line-height:1.6em;  }

                .subtable .footnote               { border-top:1px solid #CCCCCC; }

                .subtable3 .footnote, .subtable .footnote { border-top:1px solid #CCCCCC; }

                .subtable_frame     { background:#D9E3EA; border:1px solid #CCCCCC; margin-bottom:10px; margin-left:15px; }

                .subtable_frame TD  { line-height:1.1em; padding-bottom:3px; padding-left:10px; padding-right:15px; padding-top:3px; }

                .subtable_frame TH  { border-bottom:1px solid #CCCCCC; font-weight:normal; padding-left:10px; line-height:1.6em; }

                .subtableInnerHead { border-bottom:1px solid #CCCCCC; border-top:1px solid #CCCCCC; }

                .explainlink            { color:#0000FF; text-decoration:none; cursor:hand; }

                .explainlink:hover      { color:#0000FF; text-decoration:underline; }

                .spacer { background:transparent; border:1px solid #BBBBBB; color:#FFFFFF; display:block; font-family:MS Shell Dlg; font-size:100%; height:10px; margin-bottom:-1px; margin-left:43px; margin-right:0px; padding-top: 4px; position:relative; }

                .filler { background:transparent; border:none; color:#FFFFFF; display:block; font:100% MS Shell Dlg; line-height:8px; margin-bottom:-1px; margin-left:53px; margin-right:0px; padding-top:4px; position:relative; }

                .container { display:block; position:relative; }

                .rsopheader { background-color:#A0BACB; border-bottom:1px solid black; color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-bottom:5px; text-align:center; }

                .rsopname { color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-left:11px; }

                .gponame{ color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-left:11px; }

                .gpotype{ color:#333333; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; padding-left:11px; }

                #uri    { color:#333333; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; }

                #dtstamp{ color:#333333; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; text-align:left; width:30%; }

                #objshowhide { color:#000000; cursor:hand; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; margin-right:0px; padding-right:10px; text-align:right; text-decoration:underline; z-index:2; word-wrap:normal; }

                #gposummary { display:block; }

                #gpoinformation { display:block; }

                @media print {

                    #objshowhide{ display:none; }

                    body    { color:#000000; border:1px solid #000000; }

                    .title  { color:#000000; border:1px solid #000000; }

                    .he0_expanded    { color:#000000; border:1px solid #000000; }

                    .he1h_expanded   { color:#000000; border:1px solid #000000; }

                    .he1_expanded    { color:#000000; border:1px solid #000000; }

                    .he1    { color:#000000; border:1px solid #000000; }

                    .he2    { color:#000000; background:#EEEEEE; border:1px solid #000000; }

                    .he3    { color:#000000; border:1px solid #000000; }

                    .he4    { color:#000000; border:1px solid #000000; }

                    .he4h   { color:#000000; border:1px solid #000000; }

                    .he4i   { color:#000000; border:1px solid #000000; }

                    .he5    { color:#000000; border:1px solid #000000; }

                    .he5h   { color:#000000; border:1px solid #000000; }

                    .he5i   { color:#000000; border:1px solid #000000; }

                    }

</style>
<!-- Scripts -->
<script type="text/javascript" language="javascript">
/*
String "strShowHide(0/1)"
0 = Hide all mode.
1 = Show all mode.
*/

var windowsArray = new Array();
var strShowHide = 1;

//Localized strings

var strShow = "show";
var strHide = "hide";
var strShowAll = "show all";
var strHideAll = "hide all";
var strShown = "shown";
var strHidden = "hidden";
var strExpandoNumPixelsFromEdge = "10px";


function IsSectionHeader(obj) {
    return (obj.className === "he0_expanded") || (obj.className === "he0h_expanded") || (obj.className === "he1h_expanded") || (obj.className === "he1_expanded") || (obj.className === "he1") || (obj.className === "he2") || (obj.className === "he3") || (obj.className === "he4") || (obj.className === "he4h") || (obj.className === "he5") || (obj.className === "he5h");
}

function IsSectionExpandedByDefault(objHeader) {
    if (objHeader === null) {
        return false;
    } else {
        return (objHeader.className.slice(objHeader.className.lastIndexOf("_")) === "_expanded");
    }
}

function SetSectionState(objHeader, strState) {
    var i = 0;
    var j;
    var all = objHeader.parentElement.ownerDocument.all;

    if (all === null) {
        return;
    }

    for (j = 0; j < all.length; j++) {
        if (all[j] === objHeader) {
            break;
        }
        i = i + 1;
    }

    for (j = i; j < all.length; j++) {
        if (all[i].className === "container") {
            break;
        }
        i = i + 1;
    }

    var objContainer = all[i];

    if (strState === "toggle") {
        if (objContainer.style.display === "none") {
            SetSectionState(objHeader, "show");
        }
        else {
            SetSectionState(objHeader, "hide");
        }
    }
    else {
        var objExpando = objHeader.children[1];

        if (strState === "show") {
            objContainer.style.display = "block";
            objExpando.innerText = strHide;
        }
        else if (strState === "hide") {
            objContainer.style.display = "none";
            objExpando.innerText = strShow;
        }
    }
}

function ShowSection(objHeader) {
    SetSectionState(objHeader, "show");
}

function HideSection(objHeader) {
    SetSectionState(objHeader, "hide");
}

function ToggleSection(objHeader) {
    SetSectionState(objHeader, "toggle");
}

/*================================================================================
' link at the top of the page to collapse/expand all collapsable elements
'================================================================================
*/
function objshowhide_onClick() {
    var obji;
    var objBody = document.body.getElementsByTagName("*");

    if (objBody === null) {
        return;
    }
    
    switch (strShowHide) {
        case 0:
            strShowHide = 1;
            window.objshowhide.innerText = strShowAll;
            for (obji = 0; obji < objBody.length; obji++) {
                if (objBody[obji].className !== 'undefined' && IsSectionHeader(objBody[obji])) {
                    HideSection(objBody[obji]);
                }
            }
            break;
        case 1:
            strShowHide = 0;
            window.objshowhide.innerText = strHideAll;
            for (obji = 0; obji < objBody.length; obji++) {
                if (objBody[obji].className !== 'undefined' && IsSectionHeader(objBody[obji])) {
                    ShowSection(objBody[obji]);
                }
            }
            break;
    }
}

/*================================================================================
' onload collapse all except the first two levels of headers (he0, he1)
'================================================================================*/
function window_onload() {
    // Only initialize once.  The UI may reinsert a report into the webbrowser control,
    // firing onLoad multiple times.
    if (document.documentElement.getAttribute("gpmc_reportInitialized").toUpperCase() !== "TRUE") {
        // Set text direction
        fDetDir(document.dir.toUpperCase());

        // Initialize sections to default expanded/collapsed state.
        var objBody = document.body.getElementsByTagName("*");

        if (objBody === null) {
            return;
        }

        for (var obji = 0; obji < objBody.length; obji++) {
            if (IsSectionHeader(objBody[obji])) {
                if (IsSectionExpandedByDefault(objBody[obji])) {
                    ShowSection(objBody[obji]);
                }
                else {
                    HideSection(objBody[obji]);
                }
            }
        }

        objshowhide.innerText = strShowAll;

        document.documentElement.setAttribute("gpmc_reportInitialized", "true");
    }
}

/*'================================================================================
' When direction (LTR/RTL) changes, change adjust for readability
'================================================================================
*/
function document_onPropertyChange() {
    if (window.event.propertyName === "dir") {
        fDetDir(document.dir.toUpperCase());
    }
}

function fDetDir(strDir) {
    var colRules;
    var nug;
    var i;
    var strClass;

    switch (strDir.toUpperCase()) {
        case "LTR":
            colRules = document.styleSheets[0].cssRules;
            if (colRules !== null && colRules !== undefined ) {            
                for (i = 0; i < colRules.length - 1; i++) {
                    nug = colRules[i];
                    strClass = nug.selectorText;
                    if (nug.style.textAlign === "right") {
                        nug.style.textAlign = "left";
                    }
                    switch (strClass) {
                        case "div .expando":
                            nug.style.Left = "";
                            nug.style.Right = strExpandoNumPixelsFromEdge;
                            break;
                        case "#objshowhide":
                            nug.style.textAlign = "right";
                            break;
                    }
                }
            }
            break;
        case "RTL":
            colRules = document.styleSheets[0].cssRules;
            if (colRules !== null && colRules !== undefined ) {            
                for (i = 0; i < colRules.length - 1; i++) {
                    nug = colRules[i];
                    strClass = nug.selectorText;
                    if (nug.style.textAlign === "left") {
                        nug.style.textAlign = "right";
                    }
                    switch (strClass) {
                        case "div .expando":
                            nug.style.Left = strExpandoNumPixelsFromEdge;
                            nug.style.Right = "";
                            break;
                        case "#objshowhide":
                            nug.style.textAlign = "left";
                            break;
                    }
                }
            }
            break;
    }
}

/*'================================================================================
'When printing reports, if a given section is expanded, let's says "shown" (instead of "hide" in the UI).
'================================================================================
*/
function window_onbeforeprint() {
    var obji;
    for (obji in document.all) {
        if (document.all.hasOwnProperty(obji)) {
            if (obji.className === "expando") {
                if (obji.innerText === strHide) {
                    obji.innerText = strShown;
                }
                if (obji.innerText === strShow) {
                    obji.innerText = strHidden;
                }
            }
        }
    }
}

/*================================================================================
'If a section is collapsed, change to "hidden" in the printout (instead of "show").
'================================================================================
*/
function window_onafterprint() {
    var obji;
    for (obji in document.all) {
        if (document.all.hasOwnProperty(obji)) {
            if (obji.className === "expando") {
                if (obji.innerText === strShown) {
                    obji.innerText = strHide;
                }
                if (obji.innerText === strHidden) {
                    obji.innerText = strShow;
                }
            }
        }
    }
}

/*================================================================================
' Adding keypress support for accessibility
'================================================================================
*/
function document_onkeypress(event) {
    var chCode = ('charCode' in event) ? event.charCode : event.keyCode;

    //space bar (32) or carriage return (13) or line feed (10)
    if (chCode == "32" || chCode == "13" || chCode == "10") {
        if (event.srcElement.className === "expando") {
            document_onclick();
            event.returnValue = false;
        }
        if (event.srcElement.className === "sectionTitle") {
            document_onclick();
            event.returnValue = false;
        }
        if (event.srcElement.id === "objshowhide") {
            objshowhide_onClick();
            event.returnValue = false;
        }
    }
}

/*================================================================================
' When user clicks anywhere in the document body, determine if user is clicking
' on a header element.
'================================================================================
*/
function document_onclick() {
    var strsrc = window.event.srcElement;

    while (strsrc.className === "sectionTitle" || strsrc.className === "expando") {
        strsrc = strsrc.parentElement;
    }

    // Only handle clicks on headers.
    if (!IsSectionHeader(strsrc)) {
        return;
    }

    ToggleSection(strsrc);

    window.event.returnValue = false;
}

function ToggleState(e) {
    var objParentDisplayItem;
    var objDisplayItem;
    var i;

    if (e.innerText === strShow) {
        e.innerText = strHide;
        objParentDisplayItem = e.parentNode;
        objDisplayItem = objParentDisplayItem.childNodes;
        for (i = 0; i < objDisplayItem.length; i++) {
            if (objDisplayItem[i].id === "showItem") {
                objDisplayItem[i].style.display = "Block";
            }
        }
    }
    else {
        e.innerText = strShow;
        objParentDisplayItem = e.parentNode;
        objDisplayItem = objParentDisplayItem.childNodes;
        for (i = 0; i < objDisplayItem.length; i++) {
            if (objDisplayItem[i].id === "showItem") {
                objDisplayItem[i].style.display = "None";
            }
        }
    }
}

function traverseToURL(url) {
    if (url != null) {
        var urlInitialSubstr = url.substring(0, 4).toLowerCase();
        if (urlInitialSubstr === "http") {
            window.open(url, "_blank");
        }
    }
}

function getExplainWindowTitle() {
    return document.getElementById("explainText_windowTitle").innerHTML;
}

function getExplainWindowStyles() {
    return document.getElementById("explainText_windowStyles").innerHTML;
}

function getExplainWindowSettingPathLabel() {
    return document.getElementById("explainText_settingPathLabel").innerHTML;
}

function getExplainWindowExplainTextLabel() {
    return document.getElementById("explainText_explainTextLabel").innerHTML;
}

function getExplainWindowPrintButton() {
    return document.getElementById("explainText_printButton").innerHTML;
}

function getExplainWindowCloseButton() {
    return document.getElementById("explainText_closeButton").innerHTML;
}

function getNoExplainTextAvailable() {
    return document.getElementById("explainText_noExplainTextAvailable").innerHTML;
}

function getExplainWindowSupportedLabel() {
    return document.getElementById("explainText_supportedLabel").innerHTML;
}

function getNoSupportedTextAvailable() {
    return document.getElementById("explainText_noSupportedTextAvailable").innerHTML;
}

function showExplainText(srcElement)
{
    var strDiagArgs;

    var strSettingName = srcElement.getAttribute("gpmc_settingName");
    var strSettingPath = srcElement.getAttribute("gpmc_settingPath");
    var strSettingDescription = srcElement.getAttribute("gpmc_settingDescription");

    if (strSettingDescription === "")
    {
        strSettingDescription = getNoExplainTextAvailable();
    }

    var strSupported = srcElement.getAttribute("gpmc_supported");

    if (strSupported === "")
    {
        strSupported = getNoSupportedTextAvailable();
    }

    var strHtml = "<html dir=" + document.dir +  ">\n";
    strHtml += "<head>\n";
    strHtml += "<title>" + getExplainWindowTitle() + "</title>\n";
    strHtml += "<style type='text/css'>\n" + getExplainWindowStyles() + "</style>\n";
    strHtml += "</head>\n";
    strHtml += "<body>\n";
    strHtml += "<div class='head'>" + strSettingName +"</div>\n";
    strHtml += "<div class='path'><b>" + getExplainWindowSettingPathLabel() + "</b><br/>" + strSettingPath +"</div>\n";
    strHtml += "<div class='path'><b>" + getExplainWindowSupportedLabel() + "</b><br/>" + strSupported +"</div>\n";
    strHtml += "<div class='info'>\n";
    strHtml += "<div class='hdr'>" + getExplainWindowExplainTextLabel() + "</div>\n";
    strHtml += "<div class='bdy'>" + strSettingDescription + "</div>\n";
    strHtml += "<div class='btn'>";
    strHtml += getExplainWindowPrintButton();
    strHtml += getExplainWindowCloseButton();
    strHtml += "</div></body></html>";

    // IE specific method for showing the popup.
    if(navigator.userAgent.indexOf("MSIE") > 0 && window.location.toString().indexOf("file:") === -1)
    {
        strDiagArgs = "dialogHeight=360px;dialogWidth=630px;status=no;scroll=yes;resizable=yes;minimize=yes;maximize=yes;";

        var vModeless = window.showModelessDialog("about:blank", window, strDiagArgs);
        vModeless.document.write(strHtml);
        vModeless.document.close();
        vModeless.location.reload(false);
                        
        window.event.returnValue = false;
    }
    else
    {
        strDiagArgs = "height=360px, width=630px, status=no, toolbar=no, scrollbars=yes, resizable=yes ";
        
        var expWin = window.open("", "expWin", strDiagArgs);
        expWin.document.write("");
        expWin.document.close();
        expWin.document.write(strHtml);
        expWin.document.close();
        expWin.focus();
    }
    
    return false;
}

function showEvents(srcElement,bVerbose,bInformational,bWarning,bError)
{
    var strWindowId = "EventDetails_" + srcElement.getAttribute("eventLogActivityId");
    if((windowsArray[strWindowId]) && (windowsArray[strWindowId].closed === false)) {
        windowsArray[strWindowId].focus();
    } else {
        var eventIdLabelNode, eventTimeLabelNode, eventDescriptionLabelNode, eventDetailsLabelNode, eventXmlLabelNode, gpEventsTitleNode;
        var eventIdLabelNodeText, eventTimeLabelNodeText, eventDescriptionLabelNodeText, eventXmlLabelNodeText, gpEventsTitleNodeText, eventDetailsLabelNodeText;
        var singlePassEventsDetailsNode, eventRecordArray;
        var dataNotFoundWarningLabelNode, dataNotFoundWarningLabelNodeText;
        var mainSection;
        var attributeValue;
        var singlePassEventsDetails;
        var singlePassEventsDetailsChildren;
        var node;
        var children;
        var xmlDocumentRoot;
        var xmlDocument;
        var serializer;
        var itemSub;
        var doc;

        if (window.XMLSerializer) 
        {
           serializer = new XMLSerializer();
        }

        if (window.DOMParser) 
        {
           // This browser appears to support DOMParser
           parser = new DOMParser();

           doc = document.getElementById("data-island").textContent;
           xmlDocumentRoot = parser.parseFromString(doc, "application/xml");
           xmlDocument = xmlDocumentRoot.documentElement;
           itemSub = 1;
        } 
        else 
        { 
           // Internet Explorer, create a new XML document using ActiveX 
           // and use loadXML as a DOM parser. 
           try 
           {
              doc = document.getElementById("data-island");

              xmlDocumentRoot = new ActiveXObject("Msxml2.DOMDocument.6.0"); 
              xmlDocumentRoot.async = false; 
              xmlDocumentRoot.loadXML(doc.innerHTML);
              xmlDocument = xmlDocumentRoot.documentElement;
              itemSub = 0;
           } 
           catch(e) 
           {
              // Not supported.
           }
        }

        if (xmlDocument != null) {
            mainSection = xmlDocument.getElementsByTagName("MainSection")[0].childNodes;

            if (mainSection != null) {
                for (children = 0; children < mainSection.length; children++) {
                    node = mainSection[children];
                    if (node.nodeType === 1 && node.nodeName === 'Label') {
                        attributeValue = node.getAttribute("Name");
                        if (attributeValue != null) {
                            if (attributeValue === 'ComponentStatus_EventId') {
                                eventIdLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_EventTime') {
                                eventTimeLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_EventDescription') {
                                eventDescriptionLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_EventXml') {
                                eventXmlLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_EventDetails') {
                                eventDetailsLabelNode = node.childNodes[1];
                            }
                            if (attributeValue === 'ComponentStatus_GPEvents') {
                                gpEventsTitleNode = node.childNodes[1];
                            }
                            if (attributeValue === 'Warning_DataNotFound') {
                                dataNotFoundWarningLabelNode = node.childNodes[1];
                            }
                        }
                    }
                }
            }

            singlePassEventsDetails = xmlDocument.getElementsByTagName("SinglePassEventsDetails");
            if (singlePassEventsDetails != null) {
                for (singlePassEventsDetailsChildren = 0; singlePassEventsDetailsChildren < singlePassEventsDetails.length; singlePassEventsDetailsChildren++) {
                    node = singlePassEventsDetails[singlePassEventsDetailsChildren];
                    attributeValue = node.getAttribute("ActivityId");
                    if (attributeValue === srcElement.getAttribute("eventLogActivityId")) {
                        singlePassEventsDetailsNode = node;
                    }
                }
            }
        }
        
        eventIdLabelNodeText = null;
        if (eventIdLabelNode != null) {
            if (eventIdLabelNode.childNodes.length > 0) {
                eventIdLabelNodeText = eventIdLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventIdLabelNodeText == null) {
            eventIdLabelNodeText = "Event ID";
        }

        eventTimeLabelNodeText = null;
        if (eventTimeLabelNode != null) {
            if (eventTimeLabelNode.firstChild.childNodes.length > 0) {
                eventTimeLabelNodeText = eventTimeLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventTimeLabelNodeText == null) {
            eventTimeLabelNodeText = "Event Time";
        }

        eventDescriptionLabelNodeText = null;
        if (eventDescriptionLabelNode != null) {
            if (eventDescriptionLabelNode.childNodes.length > 0) {
                eventDescriptionLabelNodeText = eventDescriptionLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventDescriptionLabelNodeText == null) {
            eventDescriptionLabelNodeText = "Event Description";
        }

        eventXmlLabelNodeText = null;
        if (eventXmlLabelNode != null) {
            if (eventXmlLabelNode.childNodes.length > 0) {
                eventXmlLabelNodeText = eventXmlLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventXmlLabelNodeText == null) {
            eventXmlLabelNodeText = "Event XML";
        }

        gpEventsTitleNodeText = null;
        if (gpEventsTitleNode != null) {
            if (gpEventsTitleNode.childNodes.length > 0) {
                gpEventsTitleNodeText = gpEventsTitleNode.childNodes[0].nodeValue;
            }
        }
        if (gpEventsTitleNodeText == null) {
            gpEventsTitleNodeText = "Group Policy Events";
        }

        eventDetailsLabelNodeText = null;
        if (eventDetailsLabelNode != null) {
            if (eventDetailsLabelNode.childNodes.length > 0) {
                eventDetailsLabelNodeText = eventDetailsLabelNode.childNodes[0].nodeValue;
            }
        }
        if (eventDetailsLabelNodeText == null) {
            eventDetailsLabelNodeText = "Event Details";
        }

        dataNotFoundWarningLabelNodeText = null;
        if (dataNotFoundWarningLabelNode != null) {
            if (dataNotFoundWarningLabelNode.childNodes.length > 0) {
                dataNotFoundWarningLabelNodeText = dataNotFoundWarningLabelNode.childNodes[0].nodeValue;
            }
        }
        if (dataNotFoundWarningLabelNodeText == null) {
            dataNotFoundWarningLabelNodeText = "Data Not Found";
        }
                
        if(singlePassEventsDetailsNode != null)
        {
            eventRecordArray = singlePassEventsDetailsNode.getElementsByTagName("EventRecord");
        }
        
        var htmlText = "<html dir=" + document.dir +  ">";
        htmlText = htmlText + "<head>";
        htmlText = htmlText + "<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\" />";
        htmlText = htmlText + "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-16\" />";
        htmlText = htmlText + "<title>" + gpEventsTitleNodeText + "</title>";
        htmlText = htmlText + "</head><style type=\"text/css\">";
        htmlText = htmlText + "body    { background-color:#FFFFFF; color:#000000; font-size:68%; font-family:MS Shell Dlg; margin:0,0,10px,0; word-break:normal; word-wrap:break-word; }";
        htmlText = htmlText + "table   { font-size:100%; table-layout:fixed; width:100%; }";
        htmlText = htmlText + "td,th   { overflow:visible; text-align:left; vertical-align:top; white-space:normal; }";
        htmlText = htmlText + ".he1    { text-align: center; vertical-align: middle; background-color:#C0D2DE; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:4em; position:relative; }";
        htmlText = htmlText + ".centerTxt { text-align: center; }";
        htmlText = htmlText + ".txtFormat1 { text-align: left; vertical-align:top; white-space:pre-line; }";
        htmlText = htmlText + "</style>";
      
        htmlText = htmlText + "<script> function toggle(e) {";
        htmlText = htmlText + "if (e.style.display === \"none\"){ e.style.display = \"\"; }";
        htmlText = htmlText + "else { e.style.display = \"none\"; }";
        htmlText = htmlText + "}</";
        htmlText = htmlText + "script";
        htmlText = htmlText + ">";
      
        htmlText = htmlText + "<body><table border=1><tr>";
        htmlText = htmlText + "<th class=\"he1\"><strong>" + eventIdLabelNodeText + "</strong></th>";
        htmlText = htmlText + "<th class=\"he1\"><strong>" + eventTimeLabelNodeText + "</strong></th>";
        htmlText = htmlText + "<th class=\"he1\"><strong>" + eventDescriptionLabelNodeText + "</strong></th>";
        htmlText = htmlText + "<th class=\"he1\"><strong>" + eventDetailsLabelNodeText + "</strong></th>";

        htmlText = htmlText + "</tr>";
        var i;
        var eventId;
        var eventTime;
        var eventDescription;
        var eventXml;
        var eventType;
        var displayEvent;
        var eventXmlId;
        var displayBgColor;

        if(eventRecordArray != null && eventRecordArray.length > 0)
        {
            for (i=0; i < eventRecordArray.length; i++)
            {
                displayEvent = false;
                var eventIdElements = eventRecordArray[i].getElementsByTagName("EventId");        
                if((eventIdElements != null) && (eventIdElements.length > 0) && (eventIdElements[0].firstChild != null))
                {
                    eventId =  eventIdElements[0].firstChild.nodeValue;
                }
                else
                {
                    eventId =  dataNotFoundWarningLabelNodeText;
                }
                var eventTimeElements = eventRecordArray[i].getElementsByTagName("EventTime");
                if((eventTimeElements != null) && (eventTimeElements.length > 0) && (eventTimeElements[0].firstChild != null))
                {
                    eventTime = eventTimeElements[0].firstChild.nodeValue;
                }
                else
                {
                    eventTime = dataNotFoundWarningLabelNodeText;
                }
                var eventDescriptionElements = eventRecordArray[i].getElementsByTagName("EventDescription");
                if((eventDescriptionElements != null) && (eventDescriptionElements.length > 0) && (eventDescriptionElements[0].firstChild != null))
                {
                        eventDescription = eventDescriptionElements[0].firstChild.nodeValue;
                }
                else
                {
                    eventDescription = dataNotFoundWarningLabelNodeText;
                }
                var eventXmlElements = eventRecordArray[i].getElementsByTagName("EventXml");
                if((eventXmlElements != null) && (eventXmlElements.length > 0) && (eventXmlElements[0].firstChild != null))
                {
                    if (window.XMLSerializer) 
                    {
                       var xml = serializer.serializeToString(eventXmlElements[0].firstChild);
                       eventXml = xml;
                    } 
                    else 
                    {
                       if (typeof eventXmlElements[0].firstChild.xml != "undefined") 
                       {
                          eventXml = eventXmlElements[0].firstChild.xml;
                       }
                    }
                }
                else
                {
                    eventXml = dataNotFoundWarningLabelNodeText;
                }
                var eventLevelElements = eventRecordArray[i].getElementsByTagName("EventLevel");
                if((eventLevelElements != null) && (eventLevelElements.length > 0) && (eventLevelElements[0].firstChild != null))
                {
                    eventType = eventLevelElements[0].firstChild.nodeValue;
                }
                else
                {
                    eventType = 5;
                }
                
                if((bVerbose === true)&&(eventType == 5))
                {
                    displayEvent = true;
                }
                else if((bInformational === true)&&(eventType == 4))
                {
                    displayEvent = true;
                }
                else if((bWarning === true)&&(eventType == 3))
                {
                    displayEvent = true;
                }
                else if((bError === true)&&((eventType == 1)||(eventType == 2)))
                {
                    displayEvent = true;
                }
                
                if (displayEvent === true)
                {
                    eventXmlId = "EventXml" + (i+"");
                    htmlText = htmlText + "<tr>";
                    htmlText = htmlText + "<td class=\"centerTxt\" style=\"background:" + displayBgColor +"\">" + eventId + "</td>";
                    htmlText = htmlText + "<td class=\"centerTxt\" style=\"background:" + displayBgColor +"\">" + eventTime + "</td>";
                    htmlText = htmlText + "<td class=\"txtFormat1\" style=\"background:" + displayBgColor +"\">" + eventDescription + "</td>";
                    htmlText = htmlText + "<td style=\"background:" + displayBgColor +"\"><span style=\"color:blue; cursor:hand\" onclick=\"toggle(" + eventXmlId +");\" onKeyPress=\"toggle(" + eventXmlId + ");\" tabIndex=1 >";
                    htmlText = htmlText + eventXmlLabelNodeText + "</span><br/>";
                    htmlText = htmlText + "<span style=\"display:none\" id=" + eventXmlId +">";
                    htmlText = htmlText + eventXml + "</span>";
                    htmlText = htmlText + "</td>";
                    htmlText = htmlText + "</tr>";
                }
            }
        }
        htmlText = htmlText + "</table></body></html>";

        if(windowsArray[strWindowId])
        {
            delete windowsArray[strWindowId];
        }
        
        // IE specific method for showing the popup.
        if(navigator.userAgent.indexOf("MSIE") > 0 && window.location.toString().indexOf("file:") === -1)
        {
            var strDiagArgs = "dialogHeight=360px;dialogWidth=630px;status=no;scroll=yes;resizable=yes;minimize=yes;maximize=yes;";

            var vModeless = window.showModelessDialog("about:blank", window, strDiagArgs);
            vModeless.document.write(htmlText);
            vModeless.document.close();
            vModeless.location.reload(false);
            windowsArray[strWindowId] = vModeless;            
        }
        else
        {
            var strDiagArgs = "height=360px, width=630px, status=no, toolbar=no, scrollbars=yes, resizable=yes";
        
            windowsArray[strWindowId] = window.open("", "", strDiagArgs);
            windowsArray[strWindowId].document.write(htmlText);
            windowsArray[strWindowId].focus();
        } 
    }

    xmlDocumentRoot = null;
}

function cleanUp() {
    var windowsArray = this.windowsArray;
    for (var currentWindow in windowsArray) {
        if (windowsArray.hasOwnProperty(currentWindow)) {
            windowsArray[currentWindow].close();
        }
    }
}

function getMessageText(messageNode) {
    if (messageNode != null) {
        if (messageNode.firstChild != null) {
            if (messageNode.firstChild.nodeType === 3) {
                for (var i = 0; i < messageNode.childNodes.length; i++) 
                {
                    var curNode = messageNode.childNodes[i];
                    if(curNode.nodeType === 1){
                        return curNode.childNodes[0].nodeValue;
                    }
                }
            } else {
                return messageNode.firstChild.childNodes[0].nodeValue;
            }
        }
    }
    return null;
}

function showComponentProcessingDetails(srcElement) {
    var strWindowId = "ProcessingDetails_" + srcElement.getAttribute("eventLogActivityId");
    if ((windowsArray[strWindowId]) && (windowsArray[strWindowId].closed === false)) {
        windowsArray[strWindowId].focus();
    } else {
        var doc;
        var parser;
        var xmlDocumentRoot;
        var xmlDocument;

        var extensionsProcessedLabelNode, slowLinkThresholdLabelNode, linkSpeedLabelNode, extensionsProcessedTimeTakenNode;
        var domainControllerIpLabelNode, domainControllerNameLabelNode, processingTypeLabelNode, loopbackModeLabelNode;
        var processingTriggerLabelNode, extensionNameLabelNode, timeTakenLabelNode;
        var dataNotFoundWarningLabelNode;
        var singlePassEventsDetailsNode, totalProcessingTimeLabelNode, refreshMessageLabelNode;
        var processingDetailsUserTitleNode, processingDetailsComputerTitleNode;
        var policySectionNode;
        var policyEventsDetailsNode, detailsLabelNode;

        var extensionsProcessedLabelNodeText, slowLinkThresholdLabelNodeText, linkSpeedLabelNodeText, extensionsProcessedTimeTakenNodeText;
        var domainControllerIpLabelNodeText, domainControllerNameLabelNodeText, processingTypeLabelNodeText, loopbackModeLabelNodeText;
        var processingTriggerLabelNodeText, extensionNameLabelNodeText, timeTakenLabelNodeText;
        var dataNotFoundWarningLabelNodeText, totalProcessingTimeLabelNodeText, refreshMessageLabelNodeText;
        var processingDetailsUserTitleNodeText, processingDetailsComputerTitleNodeText;
        var detailsLabelNodeText;

        var slowLinkThresholdValue, linkSpeedValue, domainControllerIpValue, domainControllerNameValue;
        var processingTypeValue, loopbackModeValue, processingTriggerValue, totalPolicyProcessingTime, extensionProcessingTimeArray;
        var cseNameArray = new Array();
        var cseElapsedTimeArray = new Array();
        var policyApplicationFinishedTime;

        var isComputerProcessing;
        var strDiagArgs;
        var mainSection;
        var attributeValue;
        var singlePassEventsDetails;
        var singlePassEventsDetailsChildren;
        var node;
        var children;
        var itemSub;

        if (window.DOMParser) 
        {
           // This browser appears to support DOMParser
           parser = new DOMParser();
           doc = document.getElementById("data-island").textContent;

           xmlDocumentRoot = parser.parseFromString(doc, "application/xml");

           xmlDocument = xmlDocumentRoot.documentElement;

           itemSub = 1;
        } 
        else 
        { 
           // Internet Explorer, create a new XML document using ActiveX 
           // and use loadXML as a DOM parser. 
           try 
           {
              doc = document.getElementById("data-island");

              xmlDocumentRoot = new ActiveXObject("Msxml2.DOMDocument.6.0"); 
              xmlDocumentRoot.async = false; 
              xmlDocumentRoot.loadXML(doc.innerHTML);
              xmlDocument = xmlDocumentRoot.documentElement;
              itemSub = 0;
           } 
           catch(e) 
           {
              // Not supported.
           }
        }

        if (xmlDocument != null) {
            mainSection = xmlDocument.getElementsByTagName("MainSection")[0].childNodes;

            if (mainSection != null) {
                for (children = 0; children < mainSection.length; children++) {
                    node = mainSection[children];
                    if (node.nodeType === 1 && node.nodeName === 'Label') {
                        attributeValue = node.getAttribute("Name")
                        if (attributeValue != null) {
                            if (attributeValue === 'ComponentStatus_ExtensionsProcessed') {
                                extensionsProcessedLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_SlowLinkThreshold') {
                                slowLinkThresholdLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_LinkSpeed') {
                                linkSpeedLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_TimeTaken') {
                                extensionsProcessedTimeTakenNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_DomainControllerIP') {
                                domainControllerIpLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_DomainControllerName') {
                                domainControllerNameLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ProcessingTrigger') {
                                processingTriggerLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ExtensionName') {
                                extensionNameLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_TimeTaken') {
                                timeTakenLabelNode = node;
                            }
                            if (attributeValue === 'Warning_DataNotFound') {
                                dataNotFoundWarningLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_TotalProcessingTime') {
                                totalProcessingTimeLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_RefreshMessage') {
                                refreshMessageLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_UserProcessingDetails') {
                                processingDetailsUserTitleNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ComputerProcessingDetails') {
                                detailsLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ProcessingType') {
                                processingTypeLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_LoopbackMode') {
                                loopbackModeLabelNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_UserProcessingDetails') {
                                processingDetailsUserTitleNode = node;
                            }
                            if (attributeValue === 'ComponentStatus_ComputerProcessingDetails') {
                                processingDetailsComputerTitleNode = node;
                            }
                        }
                    }
                }
            }

            singlePassEventsDetails = xmlDocument.getElementsByTagName("SinglePassEventsDetails");
            if (singlePassEventsDetails != null) {
                for (singlePassEventsDetailsChildren = 0; singlePassEventsDetailsChildren < singlePassEventsDetails.length; singlePassEventsDetailsChildren++) {
                    node = singlePassEventsDetails[singlePassEventsDetailsChildren];
                    if (node.getAttribute("ActivityId") === srcElement.getAttribute("eventLogActivityId")) {
                        singlePassEventsDetailsNode = node;
                    }
                }
            }

            if (singlePassEventsDetailsNode) {
                policyEventsDetailsNode = singlePassEventsDetailsNode.parentNode;
                if (policyEventsDetailsNode) {
                    policySectionNode = policyEventsDetailsNode.parentNode;
                    if (policySectionNode) {
                        if (policySectionNode.nodeName === 'UserPolicySection') {
                            isComputerProcessing = false;
                        }
                        if (policySectionNode.nodeName === 'ComputerPolicySection') {
                            isComputerProcessing = true;
                        }
                    }
                }
            }
        }

        
        extensionsProcessedLabelNodeText = getMessageText(extensionsProcessedLabelNode);
        slowLinkThresholdLabelNodeText = getMessageText(slowLinkThresholdLabelNode);
        linkSpeedLabelNodeText = getMessageText(linkSpeedLabelNode);
        domainControllerIpLabelNodeText = getMessageText(domainControllerIpLabelNode);
        domainControllerNameLabelNodeText = getMessageText(domainControllerNameLabelNode);
        processingTypeLabelNodeText = getMessageText(processingTypeLabelNode);
        loopbackModeLabelNodeText = getMessageText(loopbackModeLabelNode);
        processingTriggerLabelNodeText = getMessageText(processingTriggerLabelNode);
        extensionNameLabelNodeText = getMessageText(extensionNameLabelNode);
        timeTakenLabelNodeText = getMessageText(timeTakenLabelNode);
        processingDetailsUserTitleNodeText = getMessageText(processingDetailsUserTitleNode);
        processingDetailsComputerTitleNodeText = getMessageText(processingDetailsComputerTitleNode);
        dataNotFoundWarningLabelNodeText = getMessageText(dataNotFoundWarningLabelNode);
        totalProcessingTimeLabelNodeText = getMessageText(totalProcessingTimeLabelNode);
        refreshMessageLabelNodeText = getMessageText(refreshMessageLabelNode);
        detailsLabelNodeText = getMessageText(detailsLabelNode);
     

        slowLinkThresholdValue = null;
        linkSpeedValue = null;
        domainControllerIpValue = null;
        domainControllerNameValue = null;
        processingTypeValue = null;
        loopbackModeValue = null;
        processingTriggerValue = null;

        if (singlePassEventsDetailsNode != null) {
            slowLinkThresholdValue = singlePassEventsDetailsNode.getAttribute("SlowLinkThresholdInKbps");
            linkSpeedValue = singlePassEventsDetailsNode.getAttribute("LinkSpeedInKbps");
            domainControllerIpValue = singlePassEventsDetailsNode.getAttribute("DomainControllerIPAddress");
            domainControllerNameValue = singlePassEventsDetailsNode.getAttribute("DomainControllerName");
            processingTypeValue = singlePassEventsDetailsNode.getAttribute("ProcessingAppMode");
            loopbackModeValue = singlePassEventsDetailsNode.getAttribute("PolicyProcessingMode");
            processingTriggerValue = singlePassEventsDetailsNode.getAttribute("ProcessingTrigger");
            totalPolicyProcessingTime = singlePassEventsDetailsNode.getAttribute("PolicyElapsedTime");
            extensionProcessingTimeArray = singlePassEventsDetailsNode.getElementsByTagName("ExtensionProcessingTime");
        }
        if (slowLinkThresholdValue == null) {
            slowLinkThresholdValue = dataNotFoundWarningLabelNodeText;
        }
        if (linkSpeedValue == null) {
            linkSpeedValue = dataNotFoundWarningLabelNodeText;
        }
        if (domainControllerIpValue == null) {
            domainControllerIpValue = dataNotFoundWarningLabelNodeText;
        }
        else {
            domainControllerIpValue = domainControllerIpValue.replace(/^\\\\/, "");
        }
        if (domainControllerNameValue == null) {
            domainControllerNameValue = dataNotFoundWarningLabelNodeText;
        }
        else {
            domainControllerNameValue = domainControllerNameValue.replace(/^\\\\/, "");
        }
        if (processingTypeValue == null) {
            processingTypeValue = dataNotFoundWarningLabelNodeText;
        }
        if (loopbackModeValue == null) {
            loopbackModeValue = dataNotFoundWarningLabelNodeText;
        }
        if (processingTriggerValue == null) {
            processingTriggerValue = dataNotFoundWarningLabelNodeText;
        }

        if (extensionProcessingTimeArray != null && extensionProcessingTimeArray.length > 0) {
            var cseName;
            var cseElapsedTime;
            var cseProcessedTime;
            var cseId;
            var i;
            var index = 0;
            for (i = 0; i < extensionProcessingTimeArray.length; i++) {
                var cseNameElements = extensionProcessingTimeArray[i].getElementsByTagName("ExtensionName");
                var cseElapsedTimeElements = extensionProcessingTimeArray[i].getElementsByTagName("ElapsedTime");
                var cseProcessedTimeElements = extensionProcessingTimeArray[i].getElementsByTagName("ProcessedTime");
                var cseIdElements = extensionProcessingTimeArray[i].getElementsByTagName("ExtensionGuid");
                if ((cseNameElements.length > 0) && (cseElapsedTimeElements.length > 0) && (cseProcessedTimeElements.length > 0) && (cseIdElements.length > 0)) {
                    if ((cseNameElements[0].firstChild != null) && (cseElapsedTimeElements[0].firstChild != null) && (cseProcessedTimeElements[0].firstChild != null) && (cseIdElements[0].firstChild != null)) {
                        cseName = cseNameElements[0].firstChild.nodeValue;
                        cseElapsedTime = cseElapsedTimeElements[0].firstChild.nodeValue;
                        cseProcessedTime = cseProcessedTimeElements[0].firstChild.nodeValue;
                        cseId = cseIdElements[0].firstChild.nodeValue;
                        if ((cseName != null) && (cseElapsedTime != null) && (cseProcessedTime != null) && (cseId != null)) {
                            cseNameArray[index] = cseName;
                            cseElapsedTimeArray[index] = cseElapsedTime;
                            index = index + 1;
                            if (cseId === '{00000000-0000-0000-0000-000000000000}') {
                                policyApplicationFinishedTime = cseProcessedTime;
                            }
                        }
                    }
                }
            }
        }
          
        var htmlText = "<html dir=" + document.dir +  ">";
        htmlText = htmlText + "<head>";
        htmlText = htmlText + "<meta http-equiv=\"X-UA-Compatible\" content=\"IE=edge\" />";
        htmlText = htmlText + "<meta http-equiv=\"Content-Type\" content=\"text/html; charset=UTF-16\" />";
        if(isComputerProcessing != null)
        {
            if(isComputerProcessing === true)
            {
                htmlText = htmlText + "<title>" + processingDetailsComputerTitleNodeText + "</title>";
            }
            else
            {
                htmlText = htmlText + "<title>" + processingDetailsUserTitleNodeText + "</title>";
            }
        }
        

        htmlText = htmlText + "</head><style type=\"text/css\">";
        htmlText = htmlText + "body    { background-color:#FFFFFF; color:#000000; font-size:68%; font-family:MS Shell Dlg; margin:0,0,10px,0; word-break:normal; word-wrap:break-word; }";
        htmlText = htmlText + "table   { font-size:100%; table-layout:fixed; width:100%; }";
        htmlText = htmlText + "td,th   { overflow:visible; text-align:left; vertical-align:top; white-space:normal; }";
        htmlText = htmlText + ".he0    { background-color:#FEF7D6; border:1px solid #BBBBBB; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:0px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; width:100%; }";
        htmlText = htmlText + ".he1    { color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2em;margin-left: 5 px; margin-top: 5 px; position:relative; width:100%; }";
        htmlText = htmlText + ".tblspecialfmt { border:1px solid black;border-collapse:collapse; }";
        htmlText = htmlText + ".tblfirstcolfmt { border-left-width: 1px;border-top-width: 1px;border-bottom-width: 1px;border-right-width: 0px;border-style: solid; border-color: black; }";
        htmlText = htmlText + ".tblsecondcolfmt { border-left-width: 0px;border-top-width: 1px;border-bottom-width: 1px;border-right-width: 1px;border-style: solid; border-color: black; }";
        htmlText = htmlText + "</style>";
        htmlText = htmlText + "<body>";
        htmlText = htmlText + "<span class=\"he1\">" + refreshMessageLabelNodeText + " " + policyApplicationFinishedTime + "</span>" ;
        htmlText = htmlText + "<div class=\"he0\">" + detailsLabelNodeText + "</div>"
        htmltext = htmlText + "<table><tr>";

        htmlText = htmlText + "<td>";
        htmlText = htmlText + "<table>";
        htmlText = htmlText + "<tr><td colspan=\"2\">&nbsp;</td></tr>";


        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + processingTypeLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + processingTypeValue + "</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + loopbackModeLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + loopbackModeValue + "</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + linkSpeedLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + linkSpeedValue + "</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + slowLinkThresholdLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + slowLinkThresholdValue + "</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + domainControllerNameLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + domainControllerNameValue +"</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + domainControllerIpLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + domainControllerIpValue +"</td></tr>";

        htmlText = htmlText + "<tr><td style=\"width: 50%\"><strong>" + processingTriggerLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td>" + processingTriggerValue + "</td></tr>";

        htmlText = htmlText + "</table></td></tr>";
        htmlText = htmlText + "<tr ><td ><table>";


        htmlText = htmlText + "<tr><td><span class=\"he1\" >" + extensionsProcessedLabelNodeText +"</span></td></tr>";
        htmlText = htmlText + "<tr><td><table class=\"tblspecialfmt\" >";
        htmlText = htmlText + "<tr><td class=\"tblfirstcolfmt\" style=\"width: 50%;background-color:#FEF7D6;\"><strong>" + extensionNameLabelNodeText + "</strong></td>";
        htmlText = htmlText + "<td class=\"tblsecondcolfmt\" style=\"background-color:#FEF7D6;\" ><strong>" + timeTakenLabelNodeText + "</strong></td></tr>";

        for (var idx in cseNameArray)
        {
            htmlText = htmlText + "<tr><td style=\"width: 50%\">" + cseNameArray[idx] + "</td>";                   
            htmlText = htmlText + "<td>" + cseElapsedTimeArray[idx] + "</td></tr>";
        }

        if (totalPolicyProcessingTime != null)
        {
            htmlText = htmlText + "<tr><td class=\"tblfirstcolfmt\" style=\"width: 50%\" >" + totalProcessingTimeLabelNodeText +":</td>";
            htmlText = htmlText + "<td class=\"tblsecondcolfmt\">" + totalPolicyProcessingTime + "</td></tr>";
        }
        htmlText = htmlText + "</table></td></tr></table></td></tr></table></body></html>";

        if(windowsArray[strWindowId])
        {
            delete windowsArray[strWindowId];
        }
         
        // IE specific method for showing the popup.
        if(navigator.userAgent.indexOf("MSIE") > 0 && window.location.toString().indexOf("file:") === -1)
        {
            strDiagArgs = "dialogHeight=360px;dialogWidth=630px;status=no;scroll=yes;resizable=yes;minimize=yes;maximize=yes;";

            var vModeless = window.showModelessDialog("about:blank", window, strDiagArgs);
            vModeless.document.write(htmlText);
            vModeless.document.close();
            vModeless.location.reload(false);
            windowsArray[strWindowId] = vModeless;                      
        }
        else
        {
            strDiagArgs = "height=360px, width=630px, status=no, toolbar=no, scrollbars=yes, resizable=yes";
        
            windowsArray[strWindowId] = window.open("", "" , strDiagArgs);
            windowsArray[strWindowId].document.write(htmlText);
            windowsArray[strWindowId].focus();
        }
    }

    xmlDocumentRoot = null;
}
</script>
</head>

<body onload="window_onload();" onclick="document_onclick();" onkeypress="document_onkeypress(event);" onunload="cleanUp();">

<!-- HTML resources -->
<div style="display:none;">
        <div id="explainText_windowTitle">Group Policy Management</div>
        <div id="explainText_windowStyles">
        
                            body  { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; }

                            .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; }

                            .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; }

                            .info { padding-left:10px;width:100%; }

                            table { font-size:100%; width:100%; border:1px solid #999999; }

                            th    { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; }

                            td    { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; }

                            .btn  { width:100%; text-align:right; margin-top:16px; }

                            .hdr  { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; }

                            .bdy  { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; }

                            button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; }

                            @media print {

                                .bdy { display:block; overflow:visible; }

                                button { display:none; }

                                .head { color:#000000; background:#FFFFFF; border:1px solid #000000; }

                            }

                
        </div>
        <div id="explainText_settingPathLabel">Setting Path:</div>
        <div id="explainText_explainTextLabel">Explanation</div>
        <div id="explainText_printButton">
        <button name="Print" onClick="window.print()" accesskey="P"><u>P</u>rint</button>

        </div>
        <div id="explainText_closeButton">
        <button name="Close" onClick="window.close()" accesskey="C"><u>C</u>lose</button>
                
        </div>
        <div id="explainText_noExplainTextAvailable">No explanation is available for this setting.</div>
        <div id="explainText_supportedLabel">Supported On:</div>
        <div id="explainText_noSupportedTextAvailable">Not available</div>
</div><table class="title" >
<tr><td colspan="2" class="gponame">PT-PO-WIN-U-Windows 11 Hardening PCI</td></tr>
<tr>
    <td id="dtstamp">Data collected on: 2-9-2025 12:10:00</td>
    <td><div id="objshowhide" tabindex="0" onclick="objshowhide_onClick();return false;"></div></td>
</tr>
</table>

<div class="gposummary">
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1"><span class="sectionTitle" tabindex="0">Details</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td scope="row">Domain</td><td>emea.tpg.ads</td></tr>
<tr><td scope="row">Owner</td><td>EMEA\brighton.6-adm</td></tr>
<tr><td scope="row">Created</td><td>20-6-2024 10:20:32</td></tr>
<tr><td scope="row">Modified</td><td>7-3-2025 19:43:32</td></tr>
<tr><td scope="row">User Revisions</td><td>296 (AD), 296 (SYSVOL)</td></tr>
<tr><td scope="row">Computer Revisions</td><td>0 (AD), 0 (SYSVOL)</td></tr>
<tr><td scope="row">Unique ID</td><td>{3bd6b34e-c642-4aba-89a8-e55184d8dda1}</td></tr>
<tr><td scope="row">GPO Status</td><td>Computer settings disabled</td></tr>
</table></div></div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Links</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" ><tr><th scope="col">Location</th><th scope="col">Enforced</th><th scope="col">Link Status</th><th scope="col">Path</th></tr>
    <tr><td>PT</td><td>No</td><td>Enabled</td><td>emea.tpg.ads/PT</td></tr>
    </table>
    <br/>This list only includes links in the domain of the GPO.</div></div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Security Filtering</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>The settings in this GPO can only apply to the following groups, users, and computers:</b></div>
<div class="he4i">
<table class="info" ><tr><th scope="col">Name</th></tr><tr><td>None</td></tr></table>
</div>
</div>
<div class="filler"></div>

<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Delegation</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>These groups and users have the specified permission for this GPO</b></div>
<div class="he4i">
<table class="info3" >
<tr><th scope="col">Name</th><th scope="col">Allowed Permissions</th><th scope="col">Inherited</th></tr>
<tr><td>EMEA\PT-G-ORG-Exceptions Visual Aid W11</td><td>Custom</td><td>No</td></tr>
</table>

</div></div></div>
<div class="filler"></div>
</div>
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">Computer Configuration (Disabled)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">No settings defined.</div></div>
<div class="filler"></div>
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">User Configuration (Enabled)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1h_expanded"><span class="sectionTitle" tabindex="0">Policies</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1_expanded"><span class="sectionTitle" tabindex="0">Windows Settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he2"><span class="sectionTitle" tabindex="0">Scripts</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">Logon</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4i"><b>For this GPO, Script order:</b> Windows PowerShell scripts will run first</div><div class="he4i"><table class="info" >
<tr><th scope="col">Name</th><th scope="col">Parameters</th></tr>
<tr><td>DisableDesktop.ps1</td><td></td></tr>
<tr><td>Restore_PWA_Edge_Chrome.ps1</td><td></td></tr>
</table>
</div></div></div><div class="he2"><span class="sectionTitle" tabindex="0">Security Settings</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">Software Restriction Policies</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td><b>Enforcement</b></td></tr>
<tr><td colspan="1">
    <table class="subtable3" >
    <tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
    <tr><td>Apply Software Restriction Policies to the following</td><td>All software files except libraries (such as DLLs)</td></tr>
    <tr><td>Apply Software Restriction Policies to the following users</td><td>All users</td></tr>
    <tr><td>When applying Software Restriction Policies</td><td>Ignore certificate rules</td></tr>
    </table>
</td></tr>
<tr><td><b>Designated File Types</b></td></tr>
<tr><td colspan="1">
<table class="subtable" ><tr><th scope="col">File Extension</th><th scope="col">File Type</th></tr>
<tr><td>ADE</td><td>ADE File</td></tr>
<tr><td>ADP</td><td>ADP File</td></tr>
<tr><td>BAS</td><td>BAS File</td></tr>
<tr><td>BAT</td><td>Windows Batch File</td></tr>
<tr><td>CHM</td><td>Compiled HTML Help file</td></tr>
<tr><td>CMD</td><td>Windows Command Script</td></tr>
<tr><td>COM</td><td>MS-DOS Application</td></tr>
<tr><td>CPL</td><td>Control panel item</td></tr>
<tr><td>CRT</td><td>Security Certificate</td></tr>
<tr><td>EXE</td><td>Application</td></tr>
<tr><td>HLP</td><td>Help file</td></tr>
<tr><td>HTA</td><td>HTML Application</td></tr>
<tr><td>INF</td><td>Setup Information</td></tr>
<tr><td>INS</td><td>INS File</td></tr>
<tr><td>ISP</td><td>ISP File</td></tr>
<tr><td>LNK</td><td>Shortcut</td></tr>
<tr><td>MDB</td><td>MDB File</td></tr>
<tr><td>MDE</td><td>MDE File</td></tr>
<tr><td>MSC</td><td>Microsoft Common Console Document</td></tr>
<tr><td>MSI</td><td>Windows Installer Package</td></tr>
<tr><td>MSP</td><td>Windows Installer Patch</td></tr>
<tr><td>MST</td><td>MST File</td></tr>
<tr><td>OCX</td><td>ActiveX control</td></tr>
<tr><td>PCD</td><td>PCD File</td></tr>
<tr><td>PIF</td><td>Shortcut to MS-DOS Program</td></tr>
<tr><td>REG</td><td>Registration Entries</td></tr>
<tr><td>SCR</td><td>Screen saver</td></tr>
<tr><td>SHS</td><td>SHS File</td></tr>
<tr><td>URL</td><td>Internet Shortcut</td></tr>
<tr><td>VB</td><td>Visual Basic Source File</td></tr>
<tr><td>WSC</td><td>Windows Script Component</td></tr>
</table>
</td></tr>
<tr><td><b>Trusted Publishers</b></td></tr>
<tr><td colspan="1">
    <table class="subtable" >
    <tr><td scope="row">Trusted publisher management</td><td>Allow all administrators and users to manage user's own Trusted Publishers</td></tr>
    <tr><td scope="row">Certificate verification</td><td>None</td></tr>
    </table>
</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Software Restriction Policies/Security Levels</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">
      <table class="info" >
      <tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
      <tr><td>Default Security Level</td><td>Unrestricted</td></tr>
      </table>
    </div></div><div class="he3"><span class="sectionTitle" tabindex="0">Software Restriction Policies/Additional Rules</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">Path Rules</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" ><tr><td><b>%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%</b></td></tr><tr><td><table class="subtable" >
<tr><td scope="row">Security Level</td><td>Unrestricted</td></tr>
<tr><td scope="row">Description</td><td></td></tr>
<tr><td scope="row">Date last modified</td><td>25-6-2024 11:42:19</td></tr>
</table>
</td></tr><tr><td><b>%HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir%</b></td></tr><tr><td><table class="subtable" >
<tr><td scope="row">Security Level</td><td>Unrestricted</td></tr>
<tr><td scope="row">Description</td><td></td></tr>
<tr><td scope="row">Date last modified</td><td>25-6-2024 11:42:19</td></tr>
</table>
</td></tr></table></div></div></div></div></div><div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Administrative Templates</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">Policy definitions (ADMX files) retrieved from the central store.</div><div class="he3"><span class="sectionTitle" tabindex="0">Control Panel</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit access to Control Panel and PC settings" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel" gpmc_settingDescription="Disables all Control Panel programs and the PC settings app.&lt;br/&gt;&lt;br/&gt;This setting prevents Control.exe and SystemSettings.exe, the program files for Control Panel and PC settings, from starting. As a result, users cannot start Control Panel or PC settings, or run any of their items.&lt;br/&gt;&lt;br/&gt;This setting removes Control Panel from:&lt;br/&gt;The Start screen&lt;br/&gt;File Explorer&lt;br/&gt;&lt;br/&gt;This setting removes PC settings from:&lt;br/&gt;The Start screen&lt;br/&gt;Settings charm&lt;br/&gt;Account picture&lt;br/&gt;Search results&lt;br/&gt;&lt;br/&gt;If users try to select a Control Panel item from the Properties item on a context menu, a message appears explaining that a setting prevents the action." gpmc_supported="At least Windows 2000">Prohibit access to Control Panel and PC settings</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Control Panel/Personalization</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changing desktop background" gpmc_settingPath="User Configuration/Administrative Templates/Control Panel/Personalization" gpmc_settingDescription="Prevents users from adding or changing the background design of the desktop.&lt;br/&gt;&lt;br/&gt;By default, users can use the Desktop Background page in the Personalization or Display Control Panel to add a background design (wallpaper) to their desktop.&lt;br/&gt;&lt;br/&gt;If you enable this setting, none of the Desktop Background settings can be changed by the user.&lt;br/&gt;&lt;br/&gt;To specify wallpaper for a group, use the &amp;quot;Desktop Wallpaper&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Note: You must also enable the &amp;quot;Desktop Wallpaper&amp;quot; setting to prevent users from changing the desktop wallpaper. Refer to KB article: Q327998 for more information.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Allow only bitmapped wallpaper&amp;quot; setting." gpmc_supported="At least Windows 2000">Prevent changing desktop background</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Desktop</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not add shares of recently opened documents to Network Locations" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Remote shared folders are not added to Network Locations whenever you open a document in the shared folder.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, when you open a document in a remote shared folder, the system adds a connection to the shared folder to Network Locations.&lt;br/&gt;&lt;br/&gt;If you enable this setting, shared folders are not added to Network Locations automatically when you open a document in the shared folder." gpmc_supported="Windows Server 2003, Windows XP, and Windows 2000 only">Do not add shares of recently opened documents to Network Locations</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide and disable all items on the desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes icons, shortcuts, and other default and user-defined items from the desktop, including Briefcase, Recycle Bin, Computer, and Network Locations.&lt;br/&gt;&lt;br/&gt;Removing icons and shortcuts does not prevent the user from using another method to start the programs or opening the items they represent.&lt;br/&gt;&lt;br/&gt;Also, see &amp;quot;Items displayed in Places Bar&amp;quot; in User Configuration\Administrative Templates\Windows Components\Common Open File Dialog to remove the Desktop icon from the Places Bar. This will help prevent users from saving data to the Desktop." gpmc_supported="At least Windows 2000">Hide and disable all items on the desktop</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide Network Locations icon on desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes the Network Locations icon from the desktop.&lt;br/&gt;&lt;br/&gt;This setting only affects the desktop icon. It does not prevent users from connecting to the network or browsing for shared computers on the network.&lt;br/&gt;&lt;br/&gt;Note: In operating systems earlier than Microsoft Windows Vista, this policy applies to the My Network Places icon." gpmc_supported="At least Windows 2000">Hide Network Locations icon on desktop</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent adding, dragging, dropping and closing the Taskbar&amp;#39;s toolbars" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Prevents users from manipulating desktop toolbars.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users cannot add or remove toolbars from the desktop. Also, users cannot drag toolbars on to or off of docked toolbars.&lt;br/&gt;&lt;br/&gt;Note: If users have added or removed toolbars, this setting prevents them from restoring the default configuration.&lt;br/&gt;&lt;br/&gt;Tip: To view the toolbars that can be added to the desktop, right-click a docked toolbar (such as the taskbar beside the Start button), and point to &amp;quot;Toolbars.&amp;quot;&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Prohibit adjusting desktop toolbars&amp;quot; setting." gpmc_supported="At least Windows 2000">Prevent adding, dragging, dropping and closing the Taskbar&#39;s toolbars</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit User from manually redirecting Profile Folders" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Prevents users from changing the path to their profile folders.&lt;br/&gt;&lt;br/&gt;By default, a user can change the location of their individual profile folders like Documents, Music etc. by typing a new path in the Locations tab of the folder&amp;#39;s Properties dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users are unable to type a new location in the Target box." gpmc_supported="At least Windows 2000">Prohibit User from manually redirecting Profile Folders</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Properties from the Computer icon context menu" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="This setting hides Properties on the context menu for Computer.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Properties option will not be present when the user right-clicks My Computer or clicks Computer and then goes to the File menu.  Likewise, Alt-Enter does nothing when Computer is selected.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Properties option is displayed as usual." gpmc_supported="At least Windows 2000 Service Pack 3">Remove Properties from the Computer icon context menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Properties from the Recycle Bin context menu" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes the Properties option from the Recycle Bin context menu.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Properties option will not be present when the user right-clicks on Recycle Bin or opens Recycle Bin and then clicks File. Likewise, Alt-Enter does nothing when Recycle Bin is selected.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Properties option is displayed as usual." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Remove Properties from the Recycle Bin context menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Recycle Bin icon from desktop" gpmc_settingPath="User Configuration/Administrative Templates/Desktop" gpmc_settingDescription="Removes most occurrences of the Recycle Bin icon.&lt;br/&gt;&lt;br/&gt;This setting removes the Recycle Bin icon from the desktop, from File Explorer, from programs that use the File Explorer windows, and from the standard Open dialog box.&lt;br/&gt;&lt;br/&gt;This setting does not prevent the user from using other methods to gain access to the contents of the Recycle Bin folder.&lt;br/&gt;&lt;br/&gt;Note: To make changes to this setting effective, you must log off and then log back on." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Remove Recycle Bin icon from desktop</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Google/Google Chrome</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable Translate" gpmc_settingPath="User Configuration/Administrative Templates/Google/Google Chrome" gpmc_settingDescription="Setting the policy to True provides translation functionality when it&amp;#39;s appropriate for users by showing an integrated translate toolbar in Google Chrome and a translate option on the right-click context menu. Setting the policy to False shuts off all built-in translate features.&lt;br/&gt;&lt;br/&gt;If you set the policy, users can&amp;#39;t change this function. Leaving it unset lets them change the setting." gpmc_supported="Microsoft Windows 7 or later">Enable Translate</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Microsoft Edge</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow importing of payment info" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Allows users to import payment info from another browser into Microsoft Edge.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the **payment info** check box is automatically selected in the **Import browser data** dialog box.&lt;br/&gt;&lt;br/&gt;If you disable this policy, payment info isn&amp;#39;t imported at first run, and users can&amp;#39;t import it manually.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this policy, payment info is imported at first run, and users can choose whether to import it manually during later browsing sessions.&lt;br/&gt;&lt;br/&gt;You can also set this policy as a recommendation. This means that Microsoft Edge imports payment info on first run, but users can select or clear the **payment info** option during manual import.&lt;br/&gt;&lt;br/&gt;**Note:** This policy currently manages importing from Google Chrome (on Windows 7, 8, and 10 and on macOS)." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Allow importing of payment info</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow importing of saved passwords" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Allows users to import saved passwords from another browser into Microsoft Edge.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the option to manually import saved passwords is automatically selected.&lt;br/&gt;&lt;br/&gt;If you disable this policy, saved passwords aren&amp;#39;t imported on first run, and users can&amp;#39;t import them manually.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this policy, no passwords are imported at first run, and users can choose whether to import them manually during later browsing sessions.&lt;br/&gt;&lt;br/&gt;You can set this policy as a recommendation. This means that Microsoft Edge imports passwords on first run, but users can select or clear the **passwords** option during manual import.&lt;br/&gt;&lt;br/&gt;**Note**: This policy currently manages importing from Internet Explorer (on Windows 7, 8, and 10), Google Chrome (on Windows 7, 8, and 10 and on macOS), and Mozilla Firefox (on Windows 7, 8, and 10 and on macOS) browsers." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Allow importing of saved passwords</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow or deny screen capture" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="If you enable this policy, or don&amp;#39;t configure this policy, a web page can use screen-share APIs (for example, getDisplayMedia() or the Desktop Capture extension API) for a screen capture.&lt;br/&gt;If you disable this policy, calls to screen-share APIs will fail. For example, if you&amp;#39;re using a web-based online meeting, video or screen sharing will not work.  However, this policy is not considered&lt;br/&gt;(and a site will be allowed to use screen-share APIs) if the site matches an origin pattern in any of the following policies:&lt;br/&gt;&amp;#39;ScreenCaptureAllowedByOrigins&amp;#39; (Allow Desktop, Window, and Tab capture by these origins),&lt;br/&gt;&amp;#39;WindowCaptureAllowedByOrigins&amp;#39; (Allow Window and Tab capture by these origins),&lt;br/&gt;&amp;#39;TabCaptureAllowedByOrigins&amp;#39; (Allow Tab capture by these origins),&lt;br/&gt;&amp;#39;SameOriginTabCaptureAllowedByOrigins&amp;#39; (Allow Same Origin Tab capture by these origins)." gpmc_supported="Microsoft Edge version 83, Windows 7 or later">Allow or deny screen capture</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Block access to a list of URLs" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Define a list of sites, based on URL patterns, that are blocked (your users can&amp;#39;t load them).&lt;br/&gt;&lt;br/&gt;Format the URL pattern according to https://go.microsoft.com/fwlink/?linkid=2095322.&lt;br/&gt;&lt;br/&gt;You can define exceptions in the &amp;#39;URLAllowlist&amp;#39; (Define a list of allowed URLs) policy. These policies are limited to 1000 entries; subsequent entries are ignored.&lt;br/&gt;&lt;br/&gt;Note that blocking internal &amp;#39;edge://*&amp;#39; URLs isn&amp;#39;t recommended - this may lead to unexpected errors.&lt;br/&gt;&lt;br/&gt;This policy doesn&amp;#39;t prevent the page from updating dynamically through JavaScript. For example, if you block &amp;#39;contoso.com/abc&amp;#39;, users might still be able to visit &amp;#39;contoso.com&amp;#39; and click on a link to visit &amp;#39;contoso.com/abc&amp;#39;, as long as the page doesn&amp;#39;t refresh.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this policy, no URLs are blocked.&lt;br/&gt;&lt;br/&gt;This policy does not work as expected with file://* wildcards.&lt;br/&gt;&lt;br/&gt;Example value:&lt;br/&gt;&lt;br/&gt;contoso.com&lt;br/&gt;https://ssl.server.com&lt;br/&gt;hosting.com/bad_path&lt;br/&gt;https://server:8080/path&lt;br/&gt;.exact.hostname.com&lt;br/&gt;custom_scheme:*&lt;br/&gt;*" gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Block access to a list of URLs</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td colspan="2"><table class="subtable" >
<tr><th scope="col">Block access to a list of URLs</th></tr>
<tr><td>edge://*</td></tr>
<tr><td>edge:///*</td></tr>
<tr><td>file:///*</td></tr>
<tr><td>file://*</td></tr>
<tr><td>Data:*</td></tr>
</table></td></tr></table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Control where developer tools can be used" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Control where developer tools can be used.&lt;br/&gt;&lt;br/&gt;If you set this policy to &amp;#39;DeveloperToolsDisallowedForForceInstalledExtensions&amp;#39; (the default), users can access the developer tools and the JavaScript console in general, but not in the context of extensions installed by enterprise policy.&lt;br/&gt;&lt;br/&gt;If you set this policy to &amp;#39;DeveloperToolsAllowed&amp;#39;, users can access the developer tools and the JavaScript console in all contexts, including extensions installed by enterprise policy.&lt;br/&gt;&lt;br/&gt;If you set this policy to &amp;#39;DeveloperToolsDisallowed&amp;#39;, users can&amp;#39;t access the developer tools or inspect website elements. Keyboard shortcuts and menu or context menu entries that open the developer tools or the JavaScript Console are disabled.&lt;br/&gt;&lt;br/&gt;Policy options mapping:&lt;br/&gt;&lt;br/&gt;* DeveloperToolsDisallowedForForceInstalledExtensions (0) = Block the developer tools on extensions installed by enterprise policy, allow in other contexts&lt;br/&gt;&lt;br/&gt;* DeveloperToolsAllowed (1) = Allow using the developer tools&lt;br/&gt;&lt;br/&gt;* DeveloperToolsDisallowed (2) = Don&amp;#39;t allow using the developer tools&lt;br/&gt;&lt;br/&gt;Use the preceding information when configuring this policy." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Control where developer tools can be used</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Control where developer tools can be used</td><td>Don&#39;t allow using the developer tools</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Define a list of allowed URLs" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Setting the policy provides access to the listed URLs, as exceptions to &amp;#39;URLBlocklist&amp;#39; (Block access to a list of URLs).&lt;br/&gt;&lt;br/&gt;Format the URL pattern according to https://go.microsoft.com/fwlink/?linkid=2095322.&lt;br/&gt;&lt;br/&gt;You can use this policy to open exceptions to restrictive block lists. For example, you can include &amp;#39;*&amp;#39; in the block list to block all requests, and then use this policy to allow access to a limited list of URLs. You can use this policy to open exceptions to certain schemes, subdomains of other domains, ports, or specific paths.&lt;br/&gt;&lt;br/&gt;The most specific filter determines if a URL is blocked or allowed. The allowed list takes precedence over the block list.&lt;br/&gt;&lt;br/&gt;This policy is limited to 1000 entries; subsequent entries are ignored.&lt;br/&gt;&lt;br/&gt;This policy also allows the browser to automatically invoke external applications registered as protocol handlers for protocols like &amp;quot;tel:&amp;quot; or &amp;quot;ssh:&amp;quot;.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this policy, there are no exceptions to the block list in the &amp;#39;URLBlocklist&amp;#39; policy.&lt;br/&gt;&lt;br/&gt;This policy does not work as expected with file://* wildcards.&lt;br/&gt;&lt;br/&gt;Example value:&lt;br/&gt;&lt;br/&gt;contoso.com&lt;br/&gt;https://ssl.server.com&lt;br/&gt;hosting.com/good_path&lt;br/&gt;https://server:8080/path&lt;br/&gt;.exact.hostname.com" gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Define a list of allowed URLs</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td colspan="2"><table class="subtable" >
<tr><th scope="col">Define a list of allowed URLs</th></tr>
<tr><td>edge://downloads/</td></tr>
</table></td></tr></table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable AutoFill for addresses" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Enables the AutoFill feature and allows users to auto-complete address information in web forms using previously stored information.&lt;br/&gt;&lt;br/&gt;If you disable this policy, AutoFill never suggests or fills in address information, nor does it save additional address information that the user might submit while browsing the web.&lt;br/&gt;&lt;br/&gt;If you enable this policy or don&amp;#39;t configure it, users can control AutoFill for addresses in the user interface.&lt;br/&gt;&lt;br/&gt;Note that if you disable this policy you also stop all activity for all web forms, except payment and password forms. No further entries are saved, and Microsoft Edge won&amp;#39;t suggest or AutoFill any previous entries." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Enable AutoFill for addresses</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable AutoFill for payment instruments" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Enables Microsoft Edge&amp;#39;s AutoFill feature and lets users auto complete payment instruments like credit or debit cards in web forms using previously stored information. This includes suggesting new payment instruments like Buy Now Pay Later (BNPL) in web forms and Express Checkout.&lt;br/&gt;&lt;br/&gt;If you enable this policy or don&amp;#39;t configure it, users can control AutoFill for payment instruments.&lt;br/&gt;&lt;br/&gt;If you disable this policy, AutoFill never suggests, fills, or recommends new payment Instruments. Additionally, it won&amp;#39;t save any payment instrument information that users submit while browsing the web." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Enable AutoFill for payment instruments</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable the Collections feature" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Lets you allow users to access the Collections feature, where they can collect, organize, share, and export content more efficiently and with Office integration.&lt;br/&gt;&lt;br/&gt;If you enable or don&amp;#39;t configure this policy, users can access and use the Collections feature in Microsoft Edge.&lt;br/&gt;&lt;br/&gt;If you disable this policy, users can&amp;#39;t access and use Collections in Microsoft Edge." gpmc_supported="Microsoft Edge version 78, Windows 7 or later">Enable the Collections feature</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable the Screenshot (previously named Web Capture) feature in Microsoft Edge" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="Note: The web capture feature is rebranded to &amp;quot;Screenshot&amp;quot;.&lt;br/&gt;&lt;br/&gt;Enables the Screenshot feature in Microsoft Edge. This feature lets users capture web and PDF content, and annotate captures using inking tools. Users can also do a visual image search based on the captured content.&lt;br/&gt;&lt;br/&gt;If you enable or don&amp;#39;t configure this policy, the Screenshot option appears in the context menu, the Settings and more menu, and by using the keyboard shortcut, CTRL+SHIFT+S.&lt;br/&gt;&lt;br/&gt;If you disable this policy, users can&amp;#39;t access this feature in Microsoft Edge." gpmc_supported="Microsoft Edge version 87, Windows 7 or later">Enable the Screenshot (previously named Web Capture) feature in Microsoft Edge</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the First-run experience and splash screen" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge" gpmc_settingDescription="If you enable this policy, the First-run experience and the splash screen will not be shown to users when they run Microsoft Edge for the first time.&lt;br/&gt;&lt;br/&gt;For the configuration options shown in the First Run Experience, the browser will default to the following:&lt;br/&gt;&lt;br/&gt;-On the New Tab Page, the feed type will be set to MSN News and the layout to Inspirational.&lt;br/&gt;&lt;br/&gt;-The user will still be automatically signed into Microsoft Edge if the Windows account is of Azure AD or MSA type.&lt;br/&gt;&lt;br/&gt;-Sync will not be enabled by default and users will be prompted to choose whether they&amp;#39;d like to sync on browser startup. You can use the &amp;#39;ForceSync&amp;#39; (Force synchronization of browser data and do not show the sync consent prompt) or the &amp;#39;SyncDisabled&amp;#39; (Disable synchronization of data using Microsoft sync services) policy to configure sync and the sync consent prompt.&lt;br/&gt;&lt;br/&gt;If you disable or don&amp;#39;t configure this policy, the First-run experience and the Splash screen will be shown.&lt;br/&gt;&lt;br/&gt;Note: The specific configuration options shown to the user in the First Run Experience, can also be managed by using other specific policies. You can use the HideFirstRunExperience policy in combination with these policies to configure a specific browser experience on your managed devices. Some of these other policies are:&lt;br/&gt;&lt;br/&gt;-&amp;#39;AutoImportAtFirstRun&amp;#39; (Automatically import another browser&amp;#39;s data and settings at first run)&lt;br/&gt;&lt;br/&gt;-&amp;#39;NewTabPageLocation&amp;#39; (Configure the new tab page URL)&lt;br/&gt;&lt;br/&gt;-&amp;#39;NewTabPageSetFeedType&amp;#39; (Configure the Microsoft Edge new tab page experience)&lt;br/&gt;&lt;br/&gt;-&amp;#39;ForceSync&amp;#39;&lt;br/&gt;&lt;br/&gt;-&amp;#39;SyncDisabled&amp;#39;&lt;br/&gt;&lt;br/&gt;-&amp;#39;BrowserSignin&amp;#39; (Browser sign-in settings)&lt;br/&gt;&lt;br/&gt;-&amp;#39;NonRemovableProfileEnabled&amp;#39; (Configure whether a user always has a default profile automatically signed in with their work or school account)" gpmc_supported="Microsoft Edge version 80, Windows 7 or later">Hide the First-run experience and splash screen</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Microsoft Edge/Content settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Configure cookies" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge/Content settings" gpmc_settingDescription="Control whether websites can create cookies on the user&amp;#39;s device. This policy is all or nothing - you can let all websites create cookies, or no websites create cookies. You can&amp;#39;t use this policy to enable cookies from specific websites.&lt;br/&gt;&lt;br/&gt;Set the policy to &amp;#39;SessionOnly&amp;#39; to clear cookies when the session closes.&lt;br/&gt;&lt;br/&gt;If you don&amp;#39;t configure this policy, the default &amp;#39;AllowCookies&amp;#39; is used, and users can change this setting in Microsoft Edge Settings. (If you don&amp;#39;t want users to be able to change this setting, set the policy.)&lt;br/&gt;&lt;br/&gt;Policy options mapping:&lt;br/&gt;&lt;br/&gt;* AllowCookies (1) = Let all sites create cookies&lt;br/&gt;&lt;br/&gt;* BlockCookies (2) = Don&amp;#39;t let any site create cookies&lt;br/&gt;&lt;br/&gt;* SessionOnly (4) = Keep cookies for the duration of the session, except ones listed in &amp;#39;SaveCookiesOnExit&amp;#39; (Save cookies when Microsoft Edge closes)&lt;br/&gt;&lt;br/&gt;Use the preceding information when configuring this policy." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Configure cookies</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Configure cookies</td><td>Keep cookies for the duration of the session, except ones listed in &quot;SaveCookiesOnExit&quot;</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Microsoft Edge/Extensions</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Control which extensions cannot be installed" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge/Extensions" gpmc_settingDescription="Lets you specify which extensions the users CANNOT install. Extensions already installed will be disabled if blocked, without a way for the user to enable them. After a disabled extension is removed from the blocklist it will automatically get re-enabled.&lt;br/&gt;&lt;br/&gt;A blocklist value of &amp;#39;*&amp;#39; means all extensions are blocked unless they are explicitly listed in the allowlist.&lt;br/&gt;&lt;br/&gt;If this policy isn&amp;#39;t set, the user can install any extension in Microsoft Edge.&lt;br/&gt;&lt;br/&gt;Example value:&lt;br/&gt;&lt;br/&gt;extension_id1&lt;br/&gt;extension_id2" gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Control which extensions cannot be installed</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td colspan="2"><table class="subtable" >
<tr><th scope="col">Extension IDs the user should be prevented from installing (or * for all)</th></tr>
<tr><td>*</td></tr>
</table></td></tr></table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Microsoft Edge/Password manager and protection</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Enable saving passwords to the password manager" gpmc_settingPath="User Configuration/Administrative Templates/Microsoft Edge/Password manager and protection" gpmc_settingDescription="Enable Microsoft Edge to save user passwords. The next time a user visits a site with a saved password, Microsoft Edge will enter the password automatically.&lt;br/&gt;&lt;br/&gt;If you enable or don&amp;#39;t configure this policy, users can save and add their passwords in Microsoft Edge.&lt;br/&gt;&lt;br/&gt;If you disable this policy, users can&amp;#39;t save and add new passwords, but they can still use previously saved passwords." gpmc_supported="Microsoft Edge version 77, Windows 7 or later">Enable saving passwords to the password manager</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Shared Folders</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Allow shared folders to be published" gpmc_settingPath="User Configuration/Administrative Templates/Shared Folders" gpmc_settingDescription="This policy setting determines whether the user can publish shared folders in Active Directory Domain Services (AD DS).&lt;br/&gt;&lt;br/&gt;If you enable or do not configure this policy setting, users can use the &amp;quot;Publish in Active Directory&amp;quot; option in the Shared Folders snap-in to publish shared folders in AD DS.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, users cannot publish shared folders in AD DS, and the &amp;quot;Publish in Active Directory&amp;quot; option is disabled. Note: The default is to allow shared folders to be published when this setting is not configured." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Allow shared folders to be published</span></td><td>Disabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Start Menu and Taskbar</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Clear history of recently opened documents on exit" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Clear history of recently opened documents on exit.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system deletes shortcuts to recently used document files when the user logs off. As a result, the Recent Items menu on the Start menu is always empty when the user logs on. In addition, recently and frequently used items in the Jump Lists off of programs in the Start Menu and Taskbar will be cleared when the user logs off.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the system retains document shortcuts, and when a user logs on, the Recent Items menu and the Jump Lists appear just as it did when the user logged off.&lt;br/&gt;&lt;br/&gt;Note: The system saves document shortcuts in the user profile in the System-drive\Users\User-name\Recent folder.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Remove Recent Items menu from Start Menu&amp;quot; and &amp;quot;Do not keep history of recently opened documents&amp;quot; policies in this folder. The system only uses this setting when neither of these related settings are selected.&lt;br/&gt;&lt;br/&gt;This setting does not clear the list of recent files that Windows programs display at the bottom of the File menu. See the &amp;quot;Do not keep history of recently opened documents&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;This policy setting also does not hide document shortcuts displayed in the Open dialog box. See the &amp;quot;Hide the dropdown list of recent files&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;This policy also does not clear items that the user may have pinned to the Jump Lists, or Tasks that the application has provided for their menu. See the &amp;quot;Do not allow pinning items in Jump Lists&amp;quot; setting." gpmc_supported="At least Windows 2000">Clear history of recently opened documents on exit</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Clear tile notifications during log on" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this setting, the system deletes tile notifications when the user logs on. As a result, the Tiles in the start view will always show their default content when the user logs on. In addition, any cached versions of these notifications will be cleared when the user logs on.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the system retains notifications, and when a user logs on, the tiles appear just as they did when the user logged off, including the history of previous notifications for each tile.&lt;br/&gt;&lt;br/&gt;This setting does not prevent new notifications from appearing. See the &amp;quot;Turn off Application Notifications&amp;quot; setting to prevent new notifications." gpmc_supported="At least Windows Server 2012, Windows 8 or Windows RT">Clear tile notifications during log on</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable context menus in the Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy allows you to prevent users from being able to open context menus in the Start Menu.&lt;br/&gt;&lt;br/&gt;If you enable this policy, then invocations of context menus within the Start Menu will be ignored." gpmc_supported="At least Windows Server 2016, Windows 10 Version 1803">Disable context menus in the Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable showing balloon notifications as toasts." gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy disables the functionality that converts balloons to toast notifications.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, system and application notifications will render as balloons instead of toast notifications.&lt;br/&gt;&lt;br/&gt;Enable this policy setting if a specific app or system component that uses balloon notifications has compatibility issues with toast notifications.&lt;br/&gt;&lt;br/&gt;If you disable or don’t configure this policy setting, all notifications will appear as toast notifications.&lt;br/&gt;&lt;br/&gt;A reboot is required for this policy setting to take effect." gpmc_supported="At least Windows Server 2016, Windows 10">Disable showing balloon notifications as toasts.</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not allow pinning items in Jump Lists" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to control pinning items in Jump Lists.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users cannot pin files, folders, websites, or other items to their Jump Lists in the Start Menu and Taskbar. Users also cannot unpin existing items pinned to their Jump Lists. Existing items already pinned to their Jump Lists will continue to show.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can pin files, folders, websites, and other items to a program&amp;#39;s Jump List so that the items is always present in this menu.&lt;br/&gt;" gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Do not allow pinning items in Jump Lists</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not allow pinning programs to the Taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to control pinning programs to the Taskbar.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users cannot change the programs currently pinned to the Taskbar. If any programs are already pinned to the Taskbar, these programs continue to show in the Taskbar. However, users cannot unpin these programs already pinned to the Taskbar, and they cannot pin new programs to the Taskbar.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can change the programs currently pinned to the Taskbar." gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Do not allow pinning programs to the Taskbar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not allow pinning Store app to the Taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="&lt;br/&gt;This policy setting allows you to control pinning the Store app to the Taskbar.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users cannot pin the Store app to the Taskbar. If the Store app is already pinned to the Taskbar, it will be removed from the Taskbar on next login.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can pin the Store app to the Taskbar." gpmc_supported="At least Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1">Do not allow pinning Store app to the Taskbar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not display any custom toolbars in the taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This setting affects the taskbar.&lt;br/&gt;&lt;br/&gt;The taskbar includes the Start button, buttons for currently running tasks, custom toolbars, the notification area, and the system clock. Toolbars include Quick Launch, Address, Links, Desktop, and other custom toolbars created by the user or by an application.&lt;br/&gt;&lt;br/&gt;If this setting is enabled, the taskbar does not display any custom toolbars, and the user cannot add any custom toolbars to the taskbar. Moreover, the &amp;quot;Toolbars&amp;quot; menu command and submenu are removed from the context menu. The taskbar displays only the Start button, taskbar buttons, the notification area, and the system clock.&lt;br/&gt;&lt;br/&gt;If this setting is disabled or is not configured, the taskbar displays all toolbars. Users can add or remove custom toolbars, and the &amp;quot;Toolbars&amp;quot; command appears in the context menu." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Do not display any custom toolbars in the taskbar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not display or track items in Jump Lists from remote locations" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to control displaying or tracking items in Jump Lists from remote locations.&lt;br/&gt;&lt;br/&gt;The Start Menu and Taskbar display Jump Lists off of programs. These menus include files, folders, websites and other relevant items for that program. This helps users more easily reopen their most important documents and other tasks.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Start Menu and Taskbar only track the files that the user opens locally on this computer. Files that the user opens over the network from remote computers are not tracked or shown in the Jump Lists. Use this setting to reduce network traffic, particularly over slow network connections.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, all files that the user opens appear in the menus, including files located remotely on another computer.&lt;br/&gt;&lt;br/&gt;Note: This setting does not prevent Windows from displaying remote files that the user has explicitly pinned to the Jump Lists. See the &amp;quot;&amp;quot;Do not allow pinning items in Jump Lists&amp;quot;&amp;quot; policy setting." gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Do not display or track items in Jump Lists from remote locations</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not keep history of recently opened documents" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Prevents the operating system and installed programs from creating and displaying shortcuts to recently opened documents.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system and Windows programs do not create shortcuts to documents opened while the setting is in effect. Also, they retain but do not display existing document shortcuts. The system empties the Recent Items menu on the Start menu, and Windows programs do not display shortcuts at the bottom of the File menu. In addition, the Jump Lists off of programs in the Start Menu and Taskbar do not show lists of recently or frequently used files, folders, or websites.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the system will store and display shortcuts to recently and frequently used files, folders, and websites.&lt;br/&gt;&lt;br/&gt;Note: The system saves document shortcuts in the user profile in the System-drive\Users\User-name\Recent folder.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Remove Recent Items menu from Start Menu&amp;quot; and &amp;quot;Clear history of recently opened documents on exit&amp;quot; policies in this folder.&lt;br/&gt;&lt;br/&gt;If you enable this setting but do not enable the &amp;quot;Remove Recent Items menu from Start Menu&amp;quot; setting, the Recent Items menu appears on the Start menu, but it is empty.&lt;br/&gt;&lt;br/&gt;If you enable this setting, but then later disable it or set it to Not Configured, the document shortcuts saved before the setting was enabled reappear in the Recent Items menu and program File menus, and Jump Lists.&lt;br/&gt;&lt;br/&gt;This setting does not hide or prevent the user from pinning files, folders, or websites to the Jump Lists. See the &amp;quot;Do not allow pinning items in Jump Lists&amp;quot; setting. This policy also does not hide Tasks that the application has provided for their Jump List. This setting does not hide document shortcuts displayed in the Open dialog box. See the &amp;quot;Hide the dropdown list of recent files&amp;quot; setting.&lt;br/&gt;&lt;br/&gt;Note: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="At least Windows 2000">Do not keep history of recently opened documents</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not use the search-based method when resolving shell shortcuts" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting prevents the system from conducting a comprehensive search of the target drive to resolve a shortcut.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the system does not conduct the final drive search. It just displays a message explaining that the file is not found.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, by default, when the system cannot find the target file for a shortcut (.lnk), it searches all paths associated with the shortcut. If the target file is located on an NTFS partition, the system then uses the target&amp;#39;s file ID to find a path. If the resulting path is not correct, it conducts a comprehensive search of the target drive in an attempt to find the file.&lt;br/&gt;&lt;br/&gt;Note: This policy setting only applies to target files on NTFS partitions. FAT partitions do not have this ID tracking and search capability.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Do not track Shell shortcuts during roaming&amp;quot; and the &amp;quot;Do not use the tracking-based method when resolving shell shortcuts&amp;quot; policy settings." gpmc_supported="At least Windows 2000">Do not use the search-based method when resolving shell shortcuts</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Force Start to be either full screen size or menu size" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy and set it to Start menu or full screen Start, Start will be that size and users will be unable to change the size of Start in Settings.&lt;br/&gt;&lt;br/&gt;If you disable or don’t configure this policy setting, Windows will automatically select the size based on hardware form factor and users will be able to change the size of Start in Settings." gpmc_supported="At least Windows Server 2016 or Windows 10">Force Start to be either full screen size or menu size</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Choose one of the following sizes</td><td>Start menu</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide the notification area" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This setting affects the notification area (previously called the &amp;quot;system tray&amp;quot;) on the taskbar.&lt;br/&gt;&lt;br/&gt;Description: The notification area is located at the far right end of the task bar and includes the icons for current notifications and the system clock.&lt;br/&gt;&lt;br/&gt;If this setting is enabled, the user’s entire notification area, including the notification icons, is hidden. The taskbar displays only the Start button, taskbar buttons, custom toolbars (if any), and the system clock.&lt;br/&gt;&lt;br/&gt;If this setting is disabled or is not configured, the notification area is shown in the user&amp;#39;s taskbar.&lt;br/&gt;&lt;br/&gt;Note: Enabling this setting overrides the &amp;quot;Turn off notification area cleanup&amp;quot; setting, because if the notification area is hidden, there is no need to clean up the icons." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Hide the notification area</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Lock all taskbar settings" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to lock all taskbar settings.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user cannot access the taskbar control panel. The user is also unable to resize, move or rearrange toolbars on their taskbar.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the user will be able to set any taskbar setting that is not prevented by another policy setting." gpmc_supported="At least Windows Vista">Lock all taskbar settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Lock the Taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This setting affects the taskbar, which is used to switch between running applications.&lt;br/&gt;&lt;br/&gt;The taskbar includes the Start button, list of currently running tasks, and the notification area. By default, the taskbar is located at the bottom of the screen, but it can be dragged to any side of the screen. When it is locked, it cannot be moved or resized.&lt;br/&gt;&lt;br/&gt;If you enable this setting, it prevents the user from moving or resizing the taskbar. While the taskbar is locked, auto-hide and other taskbar options are still available in Taskbar properties.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the user can configure the taskbar position.&lt;br/&gt;&lt;br/&gt;Note: Enabling this setting also locks the QuickLaunch bar and any other toolbars that the user has on their taskbar. The toolbar&amp;#39;s position is locked, and the user cannot show and hide various toolbars using the taskbar context menu." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Lock the Taskbar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent changes to Taskbar and Start Menu Settings" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to prevent changes to Taskbar and Start Menu Settings.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, The user will be prevented from opening the Taskbar Properties dialog box.&lt;br/&gt;&lt;br/&gt;If the user right-clicks the taskbar and then clicks Properties, a message appears explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Taskbar and Start Menu items are available from Settings on the Start menu." gpmc_supported="At least Windows 2000">Prevent changes to Taskbar and Start Menu Settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent users from adding or removing toolbars" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to prevent users from adding or removing toolbars.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the user is not allowed to add or remove any toolbars to the taskbar. Applications are not able to add toolbars either.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the users and applications are able to add toolbars to the taskbar." gpmc_supported="At least Windows Vista">Prevent users from adding or removing toolbars</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent users from customizing their Start Screen" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to prevent users from changing their Start screen layout.&lt;br/&gt;&lt;br/&gt;If you enable this setting, you will prevent a user from selecting an app, resizing a tile, pinning/unpinning a tile or a secondary tile, entering the customize mode and rearranging tiles within Start and Apps.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, you will allow a user to select an app, resize a tile, pin/unpin a tile or a secondary tile, enter the customize mode and rearrange tiles within Start and Apps." gpmc_supported="At least Windows 2000">Prevent users from customizing their Start Screen</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent users from moving taskbar to another screen dock location" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to prevent users from moving taskbar to another screen dock location.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users are not able to drag their taskbar to another area of the monitor(s).&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users are able to drag their taskbar to another area of the monitor unless prevented by another policy setting." gpmc_supported="At least Windows Vista">Prevent users from moving taskbar to another screen dock location</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent users from rearranging toolbars" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to prevent users from rearranging toolbars.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users are not able to drag or drop toolbars to the taskbar.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users are able to rearrange the toolbars on the taskbar." gpmc_supported="At least Windows Vista">Prevent users from rearranging toolbars</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent users from resizing the taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to prevent users from resizing the taskbar.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users are not be able to resize their taskbar.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users are able to resize their taskbar unless prevented by another setting." gpmc_supported="At least Windows Vista">Prevent users from resizing the taskbar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent users from uninstalling applications from Start" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this setting, users cannot uninstall apps from Start.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, users can access the uninstall command from Start" gpmc_supported="At least Windows Server 2012, Windows 8 or Windows RT">Prevent users from uninstalling applications from Start</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove &amp;quot;Recently added&amp;quot; list from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy allows you to prevent the Start Menu from displaying a list of recently installed applications.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Start Menu will no longer display the &amp;quot;Recently added&amp;quot; list.  The corresponding setting will also be disabled in Settings." gpmc_supported="At least Windows Server 2016, Windows 10 Version 1803">Remove &quot;Recently added&quot; list from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove access to the context menus for the taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove access to the context menus for the taskbar.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the menus that appear when you right-click the taskbar and items on the taskbar are hidden, such as the Start button, the clock, and the taskbar buttons.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the context menus for the taskbar are available.&lt;br/&gt;&lt;br/&gt;This policy setting does not prevent users from using other methods to issue the commands that appear on these menus." gpmc_supported="At least Windows 2000">Remove access to the context menus for the taskbar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove All Programs list from the Start menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this setting, the Start Menu will either collapse or remove the all apps list from the Start menu.&lt;br/&gt;&lt;br/&gt;Selecting &amp;quot;Collapse&amp;quot; will not display the app list next to the pinned tiles in Start. An &amp;quot;All apps&amp;quot; button will be displayed on Start to open the all apps list. This is equivalent to setting the &amp;quot;Show app list in Start&amp;quot; in Settings to Off.&lt;br/&gt;&lt;br/&gt;Selecting &amp;quot;Collapse and disable setting&amp;quot; will do the same as the collapse option and disable the &amp;quot;Show app list in Start menu&amp;quot; in Settings, so users cannot turn it to On.&lt;br/&gt;&lt;br/&gt;Selecting &amp;quot;Remove and disable setting&amp;quot; will remove the all apps list from Start and disable the &amp;quot;Show app list in Start menu&amp;quot; in Settings, so users cannot turn it to On. Select this option for compatibility with earlier versions of Windows.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the all apps list will be visible by default, and the user can change &amp;quot;Show app list in Start&amp;quot; in Settings." gpmc_supported="At least Windows Server 2016, Windows 10">Remove All Programs list from the Start menu</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Choose one of the following actions</td><td>Remove and disable setting</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove common program groups from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="Removes items in the All Users profile from the Programs menu on the Start menu.&lt;br/&gt;&lt;br/&gt;By default, the Programs menu contains items from the All Users profile and items from the user&amp;#39;s profile. If you enable this setting, only items in the user&amp;#39;s profile appear in the Programs menu.&lt;br/&gt;&lt;br/&gt;Tip: To see the Program menu items in the All Users profile, on the system drive, go to ProgramData\Microsoft\Windows\Start Menu\Programs." gpmc_supported="At least Windows 2000">Remove common program groups from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove links and access to Windows Update" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove links and access to Windows Update.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users are prevented from connecting to the Windows Update Web site.&lt;br/&gt;&lt;br/&gt;Enabling this policy setting blocks user access to the Windows Update Web site at http://windowsupdate.microsoft.com. Also, the policy setting removes the Windows Update hyperlink from the Start menu and from the Tools menu in Internet Explorer.&lt;br/&gt;&lt;br/&gt;Windows Update, the online extension of Windows, offers software updates to keep a user’s system up-to-date. The Windows Update Product Catalog determines any system files, security fixes, and Microsoft updates that users need and shows the newest versions available for download.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Windows Update hyperlink is available from the Start menu and from the Tools menu in Internet Explorer.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Hide the &amp;quot;Add programs from Microsoft&amp;quot; option&amp;quot; policy setting." gpmc_supported="At least Windows 2000 through Windows 8.1 or Windows Server 2012 R2">Remove links and access to Windows Update</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Notifications and Action Center" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting removes Notifications and Action Center from the notification area on the taskbar.&lt;br/&gt;&lt;br/&gt;The notification area is located at the far right end of the taskbar and includes icons for current notifications and the system clock.&lt;br/&gt;&lt;br/&gt;If this setting is enabled, Notifications and Action Center is not displayed in the notification area. The user will be able to read notifications when they appear, but they won’t be able to review any notifications they miss.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Notification and Security and Maintenance will be displayed on the taskbar.&lt;br/&gt;&lt;br/&gt;A reboot is required for this policy setting to take effect." gpmc_supported="At least Windows Server 2016, Windows 10">Remove Notifications and Action Center</span></td><td>Not Configured</td><td>This policy makes the keyboard layouts not working</td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove pinned programs from the Taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove pinned programs from the taskbar.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, pinned programs are prevented from being shown on the Taskbar. Users cannot pin programs to the Taskbar.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can pin programs so that the program shortcuts stay on the Taskbar." gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Remove pinned programs from the Taskbar</span></td><td>Not Configured</td><td>Enable for File Explorer and Microsoft Edge Pinned Taskbar</td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Quick Settings" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting removes Quick Settings from the bottom right area on the taskbar.&lt;br/&gt;&lt;br/&gt;The quick settings area is located at the left of the clock in the taskbar and includes icons for current network and volume.&lt;br/&gt;&lt;br/&gt;If this setting is enabled, Quick Settings is not displayed in the quick settings area. &lt;br/&gt;&lt;br/&gt;A reboot is required for this policy setting to take effect." gpmc_supported="At least Windows Server 2016, Windows 10">Remove Quick Settings</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Recommended section from Start Menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy allows you to prevent the Start Menu from displaying a list of recommended applications and files.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Start Menu will no longer show the section containing a list of recommended files and apps." gpmc_supported="Windows 11 SE">Remove Recommended section from Start Menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove See More Results / Search Everywhere link" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="&lt;br/&gt;          If you enable this policy, a &amp;quot;See more results&amp;quot; / &amp;quot;Search Everywhere&amp;quot; link will not be shown when the user performs a search in the start menu search box.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, a &amp;quot;See more results&amp;quot; link will be shown when the user performs a search in the start menu search box.  If a 3rd party protocol handler is installed, a &amp;quot;Search Everywhere&amp;quot; link will be shown instead of the &amp;quot;See more results&amp;quot; link." gpmc_supported="At least Windows Server 2008 R2 or Windows 7. Not supported on Windows 10 or later">Remove See More Results / Search Everywhere link</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove the Meet Now icon" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the Meet Now icon from the system control area.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Meet Now icon is not displayed in the system notification area.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Meet Now icon is displayed in the system notification area." gpmc_supported="At least Windows Server 2016, Windows 10">Remove the Meet Now icon</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove the networking icon" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the networking icon from the system control area.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the networking icon is not displayed in the system notification area.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the networking icon is displayed in the system notification area." gpmc_supported="At least Windows Vista">Remove the networking icon</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove the People Bar from the taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy allows you to remove the People Bar from the taskbar and disables the My People experience.&lt;br/&gt;&lt;br/&gt;If you enable this policy the people icon will be removed from the taskbar, the corresponding settings toggle is removed from the taskbar settings page, and users will not be able to pin people to the taskbar." gpmc_supported="At least Windows Server 2016, Windows 10 Version 1703">Remove the People Bar from the taskbar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove the Security and Maintenance icon" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove Security and Maintenance from the system control area.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Security and Maintenance icon is not displayed in the system notification area.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the Security and Maintenance icon is displayed in the system notification area." gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Remove the Security and Maintenance icon</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove the volume control icon" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to remove the volume control icon from the system control area.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the volume control icon is not displayed in the system notification area.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the volume control icon is displayed in the system notification area." gpmc_supported="At least Windows Vista">Remove the volume control icon</span></td><td>Disabled</td><td>Show Volume</td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Show or hide &amp;quot;Most used&amp;quot; list from Start menu" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="If you enable this policy setting, you can configure Start menu to show or hide the list of user&amp;#39;s most used apps, regardless of user settings.&lt;br/&gt;&lt;br/&gt;Selecting &amp;quot;Show&amp;quot; will force the &amp;quot;Most used&amp;quot; list to be shown, and user cannot change to hide it using the Settings app.&lt;br/&gt;&lt;br/&gt;Selecting &amp;quot;Hide&amp;quot; will force the &amp;quot;Most used&amp;quot; list to be hidden, and user cannot change to show it using the Settings app.&lt;br/&gt;&lt;br/&gt;Selecting &amp;quot;Not Configured&amp;quot;, or if you disable or do not configure this policy setting, all will allow users to turn on or off the display of &amp;quot;Most used&amp;quot; list using the Settings app. This is default behavior.&lt;br/&gt;&lt;br/&gt;Note: configuring this policy to &amp;quot;Show&amp;quot; or &amp;quot;Hide&amp;quot; on supported versions of Windows 10 will supercede any policy setting of &amp;quot;Remove frequent programs list from the Start Menu&amp;quot; (which manages same part of Start menu but with fewer options)." gpmc_supported="At least Windows Server 2016, Windows 10 Version 2106">Show or hide &quot;Most used&quot; list from Start menu</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Choose one of the following actions</td><td>Hide</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Show QuickLaunch on Taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting controls whether the QuickLaunch bar is displayed in the Taskbar.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the QuickLaunch bar will be visible and cannot be turned off.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the QuickLaunch bar will be hidden and cannot be turned on.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, then users will be able to turn the QuickLaunch bar on and off." gpmc_supported="Windows Vista only">Show QuickLaunch on Taskbar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Show Start on the display the user is using when they press the Windows logo key" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows the Start screen to appear on the display the user is using when they press the Windows logo key. This setting only applies to users who are using multiple displays.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Start screen will appear on the display the user is using when they press the Windows logo key.&lt;br/&gt;&lt;br/&gt;If you disable or don&amp;#39;t configure this policy setting, the Start screen will always appear on the main display when the user presses the Windows logo key. Users will still be able to open Start on other displays by pressing the Start button on that display. Also, the user will be able to configure this setting." gpmc_supported="Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1 only">Show Start on the display the user is using when they press the Windows logo key</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Show the Apps view automatically when the user goes to Start" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows the Apps view to be opened by default when the user goes to Start.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Apps view will appear whenever the user goes to Start.  Users will still be able to switch between the Apps view and the Start screen.&lt;br/&gt;&lt;br/&gt;If you disable or don’t configure this policy setting, the Start screen will appear by default whenever the user goes to Start, and the user will be able to switch between the Apps view and the Start screen. Also, the user will be able to configure this setting." gpmc_supported="Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1 only">Show the Apps view automatically when the user goes to Start</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Show Windows Store apps on the taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="&lt;br/&gt;This policy setting allows users to see Windows Store apps on the taskbar.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users will see Windows Store apps on the taskbar.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, users won’t see Windows Store apps on the taskbar.&lt;br/&gt;&lt;br/&gt;If you don’t configure this policy setting, the default setting for the user’s device will be used, and the user can choose to change it." gpmc_supported="At least Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1">Show Windows Store apps on the taskbar</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off all balloon notifications" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to turn off all notification balloons.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, no notification balloons are shown to the user.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, notification balloons are shown to the user." gpmc_supported="At least Windows Vista">Turn off all balloon notifications</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off automatic promotion of notification icons to the taskbar" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to turn off automatic promotion of notification icons to the taskbar.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, newly added notification icons are not temporarily promoted to the Taskbar. Users can still configure icons to be shown or hidden in the Notification Control Panel.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, newly added notification icons are temporarily promoted to the Taskbar." gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Turn off automatic promotion of notification icons to the taskbar</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off feature advertisement balloon notifications" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This policy setting allows you to turn off feature advertisement balloon notifications.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, certain notification balloons that are marked as feature advertisements are not shown.&lt;br/&gt;&lt;br/&gt;If you disable do not configure this policy setting, feature advertisement balloons are shown." gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Turn off feature advertisement balloon notifications</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off notification area cleanup" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar" gpmc_settingDescription="This setting affects the notification area, also called the &amp;quot;system tray.&amp;quot;&lt;br/&gt;&lt;br/&gt;The notification area is located in the task bar, generally at the bottom of the screen, and it includes the clock and current notifications. This setting determines whether the items are always expanded or always collapsed. By default, notifications are collapsed. The notification cleanup &amp;lt;&amp;lt; icon can be referred to as the &amp;quot;notification chevron.&amp;quot;&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system notification area expands to show all of the notifications that use this area.&lt;br/&gt;&lt;br/&gt;If you disable this setting, the system notification area will always collapse notifications.&lt;br/&gt;&lt;br/&gt;If you do not configure it, the user can choose if they want notifications collapsed." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Turn off notification area cleanup</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Start Menu and Taskbar/Notifications</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off notification mirroring" gpmc_settingPath="User Configuration/Administrative Templates/Start Menu and Taskbar/Notifications" gpmc_settingDescription="&lt;br/&gt;          This policy setting turns off notification mirroring.&lt;br/&gt;&lt;br/&gt;          If you enable this policy setting, notifications from applications and system will not be mirrored to your other devices.&lt;br/&gt;&lt;br/&gt;          If you disable or do not configure this policy setting, notifications will be mirrored, and can be turned off by the administrator or user.&lt;br/&gt;&lt;br/&gt;          No reboots or service restarts are required for this policy setting to take effect.&lt;br/&gt;      " gpmc_supported="At least Windows Server 2016, Windows 10">Turn off notification mirroring</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not display the Getting Started welcome screen at logon" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="This policy setting hides the welcome screen that is displayed on Windows 2000 Professional each time the user logs on.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the welcome screen is hidden from the user logging on to a computer where this policy is applied.&lt;br/&gt;&lt;br/&gt;Users can still display the welcome screen by selecting it on the Start menu or by typing &amp;quot;&amp;quot;Welcome&amp;quot;&amp;quot; in the Run dialog box.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, the welcome screen is displayed each time a user logs on to the computer.&lt;br/&gt;&lt;br/&gt;This setting applies only to Windows 2000 Professional. It does not affect the &amp;quot;&amp;quot;Configure Your Server on a Windows 2000 Server&amp;quot;&amp;quot; screen on Windows 2000 Server.&lt;br/&gt;&lt;br/&gt;Note: This setting appears in the Computer Configuration and User Configuration folders. If both settings are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.&lt;br/&gt;&lt;br/&gt;Tip: To display the welcome screen, click Start, point to Programs, point to Accessories, point to System Tools, and then click &amp;quot;&amp;quot;Getting Started.&amp;quot;&amp;quot; To suppress the welcome screen without specifying a setting, clear the &amp;quot;&amp;quot;Show this screen at startup&amp;quot;&amp;quot; check box on the welcome screen." gpmc_supported="Windows 2000 only">Do not display the Getting Started welcome screen at logon</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent access to registry editing tools" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="Disables the Windows registry editor Regedit.exe.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting and the user tries to start Regedit.exe, a message appears explaining that a policy setting prevents the action.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting or do not configure it, users can run Regedit.exe normally.&lt;br/&gt;&lt;br/&gt;To prevent users from using other administrative tools, use the &amp;quot;Run only specified Windows applications&amp;quot; policy setting." gpmc_supported="At least Windows 2000">Prevent access to registry editing tools</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Disable regedit from running silently?</td><td>No</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent access to the command prompt" gpmc_settingPath="User Configuration/Administrative Templates/System" gpmc_settingDescription="This policy setting prevents users from running the interactive command prompt, Cmd.exe.  This policy setting also determines whether batch files (.cmd and .bat) can run on the computer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting and the user tries to open a command window, the system displays a message explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting or do not configure it, users can run Cmd.exe and batch files normally.&lt;br/&gt;&lt;br/&gt;Note: Do not prevent the computer from running batch files if the computer uses logon, logoff, startup, or shutdown batch file scripts, or for users that use Remote Desktop Services." gpmc_supported="At least Windows 2000">Prevent access to the command prompt</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Disable the command prompt script processing also?</td><td>No</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Ctrl+Alt+Del Options</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Task Manager" gpmc_settingPath="User Configuration/Administrative Templates/System/Ctrl+Alt+Del Options" gpmc_settingDescription="This policy setting prevents users from starting Task Manager.&lt;br/&gt;&lt;br/&gt;Task Manager (taskmgr.exe) lets users start and stop programs; monitor the performance of their computers; view and monitor all programs running on their computers, including system services; find the executable names of programs; and change the priority of the process in which programs run.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users will not be able to access Task Manager. If users try to start Task Manager, a message appears explaining that a policy prevents the action.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can access Task Manager to  start and stop programs, monitor the performance of their computers, view and monitor all programs running on their computers, including system services, find the executable names of programs, and change the priority of the process in which programs run." gpmc_supported="At least Windows 2000">Remove Task Manager</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">System/Removable Storage Access</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="All Removable Storage classes: Deny all access" gpmc_settingPath="User Configuration/Administrative Templates/System/Removable Storage Access" gpmc_settingDescription="Configure access to all removable storage classes.&lt;br/&gt;&lt;br/&gt;This policy setting takes precedence over any individual removable storage policy settings. To manage individual classes, use the policy settings available for each class.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, no access is allowed to any removable storage class.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, write and read accesses are allowed to all removable storage classes." gpmc_supported="At least Windows Vista">All Removable Storage classes: Deny all access</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="CD and DVD: Deny read access" gpmc_settingPath="User Configuration/Administrative Templates/System/Removable Storage Access" gpmc_settingDescription="This policy setting denies read access to the CD and DVD removable storage class.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, read access is denied to this removable storage class.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, read access is allowed to this removable storage class." gpmc_supported="At least Windows Vista">CD and DVD: Deny read access</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="CD and DVD: Deny write access" gpmc_settingPath="User Configuration/Administrative Templates/System/Removable Storage Access" gpmc_settingDescription="This policy setting denies write access to the CD and DVD removable storage class.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, write access is denied to this removable storage class.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, write access is allowed to this removable storage class." gpmc_supported="At least Windows Vista">CD and DVD: Deny write access</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Attachment Manager</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Default risk level for file attachments" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Attachment Manager" gpmc_settingDescription="This policy setting allows you to manage the default risk level for file types. To fully customize the risk level for file attachments, you may also need to configure the trust logic for file attachments.&lt;br/&gt;&lt;br/&gt;High Risk: If the attachment is in the list of high-risk file types and is from the restricted zone, Windows blocks the user from accessing the file. If the file is from the Internet zone, Windows prompts the user before accessing the file.&lt;br/&gt;&lt;br/&gt;Moderate Risk: If the attachment is in the list of moderate-risk file types and is from the restricted or Internet zone, Windows prompts the user before accessing the file.&lt;br/&gt;&lt;br/&gt;Low Risk: If the attachment is in the list of low-risk file types, Windows will not prompt the user before accessing the file, regardless of the file&amp;#39;s zone information.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, you can specify the default risk level for file types.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Windows sets the default risk level to moderate.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, Windows sets the default risk level to moderate." gpmc_supported="At least Windows XP Professional with SP2">Default risk level for file attachments</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Set the default risk level</td><td>Low Risk</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not preserve zone information in file attachments" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Attachment Manager" gpmc_settingDescription="This policy setting allows you to manage whether Windows marks file attachments with information about their zone of origin (such as restricted, Internet, intranet, local). This requires NTFS in order to function correctly, and will fail without notice on FAT32. By not preserving the zone information, Windows cannot make proper risk assessments.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows does not mark file attachments with their zone information.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Windows marks file attachments with their zone information.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, Windows marks file attachments with their zone information." gpmc_supported="At least Windows XP Professional with SP2">Do not preserve zone information in file attachments</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Inclusion list for low file types" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Attachment Manager" gpmc_settingDescription="This policy setting allows you to configure the list of low-risk file types. If the attachment is in the list of low-risk file types, Windows will not prompt the user before accessing the file, regardless of the file&amp;#39;s zone information. This inclusion list overrides the list of high-risk file types built into Windows and has a lower precedence than the high-risk or medium-risk inclusion lists (where an extension is listed in more than one inclusion list).&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, you can specify file types that pose a low risk.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Windows uses its default trust logic.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, Windows uses its default trust logic." gpmc_supported="At least Windows XP Professional with SP2">Inclusion list for low file types</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Specify low risk extensions (include a leading period, e.g. .bmp;.gif;).</td><td>.lnk</td></tr>
</table></td></tr></table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Cloud Content</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Configure Windows spotlight on lock screen" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Cloud Content" gpmc_settingDescription="This policy setting lets you configure Windows spotlight on the lock screen.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, &amp;quot;Windows spotlight&amp;quot; will be set as the lock screen provider and users will not be able to modify their lock screen. &amp;quot;Windows spotlight&amp;quot; will display daily images from Microsoft on the lock screen.&lt;br/&gt;&lt;br/&gt;Additionally, if you check the &amp;quot;Include content from Enterprise spotlight&amp;quot; checkbox and your organization has setup an Enterprise spotlight content service in Azure, the lock screen will display internal messages and communications configured in that service, when available. If your organization does not have an Enterprise spotlight content service, the checkbox will have no effect.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Windows spotlight will be turned off and users will no longer be able to select it as their lock screen. Users will see the default lock screen image and will be able to select another image, unless you have enabled the &amp;quot;Prevent changing lock screen image&amp;quot; policy.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy, Windows spotlight will be available on the lock screen and will be selected by default, unless you have configured another default lock screen image using the &amp;quot;Force a specific default lock screen and logon image&amp;quot; policy.&lt;br/&gt;&lt;br/&gt;Note: This policy is only available for Enterprise SKUs" gpmc_supported="At least Windows 10">Configure Windows spotlight on lock screen</span></td><td>Disabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not suggest third-party content in Windows spotlight" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Cloud Content" gpmc_settingDescription="If you enable this policy, Windows spotlight features like lock screen spotlight, suggested apps in Start menu or Windows tips will no longer suggest apps and content from third-party software publishers. Users may still see suggestions and tips to make them more productive with Microsoft features and apps.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, Windows spotlight features may suggest apps and content from third-party software publishers in addition to Microsoft apps and content." gpmc_supported="At least Windows 10">Do not suggest third-party content in Windows spotlight</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not use diagnostic data for tailored experiences" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Cloud Content" gpmc_settingDescription="This policy setting lets you prevent Windows from using diagnostic data to provide tailored experiences to the user.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows will not use diagnostic data from this device (this data may include browser, app and feature usage, depending on the &amp;quot;diagnostic data&amp;quot; setting value) to customize content shown on lock screen, Windows tips, Microsoft consumer features and other related features. If these features are enabled, users will still see recommendations, tips and offers, but they may be less relevant.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Microsoft will use diagnostic data to provide personalized recommendations, tips and offers to tailor Windows for the user&amp;#39;s needs, and make it work better for them.&lt;br/&gt;&lt;br/&gt;Note: this setting does not control Cortana tailored experiences, since there are separate policies to configure it." gpmc_supported="At least Windows Server 2016, Windows 10 Version 1703">Do not use diagnostic data for tailored experiences</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off all Windows spotlight features" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Cloud Content" gpmc_settingDescription="This policy setting lets you turn off all Windows Spotlight features at once.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows spotlight on lock screen, Windows tips, Microsoft consumer features and other related features will be turned off. You should enable this policy setting if your goal is to minimize network traffic from target devices.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Windows spotlight features are allowed and may be controlled individually using their corresponding policy settings." gpmc_supported="At least Windows 10">Turn off all Windows spotlight features</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off the Windows Welcome Experience" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Cloud Content" gpmc_settingDescription="This policy setting lets you turn off the Windows Spotlight Windows Welcome experience. This feature helps onboard users to Windows, for instance launching Microsoft Edge with a web page highlighting new features.&lt;br/&gt;&lt;br/&gt;If you enable this policy, the Windows Welcome Experience will no longer display when there are updates and changes to Windows and its apps.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, the Windows Welcome Experience will be launched to help onboard users to Windows telling them about what&amp;#39;s new, changed, and suggested." gpmc_supported="At least Windows Server 2016, Windows 10 Version 1703">Turn off the Windows Welcome Experience</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Windows Spotlight on Action Center" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Cloud Content" gpmc_settingDescription="If you enable this policy, Windows Spotlight notifications will no longer be shown on Action Center.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, Microsoft may display notifications in Action Center that will suggest apps or features to help users be more productive on Windows." gpmc_supported="At least Windows Server 2016, Windows 10 Version 1703">Turn off Windows Spotlight on Action Center</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Windows Spotlight on Settings" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Cloud Content" gpmc_settingDescription="If you enable this policy, Windows Spotlight suggestions will no longer be shown in Settings app.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy, Microsoft may suggest apps or features in Settings app to help users be productive on Windows or their linked phone." gpmc_supported="At least Windows Server 2016, Windows 10 Version 1803">Turn off Windows Spotlight on Settings</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/File Explorer</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to prevent users from accessing Folder Options through the View tab on the ribbon in File Explorer.&lt;br/&gt;&lt;br/&gt;Folder Options allows users to change the way files and folders open, what appears in the navigation pane, and other advanced view settings.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users will receive an error message if they tap or click the Options button or choose the Change folder and search options command, and they will not be able to open Folder Options.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users can open Folder Options from the View tab on the ribbon." gpmc_supported="At least Windows 2000">Do not allow Folder Options to be opened from the Options button on the View tab of the ribbon</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide these specified drives in My Computer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to hide these specified drives in My Computer.&lt;br/&gt;&lt;br/&gt;This policy setting allows you to remove the icons representing selected hard drives from My Computer and File Explorer. Also, the drive letters representing the selected drives do not appear in the standard Open dialog box.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, select a drive or combination of drives in the drop-down list.&lt;br/&gt;&lt;br/&gt;Note: This policy setting removes the drive icons. Users can still gain access to drive contents by using other methods, such as by typing the path to a directory on the drive in the Map Network Drive dialog box, in the Run dialog box, or in a command window.&lt;br/&gt;&lt;br/&gt;Also, this policy setting does not prevent users from using programs to access these drives or their contents. And, it does not prevent users from using the Disk Management snap-in to view and change drive characteristics.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, all drives are displayed, or select the &amp;quot;Do not restrict drives&amp;quot; option in the drop-down list.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Prevent access to drives from My Computer&amp;quot; policy setting." gpmc_supported="At least Windows 2000">Hide these specified drives in My Computer</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Pick one of the following combinations</td><td>Restrict A, B, C and D drives only</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hides the Manage item on the File Explorer context menu" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Removes the Manage item from the File Explorer context menu. This context menu appears when you right-click File Explorer or My Computer.&lt;br/&gt;&lt;br/&gt;The Manage item opens Computer Management (Compmgmt.msc), a console tool that includes many of the primary Windows 2000 administrative tools, such as Event Viewer, Device Manager, and Disk Management. You must be an administrator to use many of the features of these tools.&lt;br/&gt;&lt;br/&gt;This setting does not remove the Computer Management item from the Start menu (Start, Programs, Administrative Tools, Computer Management), nor does it prevent users from using other methods to start Computer Management.&lt;br/&gt;&lt;br/&gt;Tip: To hide all context menus, use the &amp;quot;Remove File Explorer&amp;#39;s default context menu&amp;quot; setting." gpmc_supported="At least Windows 2000">Hides the Manage item on the File Explorer context menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent access to drives from My Computer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Prevents users from using My Computer to gain access to the content of selected drives.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users can browse the directory structure of the selected drives in My Computer or File Explorer, but they cannot open folders and access the contents. Also, they cannot use the Run dialog box or the Map Network Drive dialog box to view the directories on these drives.&lt;br/&gt;&lt;br/&gt;To use this setting, select a drive or combination of drives from the drop-down list. To allow access to all drive directories, disable this setting or select the &amp;quot;Do not restrict drives&amp;quot; option from the drop-down list.&lt;br/&gt;&lt;br/&gt;Note: The icons representing the specified drives still appear in My Computer, but if users double-click the icons, a message appears explaining that a setting prevents the action.&lt;br/&gt;&lt;br/&gt; Also, this setting does not prevent users from using programs to access local and network drives. And, it does not prevent them from using the Disk Management snap-in to view and change drive characteristics.&lt;br/&gt;&lt;br/&gt;Also, see the &amp;quot;Hide these specified drives in My Computer&amp;quot; setting." gpmc_supported="At least Windows 2000">Prevent access to drives from My Computer</span></td><td>Enabled</td><td></td></tr>
<tr><td colspan="3"><table class="subtable_frame" >
<tr><td>Pick one of the following combinations</td><td>Restrict A, B, C and D drives only</td></tr>
</table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove &amp;quot;Map Network Drive&amp;quot; and &amp;quot;Disconnect Network Drive&amp;quot;" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Prevents users from using File Explorer or Network Locations to map or disconnect network drives.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the system removes the Map Network Drive and Disconnect Network Drive commands from the toolbar and Tools menus in File Explorer and Network Locations and from menus that appear when you right-click the File Explorer or Network Locations icons.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from connecting to another computer by typing the name of a shared folder in the Run dialog box.&lt;br/&gt;&lt;br/&gt;Note:&lt;br/&gt;&lt;br/&gt;This setting was documented incorrectly on the Explain tab in Group Policy for Windows 2000. The Explain tab states incorrectly that this setting prevents users from connecting and disconnecting drives.&lt;br/&gt;&lt;br/&gt;Note: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting." gpmc_supported="At least Windows 2000">Remove &quot;Map Network Drive&quot; and &quot;Disconnect Network Drive&quot;</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove CD Burning features" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to remove CD Burning features. File Explorer allows you to create and modify re-writable CDs if you have a CD writer connected to your PC.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, all features in the File Explorer that allow you to use your CD writer are removed.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, users are able to use the File Explorer CD burning features.&lt;br/&gt;&lt;br/&gt;Note: This policy setting does not prevent users from using third-party applications to create or modify CDs using a CD writer." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Remove CD Burning features</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove DFS tab" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to remove the DFS tab from File Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the DFS (Distributed File System) tab is removed from File Explorer and from other programs that use the File Explorer browser, such as My Computer. As a result, users cannot use this tab to view or change the properties of the DFS shares available from their computer.&lt;br/&gt;&lt;br/&gt;This policy setting does not prevent users from using other methods to configure DFS.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, the DFS tab is available." gpmc_supported="At least Windows 2000">Remove DFS tab</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove File Explorer&amp;#39;s default context menu" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Removes shortcut menus from the desktop and File Explorer. Shortcut menus appear when you right-click an item.&lt;br/&gt;&lt;br/&gt;If you enable this setting, menus do not appear when you right-click the desktop or when you right-click the items in File Explorer. This setting does not prevent users from using other methods to issue commands available on the shortcut menus." gpmc_supported="At least Windows 2000">Remove File Explorer&#39;s default context menu</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove File menu from File Explorer" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Removes the File menu from My Computer and File Explorer.&lt;br/&gt;&lt;br/&gt;This setting does not prevent users from using other methods to perform tasks available on the File menu." gpmc_supported="At least Windows 2000">Remove File menu from File Explorer</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Hardware tab" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Removes the Hardware tab.&lt;br/&gt;&lt;br/&gt;This setting removes the Hardware tab from Mouse, Keyboard, and Sounds and Audio Devices in Control Panel. It also removes the Hardware tab from the Properties dialog box for all local drives, including hard drives, floppy disk drives, and CD-ROM drives. As a result, users cannot use the Hardware tab to view or change the device list or device properties, or use the Troubleshoot button to resolve problems with the device." gpmc_supported="At least Windows 2000">Remove Hardware tab</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove Security tab" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Removes the Security tab from File Explorer.&lt;br/&gt;&lt;br/&gt;If you enable this setting, users opening the Properties dialog box for all file system objects, including folders, files, shortcuts, and drives, will not be able to access the Security tab. As a result, users will be able to neither change the security settings nor view a list of all users that have access to the resource in question.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, users will be able to access the security tab." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Remove Security tab</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Remove the Search the Internet &amp;quot;Search again&amp;quot; link" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="If you enable this policy, the &amp;quot;Internet&amp;quot; &amp;quot;Search again&amp;quot; link will not be shown when the user performs a search in the Explorer window.&lt;br/&gt;&lt;br/&gt;If you disable this policy, there will be an &amp;quot;Internet&amp;quot; &amp;quot;Search again&amp;quot; link when the user performs a search in the Explorer window.  This button launches a search in the default browser with the search terms.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy (default), there will be an &amp;quot;Internet&amp;quot; link when the user performs a search in the Explorer window." gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Remove the Search the Internet &quot;Search again&quot; link</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off caching of thumbnail pictures" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="This policy setting allows you to turn off caching of thumbnail pictures.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, thumbnail views are not cached.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, thumbnail views are cached.&lt;br/&gt;&lt;br/&gt;Note: For shared corporate workstations or computers where security is a top concern, you should enable this policy setting to turn off the thumbnail view cache, because the thumbnail cache can be read by everyone." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Turn off caching of thumbnail pictures</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off display of recent search entries in the File Explorer search box" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="&lt;br/&gt;Disables suggesting recent queries for the Search Box and prevents entries into the Search Box from being stored in the registry for future references.&lt;br/&gt;&lt;br/&gt;File Explorer shows suggestion pop-ups as users type into the Search Box.  These suggestions are based on their past entries into the Search Box.&lt;br/&gt;&lt;br/&gt;Note: If you enable this policy, File Explorer will not show suggestion pop-ups as users type into the Search Box, and it will not store Search Box entries into the registry for future references.  If the user types a property, values that match this property will be shown but no data will be saved in the registry or re-shown on subsequent uses of the search box.&lt;br/&gt;      " gpmc_supported="At least Windows Server 2008 R2 or Windows 7">Turn off display of recent search entries in the File Explorer search box</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Windows Key hotkeys" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer" gpmc_settingDescription="Turn off Windows Key hotkeys.&lt;br/&gt;&lt;br/&gt;Keyboards with a Windows key provide users with shortcuts to common shell features. For example, pressing the keyboard sequence Windows+R opens the Run dialog box; pressing Windows+E starts File Explorer. By using this setting, you can disable these Windows Key hotkeys.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Windows Key hotkeys are unavailable.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting, the Windows Key hotkeys are available." gpmc_supported="At least Windows Server 2003">Turn off Windows Key hotkeys</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/File Explorer/Previous Versions</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Hide previous versions list for remote files" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer/Previous Versions" gpmc_settingDescription="This policy setting lets you hide the list of previous versions of files that are on file shares. The previous versions come from the on-disk restore points on the file share.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, users cannot list or restore previous versions of files on file shares.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, users can list and restore previous versions of files on file shares.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, it is disabled by default." gpmc_supported="At least Windows Vista">Hide previous versions list for remote files</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prevent restoring remote previous versions" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/File Explorer/Previous Versions" gpmc_settingDescription="This setting lets you suppress the Restore button in the previous versions property page when the user has selected a previous version of a file on a file share.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Restore button is disabled when the user selects a previous version corresponding to a file on a file share.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the Restore button remains active for a previous version corresponding to a file on a file share. If the user clicks the Restore button, Windows attempts to restore the file from the file share.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, it is disabled by default. The Restore button is active when the previous version is of a file on a file share." gpmc_supported="At least Windows Vista">Prevent restoring remote previous versions</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Microsoft Management Console</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Restrict users to the explicitly permitted list of snap-ins" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console" gpmc_settingDescription="Lets you selectively permit or prohibit the use of Microsoft Management Console (MMC) snap-ins.&lt;br/&gt;&lt;br/&gt;--  If you enable this setting, all snap-ins are prohibited, except those that you explicitly permit. Use this setting if you plan to prohibit use of most snap-ins.&lt;br/&gt;&lt;br/&gt;    To explicitly permit a snap-in, open the Restricted/Permitted snap-ins setting folder and enable the settings representing the snap-in you want to permit. If a snap-in setting in the folder is disabled or not configured, the snap-in is prohibited.&lt;br/&gt;&lt;br/&gt;--  If you disable this setting or do not configure it, all snap-ins are permitted, except those that you explicitly prohibit. Use this setting if you plan to permit use of most snap-ins.&lt;br/&gt;&lt;br/&gt;    To explicitly prohibit a snap-in, open the Restricted/Permitted snap-ins setting folder and then disable the settings representing the snap-ins you want to prohibit. If a snap-in setting in the folder is enabled or not configured, the snap-in is permitted.&lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear.&lt;br/&gt;&lt;br/&gt;Note: If you enable this setting, and you do not enable any settings in the Restricted/Permitted snap-ins folder, users cannot use any MMC snap-ins." gpmc_supported="At least Windows 2000">Restrict users to the explicitly permitted list of snap-ins</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Computer Management" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Computer Management</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Local Users and Groups" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Microsoft Management Console/Restricted/Permitted snap-ins" gpmc_settingDescription="This policy setting permits or prohibits the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the snap-in is permitted and can be added into the Microsoft Management Console or run from the command line as a standalone console. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the snap-in is prohibited and cannot be added into the Microsoft Management Console or run from the command line as a standalone console. An error message is displayed stating that policy is prohibiting the use of this snap-in. &lt;br/&gt;&lt;br/&gt;If this policy setting is not configured, the setting of the &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; setting determines whether this snap-in is permitted or prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is enabled, users cannot use any snap-in except those explicitly permitted. To explicitly permit use of this snap-in, enable this policy setting. If this policy setting is not configured or disabled, this snap-in is prohibited. &lt;br/&gt;&lt;br/&gt;--  If the policy setting &amp;quot;Restrict users to the explicitly permitted list of snap-ins&amp;quot; is disabled or not configured, users can use any snap-in except those explicitly prohibited. To explicitly prohibit use of this snap-in, disable this policy setting. If this policy setting is not configured or enabled, the snap-in is permitted. &lt;br/&gt;&lt;br/&gt;When a snap-in is prohibited, it does not appear in the Add/Remove Snap-in window in MMC. Also, when a user opens a console file that includes a prohibited snap-in, the console file opens, but the prohibited snap-in does not appear." gpmc_supported="At least Windows 2000">Local Users and Groups</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Store</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off the offer to update to the latest version of Windows" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Store" gpmc_settingDescription="Enables or disables the Store offer to update to the latest version of Windows.&lt;br/&gt;&lt;br/&gt;If you enable this setting, the Store application will not offer updates to the latest version of Windows.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this setting the Store application will offer updates to the latest version of Windows." gpmc_supported="At least Windows Server 2012, Windows 8 or Windows RT">Turn off the offer to update to the latest version of Windows</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off the Store application" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Store" gpmc_settingDescription="Denies or allows access to the Store application.&lt;br/&gt;&lt;br/&gt;If you enable this setting, access to the Store application is denied. Access to the Store is required for installing app updates.&lt;br/&gt;&lt;br/&gt;If you disable or don&amp;#39;t configure this setting, access to the Store application is allowed." gpmc_supported="At least Windows Server 2012, Windows 8 or Windows RT">Turn off the Store application</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Copilot</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Turn off Windows Copilot" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Copilot" gpmc_settingDescription="&lt;br/&gt;        This policy setting allows you to turn off Windows Copilot.&lt;br/&gt;&lt;br/&gt;        If you enable this policy setting, users will not be able to use Copilot. The Copilot icon will not appear on the taskbar either.&lt;br/&gt;&lt;br/&gt;        If you disable or do not configure this policy setting, users will be able to use Copilot when it&amp;#39;s available to them.&lt;br/&gt;      " gpmc_supported="">Turn off Windows Copilot</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Windows Components/Windows Messenger</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" >
<tr><th scope="col">Policy</th><th scope="col">Setting</th><th scope="col">Comment</th></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not allow Windows Messenger to be run" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Messenger" gpmc_settingDescription="This policy setting allows you to prevent Windows Messenger from running.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows Messenger does not run.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Windows Messenger can be used.&lt;br/&gt;&lt;br/&gt;Note: If you enable this policy setting, Remote Assistance also cannot use Windows Messenger.&lt;br/&gt;&lt;br/&gt;Note: This policy setting is available under both Computer Configuration and User Configuration. If both are present, the Computer Configuration version of this policy setting takes precedence." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Do not allow Windows Messenger to be run</span></td><td>Enabled</td><td></td></tr>
<tr><td><span class="explainlink" tabindex="0" onkeypress="javascript:showExplainText(this); return false;" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Do not automatically start Windows Messenger initially" gpmc_settingPath="User Configuration/Administrative Templates/Windows Components/Windows Messenger" gpmc_settingDescription="This policy setting prevents Windows Messenger from automatically running at logon. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows Messenger is not loaded automatically when a user logs on.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Windows Messenger will be loaded automatically at logon.&lt;br/&gt;&lt;br/&gt;Note: This policy setting simply prevents Windows Messenger from running initially. If the user invokes and uses Windows Messenger from that point on, Windows Messenger will be loaded.&lt;br/&gt;&lt;br/&gt;The user can also configure this behavior on the Preferences tab on the Tools menu in the Windows Messenger user interface.&lt;br/&gt;&lt;br/&gt;Note: If you do not want users to use Windows Messenger, enable the &amp;quot;Do not allow Windows Messenger to run&amp;quot; policy setting.&lt;br/&gt;&lt;br/&gt;Note: This policy setting is available under both Computer Configuration and User Configuration. If both are present, the Computer Configuration version of this policy setting takes precedence." gpmc_supported="At least Windows Server 2003 operating systems or Windows XP Professional">Do not automatically start Windows Messenger initially</span></td><td>Enabled</td><td></td></tr>
</table>
</div></div></div></div><div class="filler"></div>
<div class="he1h_expanded"><span class="sectionTitle" tabindex="0">Preferences</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1_expanded"><span class="sectionTitle" tabindex="0">Windows Settings</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he2"><span class="sectionTitle" tabindex="0">Drive Maps</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">Drive Map (Drive: O)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">O: (Order: 1)</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Delete</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Letter</td><td>O</td></tr>
<tr><td>Delete all starting at specified drive</td><td>Disabled</td></tr>
<tr><td>Hide/Show all drives</td><td>No change</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Drive Map (Drive: P)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">P: (Order: 2)</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Delete</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Letter</td><td>P</td></tr>
<tr><td>Delete all starting at specified drive</td><td>Disabled</td></tr>
<tr><td>Hide/Show all drives</td><td>No change</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div></div></div><div class="he2"><span class="sectionTitle" tabindex="0">Files</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">File (Target Path: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows System\Run.lnk)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">Run.lnk (Order: 1)</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Delete</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Destination file</td><td>%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows System\Run.lnk</td></tr>
<tr><td>Suppress errors on individual file actions</td><td>Disabled</td></tr>
</table><b>Attributes</b><table class="subtable" ><tr><td>Read-only</td><td>Disabled</td></tr>
<tr><td>Hidden</td><td>Disabled</td></tr>
<tr><td>Archive</td><td>Enabled</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">File (Target Path: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows System\Control Panel.lnk)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">Control Panel.lnk (Order: 2)</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Delete</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Destination file</td><td>%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows System\Control Panel.lnk</td></tr>
<tr><td>Suppress errors on individual file actions</td><td>Disabled</td></tr>
</table><b>Attributes</b><table class="subtable" ><tr><td>Read-only</td><td>Disabled</td></tr>
<tr><td>Hidden</td><td>Disabled</td></tr>
<tr><td>Archive</td><td>Enabled</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">File (Target Path: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows System\Command Prompt.lnk)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">Command Prompt.lnk (Order: 3)</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Delete</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Destination file</td><td>%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows System\Command Prompt.lnk</td></tr>
<tr><td>Suppress errors on individual file actions</td><td>Disabled</td></tr>
</table><b>Attributes</b><table class="subtable" ><tr><td>Read-only</td><td>Disabled</td></tr>
<tr><td>Hidden</td><td>Disabled</td></tr>
<tr><td>Archive</td><td>Enabled</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div></div></div><div class="he2"><span class="sectionTitle" tabindex="0">Folders</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">Folder (Path: %USERPROFILE%\AppData\Local\Microsoft\Windows\WinX\Group2)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">Group2 (Order: 1)</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Attributes</b><table class="subtable" ><tr><td>Path</td><td>%USERPROFILE%\AppData\Local\Microsoft\Windows\WinX\Group2</td></tr>
<tr><td>Read-only</td><td>Disabled</td></tr>
<tr><td>Hidden</td><td>Enabled</td></tr>
<tr><td>Archive</td><td>Enabled</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Folder (Path: %USERPROFILE%\AppData\Local\Microsoft\Windows\WinX\Group3 )</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">Group3  (Order: 2)</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Attributes</b><table class="subtable" ><tr><td>Path</td><td>%USERPROFILE%\AppData\Local\Microsoft\Windows\WinX\Group3 </td></tr>
<tr><td>Read-only</td><td>Disabled</td></tr>
<tr><td>Hidden</td><td>Enabled</td></tr>
<tr><td>Archive</td><td>Enabled</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Folder (Path: %USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">Windows PowerShell (Order: 3)</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Delete</td></tr>
</table>
<b>Attributes</b><table class="subtable" ><tr><td>Path</td><td>%USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell</td></tr>
</table><table class="info" >
<tr><td>Delete this folder (if emptied)</td><td>Enabled</td></tr>
<tr><td>Recursively delete all subfolders (if emptied)</td><td>Enabled</td></tr>
<tr><td>Delete all files in the folder(s)</td><td>Enabled</td></tr>
<tr><td>Allow deletion of read-only files/folders</td><td>Enabled</td></tr>
<tr><td>Ignore errors for files/folders that cannot be deleted</td><td>Enabled</td></tr>
</table>
</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Folder (Path: %USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows System)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4"><span class="sectionTitle" tabindex="0">Windows System (Order: 4)</span><a class="expando" href="#"></a></div>
    <div class="container">
<div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Delete</td></tr>
</table>
<b>Attributes</b><table class="subtable" ><tr><td>Path</td><td>%USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows System</td></tr>
</table><table class="info" >
<tr><td>Delete this folder (if emptied)</td><td>Enabled</td></tr>
<tr><td>Recursively delete all subfolders (if emptied)</td><td>Enabled</td></tr>
<tr><td>Delete all files in the folder(s)</td><td>Enabled</td></tr>
<tr><td>Allow deletion of read-only files/folders</td><td>Enabled</td></tr>
<tr><td>Ignore errors for files/folders that cannot be deleted</td><td>Enabled</td></tr>
</table>
</div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div></div></div><div class="he2"><span class="sectionTitle" tabindex="0">Registry</span><a class="expando" href="#"></a></div>
        <div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">{031E4825-7B94-4dc3-B131-E946B44C8DD5} (Order: 1)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Delete</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{031E4825-7B94-4dc3-B131-E946B44C8DD5}</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">NoRun (Order: 2)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Delete</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer</td></tr>
<tr><td>Value name</td><td>NoRun</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">NoRun (Order: 3)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Replace</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_CURRENT_USER</td></tr>
<tr><td>Key path</td><td>Software\Microsoft\Windows\CurrentVersion\Policies\Explorer</td></tr>
<tr><td>Value name</td><td>NoRun</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x1 (1)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">{26EE0668-A00A-44D7-9371-BEB064C98683} (Order: 4)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Delete</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{26EE0668-A00A-44D7-9371-BEB064C98683}</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0} (Order: 5)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Delete</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_LOCAL_MACHINE</td></tr>
<tr><td>Key path</td><td>SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">{59031a47-3f72-44a7-89c5-5595fe6b30ee} (Order: 6)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Replace</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_CURRENT_USER</td></tr>
<tr><td>Key path</td><td>Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum</td></tr>
<tr><td>Value name</td><td>{59031a47-3f72-44a7-89c5-5595fe6b30ee}</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x1 (1)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">AutoRepeatDelay (Order: 7)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_CURRENT_USER</td></tr>
<tr><td>Key path</td><td>Control Panel\Accessibility\Keyboard Response</td></tr>
<tr><td>Value name</td><td>AutoRepeatDelay</td></tr>
<tr><td>Value type</td><td>REG_SZ</td></tr>
<tr><td>Value data</td><td>0</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">AutoRepeatRate (Order: 8)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_CURRENT_USER</td></tr>
<tr><td>Key path</td><td>Control Panel\Accessibility\Keyboard Response</td></tr>
<tr><td>Value name</td><td>AutoRepeatRate</td></tr>
<tr><td>Value type</td><td>REG_SZ</td></tr>
<tr><td>Value data</td><td>0</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">BounceTime (Order: 9)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_CURRENT_USER</td></tr>
<tr><td>Key path</td><td>Control Panel\Accessibility\Keyboard Response</td></tr>
<tr><td>Value name</td><td>BounceTime</td></tr>
<tr><td>Value type</td><td>REG_SZ</td></tr>
<tr><td>Value data</td><td>0</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">DelayBeforeAcceptance (Order: 10)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_CURRENT_USER</td></tr>
<tr><td>Key path</td><td>Control Panel\Accessibility\Keyboard Response</td></tr>
<tr><td>Value name</td><td>DelayBeforeAcceptance</td></tr>
<tr><td>Value type</td><td>REG_SZ</td></tr>
<tr><td>Value data</td><td>0</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Flags (Order: 11)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_CURRENT_USER</td></tr>
<tr><td>Key path</td><td>Control Panel\Accessibility\Keyboard Response</td></tr>
<tr><td>Value name</td><td>Flags</td></tr>
<tr><td>Value type</td><td>REG_SZ</td></tr>
<tr><td>Value data</td><td>31</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Last BounceKey Setting (Order: 12)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_CURRENT_USER</td></tr>
<tr><td>Key path</td><td>Control Panel\Accessibility\Keyboard Response</td></tr>
<tr><td>Value name</td><td>Last BounceKey Setting</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x1F4 (500)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Last Valid Delay (Order: 13)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_CURRENT_USER</td></tr>
<tr><td>Key path</td><td>Control Panel\Accessibility\Keyboard Response</td></tr>
<tr><td>Value name</td><td>Last Valid Delay</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x0 (0)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Last Valid Repeat (Order: 14)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_CURRENT_USER</td></tr>
<tr><td>Key path</td><td>Control Panel\Accessibility\Keyboard Response</td></tr>
<tr><td>Value name</td><td>Last Valid Repeat</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x0 (0)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Last Valid Wait (Order: 15)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_CURRENT_USER</td></tr>
<tr><td>Key path</td><td>Control Panel\Accessibility\Keyboard Response</td></tr>
<tr><td>Value name</td><td>Last Valid Wait</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x0 (0)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">disablescreenclippings (Order: 16)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_CURRENT_USER</td></tr>
<tr><td>Key path</td><td>software\policies\microsoft\office\16.0\common\insert media\screenshot</td></tr>
<tr><td>Value name</td><td>disablescreenclippings</td></tr>
<tr><td>Value type</td><td>REG_DWORD</td></tr>
<tr><td>Value data</td><td>0x1 (1)</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">TaskbarMn (Order: 17)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" >
<tr><td>Action</td><td>Update</td></tr>
</table>
<b>Properties</b><table class="subtable" ><tr><td>Hive</td><td>HKEY_CURRENT_USER</td></tr>
<tr><td>Key path</td><td>Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced</td></tr>
<tr><td>Value name</td><td>TaskbarMn</td></tr>
<tr><td>Value type</td><td>REG_SZ</td></tr>
<tr><td>Value data</td><td>0</td></tr>
</table></div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Common</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>Options</b><table class="subtable" ><tr><td>Stop processing items on this extension if an error occurs on this item</td><td>No</td></tr>
<tr><td>Run in logged-on user's security context (user policy option)</td><td>No</td></tr>
<tr><td>Remove this item when it is no longer applied</td><td>No</td></tr>
<tr><td>Apply once and do not reapply</td><td>No</td></tr>
</table></div></div></div></div></div></div></div>
</body></html>